Domain > eks-internal.production.returnbear.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2024-10-05	18.238.217.38 (ClassC)
2025-04-18	204.246.191.93 (ClassC)
2025-08-03	3.208.150.16 (ClassC)
2026-02-17	44.195.104.244 (ClassC)

HTTP/1.1 200 OKContent-Type: text/htmlContent-Length: 1447Connection: keep-alivex-amz-id-2: orFp4cnHR06xEnYtAWufjVnjlD4GO/sIlUZ+6388ISp7fbEIjijVqSbsjOucS6eu3VBpoGxF1dIx-amz-request-id: SJQ6Y1Z40NM1GMT

!doctype html>html langen styleheight:100%>head>meta charsetutf-8/>link relicon typeimage/svg href/favicon.svg/>meta nameviewport contentwidthdevice-width,initial-scale1/>meta nametheme-color content#000000/>meta namedescription contentReturns made easy./>meta nameui-version contentd86730767fba254d2e945596256f052fba14d149>link relapple-touch-icon href/logo192.png/>link relmanifest href/manifest.json/>title>ReturnBear/title>meta propertyog:type contentwebsite>meta propertyog:title contentReturnBear>meta propertyog:description contentReturns made easy.>meta propertyog:image content/images/returnbear-logo-purple.png>meta nametwitter:card contentsummary_large_image>meta nametwitter:title contentReturnBear>meta nametwitter:description contentReturns made easy.>meta nametwitter:image content/images/returnbear-logo-purple.png>link relpreconnect hrefhttps://fonts.googleapis.com/>link relpreconnect hrefhttps://fonts.gstatic.com crossorigin/>link hrefhttps://fonts.googleapis.com/css2?familyDM+Serif+Display&displayswap relstylesheet/>script deferdefer src/static/js/main.0f693654.js>/script>link href/static/css/main.0171e8ba.css relstylesheet>/head>body styleheight:100%>noscript>You need to enable JavaScript to run this app./noscript>div idroot>/div>/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > eks-internal.production.returnbear.com

Is this malicious?

DNS Resolutions

Port 80

Port 443