Domain > api-6de9439834c9147569741d3c9c9fc010.beta.salla.group

Welcome! Right click nodes and scroll the mouse to navigate the graph.

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-09-15	104.18.37.14 (ClassC)
2025-12-14	172.64.150.242 (ClassC)

HTTP/1.1 301 Moved PermanentlyDate: Sun, 14 Dec 2025 00:02:15 GMTContent-Type: text/htmlContent-Length: 167Connection: keep-aliveCache-Control: max-age3600Expires: Sun, 14 Dec 2025 01:02:15 GMTLocation: https://api-6de9439834c9147569741d3c9c9fc010.beta.salla.group/Access-Control-Allow-Headers: Accept, Accept-Charset, Accept-Datetime, Accept-Encoding, Accept-Ext, Accept-Features, Accept-Language, Accept-Params, Accept-Ranges, Access-Control-Allow-Credentials, Access-Control-Allow-Headers, Access-Control-Allow-Methods, Access-Control-Allow-Origin, Access-Control-Expose-Headers, Access-Control-Max-Age, Access-Control-Request-Headers, Access-Control-Request-Method, Age, Allow, Authorization, Cache-Control, Compliance, Connection, Content-Base, Content-Disposition, Content-Encoding, Content-ID, Content-Language, Content-Length, Content-Location, Content-MD5, Content-Range, Content-Script-Type, Content-Security-Policy, Content-Style-Type, Content-Transfer-Encoding, Content-Type, Content-Version, Cookie,  ETag, Expect, Expires, Ext, From, GET, HEAD, HTTP-date, Host, IM, If, If-Match, If-Modified-Since, If-None-Match, If-Range, If-Unmodified-Since, Keep-Alive, Label, Last-Event-ID, Last-Modified, Link, Location, MIME-Version, Man, Max-Forwards, Media-Range, Message-ID, Meter, Negotiate, Non-Compliance, OPTION, OPTIONS, OWS, Opt, Optional, Ordering-Type, Origin, Overwrite, P3P, PEP, PICS-Label, POST, PUT, Pep-Info, Permanent, Position, Pragma, ProfileObject, Protocol, Protocol-Query, Protocol-Request, Referer, Refresh, Resolution-Hint, Resolver-Location, Retry-After, Safe, Server, Set-Cookie, Set-Cookie2, SetProfile, SoapAction, Status, Status-URI, Strict-Transport-Security,  Transfer-Encoding, URI, Upgrade, User-Agent, Variant-Vary, Vary, Version, Via, X-Forwarded-For, X-Forwarded-Port, X-Forwarded-Proto, X-Frame-Options, X-Modified, X-Requested-With, s-store-id, X-API-KEY, s-theme-id, source, x-store-id, x-csrf-token, x-salla-service, cf-access-client-secret, cf-access-client-id, store-identifier, s-source, s-app-version, , s-app-os, currency, s-user-id, x-recaptcha-token, S-Store-Plan, novu-api-version, x-error-silenced, s-store-plan, mahly-app-version, s-app-name, mahly-app-env, mahly-environment, s-no-cache, sec-ch-ua, sec-ch-ua-mobile, sec-ch-ua-platform, s-base-urlAccess-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS, PATCHAccess-Control-Allow-Origin: *Server: cloudflareCF-RAY: 9ad96e6bcf89ff13-PDXalt-svc: h3:443; ma86400

html>head>title>301 Moved Permanently/title>/head>body>center>h1>301 Moved Permanently/h1>/center>hr>center>cloudflare/center>/body>/html>

Port 443

HTTP/1.1 302 Moved TemporarilyDate: Sun, 14 Dec 2025 00:02:15 GMTContent-Type: text/htmlContent-Length: 143Connection: keep-aliveSet-Cookie: CF_AppSessionn4fe3bd5f6baa49b1; ExpiresMon, 15 Dec 2025 00:02:15 GMT; Path/; Secure; HttpOnlyAccess-Control-Allow-Credentials: trueCache-Control: private, max-age0, no-store, no-cache, must-revalidate, post-check0, pre-check0Expires: Thu, 01 Jan 1970 00:00:01 GMTLocation: https://salla.cloudflareaccess.com/cdn-cgi/access/login/api-6de9439834c9147569741d3c9c9fc010.beta.salla.group?kida16fd41b0632e88ef2b4e6595f3e4026b6725a707c1d1dfaa3314def64f62090&redirect_url%2F&metaeyJraWQiOiI1YzhmYzc2M2UyYzdkM2Y5MWRiNTdiNTJhZmZlNWQwMjVkZWIyMjRiNWM1MTdlYmNmZTgyNWNmMTc4YmM1YmY0IiwiYWxnIjoiUlMyNTYiLCJ0eXAiOiJKV1QifQ.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.U4ifY45ft74tlSkD_0JQDR08B31UkLWThWsHq8DVOTjOua5k1OO9WYVdOJVm6CEZCXBr0U4CASSfcxMK2d2_l6e1SBcUCOoYJVZKf5BRBv9Q2c_lGCxkH1dnqxuza1qNmsLxa6k0SAJ5an6s56OJT2Km6i7FEdzHAPQDoCV1yLOyKzxbwapz1X-Bie2qkXc8PyJdxYDTUVFDqHEzIdLEWQ_dYh9FiRqTG6pAeMjp45xyZRIIgxmSInLg_eJHaKJiWpUHRaQDnd2gkAGjKZvCKw82sOi-TBlpG1zjvNSRSju0i1J7R1Qm6hYaxqdNh5EBZjw-JTZu92ZEyvyU00rhVAAccess-Control-Allow-Headers: Accept, Accept-Charset, Accept-Datetime, Accept-Encoding, Accept-Ext, Accept-Features, Accept-Language, Accept-Params, Accept-Ranges, Access-Control-Allow-Credentials, Access-Control-Allow-Headers, Access-Control-Allow-Methods, Access-Control-Allow-Origin, Access-Control-Expose-Headers, Access-Control-Max-Age, Access-Control-Request-Headers, Access-Control-Request-Method, Age, Allow, Authorization, Cache-Control, Compliance, Connection, Content-Base, Content-Disposition, Content-Encoding, Content-ID, Content-Language, Content-Length, Content-Location, Content-MD5, Content-Range, Content-Script-Type, Content-Security-Policy, Content-Style-Type, Content-Transfer-Encoding, Content-Type, Content-Version, Cookie,  ETag, Expect, Expires, Ext, From, GET, HEAD, HTTP-date, Host, IM, If, If-Match, If-Modified-Since, If-None-Match, If-Range, If-Unmodified-Since, Keep-Alive, Label, Last-Event-ID, Last-Modified, Link, Location, MIME-Version, Man, Max-Forwards, Media-Range, Message-ID, Meter, Negotiate, Non-Compliance, OPTION, OPTIONS, OWS, Opt, Optional, Ordering-Type, Origin, Overwrite, P3P, PEP, PICS-Label, POST, PUT, Pep-Info, Permanent, Position, Pragma, ProfileObject, Protocol, Protocol-Query, Protocol-Request, Referer, Refresh, Resolution-Hint, Resolver-Location, Retry-After, Safe, Server, Set-Cookie, Set-Cookie2, SetProfile, SoapAction, Status, Status-URI, Strict-Transport-Security,  Transfer-Encoding, URI, Upgrade, User-Agent, Variant-Vary, Vary, Version, Via, X-Forwarded-For, X-Forwarded-Port, X-Forwarded-Proto, X-Frame-Options, X-Modified, X-Requested-With, s-store-id, X-API-KEY, s-theme-id, source, x-store-id, x-csrf-token, x-salla-service, cf-access-client-secret, cf-access-client-id, store-identifier, s-source, s-app-version, , s-app-os, currency, s-user-id, x-recaptcha-token, S-Store-Plan, novu-api-version, x-error-silenced, s-store-plan, mahly-app-version, s-app-name, mahly-app-env, mahly-environment, s-no-cache, sec-ch-ua, sec-ch-ua-mobile, sec-ch-ua-platform, s-base-urlAccess-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS, PATCHAccess-Control-Allow-Origin: *Server: cloudflareCF-RAY: 9ad96e6c3f46ef14-PDXalt-svc: h3:443; ma86400

html>head>title>302 Found/title>/head>body>center>h1>302 Found/h1>/center>hr>center>cloudflare/center>/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > api-6de9439834c9147569741d3c9c9fc010.beta.salla.group

Is this malicious?

DNS Resolutions

Port 80

Port 443