Domain > payments.heyforex.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2021-01-23	143.204.217.121 (ClassC)
2025-04-18	104.21.77.185 (ClassC)
2025-11-11	172.67.210.242 (ClassC)

HTTP/1.1 200 OKDate: Sun, 18 Aug 2024 09:46:57 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-alivelast-modified: Fri, 16 Aug 2024 09:33:16 GMTaccept-ranges: bytesx-envoy-upstrea

!DOCTYPE html>html langen>  head>    meta charsetutf-8 />    meta nameviewport contentwidthdevice-width, initial-scale1 />    meta nametheme-color content#000000 />    link      relstylesheet      hrefhttps://stackpath.bootstrapcdn.com/bootstrap/4.3.1/css/bootstrap.min.css      integritysha384-ggOyR0iXCbMQv3Xipma34MD+dH/1fQ784/j6cY/iJTQUOhcWr7x9JvoRxT2MZw1T      crossoriginanonymous />    link      relstylesheet      hrefhttps://use.fontawesome.com/releases/v5.8.2/css/all.css      integritysha384-oS3vJWv+0UjzBfQzYUhtDYW+Pj2yciDJxpsK1OYPAYjqT085Qq/1cq5FLXAZQ7Ay      crossoriginanonymous />    link      relstylesheet      hrefhttps://use.fontawesome.com/releases/v5.8.2/css/all.css      integritysha384-oS3vJWv+0UjzBfQzYUhtDYW+Pj2yciDJxpsK1OYPAYjqT085Qq/1cq5FLXAZQ7Ay      crossoriginanonymous />    script      typetext/javascript      srchttps://cloudfront.loggly.com/js/loggly.tracker-latest.min.js      async>/script>    title>Loading.../title>    script typemodule crossorigin src/assets/index-DJPxmdei.js>/script>    link relstylesheet crossorigin href/assets/index-_jmDRd-7.css>  /head>  body>    noscript>You need to enable JavaScript to run this app./noscript>    div idroot>/div>  /body>/html>

Subdomains

Date	Domain	IP
clients.heyforex.com	2024-07-14	172.67.210.242
payments.heyforex.com	2025-04-18	104.21.77.185
support.heyforex.com	2025-11-02	162.159.140.147

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > payments.heyforex.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains