Report - trk.klclick3.com/ls/click?upn=BBgzYwamqAreRSeIAhOu8-2BkLZ1eJcrnOzBtwCJzL6mkDEbgsE0i5VqRWrRmk5CfWZ8trO9TkxVpBnkMwmcBn6Ck0OIX1oBrM0OkPEQMI2kMrb93pbJr2MvevkU-2Bl4ruLrglMVWP1we9vjUAMCAjIT-2B6y13eVjkb8r9avxy3zraI-3DolLv_VLyY2fgnviM2rfF1xX5zOLfGNyyjFx60kMgtyVPD7aOS5hWxPKjY7arovn-2FKRw6jt7FsfMVlReUXY10fT7IYcrifl-2FtUQN0ovYQLiUmYlvnDfpfrWZefooriuUN3QyM7A4iU2qIvBn1p2mZrt6gsYAr0LZPdpAMQY7tF9GR4dGCoelPvfrdRYimoKCXOYGjzCRQzU2LJqJlEzHBMWbmrtb0Iq25EdIYKxaBwL7dylv9cPh6qoP5mAJdUUmkdBXNjAUpNWW8stn-2Fob7Jevjm0q85uh-2BB3Miw4hOmHggJDXmTbwehg1pvB4HLeJXztcDAl9Seio64YmS1HYeLMVJASbPYAm7-2FO637U3Ee4c4QLLvNBNZDAo7ddPpCOiwjI55CBYr3gYOeYe3-2BL1a2tqE7XZfZwT9I9zthKqScL-2FnTtXAItC-2FqkEGsNrGmN-2BQewsG9DvcwvfM1x07z7WMQghayPow-3D-3D

Report Overview

Submitted URL
trk.klclick3.com/ls/click?upn=BBgzYwamqAreRSeIAhOu8-2BkLZ1eJcrnOzBtwCJzL6mkDEbgsE0i5VqRWrRmk5CfWZ8trO9TkxVpBnkMwmcBn6Ck0OIX1oBrM0OkPEQMI2kMrb93pbJr2MvevkU-2Bl4ruLrglMVWP1we9vjUAMCAjIT-2B6y13eVjkb8r9avxy3zraI-3DolLv_VLyY2fgnviM2rfF1xX5zOLfGNyyjFx60kMgtyVPD7aOS5hWxPKjY7arovn-2FKRw6jt7FsfMVlReUXY10fT7IYcrifl-2FtUQN0ovYQLiUmYlvnDfpfrWZefooriuUN3QyM7A4iU2qIvBn1p2mZrt6gsYAr0LZPdpAMQY7tF9GR4dGCoelPvfrdRYimoKCXOYGjzCRQzU2LJqJlEzHBMWbmrtb0Iq25EdIYKxaBwL7dylv9cPh6qoP5mAJdUUmkdBXNjAUpNWW8stn-2Fob7Jevjm0q85uh-2BB3Miw4hOmHggJDXmTbwehg1pvB4HLeJXztcDAl9Seio64YmS1HYeLMVJASbPYAm7-2FO637U3Ee4c4QLLvNBNZDAo7ddPpCOiwjI55CBYr3gYOeYe3-2BL1a2tqE7XZfZwT9I9zthKqScL-2FnTtXAItC-2FqkEGsNrGmN-2BQewsG9DvcwvfM1x07z7WMQghayPow-3D-3D
IP
54.230.111.34
ASN
#16509 AMAZON-02
Submitted
2024-04-18 09:32:32
Access
public
Website Title
dskapp-maintax.work.gd/?takos
Final URL
dskapp-maintax.work.gd/?takos
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
4

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-04-18	428 B	6.5 kB	142.250.74.106
trk.klclick3.com	17450	2016-11-15	2019-10-08	2024-04-12	1.2 kB	638 B	54.230.111.34
www.kingdomsites.co.uk	unknown	unknown	No data	No data	557 B	18 kB	142.250.74.115
imos006-dot-im--os.appspot.com	345415	2005-03-10	2018-04-10	2024-04-03	437 B	2.4 kB	142.250.74.84
www.imcreator.com	491620	2010-05-30	2012-11-07	2024-02-29	3.5 kB	130 kB	142.250.74.115
cloudways-static-content.s3.us-east-1.amazonaws.com	unknown	2005-08-18	2022-07-07	2024-03-25	588 B	3.6 kB	54.231.135.74
cloudways-static-content.s3.amazonaws.com	unknown	2005-08-18	2020-11-13	2024-04-17	502 B	5.6 kB	54.231.171.129

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

Scan Date	Severity	Indicator	Alert
2023-11-10	medium	trk.klclick3.com/ls/click?upn=BBgzYwamqAreRSeIAhOu8-2BkLZ1eJcrnOzBtwCJzL6mkDEbgsE0i5VqRWrRmk5CfWZ8trO9TkxVpBnkMwmcBn6Ck0OIX1oBrM0OkPEQMI2kMrb93pbJr2MvevkU-2Bl4ruLrglMVWP1we9vjUAMCAjIT-2B6y13eVjkb8r9avxy3zraI-3DolLv_VLyY2fgnviM2rfF1xX5zOLfGNyyjFx60kMgtyVPD7aOS5hWxPKjY7arovn-2FKRw6jt7FsfMVlReUXY10fT7IYcrifl-2FtUQN0ovYQLiUmYlvnDfpfrWZefooriuUN3QyM7A4iU2qIvBn1p2mZrt6gsYAr0LZPdpAMQY7tF9GR4dGCoelPvfrdRYimoKCXOYGjzCRQzU2LJqJlEzHBMWbmrtb0Iq25EdIYKxaBwL7dylv9cPh6qoP5mAJdUUmkdBXNjAUpNWW8stn-2Fob7Jevjm0q85uh-2BB3Miw4hOmHggJDXmTbwehg1pvB4HLeJXztcDAl9Seio64YmS1HYeLMVJASbPYAm7-2FO637U3Ee4c4QLLvNBNZDAo7ddPpCOiwjI55CBYr3gYOeYe3-2BL1a2tqE7XZfZwT9I9zthKqScL-2FnTtXAItC-2FqkEGsNrGmN-2BQewsG9DvcwvfM1x07z7WMQghayPow-3D-3D	Internal Revenue Service

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-18	medium	kingdomsites.co.uk	Sinkholed

ThreatFox

No alerts detected

JavaScript (1)

	URL	Size	First Seen	Last Seen
	cloudways-static-content.s3.us-east-1.amazonaws.com/error_page/maintenance-domain-mapping.html	99 B	2023-03-07	2024-04-29
Pretty URL cloudways-static-content.s3.us-east-1.amazonaws.com/error_page/maintenance-domain-mapping.html IP 54.231.135.74 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:03:16 Last Seen2024-04-29 17:55:02 Times Seen1724 Hash cf67b5945599de5c550d3a9d55290871 abc9d233861aac8532f35df891d965d9a1f3e2fa 3d8b6870adc315a3873075dc4cb3e13b53f92045cc7fc71fe98c9fd6ed144854 Loading...

HTTP Transactions (14)

URL IP Response Size

trk.klclick3.com/ls/click?upn=BBgzYwamqAreRSeIAhOu8-2BkLZ1eJcrnOzBtwCJzL6mkDEbgsE0i5VqRWrRmk5CfWZ8trO9TkxVpBnkMwmcBn6Ck0OIX1oBrM0OkPEQMI2kMrb93pbJr2MvevkU-2Bl4ruLrglMVWP1we9vjUAMCAjIT-2B6y13eVjkb8r9avxy3zraI-3DolLv_VLyY2fgnviM2rfF1xX5zOLfGNyyjFx60kMgtyVPD7aOS5hWxPKjY7arovn-2FKRw6jt7FsfMVlReUXY10fT7IYcrifl-2FtUQN0ovYQLiUmYlvnDfpfrWZefooriuUN3QyM7A4iU2qIvBn1p2mZrt6gsYAr0LZPdpAMQY7tF9GR4dGCoelPvfrdRYimoKCXOYGjzCRQzU2LJqJlEzHBMWbmrtb0Iq25EdIYKxaBwL7dylv9cPh6qoP5mAJdUUmkdBXNjAUpNWW8stn-2Fob7Jevjm0q85uh-2BB3Miw4hOmHggJDXmTbwehg1pvB4HLeJXztcDAl9Seio64YmS1HYeLMVJASbPYAm7-2FO637U3Ee4c4QLLvNBNZDAo7ddPpCOiwjI55CBYr3gYOeYe3-2BL1a2tqE7XZfZwT9I9zthKqScL-2FnTtXAItC-2FqkEGsNrGmN-2BQewsG9DvcwvfM1x07z7WMQghayPow-3D-3D

54.230.111.34

134 B

URL
trk.klclick3.com/ls/click?upn=BBgzYwamqAreRSeIAhOu8-2BkLZ1eJcrnOzBtwCJzL6mkDEbgsE0i5VqRWrRmk5CfWZ8trO9TkxVpBnkMwmcBn6Ck0OIX1oBrM0OkPEQMI2kMrb93pbJr2MvevkU-2Bl4ruLrglMVWP1we9vjUAMCAjIT-2B6y13eVjkb8r9avxy3zraI-3DolLv_VLyY2fgnviM2rfF1xX5zOLfGNyyjFx60kMgtyVPD7aOS5hWxPKjY7arovn-2FKRw6jt7FsfMVlReUXY10fT7IYcrifl-2FtUQN0ovYQLiUmYlvnDfpfrWZefooriuUN3QyM7A4iU2qIvBn1p2mZrt6gsYAr0LZPdpAMQY7tF9GR4dGCoelPvfrdRYimoKCXOYGjzCRQzU2LJqJlEzHBMWbmrtb0Iq25EdIYKxaBwL7dylv9cPh6qoP5mAJdUUmkdBXNjAUpNWW8stn-2Fob7Jevjm0q85uh-2BB3Miw4hOmHggJDXmTbwehg1pvB4HLeJXztcDAl9Seio64YmS1HYeLMVJASbPYAm7-2FO637U3Ee4c4QLLvNBNZDAo7ddPpCOiwjI55CBYr3gYOeYe3-2BL1a2tqE7XZfZwT9I9zthKqScL-2FnTtXAItC-2FqkEGsNrGmN-2BQewsG9DvcwvfM1x07z7WMQghayPow-3D-3D
IP
54.230.111.34:0
ASN
#16509 AMAZON-02

File type
HTML document, ASCII text
Size
134 B (134 bytes)
Hash
e91f6529e38e9cbcb1ebfcd198655eda
eae54b98f6a88621448807973be037e3ddcc6fbd
9bce28636ac2ea841162a9aaf0b8489dd27033259a8fda827b79d5167a4f5bdd

Detections

Analyzer	Verdict	Alert
PhishTank	phishing	Internal Revenue Service

HTTP Headers

GET /ls/click?upn=BBgzYwamqAreRSeIAhOu8-2BkLZ1eJcrnOzBtwCJzL6mkDEbgsE0i5VqRWrRmk5CfWZ8trO9TkxVpBnkMwmcBn6Ck0OIX1oBrM0OkPEQMI2kMrb93pbJr2MvevkU-2Bl4ruLrglMVWP1we9vjUAMCAjIT-2B6y13eVjkb8r9avxy3zraI-3DolLv_VLyY2fgnviM2rfF1xX5zOLfGNyyjFx60kMgtyVPD7aOS5hWxPKjY7arovn-2FKRw6jt7FsfMVlReUXY10fT7IYcrifl-2FtUQN0ovYQLiUmYlvnDfpfrWZefooriuUN3QyM7A4iU2qIvBn1p2mZrt6gsYAr0LZPdpAMQY7tF9GR4dGCoelPvfrdRYimoKCXOYGjzCRQzU2LJqJlEzHBMWbmrtb0Iq25EdIYKxaBwL7dylv9cPh6qoP5mAJdUUmkdBXNjAUpNWW8stn-2Fob7Jevjm0q85uh-2BB3Miw4hOmHggJDXmTbwehg1pvB4HLeJXztcDAl9Seio64YmS1HYeLMVJASbPYAm7-2FO637U3Ee4c4QLLvNBNZDAo7ddPpCOiwjI55CBYr3gYOeYe3-2BL1a2tqE7XZfZwT9I9zthKqScL-2FnTtXAItC-2FqkEGsNrGmN-2BQewsG9DvcwvfM1x07z7WMQghayPow-3D-3D HTTP/1.1
Host: trk.klclick3.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
content-type: text/html; charset=utf-8
content-length: 134
location: https://www.kingdomsites.co.uk/free/deskapp1/mailhome?_kx=y1i8so0yzr-BILPz-lQKqb5qzq3cGc63zAMlLGU6FlQ%3D.WhrF3T
server: nginx
date: Thu, 18 Apr 2024 09:32:07 GMT
x-robots-tag: noindex, nofollow
x-cache: Miss from cloudfront
via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: VFsdYMBfYsGUmHn3iMVwi2FGFcAjzv5oWW_5Mwg1A-3ifoiqxiIEEA==
X-Firefox-Spdy: h2

www.kingdomsites.co.uk/free/deskapp1/mailhome?_kx=y1i8so0yzr-BILPz-lQKqb5qzq3cGc63zAMlLGU6FlQ%3D.WhrF3T

142.250.74.115

18 kB

URL
www.kingdomsites.co.uk/free/deskapp1/mailhome?_kx=y1i8so0yzr-BILPz-lQKqb5qzq3cGc63zAMlLGU6FlQ%3D.WhrF3T
IP
142.250.74.115:0
ASN
#15169 GOOGLE

File type
HTML document, Unicode text, UTF-8 text, with very long lines (12460)
Size
18 kB (17687 bytes)
Hash
ffacb76319e6e8873330ed9186b3f6a8
741d0d990b4108a0dccd574944272faa4a084694
fdca82a804cfb0e27d5342a28e979b469563ec2aa5ee2e621dd46322ab438c54

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /free/deskapp1/mailhome?_kx=y1i8so0yzr-BILPz-lQKqb5qzq3cGc63zAMlLGU6FlQ%3D.WhrF3T HTTP/1.1
Host: www.kingdomsites.co.uk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/html; charset=utf-8
cache-control: no-cache
content-encoding: gzip
x-cloud-trace-context: 8fcaef1400704ba513640ecbc02640e2
vary: Accept-Encoding
date: Thu, 18 Apr 2024 09:32:07 GMT
server: Google Frontend
content-length: 17687
X-Firefox-Spdy: h2

imos006-dot-im--os.appspot.com/js/imos.js?v=1.5.9bf2-jq7

142.250.74.84

2.0 kB

URL
imos006-dot-im--os.appspot.com/js/imos.js?v=1.5.9bf2-jq7
IP
142.250.74.84:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with CRLF line terminators
Size
2.0 kB (2035 bytes)
Hash
da0a5a5455c9b2e564ce7fe6ff1aa77f
04db5f7276d69f8232afbd361063740867919b51
884663c1137f80922a8e50d96df7b23ba59ea46caf3bf6cd89b38e231decf4e5

HTTP Headers

GET /js/imos.js?v=1.5.9bf2-jq7 HTTP/1.1
Host: imos006-dot-im--os.appspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.kingdomsites.co.uk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
x-cloud-trace-context: 0048e5e9e42e0b6675005e2ca74654df
content-encoding: gzip
server: Google Frontend
content-length: 2035
date: Thu, 18 Apr 2024 09:24:18 GMT
expires: Thu, 18 Apr 2024 09:34:18 GMT
cache-control: public, max-age=600
age: 470
etag: "NjoVCA"
content-type: application/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

www.imcreator.com/css/fonts.css?v=1.5.9bf2-jq7

142.250.74.115

1.6 kB

URL
www.imcreator.com/css/fonts.css?v=1.5.9bf2-jq7
IP
142.250.74.115:0
ASN
#15169 GOOGLE

File type
ASCII text, with very long lines (788)
Size
1.6 kB (1644 bytes)
Hash
0450a0cc1b61d9e8d3006ee69cd974ff
c9d683734d8a71c27d80fc4eeb4e10fdd2504cd0
1fb80c911f6c0155d116db0531d0a3114966d53a6edb0b56dd239f6c0539f5c3

HTTP Headers

GET /css/fonts.css?v=1.5.9bf2-jq7 HTTP/1.1
Host: www.imcreator.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.kingdomsites.co.uk/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-origin: *
x-cloud-trace-context: 418f4f5628e2981f63b6985ab7d88960
content-encoding: gzip
server: Google Frontend
date: Wed, 17 Apr 2024 15:25:25 GMT
expires: Thu, 17 Apr 2025 15:25:25 GMT
cache-control: public, max-age=31536000
etag: "D6CgGw"
content-type: text/css
content-length: 1644
age: 65203
X-Firefox-Spdy: h2

www.imcreator.com/js/lightbox.js?v=1.5.9bf2-jq7

142.250.74.115

3.8 kB

URL
www.imcreator.com/js/lightbox.js?v=1.5.9bf2-jq7
IP
142.250.74.115:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text
Size
3.8 kB (3827 bytes)
Hash
a1a3ec4971443cb3c86828d3d5ed26bd
1787e196323bb74b9e37d6200025b12488a75ebe
b8f06b0f2540ae50ab3236e38d3cf0431ae4d117f7202f67403e51b906e69c76

HTTP Headers

GET /js/lightbox.js?v=1.5.9bf2-jq7 HTTP/1.1
Host: www.imcreator.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.kingdomsites.co.uk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-origin: *
x-cloud-trace-context: b90a711fa41ac6ff36349532d4702bf3
content-encoding: gzip
server: Google Frontend
date: Wed, 17 Apr 2024 17:04:23 GMT
expires: Thu, 17 Apr 2025 17:04:23 GMT
cache-control: public, max-age=31536000
etag: "D6CgGw"
content-type: application/javascript
content-length: 3827
age: 59265
X-Firefox-Spdy: h2

www.imcreator.com/js/spimeengine.js?v=1.5.9bf2-jq7

142.250.74.115

21 kB

URL
www.imcreator.com/js/spimeengine.js?v=1.5.9bf2-jq7
IP
142.250.74.115:0
ASN
#15169 GOOGLE

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (354)
Size
21 kB (21367 bytes)
Hash
a4e9559fbfceddeb2dfbcc52424d0564
a579d6e6d60e77e719aa6dc69e15da7a9ff99774
c6135eac12cfadd34a466419436c30bff38d242790d63c9505cbfc1dcd4a285a

HTTP Headers

GET /js/spimeengine.js?v=1.5.9bf2-jq7 HTTP/1.1
Host: www.imcreator.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.kingdomsites.co.uk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-origin: *
x-cloud-trace-context: 0aaeb4b0c91b51a64fcccd8eb8da3fe2
content-encoding: gzip
server: Google Frontend
date: Mon, 15 Apr 2024 17:30:12 GMT
expires: Tue, 15 Apr 2025 17:30:12 GMT
cache-control: public, max-age=31536000
etag: "D6CgGw"
content-type: application/javascript
content-length: 21367
age: 230516
X-Firefox-Spdy: h2

www.imcreator.com/js/lib/jquery-2.x-git.min.js

142.250.74.115

35 kB

URL
www.imcreator.com/js/lib/jquery-2.x-git.min.js
IP
142.250.74.115:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (32044)
Size
35 kB (34894 bytes)
Hash
c94a5c65a77fe7c308b76c360b98d778
ff44b4a8cfb9fa03cf88ecaffbb0f78233769ea7
d341737a0495cb1d55583517b95f8772a32b88496e0510991e6faedb9f7bb6ee

HTTP Headers

GET /js/lib/jquery-2.x-git.min.js HTTP/1.1
Host: www.imcreator.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.kingdomsites.co.uk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-origin: *
x-cloud-trace-context: 73c3801d343214733bf2ce9e413b4b5d
content-encoding: gzip
server: Google Frontend
date: Mon, 15 Apr 2024 16:33:07 GMT
expires: Tue, 15 Apr 2025 16:33:07 GMT
cache-control: public, max-age=31536000
etag: "D6CgGw"
content-type: application/javascript
content-length: 34894
age: 233941
X-Firefox-Spdy: h2

www.imcreator.com/js/lib/touchswipe/jquery.mobile.custom.min.js

142.250.74.115

3.1 kB

URL
www.imcreator.com/js/lib/touchswipe/jquery.mobile.custom.min.js
IP
142.250.74.115:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (7687)
Size
3.1 kB (3096 bytes)
Hash
74ee4c679b03074b55a1da9bbbe29cf5
745701d8ab39733f989313a5747c54cf3248eb5b
5c2f6c5d5cd0fe0ecfa24b844f841c8a73d8baaafb827ec413afa41335aa1c47

HTTP Headers

GET /js/lib/touchswipe/jquery.mobile.custom.min.js HTTP/1.1
Host: www.imcreator.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.kingdomsites.co.uk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-origin: *
x-cloud-trace-context: 4555b0eebcd44764296dda486a3108cf;o=1
content-encoding: gzip
server: Google Frontend
date: Wed, 17 Apr 2024 20:09:45 GMT
expires: Thu, 17 Apr 2025 20:09:45 GMT
cache-control: public, max-age=31536000
etag: "D6CgGw"
content-type: application/javascript
content-length: 3096
age: 48143
X-Firefox-Spdy: h2

www.imcreator.com/js/xprs_helper.js?v=1.5.9bf2-jq7

142.250.74.115

46 kB

URL
www.imcreator.com/js/xprs_helper.js?v=1.5.9bf2-jq7
IP
142.250.74.115:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (32044)
Size
46 kB (45547 bytes)
Hash
5ec075a77c770eb874479e7be7c625ce
ed63aef8800694f107f3022a1b6bf1396330d536
5206cabf2c0091205182812e27fdc39cdf376fc964d9b8a7e907b1075e516b9d

HTTP Headers

GET /js/xprs_helper.js?v=1.5.9bf2-jq7 HTTP/1.1
Host: www.imcreator.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.kingdomsites.co.uk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-origin: *
x-cloud-trace-context: 6dab4727fcaf39f58644069e6057c303
content-encoding: gzip
server: Google Frontend
date: Wed, 17 Apr 2024 14:27:46 GMT
expires: Thu, 17 Apr 2025 14:27:46 GMT
cache-control: public, max-age=31536000
etag: "D6CgGw"
content-type: application/javascript
content-length: 45547
age: 68662
X-Firefox-Spdy: h2

www.imcreator.com/static_style?v=1.5.9bf2-jq7&vbid=vbid-53255dcc-omsttuer&caller=static

142.250.74.115

2.0 kB

URL
www.imcreator.com/static_style?v=1.5.9bf2-jq7&vbid=vbid-53255dcc-omsttuer&caller=static
IP
142.250.74.115:0
ASN
#15169 GOOGLE

File type
ASCII text
Size
2.0 kB (1993 bytes)
Hash
843a711b147e4998a7421efced2ed497
60ea2f29e9343ca8a51a166fdcc61320910dab70
09771723d084890f674b8f637c83ba4afc5cd334f96d5a030a53d6453b1a83b1

HTTP Headers

GET /static_style?v=1.5.9bf2-jq7&vbid=vbid-53255dcc-omsttuer&caller=static HTTP/1.1
Host: www.imcreator.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.kingdomsites.co.uk/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cache-control: no-cache
content-type: text/css; charset=utf-8
content-encoding: gzip
x-cloud-trace-context: e0682f0115b485c1dd137809c4fb4b7e
vary: Accept-Encoding
date: Thu, 18 Apr 2024 09:32:08 GMT
server: Google Frontend
content-length: 1993
X-Firefox-Spdy: h2

www.imcreator.com/all_js.js?v=1.5.9bf2-jq7

142.250.74.115

14 kB

URL
www.imcreator.com/all_js.js?v=1.5.9bf2-jq7
IP
142.250.74.115:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text
Size
14 kB (14390 bytes)
Hash
0c984395e78fcad610a3b75db757fc9b
d7b37ae32e28576f98862e5b03032d22ed54785a
2745e2ed489679d0772d69f9054c330fdbbe80d7ffa55574dddc983029e82564

HTTP Headers

GET /all_js.js?v=1.5.9bf2-jq7 HTTP/1.1
Host: www.imcreator.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.kingdomsites.co.uk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cache-control: no-cache
content-type: text/javascript; charset=utf-8
content-encoding: gzip
x-cloud-trace-context: 6e78189ee1daf9322c7e310d4664ef76
vary: Accept-Encoding
date: Thu, 18 Apr 2024 09:32:08 GMT
server: Google Frontend
content-length: 14390
X-Firefox-Spdy: h2

cloudways-static-content.s3.us-east-1.amazonaws.com/error_page/maintenance-domain-mapping.html

54.231.135.74

3.2 kB

URL
cloudways-static-content.s3.us-east-1.amazonaws.com/error_page/maintenance-domain-mapping.html
IP
54.231.135.74:0
ASN
#16509 AMAZON-02

File type
HTML document, Unicode text, UTF-8 text
Size
3.2 kB (3236 bytes)
Hash
e01b9ccad4c92109f0d2e08ef73777de
a25cd21ef6ac6882db89f46a06fab5fc529e790b
b94b14e3e96e283a50e5734d685d79ba3df9cb7b9eedd8acd5ed272fb8481b73

HTTP Headers

GET /error_page/maintenance-domain-mapping.html HTTP/1.1
Host: cloudways-static-content.s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dskapp-maintax.work.gd/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
x-amz-id-2: yJnu2gW1ULQU7fStva+tC21Y5+WIUYdE/gn/haNyvs1c86mOi4Gk+M6km1vmBa/dv2KXdz4ecrM=
x-amz-request-id: N8JG58CJWDP1M2VJ
Date: Thu, 18 Apr 2024 09:32:11 GMT
Last-Modified: Wed, 29 Jun 2022 13:19:22 GMT
ETag: "e01b9ccad4c92109f0d2e08ef73777de"
x-amz-version-id: iz2wxfmkeW3fEDYRmVq62WnOeVH1jH4i
Accept-Ranges: bytes
Content-Type: text/html
Server: AmazonS3
Content-Length: 3236

cloudways-static-content.s3.amazonaws.com/error_page/cloudways-logo.svg

54.231.171.129

5.2 kB

URL
cloudways-static-content.s3.amazonaws.com/error_page/cloudways-logo.svg
IP
54.231.171.129:0
ASN
#16509 AMAZON-02

File type
SVG Scalable Vector Graphics image
Size
5.2 kB (5219 bytes)
Hash
4c3566a3b1e34058ac07a800304b4b4d
d2f0ac3a00ea9aee487314a452cc67a91672848e
98c1d57550e8745fbbb3618e8121abf0f234af6bbc1e82c882884bff70ebaa26

HTTP Headers

GET /error_page/cloudways-logo.svg HTTP/1.1
Host: cloudways-static-content.s3.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloudways-static-content.s3.us-east-1.amazonaws.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
x-amz-id-2: yb0CQw15D+wGEa6F2KoauV/8KyE0zz/4AcohtPPlufWx4pbiLnynHvvlzhItxrdHMUar253EXEQ=
x-amz-request-id: Z79VTV8XCRYBFNJQ
Date: Thu, 18 Apr 2024 09:32:12 GMT
Last-Modified: Wed, 29 Jun 2022 11:12:38 GMT
ETag: "4c3566a3b1e34058ac07a800304b4b4d"
x-amz-version-id: gTFaLm_nf5DHDPwfxPPPXopKPjL8xeLF
Accept-Ranges: bytes
Content-Type: image/svg+xml
Server: AmazonS3
Content-Length: 5219

fonts.googleapis.com/css?family=Roboto

142.250.74.106

5.9 kB

URL
fonts.googleapis.com/css?family=Roboto
IP
142.250.74.106:0
ASN
#15169 GOOGLE

File type
gzip compressed data, max compression
Size
5.9 kB (5889 bytes)
Hash
212eeeb5f0ca225c1dee0a274bd2301b
d36bb6158d13a52fb793b60e309fdb25448b3223
b70601f052d456dbdffc69d0601ad0f5fe42265a0a2951c6d6cc2d72aaf8f394

HTTP Headers

GET /css?family=Roboto HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.imcreator.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 18 Apr 2024 09:32:08 GMT
date: Thu, 18 Apr 2024 09:32:08 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (1)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (14)

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP