Domain > admin.uat.hahapay.cc

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-01-02	108.138.64.67 (ClassC)
2025-08-15	18.161.6.110 (ClassC)

HTTP/1.1 302 Moved TemporarilyContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: keep-aliveServer: nginx/1.18.0 (Ubuntu)Access-Control-Allow-Credentials: trueSet-Cookie: XSRF-TOKENeyJpdiI6Ijk0VXpuaTdvcHlJZUl0UDAraG5NZFE9PSIsInZhbHVlIjoidHRLNnZ6Wk5GSDhlakJDTzhheTc2MVptSklUcUVJR0V5aGJyWndWdktTV2lBR0hGYWgzZlwvcExZZ0xEZXhsUWkiLCJtYWMiOiI1OGQ2MTczM2YzMTE5ZGQ2ZjFjNjQxZDA0MTE0YTZhMWU1NmM4YmFlMDZmZGQ5ODgyMTM3YWIzMDYxZjY0MmU4In0%3D; expiresFri, 15-Aug-2025 05:54:20 GMT; Max-Age7200; path/Set-Cookie: luckyhash_sessioneyJpdiI6IlVUMEFsNE5cL3lqcEtPcGViNVBPakZnPT0iLCJ2YWx1ZSI6ImFWdW9TMStDaEpXbXByQmszZER5UWVHY1hhMm94bWloaGd2VTBZbmlMd2x2eFEraERLQk5yVGE4Wmhab1BIUSsiLCJtYWMiOiJjNjk0NGI5ZjUyYTM1NzkzOGM5NjRjOWY0Yjc2OTFhY2U1NzQyMjE1M2IxNmU3YzdhY2M4NzE5ZTc0MWU2NzgzIn0%3D; expiresFri, 15-Aug-2025 05:54:20 GMT; Max-Age7200; path/; httponlyCache-Control: no-cache, privateDate: Fri, 15 Aug 2025 03:54:20 GMTLocation: https://admin.uat.hahapay.cc/rtjl10k5bwAccess-Control-Allow-Origin: Access-Control-Allow-Headers: Origin, Content-Type, Cookie, X-CSRF-TOKEN, Accept, Authorization, X-XSRF-TOKEN,langCode,User-DeviceAccess-Control-Expose-Headers: Authorization, authenticatedAccess-Control-Allow-Methods: GET, POST, PATCH, PUT, OPTIONSX-Cache: Miss from cloudfrontVia: 1.1 ee6ea1e4552345de209d26f9ffb35d4a.cloudfront.net (CloudFront)X-Amz-Cf-Pop: HIO52-P1X-Amz-Cf-Id: WlWHBOURLA4JItDCfAeY8_KgZ_RORpey1HQVL6yHg1lftJTU_p2s1w

!DOCTYPE html>html>    head>        meta charsetUTF-8 />        meta http-equivrefresh content0;urlhttps://admin.uat.hahapay.cc/rtjl10k5bw />        title>Redirecting to https://admin.uat.hahapay.cc/rtjl10k5bw/title>    /head>    body>        Redirecting to a hrefhttps://admin.uat.hahapay.cc/rtjl10k5bw>https://admin.uat.hahapay.cc/rtjl10k5bw/a>.    /body>/html>

Port 443

HTTP/1.1 302 Moved TemporarilyContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: keep-aliveServer: nginx/1.18.0 (Ubuntu)Access-Control-Allow-Credentials: trueSet-Cookie: XSRF-TOKENeyJpdiI6Ijk0VXpuaTdvcHlJZUl0UDAraG5NZFE9PSIsInZhbHVlIjoidHRLNnZ6Wk5GSDhlakJDTzhheTc2MVptSklUcUVJR0V5aGJyWndWdktTV2lBR0hGYWgzZlwvcExZZ0xEZXhsUWkiLCJtYWMiOiI1OGQ2MTczM2YzMTE5ZGQ2ZjFjNjQxZDA0MTE0YTZhMWU1NmM4YmFlMDZmZGQ5ODgyMTM3YWIzMDYxZjY0MmU4In0%3D; expiresFri, 15-Aug-2025 05:54:20 GMT; Max-Age7200; path/Set-Cookie: luckyhash_sessioneyJpdiI6IlVUMEFsNE5cL3lqcEtPcGViNVBPakZnPT0iLCJ2YWx1ZSI6ImFWdW9TMStDaEpXbXByQmszZER5UWVHY1hhMm94bWloaGd2VTBZbmlMd2x2eFEraERLQk5yVGE4Wmhab1BIUSsiLCJtYWMiOiJjNjk0NGI5ZjUyYTM1NzkzOGM5NjRjOWY0Yjc2OTFhY2U1NzQyMjE1M2IxNmU3YzdhY2M4NzE5ZTc0MWU2NzgzIn0%3D; expiresFri, 15-Aug-2025 05:54:20 GMT; Max-Age7200; path/; httponlyCache-Control: no-cache, privateDate: Fri, 15 Aug 2025 03:54:20 GMTLocation: https://admin.uat.hahapay.cc/rtjl10k5bwAccess-Control-Allow-Origin: Access-Control-Allow-Headers: Origin, Content-Type, Cookie, X-CSRF-TOKEN, Accept, Authorization, X-XSRF-TOKEN,langCode,User-DeviceAccess-Control-Expose-Headers: Authorization, authenticatedAccess-Control-Allow-Methods: GET, POST, PATCH, PUT, OPTIONSX-Cache: Hit from cloudfrontVia: 1.1 b5695e36d7fbc522ece27885d73757ae.cloudfront.net (CloudFront)X-Amz-Cf-Pop: HIO52-P1X-Amz-Cf-Id: qI29nZTSjAs9XVcnEz1RogvkJknrLKhBcubXq4hBSP9pdjPBGapGTg

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > admin.uat.hahapay.cc

Is this malicious?

DNS Resolutions

Port 80

Port 443