Domain > app.openpath.financial

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2024-11-05	104.18.28.188 (ClassC)
2025-05-14	104.18.37.19 (ClassC)
2025-11-22	172.64.150.237 (ClassC)
2026-01-24	104.21.13.94 (ClassC)

HTTP/1.1 200 OKDate: Tue, 05 Nov 2024 12:03:26 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveCache-Control: no-store, max-age0expires: Tue, 05 Nov 2024 12:03:26 GMTlast-mod

!doctype html>html langen classoverflow-hidden lead-connector>head>meta charsetutf-8/>meta http-equivX-UA-Compatible contentIEedge/>meta nameviewport contentwidthdevice-width,initial-scale1,maximum-scale1,user-scalable0/>link relicon hrefhttps://static.leadconnectorhq.com/1846/favicon.ico/>script srchttps://cdnjs.cloudflare.com/ajax/libs/tinymce/4.9.6/tinymce.min.js deferdefer>/script>meta namegoogle-signin-scope contentprofile email/>meta nameslack-app-id contentA04B2S8J7TQ/>script srchttps://accounts.google.com/gsi/client async deferdefer>/script>script>;(function (apiKey) {        ;(function (p, e, n, d, o) {          var v, w, x, y, z          o  pd  pd || {}          o._q  o._q ||           v  initialize, identify, updateOptions, pageLoad, track          for (w  0, x  v.length; w  x; ++w)            (function (m) {              om                 om ||                function () {                  o._qm  v0 ? unshift : push(                    m.concat(.slice.call(arguments, 0))                  )                }            })(vw)          y  e.createElement(n)          y.async  !0          y.src             https://content.pathfinder.gohighlevel.com/agent/static/ +            apiKey +            /pendo.js          z  e.getElementsByTagName(n)0          z.parentNode.insertBefore(y, z)        })(window, document, script, pendo)      })(2609845c-58c9-4b6e-7126-639c4121d0b7)/script>link relstylesheet hrefhttps://use.fontawesome.com/releases/v5.8.1/css/solid.css integritysha384-QokYePQSOwpBDuhlHOsX0ymF6R/vLk/UQVz3WHa6wygxI5oGTmDTv8wahFOSspdm crossoriginanonymous/>link relstylesheet hrefhttps://use.fontawesome.com/releases/v5.8.1/css/regular.css integritysha384-FKw7x8fCxuvzBwOJmhTJJsKzBl8dnN9e2R4+pXRfYoHivikuHkzWyhKWDSMcGNK8 crossoriginanonymous/>link relstylesheet hrefhttps://use.fontawesome.com/releases/v5.8.1/css/brands.css integritysha384-n9+6/aSqa9lBidZMRCQHTHKJscPq6NW4pCQBiMmHdUCvPN8ZOg2zJJTkC7WIezWv crossoriginanonymous/>link relstylesheet hrefhttps://use.fontawesome.com/releases/v5.8.1/css/fontawesome.cs

Subdomains

Date	Domain	IP
email.lc.openpath.financial	2025-05-10	34.102.239.211
link.openpath.financial	2024-11-05	104.18.31.65
webdisk.openpath.financial	2025-08-27	162.241.24.185
cpanel.openpath.financial	2025-05-17	162.159.140.166
mail.openpath.financial	2025-08-13	162.241.24.185
webmail.openpath.financial	2025-05-15	162.159.140.166
email.info.openpath.financial	2025-04-07	34.102.239.211
app.openpath.financial	2024-11-05	104.18.28.188
email.replies.openpath.financial	2025-07-22	34.110.180.34
cpcalendars.openpath.financial	2025-07-05	162.241.24.185
cpcontacts.openpath.financial	2025-05-16	162.241.24.185
www.openpath.financial	2024-11-05	104.18.23.89
email.do-not-reply.openpath.financial	2025-05-15	34.102.239.211

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > app.openpath.financial

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains