Domain > qa1-s2.click

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2020-02-12	13.227.43.121 (ClassC)
2020-02-12	13.227.43.6 (ClassC)
2020-05-03	13.225.190.45 (ClassC)
2020-05-03	13.225.190.8 (ClassC)
2020-08-17	13.224.193.129 (ClassC)
2020-08-17	13.224.193.54 (ClassC)
2020-09-10	13.225.65.120 (ClassC)
2020-09-10	13.225.65.19 (ClassC)
2020-11-01	65.8.186.61 (ClassC)
2020-11-01	65.8.186.10 (ClassC)
2020-11-01	65.8.186.2 (ClassC)
2020-11-01	65.8.186.30 (ClassC)
2020-11-27	52.85.134.35 (ClassC)
2020-12-02	99.84.176.46 (ClassC)
2020-12-02	99.84.176.5 (ClassC)
2024-08-22	99.84.66.62 (ClassC)
2024-11-12	204.246.191.104 (ClassC)
2025-02-01	99.84.66.57 (ClassC)
2025-04-16	204.246.191.109 (ClassC)
2025-08-03	99.84.66.84 (ClassC)
2025-09-11	99.84.66.79 (ClassC)
2025-10-04	18.161.6.66 (ClassC)
2025-10-20	3.169.173.17 (ClassC)
2026-02-07	3.169.173.123 (ClassC)
2026-02-25	18.161.6.96 (ClassC)

HTTP/1.1 200 OKContent-Type: text/htmlContent-Length: 27849Connection: keep-aliveDate: Fri, 23 Feb 2024 17:35:59 GMTServer: nginx/1.12.2Last-Modified: Thu, 30 Nov 2023 14:33:05 GMTETag: 65689d21-6cc9C

!doctype html>html>	head>		title>Tag System Test Page/title>		style>			form {				margin-bottom: 10px;			}			textarea {				vertical-align: top;				width: 400px;			}		/style>	/head>	body>		h1>script>document.write(document.title);/script>/h1>		p>Add GET or HASH params into page URL to pass them to Tag System iframe/p>		div idcontrols styledisplay: none>			div styledisplay: inline-block>				h3>Response/h3>				textarea idresponse styleheight: 200px disabled>/textarea>			/div>			div styledisplay: inline-block>				h3>Error/h3>				textarea iderror styleheight: 200px disabled>/textarea>			/div>			h3>Commands/h3>			form idping>				button typesubmit>ping/button>			/form>			form idget>				button typesubmit>get/button>			/form>			form idclear>				button typesubmit>clear/button>			/form>			form idsetQuarantine>				button typesubmit>setQuarantine/button>				input typetext namevalue placeholdervalue />			/form>			form idsetHasBackgroundInfo>				button typesubmit>setHasBackgroundInfo/button>				select namevalue>					option>true/option>					option>false/option>				/select>			/form>			form idsetDeviceId>				button typesubmit>setDeviceId/button>				input typetext namevalue placeholdervalue />			/form>			form idsyncWithAdh>				button typesubmit>syncWithAdh/button>			/form>			h3>Store Commands/h3>			form idstore.set>				button typesubmit>store.set/button>				input typetext namekey placeholderkey />				input typetext namevalue placeholdervalue />				label>input typecheckbox nameacl.get valueyes /> acl.get/label>				label>input typecheckbox nameacl.list valueyes /> acl.list/label>			/form>			form idstore.get>				button typesubmit>store.get/button>				input typetext namekey placeholderkey />			/form>			form idstore.list>				button typesubmit>store.list/button>				input typetext nameprefix placeholderprefix />			/form>			form idstore.attach>				button typesubmit>store.attach/button>				textarea namejson>{}/textarea>			/form>			form idstore.updateTTL>				button typesubmit>store.updateTTL/button>				input typenumber namettl placeholderdays

Port 443

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > qa1-s2.click

Is this malicious?

DNS Resolutions

Port 80

Port 443