Domain > 8be81fcb6d-is.blueflagsecurity.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-08-07	3.167.183.73 (ClassC)
2025-11-18	3.169.173.99 (ClassC)

HTTP/1.1 301 Moved PermanentlyServer: CloudFrontDate: Tue, 18 Nov 2025 10:17:24 GMTContent-Type: text/htmlContent-Length: 167Connection: keep-aliveLocation: https://8be81fcb6d-is.blueflagsecurity.com/X-Cache: Redirect from cloudfrontVia: 1.1 c5e1a6561d8dc3977e11160718fc75e8.cloudfront.net (CloudFront)X-Amz-Cf-Pop: HIO52-P4X-Amz-Cf-Id: WnA5T0KYKW3YO0GIHZB5EhxpH_AAmpGs5d_L5bMhK3heThdfRnQeuAX-Frame-Options: DENYContent-Security-Policy: default-src self; script-src self sha256-TsjSCX4yUK50HmnZXTe4FVW3iPTz1cIqzuXQu1ozcFU https://cdn.jsdelivr.net; style-src sha256-qN0d6FT3pRyau7L14JEHQMn8Ti4djslDh02iZNwfxjM sha256-wkY2X5hecQzbhnFCqvTpwrUJ1f4X8LH5WFjYUzv1wmU sha256-vCpS8VyHtSqXbN/JkDhke+jauUq+p7lBAVCL+C75wZo sha256-zgSxRnZhYL95SrlCCT5dv1FrNDaGYumofAC9vu36i5E sha256-1bzGMkEeI+/kFRn7HejIz9jDRdwW65cDGWZqgX3CTcQ sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU sha256-wkY2X5hecQzbhnFCqvTpwrUJ1f4X8LH5WFjYUzv1wmU sha256-lGP/R5jOMXytzwBHVEM5Nv4XbT9fuH6V2dET/0dje2s self https://cdn.jsdelivr.net https://fonts.googleapis.com; img-src self https://cdn.identityscience.ai https://fastapi.tiangolo.com data:; font-src self https://fonts.gstatic.com; frame-ancestors self; form-action self github.com; connect-src self cdn.identityscience.ai *.identityscience.ai *.blueflagsecurity.com;X-Content-Type-Options: nosniffCache-Control: no-cache, no-store, must-revalidate, max-age0Permissions-Policy: accelerometer(), ambient-light-sensor(), autoplay(), bluetooth(), battery(), camera(), cross-origin-isolated(), display-capture(), document-domain(), encrypted-media(), execution-while-not-rendered(), execution-while-out-of-viewport(), fullscreen(), geolocation(), gyroscope(), keyboard-map(), magnetometer(), microphone(), midi(), navigation-override(), payment(), picture-in-picture(), publickey-credentials-get(), screen-wake-lock(), sync-xhr(), usb(), web-share(), xr-spatial-tracking(), clipboard-read(self, https://*.identityscience.ai, https://*.blueflagsecurity.com), clipboard-write(self, https://*.identityscience.ai, https://*.blueflagsecurity.com), gamepad(), speaker-selection(), conversion-measurement(), focus-without-user-activation(), hid(), idle-detection(), interest-cohort(), serial(), sync-script(), trust-token-redemption(), unload(), window-placement(), vertical-scroll()Pragma: no-cacheVary: Origin

html>head>title>301 Moved Permanently/title>/head>body>center>h1>301 Moved Permanently/h1>/center>hr>center>CloudFront/center>/body>/html>

Port 443

HTTP/1.1 200 OKServer: CloudFrontContent-Type: text/htmlContent-Length: 1470Connection: keep-aliveDate: Tue, 18 Nov 2025 10:17:25 GMTLast-Modified: Tue, 04 Nov 2025 07:39:19 GMTETag: 607905f286f6ae7b90325fe4521f7796x-amz-server-side-encryption: AES256x-amz-version-id: .LdDT0E7Tc3MsUTUX6g2299rnGZYB7g_Accept-Ranges: bytesX-Cache: Error from cloudfrontVia: 1.1 ba53e0bccc2d60bfa0ca7719c7526e16.cloudfront.net (CloudFront)X-Amz-Cf-Pop: HIO52-P4X-Amz-Cf-Id: 6k9yAyBOVtBmwm7vE6WFXk5_ebtc53cmJzfl5Li_V7BV_2O6RyVK8wX-Frame-Options: DENYContent-Security-Policy: default-src self; script-src self sha256-TsjSCX4yUK50HmnZXTe4FVW3iPTz1cIqzuXQu1ozcFU https://cdn.jsdelivr.net; style-src sha256-qN0d6FT3pRyau7L14JEHQMn8Ti4djslDh02iZNwfxjM sha256-wkY2X5hecQzbhnFCqvTpwrUJ1f4X8LH5WFjYUzv1wmU sha256-vCpS8VyHtSqXbN/JkDhke+jauUq+p7lBAVCL+C75wZo sha256-zgSxRnZhYL95SrlCCT5dv1FrNDaGYumofAC9vu36i5E sha256-1bzGMkEeI+/kFRn7HejIz9jDRdwW65cDGWZqgX3CTcQ sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU sha256-wkY2X5hecQzbhnFCqvTpwrUJ1f4X8LH5WFjYUzv1wmU sha256-lGP/R5jOMXytzwBHVEM5Nv4XbT9fuH6V2dET/0dje2s self https://cdn.jsdelivr.net https://fonts.googleapis.com; img-src self https://cdn.identityscience.ai https://fastapi.tiangolo.com data:; font-src self https://fonts.gstatic.com; frame-ancestors self; form-action self github.com; connect-src self cdn.identityscience.ai *.identityscience.ai *.blueflagsecurity.com;X-Content-Type-Options: nosniffStrict-Transport-Security: max-age31536000; includeSubDomainsCache-Control: no-cache, no-store, must-revalidate, max-age0Permissions-Policy: accelerometer(), ambient-light-sensor(), autoplay(), bluetooth(), battery(), camera(), cross-origin-isolated(), display-capture(), document-domain(), encrypted-media(), execution-while-not-rendered(), execution-while-out-of-viewport(), fullscreen(), geolocation(), gyroscope(), keyboard-map(), magnetometer(), microphone(), midi(), navigation-override(), payment(), picture-in-picture(), publickey-credentials-get(), screen-wake-lock(), sync-xhr(), usb(), web-share(), xr-spatial-tracking(), clipboard-read(self, https://*.identityscience.ai, https://*.blueflagsecurity.com), clipboard-write(self, https://*.identityscience.ai, https://*.blueflagsecurity.com), gamepad(), speaker-selection(), conversion-measurement(), focus-without-user-activation(), hid(), idle-detection(), interest-cohort(), serial(), sync-script(), trust-token-redemption(), unload(), window-placement(), vertical-scroll()Pragma: no-cacheVary: Origin

!doctype html>html langen>head>meta charsetutf-8/>link relicon href/logo.png/>meta nameviewport contentwidthdevice-width,initial-scale1/>meta nametheme-color content#000000/>meta namedescription contentBlueFlag Security/>meta namepermissions-policy contentclipboard-read self; clipboard-write self>link relapple-touch-icon href/logo.png/>link relpreconnect hrefhttps://fonts.googleapis.com>link relpreconnect hrefhttps://fonts.gstatic.com crossorigin>link hrefhttps://fonts.googleapis.com/css2?familyPoppins:ital,wght@0,300;0,400;0,500;1,600;1,700&displayswap relstylesheet>style noncerandom1>@import url(https://fonts.googleapis.com/css2?familyInter:wght@100;200;300;400;500;600;700;800;900&familyPoppins:ital,wght@0,100;0,200;0,300;0,400;1,100;1,200;1,300;1,400&displayswap);/style>style noncerandom1>@import url(https://fonts.googleapis.com/css2?familyInter:wght@100;200;300;400;500;600;700;800;900&familyRoboto+Mono:ital,wght@0,100;0,200;0,300;0,400;1,100;1,200;1,300;1,400&displayswap);/style>link relmanifest href/manifest.json/>title>BlueFlag Security/title>script deferdefer src/static/js/main.95a665eb.js>/script>link href/static/css/main.d6ea45db.css relstylesheet>/head>body>noscript>You need to enable JavaScript to run this app./noscript>div idroot>/div>/body>script typetext/javascript nonceindex-page>/script>/html>

Subdomains

Date	Domain	IP
5204252337-oc.blueflagsecurity.com	2024-05-03	54.89.3.167
b849a068ca-oc.blueflagsecurity.com	2024-12-26	54.87.237.16
cffb9faa3c-oc.blueflagsecurity.com	2024-12-01	34.205.124.171
77326a25ac-oc.blueflagsecurity.com	2024-11-25	18.235.128.62
2362c06806-oc.devel.blueflagsecurity.com	2024-10-05	18.214.188.81
958d9926c7-oc.devel.blueflagsecurity.com	2024-12-26	54.82.22.129
1a06048a28-oc.devel.blueflagsecurity.com	2024-11-25	44.208.106.183
52cfd113ca-oc.devel.blueflagsecurity.com	2025-05-14	44.218.142.169
958d9926c7-ip.devel.blueflagsecurity.com	2024-11-24	44.213.158.227
e3a3f452a3-ip.blueflagsecurity.com	2025-07-14	3.94.70.206
772194258b-ip.blueflagsecurity.com	2024-11-24	3.230.73.140
connector-controller.blueflagsecurity.com	2025-01-17	52.204.186.141
01bdcab072-is.blueflagsecurity.com	2024-12-22	108.138.94.60
4566190f72-is.blueflagsecurity.com	2025-11-13	3.175.34.66
8be81fcb6d-is.blueflagsecurity.com	2025-11-18	3.169.173.99
aenetworks.blueflagsecurity.com	2024-11-22	108.138.94.77
xyz.devops.blueflagsecurity.com	2024-06-10	3.232.5.163
www.blueflagsecurity.com	2024-07-02	52.42.122.102

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > 8be81fcb6d-is.blueflagsecurity.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains