Domain > crx-auth.unienrol.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2026-01-25	199.36.158.100 (ClassC)

HTTP/1.1 200 OKConnection: keep-aliveContent-Length: 2309Cache-Control: max-age3600Content-Type: text/html; charsetutf-8Etag: c6cc958445ea5d9bc918fd40a1cab142cfa25d0b0ce05c83d5b2e60679e0b826Last-Modif

!DOCTYPE html>html langen>head>    meta charsetUTF-8>    meta http-equivX-UA-Compatible contentIEedge>    meta nameviewport contentwidthdevice-width, initial-scale1.0>    title>UE CX Authentication/title>    script srchttps://www.gstatic.com/firebasejs/ui/6.0.1/firebase-ui-auth.js>/script>    link typetext/css relstylesheet hrefhttps://www.gstatic.com/firebasejs/ui/6.0.1/firebase-ui-auth.css />/head>body>    div idfirebaseui-auth-container>/div>    script srchttps://cdnjs.cloudflare.com/ajax/libs/firebase/8.10.0/firebase.js        integritysha512-7NBxPO/qRUrKc+Wi9GbYz0YEzMpi2UMP3mtLcswnvzI0vUFP5Jb7HNVd1V8NmEhXpSe3ZLsoGEhwRHpAZDpYPQ        crossoriginanonymous referrerpolicyno-referrer>/script>    script>        const firebaseConfig  {            apiKey: AIzaSyDVaArzEGeESIDaBhWTeZUe0fDU1trSE5Y,            authDomain: prod-unienrol-crx-app.firebaseapp.com,            projectId: prod-unienrol-crx-app,            storageBucket: prod-unienrol-crx-app.appspot.com,            messagingSenderId: 255813689621,            appId: 1:255813689621:web:d382c1e31f5181f9bc891c        };        firebase.initializeApp(firebaseConfig);        window.user_auth  {};        // Initialize the FirebaseUI Widget using Firebase.        var ui  new firebaseui.auth.AuthUI(firebase.auth());        ui.start(#firebaseui-auth-container, {            signInOptions:                 // List of OAuth providers supported.                firebase.auth.GoogleAuthProvider.PROVIDER_ID,            ,            // Other config options...            callbacks: {                signInSuccessWithAuthResult(auth) {                    console.log(index - auth successful, auth);                    window.postMessage({                         type: AUTH_TOKEN,                        params: {                            accessToken: auth.user.Aa,                            refreshToken: auth.user.refreshToken,                        }                    });                    alert(You have successfully logged in. Kindly proceed to WhatsApp Web and reload to take

Subdomains

Date	Domain	IP
scholarsearch.unienrol.com	2025-10-14	52.74.7.98
crx-auth.unienrol.com	2026-01-25	199.36.158.100
www.unienrol.com	2024-12-24	13.251.29.128
apply.unienrol.com	2026-01-05	13.213.187.9

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > crx-auth.unienrol.com

Is this malicious?

DNS Resolutions

Port 443

Subdomains