Domain > connect2.grovelfun.com

More information on this domain is in AlienVault OTX

Whois

Property	Value
Email	ckkskngsch@whoisprivacyprotect.com
NameServer	NS-1553.AWSDNS-02.CO.UK
Created	2012-10-29 15:29:04
Changed	2018-09-30 07:58:12
Registrar	eNom, LLC

DNS Resolutions

Date	IP Address
2018-10-01	52.85.117.202 (ClassC)
2018-10-01	52.85.117.228 (ClassC)
2018-10-01	52.85.117.249 (ClassC)
2018-10-01	52.85.117.155 (ClassC)
2019-05-27	13.32.255.194 (ClassC)
2025-06-22	103.224.212.184 (ClassC)
2026-01-02	103.224.212.211 (ClassC)
2026-01-27	54.165.131.183 (ClassC)

HTTP/1.1 200 OKContent-Type: text/htmlContent-Length: 42344Connection: keep-aliveDate: Mon, 27 May 2019 19:58:48 GMTLast-Modified: Mon, 20 May 2019 14:05:32 GMTETag: d38545f2288de6de49a51ee858cb65e3Se

html>head>    script idmain>        function include(url, callback)        {            // Adding the script tag to the head as suggested before            var head  document.getElementsByTagName(head)0;            var script  document.createElement(script);            script.type  text/javascript;            script.src  url;            // Then bind the event to the callback function.            // There are several events for cross browser compatibility.            script.onreadystatechange  callback;            script.onload  callback;            // Fire the loading            head.appendChild(script);        }        if (/localhost/.test(window.location.href) || /127.0.0.1/.test(window.location.href) || /signupflow.com/.test(window.location.href)) {            localStorage.setItem(env, local);            include(../js/libs/pathway/flows.js, function(){                include(../js/libs/pathway/index.js);            })        } else  if (/stage/.test(window.location.href) || /staging/.test(window.location.href)) {            localStorage.setItem(env, stage);        } else {            localStorage.setItem(env, live);        }        //GOAT COMPILE here    var default_homebase,default_signupeone,default_landermovies,flows{hf:{base:{html:{home:base,step_zero:base,registration:base,cc:base,membership:base,upsell:base,donation:base,receipt:base,about:base,contact:base,forgot_password:base,support:base,support_account_support:base,support_cancel_your_subscription:base,support_partners_and_authors:base,support_payment_billing:base,support_using:base,support_technical_support:base,privacy:base,text_privacy:base,text_terms:base},js:{global:base,home:base,step_zero:base,registration:base,cc:base,membership:base,upsell:base,donation:base,receipt:base,about:base,contact:base,forgot_password:base,support:base,support_account_support:base,support_cancel_your_subscription:base,support_partners_and_authors:base,support_payment_billing:base,support_using:base,support_technical_support:base,privacy:base,text_privacy:base,text_t

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > connect2.grovelfun.com

Is this malicious?

Whois

DNS Resolutions

Port 80

Port 443