Domain > ctc.demo.getyourrefund.org

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2021-06-07	18.209.232.56 (ClassC)
2023-06-12	35.170.87.205 (ClassC)
2026-03-06	3.169.173.67 (ClassC)

HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Fri, 06 Mar 2026 21:13:31 GMTContent-Type: text/htmlContent-Length: 919Connection: keep-aliveX-Cache: Error from cloudfrontVia: 1.1 11017c4db22106ac70e16ce75190a430.cloudfront.net (CloudFront)X-Amz-Cf-Pop: HIO52-P4X-Amz-Cf-Id: SU6_qyT54-wozatt4Lm88Qnwfj1mJ-YLP0Z5ANuw7H4ve1fW1ibVvwVary: Origin

!DOCTYPE HTML PUBLIC -//W3C//DTD HTML 4.01 Transitional//EN http://www.w3.org/TR/html4/loose.dtd>HTML>HEAD>META HTTP-EQUIVContent-Type CONTENTtext/html; charsetiso-8859-1>TITLE>ERROR: The request could not be satisfied/TITLE>/HEAD>BODY>H1>403 ERROR/H1>H2>The request could not be satisfied./H2>HR noshade size1px>Request blocked.We cant connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.BR clearall>If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.BR clearall>HR noshade size1px>PRE>Generated by cloudfront (CloudFront)Request ID: SU6_qyT54-wozatt4Lm88Qnwfj1mJ-YLP0Z5ANuw7H4ve1fW1ibVvw/PRE>ADDRESS>/ADDRESS>/BODY>/HTML>

Subdomains

Date	Domain	IP
demo.getyourrefund.org	2024-05-21	3.227.48.110
ctc.demo.getyourrefund.org	2026-03-06	3.169.173.67
origin.ctc.demo.getyourrefund.org	2024-11-24	52.6.217.155
assets.getyourrefund.org	2024-07-26	18.161.6.27
www.getyourrefund.org	2024-11-24	3.230.139.194

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > ctc.demo.getyourrefund.org

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains