Domain > joshuatdownscpa.client.myfirm360.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-02-21	18.164.116.54 (ClassC)
2025-10-16	3.169.173.46 (ClassC)

HTTP/1.1 301 Moved PermanentlyServer: CloudFrontDate: Thu, 16 Oct 2025 00:58:29 GMTContent-Type: text/htmlContent-Length: 167Connection: keep-aliveLocation: https://joshuatdownscpa.client.myfirm360.com/X-Cache: Redirect from cloudfrontVia: 1.1 6957b6fac4a3f8180355a074ea5833e2.cloudfront.net (CloudFront)X-Amz-Cf-Pop: HIO52-P4X-Amz-Cf-Id: xKfwmIGYRQl8kI8i1oJLuC4dTB_t-5jM_PqMYLUedbse3379EEV93wX-XSS-Protection: 1; modeblockX-Frame-Options: DENYReferrer-Policy: strict-origin-when-cross-originContent-Security-Policy: default-src self; style-src self unsafe-inline https://fonts.googleapis.com https://*.pendo.io https://pendo-static-6263542545973248.storage.googleapis.com; img-src self data: blob: https://chart.googleapis.com https://*.amazonaws.com https://filethis.com https://*.myfirm360.com https://*.client.myfirm360.com https://*.pendo.io https://pendo-static-6263542545973248.storage.googleapis.com www.googletagmanager.com https://*.google-analytics.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://*.google.com; font-src self data: blob: https://fonts.googleapis.com https://fonts.gstatic.com https://*.pendo.io; script-src self unsafe-inline https://*.stripe.com https://connect.filethis.com https://unpkg.com/polymer-build@2.1.1/lib/babel-helpers.min.js https://*.pendo.io https://pendo-static-6263542545973248.storage.googleapis.com https://www.googletagmanager.com https://*.googletagmanager.com; child-src self blob: https://*.stripe.com/ https://*.pendo.io https://firm360.zendesk.com; media-src self blob:; frame-src self blob: https://*.stripe.com https://*.pendo.io https://firm360.zendesk.com https://www.googletagmanager.com; connect-src self blob: https://*.myfirm360.com https://connect.filethis.com https://filethis.com https://*.pendo.io https://pendo-static-6263542545973248.storage.googleapis.com www.googletagmanager.com www.google.com https://*.google-analytics.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://*.google.com https://pagead2.googlesyndication.com; worker-src self blob:X-Content-Type-Options: nosniffCross-Origin-Embedder-Policy: unsafe-noneCross-Origin-Opener-Policy: unsafe-noneCross-Origin-Resource-Policy: same-originPermissions-Policy: unsized-media(self), geolocation(self)Vary: Origin

html>head>title>301 Moved Permanently/title>/head>body>center>h1>301 Moved Permanently/h1>/center>hr>center>CloudFront/center>/body>/html>

Port 443

HTTP/1.1 200 OKContent-Type: text/htmlContent-Length: 2853Connection: keep-aliveLast-Modified: Wed, 08 Oct 2025 11:40:43 GMTx-amz-server-side-encryption: AES256Accept-Ranges: bytesServer: AmazonS3Date: Thu, 16 Oct 2025 00:58:30 GMTCache-Control: public,no-cache,no-store,must-revalidateETag: 3328d8c11e01d2443d751c9454914c08X-Cache: RefreshHit from cloudfrontVia: 1.1 8af7e76489ae9222af2304e63d2c0520.cloudfront.net (CloudFront)X-Amz-Cf-Pop: HIO52-P4X-Amz-Cf-Id: seO7Cf2hP16bEh6HdSGrlJHnGNBSi8rH5bJgezYPQGo41ETvMBh2ZgX-XSS-Protection: 1; modeblockX-Frame-Options: DENYReferrer-Policy: strict-origin-when-cross-originContent-Security-Policy: default-src self; style-src self unsafe-inline https://fonts.googleapis.com https://*.pendo.io https://pendo-static-6263542545973248.storage.googleapis.com; img-src self data: blob: https://chart.googleapis.com https://*.amazonaws.com https://filethis.com https://*.myfirm360.com https://*.client.myfirm360.com https://*.pendo.io https://pendo-static-6263542545973248.storage.googleapis.com www.googletagmanager.com https://*.google-analytics.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://*.google.com; font-src self data: blob: https://fonts.googleapis.com https://fonts.gstatic.com https://*.pendo.io; script-src self unsafe-inline https://*.stripe.com https://connect.filethis.com https://unpkg.com/polymer-build@2.1.1/lib/babel-helpers.min.js https://*.pendo.io https://pendo-static-6263542545973248.storage.googleapis.com https://www.googletagmanager.com https://*.googletagmanager.com; child-src self blob: https://*.stripe.com/ https://*.pendo.io https://firm360.zendesk.com; media-src self blob:; frame-src self blob: https://*.stripe.com https://*.pendo.io https://firm360.zendesk.com https://www.googletagmanager.com; connect-src self blob: https://*.myfirm360.com https://connect.filethis.com https://filethis.com https://*.pendo.io https://pendo-static-6263542545973248.storage.googleapis.com www.googletagmanager.com www.google.com https://*.google-analytics.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://*.google.com https://pagead2.googlesyndication.com; worker-src self blob:X-Content-Type-Options: nosniffStrict-Transport-Security: max-age63072000; includeSubDomains; preloadCross-Origin-Embedder-Policy: unsafe-noneCross-Origin-Opener-Policy: unsafe-noneCross-Origin-Resource-Policy: same-originPermissions-Policy: unsized-media(self), geolocation(self)Vary: Origin

!doctype html>html langen data-bs-themelight>    head>link relpreconnect hrefhttps://fonts.gstatic.com crossorigin>        script>            (function (w, d, s, l, i) {                wl  wl || ;                wl.push({ gtm.start: new Date().getTime(), event: gtm.js });                var f  d.getElementsByTagName(s)0,                    j  d.createElement(s),                    dl  l ! dataLayer ? &l + l : ;                j.async  true;                j.src  https://www.googletagmanager.com/gtm.js?id + i + dl;                f.parentNode.insertBefore(j, f);            })(window, document, script, dataLayer, GTM-MDX99THG);        /script>        meta charsetutf-8/>        title>Firm360 Client Access/title>        base href//>        meta nameviewport contentwidthdevice-width, initial-scale1/>        link iddynamic-favicon relicon typeimage/png/>        style>@font-face{font-family:Dancing Script;font-style:normal;font-weight:400;font-display:swap;src:url(https://fonts.gstatic.com/s/dancingscript/v29/If2cXTr6YS-zF4S-kcSWSVi_sxjsohD9F50Ruu7BMSo3Rep8ltA.woff2) format(woff2);unicode-range:U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;}@font-face{font-family:Dancing Script;font-style:normal;font-weight:400;font-display:swap;src:url(https://fonts.gstatic.com/s/dancingscript/v29/If2cXTr6YS-zF4S-kcSWSVi_sxjsohD9F50Ruu7BMSo3ROp8ltA.woff2) format(woff2);unicode-range:U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;}@font-face{font-family:Dancing Script;font-style:normal;font-weight:400;font-display:swap;src:url(https://fonts.gstatic.com/s/dancingscript/v29/If2cXTr6YS-zF4S-kcSWSVi_sxjsohD9F50Ruu7BMSo3Sup8.woff2) format(woff2);unicode-range:U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;}/style>    link relstylesheet hrefstyles.512e58c274a49e98.css>/head>    body>        noscript>            iframe                srchttps://www.googletagmanager.com/ns.html?idGTM-MDX99THG                height0                width0                styledisplay: none; visibility: hidden                titleGoogle Tag Manager            >/iframe>        /noscript>        app-root>/app-root>    script srcruntime.540ce34f56d1a080.js typemodule>/script>script srcpolyfills.781f09ec2cd40847.js typemodule>/script>script srcmain.001ecd2ebe0d0700.js typemodule>/script>/body>/html>

Subdomains

Date	Domain	IP
bacpa.myfirm360.com	2024-12-27	204.246.191.2
staging.myfirm360.com	2025-02-23	204.246.191.49
client.staging.myfirm360.com	2024-12-01	3.163.24.127
api.myfirm360.com	2025-10-12	54.87.246.68
accounsel.myfirm360.com	2022-01-23	54.192.73.81
admin.myfirm360.com	2024-02-22	204.246.191.49
app.myfirm360.com	2024-07-13	204.246.191.49
ddrcpa.client.myfirm360.com	2025-10-14	3.169.173.46
joshuatdownscpa.client.myfirm360.com	2025-10-16	3.169.173.46

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > joshuatdownscpa.client.myfirm360.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains