Domain > employer.stage.secure.azblue.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2026-01-23	104.18.4.28 (ClassC)
2026-02-24	104.18.5.28 (ClassC)

HTTP/1.1 200 OKDate: Wed, 26 Feb 2025 07:08:26 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveCache-Control: public, max-age14400X-Powered-By: ASP.NETX-OneAgent-JS-Injection

!DOCTYPE html>html langen styleheight: 100%;>  head>    meta charsetutf-8/>    title>Employer Portal/title>    base href//>    meta nameviewport contentwidthdevice-width, initial-scale1/>    script typetext/javascript src/ruxitagentjs_ICANVfqru_10307250124095659.js data-dtconfigridRID_2418|rpid-535898227|domainazblue.com|reportUrl/rb_bf58495abz|appa885038e6dd4115b|cucnw5sjh1h|mel100000|featureHashICANVfqru|dpvc1|lastModification1740491374399|tp500,50,0|rdnt1|uxrgce1|agentUri/ruxitagentjs_ICANVfqru_10307250124095659.js>/script>link relicon typeimage/x-icon hreffavicon.ico/>      !-- link hrefhttps://fonts.googleapis.com/css?familyRoboto:300,400,500&displayswap relstylesheet> -->    link hrefhttps://fonts.googleapis.com/icon?familyMaterial+Icons relstylesheet>    !-- Google Tag Manager -->  script>    (function(w,d,s,l,i){      wlwl||;wl.push({        gtm.start:         new Date().getTime(),event:gtm.js      }); var f  d.getElementsByTagName(s)0,        jd.createElement(s), dl  l ! dataLayer?&l+l:;j.asynctrue;j.src        https://www.googletagmanager.com/gtm.js?id + i + dl; f.parentNode.insertBefore(j,f);    })(window,document,script,dataLayer,GTM-NQKCLP8);  /script>  !-- End Google Tag Manager -->link relstylesheet hrefstyles.css>script>NS_CSM_td384766547;NS_CSM_pd275116665;NS_CSM_u/clm10;NS_CSM_colAAAAAAUe5Za1X/Xr9dlBeCvQ4/MhjYFnzeoFj8U1z++kBwQsiLlQ7qpcn+MYDbh3w815wE8iGOuYxpwVxiStTzcjjnHY;/script>script typetext/javascript>function sendTimingInfoInit(){setTimeout(sendTimingInfo,0)}function sendTimingInfo(){var wpwindow.performance;if(wp){var c1,c2,t;c1wp.timing;if(c1){var cm{};cm.nsc1.navigationStart;if((tc1.unloadEventStart)>0)cm.ust;if((tc1.unloadEventEnd)>0)cm.uet;if((tc1.redirectStart)>0)cm.rst;if((tc1.redirectEnd)>0)cm.ret;cm.fsc1.fetchStart;cm.dlsc1.domainLookupStart;cm.dlec1.domainLookupEnd;cm.csc1.connectStart;cm.cec1.connectEnd;if((tc1.secureConnectionStart)>0)cm.scst;cm.rqsc1.requestStart;cm.rssc1.responseStart;cm.rsec1.responseEnd;cm.dlc1.domLoading;cm.dic1.domInteractive;cm.dclsc1.domContentLoadedEven

Subdomains

Date	Domain	IP
stage.secure.azblue.com	2026-01-29	204.153.155.220
employer.stage.secure.azblue.com	2026-01-23	104.18.4.28
pcmh.secure.azblue.com	2025-11-07	204.153.155.158

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > employer.stage.secure.azblue.com

Is this malicious?

DNS Resolutions

Port 80

Subdomains