Domain > book.prod.sothelabs.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2021-04-18	99.84.174.119 (ClassC)
2024-08-13	3.163.24.16 (ClassC)
2025-01-27	52.84.162.6 (ClassC)
2025-04-16	3.163.24.5 (ClassC)
2025-07-15	3.175.34.84 (ClassC)
2026-01-07	3.169.173.94 (ClassC)
2026-01-12	3.169.173.60 (ClassC)
2026-02-28	3.169.173.106 (ClassC)

HTTP/1.1 200 OKContent-Type: text/htmlContent-Length: 1702Connection: keep-aliveDate: Thu, 15 Feb 2024 07:31:07 GMTLast-Modified: Tue, 06 Feb 2024 14:58:14 GMTETag: 3fc8d39d50be848ca29c8d7707069b30x-a

!DOCTYPE html>html langen>head>meta charsetutf-8>meta nameviewport contentwidthdevice-width,initial-scale1,maximum-scale1,user-scalable0>title>Live Bidding/title>link relstylesheet hrefhttps://use.typekit.net/dfs5lfh.css>script>function dynamiclyLoadFile(name) {  const head  document.getElementsByTagName(head)0;  const newScript  document.createElement(script);  newScript.src  window.location.origin + / + window.GITHASH + / + name;  newScript.type  text/javascript;  head.appendChild(newScript);}const urlParams  new URLSearchParams(window.location.search);const gitVersion  urlParams.get(version);if (!gitVersion) {  if (window.location.origin.includes(local.sothebys.com)) {    window.GITHASH  ;  } else {    window.GITHASH  c9d9686dca3d7a71ab87262902155254352a1d61;  }  console.log(Application starting normally);} else {  window.GITHASH  gitVersion;  console.log(Application starting with hash:  + gitVersion);}fetch(/config.json)  .then(data > {    if (      data.ok &&      data.headers.get(content-type).includes(application/json)    ) {      return data.json();    } else {      alert(config.json is missing);    }  })  .then(res > {    if (res && res.tier) {      window.TIER  res && res.tier;      // If there is hash specified in the config file we use that if no version parameter is provided      if (!gitVersion && res.hash) {        window.GITHASH  res.hash;      }      dynamiclyLoadFile(runtime.js);      dynamiclyLoadFile(main.js);    } else {      alert(tier missing from config.json);    }  });/script>/head>body>div idroot>/div>/body>/html>

Subdomains

Date	Domain	IP
auth0-custom-hosted-login-page.prod.sothelabs.com	2024-11-06	3.163.24.60
sli.prod.sothelabs.com	2025-06-12	3.163.24.33
customerapi.prod.sothelabs.com	2025-09-25	146.75.41.91
clientapi.prod.sothelabs.com	2023-08-04	3.222.123.9
book.prod.sothelabs.com	2024-08-13	3.163.24.16
admin.prod.sothelabs.com	2024-09-18	3.163.24.14
subscriptions.prod.sothelabs.com	2024-07-22	3.219.92.112
fonts.prod.sothelabs.com	2024-06-10	99.84.66.82
clientapi-ws.prod.sothelabs.com	2025-06-01	23.21.156.149
web.staging.sothelabs.com	2023-08-25	2.19.138.213
book.staging.sothelabs.com	2024-12-27	204.246.191.77

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > book.prod.sothelabs.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains