Domain > console.armorcode.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-12-04	18.238.49.76 (ClassC)
2026-01-10	3.169.173.77 (ClassC)

HTTP/1.1 200 OKContent-Type: text/htmlContent-Length: 2885Connection: keep-aliveLast-Modified: Fri, 09 Jan 2026 09:57:09 GMTX-Amz-Server-Side-Encryption: AES256Accept-Ranges: bytesServer: AmazonS3Date: Sat, 10 Jan 2026 21:31:36 GMTEtag: 8958724309be2fd1c1e2d50f2c21ca98Via: 1.1 38789cdd14ddea5c4c609cb0e6656396.cloudfront.net (CloudFront)Cache-Control: no-cacheContent-Security-Policy: default-src self; script-src app.armorcode.com unsafe-inline unsafe-eval self nonce-ebfa3c0d9d94512070ab6699c282940f nonce-c81de55bbb5f08d4020858407838166b https://widget-mediator.zopim.com https://cdn.pendo.io https://api.smooch.io https://pendo-static-6033049910312960.storage.googleapis.com https://content.insights.armorcode.com https://n2.mouseflow.com https://app.pendo.io https://pendo-io-static.storage.googleapis.com https://cdn.vitally.io https://static.zdassets.com https://api.eu-1.smooch.io https://data.insights.armorcode.com https://cdn.mouseflow.com https://resources.usersnap.com https://widget.usersnap.com https://gist.github.com https://ssl.google-analytics.com https://api.usersnap.com https://www.googletagmanager.com  https://www.google-analytics.com https://cdn.usersnap.com; style-src  app.armorcode.com self unsafe-inline https://app.pendo.io https://content.insights.armorcode.com https://pendo-static-6033049910312960.storage.googleapis.com https://github.githubassets.com  https://use.typekit.net https://p.typekit.net https://fonts.googleapis.com; font-src self https://use.typekit.net https://fonts.gstatic.com; connect-src self https://*.armorcode.com https://support.armorcode.com https://integration-api.securecodewarrior.com https://app.pendo.io https://data.insights.armorcode.com https://content.insights.armorcode.com https://pendo-static-6033049910312960.storage.googleapis.com wss://widget-mediator.zopim.com https://n2.mouseflow.com https://api.vitally.io https://ekr.zdassets.com https://*.zendesk.com https://zendesk-eu.my.sentry.io ws://api.smooch.io https://s3.eu-central-1.amazonaws.com/upload.usersnap.com https://widget.usersnap.com https://armorcode-app-reports.s3.us-west-2.amazonaws.com https://armorcode-prod-saml-metadata.s3.us-west-2.amazonaws.com https://armorcode-app-assets-reports.s3.us-west-2.amazonaws.com https://armorcode-app-documents.s3.us-west-2.amazonaws.com   https://www.google-analytics.com https://streaming.split.io https://sdk.split.io https://auth.split.io https://events.split.io https://api.usersnap.com ; img-src  app.armorcode.com self blob: data: https://www.googletagmanager.com https://avatars.githubusercontent.com https://armorcodeinc.zendesk.com https://avatars.githubusercontent.com https://static.zdassets.com https://data.insights.armorcode.com https://app.pendo.io https://pendo-static-6033049910312960.storage.googleapis.com https://content.insights.armorcode.com https://www.google-analytics.com https://cdn.usersnap.com https://armorcode-app-documents.s3.us-west-2.amazonaws.com https://temp-findings-bucket.s3.amazonaws.com ; frame-src self https://www.youtube.com https://app.pendo.io https://player.vimeo.com https://*.figma.com ; frame-ancestors https://app.pendo.io https://dev.azure.com; child-src https://app.pendo.io; media-src self https://media.securecodewarrior.com;Permissions-Policy: geolocation(),midi(),sync-xhr(),microphone(*),camera(*),magnetometer(),gyroscope(),fullscreen(self),payment()Referrer-Policy: strict-origin-when-cross-originStrict-Transport-Security: max-age31536000; includeSubDomainsX-Content-Type-Options: nosniffX-Frame-Options: SAMEORIGINX-Xss-Protection: 1; modeblockX-Cache: RefreshHit from cloudfrontX-Amz-Cf-Pop: HIO52-P4X-Amz-Cf-Id: nkh6D0rqAHRgMuwnznMHWol8Cj17GcDJAdRZmS51H3a6J5dmRt-QuA

!DOCTYPE html>html langen>  head>    meta nameinsight-app-sec-validation content0e25097a-c9dc-465d-94ae-ccd0ba746c48>    meta charsetutf-8 />    meta http-equivCache-Control contentno-cache, no-store, must-revalidate />    !-- meta http-equivContent-Security-Policy  contentdefault-src self; script-src self nonce-ebfa3c0d9d94512070ab6699c282940f nonce-c81de55bbb5f08d4020858407838166b https://resources.usersnap.com https://widget.usersnap.com https://ssl.google-analytics.com https://api.usersnap.com https://www.googletagmanager.com  https://www.google-analytics.com https://cdn.usersnap.com; style-src self unsafe-inline https://github.githubassets.com https://fonts.googleapis.com; font-src self https://fonts.gstatic.com; connect-src self https://s3.eu-central-1.amazonaws.com/upload.usersnap.com https://widget.usersnap.com https://*.s3.us-west-2.amazonaws.com  https://www.google-analytics.com https://streaming.split.io https://sdk.split.io https://auth.split.io https://events.split.io https://api.usersnap.com ; img-src self blob: https://www.googletagmanager.com https://www.google-analytics.com https://cdn.usersnap.com https://*.s3.us-west-2.amazonaws.com ; frame-src self https://www.youtube.com https://player.vimeo.com /> -->    meta http-equivPragma contentno-cache />    meta http-equivExpires content0 />    link relicon href/favicon.ico />    meta nameviewport contentwidthdevice-width, initial-scale1 />    meta nametheme-color content#000000 />    meta idbuild-date contentwindow.__build_date__  2026-01-09T09:56:52.888Z/>    !--      manifest.json provides metadata used when your web app is installed on a      users mobile device or desktop. See https://developers.google.com/web/fundamentals/web-app-manifest/    -->    link relmanifest href/manifest.json />    title>ArmorCode/title>    !-- Inter Font -->    script src/highlightjs/highlight.min.js>/script>    style>        @font-face {          font-family: InterVariable;          font-style: normal;          font-weight: 100 900;          font-display: swap;          src: url(/fonts/InterVariable.woff2) format(woff2);        }        @font-face {          font-family: InterVariable;          font-style: italic;          font-weight: 100 900;          font-display: swap;          src: url(/fonts/InterVariable-Italic.woff2) format(woff2);        }    /style>    script typemodule crossorigin src/static/index-C6FdKSeG.js>/script>    link relstylesheet crossorigin href/static/css/Cdzfi0ET.css>  /head>  body>    noscript>You need to enable JavaScript to run this app./noscript>    div idroot>/div>    div idroot-modal-wrapper>/div>    div idroot-session-expiry-wrapper>/div>  /body>/html>

Subdomains

Date	Domain	IP
sage.armorcode.com	2025-01-17	204.246.191.46
console.armorcode.com	2026-01-10	3.169.173.77
app.armorcode.com	2023-03-01	13.226.22.16
content.insights.armorcode.com	2025-12-30	34.111.138.51
eu.armorcode.com	2025-12-01	3.169.173.65

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > console.armorcode.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains