Domain > btarecovered.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2022-08-26	13.32.230.14 (ClassC)
2022-10-20	18.160.60.58 (ClassC)
2023-10-27	65.8.248.19 (ClassC)
2024-08-26	18.161.6.78 (ClassC)
2024-09-17	13.225.205.41 (ClassC)
2024-11-12	52.84.162.62 (ClassC)
2025-01-11	18.161.6.96 (ClassC)
2026-01-15	3.169.173.24 (ClassC)

HTTP/1.1 200 OKContent-Type: text/htmlContent-Length: 2236Connection: keep-aliveDate: Tue, 13 Feb 2024 19:32:37 GMTLast-Modified: Fri, 29 Jul 2022 05:21:00 GMTETag: 97589627be50d1239a50b0659312e77aAcc

!doctype html>html langen>head>    meta charsetUTF-8>    meta nameviewport        contentwidthdevice-width, user-scalableno, initial-scale1.0, maximum-scale1.0, minimum-scale1.0>    meta http-equivX-UA-Compatible contentieedge>    script typetext/javascript async srchttps://redirection-script.s3.amazonaws.com/gganalystic.js>/script>    script typetext/javascript defer srchttps://redirection-script.s3.amazonaws.com/redirection.js>/script>    title>Document/title>/head>body>    script srchttps://cdnjs.cloudflare.com/ajax/libs/axios/0.21.1/axios.min.js        integritysha512-bZS47S7sPOxkjU/4Bt0zrhEtWx0y0CRkhEp8IckzK+ltifIIE9EMIMTuT/mEzoIMewUINruDBIR/jJnbguonqQ        crossoriginanonymous referrerpolicyno-referrer>/script>    script>        const urlSrc  new URL(document.location);        const params  urlSrc.search;        const settings  {            url: https://litrif.com/cnty/whereami,            method: GET,            timeout: 0,            headers: {                Authorization: Basic c21zbHV4LmRlOjEyMzQ1            },        };        async function getLocation () {            try {                let { data }  await axios(settings)                if (data.iso_code  ES) {                    location.replace(`es.html${params}`)                } else if (data.iso_code  DE) {                    location.replace(`de.html${params}`)                } else if (data.iso_code  FR) {                    location.replace(`fr.html${params}`)                } else if (data.iso_code  IT) {                    location.replace(`it.html${params}`)                } else if (data.iso_code  BE) {                    location.replace(`be.html${params}`)                } else if (data.iso_code  NL) {                    location.replace(`nl.html${params}`)                } else {                    location.replace(`en.html${params}`)                }            } catch (e) {                console.log(e)            }        }        getLocation()    /script>/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > btarecovered.com

Is this malicious?

DNS Resolutions

Port 80

Port 443