Domain > alcazar.adc.aws.dev

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-07-22	18.165.116.18 (ClassC)
2025-10-13	3.169.173.82 (ClassC)

HTTP/1.1 403 ForbiddenServer: CloudFrontContent-Type: text/htmlContent-Length: 7660Connection: keep-aliveDate: Mon, 13 Oct 2025 14:40:44 GMTLast-Modified: Mon, 13 Oct 2025 13:52:48 GMTETag: b57d2f2f1d19acd55bd83bed66987886x-amz-server-side-encryption: aws:kmsx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:us-east-1:717279706693:key/9c56337e-d289-4287-bfca-05f046be8fa1x-amz-version-id: dDqvFSCLFImcP6X3JTZePs0vCqmzDPDYAccept-Ranges: bytesX-Cache: Error from cloudfrontVia: 1.1 5ec2b95241693f962e2ff4afc726b38e.cloudfront.net (CloudFront)X-Amz-Cf-Pop: HIO52-P4X-Amz-Cf-Id: He52ktnadaDq53CKBwhl-8uCCmlMpkRNLkzruK_jea3MgrBVuQDVSQX-XSS-Protection: 1; modeblockX-Frame-Options: DENYReferrer-Policy: no-referrerContent-Security-Policy: default-src self; script-src self sha256-f5Qev4k91GCAMwlKVIS2SU+h4uI1PsF6ZgTK07JSrRM; connect-src self https://api.alcazar.adc.aws.dev/ https://midway-auth.amazon.com/; upgrade-insecure-requests; frame-ancestors self https://w.amazon.com/;X-Content-Type-Options: nosniffStrict-Transport-Security: max-age51840000; includeSubDomains; preloadCache-Control: no-store, no-cachePragma: no-cacheVary: Origin

!doctype html>html> head>   script typetext/javascript>        function getParameterByName(name, url) {            if (!url) url  window.location.href;            name  name.replace(/\\/g, \\$&);            var regex  new RegExp(?& + name + ((^&#*)|&|#|$)),            results  regex.exec(url);            if (!results) return null;            if (!results2) return ;            return decodeURIComponent(results2.replace(/\+/g,  ));        }				function getValidURL(url) {            try {                return new URL(url);            } catch (e) {                return null;            }        }/*! * JavaScript Cookie v2.1.4 * https://github.com/js-cookie/js-cookie * * Copyright 2006, 2015 Klaus Hartl & Fagner Brack * Released under the MIT license */;(function (factory) {    var registeredInModuleLoader  false;    if (typeof define  function && define.amd) {        define(factory);        registeredInModuleLoader  true;    }    if (typeof exports  object) {        module.exports  factory();        registeredInModuleLoader  true;    }    if (!registeredInModuleLoader) {        var OldCookies  window.Cookies;        var api  window.Cookies  factory();        api.noConflict  function () {            window.Cookies  OldCookies;            return api;        };    }}(function () {    function extend () {        var i  0;        var result  {};        for (; i  arguments.length; i++) {            var attributes  arguments i ;            for (var key in attributes) {                resultkey  attributeskey;            }        }        return result;    }    function init (converter) {        function api (key, value, attributes) {            var result;            if (typeof document  undefined) {                return;            }            // Write            if (arguments.length > 1) {                attributes  extend({                    path: /                }, api.defaults, attributes);                if (typeof attributes.expires  number) {                    var expires  new Date();                    expires.setMilliseconds(expires.getMilliseconds() + attributes.expires * 864e+5);                    attributes.expires  expires;                }                // Were using expires because max-age is not supported by IE                attributes.expires  attributes.expires ? attributes.expires.toUTCString() : ;                try {                    result  JSON.stringify(value);                    if (/^\{\/.test(result)) {                        value  result;                    }                } catch (e) {}                if (!converter.write) {                    value  encodeURIComponent(String(value))                        .replace(/%(23|24|26|2B|3A|3C|3E|3D|2F|3F|40|5B|5D|5E|60|7B|7D|7C)/g, decodeURIComponent);                } else {                    value  converter.write(value, key);                }                key  encodeURIComponent(String(key));                key  key.replace(/%(23|24|26|2B|5E|60|7C)/g, decodeURIComponent);                key  key.replace(//g, escape);                var stringifiedAttributes  ;                for (var attributeName in attributes) {                    if (!attributesattributeName) {                        continue;                    }                    stringifiedAttributes + ;  + attributeName;                    if (attributesattributeName  true) {                        continue;                    }                    stringifiedAttributes +  + attributesattributeName;                }                return (document.cookie  key +  + value + stringifiedAttributes);            }            // Read            if (!key) {                result  {};            }            // To prevent the for loop in the first place assign an empty array            // in case there are no cookies at all. Also prevents odd result when            // calling get()            var cookies  document.cookie ? document.cookie.split(; ) : ;            var rdecode  /(%0-9A-Z{2})+/g;            var i  0;            for (; i  cookies.length; i++) {                var parts  cookiesi.split();                var cookie  parts.slice(1).join();                if (cookie.charAt(0)  ) {                    cookie  cookie.slice(1, -1);                }                try {                    var name  parts0.replace(rdecode, decodeURIComponent);                    cookie  converter.read ?                        converter.read(cookie, name) : converter(cookie, name) ||                        cookie.replace(rdecode, decodeURIComponent);                    if (this.json) {                        try {                            cookie  JSON.parse(cookie);                        } catch (e) {}                    }                    if (key  name) {                        result  cookie;                        break;                    }                    if (!key) {                        resultname  cookie;                    }                } catch (e) {}            }            return result;        }        api.set  api;        api.get  function (key) {            return api.call(api, key);        };        api.getJSON  function () {            return api.apply({                json: true            }, .slice.call(arguments));        };        api.defaults  {};        api.remove  function (key, attributes) {            api(key, , extend(attributes, {                expires: -1            }));        };        api.withConverter  init;        return api;    }    return init(function () {});}));        var policy  getParameterByName(policy);        var kpid  getParameterByName(kpid);        var exp  getParameterByName(exp);        var sig  getParameterByName(sig);		var encodedTargetUrl  getParameterByName(encodedTargetUrl);        var decodedTargetUrl  encodedTargetUrl && decodeURIComponent(encodedTargetUrl);        var validTargetURL  getValidURL(decodedTargetUrl)        if (policy && kpid && exp && sig) {            var curr_origin  window.location.origin;            Cookies.set(CloudFront-Policy, policy, { secure: true, sameSite: None, expires: 1 });            Cookies.set(CloudFront-Key-Pair-Id, kpid, { secure: true, sameSite: None, expires: 1 });            Cookies.set(CloudFront-Expiration, exp, { secure: true, sameSite: None, expires: 1 });            Cookies.set(CloudFront-Signature, sig, { secure: true, sameSite: None, expires: 1 });            if(validTargetURL && curr_origin  validTargetURL.origin) {                window.location.replace(decodedTargetUrl);            } else {                window.location.replace(curr_origin);            }        } else if (Cookies.get(CloudFront-Policy)){            //Nothing to do.        } else {            var referrer  window.location            var encodedUrl  encodeURIComponent(referrer.href)            window.location.replace(https://cloudfrontsigner.ninjas.security.a2z.com/sign?encodedTargetUrl+encodedUrl);        }        /script>  /head>  body>   p>Redirecting you for Auth/p>   !-- This one should be a Bindle that doesnt exist, and triggers a 400 response from ECS. -->   div styledisplay:none idbindlediv>   amzn1.bindle.resource.cfmn2a4qljcqgou6hq7q  /div>    /body>/html>

Subdomains

Date	Domain	IP
ui.us-west-2.tooling.d2.adc.aws.dev	2024-06-03	35.80.249.250
coral-prod.salsa.adc.aws.dev	2024-06-09	54.172.247.111
spd.onboard.adc.aws.dev	2024-05-30	18.169.58.21
mvp.onboard.adc.aws.dev	2024-06-09	18.233.130.193
api.us-east-1.pendulum.adc.aws.dev	2025-04-23	99.84.66.103
api.eu-west-2.pendulum.adc.aws.dev	2020-09-11	13.249.93.128
awsauth.desktop-smaca.alpha.pendulum.adc.aws.dev	2024-12-27	44.215.251.28
web-api.desktop-smaca.alpha.pendulum.adc.aws.dev	2024-12-06	13.224.14.102
api.us-east-1.desktop-zhadanie.alpha.pendulum.adc.aws.dev	2024-06-04	204.246.191.32
regionapi.us-east-1.desktop-zhadanie.alpha.pendulum.adc.aws.dev	2024-10-26	3.163.165.47
docrepo.us-east-1.desktop-zhadanie.alpha.pendulum.adc.aws.dev	2024-12-07	3.163.24.8
employee.desktop-zhadanie.alpha.pendulum.adc.aws.dev	2025-03-03	18.161.6.79
mapper.desktop-zhadanie.alpha.pendulum.adc.aws.dev	2025-04-23	18.65.229.122
api.us-east-1.desktop-orendavi.alpha.pendulum.adc.aws.dev	2024-10-24	99.84.66.33
api.desktop-orendavi.alpha.pendulum.adc.aws.dev	2024-06-15	204.246.191.48
mapper.desktop-orendavi.alpha.pendulum.adc.aws.dev	2025-01-25	108.138.94.21
api.desktop-sottilej.alpha.pendulum.adc.aws.dev	2022-04-14	108.156.107.64
api.desktop-makanacm.alpha.pendulum.adc.aws.dev	2021-07-02	99.84.64.94
reports.us-east-1.desktop-ttobias.alpha.pendulum.adc.aws.dev	2025-02-09	3.163.165.112
api.us-east-1.desktop-lvessels.alpha.pendulum.adc.aws.dev	2024-08-10	204.246.191.9
employee.desktop-bdougls.alpha.pendulum.adc.aws.dev	2021-07-25	204.246.191.108
forms.desktop-bdougls.alpha.pendulum.adc.aws.dev	2025-05-17	99.84.66.73
api.us-east-1.desktop-tylerlaw.alpha.pendulum.adc.aws.dev	2024-11-24	3.163.189.121
api.ca-central-1.gamma.pendulum.adc.aws.dev	2024-06-18	204.246.191.83
regionapi.ca-central-1.gamma.pendulum.adc.aws.dev	2025-08-13	3.163.24.70
reports.us-east-1.gamma.pendulum.adc.aws.dev	2024-09-10	204.246.191.129
api.gamma.pendulum.adc.aws.dev	2025-04-15	52.84.162.7
forms.gamma.pendulum.adc.aws.dev	2024-12-15	52.84.162.114
beta.pendulum.adc.aws.dev	2024-03-11	108.138.94.7
api.ca-central-1.beta.pendulum.adc.aws.dev	2025-06-15	99.84.66.104
api.us-east-1.beta.pendulum.adc.aws.dev	2024-12-27	18.238.217.110
incidents.us-east-1.beta.pendulum.adc.aws.dev	2025-03-09	18.238.217.66
api.beta.pendulum.adc.aws.dev	2024-10-24	3.163.24.30
mapper.beta.pendulum.adc.aws.dev	2021-07-25	204.246.191.91
api.pendulum.adc.aws.dev	2024-05-30	3.163.24.72
client.beta.mission-bonus.pendulum.adc.aws.dev	2024-08-09	52.7.248.37
alcazar.adc.aws.dev	2025-10-13	3.169.173.82
proxy.aktra.alpha.parker.adc.aws.dev	2024-08-09	44.195.247.9
uqresponse.stone.makanacm.alpha.parker.adc.aws.dev	2024-09-07	44.215.173.91
adc-registry.bogon.alpha.parker.adc.aws.dev	2025-10-06	44.216.168.180
service-registry.bogon.alpha.parker.adc.aws.dev	2024-06-24	54.80.39.198
bucket-registry.bogon.alpha.parker.adc.aws.dev	2024-12-06	54.209.187.108
employeefakeout.asupino.alpha.parker.adc.aws.dev	2025-10-09	50.19.214.245
api.howell.ruhip.alpha.parker.adc.aws.dev	2023-10-25	54.243.244.241
api.howell.ttobias.alpha.parker.adc.aws.dev	2024-06-16	44.194.39.91
notifications.ttobias.alpha.parker.adc.aws.dev	2024-10-04	3.92.156.176
uqmapping.stone.bdougls.alpha.parker.adc.aws.dev	2024-04-30	3.233.200.4
adc-registry.bdougls.alpha.parker.adc.aws.dev	2024-06-09	3.214.181.59
api.howell.mitcliou.alpha.parker.adc.aws.dev	2024-06-09	3.208.42.143
employeefakeout.mitcliou.alpha.parker.adc.aws.dev	2025-09-22	3.224.181.20
bucket-registry.mitcliou.alpha.parker.adc.aws.dev	2024-09-02	34.203.74.220
beta.parker.adc.aws.dev	2024-07-10	204.246.191.116
bucket-registry.iad.beta.parker.adc.aws.dev	2024-06-09	35.153.224.79
uqmapping.stone.iad.prod.parker.adc.aws.dev	2025-10-13	44.217.194.179
proxy.iad.prod.parker.adc.aws.dev	2024-11-22	3.210.192.108
api.smaca.alpha.codewords.adc.aws.dev	2024-06-16	34.206.88.102
proxy.iad.gamma.onedev.adc.aws.dev	2025-07-18	35.171.71.176
beta.service.performance-review.adc.aws.dev	2025-01-10	3.163.165.84
api.beta.service.performance-review.adc.aws.dev	2024-12-19	52.44.127.242
prod.service.performance-review.adc.aws.dev	2024-09-17	3.163.24.9
alpha-us-west-2.caraproxy.adc.aws.dev	2025-02-08	44.234.4.154

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > alcazar.adc.aws.dev

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains