Domain > secure-wellsfargo.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2014-09-01	218.32.65.131 (ClassC)
2015-05-12	103.224.182.226 (ClassC)
2026-01-05	104.21.36.138 (ClassC)

HTTP/1.1 403 ForbiddenDate: Wed, 21 May 2025 14:18:12 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: keep-aliveX-Frame-Options: SAMEORIGINReport-To: {endpoints:{url:http

!DOCTYPE html>!--if lt IE 7> html classno-js ie6 oldie langen-US> !endif-->!--if IE 7>    html classno-js ie7 oldie langen-US> !endif-->!--if IE 8>    html classno-js ie8 oldie langen-US> !endif-->!--if gt IE 8>!--> html classno-js langen-US> !--!endif-->head>title>Suspected phishing site | Cloudflare/title>meta charsetUTF-8 />meta http-equivContent-Type contenttext/html; charsetUTF-8 />meta http-equivX-UA-Compatible contentIEEdge />meta namerobots contentnoindex, nofollow />meta nameviewport contentwidthdevice-width,initial-scale1 />link relstylesheet idcf_styles-css href/cdn-cgi/styles/cf.errors.css />!--if lt IE 9>link relstylesheet idcf_styles-ie-css href/cdn-cgi/styles/cf.errors.ie.css />!endif-->style>body{margin:0;padding:0}/style>!--if gte IE 10>!-->script>  if (!navigator.cookieEnabled) {    window.addEventListener(DOMContentLoaded, function () {      var cookieEl  document.getElementById(cookie-alert);      cookieEl.style.display  block;    })  }/script>!--!endif-->/head>body>  div idcf-wrapper>    div classcf-alert cf-alert-error cf-cookie-error idcookie-alert data-translateenable_cookies>Please enable cookies./div>    div idcf-error-details classcf-error-details-wrapper>      div classcf-section cf-wrapper stylemargin-top: 100px;margin-bottom:200px;>        div classcf-columns one>          div classcf-column>            h4 classcf-text-error>i classcf-icon-exclamation-sign stylebackground-size: 18px;              height: 18px;              width: 18px;              margin-bottom: 2px;>/i> Warning/h4>                          h2 stylemargin: 16px 0;>Suspected Phishing/h2>              strong>This website has been reported for potential phishing./strong>              p>Phishing is when a site attempts to steal sensitive information by falsely presenting as a safe source./p>                        div styledisplay: flex; align-items: center;>               p>                                    a hrefhttps://www.cloudflare.com/learning/access-management/phishing-attack/ classcf-btn stylebackground-color:

Port 443

HTTP/1.1 403 ForbiddenDate: Wed, 21 May 2025 14:18:12 GMTContent-Type: text/html; charsetutf-8Transfer-Encoding: chunkedConnection: keep-aliveReport-To: {group:cf-nel,max_age:604800,endpoints:{url:htt

!DOCTYPE html>!--if lt IE 7>html classno-js ie6 oldie langen-US> !endif-->!--if IE 7>html classno-js ie7 oldie langen-US> !endif-->!--if IE 8>html classno-js ie8 oldie langen-US> !endif-->!--if gt IE 8>!-->html classno-js langen-US> !--!endif-->head>  title>Suspected phishing site | Cloudflare/title>  meta charsetUTF-8 />meta http-equivContent-Type contenttext/html; charsetUTF-8 />meta http-equivX-UA-Compatible contentIEEdge />meta namerobots contentnoindex, nofollow />meta nameviewport contentwidthdevice-width,initial-scale1 />link relstylesheet idcf_styles-css href/cdn-cgi/styles/cf.errors.css />!--if lt IE 9>link relstylesheet idcf_styles-ie-css href/cdn-cgi/styles/cf.errors.ie.css />!endif-->style>body{margin:0;padding:0}/style>!--if gte IE 10>!-->script>  if (!navigator.cookieEnabled) {    window.addEventListener(DOMContentLoaded, function () {      var cookieEl  document.getElementById(cookie-alert);      cookieEl.style.display  block;    })  }/script>!--!endif-->  script srchttps://challenges.cloudflare.com/turnstile/v0/api.js async defer>/script>  script>    function onTurnstileSuccess(token) {      document.getElementById(bypass-button).disabled  false;    }  /script>/head>body>  div idcf-wrapper>    div classcf-alert cf-alert-error cf-cookie-error idcookie-alert data-translateenable_cookies>Please enable      cookies.    /div>    div idcf-error-details classcf-error-details-wrapper>      div classcf-section cf-wrapper stylemargin-top: 100px;margin-bottom:200px;>        div classcf-columns one>          div classcf-column>            h4 classcf-text-error>i classcf-icon-exclamation-sign stylebackground-size: 18px;              height: 18px;              width: 18px;              margin-bottom: 2px;>/i> Warning/h4>                        h2 stylemargin: 16px 0;>Suspected Phishing/h2>            strong>This website has been reported for potential phishing./strong>            p>Phishing is when a site attempts to steal sensitive information by falsely presenting as a safe source.            /p>

Subdomains

Date	Domain	IP
online.secure-wellsfargo.com	2025-08-14	104.21.36.138
signon.secure-wellsfargo.com	2025-09-12	104.21.36.138
www.secure-wellsfargo.com	2025-05-26	104.21.36.138

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > secure-wellsfargo.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains