Domain > qa.messaging.rtsclients.com

More information on this domain is in AlienVault OTX

Whois

Property	Value
NameServer	NS-1962.AWSDNS-53.CO.UK
Created	2016-02-11 23:25:11
Changed	2019-02-15 16:32:59
Registrar	GoDaddy.com, LLC

DNS Resolutions

Date	IP Address
2022-01-17	13.225.63.117 (ClassC)
2023-01-27	143.204.146.72 (ClassC)
2024-08-08	204.246.191.92 (ClassC)
2025-01-03	18.238.217.99 (ClassC)
2025-01-23	18.238.217.28 (ClassC)
2025-03-05	204.246.191.41 (ClassC)
2025-03-14	204.246.191.26 (ClassC)
2025-07-04	204.246.191.117 (ClassC)
2025-10-20	3.169.173.20 (ClassC)
2025-11-29	18.161.6.57 (ClassC)

HTTP/1.1 200 OKContent-Type: text/htmlContent-Length: 5213Connection: keep-aliveDate: Sun, 14 Jan 2024 23:10:54 GMTLast-Modified: Thu, 12 Aug 2021 06:47:51 GMTETag: c9180e8cdc1ee293e363618f87a21bc9x-a

!DOCTYPE html>html>head>    meta charsetutf-8>    title>/title>    link hrefcss/StyleSheet.css relstylesheet>    link hrefhttps://fonts.googleapis.com/css?familyRaleway:400,400i,700&displayswap relstylesheet>    script typetext/javascript srchttps://code.jquery.com/jquery-3.3.1.min.js>/script>    script srchttps://cdnjs.cloudflare.com/ajax/libs/notify/0.4.2/notify.min.js>/script>    script srcjs/jquery-loader.js>/script>    script srcjs/utils.js>/script>    script srcjs/login.js>/script>script srchttps://polyfill.io/v3/polyfill.min.js?flagsgated&callbackinitialize&featureses2015%2Ces2016%2Ces2017>/script>/head>body>    section idmainContent-noMenu>        div classloginContainer>            div classloginLogoContainer>img srcimages/rtsLogo2.png>/div>            h2>Login to the Messaging System/h2>            p>Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. /p>            div classformContainer>                label>Email/label>                input idtxtEmailLogin typetext value>            /div>            div classformContainer>                label>Password/label>                input typepassword idtxtPasswordLogin value>            /div>            div classformContainer>                label>Domain/label>                input idtxtDomain typetext value>            /div>            div classformContainer>                a hrefjavascript:void(0); idbtnLogin classbtn>Login/a>                !--a hrefmessages.html classbtn>Admin Login/a>-->            /div>            !--div>a hrefjavascript:void(0); idanchForgotPassword>Did you forget your password?/a>/div>-->            br>br>            div>Public Users: a hrefpublic/login.html>Sign In or Create an Account Here/a>/div>        /div>    /section>    div classmodal idmodResetPassword>        div classmodalContainer>            h3>Reset Password/h3>            div>                div classformContainer>                    label>span>*/span> Password/label>

Subdomains

Date	Domain	IP
uat.payments.mrgcd.rtsclients.com	2025-11-15	3.5.83.165
rf-sb-prod.rtsclients.com	2020-06-17	34.209.104.197
realmessage.rtsclients.com	2024-11-24	3.163.24.120
realfile.rtsclients.com	2024-10-12	3.165.160.56
prod.realfile.rtsclients.com	2024-08-31	3.163.24.93
api.realfile.rtsclients.com	2024-09-24	204.246.191.32
abqmuseumfoundation.realfile.rtsclients.com	2024-03-09	52.92.188.51
qa.messaging.rtsclients.com	2024-08-08	204.246.191.92
cdn.rtsclients.com	2021-02-16	13.226.14.100
nmgovcdn.rtsclients.com	2025-09-29	34.120.13.181
uat.dfa-admin.rtsclients.com	2025-04-08	3.163.24.118
services.dot.rtsclients.com	2025-09-13	99.84.66.42
nmgov.rtsclients.com	2025-09-29	34.120.13.181
nmssp.nmgov.rtsclients.com	2025-11-18	34.120.13.181
nmdoit.nmgov.rtsclients.com	2025-10-27	34.120.13.181

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > qa.messaging.rtsclients.com

Is this malicious?

Whois

DNS Resolutions

Port 80

Port 443

Subdomains