Domain > dev1.finans.lassox.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2024-09-14	104.45.14.249 (ClassC)
2025-08-13	20.105.232.45 (ClassC)

HTTP/1.1 200 OKContent-Type: text/html; charsetutf-8Date: Thu, 25 Jul 2024 22:30:19 GMTServer: Microsoft-IIS/10.0Set-Cookie: .AspNetCore.Mvc.CookieTempDataProvider; expiresThu, 01 Jan 1970 00:00:00 GM

!DOCTYPE html>html>  head>    meta charsetutf-8>    title>Lasso/title>    link relicon typeimage/png href/app/dist/static/img/favicon-32x32.png sizes32x32 />    link relicon typeimage/png href/app/dist/static/img/favicon-16x16.png sizes16x16 />    meta nameviewport contentwidthdevice-width, initial-scale1, shrink-to-fitno, user-scalableno>    link relstylesheet href//maxcdn.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css />    link relstylesheet hrefhttps://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css integritysha384-Gn5384xqQ1aoWXA+058RXPxPg6fy4IWvTNh0E263XmFcJlSAwiGgFAW/dAiS6JXm crossoriginanonymous>    link href//fonts.googleapis.com/css?familyRoboto:300,400,400i,500,700 relstylesheet>    link href//fonts.googleapis.com/css2?familyPoppins:wght@400;500;600&displayswap relstylesheet>    script typemodule crossorigin src/app/dist/static/index.51d7517f.js>/script>    link relstylesheet href/app/dist/static/index.d51a92ae.css>  /head>  body>    !-- Google Tag Manager -->    noscript>        iframe src//www.googletagmanager.com/ns.html?idGTM-TJT6V6                height0 width0 styledisplay:none;visibility:hidden>/iframe>    /noscript>    script>        (function(w,d,s,l,i){wlwl||;wl.push({gtm.start:        new Date().getTime(),event:gtm.js});var fd.getElementsByTagName(s)0,        jd.createElement(s),dll!dataLayer?&l+l:;j.asynctrue;j.src        //www.googletagmanager.com/gtm.js?id+i+dl;f.parentNode.insertBefore(j,f);        })(window, document, script, dataLayer, GTM-TJT6V6);    /script>    !-- End Google Tag Manager -->    script>      // here we should only receive parameters that are meant to be hidden from the URL, e.g. puid and lt. Back-end will hide them.      // other values that were previously given by the backend (e.g. readOnly og Impersonating) will now be read in the user claims after the login endpoint has been called.      window.puid  null;      window.lt  null;    /script>    div idapp>/div>    !-- Lasso SDK -->    script src/app/dist/static/js/lasso-product-sdk.js?v1>/

Subdomains

Date	Domain	IP
athena.lassox.com	2024-04-15	52.9.166.110
api.lassox.com	2025-05-08	20.76.150.236
serverlessapi.lassox.com	2025-01-19	20.76.150.236
dev1.portal.lassox.com	2025-05-06	20.105.232.45
dev2.portal.lassox.com	2024-09-14	104.45.14.249
dev1.jyllands-posten.lassox.com	2024-07-29	104.45.14.249
dev1.finans.lassox.com	2024-09-14	104.45.14.249
apps.lassox.com	2024-09-14	104.45.14.249
dev1.apps.lassox.com	2024-09-14	104.45.14.249
dev2.apps.lassox.com	2024-10-23	104.45.14.249
www.lassox.com	2024-07-05	141.101.90.96

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > dev1.finans.lassox.com

Is this malicious?

DNS Resolutions

Port 443

Subdomains