Domain > c0nfirm-refund.click

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-03-28	172.67.187.180 (ClassC)
2026-03-04	104.21.60.15 (ClassC)

HTTP/1.1 403 ForbiddenDate: Wed, 04 Mar 2026 06:22:04 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: closeaccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UAcf-mitigated: challengecritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UAcross-origin-embedder-policy: require-corpcross-origin-opener-policy: same-origincross-origin-resource-policy: same-originorigin-agent-cluster: ?1permissions-policy: accelerometer(),browsing-topics(),camera(),clipboard-read(),clipboard-write(),geolocation(),gyroscope(),hid(),interest-cohort(),magnetometer(),microphone(),payment(),publickey-credentials-get(),screen-wake-lock(),serial(),sync-xhr(),usb()referrer-policy: same-originserver-timing: chlray;desc9d6ec8ce4e9ffef1x-content-type-options: nosniffx-frame-options: SAMEORIGINCache-Control: private, max-age0, no-store, no-cache, must-revalidate, post-check0, pre-check0Expires: Thu, 01 Jan 1970 00:00:01 GMTReport-To: {endpoints:{url:https:\/\/a.nel.cloudflare.com\/report\/v4?sPGOIdCkKdNw7YXNXzwWDPhPqJsR5oHS9ggDubGkwKpnt9ZjqxveNpitQXi6w%2BtoNwBRaAo5zaxEUu1LlnMPjvJNS%2BvthUoJb7Zd%2Fw7yQ5P4aEXTvLcv%2FKKrCL%2FAdNYyqsfdXDwr6Dw%3D%3D},group:cf-nel,max_age:604800}NEL: {success_fraction:0,report_to:cf-nel,max_age:604800}Server: cloudflareCF-RAY: 9d6ec8ce4e9ffef1-PDXalt-svc: h3:443; ma86400

!DOCTYPE html>html langen-US>head>title>Just a moment.../title>meta http-equivContent-Type contenttext/html; charsetUTF-8>meta http-equivX-UA-Compatible contentIEEdge>meta namerobots contentnoindex,nofollow>meta nameviewport contentwidthdevice-width,initial-scale1>style>*{box-sizing:border-box;margin:0;padding:0}html{line-height:1.15;-webkit-text-size-adjust:100%;color:#313131;font-family:system-ui,-apple-system,BlinkMacSystemFont,Segoe UI,Roboto,Helvetica Neue,Arial,Noto Sans,sans-serif,Apple Color Emoji,Segoe UI Emoji,Segoe UI Symbol,Noto Color Emoji}body{display:flex;flex-direction:column;height:100vh;min-height:100vh}.main-content{margin:8rem auto;padding-left:1.5rem;max-width:60rem}@media (width  720px){.main-content{margin-top:4rem}}#challenge-error-text{background-image:url(data:image/svg+xml;base64,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);background-repeat:no-repeat;background-size:contain;padding-left:34px}/style>meta http-equivrefresh content360>/head>body>div classmain-wrapper rolemain>div classmain-content>noscript>div classh2>span idchallenge-error-text>Enable JavaScript and cookies to continue/span>/div>/noscript>/div>/div>script>(function(){window._cf_chl_opt  {cvId: 3,cZone: c0nfirm-refund.click,cType: managed,cRay: 9d6ec8ce4e9ffef1,cH: N2fmnGU18OqFZiaGeQKBG0Qt_f4kGm_zLMXKPTOiBkc-1772605324-1.2.1.1-HcVpfC0PVCQa5iHcll08FeGxzQqwChH6k76rzbWFjhQ1RTWZabFnhsacXdJ0TvdC,cUPMDTk:\/?__cf_chl_tk6yM22ouBqroJS4ZScJ_T6DvgSb9lfo6IuC1i6QS4zM8-1772605324-1.0.1.1-1S_2tFwg6ii32zxstLd0x7ueNlGXT5SslLTViccYux4,cFPWv: g,cITimeS: 1772605324,cTplC:0,cTplV:5,cTplB: 0,fa:\/?__cf_chl_f_tk6yM22ouBqroJS4ZScJ_T6DvgSb9lfo6IuC1i6QS4zM8-1772605324-1.0.1.1-1S_2tFwg6ii32zxstLd0x7ueNlGXT5SslLTViccYux4,md: b9aVEOUSskdI5yS5A8SXtlQlqR14Mz9z5zrZn1eH2oA-1772605324-1.2.1.1-yahaCElbu2ikPjmvC4sr9Yyoc2VmwJKuNZ_JThlEdhNsQjxDyTzo6BTTav0WhokKyVYz355kUytTvx7v2gw8Ve.l4e3GQzveuPuWsZ3f2ubVaWRTmV71gGSou6cxkjc.G4sfAWhmSIdZpgKHGdJ0IrE5u3H.ci.ll0e2YoIkgi1c8phv0lGoG9TxgPlKXhkLABAWmtLHth5Kawx71wPpEropI1shhtFE7d.0JufyTFbAUmoMVYCTTwI0bKODdUYEAev8D2MPYxOiY02YyKI1Na8EcVuYpVmkw3snF3woJgLn0Vo.1HEzGfvh1wKCCCOIcYUrhWZS3kVfxSK_VclMTLpi7DzjFhEkSb.it61ijoQKyrX5waOBYT00Mti4Rade1dek1t1nrnq48beOy.BX050DcF848otZIUDsVWhgtsR73MDH2WclUGC61XkJSedNiDuuOyohGrrIP9JHUVGNCZYF4Xat1nyJLBaSszd.KQbL2p6GT2jw2CoffHsiyrvUPz4PIQuz7eUcauxcqnpmH42ctORt_EQ3MUArZ46crYJNzv1hvDRLfzEqtja3cnMnC1Eo4I7ewD8BmWlcNUZTqPajqBoT1qD5nF3ZjPY3NuD.tkEV34d4q_Jt1xy87ZV4xDGHGje879wqVSMcZpJIkqCJadTH1TmNTeI8dUAXq8Ok6lvV8sz_8WxvcU36yeXSy3n1Jc.vuj6X_AefaazWPU9zGIw9zClbMOE2qbWfJUGkK2rqZWt98z4CVlHqLTykQwvHKycLRQb45Tt7Bv2.bNUUsyOg_2ftf_7CrcBOZrDacs76VscO96Sy7VIyNkOD,mdrd: 6ov6J7DGrjHjmgPVjZpBf3lQC4Kdnua8SII05yJNYSE-1772605324-1.2.1.1-ZzFSkHjov1HVVuCQFVB1wbQUzhXZsJyM.AGQRV71ZZq_kfXrr3tHFsH1Js_zmca1W3W.oDQGsByVteCN1WOXNIrUjeYC28CQ_Eds9LSaoqG1wLVTDS4qQxSQGQVpex5aF2xJzbavKHXJHPehqK.X60xQELN_JY95WTpqW4DIFt7_6.7xmMNfJJcRz1p4VxIG2XS._KUq9hYdY8FMNNfFqSAql2cqqWohEvUXn1gKHOFSDv0QhtW03wdyxV5KG54LY_Vlk75QrJ2BGtx_naMLnIw6imwdyeMSVy9rJqbbvXix_k9il0QZOlyeNYrtyHi3_yoeiYX9SUosC7dJN8gXyNIQy2BSwe8kCMPiPS.i3sFlRCqk7OJqvM18lU0eoItEgAv63DHJzOmcYCULgXsA3gwHDot3nC91uVQ_ZV0aeE_YqYXDlxmBI0PxxrKB10b6J4Z3NGYt1rh0kTKyGZJ6uLi2lBFVcPyIPCLW2t39pFge1zdup8QyjJ5gIrJycEP5jPecfm2OBX09OcD5e5SB1.h1Fan3iDdd3tc.iON1pytEfMSMWqnLuj7MiOGjYdCqoZklzNHgijhypiJJFFPidHClrx1aaU9XRFIkmIIZtxFxfQUZWErAX7.Odx54ni.5XE6tLaqInJoMqy_arjX7O8uJR1H5io0p49Ev4z3G9q6e3g6xegF0tGzuh26rGbEp28f8i8rL4LqoxnnkKGW.KlPCSUwcUSCEonlu8UNkoZMv_NM402M7.8ub.p7.r0T7ixLaKQia78XmWrjWJlClu7mCxKcs99xqBZQaQGZMOlO02HHRrF3mAPnbHY9YZvE2tp_WlTz7.Nxmr2EG58VkV.GvqtFR0hiBrduz7LeoGZm4PhaS8Sw3_kpaSOZk0Tbng_Mjcl4XGyHp211LKKXB0_drK8oVpFGnvJgFv0.WY1Re0.lT1PH0gR13MutAaX11Mj5lndox.aoF7Ie8SeAuOYtpdwQ.O4O5OVCWrl7dthW7EC.EnWuY5_WEuY9Zr5cAhMqsw65Xg.zIWN9XxNR2f805U8o0SrfxstroJbS6FuSrwKr8qQHwkExDLhVC4wOlgggkn7PsontqOmX1_Ex7r3eMkLrYFC4J0MbbCnQFcNmQrRuNxswctEGk3afR8z3UNrI.bCnjlrGScEPzwdhGp3F3pXXCnwBDjGxy06y_kzxPS.9U2kHj3qkagbsGt.Prv2aaEexXujX0sgPkpQSCBgsMWymvndycOVSDf7al9bqbY2Mt7Y3ii5TR4Bsi2tVnb.yoM13fl2ianiPLp0q_.tNXOMr9hqtffDYgdGJ3bnfDLFtCx0._Po_CEKMgGLS.VtVOtQa2yEounaHs5USJ5zXJpbbRfVfp0XaNBwLPjJq0LRVTyoIyn.di5k6k6T5g98qv0Lev.2b1X7TCvwwfNoZlyHaiMVvEua78g_Nft2MJmxoyju0HaSp23LJJIZW_5UiKiWFJzsIWXm.EcBigEOpfZHzCchQBbuqqGaEHhcvimqqzlxryLEGJ7TWjWzzEWJT99kLQxHOY7WJdr29DYNh9efwF4g8y3Ef5_O_iokXRnOJ5qULPOPYZ03DKQLaHAqx5MegLUvawlgYu7hTEJq4TaZje4qbZQjPS7xwBdXMH.k.nKPd9H7Ky2J7B14LLvTMFDzz6jvlAUftjq6khqYphLukIo7dHjbuV7LgKcKmaB2v0mBDuYHA0lLXLnIJpQjIimCxv.7N5hym0SbbqD6U1IipJvvzu09O.ZjOJcS7plOI2Wg4yHLeik1WPJGEofgfAcwIarJxg7X0krKA0OdoaSXChWnoQEf8le7RYxzzqKfW8ViAT0cfz56cuKjdR71VmjNv3e.huVjk_..Ug25k6gHYDtol2xXqBUsIgLdTZAtD.IpeXKcazDfOO2cH249kL9RnXNm8ryEzkdx8nwzZ4mtiGxhaBvqH3UBsUPN1uPB6xYvC1QrV_4NyF8GpT_F1zw2yAo1uvEZ5eMMFQpA,};var a  document.createElement(script);a.src  /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray9d6ec8ce4e9ffef1;window._cf_chl_opt.cOgUHash  location.hash   && location.href.indexOf(#) ! -1 ? # : location.hash;window._cf_chl_opt.cOgUQuery  location.search   && location.href.slice(0, location.href.length - window._cf_chl_opt.cOgUHash.length).indexOf(?) ! -1 ? ? : location.search;if (window.history && window.history.replaceState) {var ogU  location.pathname + window._cf_chl_opt.cOgUQuery + window._cf_chl_opt.cOgUHash;history.replaceState(null, null,\/?__cf_chl_rt_tk6yM22ouBqroJS4ZScJ_T6DvgSb9lfo6IuC1i6QS4zM8-1772605324-1.0.1.1-1S_2tFwg6ii32zxstLd0x7ueNlGXT5SslLTViccYux4+ window._cf_chl_opt.cOgUHash);a.onload  function() {history.replaceState(null, null, ogU);}}document.getElementsByTagName(head)0.appendChild(a);}());/script>/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > c0nfirm-refund.click

Is this malicious?

DNS Resolutions

Port 80

Port 443