Domain > whitelabel.khv.aero

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-03-07	18.219.61.107 (ClassC)
2025-04-27	18.188.220.34 (ClassC)
2026-02-11	3.132.35.111 (ClassC)

HTTP/1.1 200 OKdate: Tue, 03 Dec 2024 10:09:49 GMTcontent-type: text/html; charsetutf-8transfer-encoding: chunkedvary: Accept-Encodingvary: Accept-Encodingx-request-id: c5fcfeafd9a5bc79e8d076fbb505345

!DOCTYPE html>html>  head>    script>      dataLayer          {pageCategory: front}      ;    /script>    script>      window.GEOIP  {        city: {          iata: PSC,          name: Pasco        },        country: {          iata: US,          name: United States        },        country_code: US,        coordinates: {          lat: 46.259094,          lon: -119.1152        },        currency: USD,        timezone: America/Los_Angeles        };    /script>    script>      (function(w,d,s,l,i) {        wlwl||;        wl.push({          gtm.start: new Date().getTime(),          event: gtm.js        });        var fd.getElementsByTagName(s)0,            jd.createElement(s),            dll!dataLayer?&l+l:;        j.asynctrue;        j.srchttps://www.googletagmanager.com/gtm.js?id+i+dl;        f.parentNode.insertBefore(j,f);      })(window,document,script,dataLayer,GTM-M47KB56);    /script>    script data-cfasyncfalse>      window.TPWLCONFIG  {       color_scheme: {         body_bg: #EEEEEE,         bg: #FFD64F,         text_contrast: #000,         link: #E9A310,         border: ,         text_interesting: ,         btn_text: #FFF,         btn_bg: #2F3538       },       hotel: {         name:        },       default_origin: {         iata: KHV       },       default_destination: {         iata:        },       language: ru,       currency: rub,       engine_type: combined,       host: whitelabel.khv.aero,       active_tab: flight,       affiliate: {         marker: 406813       },       show_hotels: true,       powered_by: true     };      window.TPWLCONFIG.pageLoaded  false;      document.addEventListener(        DOMContentLoaded,        function() {          window.TPWLCONFIG.pageLoaded  true        })    /script>    link relpreload href/widgets/whitelabel_ru.js?v002&rtlfalse&localeru asscript           onloadwindow.MewtwoIsLoaded  true>    link relpreload href/main.ru.js asscript>    script data-cfasyncfalse src/main.ru.js async>/script>    link relpreload href/main.css asstyle           onloadthis.relst

Port 443

HTTP/1.1 200 OKdate: Tue, 03 Dec 2024 10:09:50 GMTcontent-type: text/html; charsetutf-8transfer-encoding: chunkedvary: Accept-Encodingvary: Accept-Encodingx-request-id: 9c6cd5591c7499c7f42b5f0553ec78e

Subdomains

Date	Domain	IP
mail1.khv.aero	2025-10-16	86.62.74.226
whitelabel.khv.aero	2025-03-07	18.219.61.107
tss.khv.aero	2025-05-19	86.62.74.230
www.khv.aero	2025-05-13	185.114.246.105

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > whitelabel.khv.aero

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains