Domain > getfireshieldblanket.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2024-04-11	3.161.163.20 (ClassC)
2024-06-18	3.161.193.107 (ClassC)
2025-03-09	18.161.21.56 (ClassC)
2025-03-10	18.161.21.47 (ClassC)
2025-08-05	204.246.191.66 (ClassC)
2026-02-09	3.169.173.36 (ClassC)
2026-02-18	3.169.173.114 (ClassC)

HTTP/1.1 200 OKContent-Type: text/htmlContent-Length: 42557Connection: keep-aliveDate: Tue, 05 Aug 2025 09:59:52 GMTLast-Modified: Thu, 28 Mar 2024 14:50:07 GMTETag: 7338b3f34c33656ec83b4e9706563468Se

!doctype html>html>head>    meta charsetutf-8>    meta http-equivX-UA-Compatible contentIEedge>    meta nameviewport contentwidthdevice-width, initial-scale1, shrink-to-fitno>    title>FireShield Blanket /title>    link hrefcss/style.css relstylesheet typetext/css>    link hreffonts/fonts.css relstylesheet typetext/css>    script relpreload srcjs/routes.js  typetext/javascript>/script>    script  typetext/javascript srchttps://www.knd32k.com/scripts/sdk/everflow.js>/script>    script  typetext/javascript>        function getCookie(name) {            var value  ;  + document.cookie;            var parts  value.split(;  + name + );            if (parts.length  2) return parts.pop().split(;).shift();            return null;        }        // Check for an existing transaction ID in URL parameters or cookies        var transactionId  EF.urlParameter(_ef_transaction_id) || getCookie(_ef_transaction_id);        if (!transactionId) {            // Only call EF.click() if no transaction ID exists            EF.click({            offer_id: EF.urlParameter(oid) || EF.urlParameter(offer_id),            affiliate_id: EF.urlParameter(affid) || EF.urlParameter(aff_id),            sub1: EF.urlParameter(sub1) || EF.urlParameter(aff_sub),            sub2: EF.urlParameter(sub2) || EF.urlParameter(aff_sub2),            sub3: EF.urlParameter(sub3) || EF.urlParameter(aff_sub3),            sub4: EF.urlParameter(sub4) || EF.urlParameter(aff_sub4),            sub5: EF.urlParameter(sub5) || EF.urlParameter(aff_sub5),            uid: EF.urlParameter(uid) || EF.urlParameter(url_id),            source_id: EF.urlParameter(source_id),            transaction_id: EF.urlParameter(_ef_transaction_id),            fbclid: EF.urlParameter(fbclid)            });        }            setTimeout(() > {            EF.conversion({                aid: 1,                adv_event_id: 1,            })            }, 500)        /script>/head>div classcontrol-line>/div>body>div classdesktop-version>	div classtop-sec>		img srcimages/newlogo.jpg alt classtop-img

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > getfireshieldblanket.com

Is this malicious?

DNS Resolutions

Port 80

Port 443