Domain > 0.0.0.0ws008.hemnes.win

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2021-10-03	45.33.20.235 (ClassC)
2021-10-03	72.14.178.174 (ClassC)
2021-10-03	198.58.118.167 (ClassC)
2021-10-03	45.33.23.183 (ClassC)
2021-10-03	45.33.30.197 (ClassC)
2021-10-03	45.33.18.44 (ClassC)
2021-10-03	45.56.79.23 (ClassC)
2021-10-03	173.255.194.134 (ClassC)
2021-10-03	96.126.123.244 (ClassC)
2021-10-03	45.33.2.79 (ClassC)
2021-10-03	45.79.19.196 (ClassC)
2021-12-25	72.14.185.43 (ClassC)
2023-12-20	195.201.124.255 (ClassC)
2024-06-25	95.216.161.60 (ClassC)
2024-06-28	159.69.42.212 (ClassC)
2024-08-19	168.119.245.137 (ClassC)
2025-02-24	23.88.53.29 (ClassC)
2025-04-22	159.69.83.207 (ClassC)

Port 80

HTTP/1.1 200 OKserver: openresty/1.13.6.1date: Sat, 25 Dec 2021 13:18:44 GMTcontent-type: text/html; charsetutf-8content-length: 1648vary: Accept-Languagecontent-language: enconnection: close

!DOCTYPE html>html>head>meta http-equivx-ua-compatible contentIEedge>title>/title>script typetext/javascript>(function() {var p  .eJyrViotylSyUtJX0lFKLEovBjKBrKLUtNSi1CIIJyO_uCQ-LzE3Fcg10APD8mIDAwu9jNTcvNRivfLMPJDm5OTUghKgEi19LaVaAE8OGTE:1n16we:8imvDUgiHjV8HeEScBwITEeqE3g, as  http://0.0.0.0ws008.hemnes.win/mtm/async/;function d(n){window.location.href  http://www42.hemnes.win/+n;}function ar(r) {if (r.slice(0, 1) ! .) {try {window.location.assign(r);} catch (err) {}try {var mar  document.createElement(meta);mar.httpEquiv  refresh;mar.content  0;url+r;document.getElementsByTagName(head)0.appendChild(mar);} catch (err) {}} else {var s  document.createElement(span);s.idecode;s.appendChild(document.createTextNode(r.slice(1)));document.getElementsByTagName(body)0.appendChild(s);}}if (fetch in window) {try {fetch(as + p + /1, {credentials: include}).then(function(r) {if (!r.ok) {throw Error(50x);}return r.text();}).then(function(r) {ar(r);});} catch (err) {d(2);}} else {try {var x  new XMLHttpRequest();x.open(GET, as + p + /2, false);x.onerror  function() {d(3);};x.onload  function() {if (x.status  200) {ar(x.responseText);} else {d(4);}};x.onreadystatechange  function(r) {if (x.readyState  4){if (x.status  200) {ar(x.responseText);} else {d(6);}}};x.send();} catch (err) {d(5);}}})();/script>meta http-equivrefresh content5;urlhttp://0.0.0.0ws008.hemnes.win/mtm/direct/.eJyrViotylSyUtJX0lFKLEovBjKBrKLUtNSi1CIIJyO_uCQ-LzE3Fcg10APD8mIDAwu9jNTcvNRivfLMPJDm5OTUghKgEi19LaVaAE8OGTE:1n16we:8imvDUgiHjV8HeEScBwITEeqE3g/1 />/head>body>/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > 0.0.0.0ws008.hemnes.win

Is this malicious?

DNS Resolutions

Port 80