Domain > affiliates.activewins.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2024-05-18	63.33.125.149 (ClassC)
2025-05-28	52.49.119.228 (ClassC)

HTTP/1.1 302 FoundDate: Wed, 28 May 2025 17:58:08 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: keep-aliveServer: nginxCache-Control: no-cache, privateLocation: https://affiliates.activewins.comContent-Security-Policy: default-src self ;script-src self unsafe-inline data: *.googleapis.com *.twitter.com *.facebook.net www.googleadservices.com www.gstatic.com www.google.com google.com google.co.uk http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io use.fontawesome.com storage.bannernow.com c.bannerflow.net;style-src self unsafe-inline fonts.googleapis.com www.gstatic.com tagmanager.google.com maxcdn.bootstrapcdn.com cdn-images.mailchimp.com use.fontawesome.com fonts.bunny.net;img-src self * data:;font-src self data: fonts.googleapis.com fonts.gstatic.com fonts.bunny.net use.fontawesome.com;connect-src self fonts.googleapis.com insights.hotjar.com wss://*.hotjar.com http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io;frame-src self www.google.com vars.hotjar.com http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io storage.bannernow.com c.bannerflow.net;worker-src self self blob: unsafe-inline;

!DOCTYPE html>html>    head>        meta charsetUTF-8 />        meta http-equivrefresh content0;urlhttps://affiliates.activewins.com />        title>Redirecting to https://affiliates.activewins.com/title>    /head>    body>        Redirecting to a hrefhttps://affiliates.activewins.com>https://affiliates.activewins.com/a>.    /body>/html>

Port 443

HTTP/1.1 302 FoundDate: Wed, 28 May 2025 17:58:09 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: keep-aliveServer: nginxCache-Control: no-cache, privateLocation: account/loginContent-Security-Policy: default-src self ;script-src self unsafe-inline data: *.googleapis.com *.twitter.com *.facebook.net www.googleadservices.com www.gstatic.com www.google.com google.com google.co.uk http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io use.fontawesome.com storage.bannernow.com c.bannerflow.net;style-src self unsafe-inline fonts.googleapis.com www.gstatic.com tagmanager.google.com maxcdn.bootstrapcdn.com cdn-images.mailchimp.com use.fontawesome.com fonts.bunny.net;img-src self * data:;font-src self data: fonts.googleapis.com fonts.gstatic.com fonts.bunny.net use.fontawesome.com;connect-src self fonts.googleapis.com insights.hotjar.com wss://*.hotjar.com http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io;frame-src self www.google.com vars.hotjar.com http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io storage.bannernow.com c.bannerflow.net;worker-src self self blob: unsafe-inline;

!DOCTYPE html>html>    head>        meta charsetUTF-8 />        meta http-equivrefresh content0;urlaccount/login />        title>Redirecting to account/login/title>    /head>    body>        Redirecting to a hrefaccount/login>account/login/a>.    /body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > affiliates.activewins.com

Is this malicious?

DNS Resolutions

Port 80

Port 443