Domain > 111fo.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2022-12-10	18.191.84.27 (ClassC)
2023-11-07	3.20.207.150 (ClassC)
2023-11-24	52.14.33.179 (ClassC)
2023-12-09	3.19.129.123 (ClassC)
2024-03-13	18.119.23.171 (ClassC)
2024-08-07	3.18.97.198 (ClassC)
2024-09-21	18.217.42.113 (ClassC)
2024-10-16	3.143.81.181 (ClassC)
2026-01-30	164.152.28.181 (ClassC)

HTTP/1.1 200 OKServer: nginx/1.27.4Date: Thu, 06 Nov 2025 06:51:01 GMTContent-Type: text/htmlContent-Length: 2470Last-Modified: Wed, 26 Mar 2025 16:59:49 GMTConnection: keep-aliveETag: 67e43285-9a6Acc

!DOCTYPE html>html langen>head>    meta charsetUTF-8>    meta nameviewport contentwidthdevice-width, initial-scale1.0>    title>Redirecting.../title>    script typetext/javascript>        // Function to extract SLD and TLD        function getSLDandTLD(hostname) {            // Using tldextract-like logic to handle second-level TLDs            const knownSecondLevelTLDs                  co.uk, it.com, 4u.com, aaa.pro, aca.pro, acct.pro, ae.org, avocat.pro,                bar.pro, biz.pr, br.com, cn.com, co.ag, co.com, co.in, co.lc,                co.nl, co.no, com.ag, com.de, com.lc, com.mx, com.pr,                com.sc, com.se, com.vc, cpa.pro, de.com, eng.pro, eu.com, gb.net,                gr.com, hu.net,in.net,info.pr,isla.pr,it.com,jp.net,jpn.com,                jur.pro,l.lc,law.pro,ltd.uk,me.uk,med.pro,mex.com,name.pr,                net.ag,net.in,net.lc,net.pr,net.sc,net.uk,nom.ag,org.ag,org.in,                org.lc,org.pr,org.sc,org.uk,org.vc,p.lc,plc.uk,pro.pr,radio.am,                radio.fm,recht.pro,ru.com,sa.com,se.net,uk.com,uk.net,us.com,us.org,za.com            ;            const parts  hostname.split(.).reverse();                        // Check if it matches any known second-level TLDs            let sld  parts1;            let tld  parts0;            const possibleSecondLevel  `${parts1}.${parts0}`;            if (knownSecondLevelTLDs.includes(possibleSecondLevel)) {                sld  parts2;                tld  possibleSecondLevel;            } else {                sld  parts1;                tld  parts0;            }            return `${sld}.${tld}`;        }        window.onload  function() {            const hostname  window.location.hostname; // Get the domain part of the URL            const sldTld  getSLDandTLD(hostname); // Extract the SLD and TLD                        // Construct the redirect URL            const redirectUrl  `https://v2.sav.com/domains/buy/${sldTld}`;                        // Redirect to the new URL            window.location.href  redirectUrl;        };    /

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > 111fo.com

Is this malicious?

DNS Resolutions

Port 80