Domain > auth.prd01.us-east-1.neo.forcepoint.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2021-10-13	143.204.166.125 (ClassC)
2021-10-13	143.204.166.122 (ClassC)
2024-09-11	204.246.191.73 (ClassC)
2024-12-23	13.224.14.20 (ClassC)
2025-01-25	13.224.14.101 (ClassC)
2025-04-02	204.246.191.123 (ClassC)
2025-04-21	13.224.14.78 (ClassC)
2025-06-21	204.246.191.36 (ClassC)
2025-07-29	204.246.191.54 (ClassC)

HTTP/1.1 200 OKContent-Type: text/htmlContent-Length: 1056Connection: keep-aliveLast-Modified: Wed, 29 May 2024 06:07:31 GMTx-amz-server-side-encryption: AES256x-amz-version-id: jKeombW.dg_27Mt_jH_J2d

!doctype html>html langen>head>meta http-equivcache-control contentno-cache, no-store, must-revalidate/>meta charsetutf-8/>link relicon href/favicon.ico/>meta nameviewport contentwidthdevice-width,initial-scale1/>meta nametheme-color content#000000/>meta namedescription contentNeo Authentication/>link relapple-touch-icon href/logo192.png/>link relmanifest href/manifest.json/>title>Neo Authentication/title>script deferdefer src/static/js/main.63f80c68.js>/script>link href/static/css/main.e4334250.css relstylesheet>/head>body>script typeapplication/javascript src/neo.config.js?dupVersion1.0.3.50.cloud_dlp_ga>/script>noscript>You need to enable JavaScript to run this app./noscript>div idroot>/div>/body>script>const releaseProps{product:Neo Authentication,version:1.0.3.50.cloud_dlp_ga};console.info(`${releaseProps.product}: version ${releaseProps.version}`);for(conste,oof Object.entries(releaseProps))localStorage.setItem(e,o)/script>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > auth.prd01.us-east-1.neo.forcepoint.com

Is this malicious?

DNS Resolutions

Port 80

Port 443