Domain > creativeadvertisingworld.tumblr.stfi.re

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2020-09-26	52.84.18.3 (ClassC)
2020-09-26	99.84.252.24 (ClassC)
2024-12-15	3.163.178.9 (ClassC)
2025-03-30	54.230.125.101 (ClassC)
2025-04-05	54.230.125.200 (ClassC)
2025-05-14	3.175.29.96 (ClassC)
2025-05-24	3.163.178.167 (ClassC)
2025-08-26	3.175.29.166 (ClassC)

HTTP/1.1 200 OKContent-Type: text/htmlContent-Length: 2420Connection: keep-aliveLast-Modified: Wed, 31 May 2017 12:35:26 GMTAccept-Ranges: bytesServer: AmazonS3Date: Sun, 15 Dec 2024 15:28:24 GMTETag:

!DOCTYPE html>html>head>	title>Start A Fire/title>    meta propertyog:title contentStart A Fire />    meta propertyog:image content//startafireredirect.s3.amazonaws.com/images/ogimage.png />    meta propertyog:url contenthttp://startafire.com />    meta nametwitter:title contentStart A Fire />    meta nametwitter:image content//startafireredirect.s3.amazonaws.com/images/ogimage.png />    meta namereferrer contentno-referrer />    link relshortcut icon href//startafireredirect.s3.amazonaws.com/images/favicon2.ico />	link idpage_favicon href//startafireredirect.s3.amazonaws.com/images/favicon2.ico relicon typeimage/x-icon />/head>body>    script typetext/javascript>	(function(){		try{			endpoint  https://rdyd4a1hw2.execute-api.us-east-1.amazonaws.com/prod/?fireKey;        	stfhash1  getParameterByName(sf);        	stfhash2  getHashFromShortner();		    if (stfhash1 ! ){		    	window.location.href  endpoint + stfhash1;			    } else if (stfhash2 ! ){		    	window.location.href  endpoint + stfhash2;		    } else {		    	var domainArr  location.hostname.split(.);	        	var myDomain  domainArrdomainArr.length-2 + . + domainArrdomainArr.length-1;	        	window.location.href  http:// + myDomain + /404.html;			    }        } catch(e){        	var domainArr  location.hostname.split(.);	        var myDomain  domainArrdomainArr.length-2 + . + domainArrdomainArr.length-1;	        window.location.href  http:// + myDomain + /404.html;	        }	})();	function getHashFromShortner(){		try{			if (location.hostname.split(.).length  2 &&				location.search   &&				(location.pathname.split(/).length  2 || location.pathname.split(/).length  3) 				){					var param  location.pathname.split(/)1;					if (isHash(param)) {						return param;					}				}		} catch(e){}		return ;	}	function isHash(stfhash){		var myRe  new RegExp(^a-z0-9{5,}$);		return (myRe.exec(stfhash) ! null);	}    function getParameterByName(param) {		name  param.replace(//, \).replace(//, \);    	var regex  new RegExp(\?& + name + (^&#*)),        results  regex.exec(loc

Subdomains

Date	Domain	IP
dball2020.tumblr.stfi.re	2024-10-07	3.163.178.116
nike-onlineshop7.tumblr.stfi.re	2024-12-23	3.163.178.211
creativeadvertisingworld.tumblr.stfi.re	2024-12-15	3.163.178.9
butterflyflyingsworld.tumblr.stfi.re	2024-09-02	54.230.125.99
imickeyd.tumblr.stfi.re	2024-10-02	54.230.125.99
fashiion-gone-rouge.tumblr.stfi.re	2025-03-23	54.230.125.99
alternativepurple.tumblr.stfi.re	2025-04-06	54.230.125.200
folklifestyle.tumblr.stfi.re	2025-07-05	3.175.29.30
adamreeve.tumblr.stfi.re	2025-01-12	54.230.125.200
bulletjournaling.tumblr.stfi.re	2024-07-26	54.230.125.200
headvertising.tumblr.stfi.re	2024-07-19	54.230.125.200
apositivelybeautifulblog.tumblr.stfi.re	2024-03-30	3.163.178.211
belenzotti.tumblr.stfi.re	2024-02-29	52.84.160.108
coolkenack.tumblr.stfi.re	2023-12-17	3.163.178.167
beautycreek.tumblr.stfi.re	2024-07-04	54.230.125.101
angelarobs.tumblr.stfi.re	2024-03-30	3.163.178.211
barbernomics.tumblr.stfi.re	2025-04-12	54.230.125.99
all-caps-lyrics.tumblr.stfi.re	2024-10-03	54.230.125.200
webdesign-freebies.tumblr.stfi.re	2024-08-12	54.230.125.200
lifestylephilosophies.tumblr.stfi.re	2024-08-04	99.84.71.138
audreylovesparis.tumblr.stfi.re	2024-03-28	54.230.125.108
vtt.tumblr.stfi.re	2025-08-12	3.175.29.166
faustinepau.tumblr.stfi.re	2024-08-29	3.163.178.211

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > creativeadvertisingworld.tumblr.stfi.re

Is this malicious?

DNS Resolutions

Port 80

Subdomains