Domain > poczta.onewriteplus.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2026-01-05	68.171.162.31 (ClassC)

HTTP/1.1 200 OKCache-Control: no-cache, no-storePragma: no-cacheContent-Type: text/html; charsetutf-8Expires: -1Server: Web ServerSet-Cookie: NEX_ASP.NET_SessionIdddzggdrdetfpc0kahonpinfy; path/; HttpOnly; SameSiteLaxNexus: G-WEBCD1Date: Mon, 05 Jan 2026 07:25:14 GMTContent-Length: 5814Set-Cookie: SageCookieEncrypt!MulPWUXNlLGQoNm+0PZQtVCzCrOWaDceHdkDAAnErh5V3YdlRRoa05wl0kVxzG3nkjgVs8K5gGtofg; path/; Httponly

!DOCTYPE html PUBLIC -//W3C//DTD XHTML 1.0 Transitional//EN http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd>html langen xml:langen xmlnshttp://www.w3.org/1999/xhtml>head>    script typetext/javascript src/SageCMS/Shared/Scripts/FrameBusting.js>/script>    script typetext/javascript> utag_data  {site_layout_type: desktop,language: en-us,platform: nexus,user_id: ,user_login_type: ,user_auth_status: not authenticated,user_reg_status: not registered,page_title: Please Select A Country | Sage North America,page_type: ecommerce page,page_name: ,page_description: ,page_template: cart page,page_form_exists: false,timestamp_validation: 10618990788} /script>meta http-equivX-UA-Compatible contentIEedge />meta charsetutf-8 />meta nameviewport contentwidthdevice-width, initial-scale1.0 />title>	Please Select A Country | Sage North America/title>link idlnkFavoriteIcon relSHORTCUT ICON />link typetext/css href/SageCMS/Shared/Stylesheets/bootstrap.css relstylesheet />link typetext/css href/na/~/media/Responsive/css/all.css relstylesheet />            script typetext/javascript src/SageCMS/Shared/Scripts/jquerymin.js>/script>    	script typetext/javascript>window.jQuery || document.write(script src/SageCMS/Shared/Scripts/jquerymin.js>\/script>)/script>        script typetext/javascript src/SageCMS/Shared/Scripts/bootstrapmin.js>/script>            script typetext/javascript src/na/~/media/Responsive/js/jquerymain.js>/script>    	        script typetext/javascript src//tags.tiqcdn.com/utag/sage/us/prod/utag.sync.js>/script>meta contenttest analytics namemsvalidate.01 />/head>body idhomepage>    script typetext/javascript>(function(a, b, c, d) {a //tags.tiqcdn.com/utag/sage/us/prod/utag.js;b  document; c  script; d  b.createElement(c); d.src  a; d.type  text/java + c;d.async  true;a  b.getElementsByTagName(c)0; a.parentNode.insertBefore(d, a);})();/script>        form methodpost action/ idform1>div classaspNetHidden>input typehidden name__VIEWSTATE id__VIEWSTATE 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 />/div>script typetext/javascript>//!CDATAfunction homeCookieRedirect() {window.location.href/us}//>/script>script src/SageCMS/Shared/Scripts/nocrawler/homeCookieRedirect_Root.js typetext/javascript>/script>script src/SageCMS/Shared/Scripts/nocrawler/homeCookieIp_Root.js typetext/javascript>/script>div classaspNetHidden>	input typehidden name__VIEWSTATEGENERATOR id__VIEWSTATEGENERATOR value25CC75EA />	input typehidden name__VIEWSTATEENCRYPTED id__VIEWSTATEENCRYPTED value />/div>                        	    	                    div idSagePageContentHeader>div classblock-intro>		section classcontent-section>			div classcontainer>				div classrows mrgTop-1>					div classcol-sm-4>/div>					/div>					div classcol-sm-4>						div classheading subheading>								img src/~/media/site/sagena/responsive/images/sage-logo-large>														/div>					/div>					div classcol-sm-4>/div>				/div>			/div>		/section>	/div>div classblock-intro>		section classcontent-section>			div classbox-shadow>/div>			div classcontainer>				div classrows mrgTop-1>										br />br />br />br />br />br />					div classcol-sm-5>						div classheading subheading>								img src/~/media/site/sagena/responsive/images/us-flag>								a href/us>p>Sage United States/p>/a>								br />br />						/div>					/div>					div classcol-sm-5 col-sm-offset-2>						div classheading subheading>								img src/~/media/site/sagena/responsive/images/ca-flag>								p>a href/ca>Sage Canada - English/a>br />							a href/ca?sc_langfr-CA>Sage Canada - Français Canadien/a>								br />br />br />br />br />br />br />br />br />br />br />br />br />br />br />br />br />br />							/p>							/div>					/div>									/div>			/div>		/section>	/div>/div>        				            	                            div styledisplay:none>Nexus: G-WEBCD1/div>    /form>/body>/html>

Subdomains

Date	Domain	IP
conagra.onewriteplus.com	2025-11-29	68.171.162.31
poczta.onewriteplus.com	2026-01-05	68.171.162.31
exchange.onewriteplus.com	2026-01-04	68.171.162.31
webmail.onewriteplus.com	2025-11-25	68.171.162.31

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > poczta.onewriteplus.com

Is this malicious?

DNS Resolutions

Port 80

Subdomains