Domain > api.zerotrust.1ecorp.net

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2021-02-04	13.227.41.47 (ClassC)
2021-02-04	13.227.41.79 (ClassC)
2021-02-04	13.227.41.112 (ClassC)
2021-02-04	13.227.41.43 (ClassC)
2022-01-04	13.226.9.10 (ClassC)
2022-01-04	13.226.9.56 (ClassC)
2022-01-04	65.8.56.34 (ClassC)
2024-01-05	99.84.66.82 (ClassC)
2024-07-29	99.84.66.6 (ClassC)
2025-08-04	99.84.66.3 (ClassC)
2025-09-08	99.84.66.101 (ClassC)

HTTP/1.1 200 OKContent-Type: text/htmlContent-Length: 3773Connection: keep-alivex-amz-id-2: fo5kBkvA0Zv20Ftw1FQzcLJJDEYXkoVvaiYLSz6sxuK8yZmd0rT4jzlB9TEXC5tf9BsqqAE7rygx-amz-request-id: 9P3JQZY0JKKSJ97

html>	head>		link relstylesheet typetext/css  href/style.css />>		link relicon hreffavicon.ico typeimage/x-icon/>>		title>Zero Trust Leadtech/title>		script srchttps://apis.google.com/js/client:platform.js?onloadstart>/script>	/head>	body>	form methodget classlogin-form nameuser-login>		div classlogin-form__header>			p>Zero trust login/p>			p iddevel-label styledisplay:none>(Devel)/p>		/div>		div classlogin-form__content-bg>			div idlogin-btn classlogin-form__social_item>				div idaction-btn classlogin-form__social-link  login-form__social-link--google onclickinitClient() rolebutton aria-pressedfalse tabindex0>Google/div>			/div>			div idloading-phase>div classlds-facebook>div>/div>div>/div>div>/div>/div>/div>			div idsuccess-phase>All is ok! Good to go! Validated until: /div>			div iderror-phase>Error in validate/div>		/div>	/form>	script srchttps://accounts.google.com/gsi/client async defer>/script>		script>			if(document.location.host.includes(devel)) {				document.getElementById(devel-label).style.display  block;			}			document.getElementById(action-btn).addEventListener(keydown, e > {				if (e.key    || e.key  Enter || e.key  Spacebar) {					initClient();				}			});				function initClient() {				console.log(ZeroTrust 1.1.0 Initiated);				document.getElementById(login-btn).style.display  none;				document.getElementById(loading-phase).style.display  block;				gapi.load(client:auth2, function () {					function handleCredentialResponse(response) {							const xhr  new XMLHttpRequest();							const apiUrl  document.location.host.includes(devel) ? https://api.devel.zerotrust.1ecorp.net/v1/login/google : https://api.zerotrust.1ecorp.net/v1/login/google;							xhr.open(POST, apiUrl, true);							xhr.setRequestHeader(Content-Type, application/json);							xhr.onreadystatechange  function() {								if (this.readyState  XMLHttpRequest.DONE) {									if (this.status  200) {										document.getElementById(login-btn).style.display  none;										document.getElementById(loading-phase).style.display  none;										do

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > api.zerotrust.1ecorp.net

Is this malicious?

DNS Resolutions

Port 80

Port 443