Domain > twistlock-ci.pipeline.k8s.qlikcloud.io

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2024-12-26	44.219.163.136 (ClassC)
2025-01-10	54.205.91.36 (ClassC)
2025-01-14	52.22.94.98 (ClassC)
2025-01-26	54.235.224.186 (ClassC)
2025-04-29	44.196.16.96 (ClassC)
2025-05-13	34.235.212.4 (ClassC)
2025-07-01	3.223.99.56 (ClassC)
2025-07-20	34.225.100.231 (ClassC)

HTTP/1.1 200 OKDate: Thu, 26 Dec 2024 18:01:14 GMTContent-Type: text/html; charsetutf-8Content-Length: 18854Connection: keep-aliveAccept-Ranges: bytesContent-Security-Policy: default-src self unsafe-i

!doctype html>html langen ng-apptwistlock>head>    meta charsetUTF-8>    !-- safari rejects 3rd party cookies when running inside iframe so all client requests must include customer id in Saas mode -->    !-- this base href appends the customer id to all relative urls (resources, api requests etc.) -->    base href/>    meta nameviewport contentwidthdevice-width, initial-scale1>    title>Prisma Cloud/title>    link relicon hrefcss/prisma-cloud.svg>    link relshortcut icon hrefimg/favicon.ico>    !-- preload commonly used fonts, to ensure correct fonts are displayed as soon as the page loads-->    link relpreload hrefcss/webfonts/lato/Lato-Bold.woff2 asfont typefont/woff2 crossoriginanonymous>    link relpreload hrefcss/webfonts/lato/Lato-Light.woff2 asfont typefont/woff2 crossoriginanonymous>    link relpreload hrefcss/webfonts/lato/Lato-Medium.woff2 asfont typefont/woff2 crossoriginanonymous>    link relpreload hrefcss/webfonts/lato/Lato-Semibold.woff2 asfont typefont/woff2        crossoriginanonymous>    link relstylesheet hrefcss/font-kit-lato.css typetext/css>    script>        // this is a constant that is replaced with the actual Twistlock version by the console        // in order to handle upgrade on the client side        const TWISTLOCK_VERSION  31.01.123;        // These are getting replaced with the actual deployment values        const SAAS_DEPLOYMENT  false;        const SAAS_CUSTOMER_ID  ;        const SAAS_ALLOWED_DOMAIN  ;        const SAAS_ALLOWED_DEV_DOMAIN  ;        const CLUSTERED_DB_ENABLED  false;        const PRISMA_APP_DOMAIN  ;        // USER_DATA will be filled with user data from Prisma Cloud message        // in order to allow Pendo to track user interactions.        var USER_DATA;        // set local storage theme to light to avoid partial dark mode look        // tailwind docs: https://tailwindcss.com/docs/dark-mode#supporting-system-preference-and-manual-selection        localStorage.theme  light;    /script>script defer srcdist/runtime.819b37aa76e2c44771c4.js>/script>script defer

Subdomains

Date	Domain	IP
lef.us-east-1.lef-stage.k8s.qlikcloud.io	2024-06-15	54.156.245.72
twistlock-console.pipeline.k8s.qlikcloud.io	2024-06-03	44.214.46.45
twistlock-ci.pipeline.k8s.qlikcloud.io	2024-12-26	44.219.163.136
metrics.bastion.k8s.qlikcloud.io	2025-01-27	3.222.31.119
deadman-stage.shared-services.k8s.qlikcloud.io	2025-01-09	54.160.179.223
apiculturist-stage.shared-services.k8s.qlikcloud.io	2025-03-05	35.169.41.215
apiculturist.shared-services.k8s.qlikcloud.io	2024-12-16	52.1.39.8

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > twistlock-ci.pipeline.k8s.qlikcloud.io

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains