Domain > phoenix.hitachivantage.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2023-07-20	18.220.72.254 (ClassC)
2023-07-20	3.21.188.133 (ClassC)
2023-07-20	18.188.8.248 (ClassC)
2025-01-06	18.223.224.111 (ClassC)
2025-03-05	18.223.86.4 (ClassC)
2025-04-26	18.220.30.60 (ClassC)
2025-05-07	18.118.232.93 (ClassC)
2025-06-11	3.134.25.37 (ClassC)
2025-08-23	3.23.45.172 (ClassC)
2025-09-11	3.137.3.110 (ClassC)
2025-09-29	52.14.194.33 (ClassC)
2025-12-27	3.23.219.251 (ClassC)
2026-01-09	18.218.212.192 (ClassC)

HTTP/1.1 200 OKDate: Thu, 26 Dec 2024 17:37:33 GMTContent-Type: text/html; charsetutf-8Content-Length: 2170Connection: keep-aliveX-Powered-By: ExpressAccess-Control-Allow-Origin: *Access-Control-Allow

!DOCTYPE html>html langen>head>  meta charsetutf-8 />  link relicon href/favicon-lumada.png />  meta nameviewport contentwidthdevice-width, initial-scale1 />  meta nametheme-color content#000000 />  meta namedescription contentVantage />  link relapple-touch-icon href/favicon-lumada.png />  !--      manifest.json provides metadata used when your web app is installed on a      users mobile device or desktop. See https://developers.google.com/web/fundamentals/web-app-manifest/    -->  link relmanifest href/manifest.json />  link relpreload hrefassets/fonts/Barlow-Bold.ttf asfont typefont/ttf crossoriginanonymous />  link relpreload hrefassets/fonts/Barlow-Medium.ttf asfont typefont/ttf crossoriginanonymous />  link relpreload hrefassets/fonts/Barlow-Regular.ttf asfont typefont/ttf crossoriginanonymous />  link relpreload hrefassets/fonts/Barlow-SemiBold.ttf asfont typefont/ttf crossoriginanonymous />  !--      Notice the use of  in the tags above.      It will be replaced with the URL of the `public` folder during the build.      Only files inside the `public` folder can be referenced from the HTML.      Unlike /favicon.ico or favicon.ico, /favicon.ico will      work correctly both with client-side routing and a non-root public URL.      Learn how to configure a non-root public URL by running `npm run build`.    -->        title>Lumada/title>script defer src/static/js/bundle.js>/script>/head>body>  noscript>You need to enable JavaScript to run this app./noscript>  div idroot>/div>  div idlayer-menu-root>/div>  div idportalWrapper>/div>  !--      This HTML file is a template.      If you open it directly in the browser, you will see an empty page.      You can add webfonts, meta tags, or analytics to this file.      The build step will place the bundled scripts into the body> tag.      To begin the development, run `npm start` or `yarn start`.      To create a production bundle, use `npm run build` or `yarn build`.    -->/body>/html>

Subdomains

Date	Domain	IP
itc.hitachivantage.com	2025-01-01	3.18.94.191
avangrid.hitachivantage.com	2024-07-19	3.136.224.93
epmprd.hitachivantage.com	2024-06-03	3.131.247.222
staging.hitachivantage.com	2024-06-10	18.191.49.141
saesa-api.hitachivantage.com	2025-03-23	18.188.97.188
itc-api.hitachivantage.com	2024-12-26	3.131.58.107
avangrid-api.hitachivantage.com	2024-07-19	3.141.115.160
epmprd-api.hitachivantage.com	2024-12-26	3.14.209.231
hvm-dev-development-api.hitachivantage.com	2024-11-24	18.158.47.152
phoenix-api.hitachivantage.com	2024-12-26	18.189.123.231
production-keycloak.hitachivantage.com	2024-07-19	3.130.92.233
enedis.hitachivantage.com	2025-06-27	3.21.181.166
phoenix.hitachivantage.com	2025-01-06	18.223.224.111

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > phoenix.hitachivantage.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains