Domain > auth.proofing.ciam.c1.statefarm

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2024-09-11	108.156.152.89 (ClassC)
2024-09-12	99.84.252.105 (ClassC)
2026-02-17	3.175.34.34 (ClassC)

HTTP/1.1 200 OKContent-Type: text/htmlContent-Length: 2735Connection: keep-aliveLast-Modified: Tue, 17 Feb 2026 03:07:26 GMTx-amz-server-side-encryption: AES256Accept-Ranges: bytesServer: AmazonS3Date: Tue, 17 Feb 2026 14:17:14 GMTCache-Control: max-age0ETag: ce43de9027700644d7f73e0502186ccfX-Cache: Error from cloudfrontVia: 1.1 dd936a86bc7ee81fb9cfdade266a1eb0.cloudfront.net (CloudFront)X-Amz-Cf-Pop: HIO52-P3X-Amz-Cf-Id: Wek6gIwW1k9P36puBEZvBsCZP6lfxmnIUupDCa195gcarwjmmyUt1A

!DOCTYPE html>html langen>head>  meta charsetUTF-8 />  link relicon hrefhttps://www.statefarm.com/favicon.ico />  meta nameviewport contentwidthdevice-width, initial-scale1.0 />  link relstylesheet hrefhttps://sf-ui.demngd01.c1.statefarm/css/sf-ui.css />  script typemodule srchttps://sf-ui.demngd01.c1.statefarm/sf-app.js>/script>  script typemodule srchttps://sf-ui.demngd01.c1.statefarm/sf-banner.js>/script>  script typemodule srchttps://sf-ui.demngd01.c1.statefarm/sf-button.js>/script>  script typemodule srchttps://sf-ui.demngd01.c1.statefarm/sf-button-icon.js>/script>  script typemodule srchttps://sf-ui.demngd01.c1.statefarm/sf-checkbox.js>/script>  script typemodule srchttps://sf-ui.demngd01.c1.statefarm/sf-drawer.js>/script>  script typemodule srchttps://sf-ui.demngd01.c1.statefarm/sf-icon.js>/script>  script typemodule srchttps://sf-ui.demngd01.c1.statefarm/sf-modal.js>/script>  script typemodule srchttps://sf-ui.demngd01.c1.statefarm/sf-radio.js>/script>  script typemodule srchttps://sf-ui.demngd01.c1.statefarm/sf-radio-group.js>/script>  script typemodule srchttps://sf-ui.demngd01.c1.statefarm/sf-textfield.js>/script>  title>Log In/title>  script typemodule crossorigin src/assets/index-DdqJHiNG.js>/script>  link relmodulepreload crossorigin href/assets/vue-vendor-CWo0ddyN.js>  link relmodulepreload crossorigin href/assets/okta-vendor-B9rXWBLB.js>  link relstylesheet crossorigin href/assets/index-DIMJYoFH.css>/head>  body>    div idapp>/div>    script srchttps://ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js defer>/script>    script>      // Deel script - environment-based URL      (function() {        var deelUrl;        var hostname  window.location.hostname;                // Test/Local environments        if (hostname  localhost.test.statefarm.com ||             hostname  auth.proofing.test.statefarm.com) {          deelUrl  https://invocation.deel.c1.statefarm/deel.js?propext-dev;        }        // Production environment        else if (hostname  auth.proofing.statefarm.com) {          deelUrl  https://invocation.deel.c1.statefarm/deel.js?propext;        }                // Only load if URL is determined        if (deelUrl) {          var script  document.createElement(script);          script.src  deelUrl;          script.async  true;          script.defer  true;          script.referrerPolicy  no-referrer-when-downgrade;          document.body.appendChild(script);        }      })();    /script>  /body>/html>

Subdomains

Date	Domain	IP
smsapi.public.ciam.c1.statefarm	2025-06-07	35.164.210.224
css.public.ciam.c1.statefarm	2024-10-30	35.80.117.255
auth.proofing.ciam.c1.statefarm	2026-02-17	3.175.34.34
external.ciam.c1.statefarm	2025-09-01	44.236.158.235
logit.ciam.c1.statefarm	2025-05-30	54.203.168.27

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > auth.proofing.ciam.c1.statefarm

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains