Domain > dev9546.pluto.app.nationalrail.co.uk

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-10-16	54.154.174.11 (ClassC)
2025-11-24	108.128.67.224 (ClassC)

HTTP/1.1 200 OKDate: Mon, 24 Nov 2025 05:55:52 GMTContent-Type: text/html; charsetUTF-8Content-Length: 3542Connection: keep-aliveServer: nginxVary: Accept-EncodingAccept-Ranges: bytesCache-Control: public, max-age0Last-Modified: Wed, 19 Nov 2025 21:42:01 GMTETag: W/dd6-19a9e113f98X-Frame-Options: DENYX-Content-Type-Options: nosniffX-XSS-Protection: 1; modeblockReferrer-Policy: strict-origin-when-cross-originPermissions-Policy: camera(), microphone(), geolocation()Strict-Transport-Security: max-age31536000; includeSubDomainsContent-Security-Policy: default-src self; script-src self https://cdn.gpteng.co; style-src self unsafe-inline https://fonts.googleapis.com; img-src self data: https:; font-src self data: https://fonts.gstatic.com; connect-src self https://fonts.googleapis.com https://fonts.gstatic.com https://tile.openstreetmap.org https://*.tile.openstreetmap.org; frame-src self https://www.openstreetmap.org https://www.youtube.com https://player.vimeo.com; frame-ancestors none; base-uri self; form-action self;

!DOCTYPE html>html langen>  head>    meta charsetUTF-8 />    meta nameviewport contentwidthdevice-width, initial-scale1.0, maximum-scale1.0, user-scalableno, viewport-fitcover />    title>Pluto - Railway Staff Portal/title>    meta namedescription contentProfessional railway staff portal for UK railway operations />    meta nameauthor contentPluto Team />        !-- Cache Control - Force browsers to check for updates -->    meta http-equivCache-Control contentno-cache, no-store, must-revalidate />    meta http-equivPragma contentno-cache />    meta http-equivExpires content0 />        !-- PWA Meta Tags -->    meta nameapple-mobile-web-app-capable contentyes>    meta nameapple-mobile-web-app-status-bar-style contentdefault>    meta nameapple-mobile-web-app-title contentPluto>    meta namemobile-web-app-capable contentyes>    meta nametheme-color content#0066CC>    meta nameformat-detection contenttelephoneno>        !-- Favicon & App Icons -->    link relicon typeimage/svg+xml href/chatbot-icon.svg />    link relalternate icon href/favicon.ico />    link relapple-touch-icon href/chatbot-icon.svg>        !-- Link to PWA manifest -->    link relmanifest href/manifest.json />        !-- Google Fonts for Design System -->    link hrefhttps://fonts.googleapis.com/css2?familyWork+Sans:wght@700&displayswap relstylesheet>    link hrefhttps://fonts.googleapis.com/css2?familyAtkinson+Hyperlegible:wght@400;700&displayswap relstylesheet>    meta propertyog:title contentPluto - Railway Staff Portal />    meta propertyog:description contentProfessional railway staff portal for UK railway operations, providing real-time information, knowledge base, and essential tools for railway personnel. />    meta propertyog:type contentwebsite />    meta propertyog:image content/logo.svg />    meta nametwitter:card contentsummary_large_image />    meta nametwitter:title contentPluto - Railway Staff Portal />    meta nametwitter:description contentProfessional railway staff portal for UK railway operations />    meta nametwitter:image content/logo.svg />    script>      // Handle public share links - redirect /share/* URLs to API endpoint      (function () {        try {          const path  window.location.pathname;          // Only process URLs that match the share pattern          if (!path.startsWith(/share/)) {            return; // Not a share URL, exit silently          }          const match  path.match(/^\/share\/(briefing|video)\/(a-zA-Z0-9-+)/);          if (match) {            const target  `/api/v1/content/share/${match1}/${match2}${window.location.search || }${window.location.hash || }`;            window.location.replace(target);          } else {            // Share URL but invalid format - log warning            console.warn(Invalid share URL format:, path);          }        } catch (err) {          // Only log errors for actual exceptions during share URL processing          console.error(Error processing share URL redirect:, err);        }      })();    /script>    script typemodule crossorigin src/assets/index-BKqWDppO-1763588447391.js>/script>    link relstylesheet crossorigin href/assets/index-B4U_IB1g.css>  /head>  body>    div idroot>/div>  /body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > dev9546.pluto.app.nationalrail.co.uk

Is this malicious?

DNS Resolutions

Port 443