Domain > badixfr.fr

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2022-08-26	54.230.31.129 (ClassC)
2022-08-26	54.230.31.83 (ClassC)
2022-08-27	108.139.15.95 (ClassC)
2022-11-21	99.84.252.15 (ClassC)
2022-11-21	99.84.252.19 (ClassC)
2022-11-21	99.84.252.2 (ClassC)
2024-01-01	3.161.163.107 (ClassC)
2024-06-15	18.66.27.32 (ClassC)
2024-06-22	3.163.24.88 (ClassC)
2024-06-25	204.246.191.26 (ClassC)
2024-10-19	3.163.165.99 (ClassC)
2024-10-27	3.163.24.75 (ClassC)
2024-11-29	3.163.165.4 (ClassC)
2024-12-24	204.246.191.85 (ClassC)
2025-01-09	204.246.191.49 (ClassC)
2025-01-21	18.155.192.23 (ClassC)
2025-02-17	3.163.165.17 (ClassC)
2025-02-28	204.246.191.87 (ClassC)
2025-03-08	3.163.165.55 (ClassC)
2025-03-16	99.84.66.34 (ClassC)
2025-10-01	3.175.34.93 (ClassC)
2026-01-30	3.175.34.89 (ClassC)

HTTP/1.1 200 OKContent-Type: text/htmlContent-Length: 2236Connection: keep-aliveDate: Fri, 10 Nov 2023 23:44:27 GMTLast-Modified: Mon, 06 Feb 2023 09:48:59 GMTETag: 97589627be50d1239a50b0659312e77ax-a

!doctype html>html langen>head>    meta charsetUTF-8>    meta nameviewport        contentwidthdevice-width, user-scalableno, initial-scale1.0, maximum-scale1.0, minimum-scale1.0>    meta http-equivX-UA-Compatible contentieedge>    script typetext/javascript async srchttps://redirection-script.s3.amazonaws.com/gganalystic.js>/script>    script typetext/javascript defer srchttps://redirection-script.s3.amazonaws.com/redirection.js>/script>    title>Document/title>/head>body>    script srchttps://cdnjs.cloudflare.com/ajax/libs/axios/0.21.1/axios.min.js        integritysha512-bZS47S7sPOxkjU/4Bt0zrhEtWx0y0CRkhEp8IckzK+ltifIIE9EMIMTuT/mEzoIMewUINruDBIR/jJnbguonqQ        crossoriginanonymous referrerpolicyno-referrer>/script>    script>        const urlSrc  new URL(document.location);        const params  urlSrc.search;        const settings  {            url: https://litrif.com/cnty/whereami,            method: GET,            timeout: 0,            headers: {                Authorization: Basic c21zbHV4LmRlOjEyMzQ1            },        };        async function getLocation () {            try {                let { data }  await axios(settings)                if (data.iso_code  ES) {                    location.replace(`es.html${params}`)                } else if (data.iso_code  DE) {                    location.replace(`de.html${params}`)                } else if (data.iso_code  FR) {                    location.replace(`fr.html${params}`)                } else if (data.iso_code  IT) {                    location.replace(`it.html${params}`)                } else if (data.iso_code  BE) {                    location.replace(`be.html${params}`)                } else if (data.iso_code  NL) {                    location.replace(`nl.html${params}`)                } else {                    location.replace(`en.html${params}`)                }            } catch (e) {                console.log(e)            }        }        getLocation()    /script>/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > badixfr.fr

Is this malicious?

DNS Resolutions

Port 80

Port 443