Domain > ebecs.roomex.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2018-04-07	54.76.245.216 (ClassC)
2025-10-07	3.169.173.106 (ClassC)

HTTP/1.1 301 Moved PermanentlyServer: CloudFrontDate: Tue, 07 Oct 2025 02:03:30 GMTContent-Type: text/htmlContent-Length: 167Connection: keep-aliveLocation: https://ebecs.roomex.com/X-Cache: Redirect from cloudfrontVia: 1.1 5f7d374d92b73172fce43b7879076d1c.cloudfront.net (CloudFront)X-Amz-Cf-Pop: HIO52-P4X-Amz-Cf-Id: X8aoxQMzocffbkdARHILRD_vRep-inBf_XWMB4xxTEC_CZWJnpYXLgContent-Security-Policy: worker-src blob: self ; frame-ancestors self https://admin.roomex.com ; script-src unsafe-eval unsafe-inline self https://*.dev.corpay-lodging.com https://*.roomex.com https://www.google-analytics.com https://www.googletagmanager.com https://js.intercomcdn.com https://js.stripe.com https://maps.googleapis.com *.hotjar.com https://widget.intercom.io/widget/ ; style-src unsafe-inline self https://fonts.googleapis.com ; connect-src self https://*.dev.lodgx.io https://*.stg.lodgx.io https://*.lodgx.io https://*.dev.corpay-lodging.com https://*.roomexbackoffice.com https://*.eu-west-1.es.amazonaws.com/ https://login.microsoftonline.com https://www.google-analytics.com https://api-iam.intercom.io https://api2.amplitude.com wss://*.roomex.com https://*.roomex.com https://browser-intake-datadoghq.com https://*.browser-intake-datadoghq.com  https://*.googleapis.com https://*.analytics.google.com  wss://nexus-websocket-a.intercom.io https://*.hotjar.io wss://ws.hotjar.com https://stats.g.doubleclick.net https://js.stripe.com https://maps.gstatic.com https://imagescf.roomex.com https://widget.intercom.io https://s3.eu-west-1.amazonaws.com/rx.prod.pay.expensecards/ https://*.intercomcdn.com https://s3-eu-west-1.amazonaws.com/roomexstaticcontent/ https://capture.trackjs.com *.hotjar.com  https://static.intercomassets.com ; img-src data: * ; form-action self ;X-Content-Type-Options: nosniffCache-Control: no-cacheVary: Origin

html>head>title>301 Moved Permanently/title>/head>body>center>h1>301 Moved Permanently/h1>/center>hr>center>CloudFront/center>/body>/html>

Port 443

HTTP/1.1 200 OKServer: CloudFrontContent-Type: text/htmlContent-Length: 5428Connection: keep-aliveDate: Tue, 07 Oct 2025 02:03:32 GMTLast-Modified: Mon, 06 Oct 2025 11:56:13 GMTETag: e0fa176be0896c0d4e4f3b80703908d8x-amz-server-side-encryption: AES256Accept-Ranges: bytesVary: Accept-EncodingX-Cache: Error from cloudfrontVia: 1.1 7d14d4fc1c149f1d429681a4c414c21a.cloudfront.net (CloudFront)X-Amz-Cf-Pop: HIO52-P4X-Amz-Cf-Id: d0qGcgPgxnLoJnIZRBy3g1p4NFwFRZRW3y-PaLdK6V0lp_cPVa6rJgContent-Security-Policy: worker-src blob: self ; frame-ancestors self https://admin.roomex.com ; script-src unsafe-eval unsafe-inline self https://*.dev.corpay-lodging.com https://*.roomex.com https://www.google-analytics.com https://www.googletagmanager.com https://js.intercomcdn.com https://js.stripe.com https://maps.googleapis.com *.hotjar.com https://widget.intercom.io/widget/ ; style-src unsafe-inline self https://fonts.googleapis.com ; connect-src self https://*.dev.lodgx.io https://*.stg.lodgx.io https://*.lodgx.io https://*.dev.corpay-lodging.com https://*.roomexbackoffice.com https://*.eu-west-1.es.amazonaws.com/ https://login.microsoftonline.com https://www.google-analytics.com https://api-iam.intercom.io https://api2.amplitude.com wss://*.roomex.com https://*.roomex.com https://browser-intake-datadoghq.com https://*.browser-intake-datadoghq.com  https://*.googleapis.com https://*.analytics.google.com  wss://nexus-websocket-a.intercom.io https://*.hotjar.io wss://ws.hotjar.com https://stats.g.doubleclick.net https://js.stripe.com https://maps.gstatic.com https://imagescf.roomex.com https://widget.intercom.io https://s3.eu-west-1.amazonaws.com/rx.prod.pay.expensecards/ https://*.intercomcdn.com https://s3-eu-west-1.amazonaws.com/roomexstaticcontent/ https://capture.trackjs.com *.hotjar.com  https://static.intercomassets.com ; img-src data: * ; form-action self ;Strict-Transport-Security: max-age31536000; includeSubDomains; preloadCache-Control: max-age3600Vary: Origin

!DOCTYPE html>html langen classh-100 data-critters-container>  head>    meta charsetutf-8>    base href/>    meta nameviewport contentwidthdevice-width, initial-scale1>    link relpreconnect hrefhttps://imagescf.roomex.com>    script src/assets/js/google.maps.noop.js>/script>    script src/assets/js/tracking.scripts.js>/script>    script src/assets/js/bytescout.js defer>/script>    script nomodule>      location.href  /unsupported-browser;    /script>    !-- inline spinner styles to be able to display spinner right away -->    style typetext/css>      body,      html {        height: 100%;      }      .overflow-x-hidden {        overflow-x: hidden;      }      .app-loading {        position: relative;        display: flex;        flex-direction: column;        align-items: center;        justify-content: center;        height: 100%;      }      .lds-spinner {        color: var(--color-primary, darkgray);        display: inline-block;        position: relative;        width: 64px;        height: 64px;      }      .lds-spinner div {        transform-origin: 32px 32px;        animation: lds-spinner 1.2s linear infinite;      }      .lds-spinner div::after {        content:  ;        display: block;        position: absolute;        top: 3px;        left: 29px;        width: 3px;        height: 14px;        border-radius: 20%;        background: var(--color-primary, darkgray);      }      .lds-spinner div:nth-child(1) {        transform: rotate(0deg);        animation-delay: -1.1s;      }      .lds-spinner div:nth-child(2) {        transform: rotate(30deg);        animation-delay: -1s;      }      .lds-spinner div:nth-child(3) {        transform: rotate(60deg);        animation-delay: -0.9s;      }      .lds-spinner div:nth-child(4) {        transform: rotate(90deg);        animation-delay: -0.8s;      }      .lds-spinner div:nth-child(5) {        transform: rotate(120deg);        animation-delay: -0.7s;      }      .lds-spinner div:nth-child(6) {        transform: rotate(150deg);        animation-delay: -0.6s;      }      .lds-spinner div:nth-child(7) {        transform: rotate(180deg);        animation-delay: -0.5s;      }      .lds-spinner div:nth-child(8) {        transform: rotate(210deg);        animation-delay: -0.4s;      }      .lds-spinner div:nth-child(9) {        transform: rotate(240deg);        animation-delay: -0.3s;      }      .lds-spinner div:nth-child(10) {        transform: rotate(270deg);        animation-delay: -0.2s;      }      .lds-spinner div:nth-child(11) {        transform: rotate(300deg);        animation-delay: -0.1s;      }      .lds-spinner div:nth-child(12) {        transform: rotate(330deg);        animation-delay: 0s;      }      @keyframes lds-spinner {        0% {          opacity: 1;        }        100% {          opacity: 0;        }      }    /style>    link relmanifest hrefmanifest.webmanifest>    meta nametheme-color content#818181>  style>@charset UTF-8;:root{--blue:#007bff;--indigo:#6610f2;--purple:#6f42c1;--pink:#e83e8c;--red:#dc3545;--orange:#fd7e14;--yellow:#ffc107;--green:#28a745;--teal:#20c997;--cyan:#17a2b8;--white:#fff;--gray:#6c757d;--gray-dark:#343a40;--primary:#007bff;--secondary:#6c757d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:1200px;--font-family-sans-serif:-apple-system, BlinkMacSystemFont, Segoe UI, Roboto, Helvetica Neue, Arial, Noto Sans, Liberation Sans, sans-serif, Apple Color Emoji, Segoe UI Emoji, Segoe UI Symbol, Noto Color Emoji;--font-family-monospace:SFMono-Regular, Menlo, Monaco, Consolas, Liberation Mono, Courier New, monospace}*,*:before,*:after{box-sizing:border-box}html{font-family:sans-serif;line-height:1.15;-webkit-text-size-adjust:100%;-webkit-tap-highlight-color:rgba(0,0,0,0)}body{margin:0;font-family:var(--font-regular);font-size:1rem;font-weight:400;line-height:1.5;color:#212529;text-align:left;background-color:#fff}.h-100{height:100%!important}@media print{*,*:before,*:after{text-shadow:none!important;box-shadow:none!important}@page{size:a3}body{min-width:992px!important}}body{font-smoothing:antialiased;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}body{font-size:16px;font-size:1rem}/style>link relstylesheet hrefstyles.88bcffdf79897fba.css mediaprint onloadthis.mediaall>noscript>link relstylesheet hrefstyles.88bcffdf79897fba.css>/noscript>/head>  body classh-100 overflow-x-hidden>    rx-root>      !-- loading layout replaced by app after startup -->      div classapp-loading>        div classlds-spinner>          div>/div>          div>/div>          div>/div>          div>/div>          div>/div>          div>/div>          div>/div>          div>/div>          div>/div>          div>/div>          div>/div>          div>/div>        /div>      /div>    /rx-root>  script srcpolyfills.8d5a5f12d00b0664.js typemodule>/script>script srcscripts.1a22c6dcbaf45104.js defer>/script>script srcmain.5a50daa9aa4e2ceb.js typemodule>/script>/body>/html>

Subdomains

Date	Domain	IP
fairhotels-ie.roomex.com	2024-03-04	99.84.66.48
rxwebapi.roomex.com	2025-05-26	34.242.113.203
ebecs.roomex.com	2025-10-07	3.169.173.106
suppliers.roomex.com	2024-08-09	99.80.231.42
aft.roomex.com	2024-03-10	99.84.66.86
www.roomex.com	2024-07-31	199.60.103.28

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > ebecs.roomex.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains