Domain > htlp.emp.at

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2018-11-07	143.204.158.105 (ClassC)
2018-11-07	143.204.158.125 (ClassC)
2018-11-07	143.204.158.56 (ClassC)
2020-03-22	99.84.247.126 (ClassC)
2020-03-27	13.226.191.69 (ClassC)
2020-10-13	143.204.166.59 (ClassC)
2020-10-30	13.249.43.11 (ClassC)
2020-10-30	13.249.43.43 (ClassC)
2024-06-03	18.161.6.64 (ClassC)
2024-09-02	18.161.6.113 (ClassC)
2025-03-09	13.224.14.15 (ClassC)
2025-03-16	13.224.14.87 (ClassC)
2025-07-21	13.224.14.92 (ClassC)
2025-08-23	18.161.6.22 (ClassC)
2025-09-07	18.161.6.65 (ClassC)
2026-02-11	3.169.173.44 (ClassC)

HTTP/1.1 200 OKContent-Type: text/htmlContent-Length: 1898Connection: keep-aliveLast-Modified: Tue, 13 Jun 2023 08:52:53 GMTx-amz-server-side-encryption: AES256x-amz-version-id: y9ThoJ.EG4u7UgOoGtF.SF

!DOCTYPE html>html langen>    head>        meta charsetUTF-8>        title>emp.de - htlp/title>        script>            function extractHostname(url) {                var hostname;                //find & remove protocol (http, ftp, etc.) and get hostname                if (url.indexOf(//) > -1) {                    hostname  url.split(/)2;                } else {                    hostname  url.split(/)0;                }                //find & remove port number & ?                hostname  hostname.split(:)0;                hostname  hostname.split(?)0;                return hostname;            }            function extractDomain(url) {                var hostName  extractHostname(url);                var domain  hostName;                if (hostName ! null) {                    var parts  hostName.split(.).reverse();                    if (parts ! null && parts.length > 1) {                        domain  parts1 + . + parts0;                        if (hostName.toLowerCase().indexOf(.co.uk) ! -1 && parts.length > 2) {                          domain  parts2 + . + domain;                        }                    }                }                return domain;            }            function setCookie() {                var url      window.location.href;                var domain   extractDomain(url);                var d        new Date();                var cname    HtLpTx;                var cvalue   Awin;                d.setTime(d.getTime() + (1*24*60*60*1000)); //24h                var expires  expires + d.toGMTString();                document.cookie  cname +  + cvalue + ; + expires + ;domain.+domain+;path/;SameSitenone;Secure;            }        /script>    /head>    body onloadsetCookie()>/body>/html>

Port 443

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > htlp.emp.at

Is this malicious?

DNS Resolutions

Port 80

Port 443