urlquery.net
WEBSITE ANALYSIS REPORT

http://www.pay1040.com/

public
Report tags
Submit tags
Request review

Report summary

Submitted and final observations · captured HTTP activity

Submitted URL
http://www.pay1040.com/
Submitted IP / ASN
Spain 80.239.254.31 AS1299 · Arelion Sweden AB
Final URL
https://www.pay1040.com/
Final IP / ASN
Norway 23.36.77.193 AS20940 · Akamai International B.V.

Final page

Page title
Pay1040 - IRS Authorized Payment Provider
Final DOM MIME
text/html; charset=utf-8
Final DOM size
39 B (39 bytes)

Detections

URLQuery
0
IDS
0
TDS
1

Activity

HTTP requests
60
Observed hosts
5
Script records
12

Estimated HTTP data

Sent
~79.0 KB
Received
~5.96 MB

Page capture

Final browser state

Recorded title

Pay1040 - IRS Authorized Payment Provider

39 B final DOM

Detection signals

URLQuery findings, Threat Detection Systems, and IDS alerts

Threat Detection Systems

1

DigiCert UltraDNS Sinkholed

VerdictMalicious
Severitymedium

Host infrastructure

Observed hosts are context, not independent maliciousness verdicts

HostRankRegisteredFirst seenLast seenSentReceivedIPFingerprints
www.pay1040.com 2719502002-05-132013-04-182026-03-2471.8 KB2.72 MBNorway 23.36.77.193
www.google.com 221997-09-152015-05-102026-05-031.8 KB56.9 KBUnited States 142.251.154.119
transcend-cdn.com 4 alerts102132023-01-312023-02-012026-04-301.9 KB521.4 KBCountry unknown 104.18.40.238
fonts.gstatic.com N/A2008-02-112014-04-022026-05-031.1 KB80.0 KBUnited States 142.250.178.67
www.gstatic.com 1460472008-02-112012-05-292026-05-032.4 KB2.59 MBUnited States 142.250.74.3
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close

LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot