Domain > cf.15562.sgeosyndirectconnect.ihs.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2024-11-24	18.161.6.71 (ClassC)
2024-12-04	3.163.165.83 (ClassC)
2024-12-21	3.163.165.41 (ClassC)
2025-01-18	3.163.24.37 (ClassC)
2025-04-10	18.161.6.108 (ClassC)
2025-05-03	18.161.6.42 (ClassC)
2025-05-16	3.163.165.11 (ClassC)
2025-07-20	18.161.6.68 (ClassC)
2025-08-28	3.163.165.90 (ClassC)

HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Sun, 24 Nov 2024 15:43:44 GMTContent-Type: text/htmlContent-Length: 915Connection: keep-aliveX-Cache: Error from cloudfrontVia: 1.1 773bf3616e85ce2b187fa7

!DOCTYPE HTML PUBLIC -//W3C//DTD HTML 4.01 Transitional//EN http://www.w3.org/TR/html4/loose.dtd>HTML>HEAD>META HTTP-EQUIVContent-Type CONTENTtext/html; charsetiso-8859-1>TITLE>ERROR: The request could not be satisfied/TITLE>/HEAD>BODY>H1>403 ERROR/H1>H2>The request could not be satisfied./H2>HR noshade size1px>Bad request.We cant connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.BR clearall>If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.BR clearall>HR noshade size1px>PRE>Generated by cloudfront (CloudFront)Request ID: LnaHzr07c1s-C50mtBtooaOIuEMEOXip68aYdGE4GKE1xFyTNUNmJQ/PRE>ADDRESS>/ADDRESS>/BODY>/HTML>

Port 443

HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Sun, 24 Nov 2024 15:43:44 GMTContent-Type: text/htmlContent-Length: 919Connection: keep-aliveX-Cache: Error from cloudfrontVia: 1.1 17d76c2aee343249585a57

!DOCTYPE HTML PUBLIC -//W3C//DTD HTML 4.01 Transitional//EN http://www.w3.org/TR/html4/loose.dtd>HTML>HEAD>META HTTP-EQUIVContent-Type CONTENTtext/html; charsetiso-8859-1>TITLE>ERROR: The request could not be satisfied/TITLE>/HEAD>BODY>H1>403 ERROR/H1>H2>The request could not be satisfied./H2>HR noshade size1px>Request blocked.We cant connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.BR clearall>If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.BR clearall>HR noshade size1px>PRE>Generated by cloudfront (CloudFront)Request ID: DPznRcmeMtTTWShf2aI9YLuIEqfVQucVnKjKm1zlRAagrNEH24Ae3w/PRE>ADDRESS>/ADDRESS>/BODY>/HTML>

Subdomains

Date	Domain	IP
cf.9520.sgeosyndirectconnect.ihs.com	2025-08-18	18.161.6.3
cf.15562.sgeosyndirectconnect.ihs.com	2024-11-24	18.161.6.71
cf.9518.sgeosyndirectconnect.ihs.com	2025-08-17	18.161.6.38

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > cf.15562.sgeosyndirectconnect.ihs.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains