Domain > amazon.gobrightside.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-04-13	108.138.167.53 (ClassC)
2026-01-17	3.169.173.20 (ClassC)

HTTP/1.1 200 OKContent-Type: text/htmlContent-Length: 5098Connection: keep-aliveDate: Tue, 06 Jan 2026 12:44:05 GMTaccess-control-allow-credentials: false;Server: AmazonS3Accept-Ranges: bytesETag: 480bb6251571869f2da0bb6e6f005146Last-Modified: Tue, 16 Dec 2025 16:27:38 GMTCache-Control: public, max-age0, s-maxage31536000x-bs-timezone: 0x-bs-gmtoffset: MSTx-content-type-options: nosniffcontent-security-policy: worker-src self blob:; script-src self *.cloudflare.com *.google-analytics.com *.licdn.com *.hotjar.com *.zoominfo.com *.doubleclick.net *.cloudflare.com *.brightsidefinancial.com *.amplifyapp.com *.amplitude.com *.sentry.io *.finicity.com *.gobrightside.com *.sprig.com *.facebook.net *.googleapis.com *.intercomcdn.com *.intercom.io *.socure.com *.dvnfo.com *.googletagmanager.com unsafe-inline unsafe-eval *.site.com *.force.com *.salesforce.com *.salesforce-scrt.com *.airbridge.io blob:;strict-transport-security: max-age31536000; includeSubDomainsreferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: *.site.com *.force.com *.salesforce.com *.salesforce-scrt.com *.amplifyapp.com *.gobrightside.com *.airbridge.io;X-Cache: Hit from cloudfrontVia: 1.1 9b38ff4b39c6c0a269c601916dab060e.cloudfront.net (CloudFront)X-Amz-Cf-Pop: HIO52-P4Alt-Svc: h3:443; ma86400X-Amz-Cf-Id: VrV1ykCw5gbImmJwozCaj87vEySZJWQV8STAN-hvjj96ImakUVrdfgAge: 988006

!DOCTYPE html>html langen data-critters-container>  head>    meta charsetutf-8>    title>Brightside/title>    base href/>    meta nameviewport contentwidthdevice-width, initial-scale1>    link relicon typeimage/x-icon hreffavicon.ico>    !-- https://thecloudtutorials.com/2019/02/23/a-profile-app-with-aws-amplify/ -->    script>      if (global  undefined) {        var global  window;      }      const BuildVersion  2025-12-16 09:23:43;    /script>  style>@media print{@page{size:A4;margin:2cm}}/style>link relstylesheet hrefstyles.3d1e575a7f831b76.css mediaprint onloadthis.mediaall>noscript>link relstylesheet hrefstyles.3d1e575a7f831b76.css>/noscript>/head>  body idbody>    noscript>iframe srchttps://www.googletagmanager.com/ns.html?idGTM-KPBW2CS height0 width0 styledisplay:none;visibility:hidden>/iframe>/noscript>    brightside-web-desktop>/brightside-web-desktop>    !-- Global site tag (gtag.js) - Google Analytics -->    script async>      (function () {        const GATrackingIds  ;        const hostname  window.location.hostname;        const parts  hostname.split(.).reverse();        if (parts.length > 3) {          parts.shift(); //.com          parts.shift(); //.gobrightside        }        let production  false;        const dev    UA-112701913-5;        const stage  ;        const prod    AW-399284792,UA-113184142-6;        if (parts0  stage) {          GATrackingIds.push(...stage); // staging        } else if (parts0  dev || parts0  localhost || ( parts.length  2 && parts1  127 )) {          GATrackingIds.push(...dev); // dev        } else if (parts.length  1) {          GATrackingIds.push(...prod);          production  true;          document.write(            scr + ipt>+            (function(w,d,s,l,i){wlwl||;wl.push({gtm.start:\n +            new Date().getTime(),event:gtm.js});var fd.getElementsByTagName(s)0,\n +            jd.createElement(s),dll!dataLayer?&l+l:;j.asynctrue;j.src\n +            https://www.googletagmanager.com/gtm.js?id+i+dl;f.parentNode.insertBefore(j,f);\n +            })(window,document,script,dataLayer,GTM-KPBW2CS);            +/scr + ipt>          );        } else {          //fallback to nonprod.          GATrackingIds.push(...dev); // dev        }        if ( ! production ) {          console.log(`GaTrackingIds:`, GATrackingIds);        }        GATrackingIds.forEach((trackingId) > {          document.write(            scr + ipt async srchttps://www.googletagmanager.com/gtag/js?id + trackingId + >/scr + ipt>          );        });        window.dataLayer  window.dataLayer || ;        window.gTag  () > {          dataLayer.push(arguments);        };        window.gTag(js, new Date());        GATrackingIds.forEach((id) > window.gTag(config, id));      })();      /* !-- Facebook Pixel Code --> */      (function () {        !(function (f, b, e, v, n, t, s) {          if (f.fbq) return;          n  f.fbq  function () {            n.callMethod ? n.callMethod.apply(n, arguments) : n.queue.push(arguments);          };          if (!f._fbq) f._fbq  n;          n.push  n;          n.loaded  !0;          n.version  2.0;          n.queue  ;          t  b.createElement(e);          t.async  !0;          t.src  v;          s  b.getElementsByTagName(e)0;          s.parentNode.insertBefore(t, s);        })(window, document, script, https://connect.facebook.net/en_US/fbevents.js);        fbq(init, 3030280700318627);      })();      const vanilla_setupAmazonConnect  (w,d,x,id) > {        const sd.createElement(script);        s.srchttps://d2s9x5slbvr0vu.cloudfront.net/amazon-connect-chat-interface-client.js;        s.async1;        s.idid;        d.getElementsByTagName(head)0.appendChild(s);        wx   wx || function() { (wx.ac  wx.ac || ).push(arguments) };      }      const vanilla_setupSprig  (l,e,a,p) > {        if (window.Sprig) return;        window.Sprig  function() {          S._queue.push(arguments)        }        const S  window.Sprig;        S.appId  a;        S._queue  ;        window.UserLeap  S;        a  l.createElement(script);        a.async  1;        a.src  e + ?id + S.appId;        p  l.getElementsByTagName(script)0;        p.parentNode.insertBefore(a, p);      }    /script>    noscript>      img height1 width1 styledisplay: none; srchttps://www.facebook.com/tr?id3030280700318627&evPageView&noscript1>    /noscript>    !-- End Facebook Pixel Code -->  script srcruntime.d39c9534634374b2.js typemodule>/script>script srcpolyfills.c1ff61f9f26ba75e.js typemodule>/script>script srcscripts.2a0f87a1518cea5e.js defer>/script>script srcmain.1ccef82bfa32d795.js typemodule>/script>/body>/html>

Subdomains

Date	Domain	IP
api2.gobrightside.com	2024-09-08	3.163.24.7
accolade.gobrightside.com	2024-08-11	3.163.24.48
api3.stage.gobrightside.com	2025-04-26	99.84.66.77
webhook.stage.gobrightside.com	2024-08-25	18.161.6.7
cdn.gobrightside.com	2024-07-08	204.246.191.41
amazon.gobrightside.com	2026-01-17	3.169.173.20
app.gobrightside.com	2024-11-17	204.246.191.44
bjservices.gobrightside.com	2024-06-28	18.161.6.54
comcast.gobrightside.com	2024-03-08	3.163.24.7
app.ce-dev.gobrightside.com	2025-05-26	52.84.162.96
api.dev.gobrightside.com	2024-08-11	204.246.191.121
webhook.dev.gobrightside.com	2024-08-20	18.161.6.64
app.dev.gobrightside.com	2024-07-06	3.163.24.46

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > amazon.gobrightside.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains