Domain > beta.govcloud-onboarding-tool.rs.aws.dev

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2021-01-08	13.249.130.35 (ClassC)
2021-01-08	13.249.130.70 (ClassC)
2022-05-23	13.249.120.79 (ClassC)
2024-02-21	3.163.24.20 (ClassC)
2024-11-09	3.163.24.66 (ClassC)

HTTP/1.1 200 OKContent-Type: text/html; charsetutf-8Content-Length: 8704Connection: keep-aliveDate: Tue, 20 Feb 2024 21:59:30 GMTLast-Modified: Tue, 20 Feb 2024 02:27:52 GMTETag: e6f7617fa59fc36011d4c

!DOCTYPE html PUBLIC -//W3C//DTD HTML 4.01//EN https://www.w3.org/TR/html4/strict.dtd>html>head>    title>AWS GovCloud (US) Management Console - Onboard Tool/title>meta http-equivContent-Type contenttext/html; charsetUTF-8>meta nameauthor contentJose Armando Costa>link relstylesheet hrefstyle/style.css integritysha384-GysqVf/27KcU63504u6H2q0IrRyUMp+mWcA39utcCisCUr9nfhZbzm+qndd2/fHm crossoriginanonymous>/link>script srcjs/jquery-3.5.1.min.js          integritysha384-ZvpUoO/+PpLXR1lu4jmpXWu80pZlYUAfxl5NsBMWOEPSjUn/6Z/hRTt8+pR6L4N2 crossoriginanonymous>/script>script srcjs/ui.js                        integritysha384-blWgkCCTdJ+9nREFmbqB6w12ZAsQVk6qb4iAZ3fp3THHGOLvzxq65THKT5HJx77J crossoriginanonymous>/script> script srcjs/engine.js                    integritysha384-fOaaaV2UlieEZUQzisi0ykLg/f1uMriBw+Ips7mc7GzMVyzB/NZx7eGvLPQfPZfy crossoriginanonymous>/script>script srcjs/secure.js                    integritysha384-ESN2x0lVrWfhMCtamQsc3p9qnuSfCzRMXEU2N3UbaKPEDKqqR59ZcgeeMyEsWt4b crossoriginanonymous>/script>/head>body>    !- Page 1 ->div idmyPassword>/div>div  classpage idpage1>    hgroup>	div idmainNav >        img srcimg/AWS_logo_RGB.png idawsHeaderLogo altAmazon Web Services height60>        /div>        h1>AWS GovCloud (US) Management Console - Onboard Tool/h1>           /hgroup>    p>span classnumber>1/span>b>Enter your access keys/b>/p>    p>Enter your access keys below and then click b>Next/b>./br>    b>Note/b>: Your keys are processed locally by JavaScript in your browser and are not sent or stored on any server./p>    p  classerror>/p>        fieldset>    div>      label forkey>Access Key ID:* /label>      label forsecret>Secret Access Key:*/label>    /div>    div>      span>input idkey typetext>/span>      span>input idsecret typepassword>/span>      span>* Required/span>    /div>    input  idsaveasdialog typefile nwsaveascredentials.txt />    /fieldset>    div classbuttons>        button classcancel>Cancel/button>        button classnext>Next/button>    /div>/div>!- Page 2 ->div classpage idpage2>

Subdomains

Date	Domain	IP
kjd.copypasta.rs.aws.dev	2024-06-09	3.11.27.126
alpha-camearay.ui.aoe.rs.aws.dev	2024-09-05	18.161.6.24
beta.govcloud-onboarding-tool.rs.aws.dev	2024-02-21	3.163.24.20
api.beta.nettles.rs.aws.dev	2024-06-16	54.88.139.229
aperture-tools.rs.aws.dev	2024-05-27	3.217.129.159
beta.drift.rs.aws.dev	2021-09-15	13.225.229.27

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > beta.govcloud-onboarding-tool.rs.aws.dev

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains