Domain > items.ems.post

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2020-06-26	99.84.176.104 (ClassC)
2020-06-26	99.84.176.105 (ClassC)
2020-06-26	99.84.176.100 (ClassC)
2021-09-05	13.226.38.3 (ClassC)
2021-09-05	13.226.38.83 (ClassC)
2021-09-05	13.226.38.91 (ClassC)
2021-10-02	13.227.40.29 (ClassC)
2022-01-28	18.67.65.35 (ClassC)
2024-03-04	204.246.191.91 (ClassC)
2024-09-28	18.161.6.22 (ClassC)
2025-04-05	204.246.191.27 (ClassC)

Port 80

HTTP/1.1 200 OKContent-Type: text/html;charsetUTF-8Transfer-Encoding: chunkedConnection: keep-aliveDate: Thu, 06 Jun 2024 19:06:38 GMTServer: nginx/1.22.0Content-Security-Policy: frame-ancestors self

!DOCTYPE HTML>html>  head>    title>Public Tracking - EMS/title>    meta http-equivContent-Type contenttext/html; charsetUTF-8 />    meta nameviewport contentwidthdevice-width, initial-scale1>    link hrefhttps://fonts.googleapis.com/css?familyArimo relstylesheet>    link href/assets/styles/publicTracking.css relstylesheet typetext/css />    script typetext/javascript>      function showTable(itemId) {        const tables  document.getElementsByClassName(result-table);        for (i  0; i  tables.length; i++) {          tablesi.className +  hidden;        }        document.getElementById(table- + itemId).classList.remove(hidden);        const menu  document.getElementsByClassName(menu-item);        for (i  0; i  menu.length; i++) {          menui.classList.remove(active);        }        document.getElementById(menu-item- + itemId).classList.add(active);      }    /script>  /head>  body>    div>            form action/api/publicTracking/track methodget>        div classrow>          div classcol-language>            select idpublicTrackingView.language namelanguage>              option                valueEN                idEN>English/option>              option                valueES                idES>Español/option>              option                valueFR                idFR>Français/option>              option                valuePT                idPT>Português/option>            /select>          /div>          div classcol-item-id>            input typetext idpublicTrackingView.itemId placeholderEnter your tracking number nameitemId value>          /div>          div classcol-buttons>            button idpublicTrackingView.track typesubmit classsubmit>Track span classright-pointing-triangle> /span>/button>            div classreset >              a idpublicTrackingView.clear href/api/publicTracking/clear>Clear/a>            /div>          /div>        /div>      /form>    /div>      /body>/html>

Port 443

HTTP/1.1 200 OKContent-Type: text/html;charsetUTF-8Transfer-Encoding: chunkedConnection: keep-aliveDate: Thu, 06 Jun 2024 19:06:38 GMTServer: nginx/1.22.0Content-Security-Policy: frame-ancestors self

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > items.ems.post

Is this malicious?

DNS Resolutions

Port 80

Port 443