Domain > cardrunner.hyfin.app

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-02-22	99.84.66.89 (ClassC)
2025-04-21	108.138.94.66 (ClassC)
2025-05-05	3.169.202.118 (ClassC)
2025-09-14	99.84.66.20 (ClassC)
2026-01-15	18.161.6.31 (ClassC)
2026-02-21	18.161.6.2 (ClassC)

HTTP/1.1 200 OKContent-Type: text/htmlContent-Length: 4018Connection: keep-aliveLast-Modified: Fri, 11 Oct 2024 23:11:26 GMTx-amz-server-side-encryption: AES256Accept-Ranges: bytesServer: AmazonS3Date

!DOCTYPE html>html langen>	head>		meta charsetutf-8 />		meta nameviewport contentwidthdevice-width,initial-scale1 />		!-- link relapple-touch-icon href/images/touch-icons/logo-192.png> -->		meta namemobile-web-app-capable contentyes />		meta nameapple-mobile-web-app-capable contentyes />		meta nameapple-mobile-web-app-status-bar-style contentdefault />		meta nameviewport contentwidthdevice-width, initial-scale1, maximum-scale1 />		meta namedescription contentAutomate your accounts receivables and get paid faster! />		title>/title>		link relmodulepreload href/js/iconify-1_0_7.min.js />		script>			//FORCE REDIRECT TO /docs IF docs. IS IN THE SUB DOMAIN			if (window.location.href.indexOf(docs.) > -1 && window.location.href.replace(//, ).indexOf(/docs)  -1) {				window.location  /docs			}			//FORCE REDIRECT TO /media IF media. IS IN THE SUB DOMAIN			if (window.location.href.indexOf(media.) > -1 && window.location.href.replace(//, ).indexOf(/media)  -1) {				window.location  /media			}			//FORCE REDIRECT TO /admin IF URL is admin.hyfin.app OR admin.dev.hyfin.app OR admin.stage.hyfin.app			if (window.location.href.indexOf(//admin.) > -1 && window.location.href.replace(//, ).indexOf(/admin)  -1) {				window.location  /admin			}			window.addEventListener(load, () > {				if (serviceWorker in navigator) {					navigator.serviceWorker.getRegistrations().then(function (registrations) {						for (let registration of registrations) {							registration.unregister()						}					})				}			})			window.initGoogle  () > {}			function debug() {				var Global  this				Global.console?.log?.(...arguments)			}		/script>		script typemodule src/js/iconify-1_0_7.min.js>/script>		script src/js/lodash.min.js>/script>		script async src/js/pwacompat.min.js crossoriginanonymous>/script>		script src/js/popper.min.js>/script>		script src/js/tippy-bundle.umd.min.js>/script>		link relstylesheet href/css/scale-subtle.css />		link relstylesheet href/css/uppy.min.css />		link relmodulepreload hrefdata:application/javascript;base64,aW1wb3J0IEhNUiBmcm9tIC

Subdomains

Date	Domain	IP
heartland.hyfin.app	2024-04-07	108.138.94.66
centeredge.hyfin.app	2025-01-22	108.138.94.66
commercebank.hyfin.app	2026-01-17	18.161.6.2
cardrunner.hyfin.app	2025-02-22	99.84.66.89
clearent.hyfin.app	2026-02-09	18.161.6.31
www.hyfin.app	2024-05-27	99.84.66.20

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > cardrunner.hyfin.app

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains