Domain > cortex.doopage.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2020-02-29	3.1.113.135 (ClassC)
2024-11-09	54.169.107.142 (ClassC)

HTTP/1.1 301 Moved PermanentlyServer: nginxDate: Sat, 09 Nov 2024 14:57:10 GMTContent-Type: text/htmlContent-Length: 162Connection: keep-aliveLocation: https://cortex.doopage.com/Strict-Transport-Security: max-age31536000; includeSubdomains; preloadX-Content-Type-Options: nosniffX-XSS-Protection: 1; modeblock; reporthttps://report-uri.youthdev.net/xssContent-Security-Policy: default-src self; script-src self unsafe-inline unsafe-eval *.google-analytics.com connect.facebook.net apis.google.com images.dmca.com rec.smartlook.com cdnjs.cloudflare.com cdn.branch.io *.googletagmanager.com *.googleadservices.com *.googletagmanager.com tagmanager.google.com sentry.io *.g.doubleclick.net app.link *.hotjar.com cdn.jsdelivr.net *.firebaseio.com *.gstatic.com www.google.com *.googleapis.com www.pagespeed-mod.com https://app.doopage.com *.doopage.com doopage-youthdev.firebaseio.com provely-public.s3.amazonaws.com growsurf.com app.growsurf.com snap.licdn.com analytics.tiktok.com cdn.popt.in *.zalo.me *.zaloapp.com *.zdn.vn; img-src self data: *.google-analytics.com *.googletagmanager.com *.gstatic.com *.facebook.com images.dmca.com *.g.doubleclick.net www.google.com www.google.com.vn img.icons8.com *.fbcdn.net *.akamaihd.net *.fbsbx.com *.hotjar.com data: blob: doopage-prod.s3.amazonaws.com https://app.doopage.com *.doopage.com unpkg.com captcha.garena.com *.shopee.vn *.zaloapp.com *.zdn.vn *.zadn.vn *.dlmd.me *.cdninstagram.com *.giphy.com app.provely.io s3.amazonaws.com/provely-public/ res.cloudinary.com/growsurf-prod/ *.zalo.me px.ads.linkedin.com p.adsymptotic.com *.popt.in maps.googleapis.com deo.shopeemobile.com *.tiktokcdn.com; style-src self unsafe-inline *.googleapis.com *.gstatic.com maxcdn.bootstrapcdn.com cdn.jsdelivr.net tagmanager.google.com cdnjs.cloudflare.com *.typekit.net https://app.doopage.com *.doopage.com app.provely.io cdn.popt.in; font-src self data: themes.googleusercontent.com fonts.gstatic.com maxcdn.bootstrapcdn.com *.hotjar.com cdnjs.cloudflare.com *.typekit.net ; frame-src self *.facebook.com *.google.com *.googleapis.com *.youtube.com *.youtube-nocookie.com *.hotjar.com *.g.doubleclick.net *.firebaseio.com *.doubleclick.net *.zalo.me *.facebook.net *.tiktok.com; object-src self *.youtube.com *.youtube-nocookie.com *.fbcdn.net *.akamaihd.net *.fbsbx.com data: doopage-prod.s3.amazonaws.com *.ss-hn-1.vccloud.vn *.hn.ss.bfcplatform.vn *.zdn.vn *.zadn.vn *.dlmd.me; media-src self *.youtube.com *.youtube-nocookie.com *.fbcdn.net *.akamaihd.net *.fbsbx.com data: doopage-prod.s3.amazonaws.com https://app.doopage.com *.doopage.com app.provely.io *.ss-hn-1.vccloud.vn *.hn.ss.bfcplatform.vn *.zdn.vn *.zadn.vn *.dlmd.me; connect-src self *.smartlook.com wss://*.smartlook.com sentry.io *.sentry.io wss://sentry.io *.googleapis.com wss://*.googleapis.com *.google-analytics.com wss://*.google-analytics.com *.facebook.com wss://*.facebook.com *.branch.io wss://*.branch.io *.hotjar.com wss://*.hotjar.com *.hotjar.io wss://*.hotjar.io *.firebaseio.com wss://*.firebaseio.com *.bugsnag.com *.doubleclick.net analytics.google.com wss://analytics.google.com extreme-ip-lookup.com https://app.doopage.com *.doopage.com wss://socket.doopage.com doopage-youthdev.firebaseio.com app.provely.io api.growsurf.com wss://doopage.voip.bfcplatform.vn analytics.tiktok.com display.popt.in d3lopmpcew67el.cloudfront.net *.zalo.me geolocation-db.com console.re wss://console.re px.ads.linkedin.com ipinfo.io; manifest-src self ; prefetch-src self ; worker-src self blob:; base-uri self ; form-action self https://www.facebook.com/tr/ https://accounts.google.com/ ; frame-ancestors self doopage.com; upgrade-insecure-requests; ; report-uri https://report-uri.youthdev.net/cspReport-To: {group:default,max_age:31536000,endpoints:{url:https://report-uri.youthdev.net/misc},include_subdomains:true}NEL: {report_to:default,max_age:31536000,include_subdomains:true}Expect-Staple: max-age3600; report-urihttps://report-uri.youthdev.net/staple; includeSubDomains; preloadExpect-CT: enforce, max-age3600, report-urihttps://report-uri.youthdev.net/ctFeature-Policy: camera self; microphone self; payment self; fullscreen self; speaker self; midi self; vr self; autoplay self; geolocation self;

html>head>title>301 Moved Permanently/title>/head>body>center>h1>301 Moved Permanently/h1>/center>hr>center>nginx/center>/body>/html>

Port 443

HTTP/1.1 200 OKServer: nginxDate: Sat, 09 Nov 2024 14:57:11 GMTContent-Type: text/html; charsetutf-8Transfer-Encoding: chunkedConnection: keep-aliveCache-Control: no-cache, no-store, must-revalidate, max-age0Expires: Thu, 01 Jan 1970 00:00:00 UTCStrict-Transport-Security: max-age31536000; includeSubdomains; preloadX-Content-Type-Options: nosniffX-XSS-Protection: 1; modeblock; reporthttps://report-uri.youthdev.net/xssContent-Security-Policy: default-src self; script-src self unsafe-inline unsafe-eval *.google-analytics.com connect.facebook.net apis.google.com images.dmca.com rec.smartlook.com cdnjs.cloudflare.com cdn.branch.io *.googletagmanager.com *.googleadservices.com *.googletagmanager.com tagmanager.google.com sentry.io *.g.doubleclick.net app.link *.hotjar.com cdn.jsdelivr.net *.firebaseio.com *.gstatic.com www.google.com *.googleapis.com www.pagespeed-mod.com https://app.doopage.com *.doopage.com doopage-youthdev.firebaseio.com provely-public.s3.amazonaws.com growsurf.com app.growsurf.com snap.licdn.com analytics.tiktok.com cdn.popt.in *.zalo.me *.zaloapp.com *.zdn.vn; img-src self data: *.google-analytics.com *.googletagmanager.com *.gstatic.com *.facebook.com images.dmca.com *.g.doubleclick.net www.google.com www.google.com.vn img.icons8.com *.fbcdn.net *.akamaihd.net *.fbsbx.com *.hotjar.com data: blob: doopage-prod.s3.amazonaws.com https://app.doopage.com *.doopage.com unpkg.com captcha.garena.com *.shopee.vn *.zaloapp.com *.zdn.vn *.zadn.vn *.dlmd.me *.cdninstagram.com *.giphy.com app.provely.io s3.amazonaws.com/provely-public/ res.cloudinary.com/growsurf-prod/ *.zalo.me px.ads.linkedin.com p.adsymptotic.com *.popt.in maps.googleapis.com deo.shopeemobile.com *.tiktokcdn.com; style-src self unsafe-inline *.googleapis.com *.gstatic.com maxcdn.bootstrapcdn.com cdn.jsdelivr.net tagmanager.google.com cdnjs.cloudflare.com *.typekit.net https://app.doopage.com *.doopage.com app.provely.io cdn.popt.in; font-src self data: themes.googleusercontent.com fonts.gstatic.com maxcdn.bootstrapcdn.com *.hotjar.com cdnjs.cloudflare.com *.typekit.net ; frame-src self *.facebook.com *.google.com *.googleapis.com *.youtube.com *.youtube-nocookie.com *.hotjar.com *.g.doubleclick.net *.firebaseio.com *.doubleclick.net *.zalo.me *.facebook.net *.tiktok.com; object-src self *.youtube.com *.youtube-nocookie.com *.fbcdn.net *.akamaihd.net *.fbsbx.com data: doopage-prod.s3.amazonaws.com *.ss-hn-1.vccloud.vn *.hn.ss.bfcplatform.vn *.zdn.vn *.zadn.vn *.dlmd.me; media-src self *.youtube.com *.youtube-nocookie.com *.fbcdn.net *.akamaihd.net *.fbsbx.com data: doopage-prod.s3.amazonaws.com https://app.doopage.com *.doopage.com app.provely.io *.ss-hn-1.vccloud.vn *.hn.ss.bfcplatform.vn *.zdn.vn *.zadn.vn *.dlmd.me; connect-src self *.smartlook.com wss://*.smartlook.com sentry.io *.sentry.io wss://sentry.io *.googleapis.com wss://*.googleapis.com *.google-analytics.com wss://*.google-analytics.com *.facebook.com wss://*.facebook.com *.branch.io wss://*.branch.io *.hotjar.com wss://*.hotjar.com *.hotjar.io wss://*.hotjar.io *.firebaseio.com wss://*.firebaseio.com *.bugsnag.com *.doubleclick.net analytics.google.com wss://analytics.google.com extreme-ip-lookup.com https://app.doopage.com *.doopage.com wss://socket.doopage.com doopage-youthdev.firebaseio.com app.provely.io api.growsurf.com wss://doopage.voip.bfcplatform.vn analytics.tiktok.com display.popt.in d3lopmpcew67el.cloudfront.net *.zalo.me geolocation-db.com console.re wss://console.re px.ads.linkedin.com ipinfo.io; manifest-src self ; prefetch-src self ; worker-src self blob:; base-uri self ; form-action self https://www.facebook.com/tr/ https://accounts.google.com/ ; frame-ancestors self doopage.com; upgrade-insecure-requests; ; report-uri https://report-uri.youthdev.net/cspReport-To: {group:default,max_age:31536000,endpoints:{url:https://report-uri.youthdev.net/misc},include_subdomains:true}NEL: {report_to:default,max_age:31536000,include_subdomains:true}Expect-Staple: max-age3600; report-urihttps://report-uri.youthdev.net/staple; includeSubDomains; preloadExpect-CT: enforce, max-age3600, report-urihttps://report-uri.youthdev.net/ctFeature-Policy: camera self; microphone self; payment self; fullscreen self; speaker self; midi self; vr self; autoplay self; geolocation self;

!DOCTYPE html>html langen charsetutf-8>head>	title>Sign In/title>	meta nameviewport contentwidthdevice-width, initial-scale1, maximum-scale1, user-scalableno>	style>	body {		font-family: Helvetica Neue,Helvetica,Arial,sans-serif;		font-size: 14px;		line-height: 1.42857143;		color: #333;		background: #f0f0f0;	}	.signin {		display:block;		margin:20px auto;		max-width:400px;		background: #fff;		border:1px solid #ccc;		border-radius: 10px;		padding: 20px;	}	.center {		text-align:center;	}	.btn {		color: #fff;		background-color: #428bca;		border: 1px solid #357ebd;		-webkit-border-radius: 4;		-moz-border-radius: 4;		border-radius: 4px;		font-size: 14px;		padding: 6px 12px;	  	text-decoration: none;		cursor: pointer;	}	.btn:hover {		background-color: #3071a9;		border-color: #285e8e;		text-decoration: none;	}	label {		display: inline-block;		max-width: 100%;		margin-bottom: 5px;		font-weight: 700;	}	input {		display: block;		width: 100%;		height: 34px;		padding: 6px 12px;		font-size: 14px;		line-height: 1.42857143;		color: #555;		background-color: #fff;		background-image: none;		border: 1px solid #ccc;		border-radius: 4px;		-webkit-box-shadow: inset 0 1px 1px rgba(0,0,0,.075);		box-shadow: inset 0 1px 1px rgba(0,0,0,.075);		-webkit-transition: border-color ease-in-out .15s,-webkit-box-shadow ease-in-out .15s;		-o-transition: border-color ease-in-out .15s,box-shadow ease-in-out .15s;		transition: border-color ease-in-out .15s,box-shadow ease-in-out .15s;		margin:0;		box-sizing: border-box;	}	footer {		display:block;		font-size:10px;		color:#aaa;		text-align:center;		margin-bottom:10px;	}	footer a {		display:inline-block;		height:25px;		line-height:25px;		color:#aaa;		text-decoration:underline;	}	footer a:hover {		color:#aaa;	}	/style>/head>body>	div classsignin center>	form methodGET action/oauth2/start>	input typehidden namerd value/>		p>Authenticate using one of the following domains: @youthdev.net, @doopage.com/p>		button typesubmit classbtn>Sign in with Google/button>br/>	/form>	/div>		script>		if (window.location.hash) {			(function() {				var inputs  document.getElementsByName(rd);				for (var i  0; i  inputs.length; i++) {										var idx  inputsi.value.indexOf(#);					if (idx > 0) {												inputsi.value  inputsi.value.substr(0, idx);					}					inputsi.value + window.location.hash;				}			})();		}	/script>	footer>		Secured with a hrefhttps://github.com/oauth2-proxy/oauth2-proxy#oauth2_proxy>OAuth2 Proxy/a> version 		/footer>/body>/html>

Subdomains

Date	Domain	IP
oauth2.doopage.com	2024-05-13	18.139.148.184
qdb.doopage.com	2024-10-30	52.221.36.123
mautic.doopage.com	2024-05-13	52.77.8.38
dashboard.doopage.com	2024-05-13	18.139.148.184
promdash.doopage.com	2024-09-19	13.251.98.88
app.doopage.com	2024-05-13	18.139.148.184
center.doopage.com	2024-05-13	172.67.70.35
status.doopage.com	2024-05-13	52.77.8.38
socket.doopage.com	2024-09-19	172.67.70.35
www.doopage.com	2024-10-10	104.26.11.94
cortex.doopage.com	2024-11-09	54.169.107.142
my.doopage.com	2024-05-13	104.26.10.94

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > cortex.doopage.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains