Domain > app.bastion.tech

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-08-09	108.139.29.22 (ClassC)
2025-11-27	3.169.173.81 (ClassC)

HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Thu, 27 Nov 2025 11:36:47 GMTContent-Type: text/htmlContent-Length: 919Connection: keep-aliveX-Cache: Error from cloudfrontVia: 1.1 bb0a0a1792594c22377eddc835c4b882.cloudfront.net (CloudFront)X-Amz-Cf-Pop: HIO52-P4X-Amz-Cf-Id: Zqb93ghgun8jZ77n_UMI79DWyjA4RVtK1rsWdn7IBHHM38Z2dyYPdwX-XSS-Protection: 1; modeblockX-Frame-Options: SAMEORIGINReferrer-Policy: same-originContent-Security-Policy: default-src self; script-src self sha256-6WD/Zvqi+XT3pNQ0jyqkKOBwjaPRGtXJ+JHDaNylbe0 *.licdn.com *.linkedin-ei.com sha256-iveYT9y8qLSCTOhRboucGJouMsI/esC236SPsQFfj78 *.cloudfront.net sha256-qwHuG/K33+xuBLLCh3Sm+njMcIEj3YkO2X/xJKKRFGw *.chatwoot.com *.clarity.ms; script-src-elem self sha256-6WD/Zvqi+XT3pNQ0jyqkKOBwjaPRGtXJ+JHDaNylbe0 *.licdn.com *.linkedin-ei.com sha256-iveYT9y8qLSCTOhRboucGJouMsI/esC236SPsQFfj78 *.cloudfront.net sha256-qwHuG/K33+xuBLLCh3Sm+njMcIEj3YkO2X/xJKKRFGw *.chatwoot.com *.clarity.ms; style-src self unsafe-inline fonts.googleapis.com *.licdn.com *.cloudfront.net; font-src self *.sharepointonline.com fonts.gstatic.com; connect-src self admin-api.app.bastion.tech dns.google *.licdn.com *.linkedin-ei.com *.demdex.net *.chatwoot.com *.sentry.io *.clarity.ms compliancestack-compliancedocumentsbucket4cc6e37c-ljpblyprugzl.s3.eu-west-1.amazonaws.com cognito-idp.eu-west-1.amazonaws.com; worker-src self blob:; object-src self data: blob: compliancestack-compliancedocumentsbucket4cc6e37c-ljpblyprugzl.s3.eu-west-1.amazonaws.com; frame-src self data: blob: compliancestack-compliancedocumentsbucket4cc6e37c-ljpblyprugzl.s3.eu-west-1.amazonaws.com www.youtube.com youtube.com *.chatwoot.com; img-src self data: *.support-customers.com support-customers.com cdnjs.cloudflare.com s3.noreply.link *.linkedin.com *.licdn.com *.cloudfront.net *.asana.com *.msftauthimages.net *.microsoftonline-p.com *.slack-edge.com compliancestack-compliancedocumentsbucket4cc6e37c-ljpblyprugzl.s3.eu-west-1.amazonaws.com trustcenterstack-trustcenterappbucketdf5bbf27-ilstunqpl830.s3.eu-west-1.amazonaws.com; media-src selfX-Content-Type-Options: nosniffCache-Control: no-cachePermissions-Policy: accelerometer(), ambient-light-sensor(), autoplay(), battery(), camera(), cross-origin-isolated(), display-capture(), document-domain(), encrypted-media(), execution-while-not-rendered(), execution-while-out-of-viewport(), fullscreen(self https://www.youtube.com), geolocation(), gyroscope(), keyboard-map(), magnetometer(), microphone(), midi(), navigation-override(), payment(), picture-in-picture(self https://www.youtube.com), publickey-credentials-get(), screen-wake-lock(), usb(), web-share(), sync-xhr(), xr-spatial-tracking()X-Permitted-Cross-Domain-Policies: none

!DOCTYPE HTML PUBLIC -//W3C//DTD HTML 4.01 Transitional//EN http://www.w3.org/TR/html4/loose.dtd>HTML>HEAD>META HTTP-EQUIVContent-Type CONTENTtext/html; charsetiso-8859-1>TITLE>ERROR: The request could not be satisfied/TITLE>/HEAD>BODY>H1>403 ERROR/H1>H2>The request could not be satisfied./H2>HR noshade size1px>Request blocked.We cant connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.BR clearall>If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.BR clearall>HR noshade size1px>PRE>Generated by cloudfront (CloudFront)Request ID: Zqb93ghgun8jZ77n_UMI79DWyjA4RVtK1rsWdn7IBHHM38Z2dyYPdw/PRE>ADDRESS>/ADDRESS>/BODY>/HTML>

Port 443

HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Thu, 27 Nov 2025 11:36:47 GMTContent-Type: text/htmlContent-Length: 919Connection: keep-aliveX-Cache: Error from cloudfrontVia: 1.1 0a9acaac1641579d63bb7e6410165540.cloudfront.net (CloudFront)X-Amz-Cf-Pop: HIO52-P4X-Amz-Cf-Id: L2xLDtPcHdlwHWMy83GeZAGJG2QCSiXCOdYqc5IwfOJ4HwEpPvInRgX-XSS-Protection: 1; modeblockX-Frame-Options: SAMEORIGINReferrer-Policy: same-originContent-Security-Policy: default-src self; script-src self sha256-6WD/Zvqi+XT3pNQ0jyqkKOBwjaPRGtXJ+JHDaNylbe0 *.licdn.com *.linkedin-ei.com sha256-iveYT9y8qLSCTOhRboucGJouMsI/esC236SPsQFfj78 *.cloudfront.net sha256-qwHuG/K33+xuBLLCh3Sm+njMcIEj3YkO2X/xJKKRFGw *.chatwoot.com *.clarity.ms; script-src-elem self sha256-6WD/Zvqi+XT3pNQ0jyqkKOBwjaPRGtXJ+JHDaNylbe0 *.licdn.com *.linkedin-ei.com sha256-iveYT9y8qLSCTOhRboucGJouMsI/esC236SPsQFfj78 *.cloudfront.net sha256-qwHuG/K33+xuBLLCh3Sm+njMcIEj3YkO2X/xJKKRFGw *.chatwoot.com *.clarity.ms; style-src self unsafe-inline fonts.googleapis.com *.licdn.com *.cloudfront.net; font-src self *.sharepointonline.com fonts.gstatic.com; connect-src self admin-api.app.bastion.tech dns.google *.licdn.com *.linkedin-ei.com *.demdex.net *.chatwoot.com *.sentry.io *.clarity.ms compliancestack-compliancedocumentsbucket4cc6e37c-ljpblyprugzl.s3.eu-west-1.amazonaws.com cognito-idp.eu-west-1.amazonaws.com; worker-src self blob:; object-src self data: blob: compliancestack-compliancedocumentsbucket4cc6e37c-ljpblyprugzl.s3.eu-west-1.amazonaws.com; frame-src self data: blob: compliancestack-compliancedocumentsbucket4cc6e37c-ljpblyprugzl.s3.eu-west-1.amazonaws.com www.youtube.com youtube.com *.chatwoot.com; img-src self data: *.support-customers.com support-customers.com cdnjs.cloudflare.com s3.noreply.link *.linkedin.com *.licdn.com *.cloudfront.net *.asana.com *.msftauthimages.net *.microsoftonline-p.com *.slack-edge.com compliancestack-compliancedocumentsbucket4cc6e37c-ljpblyprugzl.s3.eu-west-1.amazonaws.com trustcenterstack-trustcenterappbucketdf5bbf27-ilstunqpl830.s3.eu-west-1.amazonaws.com; media-src selfX-Content-Type-Options: nosniffStrict-Transport-Security: max-age63072000; includeSubDomains; preloadCache-Control: no-cachePermissions-Policy: accelerometer(), ambient-light-sensor(), autoplay(), battery(), camera(), cross-origin-isolated(), display-capture(), document-domain(), encrypted-media(), execution-while-not-rendered(), execution-while-out-of-viewport(), fullscreen(self https://www.youtube.com), geolocation(), gyroscope(), keyboard-map(), magnetometer(), microphone(), midi(), navigation-override(), payment(), picture-in-picture(self https://www.youtube.com), publickey-credentials-get(), screen-wake-lock(), usb(), web-share(), sync-xhr(), xr-spatial-tracking()X-Permitted-Cross-Domain-Policies: none

!DOCTYPE HTML PUBLIC -//W3C//DTD HTML 4.01 Transitional//EN http://www.w3.org/TR/html4/loose.dtd>HTML>HEAD>META HTTP-EQUIVContent-Type CONTENTtext/html; charsetiso-8859-1>TITLE>ERROR: The request could not be satisfied/TITLE>/HEAD>BODY>H1>403 ERROR/H1>H2>The request could not be satisfied./H2>HR noshade size1px>Request blocked.We cant connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.BR clearall>If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.BR clearall>HR noshade size1px>PRE>Generated by cloudfront (CloudFront)Request ID: L2xLDtPcHdlwHWMy83GeZAGJG2QCSiXCOdYqc5IwfOJ4HwEpPvInRg/PRE>ADDRESS>/ADDRESS>/BODY>/HTML>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > app.bastion.tech

Is this malicious?

DNS Resolutions

Port 80

Port 443