Domain > hub.national.wildfiresuite.dev.timmons-dev.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-02-27	3.163.24.65 (ClassC)
2025-03-16	52.84.162.53 (ClassC)
2025-04-07	204.246.191.20 (ClassC)
2025-05-07	3.175.34.76 (ClassC)
2025-05-14	3.175.34.53 (ClassC)
2025-06-21	3.175.34.14 (ClassC)

HTTP/1.1 200 OKContent-Type: text/htmlContent-Length: 1356Connection: keep-aliveDate: Thu, 27 Feb 2025 12:13:09 GMTLast-Modified: Tue, 27 Aug 2024 14:48:42 GMTETag: d65171054c498baab3b0e1d1f1174bcbSer

!--    This page is todo, are you are looking fora href/rarm/>rarm/a>a href/user/organization>profile/a>a href/user/onboarding/>Onboarding/a>a href/admin/organization/>omm/a>a href/cwdg/>cwdg/a>a href/parm/>parm/a>a href/wds/>wds/a>-->Redirecting to the main page...script>    // We need to go up a domain    // This will be in the root of hub.some.domain.com    // We need to go to some.domain.com    // If we are localhost show the debug links    console.log(window.location.host);    if (window.location.host  localhost || window.location.host  localhost:4000 || window.location.host.indexOf(timmons) > -1) {        let links              /rarm/,            /user/organization,            /admin/organization/,            /cwdg/,            /parm/,            /wds/,            /user/onboarding/        ;        let html  ;        links.forEach(link > {            html + `a href${link}>${link}/a>br>`;        });        document.body.innerHTML  html;    } else {        let url  window.location.host;        let parts  url.split(.);        parts.shift();        let newUrl  parts.join(.);        newUrl  `${newUrl}/report`;        window.location.href  // + newUrl;    }/script>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > hub.national.wildfiresuite.dev.timmons-dev.com

Is this malicious?

DNS Resolutions

Port 80

Port 443