Domain > auth.promptmoi.qbetron.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-05-26	172.67.148.199 (ClassC)
2025-12-11	104.21.29.113 (ClassC)

HTTP/1.1 200 OKDate: Thu, 11 Dec 2025 16:18:17 GMTContent-Type: text/html; charsetutf-8Transfer-Encoding: chunkedConnection: keep-aliveAccess-Control-Allow-Origin: *Cache-Control: public, max-age0, must-revalidatereferrer-policy: strict-origin-when-cross-originx-content-type-options: nosniffVary: accept-encodingReport-To: {group:cf-nel,max_age:604800,endpoints:{url:https://a.nel.cloudflare.com/report/v4?sTWoCewVxsTE0UFN9l0%2FsT5wZ42I5N2Y9kc13QjSbGjDe6ERVMYxiLAc7gNPgdzmLuN2kF9n3QAnkVDoavfVLA6s%2BUbrCdmPUivk9NEY9l5x8TflVQUuRFw%3D%3D}}Nel: {report_to:cf-nel,success_fraction:0.0,max_age:604800}Server: cloudflarecf-cache-status: DYNAMICCF-RAY: 9ac64c09ee62fef9-PDXalt-svc: h3:443; ma86400

!-- firebase-project/public/index.html -->!DOCTYPE html>html>  head>    title>Firebase Auth for Chrome Extension/title>    script      srchttps://www.gstatic.com/firebasejs/10.5.0/firebase-app.js      typemodule    >/script>    script      srchttps://www.gstatic.com/firebasejs/10.5.0/firebase-auth.js      typemodule    >/script>  /head>  body>    h1>Firebase Auth for Chrome Extension/h1>    script typemodule srcsignInWithPopup.js>/script>  /body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > auth.promptmoi.qbetron.com

Is this malicious?

DNS Resolutions

Port 443