Domain > maplecitysavings.coreshare.insidefsi.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-02-28	23.205.249.157 (ClassC)
2025-09-28	23.216.147.196 (ClassC)

HTTP/1.1 200 OKCache-Control: max-age0,no-cache,no-store,must-revalidatePragma: no-cacheContent-Type: text/html; charsetutf-8Expires: 9/28/2025 3:24:30 AMX-FRAME-OPTIONS: SAMEORIGINX-XSS-Protection: 1; modeblockX-Content-Type-Options: nosniffContent-Security-Policy: default-src self;      script-src self unsafe-inline unsafe-eval blob: data: *.cookielaw.org *.google-analytics.com *.googletagmanager.com *.google.com *.googleadservices.com *.jquery.com *.googleapis.com;     connect-src self file: data: blob: filesystem: *.cookielaw.org *.google.com *.pdftron.com;      img-src self unsafe-inline blob: data: *.cookielaw.org *.google.com *.google-analytics.com *.googleadservices.com *.googletagmanager.com;      style-src self unsafe-inline *.cookielaw.org *.googleapis.com *.googleapis.com  *.google.com;     child-src self unsafe-inline  *.google.com;      font-src self unsafe-inline blob: data:;     media-src self unsafe-inline blob: data: self; object-src self unsafe-inline blob:; frame-src self unsafe-inline blob: data:; frame-ancestors self blob: data:Content-Length: 13586Date: Sun, 28 Sep 2025 08:24:30 GMTConnection: keep-aliveSet-Cookie: ASP.NET_SessionId53h0f5jri1g31raa1g2hffm1; path/; secure; HttpOnly; SameSiteLaxStrict-Transport-Security: max-age31536000 ; includeSubDomains

!DOCTYPE html>html xmlnshttp://www.w3.org/1999/xhtml>head>meta nameviewport contentwidthdevice-width, initial-scale1.0 />title>	Login/title>link href/css/styles.css?12345678 typetext/css relstylesheet />link href/css/da-login.css?12345678 relstylesheet typetext/css />    style>        /*@media{            html{max-width:1280px;}        }*/    /style>    !-- OneTrust Cookies Consent Notice start for da.coreshare.insidefsi.com -->    script srchttps://cdn.cookielaw.org/scripttemplates/otSDKStub.js typetext/javascript charsetUTF-8 data-domain-script1fd11e1c-d9d5-47c1-8dfa-2a4800b82759-test>/script>    script typetext/javascript>        function OptanonWrapper() { }/script>    !-- OneTrust Cookies Consent Notice end for da.coreshare.insidefsi.com -->    script typetext/javascript>        var isNS  (navigator.appName  Netscape) ? 1 : 0;        var EnableRightClick  0;        if (isNS)            document.captureEvents(Event.MOUSEDOWN || Event.MOUSEUP);        function mischandler() {            if (EnableRightClick  1) { return true; }            else { return false; }        }        function mousehandler(e) {            if (EnableRightClick  1) { return true; }            var myevent  (isNS) ? e : event;            var eventbutton  (isNS) ? myevent.which : myevent.button;            if ((eventbutton  2) || (eventbutton  3)) return false;        }        function keyhandler(e) {            var myevent  (isNS) ? e : window.event;            if (myevent.keyCode  96)                EnableRightClick  1;            return;        }        document.oncontextmenu  mischandler;        document.onkeypress  keyhandler;        document.onmousedown  mousehandler;        document.onmouseup  mousehandler;    /script>    script typetext/javascript>        /*var strurl  new String(window.parent.location);        var strdomain  window.location.host + /;            var lead_slashes  strurl.indexOf(//);        var domain_start  lead_slashes + 2;        var without_resource  strurl.substr(domain_start, strurl.length);            var strtemp  strurl.substr(0, domain_start);                    if (without_resource ! strdomain)        {            //alert(without_resource +  + strdomain);            window.location.replace(strtemp + strdomain);        }*/    /script>    script typetext/javascript>        function getQueryVariable(variable) {            var query  window.location.search.substring(1);            var vars  query.split(&);            for (var i  0; i  vars.length; i++) {                var pair  varsi.split();                if (pair0  variable) {                    return pair1;                }            }        }    /script>    script typetext/javascript>        var strurl  new String(window.parent.location);        var QueryString  getQueryVariable(LogonThruEmail);        var strdomain  window.location.host + /;        var lead_slashes  strurl.indexOf(//);        var domain_start  lead_slashes + 2;        var without_resource  strurl.substr(domain_start, strurl.length);        var strtemp  strurl.substr(0, domain_start);        if (QueryString  A) {        }        else {            if (without_resource ! strdomain) {                //window.location.replace(strtemp + strdomain);            }        }    /script>    style typetext/css>        .version {            font-family: Arial, Helvetica, sans-serif;            font-size: 11px;            color: #950000;        }    /style>/head>body>    div idtopblackstripe>        span idlblTop classtopblackstripeText>This is a private area for Director Access users only./span>    /div>    !-- end #topblackstripe -->        !-- XXXXXXXXXXXXXXXXXXXXXXXX Warning Container  XXXXXXXXXXXXXXXX -->        div idloginMiddleSectionN>        img src/images2/core_dir_logo.gif border0 width179 height75 classloginLogoFloatLeft />        span classversion>5.26.0/span>        img idimgLogoImageName classloginLogoFloatRightN src/client_logos/maplecitysavings-logo.gif height75 width179 border0 />    /div>    !-- end #loginMiddleSection -->    div classclearBoth>/div>    !-- end .clearBoth -->    div idinContainerN classrow>        div>            !-- XXXXXXXXXXXXXXXXXXXXXXXX Left Column  XXXXXXXXXXXXXXXX -->            div classloginColumnLeftN>                h2>Warning:/h2>                span idlblLoginPageText>table cellSpacing0 cellPadding0 border0>TR>TD styleheight: 14px>FONT faceArial color#800000 size2>B>This is a private area for Director Access users only./B>/FONT>/TD>/TR>TR>TD>FONT faceArial color#800000 size2>WARNING: This system is for the use of authorized users only. The information contained herein is proprietary to FIS and its clients and may contain trade secrets. Access to this system is subject to the policies and procedures of FIS. Unauthorized attempts to defeat or circumvent security features, to use the Site for other than its intended purposes, to deny service to authorized users, to access, alter, obtain, damage or destroy information, or otherwise to interfere with the Site or its operation are prohibited. Evidence of such acts may be disclosed to law enforcement authorities and result in criminal prosecution under applicable criminal laws. LOG OFF IMMEDIATELY if you do not agree to the conditions stated in this warning./FONT>/TD>/TR>/table>/span>            /div>            !-- end .loginColumnLeft -->            !-- XXXXXXXXXXXXXXXXXXXXXXXX Middle Shadow  XXXXXXXXXXXXXXXX -->            div classloginShadowMiddleN>/div>            !-- end .loginShadowMiddle -->            !-- XXXXXXXXXXXXXXXXXXXXXXXX Right Column  XXXXXXXXXXXXXXXX -->            form nameLogin methodpost action./ idLogin>input typehidden name__VIEWSTATE id__VIEWSTATE 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 />input typehidden name__VIEWSTATEGENERATOR id__VIEWSTATEGENERATOR valueC2EE9ABB />input typehidden name__VIEWSTATEENCRYPTED id__VIEWSTATEENCRYPTED value />input typehidden name__EVENTVALIDATION id__EVENTVALIDATION valueTif3FNKQXmpynZNtf7ATF3Bgg26dvcILuMKU0SJLprULF5YFNuppIHiSMnW50HSOSK1E7P8X2sCYj8JpIYBTr/YKQHgiA59N6FmsY/3BF3h9GF21vo94DdKRqMOIKRNSI8KhEdIIPQ1CMPWNS+LnpGeojBPZ1RXkjPXtF488gWYBYoRe+obXrgDxtnjK1pYx37ei4z9obcZzXs19VN1gTu5L6eN+7Er3hmpHRyq+zxsPpNO4FiX9Xxb3KjRzAeZfIZXu/BIMxPR+Sma7FvVzTgwSZLaa7e1nVCAesruj+WWSPv0B86jcHXPxZDrU2JV+ />                div classloginColumnRightN>                    div classloginLogoContainer>/div>                    !-- end .loginLogoContainer -->                    div classclearBoth>/div>                    !-- end .clearBoth -->                    div classclearBoth>/div>                    !-- end .clearBoth -->                    div>                                                span idlblPageError classFormError styledisplay:inline-block;>/span>                    /div>                    div classloginBeigeBoxN>                        h2>user login/h2>                        h4>                                                                                      span idlblUserID>User ID/span>/h4>                        input nametxtUserID typetext maxlength20 idtxtUserID tabindex1 classloginFieldsStyle autocompleteoff onkeypressjavascript:var eventInstance  window.event ? event : event; var unicode  eventInstance.charCode ? eventInstance.charCode : eventInstance.keyCode; if(unicode13){document.getElementById('btnLogin').click();return false} />                        h4>                                                         span idlblPassword>Password/span>                        /h4>                        input nametxtPassword typepassword maxlength20 idtxtPassword tabindex2 classloginFieldsStyle oncopyreturn false; onpastereturn false; oncutreturn false; autocompleteoff onkeypressjavascript:var eventInstance  window.event ? event : event; var unicode  eventInstance.charCode ? eventInstance.charCode : eventInstance.keyCode; if(unicode13){document.getElementById('btnLogin').click();return false} />                        div classclearBoth>/div>                        !-- end .clearBoth -->                                                h3>THIS NEXT QUESTION WILL CHANGE EACH TIME YOU LOG IN./h3>                        div classclearBoth>/div>                        !-- end .clearBoth -->                        h4>                                                          span idlblQuestion>What is the name of your best friend from childhood?/span>/h4>                        input nametxtAnswer typepassword maxlength25 idtxtAnswer tabindex3 classloginFieldsStyle autocompleteoff />                                                div classclearBoth>/div>                        !-- end .clearBoth -->                        input typeimage namebtnLogin idbtnLogin tabindex3 classFormText srcbuttons/button_login.gif onclickjavascript:WebForm_DoPostBackWithOptions(new WebForm_PostBackOptions("btnLogin", "", true, "", "", false, false)) border0 />                                                   a idbtnForgotPassword tabindex4 classFormTextLink hrefjavascript:__doPostBack('btnForgotPassword','')>Forgot Password/a>                        div classclearBoth>/div>                        !-- end .clearBoth -->                        div>                            input namehidClientUTCOffset typehidden idhidClientUTCOffset />                            input namehidClientOnDST typehidden idhidClientOnDST />                            input namehidClientUseDST typehidden idhidClientUseDST />                            input namehidRedirectUrl typehidden idhidRedirectUrl />                            span idlblIpAddr>font size2>/font>/span>                        /div>                    /div>                    !-- end .loginBeigeBox -->                /div>                !-- end .loginColumnRight -->            /form>        /div>    /div>    !-- end #inContainer -->/body>/html>

Subdomains

Date	Domain	IP
bogota.coreshare.insidefsi.com	2024-10-02	23.46.17.11
thedimebank.coreshare.insidefsi.com	2025-04-19	23.46.228.174
americanmetrobank.coreshare.insidefsi.com	2025-01-19	23.46.228.174
cogentbank.coreshare.insidefsi.com	2024-10-02	23.55.167.33
firstmetro.coreshare.insidefsi.com	2024-02-21	23.46.17.11
maplecitysavings.coreshare.insidefsi.com	2025-09-28	23.216.147.196
difxs.coreshare.insidefsi.com	2024-07-21	23.46.17.16
citizensbt.coreshare.insidefsi.com	2024-07-10	104.70.127.22
anz.coreshare.insidefsi.com	2024-12-02	23.54.19.17

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > maplecitysavings.coreshare.insidefsi.com

Is this malicious?

DNS Resolutions

Port 443

Subdomains