Domain > cs.mdw.heyblu.ro

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-05-05	3.125.28.200 (ClassC)
2025-06-13	3.73.104.194 (ClassC)
2025-06-29	18.196.226.114 (ClassC)
2025-07-26	35.159.47.237 (ClassC)
2025-08-18	3.72.218.157 (ClassC)
2025-09-07	18.157.189.160 (ClassC)
2025-10-04	18.184.124.252 (ClassC)
2025-11-19	18.159.20.229 (ClassC)

HTTP/1.1 405 Not AllowedServer: awselb/2.0Date: Fri, 13 Jun 2025 16:02:26 GMTContent-Length: 2105Connection: keep-alivex-amzn-waf-action: captchaCache-Control: no-store, max-age0Content-Type: text/htm

!DOCTYPE html>html langen>head>    meta charsetutf-8>    meta nameviewport contentwidthdevice-width, initial-scale1>    title>Human Verification/title>    style>        body {            font-family: Arial;        }    /style>    script typetext/javascript>    window.awsWafCookieDomainList  ;    window.gokuProps  {key:AQIDAHjcYu/GjX+QlghicBgQ/7bFaQZ+m5FKCMDnO+vTbNg96AEuNBLFdDpjIqumutzDkp+2AAAAfjB8BgkqhkiG9w0BBwagbzBtAgEAMGgGCSqGSIb3DQEHATAeBglghkgBZQMEAS4wEQQMcFNUWot4KwH/TVu7AgEQgDunvKx2EfNMgH06v5mu05hB6fpYZHexwmc75kRn6NRCzbht32GvUDYLJgVLxLhTohFR0NHQy3q1Otu0FQ,          iv:CgAGyxusvQAAAHtP,          context:AwhT8e8FeUfjXZ0zdJvaGeuMtIZOaUgIJK98R8SrbZUYj+7v2OaPGeaaJNVrOI6MQeEHUdjEYqcpDc0lBpyGaPIaOj6ModFUS51cMndjI0FGGc0fcLv7quFwbdLzBUixjSCGdJjfASSNkoURA35F1BFwUrD/4xgYJhQCCK2lMli9goK7mAN397VXFLLV+F2AtAuW/b93MUlAD0/40r6zZeCEMkA+1uXs9KxRXEXbuDRFpO789hXORgEH4ouX82hOLUBaXaPVpXaHpmSieBy05G0VTqrpitNLLNXbP8R8uT1lEe7tz+TfZWrYSQJPyY5nl6WVsa7pnjajQVpVix4CnAggSo7YvtcJ22aiEzScW1ZWRrYD0dlD};    /script>    script srchttps://b6166099891d.878528df.eu-central-1.token.awswaf.com/b6166099891d/66a1e42f22d9/6430c46dd422/challenge.js>/script>    script srchttps://b6166099891d.878528df.eu-central-1.captcha.awswaf.com/b6166099891d/66a1e42f22d9/6430c46dd422/captcha.js>/script>/head>body>    div idcaptcha-container>/div>    script typetext/javascript>        AwsWafIntegration.saveReferrer();        window.addEventListener(load, function() {          const container  document.querySelector(#captcha-container);          CaptchaScript.renderCaptcha(container, async (voucher) > {              await ChallengeScript.submitCaptcha(voucher);              window.location.reload(true);          }      );    });    /script>    noscript>        h1>JavaScript is disabled/h1>        In order to continue, you need to verify that youre not a robot by solving a CAPTCHA puzzle.         The CAPTCHA puzzle requires JavaScript. Enable JavaScript and then reload the page.    /noscript>/body>/html>

Port 443

!DOCTYPE html>html langen>head>    meta charsetutf-8>    meta nameviewport contentwidthdevice-width, initial-scale1>    title>Human Verification/title>    style>        body {            font-family: Arial;        }    /style>    script typetext/javascript>    window.awsWafCookieDomainList  ;    window.gokuProps  {key:AQIDAHjcYu/GjX+QlghicBgQ/7bFaQZ+m5FKCMDnO+vTbNg96AEuNBLFdDpjIqumutzDkp+2AAAAfjB8BgkqhkiG9w0BBwagbzBtAgEAMGgGCSqGSIb3DQEHATAeBglghkgBZQMEAS4wEQQMcFNUWot4KwH/TVu7AgEQgDunvKx2EfNMgH06v5mu05hB6fpYZHexwmc75kRn6NRCzbht32GvUDYLJgVLxLhTohFR0NHQy3q1Otu0FQ,          iv:CgAG+BvHnAAAAK3s,          context:+VSRnx6Daj/73sIAacxGnHm8mk4P3czFyzsKL9I5n43ZxUA17xCi5UQuEMA0R42GXQQXDdrPTSXVkLuiwEkif+J4Z/EV298kmKS5cJ9ydq3fFap0x4tpFQiMmgScMyirbdpt2ZlNIN36ljNWiq4wU/dPHduA3Hdy6iKvhYoKET+bNBumWarSG+oGFKHGEABp7552/tRNCXr+L4/doZnN/CJji8nflC7ZFdFCCK8AY2FJ/9sJxT6N2REO2l2rM+ciZhwwVaG0iRVAP4wcozRQAFrLv3c3LyU/KXKgIo0dvIP8oAEkaBo8GxRObxiYl+vWJtfuWKjZPO04oBOY/Cy4BaKlfZXDErAZAKEG5DDZXiv8PC/4uPgH};    /script>    script srchttps://b6166099891d.878528df.eu-central-1.token.awswaf.com/b6166099891d/66a1e42f22d9/6430c46dd422/challenge.js>/script>    script srchttps://b6166099891d.878528df.eu-central-1.captcha.awswaf.com/b6166099891d/66a1e42f22d9/6430c46dd422/captcha.js>/script>/head>body>    div idcaptcha-container>/div>    script typetext/javascript>        AwsWafIntegration.saveReferrer();        window.addEventListener(load, function() {          const container  document.querySelector(#captcha-container);          CaptchaScript.renderCaptcha(container, async (voucher) > {              await ChallengeScript.submitCaptcha(voucher);              window.location.reload(true);          }      );    });    /script>    noscript>        h1>JavaScript is disabled/h1>        In order to continue, you need to verify that youre not a robot by solving a CAPTCHA puzzle.         The CAPTCHA puzzle requires JavaScript. Enable JavaScript and then reload the page.    /noscript>/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > cs.mdw.heyblu.ro

Is this malicious?

DNS Resolutions

Port 80

Port 443