Domain > login.demo.cesfxhkd.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2024-02-21	13.238.136.204 (ClassC)
2024-04-12	13.237.234.52 (ClassC)
2024-08-31	13.211.52.188 (ClassC)
2024-09-22	13.236.168.43 (ClassC)
2025-03-05	13.238.25.214 (ClassC)
2025-05-07	52.62.135.133 (ClassC)
2025-05-15	13.236.172.202 (ClassC)
2025-06-23	13.237.245.211 (ClassC)
2025-12-24	3.105.3.244 (ClassC)
2026-01-23	13.239.213.160 (ClassC)

HTTP/1.1 302 Moved Temporarilycache-control: no-store, no-cache, no-store, must-revalidatecontent-security-policy: frame-ancestors noneContent-Type: text/html; charsetUTF-8Date: Wed, 21 Feb 2024 14:39

!DOCTYPE HTML PUBLIC -//IETF//DTD HTML//EN>!-- Copyright (C) 2000 Tivoli Systems, Inc. -->!-- Copyright (C) 1999 IBM Corporation -->!-- Copyright (C) 1998 Dascom, Inc. -->!-- All Rights Reserved. -->!--     This is an Application Gateway error message template file.  It is used     by the Application Gateway to build a response when a particular     error occurs.  This file can be modified as appropriate.     Error details:          * Code: 0x00000000     * Text: HPDBA0521I   Successful completion     -->html>head>meta http-equivContent-Type content text/html; charsetUTF-8>!-- Enter Page Title -->title>Moved Temporarily/title>/head>body bgcolor#FFFFFF>img src/pics/amlogo.gif      width100%      height75      border0     alt Application Gateway Home>!-- Enter Message Header -->h1>font color#FF0000>Moved Temporarily/font>/h1>p>!-- Enter Error Message -->The Web resource you have requested has been temporarily moved.BR>BR>BR>!-- Provide Error Explanation -->H4>Explanation/H4>P>The requested resource has been temporarily moved. This usually occurs if there has been a mishandled redirect./P>BR>BR>BR>!-- Provide Possible Solution -->H4>Solutions/H4>P>A HREF/sepas/serve?TAM_OPlogin&USERNAMEunauthenticated&ERROR_CODE0x00000000&URL%2FFIM%2FCGM%2FSHKDEMO%2F.noindex.html&REFERER&PROTOCOLhttps&HTTPHDR_Hostlogin.demo.cesfxhkd.com&HOSTNAMElogin.demo.cesfxhkd.com>Click here/A> to fetch the resource./P>br>br>br>!-- Enter Link -->a href/>none BUTTON/a>/p>/body>/html>

Subdomains

Date	Domain	IP
api.cesfxhkd.com	2024-04-20	18.175.29.248
demo-api.cesfxhkd.com	2024-02-21	35.178.99.76
login.cesfxhkd.com	2024-04-20	3.104.161.167
admin.cesfxhkd.com	2024-04-20	18.135.224.204
login-admin.cesfxhkd.com	2024-04-20	13.54.188.179
demo-admin.cesfxhkd.com	2024-02-21	18.135.224.17
login-demo-admin.cesfxhkd.com	2024-04-12	13.210.193.205
login.demo-admin.cesfxhkd.com	2024-02-21	13.236.64.110
demo.cesfxhkd.com	2024-02-21	18.135.64.232
login.demo.cesfxhkd.com	2024-02-21	13.238.136.204
www.cesfxhkd.com	2024-04-13	52.64.54.59

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > login.demo.cesfxhkd.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains