Domain > auth.zagforward.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-08-01	104.18.43.221 (ClassC)
2026-01-31	172.64.144.35 (ClassC)

HTTP/1.1 200 OKDate: Fri, 01 Aug 2025 08:33:31 GMTContent-Type: text/html; charsetutf-8Transfer-Encoding: chunkedConnection: keep-aliveCF-RAY: 9683fdb80902962a-PDXvary: Accept-Encodingvary: Accept-Enc

!DOCTYPE html>html>head>    meta charsetutf-8 />    meta http-equivX-UA-Compatible contentIEedge>    meta nameviewport contentwidthdevice-width, initial-scale1.0 />    title>Identity Server/title>    link relicon typeimage/x-icon hrefhttps://auth.zagforward.com/favicon.ico />    link relshortcut icon typeimage/x-icon hrefhttps://auth.zagforward.com/favicon.ico />    link relstylesheet hrefhttps://auth.zagforward.com/lib/bootstrap/css/bootstrap.css />    link relstylesheet hrefhttps://auth.zagforward.com/css/site.min.css />/head>body>    div classnavbar navbar-inverse navbar-fixed-top>        div classcontainer-fluid>            div classnavbar-header>                button typebutton classnavbar-toggle collapsed data-togglecollapse data-target#bs-example-navbar-collapse-1 aria-expandedfalse>                    span classsr-only>Toggle navigation/span>                    span classicon-bar>/span>                    span classicon-bar>/span>                    span classicon-bar>/span>                /button>                a hrefhttps://auth.zagforward.com>                    span classnavbar-brand>                        img srchttps://auth.zagforward.com/icon.png classicon-banner>                        Identity Server                    /span>                /a>            /div>        /div>    /div>    div classcontainer body-content>        div classwelcome-page>    div classrow page-header>        div classcol-sm-10>            h1>                img classicon srchttps://auth.zagforward.com/icon.jpg>                Welcome to Identity Server                small>(version 7.2.3.0)/small>            /h1>        /div>    /div>    div classrow>        div classcol-sm-8>            p>                IdentityServer publishes a                a hrefhttps://auth.zagforward.com/.well-known/openid-configuration>discovery document/a>                where you can find metadata and links to all the endpoints, key material, etc.            /p>        /div>        !--div classcol-sm-8>            p>                Click a

Port 443

HTTP/1.1 200 OKDate: Fri, 01 Aug 2025 08:33:31 GMTContent-Type: text/html; charsetutf-8Transfer-Encoding: chunkedConnection: keep-aliveCF-RAY: 9683fdb919039935-PDXvary: Accept-Encodingvary: Accept-Enc

Subdomains

Date	Domain	IP
dealer-marketplace.zagforward.com	2025-09-24	104.18.43.221
auth.zagforward.com	2025-08-01	104.18.43.221
apim.zagforward.com	2025-09-29	172.64.144.35
analytics.zagforward.com	2025-09-24	172.64.144.35
carvanalytics.zagforward.com	2024-02-19	3.163.24.48
auth-partners.zagforward.com	2025-08-01	104.18.34.188
assets.zagforward.com	2023-08-16	152.195.19.97
cdnblob.fastly.zagforward.com	2025-08-22	146.75.42.202
assets.fastly.zagforward.com	2025-09-19	151.101.22.202

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > auth.zagforward.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains