Domain > membot.staging.wombatnest.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2024-12-26	3.125.180.14 (ClassC)
2025-02-22	3.71.156.150 (ClassC)
2025-04-01	3.123.235.123 (ClassC)
2025-04-30	3.67.162.75 (ClassC)
2025-08-26	18.194.168.212 (ClassC)
2025-10-26	3.123.86.68 (ClassC)
2025-12-10	18.197.122.75 (ClassC)
2026-01-25	18.158.124.19 (ClassC)

HTTP/1.1 200 OKDate: Thu, 26 Dec 2024 17:28:09 GMTContent-Type: text/html; charsetutf-8Content-Length: 6243Connection: keep-aliveX-Frame-Options: ALLOW-FROMhttps://www.wombatnest.comVary: RSC, Next-Ro

!DOCTYPE html>html langen classtext-foreground bg-background light>head>meta charSetutf-8/>meta nameviewport contentwidthdevice-width, initial-scale1, maximum-scale1, user-scalableno/>link relpreload href/_next/static/media/a34f9d1faa5f3315-s.p.woff2 asfont crossorigin typefont/woff2/>link relstylesheet href/_next/static/css/bbe87494585ee7e2.css data-precedencenext/>link relpreload asscript fetchPrioritylow href/_next/static/chunks/webpack-996936f01bc671f1.js/>script src/_next/static/chunks/618f8807-f0762b73e3fb64e8.js async>/script>script src/_next/static/chunks/3205-6718fffc78b13d8b.js async>/script>script src/_next/static/chunks/main-app-fbcfc4a959e679ab.js async>/script>script src/_next/static/chunks/275-b21e3ef588d5dd5b.js async>/script>script src/_next/static/chunks/2323-36b9c1e60387cda0.js async>/script>script src/_next/static/chunks/app/(backoffice)/layout-672a41132952b1ae.js async>/script>script src/_next/static/chunks/app/layout-eab6411c14b431a2.js async>/script>script src/_next/static/chunks/573-09e51d814fe55138.js async>/script>script src/_next/static/chunks/app/(backoffice)/not-found-06a0c5e50361e49a.js async>/script>meta nametheme-color media(prefers-color-scheme: light) contenthsl(0, 0%, 100%)/>meta nametheme-color media(prefers-color-scheme: dark) contenthsl(240, 10%, 3.9%)/>title>Wombat/title>link relicon href/favicon.ico typeimage/x-icon sizes48x48/>meta namenext-size-adjust/>script src/_next/static/chunks/polyfills-78c92fac7aa8fdd8.js noModule>/script>/head>body classmin-h-screen bg-background font-sans antialiased __variable_d65c78>script>!function(){try{var ddocument.documentElement,cd.classList;c.remove(light,dark);var elocalStorage.getItem(theme);if(systeme||(!e&&true)){var t(prefers-color-scheme: dark),mwindow.matchMedia(t);if(m.media!t||m.matches){d.style.colorScheme  dark;c.add(dark)}else{d.style.colorScheme  light;c.add(light)}}else if(e){c.add(e|| )}if(elight||edark)d.style.colorSchemee}catch(e){}}()/script>div classflex min-h-screen w-full flex-col bg-muted/40>hello there!/div>script

Port 443

HTTP/1.1 200 OKDate: Thu, 26 Dec 2024 17:28:10 GMTContent-Type: text/html; charsetutf-8Content-Length: 6243Connection: keep-aliveX-Frame-Options: ALLOW-FROMhttps://www.wombatnest.comVary: RSC, Next-Ro

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > membot.staging.wombatnest.com

Is this malicious?

DNS Resolutions

Port 80

Port 443