Domain > dev1.verify.ionia.app

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2024-07-01	104.26.15.190 (ClassC)
2025-05-13	172.67.23.143 (ClassC)

HTTP/1.1 200 OKDate: Tue, 13 May 2025 00:39:55 GMTContent-Type: text/html; charsetutf-8Transfer-Encoding: chunkedConnection: keep-aliveCache-Control: no-cache, no-storePragma: no-cacheSet-Cookie: .AspNetCore.Antiforgery.RtGCWVXC8-4CfDJ8GfoJ35FQa9HuzniMkFXVE5IFHng6vRyw7GFXKkt5ZoAhB3czzXejE8fE2iQPAS83wrHc0LXTOWfoJtwIbXe82GLnERoPSB46-X6KfMVunQEr-9jQ9uhf12kvkWQPEUoYyDRj6hnpUViEFoYpRzm3_Q; path/; samesitestrict; httponlyStrict-Transport-Security: max-age0; includeSubDomains; preloadRequest-Context: appIdcid-v1:1ccbd25b-88d9-45a7-bc77-3a443754ad89X-Frame-Options: SAMEORIGINX-XSS-Protection: 1; modeblockX-Content-Type-Options: nosniffContent-Security-Policy: base-uri self nonce-8IBTHwOdqNKAWeKl7plt8g; block-all-mixed-content;img-src data: https:; upgrade-insecure-requests;connect-src self nonce-8IBTHwOdqNKAWeKl7plt8g;Referrer-Policy: same-siteX-Permitted-Cross-Domain-Policies: none;Cross-Origin-Resource-Policy: same-origincf-cache-status: DYNAMICServer: cloudflareCF-RAY: 93ee19fadd81c36d-PDXalt-svc: h3:443; ma86400

!DOCTYPE html>html langen>head>    meta charsetutf-8 />    meta nameviewport contentwidthdevice-width, initial-scale1.0 />    title>Ionia - KYC Verification/title>    link typetext/css href/css/style.min.css relstylesheet />script typea2b4a6055d4f2876206fe1f9-text/javascript>!function(T,l,y){var ST.location,kscript,DinstrumentationKey,Cingestionendpoint,IdisableExceptionTracking,Eai.device.,btoLowerCase,wcrossOrigin,NPOST,eappInsightsSDK,ty.name||appInsights;(y.name||Te)&&(Tet);var nTt||function(d){var g!1,f!1,m{initialize:!0,queue:,sv:5,version:2,config:d};function v(e,t){var n{},aBrowser;return nE+idab(),nE+typea,nai.operation.nameS&&S.pathname||_unknown_,nai.internal.sdkVersionjavascript:snippet_+(m.sv||m.version),{time:function(){var enew Date;function t(e){var t+e;return 1t.length&&(t0+t),t}return e.getUTCFullYear()+-+t(1+e.getUTCMonth())+-+t(e.getUTCDate())+T+t(e.getUTCHours())+:+t(e.getUTCMinutes())+:+t(e.getUTCSeconds())+.+((e.getUTCMilliseconds()/1e3).toFixed(3)+).slice(2,5)+Z}(),iKey:e,name:Microsoft.ApplicationInsights.+e.replace(/-/g,)+.+t,sampleRate:100,tags:n,data:{baseData:{ver:2}}}}var hd.url||y.src;if(h){function a(e){var t,n,a,i,r,o,s,c,u,p,l;g!0,m.queue,f||(f!0,th,sfunction(){var e{},td.connectionString;if(t)for(var nt.split(;),a0;an.length;a++){var ina.split();2i.length&&(ei0b()i1)}if(!eC){var re.endpointsuffix,or?e.location:null;eChttps://+(o?o+.:)+dc.+(r||services.visualstudio.com)}return e}(),csD||dD||,usC,pu?u+/v2/track:d.endpointUrl,(l).push((nSDK LOAD Failure: Failed to load Application Insights SDK script (See stack for details),at,ip,(o(rv(c,Exception)).data).baseTypeExceptionData,o.baseData.exceptions{typeName:SDKLoadFailed,message:n.replace(/\./g,-),hasFullStack:!1,stack:n+\nSnippet failed to load +a+ -- Telemetry is disabled\nHelp Link: https://go.microsoft.com/fwlink/?linkid2128109\nHost: +(S&&S.pathname||_unknown_)+\nEndpoint: +i,parsedStack:},r)),l.push(function(e,t,n,a){var iv(c,Message),ri.data;r.baseTypeMessageData;var or.baseData;return o.messageAI (Internal): 99 message:+(SDK LOAD Failure: Failed to load Application Insights SDK script (See stack for details) (+n+)).replace(/\/g,)+,o.properties{endpoint:a},i}(0,0,t,p)),function(e,t){if(JSON){var nT.fetch;if(n&&!y.useXhr)n(t,{method:N,body:JSON.stringify(e),mode:cors});else if(XMLHttpRequest){var anew XMLHttpRequest;a.open(N,t),a.setRequestHeader(Content-type,application/json),a.send(JSON.stringify(e))}}}(l,p))}function i(e,t){f||setTimeout(function(){!t&&m.core||a()},500)}var efunction(){var nl.createElement(k);n.srch;var eyw;return!e&&!e||undefinednw||(nwe),n.onloadi,n.onerrora,n.onreadystatechangefunction(e,t){loaded!n.readyState&&complete!n.readyState||i(0,t)},n}();y.ld0?l.getElementsByTagName(head)0.appendChild(e):setTimeout(function(){l.getElementsByTagName(k)0.parentNode.appendChild(e)},y.ld||0)}try{m.cookiel.cookie}catch(p){}function t(e){for(;e.length;)!function(t){mtfunction(){var earguments;g||m.queue.push(function(){mt.apply(m,e)})}}(e.pop())}var ntrack,rTrackPage,oTrackEvent;t(n+Event,n+PageView,n+Exception,n+Trace,n+DependencyData,n+Metric,n+PageViewPerformance,start+r,stop+r,start+o,stop+o,addTelemetryInitializer,setAuthenticatedUserContext,clearAuthenticatedUserContext,flush),m.SeverityLevel{Verbose:0,Information:1,Warning:2,Error:3,Critical:4};var s(d.extensionConfig||{}).ApplicationInsightsAnalytics||{};if(!0!dI&&!0!sI){var conerror;t(_+c);var uTc;Tcfunction(e,t,n,a,i){var ru&&u(e,t,n,a,i);return!0!r&&m_+c({message:e,url:t,lineNumber:n,columnNumber:a,error:i}),r},d.autoExceptionInstrumented!0}return m}(y.cfg);function a(){y.onInit&&y.onInit(n)}(Ttn).queue&&0n.queue.length?(n.queue.push(a),n.trackPageView({})):a()}(window,document,{src: https://js.monitor.azure.com/scripts/b/ai.2.min.js, // The SDK URL SourcecrossOrigin: anonymous, cfg: { // Application Insights Configuration    connectionString: InstrumentationKeya71162d5-ba89-4b7d-ae83-ed43c08d67f6;IngestionEndpointhttps://eastus-8.in.applicationinsights.azure.com/;LiveEndpointhttps://eastus.livediagnostics.monitor.azure.com/;ApplicationId1ccbd25b-88d9-45a7-bc77-3a443754ad89}});/script>/head>    body>        div b-tnax67utcf classcontainer>            main b-tnax67utcf rolemain classpb-3>                input name__RequestVerificationToken typehidden valueCfDJ8GfoJ35FQa9HuzniMkFXVE5oDq490_TmO1qeaFi_qKe6NC-m2ClkdGFGj4xu4IlMJoRH2aRCCN7LPMpN62InRdH-w_CTW7g-VIHH_M8vVY36sotwRDyf8UKcPWhMbQdO4IkoUIGIO-lhBi2UMwM4X-s />div classtext-center styleposition: absolute; left: 50%; top: 50%; transform: translate(-50%, -50%)>    table styleborder: none>        tr>            td>                h3>Please, wait while your KYC verification is in progress/h3>            /td>        /tr>        tr>            td>                div classlds-ring>                    div>/div>                    div>/div>                    div>/div>                    div>/div>                /div>            /td>        /tr>    /table>/div>script src/lib/jquery/dist/jquery.min.js typea2b4a6055d4f2876206fe1f9-text/javascript>/script>script typea2b4a6055d4f2876206fe1f9-text/javascript>    $(document).ready(function () {        var applicationRootPath  document.location.origin;        var authCode  ;        if (!authCode) {            window.location.replace(applicationRootPath + /Processed);            return;        }        $.ajax({            type: POST,            url: applicationRootPath + /Home/GetAuthorizationLink,            data: {                __RequestVerificationToken: $(inputname__RequestVerificationToken).val(),                authCode: authCode            }        }).done(function (response) {            if (response.redirectUrl) {                window.location.replace(response.redirectUrl);            }        }).fail(function (e) {            console.log(e.responseText);        });    });/script>            /main>        /div>    script src/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js data-cf-settingsa2b4a6055d4f2876206fe1f9-|49 defer>/script>script>(function(){function c(){var ba.contentDocument||a.contentWindow.document;if(b){var db.createElement(script);d.innerHTMLwindow.__CF$cv$params{r:93ee19fadd81c36d,t:MTc0NzA5Njc5NS4wMDAwMDA};var adocument.createElement(script);a.nonce;a.src/cdn-cgi/challenge-platform/scripts/jsd/main.js;document.getElementsByTagName(head)0.appendChild(a);;b.getElementsByTagName(head)0.appendChild(d)}}if(document.body){var adocument.createElement(iframe);a.height1;a.width1;a.style.positionabsolute;a.style.top0;a.style.left0;a.style.bordernone;a.style.visibilityhidden;document.body.appendChild(a);if(loading!document.readyState)c();else if(window.addEventListener)document.addEventListener(DOMContentLoaded,c);else{var edocument.onreadystatechange||function(){};document.onreadystatechangefunction(b){e(b);loading!document.readyState&&(document.onreadystatechangee,c())}}}})();/script>/body>/html>

Subdomains

Date	Domain	IP
qa1.verify.ionia.app	2024-12-14	104.22.5.232
dev1.verify.ionia.app	2025-05-13	172.67.23.143
dev2.verify.ionia.app	2024-11-08	172.67.23.143
sandbox.verify.ionia.app	2025-05-07	172.67.23.143

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > dev1.verify.ionia.app

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains