Domain > sso.us-east-1.tsi-prod.tsiaws.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2023-12-12	34.198.246.129 (ClassC)
2025-04-28	3.211.150.66 (ClassC)

HTTP/1.1 200 OKDate: Mon, 28 Apr 2025 12:41:42 GMTContent-Type: text/html; charsetutf-8Content-Length: 3852Connection: keep-aliveContent-Security-Policy: font-src self; script-src self; form-action self https:; base-uri none; style-src self; frame-ancestors none; default-src none; connect-src self https://o19836.ingest.sentry.io; img-src self data: tsi-sso-prod.s3.amazonaws.com; report-uri https://sentry.io/api/1426294/security/?sentry_keyf335933410f447d1a216e5180afb23b2X-Frame-Options: DENYVary: CookieStrict-Transport-Security: max-age63072000X-Content-Type-Options: nosniffReferrer-Policy: same-originCross-Origin-Opener-Policy: same-originSet-Cookie: op_browser_state65a364b82d907a551ebd27bb2574619a635a7326ea84c7c017aeec21; Path/

!DOCTYPE html>html>    head>        title>Welcome |  Single Sign-On/title>        meta http-equivcontent-type contenttext/html; charsetUTF-8 />        meta namecreated content28th Apr 2025 08:41 />        meta nameviewport contentwidthdevice-width, initial-scale1.0>        meta namerobots contentnoindex, nofollow>        link relicon href/static/favicon.c4fd60eeb1e2.png typeimage/png>        link relstylesheet href/static/bundles/main.5620bf171e6c.css />    /head>    body>        div classcontainer>            div classcard sso-form>                div classcard-body>                    div classsp-logo>                                                    img src/static/logo-ts.e68e93c082d2.png altTempur Sealy International, Inc.>                                            /div>                                            div classd-md-flex border-top border-bottom pt-3 pb-3 mt-3 mb-3>        p classm-0>            You are not currently logged in. Please login with your work account            by clicking the button next to your employer.        /p>    /div>    div classlogin-grid>                                    p classdescr >                    strong>Tempur-Sealy International/strong>                /p>                        p classlink>                                    a                        href/login/?next%2F&methodazure-tsi                        titleSign in with Microsoft                    >                        img                            src/static/sign-in-microsoft-dark.470e1cb9d1e5.svg                            altSign in with Microsoft                        />                    /a>                            /p>                                    p classdescr >                    strong>Sleep Outfitters/strong>                /p>                        p classlink>                                    a                        href/login/?next%2F&methodazure-sleepoutfitters                        titleSign in with Microsoft                    >                        img                            src/static/sign-in-microsoft-dark.470e1cb9d1e5.svg                            altSign in with Microsoft                        />                    /a>                            /p>                                    p classdescr >                    strong>thelab/strong>                /p>                        p classlink>                                    a                        href/login/?next%2F&methodthelab-google                        titleSign in with Google                    >                        img                            src/static/sign-in-google-neutral.f849003bf32b.svg                            altSign in with Google                        />                    /a>                            /p>                                    hr />                p classdescr small>                    If none of the above apply to you, you may sign in with a local user account.                /p>                        p classlink>                                    a                        classbtn btn-light                        href/login/?next%2F&methodlocal                        titleSign in with Password                    >                        Sign in with Password                    /a>                            /p>            /div>                /div>            /div>        /div>                    script defer src/static/bundles/main.624c2547a0c3.js>/script>            /body>/html>

Subdomains

Date	Domain	IP
tsisync.us-east-1.tsi-prod.tsiaws.com	2025-01-17	44.198.129.124
sso.us-east-1.tsi-prod.tsiaws.com	2025-04-28	3.211.150.66
tsisync.svc.tsi-prod.tsiaws.com	2025-01-17	3.221.117.28
wfrsplccaapi.svc.tsi-prod.tsiaws.com	2024-10-20	54.241.219.1
metricsapi.svc.tsi-prod.tsiaws.com	2024-12-23	44.198.129.124
reviewsapi.svc.tsi-prod.tsiaws.com	2025-01-29	54.204.137.150
reviewsapi.cloudfront.tsi-prod.tsiaws.com	2025-01-17	3.163.24.21

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > sso.us-east-1.tsi-prod.tsiaws.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains