Domain > api.cfataxhub.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2018-09-17	13.33.165.12 (ClassC)
2018-09-17	52.84.146.167 (ClassC)
2019-12-09	99.86.58.93 (ClassC)
2020-01-09	52.85.77.112 (ClassC)
2020-01-13	99.84.167.21 (ClassC)
2020-01-13	99.84.167.32 (ClassC)
2020-01-13	52.85.77.8 (ClassC)
2020-01-29	13.249.79.111 (ClassC)
2020-01-30	99.84.251.12 (ClassC)
2020-01-30	99.84.251.61 (ClassC)
2020-01-30	99.84.251.96 (ClassC)
2024-09-23	18.161.6.109 (ClassC)
2024-09-30	18.161.6.78 (ClassC)
2024-10-26	18.161.6.115 (ClassC)
2025-06-05	18.161.6.42 (ClassC)

HTTP/1.1 200 OKContent-Type: text/html;charsetUTF-8Content-Length: 7639Connection: keep-aliveDate: Fri, 08 Mar 2024 08:56:32 GMTServer: nginx/1.22.1Pragma: no-cacheCache-Control: no-storeX-Frame-Optio

!DOCTYPE HTML PUBLIC -//W3C//DTD HTML 4.0 Transitional//EN>html>head>		link relstylesheet hrefstyles/common.css TYPEtext/css>	link relstylesheet hrefstyles/theme/bluegold.css typetext/css>		!--if IE>	link relstylesheet hrefstyles/iestyles.css typetext/css mediaall/>	!endif-->	title>		ONESOURCE - Determination	/title>	link relshortcut icon hreffavicon.ico>	script typetext/javascript>		if (window.location.href ! window.top.location.href)		{			window.top.location.replace(window.location.href);		}	/script>/head>body classpopup onloadpageLoad();>div idLoginBody classbody>	table width100% height90%>		tr>			td aligncenter valignmiddle>				form namepasswordform idpasswordform actionaction?sabrixActionNameSubmitLoginPage					  methodPOST>					table classloginbox aligncenter cellspacing0 cellpadding0>						tr>							td colspan3>								div>img srcimages/determination_login_header.png										  altONESOURCE INDIRECT TAX DETERMINATION/>/div>							/td>						/tr>						tr>							td colspan3>								img srcimages/determination_login.jpg altONESOURCE INDIRECT TAX DETERMINATION/>							/td>						/tr>						tr>							td alignleft>								table cellspacing0 cellpadding0>									tr>										td alignleft>											div classdeterminationLogin>LOGIN/div>										/td>										td alignleft>											table classloginUserNamePasswordPanel>												tr>													td>														div classloginUserNamePasswordLabel>Username:														/div>													/td>													td>input typetext classloginUserNamePasswordTextBox															   idusername															   nameusername tabindex1															   onkeypresscheckForSubmit(event)															   onfocusthis.select()>/td>												/tr>												tr>													td>														div classloginUserNamePasswordLabel>Password:														/div>													/td>													td>input typepassword namepassword idpassword															   tabindex2 onkeypresscheckForSubmit(event)															   onfocusthis.select()															   autocompleteoff															   classlogin

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > api.cfataxhub.com

Is this malicious?

DNS Resolutions

Port 80

Port 443