Domain > api.dev-sky.heyblu.ro

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2024-11-24	52.28.241.83 (ClassC)
2025-06-02	35.158.165.34 (ClassC)
2025-08-14	3.76.243.117 (ClassC)
2025-08-27	3.123.108.148 (ClassC)
2025-09-06	52.58.252.108 (ClassC)
2025-10-04	18.195.129.46 (ClassC)
2025-11-15	3.127.126.53 (ClassC)
2026-02-20	63.181.152.123 (ClassC)

HTTP/1.1 405 Not AllowedServer: awselb/2.0Date: Sun, 24 Nov 2024 14:42:34 GMTContent-Length: 2105Connection: keep-alivex-amzn-waf-action: captchaCache-Control: no-store, max-age0Content-Type: text/htm

!DOCTYPE html>html langen>head>    meta charsetutf-8>    meta nameviewport contentwidthdevice-width, initial-scale1>    title>Human Verification/title>    style>        body {            font-family: Arial;        }    /style>    script typetext/javascript>    window.awsWafCookieDomainList  ;    window.gokuProps  {key:AQIDAHjcYu/GjX+QlghicBgQ/7bFaQZ+m5FKCMDnO+vTbNg96AGjRFjY3Gj/ykC2xUCXRON6AAAAfjB8BgkqhkiG9w0BBwagbzBtAgEAMGgGCSqGSIb3DQEHATAeBglghkgBZQMEAS4wEQQMXNLMcPurlnqmOXtEAgEQgDsXuIaumBTbB/SU86iV/hqk968EZeD398q53TjIT03ZiRCKMMu8MrcywZMfeuUckyts20WV7WCp+SO9iw,          iv:CgAEVxr2VwAAAPU8,          context:ITaphTEP4C7nuRUqhSCzHFWlYcZyloI8PjU7P3Zcw8jOFErroJhb8NFTGNq2YsYwSv6Xx+7b1a7tWa0SZKcKrz64LLvzRQt3FPkK7LoCt1SJ7uqNnzwtH8pzKhbL5vDY07pY2iFiOZy/cqmpilMj/xr23NYyLAjLHuVjicLpZ6pITVOnGddvP60hayAC2cpl//0Z+u0s/KyhGPmHHJeJ5HkJpnQF41M4NaNFry1Ds10WUO84DX6WH31XfmLShV/Lr1mdSAECcquPV3uJRWs72FQtXnRL/il/wXl+JYDRHSpo8DKWoVzx73CEFoI4BOQ2sDf0xxeW3L+LLhyfD4jPwRxCoZqLXu3kNQrqnyvnkb5h3nn+ug};    /script>    script srchttps://444e03bc05c2.d0c7a26b.eu-central-1.token.awswaf.com/444e03bc05c2/0d2c6a407ebd/04941442b1b2/challenge.js>/script>    script srchttps://444e03bc05c2.d0c7a26b.eu-central-1.captcha.awswaf.com/444e03bc05c2/0d2c6a407ebd/04941442b1b2/captcha.js>/script>/head>body>    div idcaptcha-container>/div>    script typetext/javascript>        AwsWafIntegration.saveReferrer();        window.addEventListener(load, function() {          const container  document.querySelector(#captcha-container);          CaptchaScript.renderCaptcha(container, async (voucher) > {              await ChallengeScript.submitCaptcha(voucher);              window.location.reload(true);          }      );    });    /script>    noscript>        h1>JavaScript is disabled/h1>        In order to continue, you need to verify that youre not a robot by solving a CAPTCHA puzzle.         The CAPTCHA puzzle requires JavaScript. Enable JavaScript and then reload the page.    /noscript>/body>/html>

Port 443

HTTP/1.1 405 Not AllowedServer: awselb/2.0Date: Sun, 24 Nov 2024 14:42:34 GMTContent-Length: 2105Connection: keep-aliveSet-Cookie: AWSALBTG92HVTHcReFDF3iNIJIuOYQJ1DqocAgyaSDcPKPzEW24pxyXyNKc1+8F3oYTFi

!DOCTYPE html>html langen>head>    meta charsetutf-8>    meta nameviewport contentwidthdevice-width, initial-scale1>    title>Human Verification/title>    style>        body {            font-family: Arial;        }    /style>    script typetext/javascript>    window.awsWafCookieDomainList  ;    window.gokuProps  {key:AQIDAHjcYu/GjX+QlghicBgQ/7bFaQZ+m5FKCMDnO+vTbNg96AGjRFjY3Gj/ykC2xUCXRON6AAAAfjB8BgkqhkiG9w0BBwagbzBtAgEAMGgGCSqGSIb3DQEHATAeBglghkgBZQMEAS4wEQQMXNLMcPurlnqmOXtEAgEQgDsXuIaumBTbB/SU86iV/hqk968EZeD398q53TjIT03ZiRCKMMu8MrcywZMfeuUckyts20WV7WCp+SO9iw,          iv:CgAGYBsmIAAAAneO,          context:S5bidSpUBAew2tyn/WFJBXqQG0XRCdDzbcST/WrgNKJFTFEMZ8zFoKmH0Gsfy5hbESOjEI5DU0i2/SQaGHMkVkEfFivFN3+kfW+nu1e5+qAOg60wcuAHgeYGXDlLvLoo6W88+1ViOBvZTZMWs9thdG/0WHWir1QwCnVhEu/kWXk2oRUWspNMz0NuLM7sacWVClygjQT/zXYpvv75P15D8CyLGkdfn85x30erx0fCcVMOpXdL2S0aRxwClYiVEWFx9WA61HJnvPbMGgIz7Q21lCENDB2U4mKg7DhZ9b+KQHEPTDwR1kAnFItQ+uafU/cNi1prZ/FxFgNOxGMaYele9h41F5IQiIe+nnh1JN8GDoeq9kvyjg};    /script>    script srchttps://444e03bc05c2.d0c7a26b.eu-central-1.token.awswaf.com/444e03bc05c2/0d2c6a407ebd/04941442b1b2/challenge.js>/script>    script srchttps://444e03bc05c2.d0c7a26b.eu-central-1.captcha.awswaf.com/444e03bc05c2/0d2c6a407ebd/04941442b1b2/captcha.js>/script>/head>body>    div idcaptcha-container>/div>    script typetext/javascript>        AwsWafIntegration.saveReferrer();        window.addEventListener(load, function() {          const container  document.querySelector(#captcha-container);          CaptchaScript.renderCaptcha(container, async (voucher) > {              await ChallengeScript.submitCaptcha(voucher);              window.location.reload(true);          }      );    });    /script>    noscript>        h1>JavaScript is disabled/h1>        In order to continue, you need to verify that youre not a robot by solving a CAPTCHA puzzle.         The CAPTCHA puzzle requires JavaScript. Enable JavaScript and then reload the page.    /noscript>/body>/html>

Subdomains

Date	Domain	IP
auth.dev-sky.heyblu.ro	2024-11-24	3.75.45.112
api.dev-sky.heyblu.ro	2024-11-24	52.28.241.83
cos.dev-sky.heyblu.ro	2025-08-24	3.77.191.222
rs.dev-sky.heyblu.ro	2025-09-11	3.121.197.117
mdw.dev-sky.heyblu.ro	2024-11-24	18.157.96.39

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > api.dev-sky.heyblu.ro

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains