Domain > writetothem.webxcodify.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2024-07-29	89.117.139.130 (ClassC)
2025-12-07	46.202.197.107 (ClassC)

HTTP/1.1 301 Moved PermanentlyConnection: Keep-AliveKeep-Alive: timeout5, max100Content-Type: text/htmlContent-Length: 795Date: Sun, 07 Dec 2025 20:00:16 GMTServer: LiteSpeedLocation: https://writetothem.webxcodify.com/platform: hostingerpanel: hpanelContent-Security-Policy: upgrade-insecure-requests

!DOCTYPE html>html styleheight:100%>head>meta nameviewport contentwidthdevice-width, initial-scale1, shrink-to-fitno />title> 301 Moved Permanently/title>style>@media (prefers-color-scheme:dark){body{background-color:#000!important}}/style>/head>body stylecolor: #444; margin:0;font: normal 14px/20px Arial, Helvetica, sans-serif; height:100%; background-color: #fff;>div styleheight:auto; min-height:100%; >     div styletext-align: center; width:800px; margin-left: -400px; position:absolute; top: 30%; left:50%;>        h1 stylemargin:0; font-size:150px; line-height:150px; font-weight:bold;>301/h1>h2 stylemargin-top:20px;font-size: 30px;>Moved Permanently/h2>p>The document has been permanently moved./p>/div>/div>/body>/html>

Port 443

HTTP/1.1 200 OKConnection: Keep-AliveKeep-Alive: timeout5, max100X-Powered-By: PHP/8.2.27Content-Type: text/html; charsetUTF-8Content-Length: 2384Date: Sun, 07 Dec 2025 20:00:16 GMTServer: LiteSpeedplatform: hostingerpanel: hpanelContent-Security-Policy: upgrade-insecure-requests

!DOCTYPE html>html langen>head>  div classhero-image>  meta charsetUTF-8>  div classhero-text>  title>Home/title>  h1>Write to Them Netherlands/h1>  p>Write to your local or national politician/p>    /h1>    /div>  link relstylesheet hrefcss/main.css>    script srchttps://code.jquery.com/jquery-1.12.4.js integritysha256-Qw82+bXyGq6MydymqBxNPYTaUXXq7c8v3CwiYwLLNXU crossoriginanonymous>/script>        /div>/head>!--div classprogress-bar>-->!--  ol>-->!--   li classprogress--active>span classbar active>/span>span>Enter Postal Code/span>/li>-->!--    li classprogress--unvisited>span classbar>/span>span>Choose Representative/span>/li>-->!--   li classprogress--unvisited>span classbar>/span>span>Write Message/span>/li>-->!--   li classprogress--unvisited>span classbar>/span>span>Send Message/span>/li>-->!--  /ol>-->!--/div>-->body>  div classs003>      form actionpoliticians.php methodPOST >         p>Enter your Netherlands Postal Code/p>        div classinner-form>          div classinput-field second-wrap>             input idsearch namepostalcode typetext placeholderEnter Postal Code maxlength7  />          /div>          div classinput-field third-wrap>            button classbtn-search typebutton submit valuesubmit namesubmit>              svg classsvg-inline--fa fa-search fa-w-16 aria-hiddentrue data-prefixfas data-iconsearch roleimg xmlnshttp://www.w3.org/2000/svg viewBox0 0 512 512>                path fillcurrentColor dM505 442.7L405.3 343c-4.5-4.5-10.6-7-17-7H372c27.6-35.3 44-79.7 44-128C416 93.1 322.9 0 208 0S0 93.1 0 208s93.1 208 208 208c48.3 0 92.7-16.4 128-44v16.3c0 6.4 2.5 12.5 7 17l99.7 99.7c9.4 9.4 24.6 9.4 33.9 0l28.3-28.3c9.4-9.4 9.4-24.6.1-34zM208 336c-70.7 0-128-57.2-128-128 0-70.7 57.2-128 128-128 70.7 0 128 57.2 128 128 0 70.7-57.2 128-128 128z>/path>              /svg>            /button>          /div>        /div>      /form>    /div>/body>/html>script>      $(#search).keyup(function() {  var foo  $(this).val().split( ).join(); // remove hyphens  if (foo.length > 0) {    foo  foo.match(new RegExp(.{1,4}, g)).join( );  }  $(this).val(foo);});/script>

Subdomains

Date	Domain	IP
automobile.webxcodify.com	2025-12-07	46.202.197.107
writetothem.webxcodify.com	2025-12-07	46.202.197.107
ehr.webxcodify.com	2025-12-07	46.202.197.107

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > writetothem.webxcodify.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains