Domain > y3qcivc-anonymous-8081.exp.direct

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-09-24	50.18.3.250 (ClassC)
2025-12-07	13.52.37.12 (ClassC)

Port 443

HTTP/1.1 404 Not FoundConnection: closeContent-Type: text/htmlNgrok-Error-Code: ERR_NGROK_3200Referrer-Policy: no-referrerDate: Sun, 07 Dec 2025 20:30:51 GMTTransfer-Encoding: chunked

!DOCTYPE html>html classh-full langen-US dirltr>  head>    meta charsetutf-8>    meta nameviewport contentwidthdevice-width, initial-scale1>    link relpreload hrefhttps://assets.ngrok.com/fonts/euclid-square/EuclidSquare-Regular-WebS.woff asfont typefont/woff crossoriginanonymous />    link relpreload hrefhttps://assets.ngrok.com/fonts/euclid-square/EuclidSquare-RegularItalic-WebS.woff asfont typefont/woff crossoriginanonymous />    link relpreload hrefhttps://assets.ngrok.com/fonts/euclid-square/EuclidSquare-Medium-WebS.woff asfont typefont/woff crossoriginanonymous />    link relpreload hrefhttps://assets.ngrok.com/fonts/euclid-square/EuclidSquare-MediumItalic-WebS.woff asfont typefont/woff crossoriginanonymous />    link relpreload hrefhttps://assets.ngrok.com/fonts/ibm-plex-mono/IBMPlexMono-Text.woff asfont typefont/woff crossoriginanonymous />    link relpreload hrefhttps://assets.ngrok.com/fonts/ibm-plex-mono/IBMPlexMono-TextItalic.woff asfont typefont/woff crossoriginanonymous />    link relpreload hrefhttps://assets.ngrok.com/fonts/ibm-plex-mono/IBMPlexMono-SemiBold.woff asfont typefont/woff crossoriginanonymous />    link relpreload hrefhttps://assets.ngrok.com/fonts/ibm-plex-mono/IBMPlexMono-SemiBoldItalic.woff asfont typefont/woff crossoriginanonymous />    meta nameauthor contentngrok>    meta namedescription contentngrok is the fastest way to put anything on the internet with a single command.>    link hrefhttps://ngrok.com/assets/favicon.ico relshortcut icon typeimage/x-icon>    meta namerobots contentnoindex, nofollow>    link idstyle relstylesheet hrefhttps://cdn.ngrok.com/static/css/error.css>    noscript>The endpoint y3qcivc-anonymous-8081.exp.direct is offline. (ERR_NGROK_3200)/noscript>    script idscript srchttps://cdn.ngrok.com/static/js/error.js typetext/javascript>/script>  /head>  body classh-full idngrok>    div idroot data-payloadeyJjZG5CYXNlIjoiaHR0cHM6Ly9jZG4ubmdyb2suY29tLyIsImNvZGUiOiIzMjAwIiwibWVzc2FnZSI6IlRoZSBlbmRwb2ludCB5M3FjaXZjLWFub255bW91cy04MDgxLmV4cC5kaXJlY3QgaXMgb2ZmbGluZS4iLCJ0aXRsZSI6Ik5vdCBGb3VuZCJ9>/div>  /body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > y3qcivc-anonymous-8081.exp.direct

Is this malicious?

DNS Resolutions

Port 80

Port 443