Domain > assets.ref.finance

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2024-01-13	3.162.163.75 (ClassC)
2025-06-04	3.160.22.124 (ClassC)
2025-06-04	3.160.22.97 (ClassC)
2025-12-24	13.33.252.93 (ClassC)
2026-01-28	3.169.173.53 (ClassC)

HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Wed, 28 Jan 2026 07:12:56 GMTContent-Type: text/htmlContent-Length: 919Connection: keep-aliveX-Cache: Error from cloudfrontVia: 1.1 474071c4c0fe7769ce8d0b73ccd104b0.cloudfront.net (CloudFront)X-Amz-Cf-Pop: HIO52-P4X-Amz-Cf-Id: fGJgjVVR6zjDjRIYxf6FTvTkV59gVxRKhSD8rBsYdvQzPrVpV42wFw

!DOCTYPE HTML PUBLIC -//W3C//DTD HTML 4.01 Transitional//EN http://www.w3.org/TR/html4/loose.dtd>HTML>HEAD>META HTTP-EQUIVContent-Type CONTENTtext/html; charsetiso-8859-1>TITLE>ERROR: The request could not be satisfied/TITLE>/HEAD>BODY>H1>403 ERROR/H1>H2>The request could not be satisfied./H2>HR noshade size1px>Request blocked.We cant connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.BR clearall>If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.BR clearall>HR noshade size1px>PRE>Generated by cloudfront (CloudFront)Request ID: fGJgjVVR6zjDjRIYxf6FTvTkV59gVxRKhSD8rBsYdvQzPrVpV42wFw/PRE>ADDRESS>/ADDRESS>/BODY>/HTML>

Subdomains

Date	Domain	IP
guide.ref.finance	2025-06-05	172.64.147.209
app.ref.finance	2024-06-29	172.66.47.195
indexer.ref.finance	2025-12-31	172.104.172.238
stats.ref.finance	2024-11-25	18.172.170.67
api.stats.ref.finance	2024-11-21	13.224.14.87
assets.ref.finance	2026-01-28	3.169.173.53
www.ref.finance	2023-11-01	3.163.24.50

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > assets.ref.finance

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains