Domain > developers.bold.co

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-03-02	3.171.171.63 (ClassC)
2025-11-18	18.161.6.96 (ClassC)

HTTP/1.1 301 Moved PermanentlyServer: CloudFrontDate: Tue, 18 Nov 2025 21:03:25 GMTContent-Type: text/htmlContent-Length: 167Connection: keep-aliveLocation: https://developers.bold.co/X-Cache: Redirect from cloudfrontVia: 1.1 17d76c2aee343249585a570f2d36d2ee.cloudfront.net (CloudFront)X-Amz-Cf-Pop: HIO52-P1X-Amz-Cf-Id: Tyd6g1qOWbTtU9IGDxdCviLhoejhvOeXm7d2T-iphr52wxhWdkWpzAX-XSS-Protection: 1; modeblockX-Frame-Options: SAMEORIGINReferrer-Policy: strict-origin-when-cross-originContent-Security-Policy: default-src self *.kustomerapp.com *.iesnare.com *.bold.co *.segment.com *.segment.io *.amazonaws.com *.hotjar.com *.hotjar.io; script-src self *.segmentstream.com *.clarity.ms *.bold.co *.segment.com *.segment.io *.amazonaws.com *.seondf.com *.google.com *.gstatic.com *.googletagmanager.com *.analytics.tiktok.com *.appboycdn.com *.websdk.appsflyer.com *.boost.ai *.doubleclick.net *.connect.facebook.net *.visualwebsiteoptimizer.com *.vwo.com *.j.northbeam.io *.maze.co *.googleapis.com *.hotjar.com unsafe-eval unsafe-inline; script-src-elem self *.segmentstream.com *.csidetm.com *.tailwindcss.com *.vwo.com app.vwo.com *.deviceinf.com *.seonintelligence.com *.seondnsresolve.com *.seondfresolver.com *.deviceinfresolver.com *.northbeam.io *.doubleclick.net *.tiktok.com *.appsflyer.com *.googletagmanager.com *.connect.facebook.net *.kustomerapp.com *.auth0.com *.bold.co *.boost.ai *.visualwebsiteoptimizer.com *.segment.com *.segment.io *.maze.co *.appboycdn.com *.googleapis.com *.seondf.com *.google.com *.gstatic.com *.cloudflare.com *.jsdelivr.net *.iteratehq.com *.facebook.net *.kustomerapp.com *.shopifycdn.com *.hotjar.com unsafe-inline ; style-src self *.visualwebsiteoptimizer.com *.vwo.com *.auth0.com *.bold.co *.cloudflare.com fonts.googleapis.com *.googleapis.com *.jsdelivr.net *.iteratehq.com *.hotjar.com unsafe-inline; style-src-elem self *.visualwebsiteoptimizer.com *.vwo.com *.auth0.com *.bold.co *.cloudflare.com fonts.googleapis.com *.googleapis.com *.jsdelivr.net *.iteratehq.com unsafe-inline; img-src self * data: ;font-src * *.bold.co data:; connect-src self data: *.segmentstream.com *.csidetm.com *.stytch.com *.seondnsresolve.com *.seondfresolver.com *.deviceinfresolver.com *.seonintelligence.com *.onelink.me *.appsflyer.com *.tiktok.com *.tiktokw.us *.pangle-ads.com *.doubleclick.net *.launchdarkly.com *.strich.io *.google.com *.pndsn.com *.bold.co https://bold.co *.segment.com *.segment.io *.amazonaws.com *.visualwebsiteoptimizer.com *.vwo.com *.boost.ai *.maze.co *.braze.eu *.googleapis.com *.seondf.com https://iteratehq.com *.sentry.io *.auth0.com *.kustomerapp.com *.shopifysvc.com *.boldcf.co https://boldcf.co https://www.facebook.com *.hotjar.com *.hotjar.io wss://*.hotjar.com ;frame-src self *.visualwebsiteoptimizer.com *.vwo.com *.doubleclick.net *.googletagmanager.com *.jumio.ai *.google.com *.auth0.com *.bold.co *.googleapis.com *.typeform.com *.youtube.com *.youtube-nocookie.com *.payzen.eu; worker-src self blob:;media-src self data: *.ctfassets.net; frame-ancestors self https://developers.bold.co https://www.developers.bold.coX-Content-Type-Options: nosniff

html>head>title>301 Moved Permanently/title>/head>body>center>h1>301 Moved Permanently/h1>/center>hr>center>CloudFront/center>/body>/html>

Port 443

HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Tue, 18 Nov 2025 21:03:25 GMTContent-Type: text/htmlContent-Length: 919Connection: keep-aliveX-Cache: Error from cloudfrontVia: 1.1 6af36c6902a46beec743522a9bbb3ab0.cloudfront.net (CloudFront)X-Amz-Cf-Pop: HIO52-P1X-Amz-Cf-Id: U788Xovo2SqOWgXr4rYg1zrj-i4qIE6_FFAN-tWMY7DOmzuQMRl5UwX-XSS-Protection: 1; modeblockX-Frame-Options: SAMEORIGINReferrer-Policy: strict-origin-when-cross-originContent-Security-Policy: default-src self *.kustomerapp.com *.iesnare.com *.bold.co *.segment.com *.segment.io *.amazonaws.com *.hotjar.com *.hotjar.io; script-src self *.segmentstream.com *.clarity.ms *.bold.co *.segment.com *.segment.io *.amazonaws.com *.seondf.com *.google.com *.gstatic.com *.googletagmanager.com *.analytics.tiktok.com *.appboycdn.com *.websdk.appsflyer.com *.boost.ai *.doubleclick.net *.connect.facebook.net *.visualwebsiteoptimizer.com *.vwo.com *.j.northbeam.io *.maze.co *.googleapis.com *.hotjar.com unsafe-eval unsafe-inline; script-src-elem self *.segmentstream.com *.csidetm.com *.tailwindcss.com *.vwo.com app.vwo.com *.deviceinf.com *.seonintelligence.com *.seondnsresolve.com *.seondfresolver.com *.deviceinfresolver.com *.northbeam.io *.doubleclick.net *.tiktok.com *.appsflyer.com *.googletagmanager.com *.connect.facebook.net *.kustomerapp.com *.auth0.com *.bold.co *.boost.ai *.visualwebsiteoptimizer.com *.segment.com *.segment.io *.maze.co *.appboycdn.com *.googleapis.com *.seondf.com *.google.com *.gstatic.com *.cloudflare.com *.jsdelivr.net *.iteratehq.com *.facebook.net *.kustomerapp.com *.shopifycdn.com *.hotjar.com unsafe-inline ; style-src self *.visualwebsiteoptimizer.com *.vwo.com *.auth0.com *.bold.co *.cloudflare.com fonts.googleapis.com *.googleapis.com *.jsdelivr.net *.iteratehq.com *.hotjar.com unsafe-inline; style-src-elem self *.visualwebsiteoptimizer.com *.vwo.com *.auth0.com *.bold.co *.cloudflare.com fonts.googleapis.com *.googleapis.com *.jsdelivr.net *.iteratehq.com unsafe-inline; img-src self * data: ;font-src * *.bold.co data:; connect-src self data: *.segmentstream.com *.csidetm.com *.stytch.com *.seondnsresolve.com *.seondfresolver.com *.deviceinfresolver.com *.seonintelligence.com *.onelink.me *.appsflyer.com *.tiktok.com *.tiktokw.us *.pangle-ads.com *.doubleclick.net *.launchdarkly.com *.strich.io *.google.com *.pndsn.com *.bold.co https://bold.co *.segment.com *.segment.io *.amazonaws.com *.visualwebsiteoptimizer.com *.vwo.com *.boost.ai *.maze.co *.braze.eu *.googleapis.com *.seondf.com https://iteratehq.com *.sentry.io *.auth0.com *.kustomerapp.com *.shopifysvc.com *.boldcf.co https://boldcf.co https://www.facebook.com *.hotjar.com *.hotjar.io wss://*.hotjar.com ;frame-src self *.visualwebsiteoptimizer.com *.vwo.com *.doubleclick.net *.googletagmanager.com *.jumio.ai *.google.com *.auth0.com *.bold.co *.googleapis.com *.typeform.com *.youtube.com *.youtube-nocookie.com *.payzen.eu; worker-src self blob:;media-src self data: *.ctfassets.net; frame-ancestors self https://developers.bold.co https://www.developers.bold.coX-Content-Type-Options: nosniffStrict-Transport-Security: max-age31536000; includeSubDomains; preload

!DOCTYPE HTML PUBLIC -//W3C//DTD HTML 4.01 Transitional//EN http://www.w3.org/TR/html4/loose.dtd>HTML>HEAD>META HTTP-EQUIVContent-Type CONTENTtext/html; charsetiso-8859-1>TITLE>ERROR: The request could not be satisfied/TITLE>/HEAD>BODY>H1>403 ERROR/H1>H2>The request could not be satisfied./H2>HR noshade size1px>Request blocked.We cant connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.BR clearall>If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.BR clearall>HR noshade size1px>PRE>Generated by cloudfront (CloudFront)Request ID: U788Xovo2SqOWgXr4rYg1zrj-i4qIE6_FFAN-tWMY7DOmzuQMRl5Uw/PRE>ADDRESS>/ADDRESS>/BODY>/HTML>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > developers.bold.co

Is this malicious?

DNS Resolutions

Port 80

Port 443