Domain > dev.internal.accesstoscripts.cambridgeassessment.org.uk

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2024-04-21	18.161.97.6 (ClassC)
2025-10-14	13.226.251.81 (ClassC)
2025-11-28	3.169.173.89 (ClassC)

HTTP/1.1 301 Moved PermanentlyServer: CloudFrontDate: Fri, 28 Nov 2025 23:27:26 GMTContent-Type: text/htmlContent-Length: 167Connection: keep-aliveLocation: https://dev.internal.accesstoscripts.cambridgeassessment.org.uk/X-Cache: Redirect from cloudfrontVia: 1.1 42eb5dfcc641e959ebaf60f01fc7d582.cloudfront.net (CloudFront)X-Amz-Cf-Pop: HIO52-P4X-Amz-Cf-Id: lcDFNPqnKvfoRd1qk2HR9NwI4UXYJkQtGzLE4qAjpcwRwnjGsBCKXQX-XSS-Protection: 1; modeblockX-Frame-Options: DENYReferrer-Policy: no-referrerContent-Security-Policy: default-src self; connect-src self *.cambridge.org *.gigya.com *.cambridgeenglish.cn *.cn1.sapcdm.cn *.cambridgeassessment.org.uk *.google-analytics.com *.analytics.google.com *.googletagmanager.com openid.qa.sso.cambridge.org; script-src sha256-erWpU8uMHbOnVRpiTCNsF7d223fyjIhe7Gl4KhUJMBk self *.googletagmanager.com *.gigya.com *.cambridgeenglish.cn *.cn1.sapcdm.cn; frame-src self; child-src self; object-src none; style-src unsafe-inline self; img-src self; base-uri self; sandbox allow-downloads allow-popups allow-forms allow-modals allow-scripts allow-same-origin; font-src fonts.gstatic.com self; form-action self; upgrade-insecure-requests; frame-ancestors self;X-Content-Type-Options: nosniffExpect-CT: max-age86400, enforceX-Permitted-Cross-Domain-Policies: none

html>head>title>301 Moved Permanently/title>/head>body>center>h1>301 Moved Permanently/h1>/center>hr>center>CloudFront/center>/body>/html>

Port 443

HTTP/1.1 200 OKContent-Type: text/htmlContent-Length: 2639Connection: keep-aliveServer: CloudFrontDate: Fri, 28 Nov 2025 18:01:24 GMTLast-Modified: Thu, 27 Nov 2025 06:08:34 GMTETag: b225ae1ae676e2a22b0e68793b5871d1Accept-Ranges: bytesContent-Security-Policy: default-src self; connect-src self *.cambridge.org *.gigya.com *.cambridgeenglish.cn *.cn1.sapcdm.cn *.cambridgeassessment.org.uk *.google-analytics.com *.analytics.google.com *.googletagmanager.com openid.qa.sso.cambridge.org; script-src sha256-erWpU8uMHbOnVRpiTCNsF7d223fyjIhe7Gl4KhUJMBk self *.googletagmanager.com *.gigya.com *.cambridgeenglish.cn *.cn1.sapcdm.cn; frame-src self; child-src self; object-src none; style-src unsafe-inline self; img-src self; base-uri self; sandbox allow-downloads allow-popups allow-forms allow-modals allow-scripts allow-same-origin; font-src fonts.gstatic.com self; form-action self; upgrade-insecure-requests; frame-ancestors self;Expect-CT: max-age86400, enforceReferrer-Policy: no-referrerStrict-Transport-Security: max-age15768000; includeSubDomainsX-Content-Type-Options: nosniffX-Frame-Options: DENYX-Permitted-Cross-Domain-Policies: noneX-XSS-Protection: 1; modeblockX-Region: USAccess-Control-Expose-Headers: x-regionAccess-Control-Allow-Origin: *Vary: Accept-EncodingX-Cache: Hit from cloudfrontVia: 1.1 42eb5dfcc641e959ebaf60f01fc7d582.cloudfront.net (CloudFront)X-Amz-Cf-Pop: HIO52-P4X-Amz-Cf-Id: KX0pXwLYAmUCQRaIk4c2GnuIAA41nrLr2XhbS01_V6_lq3M29Ogn4wAge: 19563

!DOCTYPE html>html langen>  head>    meta charsetutf-8 />    link relicon href/favicon.ico />    meta nameviewport contentwidthdevice-width, initial-scale1 />    meta nametheme-color content#000000 />    meta      namedescription      contentAccess to scripts external website    />    !--      manifest.json provides metadata used when your web app is installed on a      users mobile device or desktop. See https://developers.google.com/web/fundamentals/web-app-manifest/    -->    link relmanifest href/manifest.json />    !--      Notice the use of %PUBLIC_URL% in the tags above.      It will be replaced with the URL of the `public` folder during the build.      Only files inside the `public` folder can be referenced from the HTML.      Unlike /favicon.ico or favicon.ico, %PUBLIC_URL%/favicon.ico will      work correctly both with client-side routing and a non-root public URL.      Learn how to configure a non-root public URL by running `npm run build`.    -->    title>Access To Scripts/title>    !-- to fix the error Refuse  to load  script ....-->    !-- meta http-equivContent-Security-Policy contentdefault-src self; style-src * unsafe-inline; script-src * unsafe-inline; font-src self https://fonts.gstatic.com; connect-src *; base-uri self; object-src none /> -->    !-- Global site tag (gtag.js) - Google Analytics -->    !-- script async srchttps://www.googletagmanager.com/gtag/js?idG-2BRB65K6MX>/script> -->    !-- script>      windowga-disable-G-2BRB65K6MX  true      window.dataLayer  window.dataLayer || ;      function gtag(){dataLayer.push(arguments);}      console.log(THe)      if(typeof gtag ! undefined){        gtag(js, new Date());        gtag(config, G-2BRB65K6MX);      }    /script> -->    script typemodule crossorigin src/assets/index-4f8da993.js>/script>    link relmodulepreload crossorigin href/assets/vendor-87a35f87.js>    link relstylesheet href/assets/index-435ea207.css>  /head>  body>    noscript>You need to enable JavaScript to run this app./noscript>    div idroot>/div>        !--      This HTML file is a template.      If you open it directly in the browser, you will see an empty page.      You can add webfonts, meta tags, or analytics to this file.      The build step will place the bundled scripts into the body> tag.      To begin the development, run `npm start` or `yarn start`.      To create a production bundle, use `npm run build` or `yarn build`.    -->  /body>/html>

Subdomains

Date	Domain	IP
admin.qa-a.internal.accesstoscripts.cambridgeassessment.org.uk	2025-09-01	18.161.6.25
qa.internal.accesstoscripts.cambridgeassessment.org.uk	2025-01-27	13.224.14.23
admin.qa.internal.accesstoscripts.cambridgeassessment.org.uk	2024-08-01	99.84.66.58
admin.pp.internal.accesstoscripts.cambridgeassessment.org.uk	2025-02-15	99.84.66.31
dev.internal.accesstoscripts.cambridgeassessment.org.uk	2025-11-28	3.169.173.89

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > dev.internal.accesstoscripts.cambridgeassessment.org.uk

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains