Domain > app.gobrightside.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2020-04-15	99.84.248.91 (ClassC)
2020-04-15	99.84.248.111 (ClassC)
2020-04-15	99.84.248.5 (ClassC)
2021-03-16	99.84.253.93 (ClassC)
2021-10-22	65.8.49.56 (ClassC)
2024-11-17	204.246.191.44 (ClassC)

HTTP/1.1 200 OKContent-Type: text/htmlContent-Length: 5135Connection: keep-aliveDate: Fri, 15 Nov 2024 09:24:53 GMTServer: AmazonS3Accept-Ranges: bytesETag: 723d728e159ffadeb5e2486f29fe8785Last-Modified: Mon, 04 Nov 2024 15:51:19 GMTCache-Control: public, max-age0, s-maxage31536000x-bs-timezone: 0x-bs-gmtoffset: MSTx-content-type-options: nosniffcontent-security-policy: worker-src self blob:; script-src self *.cloudflare.com *.google-analytics.com *.licdn.com *.hotjar.com *.zoominfo.com *.doubleclick.net *.cloudflare.com *.brightsidefinancial.com *.amplifyapp.com *.amplitude.com *.sentry.io *.finicity.com *.gobrightside.com *.sprig.com *.facebook.net *.googleapis.com *.intercomcdn.com *.intercom.io *.socure.com *.dvnfo.com *.googletagmanager.com unsafe-inline unsafe-eval *.site.com *.force.com *.salesforce.com *.salesforce-scrt.com blob:;strict-transport-security: max-age31536000; includeSubDomainsreferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: *.site.com *.force.com *.salesforce.com *.salesforce-scrt.com *.amplifyapp.com *.gobrightside.com;access-control-allow-credentials: false;Vary: Accept-EncodingX-Cache: Hit from cloudfrontVia: 1.1 964cf114e0992390e6487315faea90ac.cloudfront.net (CloudFront)X-Amz-Cf-Pop: HIO50-C2Alt-Svc: h3:443; ma86400X-Amz-Cf-Id: x6Hw-wsWPCtY_VNOXmjOtWMw5ccHQRz5gTYAi0qCI9vD0UCOly0mpQAge: 215012

!DOCTYPE html>html langen>head>    meta charsetutf-8>    title>Brightside/title>    base href/>    meta nameviewport contentwidthdevice-width, initial-scale1>    link relicon typeimage/x-icon hreffavicon.ico>    !-- https://thecloudtutorials.com/2019/02/23/a-profile-app-with-aws-amplify/ -->    script>      if (global  undefined) {        var global  window;      }      const BuildVersion  2024-11-04 08:48:11;    /script>  style>@media print{@page{size:A4;margin:2cm}}/style>link relstylesheet hrefstyles.4d73cf9573cf4b41.css mediaprint onloadthis.mediaall>noscript>link relstylesheet hrefstyles.4d73cf9573cf4b41.css>/noscript>/head>  body idbody>    noscript>iframe srchttps://www.googletagmanager.com/ns.html?idGTM-KPBW2CS                      height0 width0 styledisplay:none;visibility:hidden>/iframe>/noscript>    brightside-web-desktop>/brightside-web-desktop>    !-- Global site tag (gtag.js) - Google Analytics -->    script async>      (function () {        const GATrackingIds  ;        const hostname  window.location.hostname;        const parts  hostname.split(.).reverse();        if (parts.length > 3) {          parts.shift(); //.com          parts.shift(); //.gobrightside        }        let production  false;        const dev    UA-112701913-5;        const stage  ;        const prod    AW-399284792,UA-113184142-6;        if (parts0  stage) {          GATrackingIds.push(...stage); // staging        } else if (parts0  dev || parts0  localhost || ( parts.length  2 && parts1  127 )) {          GATrackingIds.push(...dev); // dev        } else if (parts.length  1) {          GATrackingIds.push(...prod);          production  true;          document.write(            scr + ipt>+            (function(w,d,s,l,i){wlwl||;wl.push({gtm.start:\n +            new Date().getTime(),event:gtm.js});var fd.getElementsByTagName(s)0,\n +            jd.createElement(s),dll!dataLayer?&l+l:;j.asynctrue;j.src\n +            https://www.googletagmanager.com/gtm.js?id+i+dl;f.parentNode.insertBefore(j,f);\n +            })(window,document,script,dataLayer,GTM-KPBW2CS);            +/scr + ipt>          );        } else {          //fallback to nonprod.          GATrackingIds.push(...dev); // dev        }        if ( ! production ) {          console.log(`GaTrackingIds:`, GATrackingIds);        }        GATrackingIds.forEach((trackingId) > {          document.write(            scr + ipt async srchttps://www.googletagmanager.com/gtag/js?id + trackingId + >/scr + ipt>          );        });        window.dataLayer  window.dataLayer || ;        window.gTag  () > {          dataLayer.push(arguments);        };        window.gTag(js, new Date());        GATrackingIds.forEach((id) > window.gTag(config, id));      })();      /* !-- Facebook Pixel Code --> */      (function () {        !(function (f, b, e, v, n, t, s) {          if (f.fbq) return;          n  f.fbq  function () {            n.callMethod ? n.callMethod.apply(n, arguments) : n.queue.push(arguments);          };          if (!f._fbq) f._fbq  n;          n.push  n;          n.loaded  !0;          n.version  2.0;          n.queue  ;          t  b.createElement(e);          t.async  !0;          t.src  v;          s  b.getElementsByTagName(e)0;          s.parentNode.insertBefore(t, s);        })(window, document, script, https://connect.facebook.net/en_US/fbevents.js);        fbq(init, 3030280700318627);      })();      const vanilla_setupAmazonConnect  (w,d,x,id) > {        const sd.createElement(script);        s.srchttps://d2s9x5slbvr0vu.cloudfront.net/amazon-connect-chat-interface-client.js;        s.async1;        s.idid;        d.getElementsByTagName(head)0.appendChild(s);        wx   wx || function() { (wx.ac  wx.ac || ).push(arguments) };      }      const vanilla_setupSprig  (l,e,a,p) > {        if (window.Sprig) return;        window.Sprig  function() {          S._queue.push(arguments)        }        const S  window.Sprig;        S.appId  a;        S._queue  ;        window.UserLeap  S;        a  l.createElement(script);        a.async  1;        a.src  e + ?id + S.appId;        p  l.getElementsByTagName(script)0;        p.parentNode.insertBefore(a, p);      }    /script>    noscript>      img        height1        width1        styledisplay: none;        srchttps://www.facebook.com/tr?id3030280700318627&evPageView&noscript1      />    /noscript>    !-- End Facebook Pixel Code -->  script srcruntime.9954192f536c5b8e.js typemodule>/script>script srcpolyfills.9def7615b23b8ee5.js typemodule>/script>script srcscripts.2bf3d75fb4d22a10.js defer>/script>script srcmain.63de80c0c59f5788.js typemodule>/script>/body>/html>

Subdomains

Date	Domain	IP
api2.gobrightside.com	2024-09-08	3.163.24.7
accolade.gobrightside.com	2024-08-11	3.163.24.48
api3.stage.gobrightside.com	2024-08-26	99.84.66.76
webhook.stage.gobrightside.com	2023-07-20	18.161.6.13
cdn.gobrightside.com	2024-07-08	204.246.191.41
app.gobrightside.com	2024-11-17	204.246.191.44
bjservices.gobrightside.com	2024-02-20	18.161.6.17
comcast.gobrightside.com	2024-03-08	3.163.24.7
app.ce-dev.gobrightside.com	2024-10-13	52.84.162.112
api.dev.gobrightside.com	2024-08-11	204.246.191.121
webhook.dev.gobrightside.com	2024-08-20	18.161.6.64
app.dev.gobrightside.com	2024-06-29	3.163.24.73

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > app.gobrightside.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains