Domain > yandhi.earth.sh

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2018-09-24	13.35.78.63 (ClassC)
2018-09-24	13.35.78.70 (ClassC)
2018-09-24	13.35.78.11 (ClassC)
2021-07-01	13.225.66.49 (ClassC)
2021-07-01	13.225.66.77 (ClassC)
2021-07-01	13.225.66.90 (ClassC)
2024-06-25	18.161.6.75 (ClassC)
2025-03-20	18.65.229.95 (ClassC)
2025-06-26	99.84.66.82 (ClassC)
2025-07-21	99.84.66.14 (ClassC)
2025-08-02	99.84.66.52 (ClassC)

HTTP/1.1 200 OKContent-Type: text/htmlContent-Length: 1276Connection: keep-aliveDate: Tue, 25 Jun 2024 20:16:09 GMTLast-Modified: Mon, 24 Sep 2018 06:27:30 GMTETag: 6bd1bcdd5de7d216c76dca9730823cb7Acc

!DOCTYPE html>html langen>!--  Imagine being a Drake stan in 2018.  https://i.imgur.com/ehlgycQ.jpg-->head>  meta charsetUTF-8>  title>Yandhi Sticker/title>  link relstylesheet hrefstyles.css>/head>body>  div>    span classlogo-container>      img classyandhi-logo src./yandhi.png altYANDHI />    /span>  /div>  div>    div classupload-container idupload-container>      div classupload-text>        input typefile namefile idfile classfile-input accept.jpg, .jpeg, .png />        label forfile>select an image/label>      /div>    /div>    div classcanvas-container>      canvas width1200 height1200 idcanvas>/canvas>    /div>    div iddownload classdownload hidden>      a iddownload-link>DOWNLOAD/a>    /div>  /div>/body>script srchttps://cdnjs.cloudflare.com/ajax/libs/fabric.js/2.3.6/fabric.min.js>/script>script srcyandhi.js>/script>script async srchttps://www.googletagmanager.com/gtag/js?idUA-126216229-1>/script>script>  window.dataLayer  window.dataLayer || ;  function gtag() {    dataLayer.push(arguments);  }  gtag(js, new Date());  gtag(config, UA-126216229-1);/script>/html>

Port 443

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > yandhi.earth.sh

Is this malicious?

DNS Resolutions

Port 80

Port 443