Domain > refundrequest.fanshield.net

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2020-02-11	13.227.43.121 (ClassC)
2020-02-19	13.249.79.7 (ClassC)
2020-02-19	13.226.129.23 (ClassC)
2020-03-18	13.225.54.115 (ClassC)
2020-03-18	13.225.54.116 (ClassC)
2020-03-18	13.225.54.3 (ClassC)
2020-04-15	13.35.99.78 (ClassC)
2020-05-10	143.204.35.109 (ClassC)
2024-02-11	65.8.161.33 (ClassC)
2024-08-01	99.84.66.33 (ClassC)
2024-09-01	204.246.191.49 (ClassC)
2024-09-24	204.246.191.20 (ClassC)
2025-03-17	18.238.217.110 (ClassC)
2025-04-17	204.246.191.4 (ClassC)
2025-07-08	204.246.191.25 (ClassC)
2026-01-10	3.169.173.11 (ClassC)
2026-01-25	3.169.173.18 (ClassC)
2026-03-01	3.169.173.105 (ClassC)

HTTP/1.1 200 OKContent-Type: text/htmlContent-Length: 2052Connection: keep-aliveDate: Tue, 09 Jan 2024 09:52:17 GMTLast-Modified: Tue, 25 Apr 2023 15:30:54 GMTx-amz-version-id: 1m2dRHsQcLP0a06iFW51QfV

!DOCTYPE html>html>  head>    meta charsetUTF-8 />    title>Redirecting.../title>    script>      // Define the redirection URLs for each domain      const redirections  {        refund.support:          https://requestmyrefund.com/fanshield/cancellation,        cancellation.fanshield.insure:          https://requestmyrefund.com/fanshield/cancellation,        claims.fanshield.insure:          https://requestmyrefund.com/fanshield/refund,        protect.fanshield-sandbox.insure: https://protecht.com/purchase,        protect.fanshield.insure: https://protecht.com/purchase,        cancellation.fanshield.net:          https://requestmyrefund.com/fanshield/cancellation,        refund.fanshield.net: https://requestmyrefund.com/fanshield/refund,        refundrequest.fanshield.net:          https://requestmyrefund.com/fanshield/refund,        claims.ticketguardian.net:          https://requestmyrefund.com/fanshield/refund,        www.fanshield.insure: https://requestmyrefund.com/fanshield/refund,        www.fanshield.net: https://requestmyrefund.com/fanshield/refund,        fanshield.insure: https://requestmyrefund.com/fanshield/refund,        fanshield.net: https://requestmyrefund.com/fanshield/refund,        protect.ticketguardian.net: https://protecht.com/purchase,        purchase.ticketguardian.net: https://protecht.com/purchase,      };      // Get the current domain from the window location      const currentDomain  window.location.hostname;      // Redirect to the appropriate URL based on the current domain      if (currentDomain  refund.support) {      } else if (redirectionscurrentDomain) {        window.location.href  redirectionscurrentDomain;      } else {        // Redirect to a default URL if the current domain is not found in the redirections object        // window.location.href  https://default.com;      }    /script>  /head>  body>    h1>Redirecting.../h1>  /body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > refundrequest.fanshield.net

Is this malicious?

DNS Resolutions

Port 80

Port 443