Domain > connect.itm21st.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2022-07-11	34.231.65.122 (ClassC)
2024-10-31	34.234.130.236 (ClassC)

HTTP/1.1 200 OKDate: Thu, 31 Oct 2024 07:37:44 GMTContent-Type: text/html; charsetutf-8Content-Length: 3136Connection: keep-aliveCache-Control: privateSet-Cookie: ASP.NET_SessionIdqnk1ijy5eeulohtu0cv0klvt; path/; secure; HttpOnly; SameSiteLaxPermissions-Policy: accelerometer(),ambient-light-sensor(),autoplay(),battery(),camera(),display-capture(),document-domain(),encrypted-media(),fullscreen(),gamepad(),geolocation(),gyroscope(),layout-animations(self),legacy-image-formats(self),magnetometer(),microphone(),midi(),oversized-images(self),payment(),picture-in-picture(),publickey-credentials-get(),speaker-selection(),sync-xhr(self),unoptimized-images(self),unsized-media(self),usb(),screen-wake-lock(),web-share(),xr-spatial-tracking()X-Content-Type-Options: nosniffX-Frame-Options: SAMEORIGINStrict-Transport-Security: max-age31536000; includeSubDomains

!DOCTYPE html>html>head>	title>Login - Twenty First Services/title>	meta nameviewport contentwidthdevice-width, initial-scale1, maximum-scale1, user-scalableno/>	link relicon href/images/WD12/icons/favicon.ico typeimage/x-icon/>	link href/Content/login.css typetext/css relstylesheet/>	!-- AWS RUM Monitoring -->	script>(function(n,i,v,r,s,c,x,z){xwindow.AwsRumClient{q:,n:n,i:i,v:v,r:r,c:c};windownfunction(c,p){x.q.push({c:c,p:p});};zdocument.createElement(script);z.asynctrue;z.srcs;document.head.insertBefore(z,document.getElementsByTagName(script)0);})(cwr,9b87203a-87e5-47f3-b52b-3b139cb3e6dc,1.0.0,us-east-1,https://client.rum.us-east-1.amazonaws.com/1.0.2/cwr.js,{sessionSampleRate:1,guestRoleArn:arn:aws:iam::020635911628:role/RUM-Monitor-us-east-1-020635911628-9042665162461-Unauth,identityPoolId:us-east-1:3a798d95-9d65-4e3a-ad38-c860a8cb3007,endpoint:https://dataplane.rum.us-east-1.amazonaws.com,telemetries:performance,errors,http,allowCookies:true,enableXRay:true});/script>/head>body>	form namectl00 methodpost action./ idctl00>input typehidden name__VIEWSTATE id__VIEWSTATE value/wEPDwUKLTg4MjI1NDY3Mg9kFgICAQ9kFgICCQ8PFgIeC05hdmlnYXRlVXJsBV5odHRwczovL2F1dGguaXRtMjFzdC5jb20vZm9yZ290LXBhc3N3b3JkP3JlZGlyZWN0X3VyaT1odHRwczovL2Nvbm5lY3QuaXRtMjFzdC5jb20vZGVmYXVsdC5hc3B4ZGRkGNWaKPEJIUJm7eJrkeRsLoMXfNAjLZcHik6xIL7XPGk />input typehidden name__VIEWSTATEGENERATOR id__VIEWSTATEGENERATOR valueCA0B0334 />input typehidden name__EVENTVALIDATION id__EVENTVALIDATION value/wEdAATnKU3fyUXsEkhVatLeKDF3ahk7CvNwnGuS0Mxk8/Y7hNyRoZqmoPk1MgNU7vWBTmjcqaj6i4HaaYTcyD0yJuxu8oYW/lWmvK5os5mEp9EZzWad8Iufjyg7XZ1jwffKoA8 />		img idLoginLogo src/Content/Images/header_itm21st_logo.png altTwenty First Services/>		h2 classtext-center>Employee Login/h2>		h5 idMessageHeader>/h5>		div idLoginForm>			div idUsernameDiv classlogin-form-property>				input nameUsernameTxt typetext idUsernameTxt placeholderUsername />				label>Please enter your Twenty First Services user name./label>			/div>			div idPasswordDiv classlogin-form-property>				input namePasswordTxt typepassword idPasswordTxt placeholderPassword autocompleteoff AutoCompleteTypeDisabled />				label>Please enter your Twenty First Services password./label>			/div>			input typesubmit nameLoginButton valueLOG IN idLoginButton />			p>                a idForgotPasswordLink hrefhttps://auth.itm21st.com/forgot-password?redirect_urihttps://connect.itm21st.com/default.aspx>Forgot your password?/a>            /p>            p>Access to this application is prohibited unless authorized. Accessing programs or data unrelated to your current role is prohibited. If unauthorized, terminate access now./p>		/div>	/form>	script typetext/javascript src/scripts/jquery-3.6.0.min.js>/script>	script typetext/javascript src/Scripts/login.js>/script>/body>/html>

Subdomains

Date	Domain	IP
insuranceiq.itm21st.com	2024-07-09	18.161.6.94
cloud-uat.itm21st.com	2024-04-12	52.207.97.129
auth-uat.itm21st.com	2024-02-22	99.84.66.15
casetrack-uat.itm21st.com	2024-09-24	3.163.24.125
insuranceiq-uat.itm21st.com	2024-07-07	204.246.191.43
trust-uat.itm21st.com	2024-07-05	3.163.24.9
connect.itm21st.com	2024-10-31	34.234.130.236
connect-client.itm21st.com	2024-02-03	3.163.24.82
servicing-dev.itm21st.com	2024-01-09	204.246.191.95
insuranceiq-dev.itm21st.com	2024-06-27	3.163.24.83
obit-reaper-dev.itm21st.com	2024-08-27	18.211.253.13
connect-client-dev.itm21st.com	2024-09-07	192.0.78.25
trust-dev.itm21st.com	2024-03-02	204.246.191.85
www.itm21st.com	2024-07-20	192.0.78.25

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > connect.itm21st.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains