Domain > bluefocus-sms.lorealchina.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2018-11-28	70.39.191.89 (ClassC)
2019-08-28	157.185.175.104 (ClassC)
2019-08-28	220.242.131.101 (ClassC)
2021-08-27	163.171.132.220 (ClassC)
2024-12-24	157.185.156.141 (ClassC)
2025-01-27	157.185.175.105 (ClassC)
2025-04-15	138.113.24.59 (ClassC)
2025-08-04	138.113.102.15 (ClassC)
2025-12-18	38.109.251.36 (ClassC)
2026-01-17	140.150.36.50 (ClassC)

Port 80

HTTP/1.1 403 ForbiddenServer: nginxDate: Sun, 04 Aug 2024 22:06:39 GMTContent-Type: text/htmlContent-Length: 2009Connection: keep-alivex-ws-request-id: 66affb6f_PSmglsjLAX2uz158_29459-55669

!DOCTYPE html>html>	head>		meta charsetutf-8>		meta http-equivX-UA-Compatible contentIEedge>		meta nameviewport contentwidthdevice-width, initial-scale1>		title>403 Forbidden/title>		style typetext/css>body{margin:5% auto 0 auto;padding:0 18px}.P{margin:0 22%}.O{margin-top:20px}.N{margin-top:10px}.M{margin:10px 0 30px 0}.L{margin-bottom:60px}.K{font-size:25px;color:#F90}.J{font-size:14px}.I{font-size:20px}.H{font-size:18px}.G{font-size:16px}.F{width:230px;float:left}.E{margin-top:5px}.D{margin:8px 0 0 -20px}.C{color:#3CF;cursor:pointer}.B{color:#909090;margin-top:15px}.A{line-height:30px}.hide_me{display:none}/style>	/head>	body>		div idp classP>			div classK>403/div>			div classO I>Forbidden/div>			p classJ A L>Error Times: Sun, 04 Aug 2024 22:06:39 GMT				br>				span classF>IP: 52.40.234.105/span>Node information: PSmglsjLAX2uz158				br>URL: http://bluefocus-sms.lorealchina.com/				br>Request-Id: 66affb6f_PSmglsjLAX2uz158_29459-55669				br>				br>Check:				span classC G onclicks(0)>Details/span>/p>		/div>		div idd classhide_me P H>			div classK>ERROR/div>			p classO I>The Requested URL could not be retrieved/p>			div classO>				div>While trying to retrieve the URL:/div>				pre classB G>http://bluefocus-sms.lorealchina.com//pre>/div>			div classM>				span>The following error was encountered:/span>				ul classE>					li classD G>Invalid Request/li>/ul>			/div>			p classM>The access control configuration prevents your request at this time.				p>/p>Please contact your service provider if you feel this is incorrect./p>			a classN C href# onclicks(1)>return/a>/div>		script typetext/javascript>function e(i) {				return document.getElementById(i);			}			function d(i, t) {				e(i).style.display  (t ? block: none);			}			function s(e) {				d(p, e);				d(d, !e);			}/script>	/body>/html>

Port 443

HTTP/1.1 403 ForbiddenServer: nginxDate: Sun, 04 Aug 2024 22:06:39 GMTContent-Type: text/htmlContent-Length: 2007Connection: keep-alivex-ws-request-id: 66affb6f_PSmgdfDEN1yd75_14171-33027

!DOCTYPE html>html>	head>		meta charsetutf-8>		meta http-equivX-UA-Compatible contentIEedge>		meta nameviewport contentwidthdevice-width, initial-scale1>		title>403 Forbidden/title>		style typetext/css>body{margin:5% auto 0 auto;padding:0 18px}.P{margin:0 22%}.O{margin-top:20px}.N{margin-top:10px}.M{margin:10px 0 30px 0}.L{margin-bottom:60px}.K{font-size:25px;color:#F90}.J{font-size:14px}.I{font-size:20px}.H{font-size:18px}.G{font-size:16px}.F{width:230px;float:left}.E{margin-top:5px}.D{margin:8px 0 0 -20px}.C{color:#3CF;cursor:pointer}.B{color:#909090;margin-top:15px}.A{line-height:30px}.hide_me{display:none}/style>	/head>	body>		div idp classP>			div classK>403/div>			div classO I>Forbidden/div>			p classJ A L>Error Times: Sun, 04 Aug 2024 22:06:39 GMT				br>				span classF>IP: 52.40.234.105/span>Node information: PSmgdfDEN1yd75				br>URL: https://bluefocus-sms.lorealchina.com/				br>Request-Id: 66affb6f_PSmgdfDEN1yd75_14171-33027				br>				br>Check:				span classC G onclicks(0)>Details/span>/p>		/div>		div idd classhide_me P H>			div classK>ERROR/div>			p classO I>The Requested URL could not be retrieved/p>			div classO>				div>While trying to retrieve the URL:/div>				pre classB G>https://bluefocus-sms.lorealchina.com//pre>/div>			div classM>				span>The following error was encountered:/span>				ul classE>					li classD G>Invalid Request/li>/ul>			/div>			p classM>The access control configuration prevents your request at this time.				p>/p>Please contact your service provider if you feel this is incorrect./p>			a classN C href# onclicks(1)>return/a>/div>		script typetext/javascript>function e(i) {				return document.getElementById(i);			}			function d(i, t) {				e(i).style.display  (t ? block: none);			}			function s(e) {				d(p, e);				d(d, !e);			}/script>	/body>/html>

Subdomains

Date	Domain	IP
bigbang.lorealchina.com	2024-07-24	157.185.169.203
campaign.lorealchina.com	2024-08-07	157.185.169.203
amp.lorealchina.com	2024-08-31	157.185.175.105
modiface-cms.lorealchina.com	2025-11-27	157.185.145.100
bluefocus-sms.lorealchina.com	2024-12-24	157.185.156.141
campaigns.lorealchina.com	2024-02-05	157.185.169.208
inside-our-products.lorealchina.com	2024-09-28	157.185.156.194
wechat.lorealchina.com	2024-03-25	157.185.178.99
hr-recruit.lorealchina.com	2024-12-24	157.185.175.105
chat-bot.lorealchina.com	2024-03-22	61.170.77.225
res-wxec-unipt.lorealchina.com	2025-08-06	138.113.24.64
www.lorealchina.com	2025-04-08	157.185.156.194
wx.lorealchina.com	2024-12-01	157.185.145.11
policy.lorealchina.com	2024-09-17	157.185.156.141

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > bluefocus-sms.lorealchina.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains