Domain > img.beforeitsnews.com

More information on this domain is in AlienVault OTX

Whois

Property	Value
NameServer	NS-1689.AWSDNS-19.CO.UK
Created	2007-09-15 00:00:00
Changed	2012-07-24 00:00:00
Expires	2021-09-15 00:00:00
Registrar	GODADDY.COM, LLC

DNS Resolutions

Date	IP Address
2023-04-11	172.64.164.4 (ClassC)
2023-09-15	172.64.194.20 (ClassC)
2024-01-30	172.64.160.39 (ClassC)
2025-12-02	104.21.94.231 (ClassC)

HTTP/1.1 403 ForbiddenDate: Tue, 02 Dec 2025 15:44:58 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: closeaccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UAcf-mitigated: challengecritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UAcross-origin-embedder-policy: require-corpcross-origin-opener-policy: same-origincross-origin-resource-policy: same-originorigin-agent-cluster: ?1permissions-policy: accelerometer(),browsing-topics(),camera(),clipboard-read(),clipboard-write(),geolocation(),gyroscope(),hid(),interest-cohort(),magnetometer(),microphone(),payment(),publickey-credentials-get(),screen-wake-lock(),serial(),sync-xhr(),usb()referrer-policy: same-originserver-timing: chlray;desc9a7bf2df3964f8cbx-content-type-options: nosniffx-frame-options: SAMEORIGINCache-Control: private, max-age0, no-store, no-cache, must-revalidate, post-check0, pre-check0Expires: Thu, 01 Jan 1970 00:00:01 GMTReport-To: {endpoints:{url:https:\/\/a.nel.cloudflare.com\/report\/v4?s16VadL%2BL4pKW%2Fjem8hUteTR6Y3IGETsWfIFYzMeCWUyvYJZgggCEtPN%2BlDjJr%2FIvbNANc6aPZJOAQ2weCRs4686AehxCWIH2uGO6vBLrR0RMOPc%2FGaVsRawBgHPfb8D30xR8a1cvLZI%3D},group:cf-nel,max_age:604800}NEL: {success_fraction:0,report_to:cf-nel,max_age:604800}Strict-Transport-Security: max-age15552000; includeSubDomainsServer: cloudflareCF-RAY: 9a7bf2df3964f8cb-PDXalt-svc: h3:443; ma86400server-timing: cfL4;desc?protoTCP&rtt5733&min_rtt5532&rtt_var1684&sent4&recv6&lost0&retrans0&sent_bytes2868&recv_bytes732&delivery_rate523499&cwnd252&unsent_bytes0&cide7c1904649c585ef&ts29&x0

!DOCTYPE html>html langen-US>head>title>Just a moment.../title>meta http-equivContent-Type contenttext/html; charsetUTF-8>meta http-equivX-UA-Compatible contentIEEdge>meta namerobots contentnoindex,nofollow>meta nameviewport contentwidthdevice-width,initial-scale1>style>*{box-sizing:border-box;margin:0;padding:0}html{line-height:1.15;-webkit-text-size-adjust:100%;color:#313131;font-family:system-ui,-apple-system,BlinkMacSystemFont,Segoe UI,Roboto,Helvetica Neue,Arial,Noto Sans,sans-serif,Apple Color Emoji,Segoe UI Emoji,Segoe UI Symbol,Noto Color Emoji}body{display:flex;flex-direction:column;height:100vh;min-height:100vh}.main-content{margin:8rem auto;padding-left:1.5rem;max-width:60rem}@media (width  720px){.main-content{margin-top:4rem}}.h2{line-height:2.25rem;font-size:1.5rem;font-weight:500}@media (width  720px){.h2{line-height:1.5rem;font-size:1.25rem}}#challenge-error-text{background-image:url(data:image/svg+xml;base64,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);background-repeat:no-repeat;background-size:contain;padding-left:34px}@media (prefers-color-scheme: dark){body{background-color:#222;color:#d9d9d9}}/style>meta http-equivrefresh content360>/head>body>div classmain-wrapper rolemain>div classmain-content>noscript>div classh2>span idchallenge-error-text>Enable JavaScript and cookies to continue/span>/div>/noscript>/div>/div>script>(function(){window._cf_chl_opt  {cvId: 3,cZone: img.beforeitsnews.com,cType: managed,cRay: 9a7bf2df3964f8cb,cH: D4oJryC5tyrKeKBTt9bRcp63xXQ.Im3qdbrs9LfdySc-1764690298-1.2.1.1-D4G8YBvdQdOXT.l0g7_mYTX0sl7Go6PGQMR3aVB2EDR5WILGOKJ3xJeMc2ml8l0c,cUPMDTk:\/?__cf_chl_tkFd0yjeyiazx054Z651sBdoCTbTvjbm4b6jkQPccizTU-1764690298-1.0.1.1-xmkSs1JyjG_F4dPLzrWn2mzFPqCbJcDCnBF6KnyeLp4,cFPWv: b,cITimeS: 1764690298,cTplC:0,cTplV:5,cTplB: 0,fa:\/?__cf_chl_f_tkFd0yjeyiazx054Z651sBdoCTbTvjbm4b6jkQPccizTU-1764690298-1.0.1.1-xmkSs1JyjG_F4dPLzrWn2mzFPqCbJcDCnBF6KnyeLp4,md: cWmrdhjafNzdli8LfrhjNxPQzxkM1vdlxAxjMMMSpHw-1764690298-1.2.1.1-cjus4B_ekMqSKn6wtmTPSwAj_aQwaJAC3n9Mrc5vs9Nk_KfuowsEmhxAKtvGKq0gmKyAN_0W.3SG9RMCbRGpYSoldy6eST5A2S8ZuVF7bbxVca1kijPmORHkIKHXM3zUrOyiiCo3QAywR7XtKcMTZZZhBugYQVRv2f2RK.AXQOtPOI8NhNpR0pSERph.tB7.h4x415xloNlBkuGrygVa52ffH3fwam5ZaSlYAyq6eUvFi1lv_xhklmszcMVx9NdmCofT5nCGiKg_z3wBfOPLW7fRywFJmC.NUdAbHmmJDjr6tVg_CK7xi5wUol.osnv72_RRDEQHeh_DKxDNsWHuw7BFiY9p.HrorhLN5MPutcH7no0RsU3REdbbDhbr2Rjk29tSKAxn0kuqB1zKrr7VszN9ElXuDHLoqaVN321e9d3mni8l3LjwayoAANCZ4ueSPzuOsVwL8rptrff_2MruLMDrn.gvbVqQnjG_9f0V75a7M8ch6jPl98ttUdtxNjdotCzAnlEMWBfvA8IbO4ntyt_QagDYseG69JlEYI2OpQjbu25km55DlS4AH2TYa9WgrwYLycZ_6FdiId6.psfPdszvKZ8e9GJKhgLRzvHVBtNwUeXM5gwO4skjcrbmHVN7Z2_X7d0QMQkHYvuSsMR45aURXK25eAkfRsTXRhpCTdP1inr1Aky0A9EVyXlGrYbRWkAKKCaKiWlNuTp9hyDQ93MWU2B8B0QLifMm_i0v6XIL9uyPqCTFxn55pbomjSQgmTHwXOim5vW2kMDrLiXkKqzi5gvkG5kmnEvJFXsgtDo,mdrd: