Domain > s2.boreal.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2026-03-04	104.18.1.62 (ClassC)

HTTP/1.1 200 OKDate: Wed, 04 Mar 2026 12:44:14 GMTContent-Type: text/html; charsetutf-8Transfer-Encoding: chunkedConnection: keep-aliveCF-RAY: 9d70f89ecc2e6c24-PDXStrict-Transport-Security: max-age15724800X-Powered-By: ExpressCache-Control: no-storeX-Content-Type-Options: nosniffVary: Accept-Encoding,User-AgentSet-Cookie: ROUTE.jsapps-58bf7fd85b-bgcwf; Path/; Secure; HttpOnly; SameSiteNoneSet-Cookie: __cf_bmQU.EkUIZjzKkN2B9FXnzkJV1IvjOYShWC7vyEJ7Zefs-1772628254-1.0.1.1-pDAMkDZ.eq4cvx2v61WryOgD9B33MugAUNBRllzTY6aLKo03smCL_7afXvJ4_kHYn09_bNFIHfFDJ_54LEIGgWZsmdnldZHKGB5MwGBYSkE; path/; expiresWed, 04-Mar-26 13:14:14 GMT; domain.boreal.com; HttpOnly; SecureX-SAP-Pad: 3274content-security-policy: default-src self data: blob: ws: *.gstatic.com *.google.com *.google-analytics.com *.nr-data.net *.sentry.io *.facebook.com *.facebook.net *.everesttech.net *.hotjar.com *.cloudflare.com *.bing.com *.arcot.com *.ondemand.com *.fontawesome.com *.auth0.com *.creditmutuel.fr *.bioz.com *.vwr.com *.lfeeder.com *.leadfeeder.com *.doubleclick.net *.avantorsciences.com *.avantorsciences.cn *.nusil.com *.googletagmanager.com *.linkedin.com *.twitter.com *.vwrsurveys.com *.adsymptotic.com *.paymetric.com  *.worldpay.com *.mktoresp.com *.wardsci.com *.sargentwelch.com *.boreal.com *.sargentwelch.ca *.twimg.com *.vwr-cmd.com *.mt.com *.moji-moji.com *.youtube.com youtube.com *.gotowebinar.com *.vwr-cmd2.com *.surveymonkey.com *.instantservice.com *.zencdn.net *.cdntwrk.com www.google.co.in *.hotjar.com *.hotjar.io ahpp.adflex.co.uk ahpp2.adflex.co.uk authentication.cardinalcommerce.com *.pinterest.com *.kickfire.com *.rumiview.com *.vimeo.com *.chatlayer.ai *.sinch.com *.ably-realtime.com *.ably.io *.salesforce.com *.prnewswire.com nebnextvwr.neb.com projects.spielcreative.com projects.ivorystudio.net *.marketo.com *.zoovu.com *.azureedge.net *.amazonaws.com *.smartassistant.com serviceapi.nmv.naver.com *.uberflip.com *.zscalerthree.net *.cdntwrk.com *.brightcove.net *.oribi.io *.ariba.com *.clarity.ms *.adobedtm.com *.demdex.net *.tt.omtrdc.net edge.adobedc.net *.pantheonsite.io; style-src self unsafe-eval unsafe-inline *.facebook.com *.facebook.net *.everesttech.net *.cloudflare.com *.bing.com *.avantorsciences.com *.avantorsciences.cn *.arcot.com *.auth0.com *.ondemand.com *.fontawesome.com *.creditmutuel.fr *.bioz.com *.vwr.com *.lfeeder.com *.leadfeeder.com *.googleapis.com *.mktoresp.com *.twitter.com *.twimg.com *.zencdn.net *.marketo.com *.zoovu.com *.azureedge.net *.amazonaws.com *.smartassistant.com serviceapi.nmv.naver.com *.uberflip.com *.zscalerthree.net *.cdntwrk.com *.brightcove.net *.oribi.io *.ariba.com *.clarity.ms *.adobedtm.com *.demdex.net *.tt.omtrdc.net edge.adobedc.net; script-src self unsafe-eval unsafe-inline blob: *.auth0.com *.google-analytics.com *.facebook.com *.facebook.net *.everesttech.net *.cloudflare.com *.bing.com *.arcot.com *.auth0.com *.ondemand.com *.fontawesome.com *.creditmutuel.fr *.bioz.com *.sinch.com *.ably-realtime.com *.ably.io *.chatlayer.ai *.sentry.io *.salesforceliveagent.com *.googletagmanager.com *.newrelic.com *.nr-data.net *.vwr.com *.lfeeder.com *.leadfeeder.com *.licdn.com *.cloudflareinsights.com *.vwrsurveys.com *.marinsm.com *.paymetric.com *.worldpay.com *.google.com *.cloudflare.com *.pardot.com *.doubleclick.net *.googleadservices.com *.facebook.net *.everesttech.net *.wardsci.com *.verisign.com *.linkedin.com *.twitter.com *.googleapis.com *.sargentwelch.com *.sargentwelch.ca *.marketo.net *.twimg.com *.vwr-cmd.com *.mt.com *.moji-moji.com *.youtube.com youtube.com *.gotowebinar.com *.vwr-cmd2.com *.surveymonkey.com *.instantservice.com *.zencdn.net *.cdntwrk.com www.google.co.in *.hotjar.com *.hotjar.io *.pinimg.com *.avantorsciences.com *.avantorsciences.cn *.kickfire.com *.rumiview.com *.jquery.com *.prnewswire.com *.marketo.com *.zoovu.com *.azureedge.net *.amazonaws.com *.smartassistant.com serviceapi.nmv.naver.com *.uberflip.com *.zscalerthree.net *.cdntwrk.com *.brightcove.net *.oribi.io *.ariba.com *.clarity.ms *.adobedtm.com *.demdex.net *.tt.omtrdc.net edge.adobedc.net;cf-cache-status: DYNAMICServer: cloudflare

!doctype html>html langen>  head>    meta charsetutf-8/>    base href//>    meta nameviewport contentwidthdevice-width, initial-scale1/>    meta nameocc-backend-base-url contenthttps://s2.occapi.avantorsciences.com/>    !-- Google Tag Manager -->    script>      (function () {        var ALLOWED_DOMAINS  p2.avantorsciences.com;        var host  (          (window.location && window.location.hostname) ||                  ).toLowerCase();        if (ALLOWED_DOMAINS.indexOf(host)  -1) return;        (function (w, d, s, l, i) {          wl  wl || ;          wl.push({ gtm.start: new Date().getTime(), event: gtm.js });          var f  d.getElementsByTagName(s)0,            j  d.createElement(s),            dl  l ! dataLayer ? &l + l : ;          j.async  true;          j.src  https://www.googletagmanager.com/gtm.js?id + i + dl;          f.parentNode.insertBefore(j, f);        })(window, document, script, dataLayer, GTM-N5HH5R3M);      })();    /script>    !-- End Google Tag Manager -->  link relstylesheet hrefstyles-MQ6E2JMK.css>/head>  body>script typetext/javascript idng-event-dispatch-contract>(()>{function p(t,n,r,o,e,i,f,m){return{eventType:t,event:n,targetElement:r,eic:o,timeStamp:e,eia:i,eirp:f,eiack:m}}function u(t){let n,re>{n.push(e)};return{c:t,q:n,et:,etc:,d:r,h:e>{r(p(e.type,e,e.target,t,Date.now()))}}}function s(t,n,r){for(let o0;on.length;o++){let eno;(r?t.etc:t.et).push(e),t.c.addEventListener(e,t.h,r)}}function c(t,n,r,o,ewindow){let iu(t);e._ejsas||(e._ejsas{}),e._ejsasni,s(i,r),s(i,o,!0)}window.__jsaction_bootstrapc;})();/script>    script>      (function () {        var ALLOWED_DOMAINS  p2.avantorsciences.com;        var host  (          (window.location && window.location.hostname) ||                  ).toLowerCase();        if (ALLOWED_DOMAINS.indexOf(host)  -1) return;        // Google Tag Manager (noscript)        var ns  document.createElement(noscript);        var iframe  document.createElement(iframe);        iframe.src  https://www.googletagmanager.com/ns.html?idGTM-N5HH5R3M;        iframe.height  0;        iframe.width  0;        iframe.style.display  none;        iframe.style.visibility  hidden;        ns.appendChild(iframe);        document.body.insertBefore(ns, document.body.firstChild);        // End Google Tag Manager (noscript)      })();    /script>    script async srchttps://xiecomm.worldpay.com/DIeComm/Scripts/XIFrame/XIFrame-1.2.0.js>/script>    script async srchttps://c.la2c1.salesforceliveagent.com/content/g/js/38.0/deployment.js typetext/javascript>/script>    script srchttps://challenges.cloudflare.com/turnstile/v0/api.js async defer>/script>    app-root>/app-root>  link relmodulepreload hrefchunk-CXN5R452.js>link relmodulepreload hrefchunk-523RSIIT.js>link relmodulepreload hrefchunk-7MHSQSZ5.js>link relmodulepreload hrefchunk-DWJSUOIT.js>link relmodulepreload hrefchunk-FOU6NYYP.js>link relmodulepreload hrefchunk-ZKWK7THB.js>link relmodulepreload hrefchunk-V6DT5WC3.js>link relmodulepreload hrefchunk-Q7VJXQW7.js>link relmodulepreload hrefchunk-HYLNQFPR.js>link relmodulepreload hrefchunk-O7DYL2X6.js>script srcpolyfills-ZW6HHKKB.js typemodule>/script>script srcscripts-PM5HWKKP.js defer>/script>script srcmain-D74D2KA2.js typemodule>/script>/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > s2.boreal.com

Is this malicious?

DNS Resolutions

Port 80

Port 443