Domain > autodiscover.getcorrectposture.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2019-02-11	192.185.17.109 (ClassC)
2024-10-21	199.59.243.227 (ClassC)
2025-01-23	172.65.190.172 (ClassC)

HTTP/1.1 200 OKdate: Mon, 21 Oct 2024 08:01:30 GMTcontent-type: text/html; charsetutf-8content-length: 1098x-request-id: 384a71cb-5d12-4d7f-ab45-08ea9dffbd48cache-control: no-store, max-age0accept-ch:

!doctype html>html data-adblockkeyMFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ_Cwp7d51AzImiksVUZoNYmKebj7P2ZpODHaFOrNKYWA0tvnjowcPbJpLy28PmhrAbSbea0C9SHGTIVUNp70FKPQ langen stylebackground: #2B2B2B;>head>    meta charsetutf-8>    meta nameviewport contentwidthdevice-width, initial-scale1>    link relicon hrefdata:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC>    link relpreconnect hrefhttps://www.google.com crossorigin>/head>body>div idtarget styleopacity: 0>/div>script>window.park  eyJ1dWlkIjoiMzg0YTcxY2ItNWQxMi00ZDdmLWFiNDUtMDhlYTlkZmZiZDQ4IiwicGFnZV90aW1lIjoxNzI5NDk3NjkwLCJwYWdlX3VybCI6Imh0dHA6Ly9hdXRvZGlzY292ZXIuZ2V0Y29ycmVjdHBvc3R1cmUuY29tLyIsInBhZ2VfbWV0aG9kIjoiR0VUIiwicGFnZV9yZXF1ZXN0Ijp7fSwicGFnZV9oZWFkZXJzIjp7fSwiaG9zdCI6ImF1dG9kaXNjb3Zlci5nZXRjb3JyZWN0cG9zdHVyZS5jb20iLCJpcCI6IjUyLjQwLjIzNC4xMDUifQo;/script>script src/bywldLHdo.js>/script>/body>/html>

Port 443

HTTP/1.1 200 OKDate: Mon, 21 Oct 2024 08:01:30 GMTContent-Type: text/html; charsetutf-8Content-Length: 1098X-Request-Id: f59a3797-47f5-4704-9c81-c7e7cf0cdefeCache-Control: no-store, max-age0Accept-Ch:

!doctype html>html data-adblockkeyMFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ_Cwp7d51AzImiksVUZoNYmKebj7P2ZpODHaFOrNKYWA0tvnjowcPbJpLy28PmhrAbSbea0C9SHGTIVUNp70FKPQ langen stylebackground: #2B2B2B;>head>    meta charsetutf-8>    meta nameviewport contentwidthdevice-width, initial-scale1>    link relicon hrefdata:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC>    link relpreconnect hrefhttps://www.google.com crossorigin>/head>body>div idtarget styleopacity: 0>/div>script>window.park  eyJ1dWlkIjoiZjU5YTM3OTctNDdmNS00NzA0LTljODEtYzdlN2NmMGNkZWZlIiwicGFnZV90aW1lIjoxNzI5NDk3NjkwLCJwYWdlX3VybCI6Imh0dHBzOi8vYXV0b2Rpc2NvdmVyLmdldGNvcnJlY3Rwb3N0dXJlLmNvbS8iLCJwYWdlX21ldGhvZCI6IkdFVCIsInBhZ2VfcmVxdWVzdCI6e30sInBhZ2VfaGVhZGVycyI6e30sImhvc3QiOiJhdXRvZGlzY292ZXIuZ2V0Y29ycmVjdHBvc3R1cmUuY29tIiwiaXAiOiI1Mi40MC4yMzQuMTA1In0K;/script>script src/bmEgocmnD.js>/script>/body>/html>

Subdomains

Date	Domain	IP
cpanel.getcorrectposture.com	2024-10-05	199.59.243.227
autodiscover.getcorrectposture.com	2024-10-21	199.59.243.227

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > autodiscover.getcorrectposture.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains