Domain > documents.test.haloinvesting.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2021-10-20	52.86.195.246 (ClassC)
2021-10-21	13.227.40.106 (ClassC)
2021-10-21	13.227.40.61 (ClassC)
2021-10-21	13.227.40.83 (ClassC)
2021-10-21	13.227.40.92 (ClassC)
2022-09-20	13.249.141.116 (ClassC)
2022-09-20	13.249.141.32 (ClassC)
2022-09-20	13.249.141.41 (ClassC)
2022-09-20	13.249.141.64 (ClassC)
2024-07-11	18.161.6.15 (ClassC)
2025-06-23	52.205.169.95 (ClassC)
2025-07-18	52.2.189.247 (ClassC)
2025-08-06	44.213.50.115 (ClassC)
2025-09-08	35.171.229.76 (ClassC)
2025-09-18	98.88.195.241 (ClassC)
2026-01-20	44.218.241.199 (ClassC)
2026-02-01	34.199.201.158 (ClassC)

HTTP/1.1 200 OKContent-Type: text/html; charsetutf-8Content-Length: 2470Connection: keep-aliveVary: Accept-EncodingServer: nginxDate: Thu, 11 Jul 2024 10:06:34 GMTCache-Control: no-cache, no-store, mu

!-- saved from url(0051)https://notes-test.haloinvesting.com/logon?next%2F -->html langen>   head>      meta http-equivContent-Type contenttext/html; charsetUTF-8>      meta nametwitter:card contentsummary>      meta nametwitter:site content@HaloInv>      link relstylesheet href/static/login/bootstrap.min.css>      link relstylesheet href/static/login/base_styles.css>      link relstylesheet href/static/login/base_layout.css>      link relstylesheet href/static/login/font-awesome.min.css>      link relshortcut icon hrefhttps://notes-test.haloinvesting.com/static/img/favicon.ico>      title>Halo Investing/title>      style typetext/css>         body.brand_bg {         background: url(/static/login/document-generation.jpg) no-repeat center center fixed;         }         body.brand_bg {         -webkit-background-size: cover;         -moz-background-size: cover;         -o-background-size: cover;         background-size: cover;         }         .alert{         padding: 8px;         }      /style>   /head>   body classbrand_bg cz-shortcut-listentrue>      div classcontainer>         div classrow>            div idlogin_form_container classcol-sm-4 col-sm-offset-4 col-xs-12 text-center stylemargin-top: 265px;>               br>               img classimg-logo src/static/login/Halo.svg altHalo>               br>               br>                              !--          p idsession_error classtext-danger> Your session has expired, please login again!/p> -->               form idlogin_form methodpost classsubmittable-form>                  input typehidden namecsrf_token valueImQwMWQ3YjAzNjFmZGNlZTczYWMwZTVmMWU5MTU5NDViMGU5ZGNhMzgi.GXFAKg.SUq5Fc7UcWhQIWWDACh_uGZYrck/>                  input typehidden namecsrf_token valueImQwMWQ3YjAzNjFmZGNlZTczYWMwZTVmMWU5MTU5NDViMGU5ZGNhMzgi.GXFAKg.SUq5Fc7UcWhQIWWDACh_uGZYrck/>                  input typetext classform-control margin-bottom nameusername placeholderEmail Address>                  input typepassword classform-control margin-bottom namepassword placeholderPassword aut

Port 443

!-- saved from url(0051)https://notes-test.haloinvesting.com/logon?next%2F -->html langen>   head>      meta http-equivContent-Type contenttext/html; charsetUTF-8>      meta nametwitter:card contentsummary>      meta nametwitter:site content@HaloInv>      link relstylesheet href/static/login/bootstrap.min.css>      link relstylesheet href/static/login/base_styles.css>      link relstylesheet href/static/login/base_layout.css>      link relstylesheet href/static/login/font-awesome.min.css>      link relshortcut icon hrefhttps://notes-test.haloinvesting.com/static/img/favicon.ico>      title>Halo Investing/title>      style typetext/css>         body.brand_bg {         background: url(/static/login/document-generation.jpg) no-repeat center center fixed;         }         body.brand_bg {         -webkit-background-size: cover;         -moz-background-size: cover;         -o-background-size: cover;         background-size: cover;         }         .alert{         padding: 8px;         }      /style>   /head>   body classbrand_bg cz-shortcut-listentrue>      div classcontainer>         div classrow>            div idlogin_form_container classcol-sm-4 col-sm-offset-4 col-xs-12 text-center stylemargin-top: 265px;>               br>               img classimg-logo src/static/login/Halo.svg altHalo>               br>               br>                              !--          p idsession_error classtext-danger> Your session has expired, please login again!/p> -->               form idlogin_form methodpost classsubmittable-form>                  input typehidden namecsrf_token valueIjNiNmZiMjI4ZjAzYzEwN2UyZmE2ZDgyMzI2YTI4ZWE2MmJmYzVlMjgi.GXFAKg.tzhd3QJUytdWKWg4PR3NxvLxqmY/>                  input typehidden namecsrf_token valueIjNiNmZiMjI4ZjAzYzEwN2UyZmE2ZDgyMzI2YTI4ZWE2MmJmYzVlMjgi.GXFAKg.tzhd3QJUytdWKWg4PR3NxvLxqmY/>                  input typetext classform-control margin-bottom nameusername placeholderEmail Address>                  input typepassword classform-control margin-bottom namepassword placeholderPassword aut

Subdomains

Date	Domain	IP
notes.stg.haloinvesting.com	2025-09-08	3.225.102.28
bmonotes.haloinvesting.com	2025-03-09	18.65.229.87
documents.test.haloinvesting.com	2024-07-11	18.161.6.15
www.haloinvesting.com	2025-09-08	199.189.224.141
allianz.haloinvesting.com	2024-09-04	3.163.24.38

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > documents.test.haloinvesting.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains