Domain > app.prod.etw.com

More information on this domain is in AlienVault OTX

Whois

Property	Value
NameServer	NS-1802.AWSDNS-33.CO.UK
Created	1998-08-07 00:00:00
Changed	2015-12-06 00:00:00
Expires	2017-08-06 00:00:00
Registrar	GODADDY.COM, LLC

DNS Resolutions

Date	IP Address
2017-05-10	52.84.64.127 (ClassC)
2017-08-17	13.33.141.56 (ClassC)
2017-09-01	52.84.64.81 (ClassC)
2017-09-03	52.84.64.161 (ClassC)
2017-11-09	52.84.64.151 (ClassC)
2018-01-15	52.84.11.197 (ClassC)
2018-02-07	13.33.164.240 (ClassC)
2018-03-21	13.33.164.133 (ClassC)
2018-04-11	13.33.164.7 (ClassC)
2018-04-13	52.85.83.45 (ClassC)
2018-04-15	13.33.164.147 (ClassC)
2019-04-18	99.84.168.14 (ClassC)
2019-04-18	99.84.168.49 (ClassC)
2019-04-18	99.84.168.50 (ClassC)
2019-04-18	99.84.168.63 (ClassC)
2021-02-04	13.226.15.28 (ClassC)
2021-02-04	13.226.15.47 (ClassC)
2021-02-04	13.226.15.91 (ClassC)
2021-02-04	13.249.87.111 (ClassC)
2021-02-04	13.226.15.118 (ClassC)
2021-04-12	13.249.93.29 (ClassC)
2021-04-12	13.249.93.84 (ClassC)
2021-04-12	13.249.93.98 (ClassC)
2021-04-12	13.249.93.115 (ClassC)
2021-08-01	65.8.48.105 (ClassC)
2021-08-01	65.8.48.115 (ClassC)
2021-08-01	65.8.48.61 (ClassC)
2021-08-01	65.8.48.97 (ClassC)
2021-12-24	54.192.73.89 (ClassC)
2024-02-29	13.224.14.36 (ClassC)
2024-06-16	3.163.24.86 (ClassC)
2024-06-23	3.163.24.79 (ClassC)
2024-09-11	3.163.24.60 (ClassC)
2024-12-19	3.163.24.7 (ClassC)
2025-03-22	204.246.191.116 (ClassC)
2025-04-15	204.246.191.118 (ClassC)
2025-07-03	204.246.191.27 (ClassC)
2025-07-08	13.224.14.63 (ClassC)
2025-07-31	204.246.191.128 (ClassC)

HTTP/1.1 200 OKContent-Type: text/htmlContent-Length: 28563Connection: keep-aliveDate: Thu, 23 Dec 2021 20:28:33 GMTLast-Modified: Thu, 18 Nov 2021 20:27:55 GMTETag: e466fbef41f08a8695fb8d7d995ad002Ac

!doctype html>html langen>head>	meta charsetUTF-8>	title>ETW 2.0/title>	meta nametheme-color content#ffffff>	meta nameviewport contentinitial-scale1, maximum-scale1, user-scalableno, widthdevice-width>	meta http-equivContent-Security-Policy; http://www.google-analytics.com				contentdefault-src self; font-src data: *; style-src self unsafe-inline; script-src self unsafe-inline unsafe-eval; connect-src self data: * blob: * https://*.etw.com; img-src data: * blob: * https://*.etw.com;>	link relicon href/images/favicon.png typeimage/png>	style>		/* App Loader for Slower Connections */		@-webkit-keyframes pulsate {			0% {				opacity: 0.25;			}			50% {				opacity: 1.0;			}			100% {				opacity: 0.25;			}		}		#app_loader {			text-align: center;			position: absolute;			top: 40%;			width: 100%;			opacity: 0;			animation: pulsate 1.75s 700ms ease-out infinite;		}		#app_loader img {			max-width: 85%;		}	/style>	script typetext/javascript>		/**		 * @function getProductUrls		 * Derive the product urls from the current url for hermes.		 * Production:		 *   customername.auth.etw.com		 *   customername.drive.etw.com		 *		 * Test (similar to dev, stage)		 *   auth.test.etw.com		 *   drive.test.etw.com		 */		(function () {			// var parts  window.location.hostname.split(.);			var parts  window.location.hostname.split(.);			var subdomainCount  parts.length;			var etwcom  partssubdomainCount-2, partssubdomainCount-1.join(.);			var customer, urls  {};			var prefix, suffix;			var authUrl;			var environment  detectDeployedEnvironment(parts);			// TODO: Temporary for partial migration of some production clients to Auth			var isClientWithExternalAuth  false;			if( window.location.hostname  app.prod.etw.com || subdomainCount  3 ) {				// TODO: Temporary				// Assume this is Align in production.				urls  {					admin: https:// + window.location.hostname + /#!/admin/home,					api: https://api.prod.etw.com,					auth: ,					hermes: https:// + window.location.hostname,					janus: 				};			} else if( subdomainCount  4 ) {				if( environment  prod

Subdomains

Date	Domain	IP
beta.etw.com	2024-09-05	204.246.191.39
cplc.etw.com	2024-09-30	3.163.24.64
app.prod.etw.com	2021-02-04	13.226.15.118
align.stage.etw.com	2024-02-13	13.227.74.4
asba.align.etw.com	2024-06-26	3.163.24.57
aforarizona.align.etw.com	2020-12-10	13.249.134.33
americansolar.align.etw.com	2024-08-18	3.163.24.57
ats.align.etw.com	2024-08-23	3.163.24.57
azchamber.etw.com	2025-03-05	3.163.24.71
asset.etw.com	2024-02-22	99.84.66.17
3tw.dev.etw.com	2024-09-16	99.86.38.101
www.etw.com	2024-10-22	34.133.20.173

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > app.prod.etw.com

Is this malicious?

Whois

DNS Resolutions

Port 80

Port 443

Subdomains