Domain > docs.tools.qax.io

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2021-08-14	13.225.51.65 (ClassC)
2021-08-14	13.225.51.92 (ClassC)
2024-03-01	204.246.191.79 (ClassC)
2024-08-03	18.161.6.118 (ClassC)
2024-12-22	18.172.170.55 (ClassC)
2025-04-12	18.161.6.98 (ClassC)
2025-06-04	204.246.191.117 (ClassC)

HTTP/1.1 403 ForbiddenContent-Type: text/htmlContent-Length: 1545Connection: keep-aliveDate: Wed, 14 Feb 2024 12:28:58 GMTLast-Modified: Tue, 19 Dec 2023 09:54:39 GMTETag: 6a88acc6b5a7a70480107cbbb42f

html langen>  head>    meta namegoogle-signin-scope contentprofile email>    meta namegoogle-signin-client_id content441141400514-nt6v1o7dm3ja12c409hihiooah9cv0tm.apps.googleusercontent.com>    script srchttps://apis.google.com/js/platform.js async defer>/script>  /head>  body>    script typetext/javascript>      if (window.location.protocol  http:) {          var restOfUrl  window.location.href.substr(5);          window.location  https: + restOfUrl;      }    /script>    div classg-signin2 data-onsuccessonSignIn>/div>    script>      function onSignIn(googleUser) {        fetch(https://m6b95gib5f.execute-api.us-east-1.amazonaws.com/Prod/google, {          method: POST,          body: JSON.stringify({id_token: googleUser.getAuthResponse().id_token})        })        .then((response) > response.text())        .then(function(text) {          var payload  JSON.parse(text);          document.cookie  `CloudFront-Key-Pair-Id${payloadCloudFront-Key-Pair-Id}; Path/; Secure; SameSiteStrict`;          document.cookie  `CloudFront-Policy${payloadCloudFront-Policy}; Path/; Secure; ; SameSiteStrict`;          document.cookie  `CloudFront-Signature${payloadCloudFront-Signature}; Path/; Secure; SameSiteStrict`;          if (location.pathname  /public/login.html) {            window.open(/, _self);          } else {            location.reload(forceGettrue);          }        })      };    /script>  /body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > docs.tools.qax.io

Is this malicious?

DNS Resolutions

Port 80

Port 443