Domain > secure2pay.ghl.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2024-11-25	47.130.69.87 (ClassC)
2025-09-19	54.179.54.221 (ClassC)
2025-09-28	18.136.109.79 (ClassC)
2026-02-21	13.251.244.24 (ClassC)

HTTP/1.1 403 ForbiddenDate: Fri, 19 Sep 2025 19:27:56 GMTContent-Type: text/htmlContent-Length: 1233Connection: keep-aliveSet-Cookie: AWSALBTGGrJLNmG7kJdnpFWen9iCLS06ayA/Z2IvH6GZMLT/8rHzm1+u693jKTOeF1

!DOCTYPE html PUBLIC -//W3C//DTD XHTML 1.0 Strict//EN http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd>html xmlnshttp://www.w3.org/1999/xhtml>head>meta http-equivContent-Type contenttext/html; charsetiso-8859-1/>title>403 - Forbidden: Access is denied./title>style typetext/css>!--body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}fieldset{padding:0 15px 10px 15px;} h1{font-size:2.4em;margin:0;color:#FFF;}h2{font-size:1.7em;margin:0;color:#CC0000;} h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} #header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:trebuchet MS, Verdana, sans-serif;color:#FFF;background-color:#555555;}#content{margin:0 0 0 2%;position:relative;}.content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}-->/style>/head>body>div idheader>h1>Server Error/h1>/div>div idcontent> div classcontent-container>fieldset>  h2>403 - Forbidden: Access is denied./h2>  h3>You do not have permission to view this directory or page using the credentials that you supplied./h3> /fieldset>/div>/div>/body>/html>

Subdomains

Date	Domain	IP
airpos.ghl.com	2025-01-09	108.138.94.25
www.ghl.com	2025-05-29	188.166.244.153
secure2pay.ghl.com	2025-09-19	54.179.54.221

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > secure2pay.ghl.com

Is this malicious?

DNS Resolutions

Port 443

Subdomains