Domain > enroll.android.mdm-allie-dev.truce.cloud

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-02-27	13.224.14.42 (ClassC)
2025-03-09	13.224.14.49 (ClassC)
2025-04-26	18.161.6.33 (ClassC)
2025-05-28	18.161.6.66 (ClassC)
2025-06-11	3.175.34.51 (ClassC)
2025-06-18	3.175.34.60 (ClassC)
2025-06-29	18.161.6.67 (ClassC)
2025-09-02	18.161.6.76 (ClassC)
2025-09-25	13.224.14.78 (ClassC)

HTTP/1.1 200 OKContent-Type: text/htmlContent-Length: 5534Connection: keep-aliveDate: Thu, 27 Feb 2025 11:53:51 GMTLast-Modified: Wed, 19 Jan 2022 22:00:55 GMTETag: 050e5a6c9f1f33e8da845e41fd2c5351Acc

html>body>div idcontainer>    button idsignup>Signup/button>    button idenroll>Enroll/button>    label>Fully Managed?/label>    input idfullyManaged typecheckbox onclicksetFullyManaged()/>/div>script>    function getUrlParameter(sParam) {        let sPageURL  decodeURIComponent(window.location.search.substring(1)),            sURLVariables  sPageURL.split(&),            sParameterName,            i;        for (i  0; i  sURLVariables.length; i++) {            sParameterName  sURLVariablesi.split();            if (sParameterName0  sParam) {                return sParameterName1  undefined ? true : sParameterName1;            }        }    }    function getSessionId() {        let pattern  RegExp(SessionId.^;*),            matched  document.cookie.match(pattern),            sessionId  null;        if(matched){            sessionId  matched0.split()1;        }        return sessionId    }    function setSessionId(sessionId) {        let today  new Date(),            expire  new Date();        expire.setTime(today.getTime() + 3600000 * 24 * 7);        document.cookie  SessionId+encodeURI(sessionId) + ;expires+expire.toGMTString();    }    function authorize() {        let sessionId  getSessionId(),            options  {                mode: cors            };        if (sessionId) {            options.headers  {                SessionId: sessionId            };        }        return fetch(https://api.enroll.android.mdm-dev.truce.cloud/authorize, options)            .then((response) > {                return response.json()            })            .then((data) > {                setSessionId(data.sessionId);                if (data.shouldRedirect  true) {                    document.getElementById(container).innerHTML  `a href${data.url}>Authorize/a>`                }                return !data.shouldRedirect            })    }    function getSignupUrl() {        let organizationId  getUrlParameter(organizationId),            url  `https://api.enroll.android.mdm-dev.truce.cloud/signupUrl/${organizationId}`;

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > enroll.android.mdm-allie-dev.truce.cloud

Is this malicious?

DNS Resolutions

Port 80

Port 443