Domain > api-crm.staging.saas.forwoodsafety.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2024-07-30	52.42.193.163 (ClassC)
2025-01-01	35.165.180.204 (ClassC)
2025-01-24	100.20.194.8 (ClassC)
2025-04-18	52.34.85.180 (ClassC)
2025-05-04	35.166.111.12 (ClassC)
2025-05-29	100.21.181.36 (ClassC)
2025-07-23	34.211.241.178 (ClassC)

HTTP/1.1 200 OKDate: Tue, 30 Jul 2024 19:50:49 GMTContent-Type: text/html; charsetUTF-8Content-Length: 4629Connection: keep-aliveServer: ApacheCache-Control: max-age0, must-revalidate, privateExpires:

!DOCTYPE html>html>    head>        title>ForwoodSaaS CRM API/title>                    meta charsetUTF-8>            !-- Tell the browser to be responsive to screen width -->            meta contentwidthdevice-width, initial-scale1, maximum-scale1, user-scalableno nameviewport>                                            link href/css/62b0e7e.css relstylesheet>                        !-- HTML5 Shim and Respond.js IE8 support of HTML5 elements and media queries -->            !-- WARNING: Respond.js doesnt work if you view the page via file:// -->            !--if lt IE 9>                script srchttps://oss.maxcdn.com/html5shiv/3.7.2/html5shiv.min.js>/script>                script srchttps://oss.maxcdn.com/respond/1.4.2/respond.min.js>/script>            !endif-->            /head>    body classlogin-page>        div classlogin-box>            div classlogin-logo>                a href/>ForwoodSaaS CRM API/a>            /div>                                    div classlogin-box-body>                div classlogin-box-notifications>                                                                            /div>                            div classlogin-box-body>                        p classlogin-box-msg>Sign in to start your session/p>            form action/login_check idloginForm methodPOST>                div classform-group has-feedback>                    input name_username typetext classform-control placeholderUsername or Email requiredrequired autocompleteoff value />                    span classglyphicon glyphicon-envelope form-control-feedback>/span>                /div>                div classform-group has-feedback>                    input name_password typepassword classform-control placeholderPassword requiredrequired autocompleteoff  />                    span classglyphicon glyphicon-lock form-control-feedback>/span>                /div>                div classform-group has-feedback>                    label forselect-language>Select language/label>                    select idselect-lang

Subdomains

Date	Domain	IP
iframe.saas.forwoodsafety.com	2024-02-21	34.209.158.221
id.staging.saas.forwoodsafety.com	2025-01-28	3.163.189.85
geoapi.staging.saas.forwoodsafety.com	2024-06-03	52.27.241.251
api-crm.staging.saas.forwoodsafety.com	2024-07-30	52.42.193.163
admin.staging.saas.forwoodsafety.com	2024-06-19	3.163.24.48
safetyapps.staging.saas.forwoodsafety.com	2024-03-04	204.246.191.72
company.staging.saas.forwoodsafety.com	2024-11-28	3.165.160.41
id.testing.saas.forwoodsafety.com	2024-12-21	18.238.238.40
admin.testing.saas.forwoodsafety.com	2024-07-02	204.246.191.81
apigw.testing.saas.forwoodsafety.com	2025-01-17	18.238.217.11
company.testing.saas.forwoodsafety.com	2024-07-26	3.163.24.76
crm.saas.forwoodsafety.com	2024-02-21	52.35.224.23
admin.saas.forwoodsafety.com	2024-09-17	3.163.24.31

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > api-crm.staging.saas.forwoodsafety.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains