Domain > htlp.emp-online.ch

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2020-04-01	99.84.247.126 (ClassC)
2020-07-18	143.204.25.20 (ClassC)
2020-07-18	143.204.25.79 (ClassC)
2020-10-29	13.249.43.11 (ClassC)
2020-10-29	13.249.43.43 (ClassC)
2021-06-04	13.226.178.69 (ClassC)
2021-07-15	54.230.15.125 (ClassC)
2021-07-26	13.249.126.114 (ClassC)
2021-07-26	13.249.126.39 (ClassC)
2021-08-27	52.85.89.11 (ClassC)
2024-09-19	18.161.6.22 (ClassC)
2024-11-18	18.161.6.65 (ClassC)
2024-12-08	3.170.115.83 (ClassC)
2025-01-30	13.224.14.38 (ClassC)
2025-07-10	18.161.6.64 (ClassC)
2025-08-20	18.161.6.113 (ClassC)
2025-09-10	3.169.173.119 (ClassC)
2026-02-11	3.169.173.44 (ClassC)

HTTP/1.1 200 OKContent-Type: text/htmlContent-Length: 1898Connection: keep-aliveDate: Thu, 19 Sep 2024 21:01:29 GMTLast-Modified: Tue, 13 Jun 2023 08:52:53 GMTETag: 359b1e1b8aea29b556258d1690e92290x-a

!DOCTYPE html>html langen>    head>        meta charsetUTF-8>        title>emp.de - htlp/title>        script>            function extractHostname(url) {                var hostname;                //find & remove protocol (http, ftp, etc.) and get hostname                if (url.indexOf(//) > -1) {                    hostname  url.split(/)2;                } else {                    hostname  url.split(/)0;                }                //find & remove port number & ?                hostname  hostname.split(:)0;                hostname  hostname.split(?)0;                return hostname;            }            function extractDomain(url) {                var hostName  extractHostname(url);                var domain  hostName;                if (hostName ! null) {                    var parts  hostName.split(.).reverse();                    if (parts ! null && parts.length > 1) {                        domain  parts1 + . + parts0;                        if (hostName.toLowerCase().indexOf(.co.uk) ! -1 && parts.length > 2) {                          domain  parts2 + . + domain;                        }                    }                }                return domain;            }            function setCookie() {                var url      window.location.href;                var domain   extractDomain(url);                var d        new Date();                var cname    HtLpTx;                var cvalue   Awin;                d.setTime(d.getTime() + (1*24*60*60*1000)); //24h                var expires  expires + d.toGMTString();                document.cookie  cname +  + cvalue + ; + expires + ;domain.+domain+;path/;SameSitenone;Secure;            }        /script>    /head>    body onloadsetCookie()>/body>/html>

Port 443

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > htlp.emp-online.ch

Is this malicious?

DNS Resolutions

Port 80

Port 443