Domain > tshirtfire.com

More information on this domain is in AlienVault OTX

Whois

Property	Value
Email	AMEER@AMLWORLD.COM
NameServer	NS2.NOCDIRECT.COM
Created	2012-02-28 00:00:00
Changed	2016-07-30 00:00:00
Expires	2017-02-28 00:00:00
Registrar	ENOM, INC.

DNS Resolutions

Date	IP Address
2024-04-02	69.73.182.135 (ClassC)
2025-01-14	74.81.90.155 (ClassC)
2025-04-11	147.79.120.15 (ClassC)
2025-04-29	77.37.76.31 (ClassC)
2025-05-13	148.135.128.149 (ClassC)
2025-06-14	77.37.76.75 (ClassC)
2025-06-26	92.112.198.44 (ClassC)
2025-06-30	147.79.120.188 (ClassC)
2025-07-23	77.37.76.34 (ClassC)
2025-08-14	147.79.120.53 (ClassC)
2025-09-03	147.79.120.233 (ClassC)
2025-09-06	147.79.120.157 (ClassC)
2025-09-28	147.79.120.60 (ClassC)
2025-10-14	92.112.198.216 (ClassC)
2025-10-30	77.37.76.219 (ClassC)
2025-12-05	77.37.76.76 (ClassC)
2026-02-14	148.135.128.37 (ClassC)
2026-02-27	92.112.198.129 (ClassC)

HTTP/1.1 200 OKDate: Tue, 02 Apr 2024 18:27:03 GMTContent-Length: 1479Connection: keep-aliveCache-Control: no-cache, no-store, must-revalidate, max-age0Cache-Control: no-store, max-age0Server: imunify

!doctype html>html langen>head>    meta charsetutf-8>    meta namerobots contentnoindex, nofollow>    title>One moment, please.../title>    style>    body {        background: #F6F7F8;        color: #303131;        font-family: sans-serif;        margin-top: 45vh;        text-align: center;    }    /style>    /head>body>    h1>Please wait while your request is being verified.../h1>    form idwsidchk-form styledisplay:none; action/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f methodGET>    input typehidden idwsidchk namewsidchk/>    /form>    script>    (function(){        var west+((+!+)+(+!++)+(+!+)+(+!++!!+!!+!!+!!+)+(+!++!!+!!+!!+!!+!!+!!+!!)+(+!++!!+!!+!!+)+(+!++!!+!!+!!+!!+!!+!!+!!+!!)+(+!++!!+!!+!!+!!+)),            east+((+!+)+(+!+)+(+!++!!+!!+!!+!!+!!+!!+!!+!!)+(+!++!!+!!+!!+!!+!!+!!+!!+)+(+!)+(+!++!!+)+(+!++!!+!!+!!)),            xfunction(){try{return !!window.addEventListener;}catch(e){return !!0;} },            yfunction(y,z){x() ? document.addEventListener(DOMContentLoaded,y,z) : document.attachEvent(onreadystatechange,y);};        y(function(){            document.getElementById(wsidchk).value  west + east;            document.getElementById(wsidchk-form).submit();        }, false);    })();    /script>/body>/html>

Port 443

HTTP/1.1 200 OKDate: Tue, 02 Apr 2024 18:27:03 GMTContent-Length: 1447Connection: keep-aliveCache-Control: no-cache, no-store, must-revalidate, max-age0Cache-Control: no-store, max-age0Server: imunify

!doctype html>html langen>head>    meta charsetutf-8>    meta namerobots contentnoindex, nofollow>    title>One moment, please.../title>    style>    body {        background: #F6F7F8;        color: #303131;        font-family: sans-serif;        margin-top: 45vh;        text-align: center;    }    /style>    /head>body>    h1>Please wait while your request is being verified.../h1>    form idwsidchk-form styledisplay:none; action/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f methodGET>    input typehidden idwsidchk namewsidchk/>    /form>    script>    (function(){        var west+((+!++!!+!!)+(+!++!!+)+(+!++!!+!!+!!+!!)+(+!++!!+!!+)+(+!++!!+!!+!!+!!+!!+!!)+(+!+)+(+!)),            east+((+!++!!)+(+!++!!+!!+!!+!!+)+(+!++!!+!!+!!+!!+!!)+(+!++!!+!!+!!+!!+!!+!!+!!+!!+)+(+!)+(+!++!!+!!+!!+!!+!!+!!+)+(+!++!!+!!)),            xfunction(){try{return !!window.addEventListener;}catch(e){return !!0;} },            yfunction(y,z){x() ? document.addEventListener(DOMContentLoaded,y,z) : document.attachEvent(onreadystatechange,y);};        y(function(){            document.getElementById(wsidchk).value  west + east;            document.getElementById(wsidchk-form).submit();        }, false);    })();    /script>/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > tshirtfire.com

Is this malicious?

Whois

DNS Resolutions

Port 80

Port 443