j.hn - URL scan, 21 Aug 2026
MalwareAnalyzer by Cyble scanned j.hn and returned a unknown verdict (score -12). The page resolved to 69.195.72.228 on Unified Layer in US. The domain was registered 5755 days ago through 1387. 5 domains and 1 IP were contacted, over 18 HTTP requests. 4 malware samples communicate with this URL. The request followed 1 redirect before landing. This is a point-in-time observation from 21 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score -12) · Confidence 15%
- Scanned URL:
http://j.hn/ - Domain: j.hn · IP: 69.195.72.228 · AS46606 · US
- Server: nginx/1.29.8
- Page title: John Dyer - Theology, Technology, Society
- HTTP status: 200 · text/html; charset=UTF-8
- Registrar: 1387 · domain age 5755 days · created 2010-11-17
- TLS issuer: C=US, O=Let's Encrypt, CN=YR2 · valid to Oct 25 11: · subject CN=cpanel.j.hn
- HTTP requests captured: 18
- Scan tier: fast · observed 2026-08-21 12:23:34 UTC
Redirect chain
http://j.hn/https://j.hn/
Malware communicating with this URL (4)
These samples were observed contacting or being served from j.hn. Each links to its full analysis.
- c5d311214e7a917b299ea0b2edd00332b2c6c6a644039f9bb4237cce00235b7b - referenced ·
c5d311214e7a917b299ea0b2edd00332· first seen 2026-08-21 - de69d264f2959bd42b967726664badfaf0fe151449ce880cf330629ddf6b9010 - referenced ·
de69d264f2959bd42b967726664badfa· first seen 2026-08-20 - bd551bcf712734ec3228165e2745f34e6ded5e1a14b12c22a067d4f6fbb1a9ed - referenced ·
bd551bcf712734ec3228165e2745f34e· first seen 2026-08-20 - 11ba9e6c2091a692ffc734431fc130be39b3103c60eaa07c0548bab50de11687 - referenced ·
11ba9e6c2091a692ffc734431fc130be· first seen 2026-08-16
Antivirus & YARA (0 of 47 engines)
No engine flagged this page's content.
Why this verdict
- Valid TLS, no impersonation or off-origin credential post
Detected technologies
- Nginx
- WordPress
- Google Analytics
- jQuery
Contacted infrastructure
- 69.195.72.228 - AS46606 Unified Layer (United States)
Observed indicators
- j.hn
- gmpg.org
- www.googletagmanager.com
- catchthemes.com
- api.reftagger.com
- 69.195.72.228
- https://j.hn/
- http://gmpg.org/xfn/11
- https://j.hn/page/2/
- https://j.hn/feed/
- https://j.hn/comments/feed/
- https://j.hn/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=6.1.7
- https://j.hn/wp-content/fonts/a71994410e093a7d7c3211f721d4b6d1.css
- https://j.hn/wp-content/themes/simple-persona/style.css?ver=20220901-114246
- https://j.hn/wp-content/themes/simple-persona/assets/css/blocks.css?ver=1.0
- https://j.hn/wp-includes/js/jquery/jquery.min.js?ver=3.7.1
- https://j.hn/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1
- https://j.hn/wp-json/
- https://j.hn/xmlrpc.php?rsd
- https://www.googletagmanager.com/gtag/js?id=G-0TTRWYF0N2
Other scans of j.hn (5)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 23 Aug 2026 - unknown
- 23 Aug 2026 - unknown ·
http://www.mediaelementjs.com/ - 21 Aug 2026 - unknown ·
http://www.mediaelementjs.com/ - 20 Aug 2026 - unknown
- 20 Aug 2026 - unknown ·
http://www.mediaelementjs.com/
Questions about j.hn
- Is j.hn safe?
- The scan of j.hn on 21 Aug 2026 reached no verdict either way (score -12). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with j.hn?
- 4 analysed samples communicate with this URL.
- How was j.hn checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of j.hn
Scanned on MalwareAnalyzer by Cyble · Open interactive scan