URL / Domain Profile

🌐 bazan.fhs.cloud

DOMAIN · host bazan.fhs.cloud · threat 0.50 (HIGH) · Malware Domains
First seen 2026-08-06 13:09:38 · last seen 2026-08-06 14:42:16
🔄 Pivot:📁 Malware Domains

Threat score

0.50
MEDIUM

Sightings

2
1 sources

Subdomains (local)

0
from indicators

Related IPs

1
A/AAAA records

DNS records (local)

12
6 types

Reporting sources

1
0 enrichments
PIVOT🌐 Domain Profile🔍 Advanced Search🕵 OSINT Pivot🔗 Link Analysis🕑 Timeline📤 Export STIX/MISP

📡 Reporting-source breakdown

Malware Domains
1
1 total source links on this indicator.

🏷 Tag breakdown (domain family)

medium-severity
1
auto-tagged
1

📈 DNS record-type counts

TXT
3
MX
3
NS
3
SOA
1
A
1
CNAME
1

📅 First-seen timeline (family)

2026-08
1

🏷 WHOIS / Registration (local cache)

No cached WHOIS for bazan.fhs.cloud. Resolve & cache.

🏷 Tags

medium-severity auto-tagged
CategoryMalware Domains
SeverityMEDIUM

📡 DNS Records

Stored (local dns_records) — 12

TypeValueTTLChecked
A 157.180.47.193 3600 2026-08-06
CNAME fhs.cloud 900 2026-08-06
MX fallbackmx.spamexperts.eu 900 2026-08-06
MX lastmx.spamexperts.net 900 2026-08-06
MX mx.spamexperts.com 900 2026-08-06
NS ns1.openprovider.nl 900 2026-08-06
NS ns2.openprovider.be 900 2026-08-06
NS ns3.openprovider.eu 900 2026-08-06
SOA ns1.openprovider.nl 21600 2026-08-06
TXT v=spf1 include:spf.fairwebhost.net include:spf.sendinblue.com +a +mx ~all 3600 2026-08-06
TXT Sendinblue-code:8deb49de5e14f00c359363ed6c38d488 3600 2026-08-06
TXT v=DMARC1; p=none; rua=mailto:support@fairhall.es; 3600 2026-08-06

Live (DNS-over-HTTPS · optional augmentation)

TypeValueTTL
A fhs.cloud. 900
A 157.180.47.193 3600
AAAA fhs.cloud. 900
MX fhs.cloud. 900
MX 20 fallbackmx.spamexperts.eu. 900
MX 10 mx.spamexperts.com. 900
MX 30 lastmx.spamexperts.net. 900
NS fhs.cloud. 900
NS ns1.openprovider.nl. 3600
NS ns3.openprovider.eu. 3600
NS ns2.openprovider.be. 3600
TXT fhs.cloud. 900
TXT v=DMARC1; p=none; rua=mailto:support@fairhall.es; 3600
TXT Sendinblue-code:8deb49de5e14f00c359363ed6c38d488 3600
TXT v=spf1 include:spf.fairwebhost.net include:spf.sendinblue.com +a +mx ~all 3600
CNAME fhs.cloud. 899

🖥 Related IPs (1)

Resolved from local A/AAAA records (augmented with live DoH when reachable). Each pivots to its IP dossier.

157.180.47.193 →

🌐 Subdomains — local intel (0)

No subdomains of bazan.fhs.cloud in local intel. Check crt.sh ↗

📡 Reporting Sources (1)

ThreatView DomainMalware Domains

🌐 Same-ASN domains (0)

No ASN linkage in local intel.

🔍 OSINT pivots — external lookups

urlscan.io →VirusTotal →crt.sh (CT) →SecurityTrails →whois (who.is) →DNSDumpster →Shodan →Censys →GreyNoise →URLhaus →ThreatMiner →Web Archive →

🔗 Internal pivots & actions

Advanced Search →OSINT Pivot (30+) →Correlation graph →Link analysis →Passive DNS →DNS Audit →Timeline →Takedown draft →Export STIX/MISP →Add to case →

📁 Case Management

+ New case from this
Every panel resolves local-first: threat, category, first-seen & sightings from indicators; DNS from dns_records; WHOIS from whois_cache; subdomains via bounded suffix match on indicators; related IPs from A/AAAA records; tags, reporting sources and the link graph from the local relations. Live OTX pulses and DNS-over-HTTPS are optional augmentation and their absence never blanks the dossier.
← Domain / URL Index
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports

🤖 AI Copilot

⚡ AI Skills

All SkillsResolveEnrichCorrelateSummarize

🔍 Lookup & Enrich

EnrichmentsPivotLink Analysis

📚 Docs & Reports

DocumentationGenerate ReportAPIPlatforms Hub

💡 Recommendations

⚙ Automation

DNS audit batch

Cron: 0 * * * * php /home/zaptf0zdggll/public_html/threats/cron.php

📜 Playbook

Open Response Playbook

🔗 Related Tools

Passive DNSOSINTTakedown