Domain > fms2.ava-eks-1.eks.ava.theplatform.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-03-01	50.16.148.122 (ClassC)
2025-03-08	54.196.41.0 (ClassC)
2025-03-15	3.234.95.186 (ClassC)
2025-04-28	3.215.18.107 (ClassC)
2025-06-11	3.232.142.222 (ClassC)
2025-06-25	3.211.132.109 (ClassC)
2025-07-07	35.173.85.141 (ClassC)
2025-07-10	52.204.73.12 (ClassC)
2025-07-22	3.234.11.196 (ClassC)
2025-07-31	54.235.213.202 (ClassC)
2025-08-28	3.218.35.50 (ClassC)
2025-09-02	52.4.32.77 (ClassC)
2025-09-07	52.200.57.232 (ClassC)
2025-11-17	3.230.238.159 (ClassC)

HTTP/1.1 200 OKServer: openresty/1.15.8.3Date: Sat, 01 Mar 2025 21:17:21 GMTContent-Type: application/xhtml+xmlContent-Length: 12357Connection: keep-aliveLast-Modified: Wed, 20 May 2020 11:30:14 GMTAc

!DOCTYPE html PUBLIC -//W3C//DTD XHTML 1.0 Transitional//EN        http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd>html xmlnshttp://www.w3.org/1999/xhtml      xmlns:hhttp://java.sun.com/jsf/html      xmlns:uihttp://java.sun.com/jsf/facelets      xmlns:fhttp://java.sun.com/jsf/core      xmlns:phttp://primefaces.org/ui>body>ui:composition template/templates/template.xhtml>    ui:define namebody>        h:form>            !--a4j:poll idtokenTimeoutPoll interval5000 enabled#{!loginBean.tokenTimedOut} rendertokenTimeoutPoll, loginGrid />-->        /h:form>        h:form idformAuth prependIdfalse onsubmitdocument.getElementById(formAuth).actionwindow.location;>            h:panelGroup idregionAuth prependIdfalse >                p:panel idlp styleborder-width: 0;>                    h:panelGrid idloginGrid columns12 stylewidth: 100%                                 columnClassesauthColAccountsLabel,authColAccounts,,,,authSpacer,,,,authColUserName,authColSignOutButton>                        h:outputText valueAccounts:/>                        h:inputText idaccounts stylemin-width: 250px; binding#{authenticationBean.accountIds} onkeyupurlBuilder.buildUrl()/>                        h:outputText valueToken: styledisplay:none/>                        h:outputText idtoken styledisplay:none; font-weight: bold value#{authenticationBean.token}/>                        h:inputHidden idhiddenToken value#{authenticationBean.token} binding#{authenticationBean.hiddenToken}/>                        h:outputText valueIdle timeout: styledisplay:none/>                        h:outputText idtimeout styledisplay:none; font-weight: bold value#{authenticationBean.idleTimeout}/>                        h:outputText valueToken duration: styledisplay:none/>                        h:outputText idduration styledisplay:none; font-weight: bold value#{authenticationBean.tokenDuration}/>                        h:outputText idusername value#{authenticationBean.userNameValue}/>                        p:commandButton ajaxfalse idbtn actionListen

Port 443

HTTP/1.1 200 OKServer: openresty/1.15.8.3Date: Sat, 01 Mar 2025 21:17:22 GMTContent-Type: application/xhtml+xmlContent-Length: 12357Connection: keep-aliveLast-Modified: Wed, 20 May 2020 11:30:14 GMTAc

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > fms2.ava-eks-1.eks.ava.theplatform.com

Is this malicious?

DNS Resolutions

Port 80

Port 443