Domain > my.costsavertour.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2020-04-18	143.204.142.121 (ClassC)
2020-04-18	143.204.142.59 (ClassC)
2020-04-18	143.204.142.92 (ClassC)
2025-07-10	99.84.66.94 (ClassC)
2025-07-17	99.84.66.108 (ClassC)
2025-10-21	3.169.173.103 (ClassC)
2026-02-19	3.169.173.75 (ClassC)

HTTP/1.1 200 OKContent-Type: text/htmlContent-Length: 53740Connection: keep-aliveLast-Modified: Tue, 13 Feb 2024 11:28:06 GMTx-amz-server-side-encryption: AES256Accept-Ranges: bytesServer: AmazonS3Str

!doctype html>html langen>head>meta charsetutf-8>meta nameviewport contentwidthdevice-width,initial-scale1,minimum-scale1,shrink-to-fitno,user-scalableno>meta nametheme-color content#000000>link relmanifest href/costsaver/media/manifest.json>link relshortcut icon href/costsaver/media/costsaver.ico>title>My Travel Portal/title>script typetext/javascript srchttps://paymentgateway.travcorpservices.com/hosted/js/dependencies>/script>link relstylesheet hrefhttps://sso.travcorpservices.com/AccountManagement/Content/sso-plugins.css>link relstylesheet hrefhttps://cloud.typography.com/7853016/7339412/css/fonts.css>script>!function(e,t,a,n,g){enen||,en.push({gtm.start:(new Date).getTime(),event:gtm.js});var mt.getElementsByTagName(a)0,rt.createElement(a);r.async!0,r.srchttps://www.googletagmanager.com/gtm.js?idGTM-5GMPB3,m.parentNode.insertBefore(r,m)}(window,document,script,dataLayer)/script>link href/costsaver/css/main.css relstylesheet>link asscript href/asset-manifest.json relpreload>link asstyle href/costsaver/css/main.css relpreload>link asscript href/costsaver/js/all-_4f7e.07601311e021ca73f838.js relpreload>link asscript href/costsaver/js/all-_8131-_3fc0-_ed1b-_d17e.2399cc6091b4e0548333.js relpreload>link asscript href/costsaver/js/main.07601311e021ca73f838.js relpreload>link asscript href/costsaver/js/npm.asn1js.08338f9e94ebb467921f.js relpreload>link asscript href/costsaver/js/npm.attr-accept.78fc8039e36596118906.js relpreload>link asscript href/costsaver/js/npm.awesome-phonenumber.07601311e021ca73f838.js relpreload>link asscript href/costsaver/js/npm.axios.07601311e021ca73f838.js relpreload>link asscript href/costsaver/js/npm.babel-preset-react-app.1791f8a3fd6fd370fe82.js relpreload>link asscript href/costsaver/js/npm.babel.07601311e021ca73f838.js relpreload>link asscript href/costsaver/js/npm.bail.09b6af025f10720fad1c.js relpreload>link asscript href/costsaver/js/npm.base64-js.07601311e021ca73f838.js relpreload>link asscript href/costsaver/js/npm.bnjs.7bcf74c5d2be6bd91414.js relpreload>link asscript href/costsav

Subdomains

Date	Domain	IP
image.email.costsavertour.com	2024-09-16	23.54.19.139
uat.bookings.costsavertour.com	2024-11-26	99.84.66.84
www.costsavertour.com	2025-01-15	18.161.6.73
my.costsavertour.com	2025-07-10	99.84.66.94

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > my.costsavertour.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains