Domain > cor.theemployeeapp.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2017-07-12	52.84.3.231 (ClassC)
2018-04-29	13.33.126.114 (ClassC)
2018-04-29	13.33.126.151 (ClassC)
2018-04-29	13.33.126.217 (ClassC)
2024-02-20	18.161.6.67 (ClassC)
2025-02-25	18.161.6.83 (ClassC)
2025-03-22	18.238.217.80 (ClassC)
2025-04-19	18.161.6.95 (ClassC)
2025-04-27	18.161.6.127 (ClassC)
2025-05-10	34.238.30.212 (ClassC)

HTTP/1.1 200 OKContent-Type: text/htmlContent-Length: 2051Connection: keep-alivex-amz-id-2: 1HJjQztj60wODN3MJV0oOKX/i5TNpp/+ig/ffOyOwm9ZcK+A7dfgN1eQDJI0fqghXk4U5Dhfggkx-amz-request-id: Z76JDPSPJRN1Z22

!doctype html>html langen>head>meta charsetutf-8/>link relicon href/favicon.ico/>meta nameviewport contentwidthdevice-width,initial-scale1/>meta nametheme-color content#000000/>meta http-equivPragma contentno-cache/>meta http-equivExpires content0/>meta namedescription contentWeb site created using create-react-app/>meta http-equivCache-Control contentno-store/>link relapple-touch-icon href/logo192.png/>title>theEMPLOYEEapp/title>style>@import url(https://fonts.googleapis.com/css?familyRaleway);@import url(https://fonts.googleapis.com/css?familyRoboto);/style>script>if(function(){var ewindow.analyticswindow.analytics||;if(!e.initialize)if(e.invoked)window.console&&console.error&&console.error(Segment snippet included twice.);else{e.invoked!0,e.methodstrackSubmit,trackClick,trackLink,trackForm,pageview,identify,reset,group,track,ready,alias,debug,page,once,off,on,e.factoryfunction(t){return function(){var nArray.prototype.slice.call(arguments);return n.unshift(t),e.push(n),e}};for(var t0;te.methods.length;t++){var ne.methodst;ene.factory(n)}e.loadfunction(t,n){var rdocument.createElement(script);r.typetext/javascript,r.async!0,r.srchttps://analytics-cdn.beta.theemployeeapp.com/analytics.js/v1/+t+/analytics.min.js;var idocument.getElementsByTagName(script)0;i.parentNode.insertBefore(r,i),e._loadOptionsn},e.SNIPPET_VERSION4.1.0,e.load(iinm744d7nKTXQi7at7zKoj8uFMX3fob),e.page()}}(),!(IntersectionObserverin window)){var scriptdocument.createElement(script);script.srchttps://polyfill.io/v3/polyfill.min.js?featuresIntersectionObserver,document.getElementsByTagName(head)0.appendChild(script)}/script>script deferdefer src/static/js/main.d375ce9d.js>/script>link href/static/css/main.877a5af9.css relstylesheet>/head>body>noscript>You need to enable JavaScript to run this app./noscript>div idmodal-root>/div>div idroot>/div>/body>/html>

Subdomains

Date	Domain	IP
admin.eu-west-2.theemployeeapp.com	2024-07-03	18.161.6.88
pechanga.theemployeeapp.com	2025-01-20	34.206.222.111
beta.theemployeeapp.com	2024-11-19	99.86.38.52
analytics-cdn.beta.theemployeeapp.com	2024-07-06	3.163.24.116
admin.beta.theemployeeapp.com	2024-05-13	3.163.165.4
admin.delta.theemployeeapp.com	2024-05-13	18.172.170.24
ceva.theemployeeapp.com	2024-12-31	18.238.217.44
chhc.theemployeeapp.com	2025-04-15	54.172.9.16
adrad.theemployeeapp.com	2025-01-05	3.233.197.199
apprisemobile.theemployeeapp.com	2024-12-16	18.238.217.26
addisonreserve.theemployeeapp.com	2025-04-24	35.168.120.51
ajg.theemployeeapp.com	2024-10-02	54.236.152.86
advancedtesting.theemployeeapp.com	2024-07-23	18.161.6.95
eotg.theemployeeapp.com	2024-11-15	3.228.50.30
mmh.theemployeeapp.com	2024-08-25	18.161.6.67
cpk.theemployeeapp.com	2025-04-11	18.205.193.101
boral.theemployeeapp.com	2024-11-17	54.88.153.164
login.theemployeeapp.com	2020-06-17	13.225.214.56
admin.theemployeeapp.com	2024-02-27	204.246.191.32
hussmann.theemployeeapp.com	2024-08-16	18.161.6.83
mohegansun.theemployeeapp.com	2024-09-01	18.161.6.95
app.theemployeeapp.com	2024-06-16	204.246.191.59
cor.theemployeeapp.com	2024-02-20	18.161.6.67
cdn-images.theemployeeapp.com	2024-08-11	99.84.66.45
barings.theemployeeapp.com	2024-11-07	3.228.50.30
cms.theemployeeapp.com	2024-07-23	18.161.6.95
cdn-logos.theemployeeapp.com	2024-07-23	99.84.66.114
get.theemployeeapp.com	2025-01-09	3.163.24.96
www.theemployeeapp.com	2025-03-24	23.236.55.173

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > cor.theemployeeapp.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains