Domain > book.staging.sothelabs.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2024-12-27	204.246.191.77 (ClassC)
2025-01-13	3.163.158.127 (ClassC)

HTTP/1.1 200 OKContent-Type: text/htmlContent-Length: 1702Connection: keep-aliveDate: Fri, 27 Dec 2024 16:18:17 GMTLast-Modified: Tue, 26 Nov 2024 08:59:12 GMTETag: e197d8fa6805ade2c33fef55f27140b6Ser

!DOCTYPE html>html langen>head>meta charsetutf-8>meta nameviewport contentwidthdevice-width,initial-scale1,maximum-scale1,user-scalable0>title>Live Bidding/title>link relstylesheet hrefhttps://use.typekit.net/dfs5lfh.css>script>function dynamiclyLoadFile(name) {  const head  document.getElementsByTagName(head)0;  const newScript  document.createElement(script);  newScript.src  window.location.origin + / + window.GITHASH + / + name;  newScript.type  text/javascript;  head.appendChild(newScript);}const urlParams  new URLSearchParams(window.location.search);const gitVersion  urlParams.get(version);if (!gitVersion) {  if (window.location.origin.includes(local.sothebys.com)) {    window.GITHASH  ;  } else {    window.GITHASH  eab0dd9eda71721017b45015247e289d5608fce2;  }  console.log(Application starting normally);} else {  window.GITHASH  gitVersion;  console.log(Application starting with hash:  + gitVersion);}fetch(/config.json)  .then(data > {    if (      data.ok &&      data.headers.get(content-type).includes(application/json)    ) {      return data.json();    } else {      alert(config.json is missing);    }  })  .then(res > {    if (res && res.tier) {      window.TIER  res && res.tier;      // If there is hash specified in the config file we use that if no version parameter is provided      if (!gitVersion && res.hash) {        window.GITHASH  res.hash;      }      dynamiclyLoadFile(runtime.js);      dynamiclyLoadFile(main.js);    } else {      alert(tier missing from config.json);    }  });/script>/head>body>div idroot>/div>/body>/html>

Subdomains

Date	Domain	IP
auth0-custom-hosted-login-page.prod.sothelabs.com	2024-06-16	3.163.24.71
clientapi.prod.sothelabs.com	2023-08-04	3.222.123.9
book.prod.sothelabs.com	2024-02-15	3.163.24.5
admin.prod.sothelabs.com	2024-09-18	3.163.24.14
subscriptions.prod.sothelabs.com	2024-07-22	3.219.92.112
fonts.prod.sothelabs.com	2024-03-23	18.161.6.3
web.staging.sothelabs.com	2023-08-25	2.19.138.213
book.staging.sothelabs.com	2024-12-27	204.246.191.77

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > book.staging.sothelabs.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains