Domain > protect.fanshield.insure

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2019-04-18	52.84.31.21 (ClassC)
2019-04-18	52.84.31.3 (ClassC)
2019-08-05	13.226.38.41 (ClassC)
2024-11-23	3.163.24.46 (ClassC)
2025-03-20	3.163.24.8 (ClassC)
2025-04-11	3.163.24.51 (ClassC)
2025-04-20	3.175.34.10 (ClassC)
2025-05-22	99.86.38.117 (ClassC)
2025-05-27	99.86.38.80 (ClassC)
2025-07-09	3.175.34.75 (ClassC)
2025-07-20	3.175.34.72 (ClassC)
2025-09-15	99.84.66.106 (ClassC)
2025-12-23	3.169.173.18 (ClassC)
2026-01-20	3.169.173.123 (ClassC)

HTTP/1.1 200 OKContent-Type: text/htmlContent-Length: 1473Connection: keep-aliveLast-Modified: Mon, 17 Apr 2023 04:11:52 GMTx-amz-version-id: sSoeICzh2w6Lzv3SqRpj9y6XcpLopXbeServer: AmazonS3Date: Sat,

!DOCTYPE html>html>  head>    meta charsetUTF-8 />    title>Redirecting.../title>    script>      // Define the redirection URLs for each domain      const redirections  {        cancellation.fanshield.insure:          https://refund.support/fanshield/cancellation,        protect.fanshield-sandbox.insure: https://protecht.com/purchase,        protect.fanshield.insure: https://protecht.com/purchase,        cancellation.fanshield.net:          https://refund.support/fanshield/cancellation,        refund.fanshield.net: https://refund.support/fanshield/refund,        refundrequest.fanshield.net:          https://refund.support/fanshield/refund,        claims.ticketguardian.net: https://refund.support/fanshield/refund,        protect.ticketguardian.net: https://protecht.com/purchase,        purchase.ticketguardian.net: https://protecht.com/purchase,      };      // Get the current domain from the window location      const currentDomain  window.location.hostname;      // Redirect to the appropriate URL based on the current domain      if (redirectionscurrentDomain) {        window.location.href  redirectionscurrentDomain;      } else {        // Redirect to a default URL if the current domain is not found in the redirections object        // window.location.href  https://default.com;      }    /script>  /head>  body>    h1>Redirecting.../h1>  /body>/html>

Subdomains

Date	Domain	IP
cancellation.fanshield.insure	2023-12-06	204.246.191.17
claims.fanshield.insure	2024-12-23	204.246.191.8
protect.fanshield.insure	2024-11-23	3.163.24.46
www.fanshield.insure	2024-08-10	3.163.24.112

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > protect.fanshield.insure

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains