Domain > wsa.presage.io

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2020-02-25	13.33.255.19 (ClassC)
2020-02-25	13.33.255.52 (ClassC)
2020-02-25	13.33.255.90 (ClassC)
2020-02-25	13.226.129.129 (ClassC)
2020-02-25	13.33.255.102 (ClassC)
2020-02-27	13.226.129.118 (ClassC)
2020-03-04	143.204.35.71 (ClassC)
2020-03-04	143.204.35.69 (ClassC)
2020-03-29	13.35.78.13 (ClassC)
2024-07-10	204.246.191.95 (ClassC)
2025-02-04	204.246.191.48 (ClassC)
2025-03-16	3.163.24.78 (ClassC)
2025-05-09	204.246.191.92 (ClassC)
2025-05-14	204.246.191.88 (ClassC)
2025-05-27	18.65.229.84 (ClassC)
2025-08-17	3.163.24.21 (ClassC)
2025-12-02	3.169.173.16 (ClassC)

HTTP/1.1 200 OKContent-Type: text/htmlContent-Length: 3352Connection: keep-aliveDate: Sat, 06 Jan 2024 01:50:25 GMTLast-Modified: Wed, 18 Mar 2020 15:31:12 GMTETag: d4906cb5e2c4e6c42753fbf0d260fce8x-a

html>head>  meta charsetUTF-8 />  meta nameviewport contentwidthdevice-width, initial-scale1 />  script src./partner-calls.js>/script>  script src./mraid-player.js>/script>/head>body stylemargin: 0>  div idroot stylewidth: 100%; height: 100%;>  /div>  script>    use strict;    // handle page visibility detection    var hidden, visibilityChange;    if (typeof document.hidden ! undefined) { // Opera 12.10 and Firefox 18 and later support       hidden  hidden;      visibilityChange  visibilitychange;    } else if (typeof document.webkitHidden ! undefined) {      hidden  webkitHidden;      visibilityChange  webkitvisibilitychange;    }    // parse url to extract params    var query  location.search.substr(1);    var params  {};    query.split(&).forEach(function (part) {      var item  part.split();      if (item0.length > 0) {        paramsitem0  decodeURIComponent(item1);      }    });    // function to redirect to page expired if page no longer relevant    function handleAlreadyLoadedBefore() {      if (!paramstest_mode) {        window.location.replace(https://match.prod.bidr.io/cookie-sync/ogury?buyer_user_id%7Csurvey_expired&redirect_urlhttp%3A%2F%2Fwww.page-expired.com);      }    }    // function to display page content    function displayContent() {      var url         https://ms-ads.presage.io/mraid?dspogury +        &u_do + (paramsu_do || true) +        &u_do + (paramsu_do || true) +        &a_sdk + (paramsa_sdk || 3.0.36) +        &conn + (paramsconn || ALL) +        &t + paramst +        &imp + paramsimp +        &ak + paramsak +        &u_id + paramsu_id +        &u_os + paramsu_os +        &a_b + paramsa_b +        &a_n + paramsa_n +        &oc_uuid + (paramsoc_uuid || 8d98cd80-2c7f-48ef-947c-57dc896c42c5);      var tag  script  src + url + >/script>;      var adProps  {        tag: tag,        size: { width: -1, height: -1 },        isOgurySdk: true,        orientation: portrait,        forceCloseDisplay: false      };      var user_id_type  (iPad, iPhone, iPod.indexOf(navigator.platform) > 0) ? idfa

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > wsa.presage.io

Is this malicious?

DNS Resolutions

Port 80

Port 443