Domain > app.retention.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2024-12-27	54.149.13.123 (ClassC)
2026-02-07	16.148.233.77 (ClassC)

HTTP/1.1 302 FoundDate: Sat, 07 Feb 2026 12:39:49 GMTContent-Type: text/html; charsetutf-8Transfer-Encoding: chunkedConnection: keep-aliveStatus: 302 FoundCache-Control: no-cacheStrict-Transport-Security: max-age63072000; includeSubDomainsX-Request-Id: 62c55f5c-05b6-41a4-aa5c-d7e40b33f435Location: https://app.retention.com/loginX-Runtime: 0.011763Content-Security-Policy: default-src self https:; base-uri self; form-action self; object-src none; script-src self https: https://js.stripe.com https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com https://kit.fontawesome.com https://code.jquery.com https://widget.intercom.io https://js.intercomcdn.com https://cdn4.mxpnl.com https://www.google.com/recaptcha/api.js https://script.crazyegg.com https://code.highcharts.com https://www.gstatic.com/charts/loader.js https://b-code.liadm.com unsafe-inline unsafe-eval; style-src self unsafe-inline https://fonts.googleapis.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://images.retention.com https://api.fontshare.com https://use.typekit.net; img-src self https: data: blob: https://static.intercomcdn.com https://downloads.intercomcdn.com https://jsstore.s3-us-west-2.amazonaws.com; font-src self https: data: https://fonts.gstatic.com https://ka-f.fontawesome.com https://use.typekit.net; connect-src self https: wss: https://api-iam.intercom.io wss://nexus-websocket-a.intercom.io https://api.mixpanel.com https://www.google.com/recaptcha/api/siteverify https://*.execute-api.us-west-2.amazonaws.com; frame-src self https: https://js.stripe.com https://intercom-sheets.com https://www.google.com/recaptcha; frame-ancestors none; upgrade-insecure-requestsSet-Cookie: _getemails_sessionCo12yCnNnvXaTb0bsyF%2FiN10thfNytvkILlgpmkvlQAnBRL3GnMdT%2Bah9gZO%2FYzP5jHnnuoaRVR1SeEEYJMMphM5%2BgimyyCKlkNdUe41%2FXoP9jW8qi%2Fd%2F74riMYjBxxpPM0HjD%2BXDdWq9PyIeidHEEqgV%2BoJRKeFveKJ95k2ayFtrSBH8GQ9FeVAfJvpctfFXZ27vKxw6hUHQJbeVfqxxOp1zKOJ--KZE9AZ0EfEwstg0o--IENlPxWjeAITqlgsDwrZEQ%3D%3D; path/; secure; HttpOnlyX-Powered-By: Phusion Passenger(R)Server: nginx + Phusion Passenger(R)

html>body>You are being a hrefhttps://app.retention.com/login>redirected/a>./body>/html>

Subdomains

Date	Domain	IP
mail.retention.com	2026-01-20	3.224.73.89
app.retention.com	2026-02-07	16.148.233.77

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > app.retention.com

Is this malicious?

DNS Resolutions

Port 443

Subdomains