Domain > rs.dev-sky.heyblu.ro

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-02-06	3.68.127.222 (ClassC)
2025-09-11	3.121.197.117 (ClassC)
2025-10-05	3.75.31.251 (ClassC)
2025-10-30	18.158.180.245 (ClassC)
2025-11-24	18.194.23.92 (ClassC)

HTTP/1.1 405 Not AllowedDate: Thu, 11 Sep 2025 04:32:34 GMTContent-Length: 2101Connection: keep-alivex-amzn-waf-action: captchaCache-Control: no-store, max-age0Content-Type: text/html; charsetUTF-8Acc

!DOCTYPE html>html langen>head>    meta charsetutf-8>    meta nameviewport contentwidthdevice-width, initial-scale1>    title>Human Verification/title>    style>        body {            font-family: Arial;        }    /style>    script typetext/javascript>    window.awsWafCookieDomainList  ;    window.gokuProps  {key:AQIDAHjcYu/GjX+QlghicBgQ/7bFaQZ+m5FKCMDnO+vTbNg96AHl4wK6AI8rlqhXdkdEnVIyAAAAfjB8BgkqhkiG9w0BBwagbzBtAgEAMGgGCSqGSIb3DQEHATAeBglghkgBZQMEAS4wEQQMdZ7vmd6jhlh2DpMqAgEQgDsB55ISwg8hkFj8sR2r0Kpej3PYtWdhUS/mMOv1cvpOXQKNYfOFXdH2GhV7nSkLPlQq0d4Tg/Uxpw9NsA,          iv:CgAG+Ru06AAAAF5X,          context:9XbSDzdVDKfBZ8ovbC2l0qnBtNGFHE3Jy+5vM3u7/pUumyGjxslViECBx/l75PHIXejp2e68ZORomRPz//D3t9aaPvuwdxjahShz8UEXeq8mlXJuW/DX8E1+Bwty3XzK/kVSWgY/P78fpNbrqMHoH9hGSjABi8/5mk7fSFiABcpe4re7vTIyrsUe5nZ4ZSSKA7RCSFkGB071fQQjrwVY670UAiMfpTOZsiHe5Fuw4JzpEbsN6R/syRsEL59prfdw02TdJRsdENpdfU59eK3DjyxUaxlWoz1em+EJlV3kvBzR1jrPeX/1iDDtWHUrt1fyrf88uxs+wYo5MUpXFM37ULeN2+ANYzoeOZj0OS1mCqJUk3I};    /script>    script srchttps://444e03bc05c2.d0c7a26b.eu-central-1.token.awswaf.com/444e03bc05c2/ec22e7852317/4ff27310ce8e/challenge.js>/script>    script srchttps://444e03bc05c2.d0c7a26b.eu-central-1.captcha.awswaf.com/444e03bc05c2/ec22e7852317/4ff27310ce8e/captcha.js>/script>/head>body>    div idcaptcha-container>/div>    script typetext/javascript>        AwsWafIntegration.saveReferrer();        window.addEventListener(load, function() {          const container  document.querySelector(#captcha-container);          CaptchaScript.renderCaptcha(container, async (voucher) > {              await ChallengeScript.submitCaptcha(voucher);              window.location.reload(true);          }      );    });    /script>    noscript>        h1>JavaScript is disabled/h1>        In order to continue, you need to verify that youre not a robot by solving a CAPTCHA puzzle.         The CAPTCHA puzzle requires JavaScript. Enable JavaScript and then reload the page.    /noscript>/body>/html>

Port 443

HTTP/1.1 405 Not AllowedDate: Thu, 11 Sep 2025 04:32:35 GMTContent-Length: 2101Connection: keep-alivex-amzn-waf-action: captchaCache-Control: no-store, max-age0Content-Type: text/html; charsetUTF-8Acc

!DOCTYPE html>html langen>head>    meta charsetutf-8>    meta nameviewport contentwidthdevice-width, initial-scale1>    title>Human Verification/title>    style>        body {            font-family: Arial;        }    /style>    script typetext/javascript>    window.awsWafCookieDomainList  ;    window.gokuProps  {key:AQIDAHjcYu/GjX+QlghicBgQ/7bFaQZ+m5FKCMDnO+vTbNg96AHl4wK6AI8rlqhXdkdEnVIyAAAAfjB8BgkqhkiG9w0BBwagbzBtAgEAMGgGCSqGSIb3DQEHATAeBglghkgBZQMEAS4wEQQMdZ7vmd6jhlh2DpMqAgEQgDsB55ISwg8hkFj8sR2r0Kpej3PYtWdhUS/mMOv1cvpOXQKNYfOFXdH2GhV7nSkLPlQq0d4Tg/Uxpw9NsA,          iv:CgAG9hvOpgAAA9TN,          context:O+7n2jbt/BxbVI4+iEB6V2Fb9oX+XTL7gvXPnvI+4QEEhv27XsjCuHfRWzs/CCUhpTi5m82YjO4U8zZ1kKbDoBSCtRfK9EQoYmiwvCiQoQt5CR3Z0V7LcwE1TgtxeZ2xhtGoBRq4Pl+CwV+SEf8BuQW5U/wv61ohI99BL4OgyGHfMjHZ5/nVyyXVzNIt3BKbxnglObXKLBCj0qzA+7dSVSEkAITNaWXRbzC20oYs442D+vcK4f6noEGzOAvPqn9vP/zWh3lH3CD+dW10oSGzeC2Cgij62eu4ocJLtkZZYsqjkPWk12OoRuJXk4wXYvh1twetsaCEYlQs+voXlAOuT2P2XLGyp/6P++TPIxyRiUbsqqk};    /script>    script srchttps://444e03bc05c2.d0c7a26b.eu-central-1.token.awswaf.com/444e03bc05c2/ec22e7852317/4ff27310ce8e/challenge.js>/script>    script srchttps://444e03bc05c2.d0c7a26b.eu-central-1.captcha.awswaf.com/444e03bc05c2/ec22e7852317/4ff27310ce8e/captcha.js>/script>/head>body>    div idcaptcha-container>/div>    script typetext/javascript>        AwsWafIntegration.saveReferrer();        window.addEventListener(load, function() {          const container  document.querySelector(#captcha-container);          CaptchaScript.renderCaptcha(container, async (voucher) > {              await ChallengeScript.submitCaptcha(voucher);              window.location.reload(true);          }      );    });    /script>    noscript>        h1>JavaScript is disabled/h1>        In order to continue, you need to verify that youre not a robot by solving a CAPTCHA puzzle.         The CAPTCHA puzzle requires JavaScript. Enable JavaScript and then reload the page.    /noscript>/body>/html>

Subdomains

Date	Domain	IP
auth.dev-sky.heyblu.ro	2024-11-24	3.75.45.112
api.dev-sky.heyblu.ro	2024-11-24	52.28.241.83
cos.dev-sky.heyblu.ro	2025-08-24	3.77.191.222
rs.dev-sky.heyblu.ro	2025-09-11	3.121.197.117
mdw.dev-sky.heyblu.ro	2024-11-24	18.157.96.39

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > rs.dev-sky.heyblu.ro

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains