Domain > croma-development-1.croma.activation.drmtoday.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2024-10-07	54.76.100.224 (ClassC)
2025-01-24	52.17.233.127 (ClassC)
2025-02-01	63.32.123.246 (ClassC)
2025-02-05	54.77.231.115 (ClassC)
2025-02-09	54.74.117.34 (ClassC)
2025-02-27	52.211.222.147 (ClassC)
2025-03-22	52.211.160.185 (ClassC)
2025-04-06	54.74.107.165 (ClassC)
2025-04-23	63.32.148.135 (ClassC)
2025-05-11	52.209.104.114 (ClassC)
2025-07-31	52.214.85.242 (ClassC)
2025-08-14	54.77.119.179 (ClassC)
2025-08-23	18.202.2.253 (ClassC)
2025-09-23	54.195.245.164 (ClassC)
2025-11-23	54.78.213.74 (ClassC)

HTTP/1.1 200 OKDate: Mon, 07 Oct 2024 16:54:21 GMTContent-Type: text/html; charsetutf-8Content-Length: 1878Connection: keep-aliveServer: nginxVary: CookieX-Content-Type-Options: nosniffX-XSS-Protectio

!DOCTYPE html>html langen>head>    title>castLabs Device Activation/title>    link relshortcut icon href/static/img/favicon.ico/>    meta http-equivcontent-type contenttext/html; charsetUTF-8/>    link hrefhttps://cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/css/bootstrap.min.css relstylesheet integritysha384-9ndCyUaIbzAi2FUVXJi0CjmCapSmO7SnpJef0486qhLnuZ2cdeRhO02iuK6FUUVM crossoriginanonymous>    link relstylesheet href/static/custom.css>    script typetext/javascript srchttps://code.jquery.com/jquery-3.7.0.min.js>/script>    script srchttps://cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/js/bootstrap.bundle.min.js integritysha384-geWF76RCwLtnZ8qwWowPQNguL3RmwHVBC9FhGdlKrxdiJJigb/j/68SIy3Te4Bkz crossoriginanonymous>/script>    script typetext/javascript src/static/js/base.js>/script>    /head>body>nav classnavbar navbar-expand-lg bg-body-tertiary>    div classcontainer-fluid>        a classnavbar-brand href/>Activation Server/a>        button classnavbar-toggler typebutton data-bs-togglecollapse data-bs-target#navbarSupportedContent aria-controlsnavbarSupportedContent aria-expandedfalse aria-labelToggle navigation>        span classnavbar-toggler-icon>/span>      /button>      div classcollapse navbar-collapse idnavbarSupportedContent>        ul classnavbar-nav me-auto mb-2 mb-lg-0>                /ul>        ul classnav navbar-nav navbar-right>                            li>a classnav-link href/accounts/login/>login/a>/li>                    /ul>  /div>    /div>  /nav>div classcontainer>        div classpage-header>        h1>castLabs Activation Server/h1>    /div>    p>        Move along, there is nothing to see here!    /p>/div>/body>/html>

Subdomains

Date	Domain	IP
castlabs-production-1.activation.drmtoday.com	2025-10-29	54.155.224.131
croma-development-1.croma.activation.drmtoday.com	2024-10-07	54.76.100.224

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > croma-development-1.croma.activation.drmtoday.com

Is this malicious?

DNS Resolutions

Port 443

Subdomains