Domain > theseoffersforyou.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2018-07-05	52.3.9.187 (ClassC)
2019-04-19	52.5.11.69 (ClassC)
2023-08-15	34.236.189.32 (ClassC)
2023-11-01	54.81.121.104 (ClassC)
2023-11-13	44.208.238.74 (ClassC)
2023-12-25	54.85.125.183 (ClassC)
2024-05-15	107.20.247.191 (ClassC)
2024-05-26	23.23.226.22 (ClassC)
2024-07-27	107.22.219.51 (ClassC)
2024-08-14	54.162.170.72 (ClassC)
2024-09-02	54.173.233.145 (ClassC)
2024-11-24	52.22.248.253 (ClassC)
2024-12-12	18.209.128.238 (ClassC)
2024-12-26	34.196.237.41 (ClassC)
2025-06-25	35.172.90.210 (ClassC)
2025-08-20	54.208.35.153 (ClassC)
2025-08-30	3.227.145.232 (ClassC)
2025-09-01	34.234.48.87 (ClassC)
2026-01-19	34.198.11.150 (ClassC)

HTTP/1.1 200 OKDate: Tue, 15 Aug 2023 19:43:13 GMTContent-Type: text/htmlContent-Length: 2949Connection: keep-aliveServer: nginxLast-Modified: Fri, 22 Jun 2018 12:07:08 GMTVary: Accept-EncodingETag: 5

!DOCTYPE html>html>head>    meta namehttp-equiv contentContent-type: text/html; charsetUTF-8>    link href/images/favicon.ico relicon typeimage/x-icon/>    script typetext/javascript srchttps://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js>/script>    script srchttps://www.gstatic.com/firebasejs/5.0.2/firebase-app.js>/script>    script srchttps://www.gstatic.com/firebasejs/5.0.2/firebase-messaging.js>/script>    script srchttps://statisticresearch.com/user-segments/?pidTH>/script>    script src/pushjs/1.0.0/config/lang-config.js charsetutf-8>/script>    script src/pushjs/1.0.0/subscriber.js>/script>	!--START - Initialization block-->	!--This is a required block-->	script>		var _push  {			//Additional parameters, you can change			urlParams: {				//cid: 1, // campaignId				s1: , //parameters for macros of click urls				s2: , //parameters for macros of click urls				ext: 1 //If a double subscription from an external domain, set the value to 1			}		};		var successUrl  ; //redirect url on success, you can change		var deniedUrl  ; //redirect url on failure, you can change		var conversionUrl  ; //conversion url on success, you can change	/script>	!--END - Initialization block-->	style>		body {			margin: 0;			padding: 0;			width: 100%;			height: 100%;		}		body, html {			height: 100%;			overflow: hidden;		}		.subscribe-helper-text {			margin-top: 18%;			text-align: center;			font-family: Lato,sans-serif;			font-size: 20px;			padding: 20px 20px 0px 20px;		}		.subscribe-helper-text p {			margin-top: 10px;		}		.image-wrapper {			width: 118px;			margin: 10px auto;		}		.branding-logo {			max-width: 100%;		}		.hide{			display: none;		}		footer{			text-align: center;			position: absolute;			bottom: 10px;			width: 100%;			margin-top:10px;		}	/style>/head>body>div classsubscribe-helper-text>    script>        var params  getUrlParams();        var styleConfig  getLangConf(en);        if (typeof params ! undefined) {            if (params.cid && langConfigMap.has(params.cid)) {                styleConfig  langConflangCon

Port 443

HTTP/1.1 200 OKDate: Tue, 15 Aug 2023 19:43:14 GMTContent-Type: text/htmlContent-Length: 2949Connection: keep-aliveServer: nginxLast-Modified: Fri, 22 Jun 2018 12:07:08 GMTVary: Accept-EncodingETag: 5

Subdomains

Date	Domain	IP
sub.theseoffersforyou.com	2024-11-09	54.209.60.26
www.theseoffersforyou.com	2023-11-01	18.204.74.179
zyx.theseoffersforyou.com	2024-12-26	18.209.128.238
zxy.theseoffersforyou.com	2024-08-23	54.211.39.25
www.xyz.theseoffersforyou.com	2024-09-14	44.218.155.210

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > theseoffersforyou.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains