Domain > api-crm.staging.newmont.forwoodsafety.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2020-03-19	35.167.254.165 (ClassC)
2020-03-19	54.186.110.160 (ClassC)
2020-12-09	52.41.195.234 (ClassC)
2020-12-09	52.13.200.239 (ClassC)
2022-04-26	52.10.154.70 (ClassC)
2022-04-26	35.83.81.243 (ClassC)
2022-04-26	52.37.33.246 (ClassC)
2024-05-18	100.20.18.94 (ClassC)
2024-05-18	54.200.216.33 (ClassC)
2024-05-18	52.43.226.171 (ClassC)
2025-06-30	35.164.113.194 (ClassC)
2025-07-15	52.41.225.145 (ClassC)
2025-07-27	54.213.102.223 (ClassC)
2025-08-26	54.187.131.193 (ClassC)
2025-09-07	44.240.248.12 (ClassC)
2025-10-31	44.240.52.111 (ClassC)
2025-11-10	52.10.146.140 (ClassC)
2025-11-10	34.215.155.93 (ClassC)
2025-11-10	34.218.18.128 (ClassC)
2026-01-05	52.37.90.9 (ClassC)
2026-02-11	100.20.43.138 (ClassC)

HTTP/1.1 200 OKDate: Mon, 30 Jun 2025 00:17:10 GMTContent-Type: text/html; charsetUTF-8Content-Length: 4621Connection: keep-aliveServer: ApacheCache-Control: max-age0, must-revalidate, privateExpires:

!DOCTYPE html>html>    head>        title>Newmont CRM API/title>                    meta charsetUTF-8>            !-- Tell the browser to be responsive to screen width -->            meta contentwidthdevice-width, initial-scale1, maximum-scale1, user-scalableno nameviewport>                                            link href/css/62b0e7e.css relstylesheet>                        !-- HTML5 Shim and Respond.js IE8 support of HTML5 elements and media queries -->            !-- WARNING: Respond.js doesnt work if you view the page via file:// -->            !--if lt IE 9>                script srchttps://oss.maxcdn.com/html5shiv/3.7.2/html5shiv.min.js>/script>                script srchttps://oss.maxcdn.com/respond/1.4.2/respond.min.js>/script>            !endif-->            /head>    body classlogin-page>        div classlogin-box>            div classlogin-logo>                a href/>Newmont CRM API/a>            /div>                                    div classlogin-box-body>                div classlogin-box-notifications>                                                                            /div>                            div classlogin-box-body>                        p classlogin-box-msg>Sign in to start your session/p>            form action/login_check idloginForm methodPOST>                div classform-group has-feedback>                    input name_username typetext classform-control placeholderUsername or Email requiredrequired autocompleteoff value />                    span classglyphicon glyphicon-envelope form-control-feedback>/span>                /div>                div classform-group has-feedback>                    input name_password typepassword classform-control placeholderPassword requiredrequired autocompleteoff  />                    span classglyphicon glyphicon-lock form-control-feedback>/span>                /div>                div classform-group has-feedback>                    label forselect-language>Select language/label>                    select idselect-language nam

Subdomains

Date	Domain	IP
id.newmont.forwoodsafety.com	2025-03-16	3.163.189.116
iframe.newmont.forwoodsafety.com	2024-11-25	52.88.18.218
crm.staging.newmont.forwoodsafety.com	2025-02-27	54.149.202.191
api-crm.staging.newmont.forwoodsafety.com	2025-06-30	35.164.113.194
admin.staging.newmont.forwoodsafety.com	2025-01-13	3.163.158.93
actions.staging.newmont.forwoodsafety.com	2025-12-10	3.175.34.80
company.staging.newmont.forwoodsafety.com	2024-07-20	18.161.6.67
api-crm.testing.newmont.forwoodsafety.com	2024-12-20	35.162.140.0
admin.testing.newmont.forwoodsafety.com	2024-09-08	18.161.6.26
crm.newmont.forwoodsafety.com	2024-11-25	52.88.18.218
admin.newmont.forwoodsafety.com	2025-05-04	204.246.191.55

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > api-crm.staging.newmont.forwoodsafety.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains