Domain > cdn.lylo.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2024-02-03	104.18.37.70 (ClassC)
2026-01-26	104.18.39.141 (ClassC)

HTTP/1.1 301 Moved PermanentlyDate: Mon, 26 Jan 2026 09:58:46 GMTContent-Type: text/htmlContent-Length: 167Connection: keep-aliveCache-Control: max-age3600Expires: Mon, 26 Jan 2026 10:58:46 GMTLocation: https://cdn.lylo.com/X-Content-Type-Options: nosniffcontent-security-policy: default-src ws: self data: blob: unsafe-inline unsafe-eval *.akamaihd.net *.akamaized.net *.amazonaws.com *.americanexpress.com *.android.com *.arcot.com *.aturahotels.com *.auth0.com *.azureedge.net *.bing.com *.bookmebob.com *.bootstrapcdn.com *.braintree-api.com *.braintreegateway.com *.braze.com *.browser-update.org *.cardinalcommerce.com *.cardinaltrusted.com *.cdn-apple.com *.cendynhub.com *.clarity.ms *.cloudflare.com *.cloudflareaccess.com *.cloudflareinsights.com *.cloudfront.net *.criteo.com *.criteo.net *.d-edgeconnect.media *.datatrans.com *.demdex.net *.doubleclick.net *.duosecurity.com *.elev.io *.event-restaurants-venues.com *.eventcinemas.com.au *.everestjs.net *.everesttech.net *.eveve.com *.evt.com *.evtstays.com *.facebook.com *.fontawesome.com *.gleam.io *.gleamjs.io *.google-analytics.com *.google.co.nz *.google.com *.google.com.au *.googleadservices.com *.googleapis.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com *.hotjar.com *.hotjar.io *.independentcollection.com.au *.instagram.com *.ivvy.com *.ivvy.com.au *.ixopay.com *.jquery.com *.jsdelivr.net *.kaptcha.com *.lylo.com *.mews-demo.com *.mews.com *.mews.li *.mintdesign.co.nz *.mycardsecure.com *.myma.ai *.ovalhotel.com.au *.paymentgateway.cloud *.paypal.com *.paypalobjects.com *.pingdom.net *.planpay.com *.priorityguestrewards.com *.qtathome.com *.qthotels.com *.quantcount.com *.quantserve.com *.resdiary.com *.rokt.com *.rsa3dsauth.co.uk *.rydges.com *.sentry-cdn.com *.sentry.io *.sg-form.com *.sharepointonline.com *.shift72.com *.smartcheckmobile.com *.sojern.com *.squarespace.com *.stripe.com *.surveymonkey.com *.tacdn.com *.tamgrt.com *.thehotelsnetwork.com *.tiktok.com *.tiktokw.us *.typekit.net *.vimeo.com *.vimeocdn.com *.weatherwidget.io *.windcave.com *.wistia.com *.wp.com *.wpo365.com *.yoast.com *.youtube.com akamaized.net amazonaws.com americanexpress.com android.com azureedge.net bam.nr-data.net bat.bing.com beacon-v2.helpscout.net bing.com bookmebob.com bootstrapcdn.com braintree-api.com braintreegateway.com braze.com browser-update.org cardinalcommerce.com cdn.jsdelivr.net cendynhub.com cloud.typography.com cloudflare.hcaptcha.com code.jquery.com connect.facebook.net criteo.com criteo.net d-edgeconnect.media datatrans.com demdex.net duosecurity.com elev.io eventcinemas.com.au everestjs.net everesttech.net eveve.com fontawesome.com fonts.gstatic.com gleam.io gleamjs.io google.com googletagmanager.com hotjar.com hotjar.io i.ytimg.com instagram.com ipapi.co ivvy.com ivvy.com.au jquery.com js-agent.newrelic.com js.appboycdn.com kaptcha.com lylo.com mews-demo.com mews.com mews.li mintdesign.co.nz mycardsecure.com myma.ai paymentgateway.cloud paypal.com planpay.com r.turn.com resdiary.com rsa3dsauth.co.uk s.adroll.com securepubads.g.doubleclick.net sentry-cdn.com sharepointonline.com shift72.com smartcheckmobile.com sojern.com static.tacdn.com stripe.com tacdn.com tamgrt.com tiktok.com typekit.net vimeo.com weatherwidget.io wistia.com wp.com wpo365.com www.aexp-static.com www.googletagservices.com yoast.com; frame-src * blob:; object-src none; img-src self https: data: blob:; upgrade-insecure-requests; report-uri https://evtgroup.report-uri.com/r/t/csp/enforceServer: cloudflareCF-RAY: 9c3f275d8a83e102-PDX

html>head>title>301 Moved Permanently/title>/head>body>center>h1>301 Moved Permanently/h1>/center>hr>center>cloudflare/center>/body>/html>

Port 443

HTTP/1.1 403 ForbiddenDate: Mon, 26 Jan 2026 09:58:47 GMTContent-Type: application/xmlTransfer-Encoding: chunkedConnection: keep-aliveCF-RAY: 9c3f275dd9c9ff13-PDXx-amz-bucket-region: ap-southeast-2x-amz-request-id: 908S6V95WVYZAK4Qx-amz-id-2: uVgFWmpZOc2vBzh1rce1Hk4dh/duglXyKPZ9Hu9d+l5ljs9/XIS1NJuuCfk+oZNo81puHIHjOk8j6dC4D7DTaJWP9SOO9BZ7cf-cache-status: DYNAMICSet-Cookie: __cf_bmIpXQk_a6zaULXIWumkrTev_IE7vxPoRAMkPPREUDLec-1769421527-1.0.1.1-5ZrKNlDki34S.IeHNJ7Q7MdaarqLWIvdfv4FZVPY0WLYoRPpBG5Zqf4iBpYXnGMmIEBPjznraKw5LzPh2WEreGa2bQw2XOtN7xnXfRnu2RM; path/; expiresMon, 26-Jan-26 10:28:47 GMT; domain.lylo.com; HttpOnly; SecureStrict-Transport-Security: max-age31536000; includeSubDomains; preloadX-Content-Type-Options: nosniffcontent-security-policy: default-src ws: self data: blob: unsafe-inline unsafe-eval *.akamaihd.net *.akamaized.net *.amazonaws.com *.americanexpress.com *.android.com *.arcot.com *.aturahotels.com *.auth0.com *.azureedge.net *.bing.com *.bookmebob.com *.bootstrapcdn.com *.braintree-api.com *.braintreegateway.com *.braze.com *.browser-update.org *.cardinalcommerce.com *.cardinaltrusted.com *.cdn-apple.com *.cendynhub.com *.clarity.ms *.cloudflare.com *.cloudflareaccess.com *.cloudflareinsights.com *.cloudfront.net *.criteo.com *.criteo.net *.d-edgeconnect.media *.datatrans.com *.demdex.net *.doubleclick.net *.duosecurity.com *.elev.io *.event-restaurants-venues.com *.eventcinemas.com.au *.everestjs.net *.everesttech.net *.eveve.com *.evt.com *.evtstays.com *.facebook.com *.fontawesome.com *.gleam.io *.gleamjs.io *.google-analytics.com *.google.co.nz *.google.com *.google.com.au *.googleadservices.com *.googleapis.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com *.hotjar.com *.hotjar.io *.independentcollection.com.au *.instagram.com *.ivvy.com *.ivvy.com.au *.ixopay.com *.jquery.com *.jsdelivr.net *.kaptcha.com *.lylo.com *.mews-demo.com *.mews.com *.mews.li *.mintdesign.co.nz *.mycardsecure.com *.myma.ai *.ovalhotel.com.au *.paymentgateway.cloud *.paypal.com *.paypalobjects.com *.pingdom.net *.planpay.com *.priorityguestrewards.com *.qtathome.com *.qthotels.com *.quantcount.com *.quantserve.com *.resdiary.com *.rokt.com *.rsa3dsauth.co.uk *.rydges.com *.sentry-cdn.com *.sentry.io *.sg-form.com *.sharepointonline.com *.shift72.com *.smartcheckmobile.com *.sojern.com *.squarespace.com *.stripe.com *.surveymonkey.com *.tacdn.com *.tamgrt.com *.thehotelsnetwork.com *.tiktok.com *.tiktokw.us *.typekit.net *.vimeo.com *.vimeocdn.com *.weatherwidget.io *.windcave.com *.wistia.com *.wp.com *.wpo365.com *.yoast.com *.youtube.com akamaized.net amazonaws.com americanexpress.com android.com azureedge.net bam.nr-data.net bat.bing.com beacon-v2.helpscout.net bing.com bookmebob.com bootstrapcdn.com braintree-api.com braintreegateway.com braze.com browser-update.org cardinalcommerce.com cdn.jsdelivr.net cendynhub.com cloud.typography.com cloudflare.hcaptcha.com code.jquery.com connect.facebook.net criteo.com criteo.net d-edgeconnect.media datatrans.com demdex.net duosecurity.com elev.io eventcinemas.com.au everestjs.net everesttech.net eveve.com fontawesome.com fonts.gstatic.com gleam.io gleamjs.io google.com googletagmanager.com hotjar.com hotjar.io i.ytimg.com instagram.com ipapi.co ivvy.com ivvy.com.au jquery.com js-agent.newrelic.com js.appboycdn.com kaptcha.com lylo.com mews-demo.com mews.com mews.li mintdesign.co.nz mycardsecure.com myma.ai paymentgateway.cloud paypal.com planpay.com r.turn.com resdiary.com rsa3dsauth.co.uk s.adroll.com securepubads.g.doubleclick.net sentry-cdn.com sharepointonline.com shift72.com smartcheckmobile.com sojern.com static.tacdn.com stripe.com tacdn.com tamgrt.com tiktok.com typekit.net vimeo.com weatherwidget.io wistia.com wp.com wpo365.com www.aexp-static.com www.googletagservices.com yoast.com; frame-src * blob:; object-src none; img-src self https: data: blob:; upgrade-insecure-requests; report-uri https://evtgroup.report-uri.com/r/t/csp/enforceServer: cloudflare

?xml version1.0 encodingUTF-8?>Error>Code>AccessDenied/Code>Message>Access Denied/Message>RequestId>908S6V95WVYZAK4Q/RequestId>HostId>uVgFWmpZOc2vBzh1rce1Hk4dh/duglXyKPZ9Hu9d+l5ljs9/XIS1NJuuCfk+oZNo81puHIHjOk8j6dC4D7DTaJWP9SOO9BZ7/HostId>/Error>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > cdn.lylo.com

Is this malicious?

DNS Resolutions

Port 80

Port 443