xJFX17ZGdVdlG.GKRctwlC5BaVQfzlBpkovt1bPx0rE-1764690298-1.2.1.1-tU7_f0bhqwdm_UluWzf1AGqr0sejxkBCigdx7RGCR86mdHdYP08gbD9FtswdzWfcxxWsGIuExA8QiVVgEYJ3VldyfkrOuX1Xd5eFnks46DgGw7E9s.Bu6RTE2aVkytkS367L4U7SNhYb0eT.uYMrPnmg0HIK6JnQ.A.vCAEMIyre0xz2pufWg4uU3fSXDLJvbFhFNvfig5J6buh9bLbbiN0iE6adrJwM3V_tmF8JmHb_Pi6HceQuWGQS7TY6Y07SPn9PrihqoRESEURMRyHM5t1yUFmsDzV3GOZ4P21FZgDCYHC6siFOxNRvk7QM1LYNaTIPp8vfv1l_Tjvx8pKk04Pq6ENIYa8hDlHLDs2Qpf3ldyA2v03LXNIrk_aTU4RhltSjLSFEpi96nzv5oK7VucBPTjBDZMxVug_Dmm6Fzzr.efacLO0b6Qo6SlrVbXjeECqe_CAVZ373te29uGUDWMatc.JlaidJhT.dw4XJN7LoIAZjzL8_v1UeLCr6Sb8E4x6DODVrUVxmk2OkXiF5EXtiwkYo3y.F1C54yjZidCZFbRtsOn9m_ASaceH637DUB6bHcGU5nnMX.WKAaEgECeq0A2Y.TDMZ_ZtNd88_BYjemx5wXKq.gpqUMMzIYo68dftq_zf380C0U8.3WOsj8QU7z14gqu8TqoZ9mwZ0qckMNHuXYnxZcS0HdEuXS6yWw3aqlX947ISHfz5AqJ4jPgVJEewETFeXn0dIyg924DZHB2To5MFLNlrxOgmXvycBhJFyd7aCltE4PQF5nuF4Ivijs.lcNqEhbPAqYvcG81ZD9t8X2ObVTi5nlFWAX2Yt4YKFxsIVGrqnWj5vgnTM_kvI5tbASqoch43RTwgEAoJ5rnsKcKBTVkk6N9rzANErrXadfdP0PAXJJdJ31bJEmfcEWHvIrHEtTdrndFsB3oaY.TVAbDHbNex1ZllGaoA51OFv816LWqf.yYkvngJ5hWNR1voFSME9WyRjv7kE9w2yj41EGCS8vaZgWCOl8oa.T7sdtWP8oGJhLesbRBmmE9YeIL1TA9pgLJb8ipH3eMiYzcWacDayLU9WYlY3fHWxFNrElgTLcJtvn2Xr3n1gxZW80_1XpgxdW5v07p5ayoWYfBUvROpO2My48DosuLc9_C9ss0KbYnlAEOQAhmV1gF6FdbAfxtlgYodz7KCsvts9wcIsacB4d8TBaNoXffIGSHqcm0ac7aBQ4kImjmMaq75wfxVWMkSNeV.LYRWNDz3aN2qJIZxDl5U5PnR3mQjjsPWRofdn6eoaRQWLTpsN_yRUsyGUkznqXeIfr2clH1vzjkQcGUFQls7IS4oAttmli63.PmSKLauTF0uNVzYm_Y5HsCLs7rKW.rRSewISX3jLE_7h9j6i5oAMZc1eKQfsZGDGsRtKuRM.8cfzHRwXBaYS.niRBmAJHXLoQxnU5LIeopCAQ9WBPHSKixV2esApdt5Ws6qZJ_jh1hfE7XvD6UB001nY9OS00smWlZqxcx9tuA5L6sbJEuSSzJ.swfJ9L7HY.e22Hmm9ZcJNfevJxriAYPGmuFVVG7XGFnf28uE1VOqguk.K8_OdZLmEdNWQgeut9p3gKbQGNS8LkNttIl_1WXWtl9mmdXxw9pnzVDtViONhqCfNhxb7Wa7iPgYPJ5uSkTLlP01sXhUbevWucvBNzD82eDMSYD4NgdpVrPIIT5Gl2tH576MOsQw2pCffqSaWAR95zvELE.sz1nStoL.klmCAN.tf.72fmCk9vbgpLetKi9a4EWKx6Nfm1rsx09cgJiUcH_v82UkU7.fvRah_8HiAj_5CUrHaC585r_TzY3sr9Bh6hxfwRBHnQvunOvsZzfFr.XofWh39olUGBio20iot6nUo9llAUFanJleGPrzQ.hUyZDAuBq91HKnQFso.Zc63EcMnayFH2cPdN2t0OtmuGh6FAexDhv7trleu.gpm2J8_OBDtT6lWC25X,};var a  document.createElement(script);a.src  /cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray9a7bf2df3964f8cb;window._cf_chl_opt.cOgUHash  location.hash   && location.href.indexOf(#) ! -1 ? # : location.hash;window._cf_chl_opt.cOgUQuery  location.search   && location.href.slice(0, location.href.length - window._cf_chl_opt.cOgUHash.length).indexOf(?) ! -1 ? ? : location.search;if (window.history && window.history.replaceState) {var ogU  location.pathname + window._cf_chl_opt.cOgUQuery + window._cf_chl_opt.cOgUHash;history.replaceState(null, null,\/?__cf_chl_rt_tkFd0yjeyiazx054Z651sBdoCTbTvjbm4b6jkQPccizTU-1764690298-1.0.1.1-xmkSs1JyjG_F4dPLzrWn2mzFPqCbJcDCnBF6KnyeLp4+ window._cf_chl_opt.cOgUHash);a.onload  function() {history.replaceState(null, null, ogU);}}document.getElementsByTagName(head)0.appendChild(a);}());/script>/body>/html>

Subdomains

Date	Domain	IP
a1.beforeitsnews.com	2023-08-15	172.64.165.4
a2.beforeitsnews.com	2023-08-15	172.64.165.4
ox-d.beforeitsnews.com	2014-07-23	173.241.240.12
img.beforeitsnews.com	2025-12-02	104.21.94.231
ox-i.beforeitsnews.com	2014-07-11	63.239.232.97
mail.beforeitsnews.com	2025-08-24	172.67.141.76
m.beforeitsnews.com	2025-04-20	172.67.141.76
www.beforeitsnews.com	2023-11-13	172.64.101.25
ajax.beforeitsnews.com	2023-08-15	172.64.164.4

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > img.beforeitsnews.com

Is this malicious?

Whois

DNS Resolutions

Port 80

Port 443

Subdomains