Domain > api.qa1.sitickets.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2023-08-01	35.168.203.189 (ClassC)
2025-09-21	18.204.122.196 (ClassC)

HTTP/1.1 302 FoundDate: Sun, 21 Sep 2025 16:00:09 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: keep-aliveServer: nginxX-Powered-By: PHP/7.4.33Cache-Control: no-cache, privateLocation: https://api.qa1.sitickets.com/adminSet-Cookie: XSRF-TOKENeyJpdiI6IitMaXovZTZvQTZqL0owaStuV3Z1aWc9PSIsInZhbHVlIjoiNVdWbCtyTlI2b2JpaEJIakkwNCt1R2ZxN2FvSXlIY0VialhjQUdxQkl3bk5ZUWVGVnlSWlk1NWZQdmpMM3M1Qi9Nb3puQTRocEE5Yy9KeGM1RXZrOXVQOXVDNXFVVkVua3FFSGVlZ2RoS1VvcG52R3hrRXNsQ05YVnhKSXYrVmkiLCJtYWMiOiJhNWMwM2MzNzIyY2ZmNWU1N2I1YWM0YjAyMDk2NzJmYWNiZTJlNzU1MWIyNjQyNDBiYzQzZGY3YzIwYzFmZmNlIiwidGFnIjoiIn0%3D; expiresMon, 22-Sep-2025 16:00:09 GMT; Max-Age86400; path/Set-Cookie: seyJpdiI6InlkbXNKYm4wSC9BUHFMODRESDhuYmc9PSIsInZhbHVlIjoidTNvdXUyWDJ3Z091c3FiV3FPU0kwOTJzVU1rQ3U5Y2ErakJXYnd5VDZRZkdKZHEyWlNlWWdWTVlyYkNZR05GMXowVVJaTXQ5TThaNDZyWDZRaUM2YmJDTm5hdHptQWpBaFE3bkR0ZUZKU3lmTHpMMURFZVQyOFNGcXRBWDRPQVYiLCJtYWMiOiIxZTQ4YTY1MzVmMjMzMGQ5ZThkZDBhNzMxZjI4ODhiNWM0NTFiZWJlMmI4MDMyMzdlYjcwNGJkNWZkODY2Mjk3IiwidGFnIjoiIn0%3D; expiresMon, 22-Sep-2025 16:00:09 GMT; Max-Age86400; path/; httponlyAccess-Control-Allow-Credentials: trueAccess-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONSAccess-Control-Allow-Headers: Authorization, Origin, X-Requested-With, Content-Type, AcceptX-Robots-Tag: noindex

!DOCTYPE html>html>    head>        meta charsetUTF-8 />        meta http-equivrefresh content0;urlhttps://api.qa1.sitickets.com/admin />        title>Redirecting to https://api.qa1.sitickets.com/admin/title>    /head>    body>        Redirecting to a hrefhttps://api.qa1.sitickets.com/admin>https://api.qa1.sitickets.com/admin/a>.    /body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > api.qa1.sitickets.com

Is this malicious?

DNS Resolutions

Port 443