Domain > clearstepsplans.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-09-20	172.67.128.198 (ClassC)
2025-10-16	104.21.1.75 (ClassC)

HTTP/1.1 301 Moved PermanentlyDate: Thu, 16 Oct 2025 04:50:14 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveReport-To: {group:cf-nel,max_age:604800,endpoints:{url:https://a.nel.cloudflare.com/report/v4?sShoSEtAmSYcJvYXCtd7GnuXIOWroXAo4ej5yoU2GbG8rCT3ITIma2h5uOVTozsCHhuxFhx3291LZj9YO8BdOMQLzmjwbnXaROcovPYNpnSSQ}}Nel: {report_to:cf-nel,success_fraction:0.0,max_age:604800}Server: cloudflareLocation: https://clearstepsplans.com/platform: hostingerpanel: hpanelContent-Security-Policy: upgrade-insecure-requestsX-turbo-charged-by: LiteSpeedcf-cache-status: DYNAMICCF-RAY: 98f4ef24fc218e5d-PDXalt-svc: h3:443; ma86400

!DOCTYPE html>html styleheight:100%>head>meta nameviewport contentwidthdevice-width, initial-scale1, shrink-to-fitno />title> 301 Moved Permanently/title>style>@media (prefers-color-scheme:dark){body{background-color:#000!important}}/style>/head>body stylecolor: #444; margin:0;font: normal 14px/20px Arial, Helvetica, sans-serif; height:100%; background-color: #fff;>div styleheight:auto; min-height:100%; >     div styletext-align: center; width:800px; margin-left: -400px; position:absolute; top: 30%; left:50%;>        h1 stylemargin:0; font-size:150px; line-height:150px; font-weight:bold;>301/h1>h2 stylemargin-top:20px;font-size: 30px;>Moved Permanently/h2>p>The document has been permanently moved./p>/div>/div>/body>/html>

Port 443

HTTP/1.1 200 OKDate: Thu, 16 Oct 2025 04:50:14 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: keep-alivex-powered-by: PHP/8.2.27Report-To: {group:cf-nel,max_age:604800,endpoints:{url:https://a.nel.cloudflare.com/report/v4?slWS72mf%2FNUCDlyYZ%2Ba8BhqigbP%2FEGGLk2PxRC3WQ%2BJC2pj87oZCq2BOiLzR60EC958QTCyocbHJz%2F1zrtMuQ9GzLivnxXOXQ5%2BZy2RgOBDAa}}vary: Accept-EncodingServer: cloudflareplatform: hostingerpanel: hpanelcontent-security-policy: upgrade-insecure-requestsx-turbo-charged-by: LiteSpeedcf-cache-status: DYNAMICNel: {report_to:cf-nel,success_fraction:0.0,max_age:604800}CF-RAY: 98f4ef264ee3ff07-PDXalt-svc: h3:443; ma86400

!DOCTYPE html>html langen>	head>		meta charsetUTF-8 />		meta nameviewport contentwidthdevice-width, initial-scale1.0 />		title> Clearstepsplans /title>		link relstylesheet hrefcss/style.css?v2 />		link			relstylesheet			hrefhttps://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0/css/all.min.css		/>		script srchttps://cdnjs.cloudflare.com/ajax/libs/gsap/3.9.1/gsap.min.js>/script>		script srchttps://cdnjs.cloudflare.com/ajax/libs/a hreftel:+18668527987>+1 (866) 852-7987/a>/script>		script srchttps://code.jquery.com/jquery-3.6.0.min.js>/script>		link relpreconnect hrefhttps://fonts.googleapis.com />		link relpreconnect hrefhttps://fonts.gstatic.com crossorigin />		link			hrefhttps://fonts.googleapis.com/css2?familyNunito:ital,wght@0,200..1000;1,200..1000&displayswap			relstylesheet		/>	/head>	body>		div classheader>			div classtop-bar>				div classtop-bar-content>					div classlogo>						img altrelief-enroll srcimages/aidBenefit-logo.png />						span classlogo-text>strong>Clearstepsplans /strong>/span>					/div>				/div>			/div>			div classhero>				h1>					A Final Expense Plan Can Give Up to span idamount>$40,000/span> To a Loved One.				/h1>				p>Tell Us A Little About You/p>			/div>		/div>		div classform-container>			form idstepForm>				div classprogress-bar>					div classstep-indicator aria-labelStep Indicator>/div>				/div>					div classstep active idstep1>					h2 classstep-heading>Do you have a life insurance policy?/h2>					a href# classbtn next data-nextstep4>Yes/a>					a href# classbtn next data-nextstep2>No/a>				/div>				div classstep idstep2>					h2 classstep-heading>Do you have a checking account?/h2>					a href# classbtn next data-nextstep3>Yes/a>					a href# classbtn next data-nextstep4>No/a>				/div>				div classstep idstep3>					h2 classstep-heading>It looks like you may qualify for a life insurance policy benefit starting at as low as $1 a day!/h2>					p classstep-paragraph>Call to speak to a licensed agent/p>					a  classsubmit>(866) 810-2527/a>								/div>				div classstep idstep4>					h2 classstep-heading>Sorry, we cant help you./h2>					p>The questions you answered have helped us determine that we are not able to help you at this time./p>				/div>			/form>		/div>		div classfooter>		    	p classdisclaimer>b>Disclaimer: /b> Not affiliated with the U.S. government or federal Medicare program. A licensed agent may contact you regarding this insurance-related information. This is a solicitation for insurance./p>			p>				a href./terms.php>Terms & Conditions/a> | a href./privacy.php>Privacy Policy/a> 				span>©  2025 Clearstepsplans All Rights Reserved./span>			/p>		/div>		script srcjs/script.js?v3>/script>		script>            const values  25000, 35000, 40000;            function getRandomValue(availableValues) {                const randomIndex  Math.floor(Math.random() * availableValues.length);                return availableValuesrandomIndex;            }            function updateValue() {                const previousValue  localStorage.getItem(amountStor);                let availableValues  ...values;                if (previousValue) {                    availableValues  availableValues.filter(value > value ! parseInt(previousValue));                }                const randomValue  getRandomValue(availableValues);                localStorage.setItem(amountStor, randomValue);                document.getElementById(amount).innerText  `$${randomValue.toLocaleString(en-US)}`;            }            updateValue();		/script>		script>			document.addEventListener(DOMContentLoaded, function () {				const stepHeadings  document.querySelectorAll(.step-heading);				stepHeadings.forEach((heading) > {					gsap.set(heading, { opacity: 1 });					heading.innerHTML  heading.textContent						.split()						.map((letter) > `span classletter>${letter}/span>`)						.join();				});				const stepParagraph  document.querySelectorAll(.step-paragraph);				stepParagraph.forEach((heading) > {					gsap.set(heading, { opacity: 1 });					heading.innerHTML  heading.textContent						.split()						.map((letter) > `span classletter>${letter}/span>`)						.join();				});				function animateStepHeading(step) {					const letters  step.querySelectorAll(.letter);					if (letters.length) {						gsap.fromTo(							letters,							{ opacity: 0, y: 50 },							{ opacity: 1, y: 0, ease: back.out(1.7), stagger: 0.03 }						);					}				}				const steps  document.querySelectorAll(.step);				steps.forEach((step) > {					step.addEventListener(transitionstart, () > {						if (step.classList.contains(active)) {							animateStepHeading(step);						}					});				});				animateStepHeading(document.querySelector(.step.active));			});		/script>	/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > clearstepsplans.com

Is this malicious?

DNS Resolutions

Port 80

Port 443