Domain > mlms.csodfed.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-08-28	3.171.76.125 (ClassC)
2025-11-01	3.169.173.126 (ClassC)

HTTP/1.1 200 OKContent-Type: text/html; charsetutf-8Content-Length: 11733Connection: keep-aliveX-Content-Type-Options: nosniffVary: Accept-Encodingvary: OriginDate: Sat, 01 Nov 2025 05:03:38 GMTCache-Control: no-cache, no-store, must-revalidatePragma: no-cacheExpires: -1Server: edge-lsX-Robots-Tag: noindexX-Frame-Options: SAMEORIGINSet-Cookie: ASP.NET_SessionIdeaqxzggl4b0nuv5z2y054yri; path/; secure; HttpOnly; SameSiteNone; SameSiteNonetrue_route: /default.aspxtrue_status: Okcorrelation_id: 31fc109a-aab8-4eba-acb0-b9fe75c1a629S-N: 1J9VP3P: CPDSP NON CUR ADM HIS OTP OUR DEL NOR IND DEM UNI TAI STA NAV COM SAM PUR DEV PSA PSDpics-label: (pics-1.1 http://www.icra.org/ratingsv02.html comment ICRAonline EN v2.0 l r (nz 1 vz 1 lz 1 oz 1 cz 1) http://www.rsac.org/ratingsv01.html l r (n 0 s 0 v 0 l 0))Permissions-Policy: geolocation()Strict-Transport-Security: max-age156768000; includeSubdomains; preloadX-Kong-Upstream-Status: 200Access-Control-Allow-Credentials: trueX-Kong-Upstream-Latency: 6X-Kong-Proxy-Latency: 1X-XSS-Protection: 1; modeblockX-Cache: Miss from cloudfrontVia: 1.1 6a31d7747628574e9fa26dd40efa100a.cloudfront.net (CloudFront)X-Amz-Cf-Pop: HIO52-P4X-Amz-Cf-Id: IqqnuZA7-9xGPjvn59q_9G511XGfbFQXQ2ew2wrSQe23K5TVheE7fQ

!DOCTYPE html>html>head>	meta http-equivContent-Type contenttext/html; charsetutf-8>    script typetext/Javascript languageJavascript srccore/scripts/pop_up_funcs.js>/script>	script languagejavascript>		if (top ! self)			top.location  self.location;	/script>	title>+ Cornerstone OnDemand +/title>        meta nameviewport contentwidthdevice-width, initial-scale1 />    meta contentJavaScript namevs_defaultClientScript />    meta http-equivContent-Type contenttext/html; charsetutf-8 />    meta contenthttp://schemas.microsoft.com/intellisense/ie5 namevs_targetSchema />    meta http-equivX-UA-Compatible contentIEEdge />    meta http-equivX-UA-Compatible contentIE8 />    link relicon hrefimages/DefaultLogin/csod-touch-icon-32x32.png sizes32x32 />    link relicon hrefimages/DefaultLogin/csod-touch-icon-192x192.png sizes192x192 />    link relapple-touch-icon-precomposed hrefimages/DefaultLogin/csod-touch-icon-180x180.png />    meta namemsapplication-TileImage contentimages/DefaultLogin/csod-touch-icon-270x270.png />    link hrefcss/login/styles.css relstylesheet/>	script src/Core/scripts/jquery/jquery-3.6.0.min.js?hsh1085546136>/script>     style typetext/css>        @media screen and (max-width : 768px) {            #main-img {                content: url(images/DefaultLogin/NEW-CustomerPortalLogin-BG-V2_768x1041.png);            }        }         @media screen and (max-width : 425px) {            #main-img {                content: url(images/DefaultLogin/NEW-CustomerPortalLogin-BG-V2_420x900.png);            }        }    /style>    /head>body idbody onloadBody_OnLoad('False','False', 'defaultForm');>        div classbanners slideshow>        div classslider-wrapper theme-default>            div idslider classnivoSlider>	                img idmain-img srcimages/DefaultLogin/NEW-CustomerPortalLogin-BG-V2.png alta person looking at a wall with notes />            /div>        /div>    /div>    div idform-wrapper>	    form nameForm1 methodpost action./ idForm1 autocompleteoff>input typehidden nameresWidth idresWidth value />input typehidden nameresHeight idresHeight value />input typehidden name__VIEWSTATE id__VIEWSTATE valueBrhWBguKE0Wts/SXGEKn6gxr10d8u2MOenI2KFIXq4K8WqXlAAT64zHfabyB8MqpfZcwLE6OMmC52+pPMLIvkvaSEP59ef4EM7JxubByN/b0HA8tV5abFrGTWi03ICJ2kF6vP4bxxIzaDO+QvNyjUfIP34dpN6wuDzUVm8I0H7Q />script src/Core/scripts/jquery/jquery-3.6.0.min.js?hsh1085546136 typetext/javascript>/script>script src/Core/scripts/footer.js typetext/javascript>/script>script src/ScriptResource.axd?duHIkleVeDJf4xS50Krz-yAnEAag5CSZmZj4zt17jSk33nhD97i5F4KCO5XwcjQ58DB5k5meemC2eZb2v8yj2wTNKm0pPABGgEBqrATIM71WVDoh5COXTXH-1WQBkEb7J_aMcasZAKs6hMbYYt-xeY48qBGcZNQ2r21TdE6aJwUw1&t5c0e0825 typetext/javascript>/script>script typetext/javascript>//!CDATAvar PageMethods  function() {PageMethods.initializeBase(this);this._timeout  0;this._userContext  null;this._succeeded  null;this._failed  null;}PageMethods.prototype  {_get_path:function() { var p  this.get_path(); if (p) return p; else return PageMethods._staticInstance.get_path();},SetCulture:function(cultureId,succeededCallback, failedCallback, userContext) {return this._invoke(this._get_path(), SetCulture,false,{cultureId:cultureId},succeededCallback,failedCallback,userContext); },GetCulture:function(succeededCallback, failedCallback, userContext) {return this._invoke(this._get_path(), GetCulture,false,{},succeededCallback,failedCallback,userContext); }}PageMethods.registerClass(PageMethods,Sys.Net.WebServiceProxy);PageMethods._staticInstance  new PageMethods();PageMethods.set_path  function(value) { PageMethods._staticInstance.set_path(value); }PageMethods.get_path  function() { return PageMethods._staticInstance.get_path(); }PageMethods.set_timeout  function(value) { PageMethods._staticInstance.set_timeout(value); }PageMethods.get_timeout  function() { return PageMethods._staticInstance.get_timeout(); }PageMethods.set_defaultUserContext  function(value) { PageMethods._staticInstance.set_defaultUserContext(value); }PageMethods.get_defaultUserContext  function() { return PageMethods._staticInstance.get_defaultUserContext(); }PageMethods.set_defaultSucceededCallback  function(value) { PageMethods._staticInstance.set_defaultSucceededCallback(value); }PageMethods.get_defaultSucceededCallback  function() { return PageMethods._staticInstance.get_defaultSucceededCallback(); }PageMethods.set_defaultFailedCallback  function(value) { PageMethods._staticInstance.set_defaultFailedCallback(value); }PageMethods.get_defaultFailedCallback  function() { return PageMethods._staticInstance.get_defaultFailedCallback(); }PageMethods.set_enableJsonp  function(value) { PageMethods._staticInstance.set_enableJsonp(value); }PageMethods.get_enableJsonp  function() { return PageMethods._staticInstance.get_enableJsonp(); }PageMethods.set_jsonpCallbackParameter  function(value) { PageMethods._staticInstance.set_jsonpCallbackParameter(value); }PageMethods.get_jsonpCallbackParameter  function() { return PageMethods._staticInstance.get_jsonpCallbackParameter(); }PageMethods.set_path(default.aspx);PageMethods.SetCulture function(cultureId,onSuccess,onFailed,userContext) {PageMethods._staticInstance.SetCulture(cultureId,onSuccess,onFailed,userContext); }PageMethods.GetCulture function(onSuccess,onFailed,userContext) {PageMethods._staticInstance.GetCulture(onSuccess,onFailed,userContext); }//>/script>input typehidden name__VIEWSTATEGENERATOR id__VIEWSTATEGENERATOR valueCA0B0334 />input typehidden name__VIEWSTATEENCRYPTED id__VIEWSTATEENCRYPTED value />            input namecurrentCulture typehidden idcurrentCulture />                                div classlogo>                    img srcimages/DefaultLogin/NEW-CSOD-logo-HRZ-RGB-350x55.png altWelcome to Cornerstone />                /div>                span classerror rolealert aria-liveassertive aria-atomictrue>                    p stylecolor:#FF0000; text-align:center; font-size: 14px; white-space: pre-line;>/p>                /span>                div classleftBlock>                    div classcorpbox>                                                    label aria-labelcorpBox forcorpBox typehidden>/label>                            input namecorpBox typetext valuemlms idcorpBox classinput txtBox-outline placeholderCorporation />                    /div>                    div classblock1>                        label aria-labelusername foruserNameBox typehidden>/label>                        input nameuserNameBox typetext iduserNameBox classinput txtBox-outline placeholderUsername aria-requiredtrue />                                                div classclear>/div>                    /div>                    div classblock2>                        label aria-labelpassword forpassWordBox typehidden>/label>                        input namepassWordBox typepassword idpassWordBox classinput txtBox-outline onblurdoBlurFName() placeholderPassword aria-requiredtrue />                                                div iddivWatermarkPass stylewidth: 98%; height: 45px; position: absolute; top: 2px; left: 3px;>                                label idlblPassword forpassWordBox classhasPlaceholder  style>Password/label>                            /div>                        div classclear>/div>                        div classbuttonWrap>                            a data-tagsubmit idsubmit classCsImageButton backBtnFocus titleLog In onmouseupblur(); rolebutton hrefjavascript:WebForm_DoPostBackWithOptions(new WebForm_PostBackOptions("submit", "", true, "", "", false, true))>span>b>Login/b>/span>/a>                        /div>                    /div>                    font idversion_info colorwhite>25.2.6.26/font>                    div classlinkBlock>                                                a hrefjavascript:window.locationForgotPasswordAuthentication.aspx?corpNamemlms idForgotPasswordLink classforgot-pwd>| Forgot Password?/a>                                                                    /div>                /div>                div classclear>/div>	    script typetext/javascript>document.getElementById(resWidth).value  window.screen.width;document.getElementById(resHeight).value  window.screen.height;/script>script typetext/javascript>//!CDATAvar htmlElem  document.body.parentNode;htmlElem.setAttribute(lang,en);if (top ! self) top.location  self.location;//>/script>/form>    /div>    script typetext/javascript languagejavascript async>        // This adds placeholder to the items listed in the jQuery .support object.        $(function () {            jQuery.support.placeholder  false;            test  document.createElement(input);            if (placeholder in test) jQuery.support.placeholder  true;        });        // This adds placeholder support to browsers that wouldnt otherwise support it.        $(function () {            if (!$.support.placeholder) {                var active  document.activeElement;                $(:text).focus(function () {                    if ($(this).attr(placeholder) !  && $(this).val()  $(this).attr(placeholder)) {                        $(this).val().removeClass(hasPlaceholder);                    }                }).blur(function () {                    if ($(this).attr(placeholder) !  && ($(this).val()   || $(this).val()  $(this).attr(placeholder))) {                        $(this).val($(this).attr(placeholder)).addClass(hasPlaceholder);                    }                });                $(:text).blur();                $(active).focus();                $(form:eq(0)).submit(function () {                    $(:text.hasPlaceholder).val();                });            }            else {                document.getElementById(divWatermarkPass).style.display  none;            }        });        $(#passWordBox).focus(function () {            document.getElementById(lblPassword).innerHTML  ;        });        function doBlurFName() {            if ($(#passWordBox).val()  ) {                document.getElementById(lblPassword).innerHTML  Password;            }            else {                document.getElementById(lblPassword).innerHTML  ;            }        };        function Body_OnLoad() {            //fix client side javascript error		};        $(document).ready(function () {			var firstFocusableElement  $(input:text:first);			firstFocusableElement.focus();			var length  firstFocusableElement.val().length * 2;			firstFocusableElement0.setSelectionRange(length, length);        });    /script>    /body>/html>

Subdomains

Date	Domain	IP
fdaoted.csodfed.com	2025-10-31	3.169.173.35
fsi.csodfed.com	2025-11-01	3.169.173.35
vadeq.csodfed.com	2025-10-31	3.169.173.126
mlms.csodfed.com	2025-11-01	3.169.173.126

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > mlms.csodfed.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains