Domain > access-admin.oag.aws.grail.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2024-12-14	52.32.239.178 (ClassC)
2025-01-04	52.43.136.21 (ClassC)
2025-02-05	34.208.45.149 (ClassC)
2025-02-20	52.25.202.54 (ClassC)
2025-04-14	50.112.30.60 (ClassC)
2025-07-10	54.186.138.163 (ClassC)

HTTP/1.1 200 OKCache-Control: no-store, no-cache, must-revalidateContent-Type: text/html; charsetUTF-8Date: Sat, 14 Dec 2024 20:04:10 GMTExpires: Thu, 19 Nov 1981 08:52:00 GMTPragma: no-cacheServer: A

!DOCTYPE html PUBLIC -//W3C//DTD XHTML 1.0 Transitional//EN        http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd>html xmlnshttp://www.w3.org/1999/xhtml xml:langen langen>head>    meta http-equivcontent-type contenttext/html; charsetutf-8 />    title>POST data/title>    script src/auth/resources/post.js>/script>    link typetext/css relstylesheet href/auth/resources/post.css />/head>body>    noscript>        p>strong>Note:/strong>         Since your browser does not support JavaScript,         you must press the button below once to proceed./p>     /noscript>     form methodpost         actionhttps://access-admin.oag.aws.grail.com/auth/saml2/idp/SSOService.php>    !-- Need to add this element and call click method, because calling     submit() on the form causes failed submission if the form has another     element with name or id of submit.    See: https://developer.mozilla.org/en/DOM/form.submit#Specification -->    input typesubmit idpostLoginSubmitButton/>input typehidden nameSAMLRequest valuePHNhbWxwOkF1dGhuUmVxdWVzdCB4bWxuczpzYW1scD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOnByb3RvY29sIiB4bWxuczpzYW1sPSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6YXNzZXJ0aW9uIiBJRD0iXzgwZGJkNzZlMDRhOTRlYjk5OWY0ZWRhYjUyYTJmMmRkZjRjNGJmN2I2YSIgVmVyc2lvbj0iMi4wIiBJc3N1ZUluc3RhbnQ9IjIwMjQtMTItMTRUMjA6MDQ6MTBaIiBEZXN0aW5hdGlvbj0iaHR0cHM6Ly9hY2Nlc3MtYWRtaW4ub2FnLmF3cy5ncmFpbC5jb20vYXV0aC9zYW1sMi9pZHAvU1NPU2VydmljZS5waHAiIEFzc2VydGlvbkNvbnN1bWVyU2VydmljZVVSTD0iaHR0cHM6Ly9hY2Nlc3MtYWRtaW4ub2FnLmF3cy5ncmFpbC5jb20vYXV0aC9tb2R1bGUucGhwL3NhbWwvc3Avc2FtbDItYWNzLnBocC9CRVdaMThtMW0iIFByb3RvY29sQmluZGluZz0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmJpbmRpbmdzOkhUVFAtUE9TVCI+PHNhbWw6SXNzdWVyPkJFV1oxOG0xbTwvc2FtbDpJc3N1ZXI+PHNhbWxwOk5hbWVJRFBvbGljeSBGb3JtYXQ9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjEuMTpuYW1laWQtZm9ybWF0OnVuc3BlY2lmaWVkIiBBbGxvd0NyZWF0ZT0idHJ1ZSIvPjwvc2FtbHA6QXV0aG5SZXF1ZXN0Pg />input typehidden nameRelayState valuehttps://access-admin.oag.aws.grail.com />        noscript>            button typesubmit classbtn>Submit/button>        /noscr

Subdomains

Date	Domain	IP
prepost.prod.aws.grail.com	2024-10-10	52.12.247.217
pwn-lab.grpc.preprod.aws.grail.com	2025-04-29	44.233.26.120
access-admin.oag.aws.grail.com	2024-12-14	52.32.239.178
access.oag.aws.grail.com	2024-12-14	52.32.239.178
okta.eng.aws.grail.com	2025-03-05	15.197.181.212
atd.sandbox.scrms.eng.aws.grail.com	2024-05-30	3.8.243.194
client.sandbox.scrms.eng.aws.grail.com	2024-05-30	18.169.77.200
accounts.eng.aws.grail.com	2025-02-12	104.19.167.24
jira.ti-apps.aws.grail.com	2024-12-14	52.32.239.178
confluence.ti-apps.aws.grail.com	2024-12-14	52.32.239.178
jira-staging.ti-apps.aws.grail.com	2024-12-14	54.70.12.132
confluence-staging.ti-apps.aws.grail.com	2025-01-21	35.84.110.229
jira-development.ti-apps.aws.grail.com	2024-12-14	35.84.110.229
jira-sandbox.ti-apps.aws.grail.com	2024-12-14	54.70.12.132
confluence-sandbox.ti-apps.aws.grail.com	2024-12-14	54.70.12.132
commercial-events.grpc.test.aws.grail.com	2024-10-26	44.240.32.242
production.tableau.aws.grail.com	2024-12-14	52.32.239.178
accounts.grpc.sandbox.aws.grail.com	2024-09-07	54.184.203.195
blackburn.sandbox.aws.grail.com	2025-05-04	44.238.45.175

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > access-admin.oag.aws.grail.com

Is this malicious?

DNS Resolutions

Port 443

Subdomains