Domain > ih-qa.ehs.dev

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-01-25	104.26.11.12 (ClassC)
2025-02-18	172.67.68.18 (ClassC)
2025-09-09	104.26.10.12 (ClassC)
2026-02-02	104.18.23.49 (ClassC)

HTTP/1.1 200 OKDate: Mon, 25 Nov 2024 20:06:56 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveaccept-ranges: byteslast-modified: Wed, 28 Aug 2024 11:43:41 GMTcf-cache-status

!DOCTYPE HTML>html langen-US>    head>        meta charsetUTF-8>        meta http-equivrefresh content5;/vIH>		script srchttps://code.jquery.com/jquery-3.7.1.slim.min.js integritysha256-kmHvs0B+OpCW5GVHUNjv9rOmY0IvSIRcf7zGUDTDQM8 crossoriginanonymous>/script>        script typetext/javascript>			function getAccelerateHostname() {				const hostname  window.location.hostname;				console.log(window.location);				console.log(hostname);				if (hostname   || hostname  localhost || hostname  ih-dev.ehs.dev) {					return hub.ehs.dev				} else if (hostname  ih-demo.ehs.com) {					return demo.ehs.com				} else if (hostname  ih-qa.ehs.dev) {					return accelerate-qa.ehs.dev				}								return accelerate.ehs.com;			}						const accelerateHostname  getAccelerateHostname();			$(function() {				if (accelerateHostname ! accelerate.ehs.com)					$(#accurl).attr(href, https:// + accelerateHostname + /authcheck?relayStatespiramid.com);			});			if (accelerateHostname  accelerate.ehs.com)				window.location.href  /vIH			else				window.location.href  https:// + accelerateHostname + /authcheck?relayStatespiramid.com        /script>        title>Page Redirection/title>    /head>    body>        !-- Note: dont tell people to `click` the link, just tell them that it is a link. -->        If you are not redirected automatically, follow this a idaccurl href/vIH>link/a>    /body>/html>

Subdomains

Date	Domain	IP
accelerate-dev1.ehs.dev	2024-11-25	104.26.11.12
ehs-dev1.ehs.dev	2024-11-25	104.26.11.12
accelerate-qa.ehs.dev	2025-03-15	104.26.10.12
ih-qa.ehs.dev	2025-01-25	104.26.11.12
api-contractorsafety-qa.ehs.dev	2026-01-13	13.58.50.141
reg.ehs.dev	2025-09-18	13.89.205.83
api.reg.ehs.dev	2024-11-25	172.67.68.18
integration.reg.ehs.dev	2025-07-31	172.67.68.18
risk.ehs.dev	2025-08-19	172.67.68.18
dev1-v5-temp.ehs.dev	2025-01-25	172.67.68.18
regmsds.ehs.dev	2024-11-25	104.26.10.12
ih-dev.ehs.dev	2025-08-21	172.67.68.18

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > ih-qa.ehs.dev

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains