Domain > eva.contractwrangler.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2021-02-09	52.85.79.123 (ClassC)
2021-02-09	52.85.79.17 (ClassC)
2021-02-09	52.85.79.29 (ClassC)
2021-02-09	52.85.79.93 (ClassC)
2023-07-04	44.238.69.104 (ClassC)
2023-07-04	52.10.129.89 (ClassC)
2023-07-04	54.191.251.226 (ClassC)
2025-08-24	104.18.5.167 (ClassC)
2026-02-21	104.18.4.167 (ClassC)

HTTP/1.1 200 OKDate: Fri, 06 Dec 2024 20:00:17 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: keep-aliveX-Powered-By: ExpressCache-Control: public, max-age0Last-Modified

!doctype html>html langen>head>script>var NOWWW  Date.now();    function makeid(length) {        var result            ;        var characters        ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789;        var charactersLength  characters.length;        for ( var i  0; i  length; i++ ) {            result + characters.charAt(Math.floor(Math.random() * charactersLength));        }        return result;    }    window.DB_NAME  `${NOWWW}_${makeid(10)}`/script>meta charsetutf-8>meta nameviewport contentwidthdevice-width,initial-scale1>meta namemobile-web-app-capable contentyes>link relicon href/favicon.ico/>title>EVA - Contract Wrangler/title>link hrefhttps://fonts.googleapis.com/css?familyLato:400,700 relstylesheet>link relpreconnect hrefhttps://fonts.gstatic.com>link hrefhttps://fonts.googleapis.com/css2?familyMontserrat:ital,wght@0,400;0,700;1,500;1,600&displayswap relstylesheet>link relpreconnect hrefhttps://fonts.gstatic.com>link hrefhttps://fonts.googleapis.com/css2?familyMontserrat:ital,wght@0,400;0,700;1,500;1,600&familySource+Sans+Pro:wght@200;400;600;700&displayswap relstylesheet>link hrefhttps://cdn.jsdelivr.net/npm/bootstrap@4.5.0/dist/css/bootstrap.css relstylesheet/>link hrefhttps://cdn.jsdelivr.net/npm/@fortawesome/fontawesome-free@5.13.1/css/all.css relstylesheet>meta nameapple-mobile-web-app-title contentReact Boilerplate/>meta nameapple-mobile-web-app-capable contentyes/>meta nameapple-mobile-web-app-status-bar-style contentdefault/>meta nametheme-color content#b1624d/>link relapple-touch-icon sizes180x180 href/icon_180x180.5b97c341ee9de4d82d56a70c91e86b71.png/>link relapple-touch-icon sizes167x167 href/icon_167x167.11b44f4141f8164ec95e3dcc3fd7d4d8.png/>link relapple-touch-icon sizes152x152 href/icon_152x152.0e91f7d9e7774c1c7963a2ec86079f3d.png/>link relapple-touch-icon sizes120x120 href/icon_120x120.4a47d7236ee3f58bdb0d7be5d6f86134.png/>link relmanifest href/manifest.d9e4137469b6f4bd6c7de76aed54f491.json/>/head>body>noscript>If youre seeing this message, that means strong>JavaScript

Subdomains

Date	Domain	IP
eva.contractwrangler.com	2025-08-24	104.18.5.167
hello.contractwrangler.com	2026-01-26	104.18.4.167
cms.contractwrangler.com	2025-01-17	104.18.5.167
client.contractwrangler.com	2026-02-16	104.18.5.167
www.contractwrangler.com	2023-12-01	104.18.14.124

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > eva.contractwrangler.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains