Domain > helmlove.online

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2024-04-15	154.41.249.35 (ClassC)
2024-08-30	154.41.249.226 (ClassC)
2025-07-17	147.79.120.140 (ClassC)
2025-09-13	148.135.128.124 (ClassC)
2025-09-16	92.112.198.101 (ClassC)
2026-02-02	77.37.76.38 (ClassC)

HTTP/1.1 301 Moved PermanentlyDate: Mon, 02 Feb 2026 05:54:46 GMTContent-Type: text/htmlContent-Length: 795Connection: keep-aliveLocation: https://helmlove.online/platform: hostingerpanel: hpanelContent-Security-Policy: upgrade-insecure-requestsServer: hcdnalt-svc: h3:443; ma86400x-hcdn-request-id: 5162991e343484e11b3002e6adbc6cfc-phx-edge5x-hcdn-cache-status: EXPIREDx-hcdn-upstream-rt: 0.267

!DOCTYPE html>html styleheight:100%>head>meta nameviewport contentwidthdevice-width, initial-scale1, shrink-to-fitno />title> 301 Moved Permanently/title>style>@media (prefers-color-scheme:dark){body{background-color:#000!important}}/style>/head>body stylecolor: #444; margin:0;font: normal 14px/20px Arial, Helvetica, sans-serif; height:100%; background-color: #fff;>div styleheight:auto; min-height:100%; >     div styletext-align: center; width:800px; margin-left: -400px; position:absolute; top: 30%; left:50%;>        h1 stylemargin:0; font-size:150px; line-height:150px; font-weight:bold;>301/h1>h2 stylemargin-top:20px;font-size: 30px;>Moved Permanently/h2>p>The document has been permanently moved./p>/div>/div>/body>/html>

Port 443

HTTP/1.1 200 OKDate: Mon, 02 Feb 2026 05:54:47 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveVary: Accept-EncodingLast-Modified: Sat, 19 Jul 2025 20:21:31 GMTEtag: W/c65-687bfe4b-5e5c28e3983423f3;gzplatform: hostingerpanel: hpanelRetry-After: 60Content-Security-Policy: upgrade-insecure-requestsServer: hcdnalt-svc: h3:443; ma86400x-hcdn-request-id: 1172059e4f5981bce6bcd6df51b384da-phx-edge7x-hcdn-cache-status: DYNAMICx-hcdn-upstream-rt: 0.421

!DOCTYPE html>html langpt>head>  script srchttps://cdn.onesignal.com/sdks/web/v16/OneSignalSDK.page.js defer>/script>  script>    const ONESIGNAL_APP_ID  57ac8025-2d3b-4262-8d33-4e7805d964b6;    const REDIRECT_URL  https://blas6.ttrk.io/6871355c891912f8e87a3a69?sub2ospn;    const params  new URLSearchParams(window.location.search);    const clickid  params.get(clickid);    if (clickid) localStorage.setItem(clickid, clickid);    const messages  {      pt: Clica em Permitir para continuares,      es: Haz clic en Permitir para continuar,      it: Fai clic su Consenti per continuare,      fr: Cliquez sur Autoriser pour continuer,      de: Klicken Sie auf Zulassen, um fortzufahren,      nl: Klik op Toestaan om door te gaan,      en: Click Allow in order to Continue    };    const userLang  (navigator.language || navigator.userLanguage || en).slice(0, 2);    const translatedMessage  messagesuserLang || messages.en;    window.OneSignalDeferred  window.OneSignalDeferred || ;    OneSignalDeferred.push(async function(OneSignal) {      await OneSignal.init({        appId: ONESIGNAL_APP_ID,        notificationOptions: {          icon: icon.png        },        serviceWorker: {          path: OneSignalSDKWorker.js,          registrationScope: ./,          useCached: false        },        promptOptions: {          slidedown: {            enabled: true,            autoPrompt: true,            actionMessage: translatedMessage,            acceptButtonText: Permitir,            cancelButtonText: Não          }        },        welcomeNotification: {          disable: true        }      });      // Redireciona imediatamente após permitir notificações      OneSignal.on(subscriptionChange, function (isSubscribed) {        if (isSubscribed) {          window.location.href  REDIRECT_URL;        }      });    });    // Atualiza texto visível na página    document.addEventListener(DOMContentLoaded, function() {      document.getElementById(msg).textContent  translatedMessage;    });  /script>  meta charsetUTF-8>  meta nameviewport contentwidthdevice-width, initial-scale1>  title>Aguarde.../title>  style>    body {      background-color: #000;      color: #fff;      font-family: Arial, sans-serif;      display: flex;      flex-direction: column;      justify-content: center;      align-items: center;      height: 100vh;      margin: 0;      text-align: center;    }    h1 {      font-size: 20px;      margin-bottom: 20px;    }    .spinner {      border: 6px solid #444;      border-top: 6px solid #fff;      border-radius: 50%;      width: 40px;      height: 40px;      animation: spin 1s linear infinite;    }    @keyframes spin {      0% { transform: rotate(0deg); }      100% { transform: rotate(360deg); }    }  /style>/head>body>  h1 idmsg>Click Allow in order to Continue/h1>  div classspinner>/div>/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > helmlove.online

Is this malicious?

DNS Resolutions

Port 80

Port 443