Domain > groxstream-prepord-lender-ugro.ugrocapital.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2024-08-19	104.18.28.127 (ClassC)
2024-09-16	104.18.29.127 (ClassC)
2025-04-16	104.17.11.22 (ClassC)
2025-05-16	104.17.12.22 (ClassC)

Port 80

HTTP/1.1 200 OKDate: Fri, 12 Apr 2024 12:21:35 GMTContent-Type: text/html; charsetutf-8Transfer-Encoding: chunkedConnection: keep-aliveAccess-Control-Allow-Origin: *Access-Control-Allow-Methods: GET,

!DOCTYPE html>html langen>    head>        meta charsetutf-8/>        link href/favicon.ico relicon/>        meta contentwidthdevice-width, initial-scale1 nameviewport/>        meta content#000000 nametheme-color/>        meta contentUGRO - Lead Management Systems namedescription/>        link href/logo192.png relapple-touch-icon/>        !--        manifest.json provides metadata used when your web app is installed on a        users mobile device or desktop. See https://developers.google.com/web/fundamentals/web-app-manifest/        -->        link href/manifest.json relmanifest/>        !--        Notice the use of  in the tags above.        It will be replaced with the URL of the `public` folder during the build.        Only files inside the `public` folder can be referenced from the HTML.        Unlike /favicon.ico or favicon.ico, /favicon.ico will        work correctly both with client-side routing and a non-root public URL.        Learn how to configure a non-root public URL by running `npm run build`.        -->        title>Gro-Xstream Lender/title>    script defer src/static/js/bundle.js>/script>/head>    body>        noscript>You need to enable JavaScript to run this app./noscript>        div idroot>/div>        !--        This HTML file is a template.        If you open it directly in the browser, you will see an empty page.        You can add webfonts, meta tags, or analytics to this file.        The build step will place the bundled scripts into the body> tag.        To begin the development, run `npm start` or `yarn start`.        To create a production bundle, use `npm run build` or `yarn build`.        -->    /body>    script>        if(window.top ! window.self){          top.location.href  document.location.origin+/lender/404;        }    /script>/html>

Port 443

HTTP/1.1 200 OKDate: Fri, 12 Apr 2024 12:21:35 GMTContent-Type: text/html; charsetutf-8Transfer-Encoding: chunkedConnection: keep-aliveaccess-control-allow-origin: *access-control-allow-methods: GET,

Subdomains

Date	Domain	IP
ugroplus-engine.ugrocapital.com	2024-12-26	3.6.225.77
groxstream.ugrocapital.com	2025-01-15	13.126.142.208
admin.ugrocapital.com	2024-11-02	166.62.28.119
groxstream-prepord-lender-ugro.ugrocapital.com	2024-08-19	104.18.28.127
groplus.ugrocapital.com	2024-10-05	104.18.28.127
gropluswebapp-uat.ugrocapital.com	2024-12-02	104.18.28.127
ugrodmsuat.ugrocapital.com	2025-02-19	104.18.29.127
groconnect-document.ugrocapital.com	2024-07-13	3.163.24.23
www.ugrocapital.com	2023-11-01	52.66.178.154

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > groxstream-prepord-lender-ugro.ugrocapital.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains