Domain > mgmtconnect.wintellplus.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-10-19	52.37.204.51 (ClassC)
2026-01-13	44.228.163.137 (ClassC)
2026-02-24	34.212.98.165 (ClassC)

HTTP/1.1 200 OKDate: Tue, 24 Feb 2026 08:32:40 GMTContent-Type: text/html; charsetUTF-8Content-Length: 6029Connection: keep-aliveServer: ApacheContent-Security-Policy: default-src * self unsafe-inline data: gap: content: blob: mediastream:; script-src * unsafe-inline unsafe-eval; style-src * unsafe-inline; img-src * data: blob:; connect-src *; font-src * data:; frame-src * blob: data:; media-src * blob: data:; object-src * blob:; child-src * blob: gap:; form-action *; frame-ancestors *; worker-src * blob:;X-XSS-Protection: 1; modeblockx-Frame-Options: SAMEORIGINX-Content-Type-Options: nosniffStrict-Transport-Security: max-age31536000; includeSubDomainsReferrer-Policy: strict-origin-when-cross-originSet-Cookie: 09e8cb2661a2fc07f47d04a021d1e0ddaqmft8jmnl5pd4ejsc6shc2195; path/; HttpOnlySet-Cookie: int_usrZDgzODI5ZGNjZDUwNDg0MmNlYzMyNDIxZTUyOGM1Zjc0YzRhMzA5ZGRiZjczMTQwMTY2N2VkMTE1Y2I1MmU4NTpMR1NhMDk0VTNCUmN1ZE1Vd2VlZE1pZS9mZ3NDajdHdnAzclJmSC81cDNjPTpSI3dCG62bhgv%2F8HshpREN; path/Set-Cookie: secure_h5p_filestrue; path/; HttpOnlyVary: Accept-Encoding

!DOCTYPE html>	html langen-GB>	head>		meta charsetutf-8>		title>Welcome to Winston Retail Management | You must login to continue/title>		meta contentwidthdevice-width, initial-scale1 nameviewport>		link href/components/com_axs/views/login_page/css/normalize.css relstylesheet typetext/css>		link href/components/com_axs/views/login_page/css/components.css relstylesheet typetext/css>		link href/components/com_axs/views/login_page/css/login-page-1.css?v13 relstylesheet typetext/css>        script src/media/system/js/core.js?341f4f2b691a18dcdf1b308c0fee813a typetext/javascript>/script>		script src/media/plg_captcha_recaptcha/js/recaptcha.min.js?69223b1a3b3ee3e2d50524fefb27828f typetext/javascript>/script>		script srchttps://www.google.com/recaptcha/api.js?onloadJoomlaInitReCaptcha2&renderexplicit&hlen-GB typetext/javascript>/script>		script src/js/jquery-3.7.1.min.js typetext/javascript>/script>		script typetext/javascript>			! function(o, c) {				var n  c.documentElement,					t   w-mod-;				n.className + t + js, (ontouchstart in o || o.DocumentTouch && c instanceof DocumentTouch) && (n.className + t + touch)			}(window, document);		/script>        script typeapplication/json classjoomla-script-options new>            {                system.paths: {                    root: ,                    base:                 },                system.keepalive: {                    interval: 300000,                    uri: \/component\/ajax\/?formatjson                },                joomla.jtext: {                    JLIB_FORM_FIELD_INVALID: Invalid field:                 }            }        /script>        script src/media/system/js/keepalive.js?5952c62bfa0a4f4e03ece5051c5a6938 typetext/javascript>/script>        link href/images/fLDvUOqUEjVVsNouF3dcuuMzQ4ODI0MTk4MDI1Ng/graphics/New_Visuals/02_Favicon_32x32.png relshortcut icon typeimage/x-icon>		link href/images/fLDvUOqUEjVVsNouF3dcuuMzQ4ODI0MTk4MDI1Ng/graphics/New_Visuals/02_Favicon_32x32.png relapple-touch-icon>		style>			:root {				/* Tovuti Platform Default Theme */				--primary-color: #000000;				/* Tovuti Blue */				--accent-color: #ed2630;				/* Tovuti Orange */				--base-color: #eff0ea;				/* Background Base */				--login_form_text_color: #f5f2f2;				--welcome_text_color: #f3212e;			}			.tov_login-left_content {				background-image: url(/images/fLDvUOqUEjVVsNouF3dcuuMzQ4ODI0MTk4MDI1Ng/graphics/New_Visuals/05_Login_page_bacground_image_1100X700.png);				background-size: cover;				background-image: -webkit-gradient(linear, left top, left bottom, from(rgba(0, 0, 0, 0.8)), to(rgba(0, 0, 0, 0.8))), url(/images/fLDvUOqUEjVVsNouF3dcuuMzQ4ODI0MTk4MDI1Ng/graphics/New_Visuals/05_Login_page_bacground_image_1100X700.png);				background-image: linear-gradient(180deg, rgba(0, 0, 0, 0.8), rgba(0, 0, 0, 0.8)), url(/images/fLDvUOqUEjVVsNouF3dcuuMzQ4ODI0MTk4MDI1Ng/graphics/New_Visuals/05_Login_page_bacground_image_1100X700.png);							}		/style>	/head>	body>		div classtov_login-container>			div classtov_login-left>				div classtov_login-left_content>											img src/images/fLDvUOqUEjVVsNouF3dcuuMzQ4ODI0MTk4MDI1Ng/graphics/New_Visuals/01_Site_Logo_70X70.png altlogo classtov_login-logo>										div classtov_login-left-bottom-content>						h2 classtov_login-h2>/h2>						p classtov_login-p>/p>					/div>				/div>			/div>			div classtov_login-right>				main classtov_login-right_content>					div classtov_login-right-top-content>						h1 classtov_login-h1 login_form_content>Login/h1>						h1 classtov_login-h1 password_reset_content styledisplay:none;>Reset Password/h1>						h1 classtov_login-h1 registration_form_content styledisplay:none;>Register/h1>						p classtov_login-p login_form_content>/p>					/div>					div classtov_login-form-block w-form>						div classw-form-done>/div>						div classw-form-fail>/div>																								div classtov_login-horizontal-wrapper stylemargin-top: 15px;>																											/div>						div classtov_login-vertical-wrapper sso login_form_content>							div classtov_login-divider>/div>							a classtov_login-button sso w-button href/component/axs/?viewsso_config&id3>img src/components/com_axs/views/login_page/images/cognito.svg classsso_image /> Sign in with AWS Cognito/a>						/div>					/div>				/main>			/div>		/div>		script>			function getUrlVars() {				var vars  {};				var parts  window.location.href.replace(/?&+(^&+)(^&*)/gi, function(m, key, value) {					varskey  value;				});				return vars;			}			function getUrlParam(parameter, defaultvalue) {				var urlparameter  defaultvalue;				if (window.location.href.indexOf(parameter) > -1) {					urlparameter  getUrlVars()parameter;				}				return urlparameter;			}			$(#password_reset_button).click(function() {				$(.registration_form_content).hide();				$(.login_form_content).hide();				$(#login_return_button).show();				$(#register_button).show();				$(#password_reset_button).hide();				$(.password_reset_content).fadeIn(300);			});			$(#login_return_button).click(function() {				$(.registration_form_content).hide();				$(.password_reset_content).hide();				$(#login_return_button).hide();				$(#register_button).show();				$(#password_reset_button).show();				$(.login_form_content).fadeIn(300);			});			$(#register_button).click(function() {				$(.login_form_content).hide();				$(.password_reset_content).hide();				$(#register_button).hide();				$(#login_return_button).show();				$(#password_reset_button).show();				$(.registration_form_content).fadeIn(300);			});											/script>	/body>	/html>

Subdomains

Date	Domain	IP
connectstage.wintellplus.com	2025-12-24	35.165.87.72
tapps.mytools.wintellplus.com	2025-08-22	3.213.32.8
connect.wintellplus.com	2025-12-24	16.147.170.124
adiconnect.wintellplus.com	2025-10-26	52.89.140.117
mgmtconnect.wintellplus.com	2026-02-24	34.212.98.165

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > mgmtconnect.wintellplus.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains