Domain > www.lwdown.com

More information on this domain is in AlienVault OTX

Whois

Property	Value
NameServer	NS2.LPDNS.COM
Created	2005-10-20 00:00:00
Changed	2015-12-24 00:00:00
Expires	2016-10-20 00:00:00
Registrar	GODADDY.COM, LLC

DNS Resolutions

Date	IP Address
2019-01-29	69.30.245.28 (ClassC)
2024-08-24	98.126.144.61 (ClassC)
2024-10-24	98.126.144.60 (ClassC)
2025-06-25	67.229.230.245 (ClassC)
2025-07-01	67.229.230.243 (ClassC)
2025-10-08	103.30.77.28 (ClassC)
2026-01-14	54.243.117.197 (ClassC)

Port 80

HTTP/1.1 200 OKContent-Type: text/html; charsetUTF-8Date: Sat, 24 Aug 2024 18:26:04 GMTServer: nginxVary: Accept-EncodingContent-Length: 1085

!DOCTYPE html>html langen>head>    meta charsetUTF-8>    meta nameviewport contentwidthdevice-width, initial-scale1.0>    title>Redirecting···/title>    script>        var targetUrl  https://www.pdsgy.org/;        window.location.replace(targetUrl);    /script>    script charsetUTF-8 idLA_COLLECT src//sdk.51.la/js-sdk-pro.min.js>/script>    script>LA.init({id:KUlq5iAqSoYRWXix,ck:KUlq5iAqSoYRWXix})/script>    script>      var _paq  window._paq  window._paq || ;      /* tracker methods like setCustomDimension should be called before trackPageView */      _paq.push(trackPageView);      _paq.push(enableLinkTracking);      (function() {        var uhttps://mat-tj.beiming22.xyz/;        _paq.push(setTrackerUrl, u+matomo.php);        _paq.push(setSiteId, 48);        var ddocument, gd.createElement(script), sd.getElementsByTagName(script)0;        g.asynctrue; g.srcu+matomo.js; s.parentNode.insertBefore(g,s);      })();    /script>/head>body>/body>/html>

Port 443

HTTP/1.1 200 OKContent-Type: text/html; charsetUTF-8Date: Sat, 24 Aug 2024 18:26:04 GMTServer: nginxVary: Accept-EncodingContent-Length: 1085

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > www.lwdown.com

Is this malicious?

Whois

DNS Resolutions

Port 80

Port 443