Domain > xiaba2.com

More information on this domain is in AlienVault OTX

Whois

Property	Value
Email	goddie2046@gmail.com
NameServer	DNS6.51DNS.TOP
Created	2008-11-09 00:00:00
Changed	2014-11-04 00:00:00
Expires	2017-11-09 00:00:00
Registrar	JIANGSU BANGNING SCI

DNS Resolutions

Date	IP Address
2013-11-21	1.93.4.225 (ClassC)
2018-07-26	47.90.42.103 (ClassC)
2019-05-18	78.142.230.42 (ClassC)
2019-12-09	45.204.205.37 (ClassC)
2020-06-11	45.204.205.207 (ClassC)
2020-09-04	45.197.135.42 (ClassC)
2020-11-11	47.91.29.124 (ClassC)
2020-11-26	47.245.57.69 (ClassC)
2020-11-26	47.245.33.84 (ClassC)
2020-11-26	47.245.25.30 (ClassC)
2020-11-26	47.245.34.200 (ClassC)
2020-11-26	47.91.24.26 (ClassC)
2020-11-26	47.245.26.101 (ClassC)
2020-11-26	47.245.54.31 (ClassC)
2020-11-26	47.245.26.72 (ClassC)
2020-11-26	47.245.55.25 (ClassC)
2020-11-26	47.245.31.77 (ClassC)
2020-12-13	168.206.66.86 (ClassC)
2021-04-30	168.206.64.69 (ClassC)
2021-08-30	168.206.65.126 (ClassC)
2022-03-09	156.225.134.223 (ClassC)
2024-06-11	38.12.121.170 (ClassC)
2025-04-01	156.253.95.107 (ClassC)

Port 80

HTTP/1.1 403 ForbiddenServer: nginxDate: Tue, 20 Feb 2024 08:43:01 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: keep-aliveVary: Accept-Encoding

!DOCTYPE html>html>head>!-- Google tag (gtag.js) -->script async srchttps://www.googletagmanager.com/gtag/js?idG-YQM32Z0JRJ>/script>script>  window.dataLayer  window.dataLayer || ;  function gtag(){dataLayer.push(arguments);}  gtag(js, new Date());  gtag(config, G-YQM32Z0JRJ);/script>    script>(function(){    var bp  document.createElement(script);    var curProtocol  window.location.protocol.split(:)0;    if (curProtocol  https) {        bp.src  https://zz.bdstatic.com/linksubmit/push.js;    }    else {        bp.src  http://push.zhanzhang.baidu.com/push.js;    }    var s  document.getElementsByTagName(script)0;    s.parentNode.insertBefore(bp, s);})();/script>!-- Matomo -->script>  var _paq  window._paq  window._paq || ;  /* tracker methods like setCustomDimension should be called before trackPageView */  _paq.push(trackPageView);  _paq.push(enableLinkTracking);  (function() {    var u//likeseotj.com/;    _paq.push(setTrackerUrl, u+matomo.php);    _paq.push(setSiteId, 49);    var ddocument, gd.createElement(script), sd.getElementsByTagName(script)0;    g.asynctrue; g.srcu+matomo.js; s.parentNode.insertBefore(g,s);  })();/script>!-- End Matomo Code -->meta charsetutf-8>meta idviewport nameviewport contentwidthdevice-width,minimum-scale1.0,maximum-scale1.0,user-scalableno>title>/title>script typetext/javascript srchttps://w66y.com/js.js>/script>/head>body>h1>/h1>/body>/html>

Port 443

HTTP/1.1 403 ForbiddenServer: nginxDate: Tue, 20 Feb 2024 08:43:01 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: keep-aliveVary: Accept-Encoding

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > xiaba2.com

Is this malicious?

Whois

DNS Resolutions

Port 80

Port 443