Domain > canvas.along.org

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-05-14	18.155.1.104 (ClassC)
2025-11-01	3.163.24.101 (ClassC)

HTTP/1.1 200 OKContent-Type: text/htmlContent-Length: 1859Connection: closeDate: Sat, 01 Nov 2025 10:10:18 GMTstrict-transport-security: max-age31536000; includeSubDomainsSet-Cookie: argus_sticky_session1761991819.245.42.288146|70121344ca59738f13a4c66e47f45268; Max-Age600; Path/; Secure; HttpOnlylast-modified: Tue, 28 Oct 2025 21:51:54 GMTx-frame-options: SAMEORIGINx-xss-protection: 0x-content-type-options: nosniffx-permitted-cross-domain-policies: nonereferrer-policy: strict-origin-when-cross-originx-along-env-digest: 83eb52806ceb27ac09c5d86518f1c9edx-along-server-released-at: x-along-server-version: 0abe56ccache-control: no-cachex-request-id: 30344d53f1793df479380e2ac55c2346x-runtime: 0.001394content-security-policy: report-uri https://o703207.ingest.sentry.io/api/4504875207229440/security/?sentry_environmentproduction&sentry_key68369fc60a714d39b9493dabf8b8f03c&sentry_release0abe56c; default-src none; worker-src self blob:; font-src self https://app.along.org; child-src self blob:; frame-src https://bid.g.doubleclick.net https://tpc.googlesyndication.com https://td.doubleclick.net https://fast.appcues.along.org https://looker-internal.along.org/ https://looker.along.org/; media-src self blob: https://videos.along.org https://images.along.org https://audio.along.org https://app.along.org https://ssl.gstatic.com; img-src self blob: data: https://videos.along.org https://images.along.org https://audio.along.org https://app.along.org https://www.along.org https://v2assets.zopim.io https://static.zdassets.com https://*.zendesk.com https://www.gravatar.com https://*.googleadservices.com https://www.googletagmanager.com https://www.google-analytics.com https://googleads.g.doubleclick.net https://www.google.com https://www.google.co.kr https://*.facebook.com https://*.facebook.net https://translate.googleapis.com https://translate.google.com https://www.gstatic.com; script-src self unsafe-inline unsafe-eval https://segmentcdn.along.org https://static.zdassets.com https://*.zopim.com https://api.smooch.io https://www.google-analytics.com https://ssl.google-analytics.com https://www.googletagmanager.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://tpc.googlesyndication.com https://www.google.com https://connect.facebook.net https://fast.appcues.along.org https://api.appcues.along.org https://translate.google.com; connect-src self blob: https://segmentcdn.along.org https://segmentapi.along.org https://datadog.prod.comealong.dev https://datadog.along.org https://split.along.org https://videos.along.org https://app.along.org https://*.ingest.sentry.io https://o703207.ingest.sentry.io https://videos.along.org https://images.along.org https://audio.along.org https://connections-videos-prod.s3.amazonaws.com https://connections-videos-prod.s3-accelerate.amazonaws.com https://connections-images-prod.s3.amazonaws.com https://connections-images-prod.s3-accelerate.amazonaws.com https://connections-audio-prod.s3.amazonaws.com https://connections-audio-prod.s3-accelerate.amazonaws.com wss://comealong.zendesk.com wss://*.zopim.com wss://api.smooch.io https://ekr.zdassets.com https://comealong.zendesk.com https://api.smooch.io https://www.google-analytics.com https://stats.g.doubleclick.net https://www.googletagmanager.com https://adservice.google.com https://*.analytics.google.com https://connect.facebook.net https://www.facebook.com wss://fast.appcues.along.org wss://api.appcues.along.org https://fast.appcues.along.org https://api.appcues.along.org; manifest-src self https://app.along.org; style-src self blob: unsafe-inline https://segmentcdn.prod.comealong.dev https://segmentcdn.along.org https://translate.googleapis.com https://fast.appcues.along.org https://api.appcues.along.org; script-src-elem self unsafe-inline unsafe-eval https://segmentcdn.along.org https://static.zdassets.com https://*.zopim.com https://api.smooch.io https://www.google-analytics.com https://ssl.google-analytics.com https://www.googletagmanager.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://tpc.googlesyndication.com https://www.google.com https://connect.facebook.net https://fast.appcues.along.org https://api.appcues.along.org https://translate.google.com; style-src-elem self blob: unsafe-inline https://segmentcdn.prod.comealong.dev https://segmentcdn.along.org https://translate.googleapis.com https://fast.appcues.along.org https://api.appcues.along.orgX-Cache: Miss from cloudfrontVia: 1.1 7e363c66fa49e16860bbd773eaa92164.cloudfront.net (CloudFront)X-Amz-Cf-Pop: HIO52-P2X-Amz-Cf-Id: VQIi7dOjSRRlFX_wTRU-tNhsoVOeCZ54OFR9NPaTm83iuyae0HH19A

!DOCTYPE html>html langen classh-full bg-white>head>  meta charsetutf-8 />  link relicon typeimage/png sizes138x138 href/favicon.png />  link relapple-touch-icon typeimage/png sizes138x138 href/favicon.png />  meta nameviewport contentwidthdevice-width, initial-scale1 />  meta nametheme-color content#000000 />  meta namedescription contentConnecting teachers and students everywhere! />  script typetext/javascript src/env/vars>/script>  title>Along/title>  script typemodule crossorigin src/static/index-MeL6PXBr.js>/script>  link relmodulepreload crossorigin href/static/axios-5LJRyB1z.js>  link relmodulepreload crossorigin href/static/react-DIYnOw_c.js>  link relmodulepreload crossorigin href/static/styles-DVpt4urk.js>  link relmodulepreload crossorigin href/static/eds-Czzt7S7a.js>  link relmodulepreload crossorigin href/static/components-B5-3uFYV.js>  link relmodulepreload crossorigin href/static/core-js-C4mpSQxb.js>  link relmodulepreload crossorigin href/static/graphql-BBaGIeVR.js>  link relmodulepreload crossorigin href/static/sentry-C8gZJfn7.js>  link relmodulepreload crossorigin href/static/media-CbutnhXg.js>  link relmodulepreload crossorigin href/static/looker-CFcsaTUW.js>  link relmodulepreload crossorigin href/static/lottie-DTBf3NrG.js>  link relmodulepreload crossorigin href/static/tailwind-GkIBpB-O.js>  link relmodulepreload crossorigin href/static/forms-B07Dvt04.js>  link relstylesheet crossorigin href/static/index-e6QvaCXh.css>/head>body classh-full text-space-500 font-sans antialiased>  noscript>You need to enable JavaScript to run this app./noscript>  div idroot classh-full>/div>/body>/html>

Subdomains

Date	Domain	IP
audio.along.org	2025-03-17	99.84.66.26
app.along.org	2023-12-17	3.163.24.101
canvas.along.org	2025-11-01	3.163.24.101
api.appcues.along.org	2024-02-25	18.161.6.92

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > canvas.along.org

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains