Domain > qa-qmdm.heiway.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2023-12-28	23.48.37.215 (ClassC)
2025-08-01	23.55.168.169 (ClassC)

HTTP/1.1 200 OKContent-Length: 7245Content-Type: text/htmlServer: Accept-Ranges: bytesCache-Control: no-storeETag: 1dc02f1fb412e4dLast-Modified: Fri, 01 Aug 2025 14:38:44 GMTStrict-Transport-Security: max-age31536000; includeSubDomains; preloadX-Frame-Options: same-originFrame-Ancestors: selfX-Content-Type-Options: nosniffReferrer-Policy: same-originX-Powered-By: X-AspNet-Version: Date: Fri, 01 Aug 2025 23:15:18 GMTConnection: keep-aliveSet-Cookie: ARRAffinity051e44bc1d35ac54b54d0f0a190838fb3ed82f05a081014b5b722ef5fc13f30e;Path/;HttpOnly;Secure;Domainhei-qmdm-p-euw-wa-01-quality.azurewebsites.netSet-Cookie: ARRAffinitySameSite051e44bc1d35ac54b54d0f0a190838fb3ed82f05a081014b5b722ef5fc13f30e;Path/;HttpOnly;SameSiteNone;Secure;Domainhei-qmdm-p-euw-wa-01-quality.azurewebsites.net

!DOCTYPE html>html langnl>head>    meta charsetutf-8 />    meta nameviewport contentwidthdevice-width, initial-scale1.0, maximum-scale1.0, user-scalableno />    title>QMDM/title>    base href/ />    link hrefapp.css relstylesheet />    link hrefQatramApp.styles.css relstylesheet />    link hrefappExtended.css relstylesheet />    link hrefmanifest.json relmanifest />    link relapple-touch-icon sizes512x512 hrefQMDM-512.png />    link relapple-touch-icon sizes192x192 hrefQMDM-192.png />    link relshortcut icon hreffavicon-32x32.png>    script typetext/javascript>        !function (T, l, y) { var S  T.location, k  script, D  instrumentationKey, C  ingestionendpoint, I  disableExceptionTracking, E  ai.device., b  toLowerCase, w  crossOrigin, N  POST, e  appInsightsSDK, t  y.name || appInsights; (y.name || Te) && (Te  t); var n  Tt || function (d) { var g  !1, f  !1, m  { initialize: !0, queue: , sv: 5, version: 2, config: d }; function v(e, t) { var n  {}, a  Browser; return nE + id  ab(), nE + type  a, nai.operation.name  S && S.pathname || _unknown_, nai.internal.sdkVersion  javascript:snippet_ + (m.sv || m.version), { time: function () { var e  new Date; function t(e) { var t   + e; return 1  t.length && (t  0 + t), t } return e.getUTCFullYear() + - + t(1 + e.getUTCMonth()) + - + t(e.getUTCDate()) + T + t(e.getUTCHours()) + : + t(e.getUTCMinutes()) + : + t(e.getUTCSeconds()) + . + ((e.getUTCMilliseconds() / 1e3).toFixed(3) + ).slice(2, 5) + Z }(), iKey: e, name: Microsoft.ApplicationInsights. + e.replace(/-/g, ) + . + t, sampleRate: 100, tags: n, data: { baseData: { ver: 2 } } } } var h  d.url || y.src; if (h) { function a(e) { var t, n, a, i, r, o, s, c, u, p, l; g  !0, m.queue  , f || (f  !0, t  h, s  function () { var e  {}, t  d.connectionString; if (t) for (var n  t.split(;), a  0; a  n.length; a++) { var i  na.split(); 2  i.length && (ei0b()  i1) } if (!eC) { var r  e.endpointsuffix, o  r ? e.location : null; eC  https:// + (o ? o + . : ) + dc. + (r || services.visualstudio.com) } return e }(), c  sD || dD || , u  sC, p  u ? u + /v2/track : d.endpointUrl, (l  ).push((n  SDK LOAD Failure: Failed to load Application Insights SDK script (See stack for details), a  t, i  p, (o  (r  v(c, Exception)).data).baseType  ExceptionData, o.baseData.exceptions  { typeName: SDKLoadFailed, message: n.replace(/\./g, -), hasFullStack: !1, stack: n + \nSnippet failed to load  + a +  -- Telemetry is disabled\nHelp Link: https://go.microsoft.com/fwlink/?linkid2128109\nHost:  + (S && S.pathname || _unknown_) + \nEndpoint:  + i, parsedStack:  }, r)), l.push(function (e, t, n, a) { var i  v(c, Message), r  i.data; r.baseType  MessageData; var o  r.baseData; return o.message  AI (Internal): 99 message: + (SDK LOAD Failure: Failed to load Application Insights SDK script (See stack for details) ( + n + )).replace(/\/g, ) + , o.properties  { endpoint: a }, i }(0, 0, t, p)), function (e, t) { if (JSON) { var n  T.fetch; if (n && !y.useXhr) n(t, { method: N, body: JSON.stringify(e), mode: cors }); else if (XMLHttpRequest) { var a  new XMLHttpRequest; a.open(N, t), a.setRequestHeader(Content-type, application/json), a.send(JSON.stringify(e)) } } }(l, p)) } function i(e, t) { f || setTimeout(function () { !t && m.core || a() }, 500) } var e  function () { var n  l.createElement(k); n.src  h; var e  yw; return !e &&  ! e || undefined  nw || (nw  e), n.onload  i, n.onerror  a, n.onreadystatechange  function (e, t) { loaded ! n.readyState && complete ! n.readyState || i(0, t) }, n }(); y.ld  0 ? l.getElementsByTagName(head)0.appendChild(e) : setTimeout(function () { l.getElementsByTagName(k)0.parentNode.appendChild(e) }, y.ld || 0) } try { m.cookie  l.cookie } catch (p) { } function t(e) { for (; e.length;)!function (t) { mt  function () { var e  arguments; g || m.queue.push(function () { mt.apply(m, e) }) } }(e.pop()) } var n  track, r  TrackPage, o  TrackEvent; t(n + Event, n + PageView, n + Exception, n + Trace, n + DependencyData, n + Metric, n + PageViewPerformance, start + r, stop + r, start + o, stop + o, addTelemetryInitializer, setAuthenticatedUserContext, clearAuthenticatedUserContext, flush), m.SeverityLevel  { Verbose: 0, Information: 1, Warning: 2, Error: 3, Critical: 4 }; var s  (d.extensionConfig || {}).ApplicationInsightsAnalytics || {}; if (!0 ! dI && !0 ! sI) { var c  onerror; t(_ + c); var u  Tc; Tc  function (e, t, n, a, i) { var r  u && u(e, t, n, a, i); return !0 ! r && m_ + c({ message: e, url: t, lineNumber: n, columnNumber: a, error: i }), r }, d.autoExceptionInstrumented  !0 } return m }(y.cfg); function a() { y.onInit && y.onInit(n) } (Tt  n).queue && 0  n.queue.length ? (n.queue.push(a), n.trackPageView({})) : a() }(window, document, {            src: https://js.monitor.azure.com/scripts/b/ai.2.min.js,            ld: -1,            crossOrigin: anonymous,            cfg: {                connectionString: InstrumentationKey,                disableFetchTracking: false,                enableCorsCorrelation: true,                enableRequestHeaderTracking: true,                enableResponseHeaderTracking: true            }        });    /script>    script nonceNJhqtyuis0CNwDEdcXZwQA>        function hideBlazorErrorUI() {            var errorUi  document.getElementById(blazor-error-ui);            if (errorUi) {                errorUi.style.display  none;            }        }    /script>/head>body>    div idapp>        div classloading-section>            h2>Loading.../h2>            div classloader mt-5>                div classloader-dot dot1>/div>                div classloader-dot dot2>/div>                div classloader-dot dot3>/div>            /div>        /div>    /div>        div idblazor-error-ui classbg-yellow-100 bottom-0 left-0 fixed text-yellow-900 w-full z-50 pt-2.5 pr-5 pb-3 pl-5 border-t-2 border-yellow-800 hidden stylez-index:9999;>            div classflex justify-between>                span>                    An unhandled error has occurred.                    a href onclickhideBlazorErrorUI() classcursor-pointer underline hover:no-underline>Reload/a>                /span>                a onclickhideBlazorErrorUI()>🗙/a>            /div>        /div>        script src_content/Microsoft.Authentication.WebAssembly.Msal/AuthenticationService.js>/script>        script src_framework/blazor.webassembly.js>/script>        script src_content/Brainsch/brainsch.js>/script>        script srcLogout.js>/script>        script srcformula-editor-dialog.js>/script>        script srcSavedocument.js>/script>/body>

Subdomains

Date	Domain	IP
myaccess-acc.heiway.com	2025-03-05	104.16.107.6
id.omni.heiway.com	2024-11-24	23.215.176.66
mm.omni.heiway.com	2024-11-24	23.213.175.152
acc-mm.omni.heiway.com	2025-04-09	104.98.118.171
qmdm.heiway.com	2024-11-25	23.44.175.8
qa-qmdm.heiway.com	2025-08-01	23.55.168.169
acc-qmdm.heiway.com	2024-08-03	104.96.163.88
acc-id.omni-admin.heiway.com	2024-11-17	23.44.175.47
mm.omni-admin.heiway.com	2025-01-10	23.213.175.209
acc-mm.omni-admin.heiway.com	2024-09-01	23.32.75.152
admin.dgp.heiway.com	2024-11-25	104.96.163.84
www.dgp.heiway.com	2024-11-24	23.215.176.75
bms.heiway.com	2025-07-29	23.55.168.163
api.sandbox.eu01.az.heiway.com	2024-11-24	40.67.205.167
api-portal.sandbox.az.heiway.com	2025-03-30	40.67.205.167

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > qa-qmdm.heiway.com

Is this malicious?

DNS Resolutions

Port 443

Subdomains