Domain > dilbert-s866aca41363.workingadvantage.com

More information on this domain is in AlienVault OTX

Whois

Property	Value
NameServer	NS50.WORLDNIC.COM
Created	1999-08-26 00:00:00
Changed	2011-09-03 00:00:00
Expires	2017-08-26 00:00:00
Registrar	NETWORK SOLUTIONS, L

DNS Resolutions

Date	IP Address
2023-06-14	104.18.1.62 (ClassC)
2026-02-21	104.18.39.111 (ClassC)

HTTP/1.1 403 ForbiddenDate: Sat, 21 Feb 2026 04:08:49 GMTContent-Type: text/html; charsetUTF-8Content-Length: 6621Connection: closeaccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UAcf-mitigated: challengecritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UAcross-origin-embedder-policy: require-corpcross-origin-opener-policy: same-origincross-origin-resource-policy: same-originorigin-agent-cluster: ?1permissions-policy: accelerometer(),browsing-topics(),camera(),clipboard-read(),clipboard-write(),geolocation(),gyroscope(),hid(),interest-cohort(),magnetometer(),microphone(),payment(),publickey-credentials-get(),screen-wake-lock(),serial(),sync-xhr(),usb()referrer-policy: same-originserver-timing: chlray;desc9d13627c9c4cb298x-content-type-options: nosniffx-frame-options: SAMEORIGINCache-Control: private, max-age0, no-store, no-cache, must-revalidate, post-check0, pre-check0Expires: Thu, 01 Jan 1970 00:00:01 GMTSet-Cookie: __cf_bmeH096cBs2vP4RSszG0ePRuBDa.XUtdeARxyrOyqyjG8-1771646929-1.0.1.1-9fKPK6jl4_KB3FevekgWTGstngHqIKSXeezEjr4fa3IT_yS1XzhzlqP7UYChix0Rfl3qCXQhZu9LsmnY8zxWcWPCDuQOmLnOof9Ap_1WtjY; path/; expiresSat, 21-Feb-26 04:38:49 GMT; domain.workingadvantage.com; HttpOnly; SecureStrict-Transport-Security: max-age5184000; includeSubDomainsServer: cloudflareCF-RAY: 9d13627c9c4cb298-PDXalt-svc: h3:443; ma86400

!DOCTYPE html>html langen-US>head>title>Just a moment.../title>meta http-equivContent-Type contenttext/html; charsetUTF-8>meta http-equivX-UA-Compatible contentIEEdge>meta namerobots contentnoindex,nofollow>meta nameviewport contentwidthdevice-width,initial-scale1>style>*{box-sizing:border-box;margin:0;padding:0}html{line-height:1.15;-webkit-text-size-adjust:100%;color:#313131;font-family:system-ui,-apple-system,BlinkMacSystemFont,Segoe UI,Roboto,Helvetica Neue,Arial,Noto Sans,sans-serif,Apple Color Emoji,Segoe UI Emoji,Segoe UI Symbol,Noto Color Emoji}body{display:flex;flex-direction:column;height:100vh;min-height:100vh}.main-content{margin:8rem auto;padding-left:1.5rem;max-width:60rem}@media (width  720px){.main-content{margin-top:4rem}}.h2{line-height:2.25rem;font-size:1.5rem;font-weight:500}@media (width  720px){.h2{line-height:1.5rem;font-size:1.25rem}}#challenge-error-text{background-image:url(data:image/svg+xml;base64,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);background-repeat:no-repeat;background-size:contain;padding-left:34px}@media (prefers-color-scheme: dark){body{background-color:#222;color:#d9d9d9}}/style>meta http-equivrefresh content360>/head>body>div classmain-wrapper rolemain>div classmain-content>noscript>div classh2>span idchallenge-error-text>Enable JavaScript and cookies to continue/span>/div>/noscript>/div>/div>script>(function(){window._cf_chl_opt  {cvId: 3,cZone: dilbert-s866aca41363.workingadvantage.com,cType: managed,cRay: 9d13627c9c4cb298,cH: T6nS9dt95UB0JoT_ywsPoignFxWslZ98MOOLPXIMBL0-1771646929-1.2.1.1-5QEKmhtGZDU15X2wNUSXMM2.HN_Ya.e4ymdtTFI2SwSrPj6rfFVzXa63tD86lyj0,cUPMDTk:\/?__cf_chl_tk6YpfllF949lphu1j4VTTgAAikJxW24rndTuwc2XjR_g-1771646929-1.0.1.1-Agq6SQURVQg6TFZpacjvFNKowDm.bVmvtq7GBy_Ag1w,cFPWv: g,cITimeS: 1771646929,cTplC:0,cTplV:5,cTplB: 0,fa:\/?__cf_chl_f_tk6YpfllF949lphu1j4VTTgAAikJxW24rndTuwc2XjR_g-1771646929-1.0.1.1-Agq6SQURVQg6TFZpacjvFNKowDm.bVmvtq7GBy_Ag1w,md: jvPZcwf3k2vuPEeli9_o0q0iSH4.72sN5r39IMSospU-1771646929-1.2.1.1-yYcD6IlFRA7xT9MWfU2Fp42NOgqHXwfxPZsD1doO_tIjfTkOAmYcPQ7fP.O.MvbW9KuoP5w5YaAVE19poQE4u11kZev9YClS.SMSBrdeH2NeTN9s1kduNG8QfjnjJEyUe9qlNnmwbPZaQIh845lKL.6_8Z26fjjBZAS.XRTDeY0._kjeQ_NBGIDz6aDwJL3q_H15mu2xrvYm47KWBUK4gcmdcg0r2cK6oEVaZJQrP5AOsLeSEGqYX.A2u_KQ7mzViq4sDfvCKkaUKsDunVoSLg.qtyXoLu0AQ7pr5coEei6Cnha2qfDZPBiX9_Ep6MSm4FHuihyrYhrAG_q_ssnCSDFlGj8eyJUSDyrZz9zC6k2l8KuMTSyrN.sHfKdjNq0VwujrLJqp74Dg037Q8lFwb_Ci6mLG8kI8alxnv9uZPYz2qSZYdncW58wRWYrmm4uDokZLywo7uyRpJhCU_dNUiLXIDp9ZcxRqY5CinMHwdAkhcZFVO0lPVmyxm5Goav8h6.lJklUkpN0482GTvDJcGpStNEkbvEmwivAc_U1E1eT4QXRLG.zlQzdTSWLho7micLIJTiMGNsnjfJGNd7OPiYr_OsSaATmv8DfmgKGybvgXPa6slxT4jWK9buf_FitETeCEuYsb8lYzJo6gYrZWYVhTtkk4.n8FSwoJkZiOuAz_RmK.tpZp16kWnhOACn2UoGhTWzLgNAp_INmECfoRwSq9PwAHH1XT49pJ.M_uumomi.fxbfc9BUUyxJ4F0NLed.HsN8m.VT_rNuwvqYK65a9gQv.kGzHh9pyeumL044cuTGuUSK6HZZw6eBqyny7kt0eS6XymdxtYURa64a4jgyPHdflHoZWRZ_KIq59PBRDA9auK3m_yGo7oujn3T5V1m_RtSYvo.7fQ69Lo1P6gPFn8oNfGRYfXyaJ2OuplvFa.R3l5Mb._gmeWaakY9SdI,mdrd: m246wIEeR1URomfqXyjKvVn0uNH.owxMJmjdGVWM4Gg-1771646929-1.2.1.1-BgtA.VEhL8pKQrJi8mYyygdjZXWKZOdipUHbelP_RE0q5nZB7QUX5OyzVvtAWYKUTW9FVOkRr.Zor3FO4_KKkdnu9UCf1mpQq8CqOhaSBEfDlGn1qJRy9zEDGKzGPYc7XkRUC8CjvrXaokPPOtVZq63mH9MjFk_zaVBp_fouWXjGB.yP60m_i_0kL4iaUd.eBrmLa6aI.hrgme1fK0_GUbr2mOxrYym1SnqLdp689SyiM54WNk.Igoc4JiwQAZGuDDTchmrPEK.RV6omER6mf7vwiFzk6z3PqLhJDqDbTxlevJ6IYyNVP96qHglj9UUP7Rut7lfFopviJ75Hi5gTcX01RcVI9Om0yu_xHrZEoncuSj6qsfmkKluVFwsqO2DnvS2BLvkSMNRn6Gz.tsoRsv54SVtCVyOI0zHaV2_XLSKdUrXoKhCru4bL2oFyf6RhMIcQQ13EmAQeMgWIFjYu8xRb.rwNtnN1vUEdVWONF3lzWlj.jK92pgu.kImSX4jOzHis1__m6GShzGLs65_dU_SlLYoV3q0ZhMe_e9.vcM5X4Xdo4YeBT5eYPZ91B52QGRCTUYqQLjtL1cm6ZGkZIZIcG3dBEFDVa13Rj6f90UadsiB7r1a3QWjMEel1_SGvviXqDJHFDRIz2Ds6WwqCNzKan4k.udLGvMQ90CJdn0LIvtc0T1.B3CpPWmrZpfJp06Al6BR6EabWD0ecFZkbWQgHuZiblC_nvSAYv2RtC1J4h3WF3TewPzLDYkVy40hCs__4jbTUEhB0P3jEqorHUJzIc4bHBD6Htdmd0Cq5hNhHwZzgKKlcE8Vqjzyrtt1X7FsZ_eble9sEr6J86rwTd3KZJx3TyV9nBbx180R6DYXjF7BAcrUzdZZLojMljCImrsMAFZ1aLJ1bBX70mhrPSAq4Ja8vpaCqgvTCpBZ..90nRodAkd047rTe.eLy97V5Z0EYH_038O2NuUIBHC.lJv9gsPrSIBei.XqEi8w1YimX4hhJk8YaXfIkszmO72sB1cz2k1ekili_mD.uvi4_TFFEqUfXcGLGBTXGg.VSojnSqTqA4hpSILVyGgGgWqmjqC.BXeoonMff0vnL9MY.vo.ONArRn3X2OirEpa4KsLLe8nVTGQqRm9jP.NUzFoMIgvOPOk.FPsxUM2mECcQeU.fUJmEV5r3lZ_uGyQYZdzWhh5XRVN9kpyjpI1ZDAm4871DSa2RPCMCRWDqpbL4H7B_cT99CF9m0lGfB6Lgsy_5tp24EJ9hLMSQV4fFipcB2hywmW9LTaQvCEmdchr5Mt_fwQhXYvgh5qskc1E_zFjfoluHDly5toR36gnGmrj6ODwa6kqBz6Bw1JXTLQP4chTUqghOp6bSB0xHcntQ08So3MhhY1zEFnMxQJXHH90gtfTJbjRR2mphU6342yy9fppXRzXa7yQ7p8BTBtcwQvMzi1yycz_hGu7ci9qLLUs52W.hYZMm4QtzqmZZqRPXovqhFFzpqVpNVB5tuPuVWYdaked2G76D2mhNaJ2BVr85a1MGEEwjnaHpkSCKoKBpbufynKWA0joen2OJUlYPyjBS4Wnx10OWr4ocYkj5r2gV5M3Fkx9MVDh9_6PFxwM2UiLHiorykYcQbmyG6iwE.q.9RHj8SQzBR8DPlW5A7LCWcIPZ4MlFaCof4i1V8yP0kYXwkL3xYeTCakU0a.bxO2yVnvjFtUR0D8hgznPK6dFRXwYNfv1cncfL_TnL96.ERJe2uxLRppQuAuaHqjC2dH5.n6jF7lrsjfTgOSs04CpYF_bZqUHb1V_ZyqVoj8lWpyHBy0xtMIXTrZdYOTTyZFoDR6_7S3LCPsg5s3TwPC1exnNsVaZkByJr0mJ3SZyOErejc8RI5Hi5fzynxtzOmsOIx3lcKBpF4cw5FmYeP_v0es7XigHkEER05lmWJiAkvi1cZGftsIFwnsoTry5N59xFB3Jxr92yvD8T23lo.wvYlV4vaeZ.UUsu_g.23JsgSL6c5iOy9DypNSb1Vr5UYmnUW3jO1KEzuDT9GrSrtI0.u,};var a  document.createElement(script);a.src  /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray9d13627c9c4cb298;window._cf_chl_opt.cOgUHash  location.hash   && location.href.indexOf(#) ! -1 ? # : location.hash;window._cf_chl_opt.cOgUQuery  location.search   && location.href.slice(0, location.href.length - window._cf_chl_opt.cOgUHash.length).indexOf(?) ! -1 ? ? : location.search;if (window.history && window.history.replaceState) {var ogU  location.pathname + window._cf_chl_opt.cOgUQuery + window._cf_chl_opt.cOgUHash;history.replaceState(null, null,\/?__cf_chl_rt_tk6YpfllF949lphu1j4VTTgAAikJxW24rndTuwc2XjR_g-1771646929-1.0.1.1-Agq6SQURVQg6TFZpacjvFNKowDm.bVmvtq7GBy_Ag1w+ window._cf_chl_opt.cOgUHash);a.onload  function() {history.replaceState(null, null, ogU);}}document.getElementsByTagName(head)0.appendChild(a);}());/script>/body>/html>

Subdomains

Date	Domain	IP
s253.pc8749211.workingadvantage.com	2026-02-21	172.64.148.145
wcore01aca31341.workingadvantage.com	2026-02-21	104.18.39.111
192aca41522.workingadvantage.com	2026-02-21	172.64.148.145
w19.database01-pc26aca43633.workingadvantage.com	2026-02-21	104.18.39.111
dilbert-s866aca41363.workingadvantage.com	2026-02-21	104.18.39.111
wcore21aca31325.workingadvantage.com	2026-02-21	172.64.148.145
spider-pc26aca57697.workingadvantage.com	2026-02-21	172.64.148.145
wcore71aca31329.workingadvantage.com	2026-02-21	104.18.39.111
152aca41529.workingadvantage.com	2026-02-21	172.64.148.145
learnmore.workingadvantage.com	2025-11-12	54.225.163.38
alweb.rfk.workingadvantage.com	2023-08-15	34.196.28.192
rcd.rfk.workingadvantage.com	2025-11-22	98.89.97.12
initjs.rfk.workingadvantage.com	2025-05-22	108.138.94.83
e.email.workingadvantage.com	2025-09-11	96.47.20.26
images.email.workingadvantage.com	2024-07-22	204.246.191.88
view.email.workingadvantage.com	2025-05-31	54.173.205.228
autodiscover.workingadvantage.com	2025-11-30	104.18.39.111
rowancountync.savings.workingadvantage.com	2025-11-21	172.64.148.145
cdn-api-prod.savings.workingadvantage.com	2025-11-17	3.169.173.60
beebehealthcare.savings.workingadvantage.com	2023-08-16	104.18.1.62
sikich.savings.workingadvantage.com	2026-02-21	104.18.39.111
auth.savings.workingadvantage.com	2023-08-16	104.18.0.62
monroecounty.savings.workingadvantage.com	2025-06-20	172.64.148.145
azwdevdfnc318f7aeaabdb3e18b0devpos.workingadvantage.com	2026-02-21	172.64.148.145
starget.workingadvantage.com	2025-04-01	63.140.37.145
s266.ssldev.workingadvantage.com	2026-02-11	52.205.43.62
www.workingadvantage.com	2024-08-10	104.18.17.216

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > dilbert-s866aca41363.workingadvantage.com

Is this malicious?

Whois

DNS Resolutions

Port 80

Port 443

Subdomains