Domain > admin.aflacenrollment.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2024-03-19	34.235.235.112 (ClassC)
2024-09-11	3.212.103.73 (ClassC)
2024-11-24	54.92.225.153 (ClassC)
2025-05-06	52.5.137.93 (ClassC)
2025-07-25	52.1.9.218 (ClassC)
2025-08-12	52.72.105.99 (ClassC)
2025-08-22	3.217.211.250 (ClassC)
2025-11-22	100.25.167.123 (ClassC)

HTTP/1.1 200 OKDate: Sun, 24 Nov 2024 06:29:11 GMTContent-Type: text/html; charsetutf-8Content-Length: 2351Connection: keep-aliveCache-Control: no-cache, no-storePragma: no-cacheExpires: -1Server: Mic

!DOCTYPE html>html>head>        meta charsetUTF-8>    meta http-equivX-UA-Compatible contentIEedge;chrome1 />    title>Aflac :   /title>    meta nameviewport contentwidthdevice-width, initial-scale1, maximum-scale1>    script typetext/javascript src/ruxitagentjs_ICANVfqru_10301241007103824.js data-dtconfigridRID_2418|rpid901081606|domainaflacenrollment.com|reportUrl/rb_bf49323qjp|appa2c34c0f3d07a42d|cucm973cv65|mel100000|featureHashICANVfqru|dpvc1|ssv4|lastModification1731514856422|tp500,50,0|rdnt0|uxrgce1|bp3|agentUri/ruxitagentjs_ICANVfqru_10301241007103824.js>/script>script srchttps://unpkg.com/vuelidate/dist/vuelidate.min.js>/script>    script srchttps://unpkg.com/vuelidate/dist/validators.min.js>/script>    link relstylesheet hrefhttps://store.typenetwork.com/foundry/marksimonson/fonts/proxima-nova>    link href/Assets/css/vendor.css relstylesheet>    link href/Assets/css/main.css relstylesheet>/head>body classbg-aflac>    !--wrapper start-->	div idoverlay-backdrop>/div>    main classcontainer-fluid p-0>        !--Authentication Start-->                !--Authentication End-->        !--Header starts-->                !--Header End-->        !--LeftNavigation Start-->                !--LeftNavigation End-->        div classbg-aflac main-container>                div styledisplay:none;>form action/identity/externallogin?authenticationTypesaml2&ReturnUrl%2fidentity%2fexternallogincallback%3fReturnUrl%3d%252flogin%26sc_site%3dHatch.VirtualEnrollMent.Microsite%26authenticationSource%3dDefault&sc_siteHatch.VirtualEnrollMent.Microsite idssologin methodpost>                button typesubmit>                    Log in with SAML2                /button>/form>        h4>User Name:extranetAnonymous br> Email:/h4>    /div>    script>document.getElementById(ssologin).submit();/script>        /div>            /main>    !--wrapper end-->        script src/Assets/js/env.js>/script>    script src/Assets/js/vendor.js>/script>    script src/Assets/js/main.js>/script>    script srchttps://unpkg.com/vue@3.0.0-rc.10/dist/

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > admin.aflacenrollment.com

Is this malicious?

DNS Resolutions

Port 80

Port 443