Domain > wallet.heyblu.ro

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2024-11-15	52.58.171.26 (ClassC)
2025-01-18	35.157.217.129 (ClassC)
2025-01-31	3.121.47.116 (ClassC)
2025-05-09	3.69.143.36 (ClassC)
2025-11-10	18.196.195.227 (ClassC)
2026-02-06	52.28.176.184 (ClassC)
2026-02-28	18.197.233.142 (ClassC)

HTTP/1.1 405 Not AllowedServer: awselb/2.0Date: Sat, 18 Jan 2025 01:37:34 GMTContent-Length: 2113Connection: keep-alivex-amzn-waf-action: captchaCache-Control: no-store, max-age0Content-Type: text/htm

!DOCTYPE html>html langen>head>    meta charsetutf-8>    meta nameviewport contentwidthdevice-width, initial-scale1>    title>Human Verification/title>    style>        body {            font-family: Arial;        }    /style>    script typetext/javascript>    window.awsWafCookieDomainList  ;    window.gokuProps  {key:AQIDAHjcYu/GjX+QlghicBgQ/7bFaQZ+m5FKCMDnO+vTbNg96AETtPJgGu+NJPWO/nbYqM9uAAAAfjB8BgkqhkiG9w0BBwagbzBtAgEAMGgGCSqGSIb3DQEHATAeBglghkgBZQMEAS4wEQQM/qxnQbTTpFm9J0LtAgEQgDsmCZ+0PvJJxpq4kbVLSTJteQSL68Et9IBNFOdNmCMI3zPoWwSy1d/Xe6PUdhccujJOXi1UwZ/z2776bQ,          iv:CgAEDxo6owAAAEvM,          context:uomQZtSBpbSr5YKxN8Fn2270c1wfc1ymcX6Bu0+Z1EuJYLN2aFYSIIqssgnvcNfCaWmODXxpfk8ZgJgAZl+FaTU0Y8+x2aYR+lCvWcn+dgQT14liq4PW9l3/aDEATZBtfAlGUzH2HY7a1I1hPgATbhJF9ZDcd/HwDrx+qn6eohcbDDMrfPLWpWFn8a8g6d+4W7ZMnHU0Cakq/+8uA4gYy35FBlKFiVw7z0wjATYpbLC1/PVS3wJz5DExhLEcWHBji82wZcCDhT/jkBrQjaWt/KCXn6LDEMOQZnFzJHsz1Un7jynHzG9sHGfWxwU3ieeyK6zyyYWwlWHRpk+JGASgK81BgfnOyzrhEHvLr/gkGk+jc7YGSmE9QMMTekJv};    /script>    script srchttps://b6166099891d.878528df.eu-central-1.token.awswaf.com/b6166099891d/ffe50e773a67/e45eb002eade/challenge.js>/script>    script srchttps://b6166099891d.878528df.eu-central-1.captcha.awswaf.com/b6166099891d/ffe50e773a67/e45eb002eade/captcha.js>/script>/head>body>    div idcaptcha-container>/div>    script typetext/javascript>        AwsWafIntegration.saveReferrer();        window.addEventListener(load, function() {          const container  document.querySelector(#captcha-container);          CaptchaScript.renderCaptcha(container, async (voucher) > {              await ChallengeScript.submitCaptcha(voucher);              window.location.reload(true);          }      );    });    /script>    noscript>        h1>JavaScript is disabled/h1>        In order to continue, you need to verify that youre not a robot by solving a CAPTCHA puzzle.         The CAPTCHA puzzle requires JavaScript. Enable JavaScript and then reload the page.    /noscript>/body>/html>

Port 443

HTTP/1.1 405 Not AllowedServer: awselb/2.0Date: Sat, 18 Jan 2025 01:37:35 GMTContent-Length: 2113Connection: keep-alivex-amzn-waf-action: captchaCache-Control: no-store, max-age0Content-Type: text/htm

!DOCTYPE html>html langen>head>    meta charsetutf-8>    meta nameviewport contentwidthdevice-width, initial-scale1>    title>Human Verification/title>    style>        body {            font-family: Arial;        }    /style>    script typetext/javascript>    window.awsWafCookieDomainList  ;    window.gokuProps  {key:AQIDAHjcYu/GjX+QlghicBgQ/7bFaQZ+m5FKCMDnO+vTbNg96AETtPJgGu+NJPWO/nbYqM9uAAAAfjB8BgkqhkiG9w0BBwagbzBtAgEAMGgGCSqGSIb3DQEHATAeBglghkgBZQMEAS4wEQQM/qxnQbTTpFm9J0LtAgEQgDsmCZ+0PvJJxpq4kbVLSTJteQSL68Et9IBNFOdNmCMI3zPoWwSy1d/Xe6PUdhccujJOXi1UwZ/z2776bQ,          iv:CgAFJxs3lQAAA2Le,          context:VanthE6B0UkiYpxwAJJ0+Vy046U0fl/kSQqsCtMLYVC2qhLGRB4hL0x6oKJeIIQxXhistCcbOjjS1ktKmXDB4gaPiHY/p+bMbSnVfN7KuznMqer0tes4zUH10JEUd8iy43yHXKHocAq/Iv16hWsYwYKLst2m4JonJvuGDA8WpeZIYF704bDKmDv5BiBSKcfjoQmVpQ7z9QlV5BuVo5qQrWbxVEoGP5IkkgY8G25LADzZ6TvLOWJ4JeSZ1uBbCZr4DZQJs+X+aUghHdHcYjDmRxVT7K2YhlIUjgjPTXrI0Yd+QY/neyat7Is+YJNTgTZC3SDwAbg9zyPdCJ/bfBUNxkkyAmpFa1uUuFlbRTUgbNq6etuEV7UvQZpOtz9S};    /script>    script srchttps://b6166099891d.878528df.eu-central-1.token.awswaf.com/b6166099891d/ffe50e773a67/e45eb002eade/challenge.js>/script>    script srchttps://b6166099891d.878528df.eu-central-1.captcha.awswaf.com/b6166099891d/ffe50e773a67/e45eb002eade/captcha.js>/script>/head>body>    div idcaptcha-container>/div>    script typetext/javascript>        AwsWafIntegration.saveReferrer();        window.addEventListener(load, function() {          const container  document.querySelector(#captcha-container);          CaptchaScript.renderCaptcha(container, async (voucher) > {              await ChallengeScript.submitCaptcha(voucher);              window.location.reload(true);          }      );    });    /script>    noscript>        h1>JavaScript is disabled/h1>        In order to continue, you need to verify that youre not a robot by solving a CAPTCHA puzzle.         The CAPTCHA puzzle requires JavaScript. Enable JavaScript and then reload the page.    /noscript>/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > wallet.heyblu.ro

Is this malicious?

DNS Resolutions

Port 80

Port 443