Domain > c2.system.dashboard.paytheorylab.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2022-02-13	108.156.120.105 (ClassC)
2022-02-28	108.156.120.111 (ClassC)
2024-08-08	18.161.6.125 (ClassC)
2024-12-12	99.86.38.38 (ClassC)
2024-12-30	99.86.38.20 (ClassC)
2025-04-26	18.161.6.13 (ClassC)
2025-09-29	52.85.129.105 (ClassC)
2025-10-29	18.161.6.111 (ClassC)

Port 443

HTTP/1.1 200 OKContent-Type: text/htmlContent-Length: 1275Connection: keep-aliveDate: Thu, 08 Aug 2024 12:20:49 GMTLast-Modified: Tue, 06 Aug 2024 20:10:30 GMTx-amz-expiration: expiry-dateThu, 07 Aug

!doctype html>html langen>head>meta charsetutf-8/>link relicon href/favicon.ico/>meta nameviewport contentwidthdevice-width,initial-scale1/>meta nametheme-color content#000000/>meta namedescription contentBooks Portal/>meta http-equivContent-Security-Policy content/>link relapple-touch-icon href/logo192.png/>link relmanifest href/manifest.json/>style>@import url(https://use.typekit.net/azk4wlx.css);/style>title>System Dashboard/title>script srchttps://kit.fontawesome.com/61d6c4dbf4.js>/script>link relstylesheet hrefhttps://fonts.googleapis.com/css?familyInter|IBM+Plex+Mono/>link relstylesheet hrefhttps://use.typekit.net/azk4wlx.css/>script deferdefer src/static/js/main.f9729305.js>/script>link href/static/css/main.8fa399b5.css relstylesheet>/head>body>noscript>You need to enable JavaScript to run this app./noscript>div idapp>/div>script>window.fwSettings{widget_id:44000002360},function(){if(function!typeof window.FreshworksWidget){var ifunction(){i.q.push(arguments)};i.q,window.FreshworksWidgeti}}()/script>script typetext/javascript srchttps://widget.freshworks.com/widgets/44000002360.js async deferdefer>/script>/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > c2.system.dashboard.paytheorylab.com

Is this malicious?

DNS Resolutions

Port 80

Port 443