Domain > 5291bb8842f8444.epay3qa.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-04-30	104.18.9.187 (ClassC)
2026-02-23	104.18.8.187 (ClassC)

HTTP/1.1 200 OKDate: Mon, 23 Feb 2026 02:43:46 GMTContent-Type: text/html; charsetutf-8Transfer-Encoding: chunkedConnection: keep-aliveX-Content-Type-Options: nosniffServer: cloudflareCache-Control: public, no-store, max-age0Expires: Mon, 23 Feb 2026 02:43:46 GMTLast-Modified: Mon, 23 Feb 2026 02:43:46 GMTSet-Cookie: ARRAffinitya66d27bf69a3f542c6c630e3012ec1a3b08b9115b9da691180f66c2691a9c6a9;Path/;HttpOnly;Secure;Domain5291bb8842f8444.epay3qa.comSet-Cookie: ARRAffinitySameSitea66d27bf69a3f542c6c630e3012ec1a3b08b9115b9da691180f66c2691a9c6a9;Path/;HttpOnly;SameSiteNone;Secure;Domain5291bb8842f8444.epay3qa.comVary: *Strict-Transport-Security: max-age15552000; includeSubDomainsContent-Security-Policy: base-uri self; default-src blob: self; style-src self unsafe-inline https://cdnjs.cloudflare.com ; img-src * self data:; font-src self https://cdnjs.cloudflare.com; frame-src self blob: https://www.google.com; script-src self unsafe-inline unsafe-eval https://cdnjs.cloudflare.com https://www.google.com https://www.gstatic.com ; connect-src self blob: data: https://www.google-analytics.com https://www.google.com https://api-js.mixpanel.com https://cdnjs.cloudflare.com https://webhooks.epay3qa.com ; frame-ancestors self ; report-uri /report-csp;X-AspNetMvc-Version: 5.2X-AspNet-Version: 4.0.30319Request-Context: appIdcid-v1:3a5f4981-be86-4baa-ad89-c451b2695a02X-Powered-By: ASP.NETcf-cache-status: DYNAMICCF-RAY: 9d2360a389e70055-PDXalt-svc: h3:443; ma86400

!DOCTYPE html>html langen>head>    meta charsetUTF-8>    meta nameviewport contentwidthdevice-width, initial-scale1.0>    meta namerobots contentnoindex>    title>ReferringAccountTest(key de7e188e0df0480 secret  9da4e9bd94cf413)/title>    link hrefhttps://cdnjs.cloudflare.com/ajax/libs/bootstrap/5.3.3/css/bootstrap-grid.min.css relstylesheet integritysha512-i1b/nzkVo97VN5WbEtaPebBG8REvjWeqNclJ6AItj7msdVcaveKrlIIByDpvjk5nwHjXkIqGZscVxOrTb9tsMA crossoriginanonymous referrerpolicyno-referrer />        link relpreload href/Scripts/dist/assets/Montserrat-v26-BDA6280a.woff2 asfont typefont/woff2 crossorigin>style>    :root {        --primary-color: #006e5a;    }/style>    /head>body>    div idmain-app         data-baseUrl/         data-model{  "AcceptedPaymentMethods":     "CreditCard",    "Ach"  ,  "RequirePaymentPageComments": false,  "PageCommentPlaceHolder": "Notes (optional)",  "PayerLabel": null,  "LegalName": "Adani Groups",  "PaymentCategoryBaseUri": "epay3qa.com",  "PaymentCategoryName": "ePayPolicy",  "PayerTokenViewModels": ,  "UserEmail": null,  "TransactionAttributes":     {      "Id": 10677,      "AccountId": 0,      "Name": "Account Type",      "ParameterName": "accountType",      "TransactionAttributeType": "Selection",      "Index": 0,      "IsManagedInvoiceEligible": true,      "Placeholder": "NULL",      "IsRequired": true,      "RegularExpression": null,      "RegularExpressionErrorMessage": null,      "ValidationStatusId": "Valid",      "Value": "Client",      "ImageUri": null,      "Options":         {          "Value": "Client",          "Text": "Client",          "Active": true        },        {          "Value": "Broker",          "Text": "Broker",          "Active": true        }      ,      "IsActive": true,      "IsAutoPayEditable": false,      "FieldId": "TransactionAttribute10677",      "RequiredErrorMessage": "The Account Type field is required."    },    {      "Id": 10678,      "AccountId": 0,      "Name": "Account Number",      "ParameterName": "accountNumber",      "TransactionAttributeType": "Text",      "Index": 1,      "IsManagedInvoiceEligible": true,      "Placeholder": "Account Number",      "IsRequired": true,      "RegularExpression": null,      "RegularExpressionErrorMessage": null,      "ValidationStatusId": "Valid",      "Value": null,      "ImageUri": null,      "Options": null,      "IsActive": true,      "IsAutoPayEditable": false,      "FieldId": "TransactionAttribute10678",      "RequiredErrorMessage": "The Account Number field is required."    },    {      "Id": 10679,      "AccountId": 0,      "Name": "Zip Code",      "ParameterName": "postalCode",      "TransactionAttributeType": "Text",      "Index": 2,      "IsManagedInvoiceEligible": false,      "Placeholder": "Zip Code",      "IsRequired": true,      "RegularExpression": null,      "RegularExpressionErrorMessage": null,      "ValidationStatusId": "Valid",      "Value": null,      "ImageUri": null,      "Options": null,      "IsActive": true,      "IsAutoPayEditable": true,      "FieldId": "TransactionAttribute10679",      "RequiredErrorMessage": "The Zip Code field is required."    }  ,  "RequireAcceptanceOfPaymentPageDisclaimer": false,  "PaymentPageDisclaimer": "",  "AchDisclaimer": "",  "EnableAttachments": false,  "EnableInvoices": true,  "EnableFinancing": false,  "PublicEmailAddress": "kirtibalab@cybage.com",  "ShowAutoPay": true,  "ShowScheduledPayments": false,  "CanAccessScheduledPayments": true,  "ManagedInvoiceGroup": null,  "HidePayAllOptionOnPaymentPage": false,  "DeclineAmericanExpress": false,  "ShowFeeRestrictionDisclaimer": false,  "EnableAutoPayEnrollment": false,  "AutoPayChargeOffsetDays": 0,  "AutoPayEmailOffsetDays": 2,  "FinanceConnectEnabled": false,  "CustomerServiceUserPublicId": null,  "CustomerServiceUserName": null,  "FacilitatorBannerText": null,  "Intervals":     {      "Id": 2,      "DisplayName": "Week(s)",      "Description": null    },    {      "Id": 3,      "DisplayName": "Month(s)",      "Description": null    },    {      "Id": 4,      "DisplayName": "Year(s)",      "Description": null    }  ,  "HideSignInSignUp": false,  "AccountTypeOptions":     {      "Value": "3",      "Text": "Checking Account"    },    {      "Value": "4",      "Text": "Savings Account"    }  ,  "InvoiceSearchSortOverrideAscending": false,  "InvoiceSearchSortOverrideColumnName": null,  "ManagedInvoiceGroupHasMultipleItems": false,  "IsAuthenticated": false,  "AccountName": "ReferringAccountTest(key de7e188e0df0480 secret  9da4e9bd94cf413)",  "Subdomain": "5291bb8842f8444",  "PaymentPageBannerText": null,  "DisablePaymentPage": false,  "PaymentPageBannerStartDate": null,  "PaymentPageBannerEndDate": null,  "GoogleDataSiteClientKey": "6LeIxAcTAAAAAJcZVRqyHh71UMIEGNQ_MXjiZKhI",  "GoogleDataSiteClientKeyV3": "6LeIxAcTAAAAAJcZVRqyHh71UMIEGNQ_MXjiZKhI",  "GoogleDataSiteInvisibleClientKey": "6LeIxAcTAAAAAJcZVRqyHh71UMIEGNQ_MXjiZKhI",  "MixpanelToken": "a42d201310e703e26805cae95cf942b8",  "InjectionMode": "qa",  "DisableMixpanel": false,  "MixpanelProxyUrl": "https://webhooks.epay3qa.com/api/MixpanelProxy",  "Success": false,  "ErrorMessage": null,  "ConfirmationMessage": null,  "InformationMessage": null}>            /div>    script typetext/javascript src/Scripts/pdf-viewer/embed.js>/script>    link href/Scripts/dist/assets/style-DKJmmvjI.css relstylesheet>    script typemodule src/Scripts/dist/assets/payment-page-DeKFLmgo.js>/script>script typemodule src/Scripts/dist/assets/client-ClolvThQ.js>/script>script typemodule src/Scripts/dist/assets/CustomFields-bL_l5AGr.js>/script>script typemodule src/Scripts/dist/assets/QueryString-Bkvq4XAv.js>/script>script typemodule src/Scripts/dist/assets/Platform-CqCDthit.js>/script>script typemodule src/Scripts/dist/assets/SubTitle-CcN4WXjY.js>/script>script typemodule src/Scripts/dist/assets/PaymentPageHelpers-CmYIkSZh.js>/script>script typemodule src/Scripts/dist/assets/ErrorBoundary-H53xu0f_.js>/script>script typemodule src/Scripts/dist/assets/AppUtilities-DvwZRvIT.js>/script>    /body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > 5291bb8842f8444.epay3qa.com

Is this malicious?

DNS Resolutions

Port 443