Domain > hawthornecat.pay.handle.com

More information on this domain is in AlienVault OTX

Whois

Property	Value
NameServer	NS2.DNSIMPLE.COM
Created	1996-03-12 00:00:00
Changed	2016-02-23 00:00:00
Expires	2022-03-12 00:00:00
Registrar	GODADDY.COM, LLC

DNS Resolutions

Date	IP Address
2024-12-18	13.249.74.111 (ClassC)
2025-11-15	3.163.24.81 (ClassC)

HTTP/1.1 200 OKContent-Type: text/htmlContent-Length: 4738Connection: keep-aliveDate: Sat, 15 Nov 2025 05:51:29 GMTLast-Modified: Thu, 13 Nov 2025 13:20:08 GMTETag: bdc889f7ea73665dd0405accbfb555b4x-amz-server-side-encryption: AES256Cache-Control: max-age0, s-maxage60, must-revalidateAccept-Ranges: bytesServer: HandleX-Cache: Miss from cloudfrontVia: 1.1 f36cc119cb86b2f70c315ca53fd1b4ee.cloudfront.net (CloudFront)X-Amz-Cf-Pop: HIO52-P2X-Amz-Cf-Id: _8nYsUPHRyqMscYN5fx2h2R0tinP8bycfhNBhwxCiYnl9zqYsDB-mgX-XSS-Protection: 1; modeblockX-Frame-Options: SAMEORIGINReferrer-Policy: strict-origin-when-cross-originContent-Security-Policy: frame-ancestors https://*.handle.comX-Content-Type-Options: nosniffStrict-Transport-Security: max-age31536000; includeSubDomains; preloadPermissions-Policy: geolocation(self), fullscreen(self), camera(), microphone()Vary: Origin

!DOCTYPE html>html langen>  head>    meta charsetutf-8 />    link href/favicon.ico relicon />    meta contentwidthdevice-width, initial-scale1 nameviewport />    meta content#367ef9 nametheme-color />    meta      contentPayment Portal      namedescription    />    link href/images/favicon192.png relapple-touch-icon />    !--      manifest.json provides metadata used when your web app is installed on a      users mobile device or desktop. See https://developers.google.com/web/fundamentals/web-app-manifest/    -->    link href/manifest.json relmanifest />    !--      Notice the use of %PUBLIC_URL% in the tags above.      It will be replaced with the URL of the `public` folder during the build.      Only files inside the `public` folder can be referenced from the HTML.      Unlike /favicon.ico or favicon.ico, %PUBLIC_URL%/favicon.ico will      work correctly both with client-side routing and a non-root public URL.      Learn how to configure a non-root public URL by running `npm run build`.    -->    title>Payment Portal/title>    !-- Google Tag Manager -->    script>(function(w,d,s,l,i){wlwl||;wl.push({gtm.start:        new Date().getTime(),event:gtm.js});var fd.getElementsByTagName(s)0,      jd.createElement(s),dll!dataLayer?&l+l:;j.asynctrue;j.src      https://www.googletagmanager.com/gtm.js?id+i+dl;f.parentNode.insertBefore(j,f);    })(window,document,script,dataLayer,GTM-NZ9MGM96);/script>    !-- End Google Tag Manager -->    script typemodule crossorigin src/assets/index-DAPi-96j.js>/script>    link relmodulepreload crossorigin href/assets/html2pdf-vendor-dVgjswDo.js>    link relmodulepreload crossorigin href/assets/firebase-vendor-CeJxjAIZ.js>    link relmodulepreload crossorigin href/assets/vendor-DSRI7_Wy.js>    link relmodulepreload crossorigin href/assets/lodash-vendor-BwcEusu_.js>    link relmodulepreload crossorigin href/assets/mui-vendor-pKG1B-0X.js>    link relmodulepreload crossorigin href/assets/moment-vendor-B2yRmYMi.js>    link relmodulepreload crossorigin href/assets/node-forge-vendor-BPbAdIYA.js>    link relmodulepreload crossorigin href/assets/tracker-vendor-BhlzDipV.js>    link relstylesheet crossorigin href/assets/vendor-e4d1JPt9.css>    link relstylesheet crossorigin href/assets/index-VlSC_CtA.css>    script typemodule>import.meta.url;import(_).catch(()>1);(async function*(){})().next();if(location.protocol!file:){window.__vite_is_modern_browsertrue}/script>    script typemodule>!function(){if(window.__vite_is_modern_browser)return;console.warn(vite: loading legacy chunks, syntax error above and the same error below should be ignored);var edocument.getElementById(vite-legacy-polyfill),ndocument.createElement(script);n.srce.src,n.onloadfunction(){System.import(document.getElementById(vite-legacy-entry).getAttribute(data-src))},document.body.appendChild(n)}();/script>  /head>  body>    noscript>You need to enable JavaScript to run this app./noscript>    div classhui-app idroot>/div>    !--      This HTML file is a template.      If you open it directly in the browser, you will see an empty page.      You can add webfonts, meta tags, or analytics to this file.      The build step will place the bundled scripts into the body> tag.      To begin the development, run `npm start` or `yarn start`.      To create a production bundle, use `npm run build` or `yarn build`.    -->    !-- Google Tag Manager (noscript) -->    noscript>iframe srchttps://www.googletagmanager.com/ns.html?idGTM-NZ9MGM96                      height0 width0 styledisplay:none;visibility:hidden>/iframe>/noscript>    !-- End Google Tag Manager (noscript) -->    script nomodule>!function(){var edocument,te.createElement(script);if(!(noModulein t)&&onbeforeloadin t){var n!1;e.addEventListener(beforeload,(function(e){if(e.targett)n!0;else if(!e.target.hasAttribute(nomodule)||!n)return;e.preventDefault()}),!0),t.typemodule,t.src.,e.head.appendChild(t),t.remove()}}();/script>    script nomodule crossorigin idvite-legacy-polyfill src/assets/polyfills-legacy-DVmmN4iu.js>/script>    script nomodule crossorigin idvite-legacy-entry data-src/assets/index-legacy-3swZeK8E.js>System.import(document.getElementById(vite-legacy-entry).getAttribute(data-src))/script>  /body>  script srchttps://maps.googleapis.com/maps/api/js?keyAIzaSyA1dJnN_erhww3tl5ICnc7oJBgHRd7Qf9E&librariesplaces typetext/javascript>/script>/html>

Subdomains

Date	Domain	IP
api.staging.handle.com	2025-10-04	35.190.32.67
app.staging.handle.com	2024-07-30	3.163.24.96
api.handle.com	2025-10-04	35.201.111.117
email.handle.com	2025-09-28	3.163.24.37
app.production.handle.com	2025-01-14	18.238.238.105
ahern.handle.com	2024-07-16	3.163.24.8
app.handle.com	2024-07-01	3.163.24.90
files.handle.com	2025-10-04	35.190.66.165
sftp-mgmt.handle.com	2025-10-04	35.190.66.165
hawthornecat.pay.handle.com	2025-11-15	3.163.24.81

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > hawthornecat.pay.handle.com

Is this malicious?

Whois

DNS Resolutions

Port 80

Port 443

Subdomains