Domain > scripts.pay.bka.sh

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2018-08-01	13.32.222.205 (ClassC)
2018-09-20	52.222.209.217 (ClassC)
2018-09-20	52.222.209.250 (ClassC)
2019-04-13	52.84.134.171 (ClassC)
2019-04-13	52.85.255.233 (ClassC)
2019-04-13	52.84.134.47 (ClassC)
2019-04-13	52.85.255.243 (ClassC)
2019-04-13	52.85.255.8 (ClassC)
2019-06-20	52.84.134.146 (ClassC)
2019-08-03	52.84.141.193 (ClassC)
2019-08-03	52.84.141.146 (ClassC)
2019-08-06	52.84.141.34 (ClassC)
2019-09-07	143.204.47.63 (ClassC)
2019-10-01	13.225.38.61 (ClassC)
2019-10-01	54.230.14.50 (ClassC)
2019-10-19	54.230.95.35 (ClassC)
2019-10-19	54.230.95.61 (ClassC)
2019-10-21	13.224.196.96 (ClassC)
2019-10-21	13.224.196.58 (ClassC)
2019-10-21	13.224.196.60 (ClassC)
2019-11-12	13.225.78.127 (ClassC)
2019-11-12	13.225.78.56 (ClassC)
2019-11-30	54.240.168.102 (ClassC)
2019-12-25	143.204.229.124 (ClassC)
2019-12-25	13.249.11.60 (ClassC)
2020-04-14	13.227.223.106 (ClassC)
2020-04-14	13.227.223.121 (ClassC)
2020-04-14	13.227.223.86 (ClassC)
2020-04-24	13.249.8.7 (ClassC)
2020-04-24	13.249.8.96 (ClassC)
2020-04-29	13.227.198.112 (ClassC)
2020-06-16	143.204.89.57 (ClassC)
2020-07-21	13.249.12.83 (ClassC)
2020-07-21	13.249.12.6 (ClassC)
2020-09-10	13.225.65.58 (ClassC)
2020-09-10	13.225.65.3 (ClassC)
2020-10-20	65.8.186.25 (ClassC)
2020-10-20	65.8.186.76 (ClassC)
2020-10-24	13.32.145.21 (ClassC)
2020-10-24	13.32.145.62 (ClassC)
2020-10-24	13.32.145.93 (ClassC)
2020-12-20	143.204.90.114 (ClassC)
2020-12-20	143.204.90.87 (ClassC)
2021-01-09	13.32.219.88 (ClassC)
2021-01-15	13.225.62.23 (ClassC)
2021-01-15	13.225.62.70 (ClassC)
2021-01-16	13.225.25.89 (ClassC)
2021-03-05	13.225.31.53 (ClassC)
2021-03-05	13.225.31.8 (ClassC)
2021-03-24	13.225.29.75 (ClassC)
2021-06-06	54.230.103.19 (ClassC)
2021-07-24	54.192.101.54 (ClassC)
2021-08-28	54.230.161.11 (ClassC)
2021-08-29	143.204.0.69 (ClassC)
2021-10-10	52.222.149.20 (ClassC)
2021-10-10	52.222.149.44 (ClassC)
2021-10-29	65.9.83.129 (ClassC)
2021-11-01	13.35.199.114 (ClassC)
2021-12-11	13.249.42.21 (ClassC)
2022-07-26	13.225.34.90 (ClassC)
2023-03-19	108.138.64.50 (ClassC)
2024-04-04	3.163.158.66 (ClassC)
2024-05-22	18.161.6.100 (ClassC)
2024-07-18	18.164.96.68 (ClassC)
2024-08-07	18.161.6.53 (ClassC)
2024-08-27	18.161.6.76 (ClassC)
2024-09-07	108.138.246.6 (ClassC)
2024-10-28	204.246.191.63 (ClassC)
2025-02-06	18.238.238.63 (ClassC)
2025-04-10	204.246.191.25 (ClassC)
2025-04-22	3.175.34.56 (ClassC)
2025-07-03	18.238.238.125 (ClassC)
2025-07-20	204.246.191.18 (ClassC)
2025-08-01	204.246.191.58 (ClassC)

HTTP/1.1 403 ForbiddenContent-Type: text/htmlContent-Length: 1835Connection: keep-aliveDate: Tue, 09 Jan 2024 15:00:51 GMTLast-Modified: Mon, 17 Aug 2020 13:09:00 GMTETag: b622ec55ca25f8b9679cc54f5a57

!DOCTYPE html>html langen>head>meta http-equivContent-Type contenttext/html; charsetutf-8/>meta namedescription content/>meta nameauthor content/>meta nameviewportcontentuser-scalableno, initial-scale1.0, maximum-scale1.0, minimum-scale1.0, widthdevice-width/>title>bKa.sh/title>style>html{width: 100%;height: 100%;background: linear-gradient(to bottom, #ff8c00, #f2b264);}.center{position: absolute;left: 50%;top: 50%;transform: translate(-50%, -50%);}/style>/head>body>svg idlogo classcenter width120 height120 xmlnshttp://www.w3.org/2000/svg viewBox0 0 398 374>g idshapes>path fill#fffdM14.2 9c1.1 2.6 131.4 167.8 131.9 167.2.8-.9 41-146.4 40.6-146.9-.2-.1-38.1-4.8-84.3-10.3C56.3 13.5 17.5 8.9 16.2 8.7c-1.2-.3-2.1-.1-2 .3z/>path fill#fffdM191 31.2c0 .4-9.2 34-20.5 74.7l-20.4 73.9 11.1 50.1 11.1 50 62.6-31.6c34.4-17.3 67.2-34 72.8-37l10.2-5.4-15.2-21.2c-8.4-11.7-36.2-50.2-61.6-85.7C197.6 38.6 191 29.6 191 31.2z/>path fill#fffdM16 41.5c1.9 1.8 15.7 14.7 30.5 28.6C61.4 84.1 76.1 98 79.4 101c5.4 5.1-5-8.7-42.7-56.7l-4.9-6.2H12.5l3.5 3.4z/>path fill#fffdM312.5 128c-20.3 3.8-37.7 7-38.6 7.2-1.2.2 4.8 9.2 22.2 33.3 13.2 18.1 24.5 33.9 25.2 34.9 1.1 1.6 3.2-3.2 16.1-38.2 8.1-22.1 15-41 15.3-42.2.4-1.5.1-2-1.3-1.9-1.1.1-18.5 3.2-38.9 6.9z/>path fill#fffdM352.5 138.1c-3.3 8.9-6.1 16.5-6.3 17-.4 1 40.5 1 43.1 0 1.4-.6-1.2-3.8-13.9-17-8.6-8.9-15.9-16.2-16.3-16.2-.3 0-3.3 7.3-6.6 16.2z/>path fill#fffdM138.1 213.2C104 332.5 94.5 366.8 95.4 366.3c1.1-.7 74.1-59.7 76.4-61.8 1-.9-1.2-12.4-11.8-60.1-7.2-32.4-13.2-59.3-13.3-59.7-.1-.5-4 12.3-8.6 28.5z/>path fill#fffdM256.5 242c-33.5 17-60.8 31-60.5 31 .3 0 27.1-10.7 59.5-23.8l58.8-23.7 1.7-5c3-8.7 3.2-9.5 2.3-9.5-.4 0-28.2 14-61.8 31z/>/g>/svg>/body>/html>

Subdomains

Date	Domain	IP
uatdc.pay.bka.sh	2024-05-30	18.139.30.104
tokenized.pay.bka.sh	2025-06-27	13.251.255.34
directcharge.pay.bka.sh	2024-10-17	13.228.49.188
intent.recurring.pay.bka.sh	2025-07-03	18.138.141.239
uatmrportal.pay.bka.sh	2024-11-24	18.161.6.116
scripts.pay.bka.sh	2024-04-04	3.163.158.66

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > scripts.pay.bka.sh

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains