Domain > firstpaymentservices.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-11-18	104.21.86.74 (ClassC)
2026-01-18	172.67.216.145 (ClassC)

HTTP/1.1 403 ForbiddenDate: Sun, 01 Jun 2025 11:27:59 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: closeaccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Ve

!DOCTYPE html>html langen-US>head>title>Just a moment.../title>meta http-equivContent-Type contenttext/html; charsetUTF-8>meta http-equivX-UA-Compatible contentIEEdge>meta namerobots contentnoindex,nofollow>meta nameviewport contentwidthdevice-width,initial-scale1>style>*{box-sizing:border-box;margin:0;padding:0}html{line-height:1.15;-webkit-text-size-adjust:100%;color:#313131;font-family:system-ui,-apple-system,BlinkMacSystemFont,Segoe UI,Roboto,Helvetica Neue,Arial,Noto Sans,sans-serif,Apple Color Emoji,Segoe UI Emoji,Segoe UI Symbol,Noto Color Emoji}body{display:flex;flex-direction:column;height:100vh;min-height:100vh}.main-content{margin:8rem auto;max-width:60rem;padding-left:1.5rem}@media (width  720px){.main-content{margin-top:4rem}}.h2{font-size:1.5rem;font-weight:500;line-height:2.25rem}@media (width  720px){.h2{font-size:1.25rem;line-height:1.5rem}}#challenge-error-text{background-image:url(data:image/svg+xml;base64,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);background-repeat:no-repeat;background-size:contain;padding-left:34px}@media (prefers-color-scheme:dark){body{background-color:#222;color:#d9d9d9}}/style>meta http-equivrefresh content360>/head>body>div classmain-wrapper rolemain>div classmain-content>noscript>div classh2>span idchallenge-error-text>Enable JavaScript and cookies to continue/span>/div>/noscript>/div>/div>script>(function(){window._cf_chl_opt{cvId: 3,cZone: firstpaymentservices.com,cType: managed,cRay: 948e5d6fca0fc895,cH: ZfQIaromfOGPICZFmg9MI7wZtbEyRtOhn5zSAV2fpfQ-1748777279

Port 443

HTTP/1.1 200 OKDate: Sun, 01 Jun 2025 11:28:00 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: keep-aliveVary: Accept-EncodingLast-Modified: Sun, 01 Jun 2025 04:55:16 GMT

!DOCTYPE html>html langen-US>head>meta charsetUTF-8>script type59eb46feaf18f36f6cbd5622-text/javascript>if(navigator.userAgent.match(/MSIE|Internet Explorer/i)||navigator.userAgent.match(/Trident/7..*?rv:11/i)){var hrefdocument.location.href;if(!href.match(/?&nowprocket/)){if(href.indexOf(?)-1){if(href.indexOf(#)-1){document.location.hrefhref+?nowprocket1}else{document.location.hrefhref.replace(#,?nowprocket1#)}}else{if(href.indexOf(#)-1){document.location.hrefhref+&nowprocket1}else{document.location.hrefhref.replace(#,&nowprocket1#)}}}}/script>script type59eb46feaf18f36f6cbd5622-text/javascript>(()>{class RocketLazyLoadScripts{constructor(){this.v2.0.3,this.userEventskeydown,keyup,mousedown,mouseup,mousemove,mouseover,mouseenter,mouseout,mouseleave,touchmove,touchstart,touchend,touchcancel,wheel,click,dblclick,input,visibilitychange,this.attributeEventsonblur,onclick,oncontextmenu,ondblclick,onfocus,onmousedown,onmouseenter,onmouseleave,onmousemove,onmouseout,onmouseover,onmouseup,onmousewheel,onscroll,onsubmit}async t(){this.i(),this.o(),/iP(ad|hone)/.test(navigator.userAgent)&&this.h(),this.u(),this.l(this),this.m(),this.k(this),this.p(this),this._(),await Promise.all(this.R(),this.L()),this.lastBreathDate.now(),this.S(this),this.P(),this.D(),this.O(),this.M(),await this.C(this.delayedScripts.normal),await this.C(this.delayedScripts.defer),await this.C(this.delayedScripts.async),this.F(domReady),await this.T(),await this.j(),await this.I(),this.F(windowLoad),await this.A(),window.dispatchEvent(new Event(rocket-allScriptsLoaded)),this.everythingLoaded!0,this.lastTouchEnd&&await new Promise((t>setTimeout(t,500-Date.now()+this.lastTouchEnd))),this.H(),this.F(all),this.U(),this.W()}i(){this.CSPIssuesessionStorage.getItem(rocketCSPIssue),document.addEventListener(securitypolicyviolation,(t>{this.CSPIssue||script-src-elem!t.violatedDirective||data!t.blockedURI||(this.CSPIssue!0,sessionStorage.setItem(rocketCSPIssue,!0))}),{isRocket:!0})}o(){window.addEventListener(pageshow,(t>{this.persistedt.persisted,this.realWind

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > firstpaymentservices.com

Is this malicious?

DNS Resolutions

Port 80

Port 443