Domain > windowspromos.com

More information on this domain is in AlienVault OTX

Whois

Property	Value
Email	owner-10778369@windowspromos.com.whoisprivacyservice.org
NameServer	NS-1578.AWSDNS-05.CO.UK
Created	2018-07-20 15:32:33
Changed	2020-06-15 22:07:42
Registrar	Amazon Registrar, In

DNS Resolutions

Date	IP Address
2019-04-25	54.230.163.10 (ClassC)
2019-04-25	54.230.163.55 (ClassC)
2019-04-25	54.230.163.97 (ClassC)
2019-05-15	54.192.146.203 (ClassC)
2019-05-15	54.192.146.11 (ClassC)
2019-07-25	54.230.89.2 (ClassC)
2020-06-27	99.84.206.32 (ClassC)
2020-06-27	99.84.206.58 (ClassC)
2020-10-18	65.8.221.103 (ClassC)
2020-10-18	65.8.221.106 (ClassC)
2021-02-23	99.84.79.112 (ClassC)
2024-02-13	18.172.170.88 (ClassC)
2024-05-23	3.163.189.66 (ClassC)
2024-12-30	3.163.189.100 (ClassC)
2025-02-23	18.172.170.13 (ClassC)
2025-03-09	3.163.189.4 (ClassC)
2025-03-16	18.161.6.122 (ClassC)
2025-03-25	18.161.6.119 (ClassC)
2025-06-15	3.163.189.105 (ClassC)
2025-06-26	18.161.6.59 (ClassC)
2025-07-15	18.161.6.75 (ClassC)
2025-10-24	3.169.173.91 (ClassC)
2026-01-13	3.169.173.45 (ClassC)
2026-01-19	3.169.173.118 (ClassC)

HTTP/1.1 200 OKContent-Type: text/htmlContent-Length: 20358Connection: keep-alivex-amz-id-2: 5dfSlF+zZrd+o1tsQpqxVe+SODrW49Swq0ktmhIBSsndnYN6nVOpIaSYg0+yEmsur+JIH+lrFs0x-amz-request-id: 9827F8B3CB9347

!DOCTYPE html>html langen>head>script>window.heapwindow.heap||,heap.loadfunction(e,t){window.heap.appide,window.heap.configtt||{};var rt.forceSSL||https:document.location.protocol,adocument.createElement(script);a.typetext/javascript,a.async!0,a.src(r?https::http:)+//cdn.heapanalytics.com/js/heap-+e+.js;var ndocument.getElementsByTagName(script)0;n.parentNode.insertBefore(a,n);for(var ofunction(e){return function(){heap.push(e.concat(Array.prototype.slice.call(arguments,0)))}},paddEventProperties,addUserProperties,clearEventProperties,identify,resetIdentity,removeEventProperty,setEventProperties,track,unsetEventProperty,c0;cp.length;c++)heappco(pc)};var heapIsDevEnvwindow.location.host.match(new RegExp((+qa.,staging.,localhost,.local,0-9{1,3}.0-9{1,3}.0-9{1,3}.0-9{1,3}.join(|)+),i));heap.load(heapIsDevEnv?3986615799:3246578271),{supportedParams:formpath,projectid,supportedTrackingParams:src,sub_id,sub2_id,pub_id,account,campaign,ad_group,keyword,campaignid,adgroupid,agid,keywordid,loc1,loc2,kw,gclid,utm_campaign,utm_source,utm_medium,utm_term,utm_content,program,motivation,isThankyouPage:-1window.location.href.split(?)0.indexOf(thankyou),trackingParamsTranslations:{projectid:project_id,formpath:form_path},getUrlParamsLC:function(){var results{},urlwindow.location.href.replace(window.location.hash,);if(-1url.indexOf(?))for(var pairsurl.substring(url.indexOf(?)+1).split(&),i0;ipairs.length;i++)if(pairsi){var pairpairsi.split(),namedecodeURIComponent(pair0).toLowerCase(),valuevoid 0!pair1?decodeURIComponent(pair1.replace(/+/g,%20)):null;void 0resultsname&&(resultsnamevalue)}return results},getCurrentPageTrade:function(pageUrl){var tradenull,urlSubstringToTrade{window:windows,solar:solar,hvac:hvac,roof:roofing,siding:siding};pageUrl||(pageUrlwindow.location.pathname),pageUrlpageUrl.split(/);outerLoop:for(var i1;ipageUrl.length;i++)for(var substr in urlSubstringToTrade)if(urlSubstringToTrade.hasOwnProperty(substr)){if(-1pageUrli.indexOf(substr)){tradeurlSubstringToTradesubstr;break outerLoop}tradegeneral}return trade}

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > windowspromos.com

Is this malicious?

Whois

DNS Resolutions

Port 80

Port 443