When you land on a subdomain like lp-push-server-1950.lastpass.com, it's natural to wonder if it's really part of LastPass or a clever imitation. The good news is that this subdomain passes the important checks. It uses a valid SSL certificate issued by a well-known authority, forces HTTPS connections, and is served through Akamai's high-performance network — all signs of a professionally managed infrastructure. More importantly, the page immediately redirects to lastpass.com with a clear push-server parameter, which is exactly what you'd expect from a backend server handling push notifications or sync services. The subdomain has no public-facing content or contact info, but that's normal for a service endpoint. The parent company, LastPass, is a broadly recognized password manager, and the security setup here is consistent with their standards. If you're concerned about whether lp-push-server-1950.lastpass.com is a scam or fake, the evidence points strongly to it being a legitimate part of the LastPass ecosystem. As always, be cautious with any URL asking for login credentials, but in this case the redirect to the official site and the solid technical signals should put your mind at ease.
In plain English
This is a legitimate LastPass subdomain used for push server functionality. It redirects to the official LastPass website and has strong security measures in place. There's no evidence of phishing or scam activity here.
Where the score comes from
Strong security posture with modern TLS, HSTS enforcement, and multiple browser protections. The site uses a reputable certificate authority and is served through Akamai's edge network, which is a serious investment in infrastructure.
This is a subdomain of LastPass, a well-known password manager. The parent company's identity is clear, and the redirect to the official LastPass domain reassures that this is not a standalone phishing attempt. The lack of WHOIS for the subdomain is expected and not a concern.
No blacklist hits or Google Safe Browsing flags. The absence of Wayback Machine snapshots is understandable for a backend subdomain that may have been recently created or not intended for public archiving. The domain is not in the top 1 million, which is normal for a subdomain.
The site itself provides no contact info, about page, or social links, but that's typical for a server subdomain that simply redirects to the main site. The redirect to lastpass.com with a clear parameter indicates the purpose is backend functionality, not a public-facing service.
The subdomain lacks its own privacy policy or terms of service, but that's expected for a redirect-only endpoint. The parent LastPass site handles compliance obligations. No legal issues are implied by this absence.
Solid technical setup: Akamai CDN, fast page load, proper security headers, and a valid SSL certificate. While DNSSEC is not enabled, that's not unusual for a subdomain. The server header says 'LastPass', confirming the connection to the parent company.
What we checked
Run this site? Show your score.
Add a trust badge so visitors can see your live score for themselves.
Get your badge →