Domain > nytpost.com

This indicator is referenced in AlienVault OTX pulse ""

Reports

https://twitter.com/ragghianti01/status/7884226609...

https://virustotal.com/en/file/c6828c8bcce6786b394...

https://www.snort.org/advisories/

Whois

Property	Value
Email	nytpost.com@privacy.above.com
NameServer	NS4.ABOVE.COM
Created	2008-02-17 00:00:00
Changed	2016-02-01 00:00:00
Expires	2017-02-17 00:00:00
Registrar	ABOVE.COM PTY LTD.

DNS Resolutions

Date	IP Address
2014-10-02	69.43.161.160 (ClassC)
2025-01-28	103.224.212.248 (ClassC)
2025-08-09	103.224.182.247 (ClassC)

HTTP/1.1 200 OKdate: Fri, 08 Mar 2024 03:36:34 GMTserver: Apacheset-cookie: __tad1709868994.4032156; expiresMon, 06-Mar-2034 03:36:34 GMT; Max-Age315360000vary: Accept-Encodingcontent-length: 1029cont

html>head>title>nytpost.com/title>script typetext/javascript src/js/fingerprint/iife.min.js>/script>script typetext/javascript>var redirect_link  http://nytpost.com/?;// Set a timeout of 300 microseconds to execute a redirect if the fingerprint promise fails for some reasonfunction fallbackRedirect() {	window.location.replace(redirect_link+fp-7);}try {	const rdrTimeout  setTimeout(fallbackRedirect, 300);	var fpPromise  FingerprintJS.load({monitoring: false});	fpPromise		.then(fp > fp.get())		.then(			result > { 				var fprt  fp+result.visitorId;				clearTimeout(rdrTimeout);				window.location.replace(redirect_link+fprt);		});} catch(err) {	fallbackRedirect();}/script>style> body { background:#101c36 } /style>/head>body bgcolor#ffffff text#000000>div styledisplay: none;>a hrefhttp://nytpost.com/?fp-3>Click here to enter/a>/div>noscript>meta http-equivrefresh content0; URLhttp://nytpost.com/?fp-5>/noscript>/body>/html>

Port 443

HTTP/1.1 200 OKdate: Fri, 08 Mar 2024 03:36:34 GMTserver: Apacheset-cookie: __tad1709868994.7934534; expiresMon, 06-Mar-2034 03:36:34 GMT; Max-Age315360000vary: Accept-Encodingcontent-length: 1029cont

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > nytpost.com

Is this malicious?

Reports

Whois

DNS Resolutions

Port 80

Port 443