Domain > aag.cleversteam.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2020-12-10	108.128.136.88 (ClassC)
2025-08-08	63.33.229.84 (ClassC)

HTTP/1.1 200 OKDate: Fri, 08 Aug 2025 02:34:41 GMTContent-Type: text/html; charsetutf-8Transfer-Encoding: chunkedConnection: keep-aliveSet-Cookie: AWSALB2Nm5luA+W5953QN7IUH+F07RPOReOBCfReZR60xBN5csq6bIvM8y7L2W3MjseeMmNGK0Ney86H9bAYaAwGXW3T6B2KKcwBuQiNBHh1+z36CJ47WwyfIwUhzh2xgn; ExpiresFri, 15 Aug 2025 02:34:41 GMT; Path/Set-Cookie: AWSALBCORS2Nm5luA+W5953QN7IUH+F07RPOReOBCfReZR60xBN5csq6bIvM8y7L2W3MjseeMmNGK0Ney86H9bAYaAwGXW3T6B2KKcwBuQiNBHh1+z36CJ47WwyfIwUhzh2xgn; ExpiresFri, 15 Aug 2025 02:34:41 GMT; Path/; SameSiteNone; SecureServer: Apache/2.4.53 (Amazon) OpenSSL/1.0.2k-fips Phusion_Passenger/6.0.26Cache-Control: max-age0, private, must-revalidateVary: Accept,Accept-EncodingStrict-Transport-Security: max-age63072000; includeSubDomainsX-Request-Id: 47efa27c-e91a-4999-bf9d-98a9f12f09bblink: /assets/saas_hanover/login-48e7a5404fb8069a8b09b9f0dcda5076ef33a4dfaa7d20e716016b3e45d95a6f.css>; relpreload; asstyle; nopush,/assets/login-e95510017febba636944098993674bb63cc3c5df744c6411cc16b016dca8ec17.js>; relpreload; asscript; nopushX-Frame-Options: ALLOWALLX-Runtime: 0.017488X-Powered-By: Phusion Passenger(R) 6.0.26Set-Cookie: _Hanover_session5iDYOI7Fit%2F0Uwt2uuDpz8JwzDG0C67TN31g7CsC9v4o53%2ByDuTU4VVl5gx8NAWJlq%2Bma4adAz3McIzTrKmNUcZPogzl5sGCRFSsyl8Q3nuP%2FaSEsuP1h2nGBuCxkKqnTxuMCdJA8EslErn1K9POAz4ZRhDWUcJM9of%2BdFpSgL8VIui7kBGl0KyPMHxdjNHYYG1g%2FxBZhXSLIWR5iGlsGnRfLm2P3w7FTs%2FLDUO9xMAGDA93IYXci4Y4AGQNGatJUJojc4h5YMZfbGNyq3jGn7GMcrVUyohO--qRMh85KvlAyMe5id--2OozYFfbOinN1rZqGLnfEA%3D%3D; path/; secure; HttpOnly; SameSiteLaxETag: W/2b20892e17f09b6d5ebceeb2891074a2Status: 200 OK

!DOCTYPE html>html langen>head>  meta charsetUTF-8>  meta nameviewport contentwidthdevice-width, user-scalableno>    title>Login | Aag/title>  link relstylesheet href/assets/saas_hanover/login-48e7a5404fb8069a8b09b9f0dcda5076ef33a4dfaa7d20e716016b3e45d95a6f.css mediaall data-turbolinks-trackreload />    !-- Google tag (gtag.js) -->  script async srchttps://www.googletagmanager.com/gtag/js?idG-ZXH4G2KJND>/script>  script> window.dataLayer  window.dataLayer || ;  function gtag() {      dataLayer.push(arguments);  }  gtag(js, new Date());  gtag(config, G-ZBV2JBQT4V);  /script>  script typetext/javascript srchttps://www.google.com/jsapi>/script>  script typetext/javascript charsetutf-8>      google.load(visualization, 1.0, {packages:corechart});  /script>  meta namecsrf-param contentauthenticity_token />meta namecsrf-token contenteowUoYCuiBZikwSfREcohD30YkyC1W2SE1sPV1YZpfRl_h3rK-2r-q-zZazti5gjtRnaQGs7_xtevOzalUCzDQ />  script    srchttps://code.jquery.com/jquery-3.3.1.min.js    integritysha256-FgpCb/KJQlLNfOu91ta32o/NMZxltwRo8QtmkMRdAu8    crossoriginanonymous>/script>  script src/assets/login-e95510017febba636944098993674bb63cc3c5df744c6411cc16b016dca8ec17.js data-turbolinks-trackreload>/script>/head>body>div idfb-root>/div>script>(function(d, s, id) {    var js, fjs  d.getElementsByTagName(s)0;    if (d.getElementById(id)) return;    js  d.createElement(s); js.id  id;    js.src  //connect.facebook.net/en_GB/all.js#xfbml1&appId208658095864911;    fjs.parentNode.insertBefore(js, fjs);}(document, script, facebook-jssdk));/script>div classsaas_hanover>  div classlogin__logo--wrap>        img classlogin__logo--img src/assets/placeholders/aag_login-9cc34a07097edf3c3508bf9c1252309f10a3f96903bb03ccf83f812d29987caa.png />  /div>  section classpanel_main>  div idlogged-out>    header>      h2>Sign in to your account/h2>    /header>    div classcontent>      form classnew_user idnew_user action/ww/users/sign_in accept-charsetUTF-8 methodpost>input typehidden nameauthenticity_token value1AdcpLA5yF94BQz6xWc4hLW1HKTw4Jx-06b0M5mc_yjLdVXuG3rrs7Ulbclsq4gjPVikqBkODveeQRe-WsXp0Q autocompleteoff />        div classflex__row--wrap>          div classflex__row--item>            input autofocusautofocus placeholderEmail Address typeemail value nameuseremail iduser_email />          /div>          div classflex__row--item>            input placeholderPassword typepassword nameuserpassword iduser_password />          /div>          div classflex__row--item flex__row--item-submit>                                    input typesubmit namecommit valueSign in classbtn data-disable-withSign in />          /div>        /div>/form>    /div>  /div>    p idpassword_recover>      a classbtn href/ww/users/password/new>Forgot your password?/a>    /p>/section>/div>/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > aag.cleversteam.com

Is this malicious?

DNS Resolutions

Port 443