Report Overview
URL
kora-show.com
Finishing URL
www.kora-show.com/index2/
IP / ASN
172.67.211.11
Title
Just a moment...
Malicious - Copy/Paste Social Engineering (ClickFix)
Detections
urlquery
2
Network Intrusion Detection
0
Threat Detection Systems
5
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
b7510.com 2 alert(s) on this Host | unknown | 2021-03-21 | 2025-06-19 | 2026-04-03 | 1.2 kB | 1.7 kB |  139.45.197.115 |  |
rpc-mainnet.matic.quiknode.pro | 2989773 | 2018-01-05 | 2021-05-19 | 2026-04-03 | 1.1 kB | 1.0 kB |  132.145.155.63 | |
my.rtmark.net | 43911 | 2014-10-29 | 2015-02-04 | 2026-04-08 | 933 B | 1.7 kB | 172.64.146.234 |  |
www.yalla-shoot4.com | unknown | 2025-06-05 | 2025-09-03 | 2025-11-25 | 11 kB | 292 kB | 188.114.96.1 |          |
cdnjs.cloudflare.com | 1222 | 2009-02-17 | 2012-05-23 | 2026-04-05 | 1.5 kB | 206 kB | 104.17.24.14 | |
gekeebsirs.com | 240705 | 2024-08-13 | 2024-08-13 | 2026-04-09 | 833 B | 218 kB | 188.114.97.1 | |
www.googletagmanager.com | 283 | 2011-11-11 | 2012-10-04 | 2026-04-05 | 879 B | 931 kB | 142.251.143.136 | |
code.jquery.com | 4915 | 2005-12-10 | 2012-05-21 | 2026-04-05 | 853 B | 175 kB | 151.101.194.137 |  |
www.google.com | 22 | 1997-09-15 | 2015-05-10 | 2026-04-05 | 469 B | 4.7 kB | 142.251.155.119 | |
www.kora-show.com 1 alert(s) on this Host | unknown | 2023-08-23 | 2026-04-10 | 2026-04-10 | 3.6 kB | 252 kB | 104.21.53.89 |  |
fonts.gstatic.com | unknown | 2008-02-11 | 2014-04-02 | 2026-04-05 | 2.2 kB | 129 kB | 172.217.19.227 | |
clnsdns.beer 32 alert(s) on this Host | unknown | unknown | No data | No data | 4.2 kB | 100 kB |  178.16.52.101 | |
t2.gstatic.com | unknown | 2008-02-11 | 2013-05-07 | 2026-04-09 | 528 B | 5.0 kB | 192.178.25.4 | |
kora-show.com | unknown | unknown | No data | No data | 482 B | 52 kB | 104.21.53.89 | |
Nginx (Web servers, Reverse proxies)
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.Cloudflare (CDN)
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.Engintron (Web server extensions)
Engintron is a plugin that integrates Nginx to cPanel/WHM server.WordPress (CMS, Blogs)
WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.MySQL (Databases)
MySQL is an open-source relational database management system.jQuery:3.3.1 (JavaScript libraries)
jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.Moment.js (JavaScript libraries)
Moment.js is a free and open-source JavaScript library that removes the need to use the native JavaScript Date object directly.Google Analytics (Analytics)
Google Analytics is a free web analytics service that tracks and reports website traffic.PHP (Programming languages)
PHP is a general-purpose scripting language used for web development.Yoast SEO:27.1.1 (SEO, WordPress plugins)
Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.jQuery CDN (CDN)
jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.cdnjs (CDN)
cdnjs is a free distributed JS library delivery service.Varnish (Caching)
Varnish is a reverse caching proxy.WordPress Super Cache (Caching, WordPress plugins)
WordPress Super Cache is a static caching plugin for WordPress.Yoast SEO:26.6 (SEO, WordPress plugins)
Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.Related reports
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Hagezi Threat Feed | clnsdns.beer | malicious | Sinkholed |
| DigiCert UltraDNS | clnsdns.beer | malicious | Sinkholed |
| DNS4EU | clnsdns.beer | malicious | Sinkholed |
| Quad9 DNS | clnsdns.beer | malicious | Sinkholed |
| DNS4EU | b7510.com | malicious | Sinkholed |
JavaScript (24)
No JavaScripts
HTTP Transactions (59)
| URL | IP | Response | Size |
|---|