Domain > otir-trusttax-federation-cw-prod-use1-aws.tax.prod.thomsonreuters.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2021-12-16	52.21.163.144 (ClassC)
2025-02-09	52.21.249.39 (ClassC)

HTTP/1.1 200 OKDate: Sun, 09 Feb 2025 08:31:12 GMTContent-Type: text/html; charsetutf-8Content-Length: 5022Connection: keep-aliveSet-Cookie: AWSALB4heendyxqN/Y8uXSNrSy1wkqcHiVik/5b1ZBatpKIFaKPsX2HGHXSZ3/LcXG4zcE1HNVVsJKskr7QXXGcnchQyiDfNaqfQZWV7LDXRrFbqEd5wn1w6OS76YUZnHr; ExpiresSun, 16 Feb 2025 08:31:12 GMT; Path/Set-Cookie: AWSALBCORS4heendyxqN/Y8uXSNrSy1wkqcHiVik/5b1ZBatpKIFaKPsX2HGHXSZ3/LcXG4zcE1HNVVsJKskr7QXXGcnchQyiDfNaqfQZWV7LDXRrFbqEd5wn1w6OS76YUZnHr; ExpiresSun, 16 Feb 2025 08:31:12 GMT; Path/; SameSiteNone; SecureCache-Control: privateServer:

!DOCTYPE html PUBLIC -//W3C//DTD XHTML 1.0 Transitional//EN http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd>html xmlnshttp://www.w3.org/1999/xhtml>head idhedHead>title>	Default/title>link idlnkFrameCheck relStylesheet typetext/css href/Stylesheets/FrameCheck.css />link idlnkCSS relStylesheet typetext/css href/CSS.ashx?Token />/head>body>	form methodpost action./ idfrmHostedSite>input typehidden name__VIEWSTATE id__VIEWSTATE valueKeetzXWkAECpqZ4TXqxMcYLqzkdGH4RZbiHtn7rEqlAO5GX1Mrmhe3vwi99hsPbMheiDEcXpE7Loky+/7issZbS60XkfgvV7d6aA9XR8ayLl/Y6S10VwhvY/x8aU5BcKeXrFCk8z1L6PrcW0QHb1Vccx7cQcy413qqNzxVJixlwj7I+KuaQz/B4z7kAx9TKacNWwCfnlkxTpiIG4933IOwO1DQFKxZg52fvB5jb41OE />script src/ScriptResource.axd?duHIkleVeDJf4xS50Krz-yI9U2ayStq-w8-9Gmr7ZVUS26WmmBQ_B637INiEZF1csYetMMTb2AwQ7ZUy85QkNmlkcnA0c9xtZ3h0U5qEXK2hUhxPl4DTJ_9CE3xeha2nRmUjHSgxYbdvAxaVccW8MxzdkF5nvS5HGrJY9t7-fTQU1&t13798092 typetext/javascript>/script>script srcScripts/Common.js typetext/javascript>/script>script srcDefault.js typetext/javascript>/script>script typetext/javascript>//!CDATAvar PageMethods  function() {PageMethods.initializeBase(this);this._timeout  0;this._userContext  null;this._succeeded  null;this._failed  null;}PageMethods.prototype  {_get_path:function() { var p  this.get_path(); if (p) return p; else return PageMethods._staticInstance.get_path();},GetSessionTimeout:function(succeededCallback, failedCallback, userContext) {return this._invoke(this._get_path(), GetSessionTimeout,false,{},succeededCallback,failedCallback,userContext); },UpdateSession:function(succeededCallback, failedCallback, userContext) {return this._invoke(this._get_path(), UpdateSession,false,{},succeededCallback,failedCallback,userContext); },WindowClosed:function(succeededCallback, failedCallback, userContext) {return this._invoke(this._get_path(), WindowClosed,false,{},succeededCallback,failedCallback,userContext); }}PageMethods.registerClass(PageMethods,Sys.Net.WebServiceProxy);PageMethods._staticInstance  new PageMethods();PageMethods.set_path  function(value) { PageMethods._staticInstance.set_path(value); }PageMethods.get_path  function() { return PageMethods._staticInstance.get_path(); }PageMethods.set_timeout  function(value) { PageMethods._staticInstance.set_timeout(value); }PageMethods.get_timeout  function() { return PageMethods._staticInstance.get_timeout(); }PageMethods.set_defaultUserContext  function(value) { PageMethods._staticInstance.set_defaultUserContext(value); }PageMethods.get_defaultUserContext  function() { return PageMethods._staticInstance.get_defaultUserContext(); }PageMethods.set_defaultSucceededCallback  function(value) { PageMethods._staticInstance.set_defaultSucceededCallback(value); }PageMethods.get_defaultSucceededCallback  function() { return PageMethods._staticInstance.get_defaultSucceededCallback(); }PageMethods.set_defaultFailedCallback  function(value) { PageMethods._staticInstance.set_defaultFailedCallback(value); }PageMethods.get_defaultFailedCallback  function() { return PageMethods._staticInstance.get_defaultFailedCallback(); }PageMethods.set_enableJsonp  function(value) { PageMethods._staticInstance.set_enableJsonp(value); }PageMethods.get_enableJsonp  function() { return PageMethods._staticInstance.get_enableJsonp(); }PageMethods.set_jsonpCallbackParameter  function(value) { PageMethods._staticInstance.set_jsonpCallbackParameter(value); }PageMethods.get_jsonpCallbackParameter  function() { return PageMethods._staticInstance.get_jsonpCallbackParameter(); }PageMethods.set_path(default.aspx);PageMethods.GetSessionTimeout function(onSuccess,onFailed,userContext) {PageMethods._staticInstance.GetSessionTimeout(onSuccess,onFailed,userContext); }PageMethods.UpdateSession function(onSuccess,onFailed,userContext) {PageMethods._staticInstance.UpdateSession(onSuccess,onFailed,userContext); }PageMethods.WindowClosed function(onSuccess,onFailed,userContext) {PageMethods._staticInstance.WindowClosed(onSuccess,onFailed,userContext); }//>/script>input typehidden name__VIEWSTATEGENERATOR id__VIEWSTATEGENERATOR valueCA0B0334 />				div idpnlLoad>				table idHeaderTable1>tr>td>img src/Logo.ashx?Token idHeaderImage alt />/td>/tr>/table>			table idHeaderTable2>tr>td>/td>/tr>/table>			table idContentTable>tr>td>span idlblLoading classLightText>Loading.../span>/td>/tr>/table>			input nametbxToken typetext idtbxToken styledisplay: none; visibility: hidden; />			input typesubmit namebtnLoad valueLoad idbtnLoad styledisplay: none; visibility: hidden; />			br />br />		/div>					script typetext/javascript>//!CDATA$get(btnLoad).click();//>/script>/form>/body>/html>

Subdomains

Date	Domain	IP
rshelp-awsdc.tax.prod.thomsonreuters.com	2024-06-03	44.196.206.198
rsb-gosyswsvc-dc-use1-aws.tax.prod.thomsonreuters.com	2024-11-25	34.203.39.240
rsb-mobile-dc-use1-aws.tax.prod.thomsonreuters.com	2024-11-25	34.203.39.240
rsb-gosysapi-dc-use1-aws.tax.prod.thomsonreuters.com	2024-11-25	107.23.68.230
rsb-pass-thru-tester-dc-use1-aws.tax.prod.thomsonreuters.com	2024-12-25	54.87.204.31
rsb-gosystemrs-dc-use1-aws.tax.prod.thomsonreuters.com	2024-12-13	3.224.246.59
rsb-insourceexpress-dc-use1-aws.tax.prod.thomsonreuters.com	2024-12-26	52.72.38.44
oteasoftware-prod-use1-aws.tax.prod.thomsonreuters.com	2024-03-10	3.221.20.48
glm-upload-amer-prod-use1-aws.tax.prod.thomsonreuters.com	2023-08-26	34.197.187.151
glm-originapi-amer-prod-use1-aws.tax.prod.thomsonreuters.com	2023-08-26	34.197.187.151
glm-services-amer-prod-use1-aws.tax.prod.thomsonreuters.com	2023-08-26	34.197.187.151
glm-uploadservices-amer-prod-use1-aws.tax.prod.thomsonreuters.com	2023-08-26	34.197.187.151
glm-onesourcetax-amer-prod-use1-aws.tax.prod.thomsonreuters.com	2023-08-26	34.197.187.151
otir-trusttax-federation-cw-prod-use1-aws.tax.prod.thomsonreuters.com	2025-02-09	52.21.249.39
otir-trusttax-services-cw-prod-use1-aws.tax.prod.thomsonreuters.com	2025-02-03	52.55.55.68
otir-trusttax-verify-services-cw-prod-use1-aws.tax.prod.thomsonreuters.com	2025-02-03	52.20.203.12
ott-taw-cw-uat-use1-aws.tax.prod.thomsonreuters.com	2024-11-25	54.211.36.129
ott-ofx-cw-uat-use1-aws.tax.prod.thomsonreuters.com	2024-11-25	34.226.75.149
ott-insight-cw-dr-usw2-aws.tax.prod.thomsonreuters.com	2024-06-03	54.213.209.43
fnis-aws.tax.prod.thomsonreuters.com	2024-03-10	3.221.20.48
itnuw-aws.tax.prod.thomsonreuters.com	2024-08-15	52.206.244.15

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > otir-trusttax-federation-cw-prod-use1-aws.tax.prod.thomsonreuters.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains