Domain > lhhme.com.sg

Welcome! Right click nodes and scroll the mouse to navigate the graph.

More information on this domain is in AlienVault OTX

Files that talk to lhhme.com.sg

MD5	A/V
db2b644f3f3c69992e5b2f1210d633b8	[Trojan.Script.Locky.ecathk] [Trojan.DL-Obfus/JS!1.A509] [JS/Dldr.Locky.wty] [Js.Trojan.Raas.Auto] [trojan.js.downloader.1]
7a452bc3cab31b9e24a496de89d6bce6	[JS/Nemucod.BC2!Eldorado] [JS/TrojanDownloader.Nemucod.ABI] [Trojan.Script.Heuristic-js.iacgm] [Js.Trojan.Raas.Auto] [JS/Nemucod.BC2!Eldorado] [JS/Nemucod.aipezc] [Trojan.Obfus/JS!1.A54C] [JS/Nemucod!tr.dldr]
9e51222b3b247099124920e7c81dea71
e1aa04b34f1d456e7e8f31f085dab2f5
acac212b504c6f7cdaffd52df84ba5d5	[Trojan.Script.Heuristic-js.iacgm] [Js.Trojan.Raas.Auto]
e1a3017d78e3440362a47d6f7b92d0dc	[Trojan.Script.Heuristic-js.iacgm] [Js.Trojan.Raas.Auto]
5af702852b9aad2058fc12c8c853abfd
58bfb01ff07f496e26ae4c2617844339	[JS/TrojanDownloader.Nemucod.ASX] [JS:Trojan.JS.Downloader.LF] [Trojan.Script.Heuristic-js.iacgm] [Js.Trojan.Raas.Auto] [JS/Nemucod.3ED6!tr.dldr]

Whois

Property	Value
Name	LIAN HENG HUAT AIR-CON SERVICES PTE LTD
NameServer	DNS2.SINGHOST.NET
Created	2009-04-28 11:01:04
Changed	2016-02-17 00:29:48
Expires	2017-04-28 11:14:58
Registrar	IP MIRROR PTE LTD

DNS Resolutions

Date	IP Address
2025-01-16	103.9.101.111 (ClassC)

HTTP/1.1 200 OKDate: Sat, 13 Jan 2024 12:35:20 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: closeSet-Cookie: cl-bypass-cacheyes; ExpiresSat, 13-Jan-24 13:35:20 GMT; Domainlhhme.com.

!DOCTYPE html>html langen>head>    meta charsetUTF-8>    title>Captcha/title>    link relstylesheet          hrefhttps://maxcdn.bootstrapcdn.com/bootstrap/3.3.6/css/bootstrap.min.css          integritysha384-1q8mTJOASx8j1Au+a5WDVnPi2lkFfwwEAa8hDDdjZlpLegxhjVME1fgjWPGmkzs7          crossoriginanonymous>    link hrefdata:image/x-icon;base64,iVBORw0KGgoAAAANSUhEUgAAABAAAAAQEAYAAABPYyMiAAAABmJLR0T///////8JWPfcAAAACXBIWXMAAABIAAAASABGyWs+AAAAF0lEQVRIx2NgGAWjYBSMglEwCkbBSAcACBAAAeaR9cIAAAAASUVORK5CYII          relicon typeimage/x-icon/>    link hrefhttps://fonts.googleapis.com/css?familyNoto+Sans          relstylesheet>    script srchttps://ajax.googleapis.com/ajax/libs/jquery/3.6.3/jquery.min.js>/script>    script srchttps://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js>/script>    script srchttps://www.google.com/recaptcha/api.js?hlen            async defer>    /script>    style>        html, body {            height: 100%;        }        .wraper {            padding-bottom: 56px;            position: relative;            min-height: 100%;        }        .invisible_mode .wraper {            display: none;        }        .header {            height: 63px;            background-color: white;        }        .middle {            height: 186px;            background-color: rgba(55, 171, 99, 0.75);        }        .bottom {            background-color: #f2f2f2;            position: absolute;            bottom: 0px;            top: 249px;            width: 100%;        }        .captcha_absolute {            margin-top: -153px;        }        .captcha_div {            width: 485px;            margin: 0 auto;            box-shadow: 0 5px 8px 0 rgba(0, 0, 0, 0.18), 0 0 8px 0 rgba(0, 0, 0, 0.12);            background-color: white;            padding: 47px 48px 18px 48px;            position: relative;        }        .cap_head {            border-bottom: 1px solid #d8d8d8;            padding-bottom: 17px;            margin: 0 10px 20px 10px;        }        .logo_shield {            display: inline-block;

Port 443

HTTP/1.1 200 OKDate: Sat, 13 Jan 2024 12:35:21 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: closeSet-Cookie: cl-bypass-cacheyes; ExpiresSat, 13-Jan-24 13:35:21 GMT; Domainlhhme.com.

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > lhhme.com.sg

Is this malicious?

Files that talk to lhhme.com.sg

Whois

DNS Resolutions

Port 80

Port 443