Domain > apu51.ez-pay.io

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2024-09-09	23.56.99.49 (ClassC)
2024-10-08	23.222.241.51 (ClassC)
2024-11-09	184.28.29.69 (ClassC)
2025-10-13	23.216.147.195 (ClassC)

HTTP/1.1 302 Moved TemporarilyContent-Type: text/html; charsetutf-8Location: https://apu51.ez-pay.io/Validate.aspx?billeridVmicfoDAU6X-FRAME-OPTIONS: DENYRequest-Context: appIdcid-v1:efe6b021-8ba8-460f-abed-0d8f618db971Access-Control-Expose-Headers: Request-ContextP3P: CPALL DSP COR CUR OUR STP UNI STA policyref/w3c/p3p.xmlX-Content-Type-Options: nosniffReferrer-Policy: strict-origin-when-cross-originContent-Security-Policy: script-src unsafe-inline unsafe-eval https://ajax.googleapis.com/ https://code.jquery.com/ https://maps.googleapis.com/ https://maps.google.com/ https://cdnjs.cloudflare.com/ https://js.braintreegateway.com/ https://pay.google.com/ https://www.google-analytics.com/ https://www.googletagmanager.com/ https://az416426.vo.msecnd.net/scripts/a/ai.0.js https://paynearme.com/ https://www.paynearme.com/ https://www.paynearme-sandbox.com/ https://support.kubra.com/ https://dc.services.visualstudio.com/v2/track https://*.paypal.com/ https://*.ez-pay.io/ https://ez-pay.io/ https://*.ez-pay.ca/ https://ez-pay.ca/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ p11.techlab-cdn.com; connect-src self https://www.google-analytics.com/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://maps.googleapis.com/ https://maps.google.com/ https://dc.services.visualstudio.com/ https://*.braintree-api.com/ https://*.braintreegateway.com https://*.lambda-url.us-east-1.on.aws/ https://*.lambda-url.us-west-2.on.aws/ https://*.paypal.com https://www.gstatic.com/ p11.techlab-cdn.com; child-src blob:; frame-src blob: https://www.google.com/ https://pay.google.com/ https://*.paypal.com/ https://*.braintreegateway.com https://paynearme.com/ https://www.paynearme.com/ https://www.paynearme-sandbox.com/ https://support.kubra.com/ https://*.pcipalstaging.cloud https://*.pcipal.cloudPermission-Policy: camera(),geolocation(),payment()Strict-Transport-Security: max-age31536000; includeSubDomainsX-Akamai-Transformed: 0 - 0 -Expires: Mon, 13 Oct 2025 18:12:29 GMTCache-Control: max-age0, no-cache, no-storePragma: no-cacheDate: Mon, 13 Oct 2025 18:12:29 GMTConnection: closeSet-Cookie: BNI_KUBRA_Secure8E1T9k1pplElUmq34R7Gp8aGSsEoxqXStVefVZZ3fJparfhAeUaqI_eUS0VgbOou7UwkRrHnOOD1EWgztj7NgGA; Path/; Max-age3600; ExpiresMon, 13 Oct 2025 19:12:29 GMTSet-Cookie: billerapu.ez-pay.io; expiresTue, 14-Oct-2025 18:12:29 GMT; path/; secure; HttpOnlySet-Cookie: EZ-PAYV51_sessionideog1iea4fxeeelevyppa4mf5; path/; secure; HttpOnly; SameSiteLaxSet-Cookie: SupportCookiesTrue; expiresTue, 14-Oct-2025 18:12:29 GMT; path/; secure; HttpOnlyAlt-Svc: h3:443; ma93600Akamai-Cache-Status: NotCacheable from childAkamai-GRN: 0.8dd02e17.1760379148.722ba018Set-Cookie: _abck789388BCC9D0193C437AD03924D18903~-1~YAAQjdAuFwPa1M2ZAQAAcBzG3g7ih7orFcvRC2lPtNhDYVMEoY0pOWvL86n+HEOfgqoqqGuNbzeWh/+NdvK9Ck8VVjWgnW4dhZgL0QmrD9aTZtfgtExTiAmrHiY4NTdqRh7irJ58NkNzG6qJt/85R2B747kTZuwDM0b7YYMH1tGN1bXyLX4+v3XquPlXbt8tuu3s9O/E/6HVoyJ4ROrvj/rTWJ/sMPeASAjhezZytRDvdWyI0jFFFxOt5Nzg3P2EJfzEKJ2Mdg4a5GKNnUAvRmHsZtAbgkdDJRTTLjH7XkOvm5WMN3QWd5R0LAx7tvUc0ISEVLCog+VPYPxznUtS6mU7hTm0tRgkcdbFEEJ+4QFEDg6qB60bVT3wJnK5A2VhAlmZb44W0IEJWx6DG4VA46MO8w7tR7wbiT7knXbnufcsRTI7Xk2zKoAY/jiuNnqdSbrusQ~-1~-1~-1~-1~-1; Domain.ez-pay.io; Path/; ExpiresTue, 13 Oct 2026 18:12:29 GMT; Max-Age31536000; SecureSet-Cookie: bm_sz9AD0961FF9EEF0BAF6B539B8B512A8F7~YAAQjdAuFwTa1M2ZAQAAcBzG3h2TOAJBkjnxUdocbEnQqzGOLTLKzvPyKgBU+ueFZ9kb2IGvu9F9oYqR7Kvu2Zm1r3IM1fEE8GmwyZ6zzUx7mgkQew6/AelK8NlcuQfQfHc5YLqb8TtV5hdCrNim1NSIh7E6gf9ZjFjRPQGL0so0ZJBtOpKAznriCtqk+qHNqYT3V1xydmQzd25kZ+vA/6/krOXKPMGAj+yRnwiVNsEi3TOFL+B6AG/qoRNG90XHbi5Ex/9W7js/SJltrP5uv9cazjnC+bDLykbVNb0yvadXZCr+SlmK1zTz/sLjZJfwVonSlanSpLM7dbdbR+2ZqXdad6xbhfXmg9Ujsg~3486258~3158839; Domain.ez-pay.io; Path/; ExpiresMon, 13 Oct 2025 22:12:28 GMT; Max-Age14399

html>head>title>Object moved/title>/head>body>h2>Object moved to a hrefhttps://apu51.ez-pay.io/Validate.aspx?billeridVmicfoDAU6>here/a>./h2>script typetext/javascript  src/KU_hbV/g2im7f/wpKf/iAWkVc/9iBfM/YkOXcVQ5YOSacpu5/ZxJDZw/PFo/qREAUK0s>/script>/body>/html>!DOCTYPE html>html xmlnshttp://www.w3.org/1999/xhtml>head>title>/title>/head>body>    form methodpost action./ idform1>input typehidden name__VIEWSTATE id__VIEWSTATE valuefZtBMBejwHycZRnADfB0p5LBPuopd7kfxMAYRFhdQrIjqiZzsqFSAPFXEVg8R52cFgtyRvNqXVt0z3xLjYqVReo73Po />input typehidden name__VIEWSTATEGENERATOR id__VIEWSTATEGENERATOR valueCA0B0334 />        div>        /div>    input typehidden name__ncforminfo value0RdnQfMtLjU8NaJ48kpq71raWZzdwJSM7SbA0WVVccdNB4kaEoYnzWCA20wFtABelLBnuFveETipqKVlHcB5Sg/>/form>/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > apu51.ez-pay.io

Is this malicious?

DNS Resolutions

Port 443