Help
RSS
API
Feed
Maltego
Contact
Domain > admin.econsent.help.pharmatrail.io
×
More information on this domain is in
AlienVault OTX
Is this malicious?
Yes
No
DNS Resolutions
Date
IP Address
2025-04-15
18.154.185.3
(
ClassC
)
2026-01-14
3.163.24.65
(
ClassC
)
Port 80
HTTP/1.1 301 Moved PermanentlyServer: CloudFrontDate: Wed, 14 Jan 2026 01:27:14 GMTContent-Type: text/htmlContent-Length: 167Connection: keep-aliveLocation: https://admin.econsent.help.pharmatrail.io/X-Cache: Redirect from cloudfrontVia: 1.1 a235f5b7b15b9c8025af96fb0081dd58.cloudfront.net (CloudFront)X-Amz-Cf-Pop: HIO52-P2Alt-Svc: h3:443; ma86400X-Amz-Cf-Id: SIsBP2LEOAFvB826fiwOr6lYeCObHbG1WpT2KO8HsiyE94yeJPi9mQ html>head>title>301 Moved Permanently/title>/head>body>center>h1>301 Moved Permanently/h1>/center>hr>center>CloudFront/center>/body>/html>
Port 443
HTTP/1.1 200 OKContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveVia: 1.1 11017c4db22106ac70e16ce75190a430.cloudfront.net (CloudFront), 1.1 eb6e5a827e45274130b33c12b0d48aaa.cloudfront.net (CloudFront)X-Amz-Cf-Pop: HIO52-P4Date: Wed, 14 Jan 2026 01:27:14 GMTCache-Control: no-storeX-Vpc-Node: 943cae0a-02bc-4af7-aa31-ed2d032dff80Strict-Transport-Security: max-age31536000; includeSubDomainsReferrer-Policy: no-referrerVary: Accept-EncodingX-Cache: Error from cloudfrontX-Amz-Cf-Pop: HIO52-P2Alt-Svc: h3:443; ma86400X-Amz-Cf-Id: 7HAPmydBh-Q_y1Lg3xLsZDpGtm2NblRKzGWaOZCQHBiCp5cjUVQN3g !DOCTYPE html>html langen> head> meta charsetUTF-8> meta nameviewport contentwidthdevice-width, initial-scale1.0> meta namerobots contentfollow, noarchive, noindex> title>Login - eConsent Help Admin/title> meta namedescription contentLogin page of eConsent Help Admin/> meta namegenerator contentScroll Viewport for Confluence Cloud> link relicon hrefdata:,> style> html { font-size: 8px; } body { background-color: #E5E5E5; font-family: Roboto, -apple-system, BlinkMacSystemFont, Segoe UI, Helvetica Neue, sans-serif; font-size: 2rem; margin: 0; padding: 0; } p { line-height: 1.4; } .login-card { background-color: #FFFFFF; border-radius: 1rem; box-shadow: 0 3px 5px rgba(9, 30, 66, 0.2), 0 0 1px rgba(9, 30, 66, 0.2); margin: 15vh auto 0 auto; max-width: 528px; overflow: hidden; width: 80%; } .login-card .login-card--header { border-bottom: 1px solid #DFE1E6; background-color: #0d284f; color: #FFFFFF; } .login-card .login-card--header h3 { font-size: 2.25rem; margin: 0; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; } .login-card .login-card--header, .login-card .login-card--content { padding: 2.5rem 2rem; } .login-card .login-card--content p { margin-bottom: 3rem; margin-top: 0; } form > * { display: block; } label { color: #5E6C84; font-size: 1.5rem; font-weight: normal; } input, button { background-color: #FFFFFF; border-radius: 0.5rem; box-sizing: border-box; height: 5rem; margin-bottom: 2rem; width: 100%; } input { border: 1px solid #DFE1E6; padding: 1rem; } button { border: 1px solid #000000; cursor: pointer; font-size: 1.5rem; font-weight: bold; transition: background-color 0.2s ease-in-out, color 0.2s ease-in-out; } button:hover { background-color: #000000; color: #FFFFFF; } #failure-message { color: #FF0000; font-size: 1.5rem; margin-top: 2rem; text-align: center; } footer { bottom: 0; left: 0; padding: 5rem 2rem; position: absolute; right: 0; z-index: -1; } .copyright { color: #5E6C84; font-size: 1.75rem; text-align: center; } .copyright a { color: #5E6C84; text-decoration: none; } .copyright a:hover { color: #5E6C84; text-decoration: underline; } .display-none { display: none; } /style> /head> body> main> div classlogin-card> div classlogin-card--header> h3>eConsent Help Admin/h3> /div> div idlogin-card classlogin-card--content display-none> p idinfo-message>Please provide a valid token to continue./p> form action/__auth/token/login methodpost> label fortoken>Token/label> input typepassword placeholderEnter access token nametoken idtoken required> button typesubmit idsubmit>LOG IN/button> /form> div styledisplay: none; idfailure-message>Login failed/div> /div> div idauto-login-card classlogin-card--content display-none> p>Please wait to be redirected/p> /div> /div> /main> footer> div classcopyright>Copyright © 2026 K15t • Powered by a hrefhttps://www.k15t.com/go/scroll-viewport-cloud-help-center target_blank relnoopener>Scroll Viewport/a> and a hrefhttps://www.atlassian.com/software/confluence target_blank relnoopener>Atlassian Confluence/a> /div> /footer> script> (function() { // the HTTP to HTTPS redirection from CloudFront is not always reliable // make sure that the login page is not used under HTTP - especially that tokens are not sent with HTTP if (location.protocol ! https:) { location.replace(https: + location.href.substring(location.protocol.length)); return; } // This returns all current query params in an array -> t123, sxyz, param3someValue function getQueryParamsParts() { const queryParamsString window.location.search; return queryParamsString.substr(queryParamsString.indexOf(?) + 1).split(&); } function getQueryVariable(variable, defaultValue) { var parts getQueryParamsParts(); for (var i 0; i parts.length; i++) { var pair partsi.split(); if (decodeURIComponent(pair0) variable) { return decodeURIComponent(pair1); } } return defaultValue; } function getQueryParamsWithoutToken() { var parts getQueryParamsParts(); if (parts.length 0) { return ; } // This will filter out the query param with the key t which holds the token var queryParamsString parts.filter(function(part) { var paramKey decodeURIComponent(part.split()0); return paramKey ! t; }).join(&); return queryParamsString ? ? + queryParamsString : ; } function getCookieValue(name) { return document.cookie.match((^|;)\\s* + name + \\s*\\s*(^;+))?.pop() || } // https call from http origin would fail (cors) - but this makes double sure that the token is not sent over insecure connection var tokenLoginEndPoint https:// + location.host + /__auth/token/login; var tokenInput document.getElementById(token); var tokenFromQueryParameters getQueryVariable(t, ).trim(); var loginInProgress false; var loginButton document.getElementById(submit); var loginCard document.getElementById(login-card); var autoLoginCard document.getElementById(auto-login-card); var stayLoggedIn false; function setLoginInProgress(state) { loginInProgress state; loginButton.disabled state; } function handleLoginFail() { loginCard.classList.remove(display-none); autoLoginCard.classList.add(display-none); if (getCookieValue(vpc-token-is-set)) { stayLoggedIn false; document.getElementById(info-message).innerText Your session has expired. To access the site please use the original link provided to you or enter a valid token; } else { document.getElementById(failure-message).style.display block; } } function tryLogin() { if (loginInProgress) { return; } setLoginInProgress(true); var ajaxReq new XMLHttpRequest(); ajaxReq.onreadystatechange function() { if (ajaxReq.readyState XMLHttpRequest.DONE) { setLoginInProgress(false); if (ajaxReq.status 200) { // If the login was successful the required cookies are now set and we can just reload with location.replace() to // get to the content. location.replace() will prevent the login page from being in the browser session history. location.replace(location.origin + location.pathname + getQueryParamsWithoutToken() + location.hash); } else { handleLoginFail(); } } }; ajaxReq.open(POST, tokenLoginEndPoint, true); ajaxReq.setRequestHeader(Content-Type, application/x-www-form-urlencoded); ajaxReq.send(token + encodeURIComponent(tokenInput.value) + &stayLoggedIn + stayLoggedIn); } loginButton.onclick function(event) { event.preventDefault(); tryLogin(); }; // Try login if the token is in the URL as a query parameter of if the vpc-token-is-set flag is set if (tokenFromQueryParameters || getCookieValue(vpc-token-is-set)) { autoLoginCard.classList.remove(display-none); tokenInput.value tokenFromQueryParameters || ; stayLoggedIn true; tryLogin(); } else { loginCard.classList.remove(display-none); } })(); /script> /body>/html>
Subdomains
Date
Domain
IP
admin.ecoa.help.pharmatrail.io
2025-08-17
99.84.66.44
admin.econsent.help.pharmatrail.io
2026-01-14
3.163.24.65
View on OTX
|
View on ThreatMiner
Please enable JavaScript to view the
comments powered by Disqus.
Data with thanks to
AlienVault OTX
,
VirusTotal
,
Malwr
and
others
. [
Sitemap
]