Domain > messages.affinityplus.org

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2024-09-09	54.68.77.68 (ClassC)
2026-01-14	52.11.113.110 (ClassC)
2026-01-21	52.32.209.246 (ClassC)

HTTP/1.1 200 OKDate: Wed, 14 Jan 2026 08:01:45 GMTContent-Type: text/htmlContent-Length: 6055Connection: keep-aliveserver: envoylast-modified: Sun, 21 Dec 2025 05:45:21 GMTetag: 69478971-17a7content-s

meta charsetutf-8>meta http-equivContent-Type contenttext/html; charsetutf-8>meta http-equivX-UA-Compatible contentIEedge,chrome1>meta nameviewport contentwidthdevice-width,initial-scale1>title idtitleid>MainApp Eltropy/title>link relpreconnect hrefhttps://fonts.googleapis.com/icon?familyMaterial+Icons relstylesheet>link relpreconnect hrefhttps://cdn.walkme.com>link relpreload asfont typefont/woff2 hrefhttps://doerd31l9oh9k.cloudfront.net/ABC-Diatype/ABCDiatype-Bold.woff2 crossorigin>link relpreload asfont typefont/woff2 hrefhttps://doerd31l9oh9k.cloudfront.net/ABC-Diatype/ABCDiatype-BoldItalic.woff2 crossorigin>link relpreload asfont typefont/woff2 hrefhttps://doerd31l9oh9k.cloudfront.net/ABC-Diatype/ABCDiatype-Medium.woff2 crossorigin>link relpreload asfont typefont/woff2 hrefhttps://doerd31l9oh9k.cloudfront.net/ABC-Diatype/ABCDiatype-MediumItalic.woff2 crossorigin>link relpreload asfont typefont/woff2 hrefhttps://doerd31l9oh9k.cloudfront.net/ABC-Diatype/ABCDiatype-Regular.woff2 crossorigin>link relpreload asfont typefont/woff2 hrefhttps://doerd31l9oh9k.cloudfront.net/ABC-Diatype/ABCDiatype-RegularItalic.woff2 crossorigin>script typetext/javascript>//Storing Eltropy API token from redirect URL params - SSO login flow  let urlSearchParams  {};  let paramsAPIToken  ;   let paramsType    urlSearchParams  new URLSearchParams( window.top.location.search);  paramsAPIToken  urlSearchParams.get(apiToken);  paramsType  urlSearchParams.get(type);  if(paramsType && paramsType  login && paramsAPIToken && paramsAPIToken.length > 0){    localStorage.setItem(apiToken, paramsAPIToken);    sessionStorage.setItem(apiToken, paramsAPIToken);  }/script>script typetext/javascript>// Check for apiToken in localStorage, if not found, fetch from API token call.  if (!localStorage?.getItem(apiToken) || localStorage?.getItem(apiToken)  ) {    fetch(/auth/service/v1/token, {      method: GET,      headers: {        Content-Type: application/json,        X-Requested-With: XMLHttpRequest      },    })    .then(response > {      if (!respons

Subdomains

Date	Domain	IP
prd.affinityplus.org	2024-11-25	54.243.138.249
cm.prd.affinityplus.org	2024-11-24	3.93.211.214
test.timetrade.affinityplus.org	2024-11-24	34.237.127.219
image.email.affinityplus.org	2025-05-22	23.192.230.145
cm.affinityplus.org	2024-11-24	34.206.225.156
messages.affinityplus.org	2026-01-14	52.11.113.110
www.affinityplus.org	2024-07-18	44.218.191.185
apply.affinityplus.org	2026-01-01	54.211.95.233
mgmt.apply.affinityplus.org	2024-11-25	34.195.233.118
dev.apply.affinityplus.org	2024-11-24	52.45.63.2
mgmt.dev.apply.affinityplus.org	2024-11-25	54.243.206.163

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > messages.affinityplus.org

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains