Report Overview

  1. Submitted URL

    dhm-mhn.com/floyd/htabukas.hta

  2. IP

    173.239.5.6

    ASN

    #27257 WEBAIR-INTERNET

  3. Submitted

    2023-01-18 08:44:59

    Access

  4. Website Title

  5. Final URL

  6. Tags

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    2

  3. Threat Detection Systems

    10

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
ocsp.pki.goog1750001-01-01T00:00:00Z0001-01-01T00:00:00Z
partner.googleadservices.com7980001-01-01T00:00:00Z0001-01-01T00:00:00Z
img-getpocket.cdn.mozilla.net16310001-01-01T00:00:00Z0001-01-01T00:00:00Z
firefox.settings.services.mozilla.com8670001-01-01T00:00:00Z0001-01-01T00:00:00Z
content-signature-2.cdn.mozilla.net11520001-01-01T00:00:00Z0001-01-01T00:00:00Z
contile.services.mozilla.com11140001-01-01T00:00:00Z0001-01-01T00:00:00Z
ocsp.digicert.com860001-01-01T00:00:00Z0001-01-01T00:00:00Z
d38psrni17bvxu.cloudfront.netunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
afs.googleusercontent.com121230001-01-01T00:00:00Z0001-01-01T00:00:00Z
r3.o.lencr.org3440001-01-01T00:00:00Z0001-01-01T00:00:00Z
push.services.mozilla.com21400001-01-01T00:00:00Z0001-01-01T00:00:00Z
c.parkingcrew.net705820001-01-01T00:00:00Z0001-01-01T00:00:00Z
dhm-mhn.comunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
ww9.dhm-mhn.comunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
www.google.com70001-01-01T00:00:00Z0001-01-01T00:00:00Z

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
mediumClient IP 173.239.5.6
mediumClient IP 173.239.5.6

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter
SeverityIndicatorAlert
mediumdhm-mhn.com/floyd/htabukas.htaMalware
mediumdhm-mhn.com/Malware
mediumdhm-mhn.com/Malware
mediumww9.dhm-mhn.com/Malware
mediumww9.dhm-mhn.com/ls.phpMalware

mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


JavaScript (19)

HTTP Transactions (41)

URLIPResponseSize
r3.o.lencr.org/
95.101.11.115200 OK503 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
dhm-mhn.com/floyd/htabukas.hta
173.239.5.6302 Moved Temporarily145 B
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK939 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
34.160.144.191200 OK5.3 kB
dhm-mhn.com/
173.239.5.6200 OK245 B
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK12 B
dhm-mhn.com/
173.239.5.6200 OK145 B
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK329 B
ocsp.digicert.com/
93.184.220.29200 OK471 B
ww9.dhm-mhn.com/
13.248.148.254200 OK7.5 kB
www.google.com/adsense/domains/caf.js
142.250.74.164200 OK54 kB
push.services.mozilla.com/
34.212.129.45101 Switching Protocols0 B
c.parkingcrew.net/scripts/sale_form.js
185.53.178.30200 OK761 B
ww9.dhm-mhn.com/track.php?domain=dhm-mhn.com&toggle=browserjs&uid=MTY3NDAzMTQ5MC4xMzA1OjczNmJiYmU2ZDE1NjZhOWVkNmZhMzFjOTA5ZTQxMjkzZTM5ODMwMDkyNGY4MmExMjlhMTVhODQyNzk2OTFiOTg6NjNjN2IxODIxZmRmNA%3D%3D
13.248.148.254200 OK20 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK472 B
d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png
54.230.245.8200 OK11 kB
ww9.dhm-mhn.com/ls.php
13.248.148.254201 Created0 B
www.google.com/afs/ads?adtest=off&psid=6016880802&pcsa=false&channel=000001%2Cbucket103&client=dp-teaminternet09_3ph&r=m&hl=en&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2541811284092968&oe=UTF-8&ie=UTF-8&fexp=21404&format=r3%7Cs&nocache=2361674031490459&num=0&output=afd_ads&domain_name=ww9.dhm-mhn.com&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1674031490460&u_w=1280&u_h=1024&biw=1280&bih=939&psw=1280&psh=797&frm=0&cl=500700135&uio=--&cont=tc&jsid=caf&jsv=500700135&rurl=http%3A%2F%2Fww9.dhm-mhn.com%2F&adbw=master-1%3A530
142.250.74.164200 OK2.0 kB
ocsp.pki.goog/gts1c3
142.250.74.131200 OK471 B
partner.googleadservices.com/gampad/cookie.js?domain=ww9.dhm-mhn.com&client=dp-teaminternet09_3ph&product=SAS&callback=__sasCookie
216.58.207.194200 OK241 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK472 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK471 B
ww9.dhm-mhn.com/favicon.ico
13.248.148.254200 OK0 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK471 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK471 B
afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff
172.217.21.161200 OK270 B
afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff
172.217.21.161200 OK174 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK471 B
ww9.dhm-mhn.com/track.php?domain=dhm-mhn.com&caf=1&toggle=answercheck&answer=yes&uid=MTY3NDAzMTQ5MC4xMzA1OjczNmJiYmU2ZDE1NjZhOWVkNmZhMzFjOTA5ZTQxMjkzZTM5ODMwMDkyNGY4MmExMjlhMTVhODQyNzk2OTFiOTg6NjNjN2IxODIxZmRmNA%3D%3D
13.248.148.254200 OK20 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
www.google.com/adsense/domains/caf.js
142.250.74.164200 OK61 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F053123e4-9914-4404-b1e9-cb5f3e38b7a2.jpeg
34.120.237.76200 OK12 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4ce66831-56e0-4f6e-ba05-da99c3485e5e.jpeg
34.120.237.76200 OK3.6 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe52164e3-afec-433e-87ab-adb17222f1cd.jpeg
34.120.237.76200 OK14 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F861225b5-aa80-4ecb-b68c-3a62a2e3d376.gif
34.120.237.76200 OK25 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F86f138af-59eb-444d-882b-80f5918f4405.jpeg
34.120.237.76200 OK11 kB