Domain > web-app.sandbox.token.io

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2023-06-28	52.28.41.203 (ClassC)
2025-01-30	18.199.113.136 (ClassC)
2025-09-03	3.76.70.182 (ClassC)
2026-02-14	52.29.108.27 (ClassC)

HTTP/1.1 200 OKDate: Tue, 24 Dec 2024 07:18:57 GMTContent-Type: text/html; charsetutf-8Content-Length: 15356Connection: keep-aliveContent-Security-Policy: default-src self;script-src self nonce-56b9d2

!DOCTYPE html>html langen>    head>        meta charsetutf-8>        meta contentwidthdevice-width,initial-scale1 nameviewport>        meta http-equivX-UA-Compatible contentIEEdge />        title>Token Web App/title>        link relshortcut icon href/assets/favicon.png>        link hrefhttps://fonts.googleapis.com/css?familySource+Sans+Pro:400,600,700 relstylesheet typetext/css>        link hrefhttps://fonts.googleapis.com/css?familyDM+Sans:400,600; relstylesheet typetext/css/>        link hrefhttps://fonts.googleapis.com/css?familyInter:400,600; relstylesheet typetext/css/>        link href/css/app.a6c6e45bd2.css relstylesheet>    /head>    body>        script nonce7cb968e1-ccb8-4cf5-aa77-e3bb7d7865dd>            try {                const cookiePairs  window.document.cookie.split(;);                for (let i  0; i  cookiePairs?.length; i++) {                    const pair  cookiePairs?.i?.split();                    window.document.cookie                         `${(pair0 + ).trim()}` +                        ;domain.token.io;path/;max-age0;                }            } catch (e) {                // do nothing            }        /script>        div idapp>div classLoading>div classSpinnerContainer>img classSpinnerBig__image src/assets/spinner-big.svg />/div>/div>/div>        script nonceab2332f6-814c-43e2-b30f-e054d371e728>window.BROWSER_ENV  {tokenRootUrl:.token.io,defaultLocale:en-GB,sendErrorReports:true,sendTraceSpans:true,hotModule:false,localStorageVersion:2.0,timeouts:{appNotificationInterval:1000,appNotificationTimeout:120000,decoupleAuthorizationInterval:5000,decoupleAuthorizationTimeout:180000,tokenRequestResultInterval:5000,tokenRequestResultTimeout:60000},defaultCustomizationTppList:{gp-hsbc:{category:GP-HSBC,displayCustomErrorPage:true,showBankSelectorTitle:true},hsbc:{category:HSBC,displayCustomErrorPage:true,supportPsr44Flow:true,displayBeneficiaryDetails:true,supportRecentBanks:false,displayLogoOnBankRedirectScreen:true,supportedCountriesWithBankIds:{GB:{bankIds:}},regionalConfigurations:{defa

Subdomains

Date	Domain	IP
dashboard.sandbox.token.io	2024-06-09	52.59.112.192
web-app.sandbox.token.io	2025-01-30	18.199.113.136

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > web-app.sandbox.token.io

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains