Domain > www.greathawk.vip

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2024-11-24	15.206.152.191 (ClassC)
2025-01-31	3.6.153.193 (ClassC)
2025-04-26	35.154.252.74 (ClassC)
2025-04-29	3.108.110.223 (ClassC)
2025-07-29	13.126.201.142 (ClassC)
2025-08-28	35.154.207.85 (ClassC)
2025-09-06	3.6.120.17 (ClassC)
2025-09-20	3.109.50.174 (ClassC)
2025-09-28	43.205.218.199 (ClassC)
2025-11-23	15.207.131.39 (ClassC)

Port 80

HTTP/1.1 200 OKServer: awselb/2.0Date: Sun, 24 Nov 2024 15:00:48 GMTContent-Length: 1014Connection: keep-aliveContent-Type: text/html

!DOCTYPE html>html>head>    meta charsetUTF-8>    meta http-equivX-UA-Compatible contentIEedge>    meta nameviewport contentwidthdevice-width, initial-scale1.0>    meta charsetutf-8>    title>Hawkplay/title>    link relstylesheet hrefhttps://jvd-autotest.s3.ap-northeast-1.amazonaws.com/geo_forbidden/haw/haw-4f689e0fd34e7ada.css>  link relpreload hrefhttps://jvd-autotest.s3.ap-northeast-1.amazonaws.com/geo_forbidden/haw/forbidden_page-3a0412ae72c0fa87_bg.wasm asfetch typeapplication/wasm crossorigin>link relmodulepreload hrefhttps://jvd-autotest.s3.ap-northeast-1.amazonaws.com/geo_forbidden/haw/forbidden_page-3a0412ae72c0fa87.js>/head>  body>script typemodule>import init from https://jvd-autotest.s3.ap-northeast-1.amazonaws.com/geo_forbidden/haw/forbidden_page-3a0412ae72c0fa87.js;init(https://jvd-autotest.s3.ap-northeast-1.amazonaws.com/geo_forbidden/haw/forbidden_page-3a0412ae72c0fa87_bg.wasm);/script>/body>/html>

Port 443

HTTP/1.1 200 OKServer: awselb/2.0Date: Sun, 24 Nov 2024 15:00:49 GMTContent-Length: 1014Connection: keep-aliveContent-Type: text/html

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > www.greathawk.vip

Is this malicious?

DNS Resolutions

Port 80

Port 443