Domain > down98.ir

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2015-11-12	151.80.76.226 (ClassC)
2015-12-28	178.33.217.241 (ClassC)
2018-04-21	93.115.38.30 (ClassC)
2018-08-25	158.69.187.205 (ClassC)
2018-09-08	176.9.36.133 (ClassC)
2018-11-11	88.99.30.41 (ClassC)
2019-06-11	77.238.120.150 (ClassC)
2019-07-23	148.251.241.202 (ClassC)
2019-07-30	144.76.119.43 (ClassC)
2019-07-30	144.76.119.44 (ClassC)
2019-07-30	144.76.88.79 (ClassC)
2019-07-31	148.251.226.50 (ClassC)
2019-08-20	144.76.88.84 (ClassC)
2019-08-31	104.24.104.203 (ClassC)
2019-08-31	104.24.105.203 (ClassC)
2019-11-15	136.243.132.153 (ClassC)
2020-07-19	91.98.102.86 (ClassC)
2020-07-20	185.141.168.55 (ClassC)
2020-09-24	78.157.59.71 (ClassC)
2020-10-09	78.157.36.88 (ClassC)
2021-09-06	78.157.36.80 (ClassC)
2022-03-16	62.60.160.80 (ClassC)
2022-07-07	46.4.68.24 (ClassC)
2024-10-11	10.10.34.36 (ClassC)
2025-03-10	104.21.32.1 (ClassC)
2025-03-20	104.21.64.1 (ClassC)
2025-05-01	104.21.16.1 (ClassC)
2025-07-16	104.21.112.1 (ClassC)
2025-07-24	104.21.48.1 (ClassC)
2025-12-31	104.21.48.189 (ClassC)
2026-01-10	172.67.156.12 (ClassC)

HTTP/1.1 200 OKDate: Wed, 14 Feb 2024 09:15:56 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: keep-alivex-powered-by: PHP/7.4.33set-cookie: PHPSESSID4125c207d58806ab6117

!doctype html>html dirrtl langfa-IR prefixog: https://ogp.me/ns#> head>meta charsetutf-8>script>if(navigator.userAgent.match(/MSIE|Internet Explorer/i)||navigator.userAgent.match(/Trident/7..*?rv:11/i)){var hrefdocument.location.href;if(!href.match(/?&nowprocket/)){if(href.indexOf(?)-1){if(href.indexOf(#)-1){document.location.hrefhref+?nowprocket1}else{document.location.hrefhref.replace(#,?nowprocket1#)}}else{if(href.indexOf(#)-1){document.location.hrefhref+&nowprocket1}else{document.location.hrefhref.replace(#,&nowprocket1#)}}}}/script>script>class RocketLazyLoadScripts{constructor(e){this.triggerEventse,this.eventOptions{passive:!0},this.userEventListenerthis.triggerListener.bind(this),this.delayedScripts{normal:,async:,defer:},this.allJQueries}_addUserInteractionListener(e){this.triggerEvents.forEach((t>window.addEventListener(t,e.userEventListener,e.eventOptions)))}_removeUserInteractionListener(e){this.triggerEvents.forEach((t>window.removeEventListener(t,e.userEventListener,e.eventOptions)))}triggerListener(){this._removeUserInteractionListener(this),loadingdocument.readyState?document.addEventListener(DOMContentLoaded,this._loadEverythingNow.bind(this)):this._loadEverythingNow()}async _loadEverythingNow(){this._delayEventListeners(),this._delayJQueryReady(this),this._handleDocumentWrite(),this._registerAllDelayedScripts(),this._preloadAllScripts(),await this._loadScriptsFromList(this.delayedScripts.normal),await this._loadScriptsFromList(this.delayedScripts.defer),await this._loadScriptsFromList(this.delayedScripts.async),await this._triggerDOMContentLoaded(),await this._triggerWindowLoad(),window.dispatchEvent(new Event(rocket-allScriptsLoaded))}_registerAllDelayedScripts(){document.querySelectorAll(scripttyperocketlazyloadscript).forEach((e>{e.hasAttribute(src)?e.hasAttribute(async)&&!1!e.async?this.delayedScripts.async.push(e):e.hasAttribute(defer)&&!1!e.defer||modulee.getAttribute(data-rocket-type)?this.delayedScripts.defer.push(e):this.delayedScripts.normal.push(e):this.delayedScripts.normal.push(e)})

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > down98.ir

Is this malicious?

DNS Resolutions

Port 443