Domain > avia.galileo.su

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2019-09-22	92.53.96.13 (ClassC)
2025-02-11	3.132.35.111 (ClassC)
2025-10-18	18.188.220.34 (ClassC)
2026-01-04	18.219.61.107 (ClassC)

HTTP/1.1 200 OKdate: Mon, 11 Nov 2024 10:48:20 GMTcontent-type: text/html; charsetutf-8transfer-encoding: chunkedvary: Accept-Encodingvary: Accept-Encodingx-request-id: 599704586bdfdf8e6e181c871cbe13f

!DOCTYPE html>html>  head>    script>      dataLayer          {pageCategory: front}      ;    /script>    script>      window.GEOIP  {        city: {          iata: PSC,          name: Pasco        },        country: {          iata: US,          name: United States        },        country_code: US,        coordinates: {          lat: 46.259094,          lon: -119.1152        },        currency: USD,        timezone: America/Los_Angeles        };    /script>    script>      (function(w,d,s,l,i) {        wlwl||;        wl.push({          gtm.start: new Date().getTime(),          event: gtm.js        });        var fd.getElementsByTagName(s)0,            jd.createElement(s),            dll!dataLayer?&l+l:;        j.asynctrue;        j.srchttps://www.googletagmanager.com/gtm.js?id+i+dl;        f.parentNode.insertBefore(j,f);      })(window,document,script,dataLayer,GTM-M47KB56);    /script>    script data-cfasyncfalse>      window.TPWLCONFIG  {       color_scheme: {         body_bg: #F7F7F7,         bg: #00AFDD,         text_contrast: #FFFFFF,         link: #00AFDD,         border: ,         text_interesting: ,         btn_text: #FFFFFF,         btn_bg: #FFA600       },       hotel: {         name:        },       default_origin: {         iata:        },       default_destination: {         iata:        },       language: ru,       currency: rub,       engine_type: avia,       host: avia.galileo.su,       active_tab: flight,       affiliate: {         marker: 12614       },       show_hotels: false,       powered_by: false     };      window.TPWLCONFIG.pageLoaded  false;      document.addEventListener(        DOMContentLoaded,        function() {          window.TPWLCONFIG.pageLoaded  true        })    /script>    link relpreload href/widgets/whitelabel_ru.js?v002&rtlfalse&localeru asscript           onloadwindow.MewtwoIsLoaded  true>    link relpreload href/main.ru.js asscript>    script data-cfasyncfalse src/main.ru.js async>/script>    link relpreload href/main.css asstyle           onloadthis.relstyles

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > avia.galileo.su

Is this malicious?

DNS Resolutions

Port 443