Domain > app5.staging.trevipay.app

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2022-03-25	52.84.121.14 (ClassC)
2025-04-11	99.84.66.114 (ClassC)

HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Fri, 11 Apr 2025 18:54:45 GMTContent-Type: text/htmlContent-Length: 915Connection: keep-aliveX-Cache: Error from cloudfrontVia: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront)X-Amz-Cf-Pop: HIO50-C1X-Amz-Cf-Id: L50gyVcOJ4KvZC4_lN0tx-_pC9r1nTuxQmy-2p9VdB0A03mONRJtKA

!DOCTYPE HTML PUBLIC -//W3C//DTD HTML 4.01 Transitional//EN http://www.w3.org/TR/html4/loose.dtd>HTML>HEAD>META HTTP-EQUIVContent-Type CONTENTtext/html; charsetiso-8859-1>TITLE>ERROR: The request could not be satisfied/TITLE>/HEAD>BODY>H1>403 ERROR/H1>H2>The request could not be satisfied./H2>HR noshade size1px>Bad request.We cant connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.BR clearall>If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.BR clearall>HR noshade size1px>PRE>Generated by cloudfront (CloudFront)Request ID: L50gyVcOJ4KvZC4_lN0tx-_pC9r1nTuxQmy-2p9VdB0A03mONRJtKA/PRE>ADDRESS>/ADDRESS>/BODY>/HTML>

Port 443

HTTP/1.1 200 OKContent-Type: text/html; charsetutf-8Content-Length: 3457Connection: keep-aliveCache-Control: no-cachecontent-security-policy-report-only: connect-src self https://api2.amplitude.com https://app.helphero.co https://md-scp.kampyle.com https://resources.digital-cloud-west.medallia.com https://analytics-fe.digital-cloud-west.medallia.com/api/web/events https://udc-neb.kampyle.com https://rum-collectors.us2.sumologic.com https://api.amplitude.com/ https://ui.staging.batchservice.trevipay.app https://application-center.staging.rms.trevipay.com https://disbursements-ui.staging.trevipay.app https://ui.staging.disputeservice.trevipay.app https://static.staging.trevipay.app https://card-management.beta.trevipay.app https://card-management.beta.trevipay.app https://invoicing.staging.trevipay.app https://bcaas-staging.s3.amazonaws.com;default-src self https://invoicing.staging.trevipay.app https://static.staging.trevipay.app https://ui.staging.batchservice.trevipay.app https://application-center.staging.rms.trevipay.com https://disbursements-ui.staging.trevipay.app https://ui.staging.disputeservice.trevipay.app https://staging.trevipay.app;font-src self https://static.staging.trevipay.app https://resources.digital-cloud-west.medallia.com https://analytics-fe.digital-cloud-west.medallia.com/api/web/events;form-action self https://app.staging.trevipay.app/ https://app.bcaas-staging.msts.com/ https://staging.trevipay.app/ https://bcaas-staging.msts.com/ https://app.caas-staging.msts.com/ https://caas-staging.msts.com/ helphero.co https://settings.luckyorange.net https://storage.googleapis.com https://d10lpsik1i8c69.cloudfront.net https://fs28.formsite.com login.microsoftonline.com;frame-ancestors *.staging.trevipay.app/ *.bcaas-staging.msts.com/ staging.trevipay.app/ bcaas-staging.msts.com/ *.caas-staging.msts.com/ caas-staging.msts.com/ customking.caas-buyer-staging.msts.com msts--intg.sandbox.lightning.force.com hinofleet.hino.com currysbusinesscredit.co.uk mpspay.monolithicpower.com sandiskcredit.com bestaccessfinance.com commercial.harborfreight.com westerndigitalcredit.com *.westerndigitalcredit.com choicedirectpay.com b2bcreditonline.com msts.lightning.force.com;frame-src https://fs28.formsite.com https://resources.digital-cloud-west.medallia.com https://analytics-fe.digital-cloud-west.medallia.com/api/web/events https://trevipay.helpjuice.com https://b2bc-staging-report-temp.s3.us-east-1.amazonaws.com https://rc-ui.staging.trevipay.app/index.html https://ui.staging.batchservice.trevipay.app https://application-center.staging.rms.trevipay.com https://disbursements-ui.staging.trevipay.app https://ui.staging.disputeservice.trevipay.app/ https://rc-ui.staging.trevipay.app/index.html https://form.staging.rms.trevipay.com https://card-management.beta.trevipay.app https://card-management.beta.trevipay.app https://staging.developer.trevipay.app https://invoicing.staging.trevipay.app https://rc-ui.staging.trevipay.app/index.html https://rc-ui.staging.trevipay.app/index.html https://rc-ui.staging.trevipay.app/index.html https://staging.trevipay.app;img-src self https://static.staging.trevipay.app https://udc-neb.kampyle.com https://md-scp.kampyle.com;manifest-src self https://static.staging.trevipay.app;object-src none;report-uri /csp-report;script-src self https://static.staging.trevipay.app unsafe-inline unsafe-eval https://helphero.co https://app.helphero.co https://storage.googleapis.com https://d10lpsik1i8c69.cloudfront.net https://fs28.formsite.com https://resources.digital-cloud-west.medallia.com https://analytics-fe.digital-cloud-west.medallia.com/api/web/events https://md-scp.kampyle.com https://api2.amplitude.com https://s3.amazonaws.com/assets.helpjuice.com/helpjuice.min.js https://ui.staging.batchservice.trevipay.app https://disbursements-ui.staging.trevipay.app https://ui.staging.disputeservice.trevipay.app https://form.staging.rms.trevipay.com https://card-management.beta.trevipay.app https://invoicing.staging.trevipay.app;style-src self https://static.staging.trevipay.app https://md-scp.kampyle.com https://resources.digital-cloud-west.medallia.com https://analytics-fe.digital-cloud-west.medallia.com/api/web/events unsafe-inline;worker-src self;Date: Fri, 11 Apr 2025 18:54:45 GMTstrict-transport-security: max-age31536000; includeSubDomainsx-content-type-options: nosniffx-frame-options: DENYx-xss-protection: 1; modeblockVary: Accept-EncodingX-Cache: Miss from cloudfrontVia: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront)X-Amz-Cf-Pop: HIO50-C1X-Amz-Cf-Id: hmcA93or7vWupTAGLPMOsTwiC7Gg1j4SPt2zrSt2GoC12El-_rRC-w

!DOCTYPE html>html>head>script typetext/javascript>window.RUNTIME_STATIC_ASSETS_PATHhttps://static.staging.trevipay.app/buyer-portal//script>title>TreviPay/title>meta charsetutf-8>meta nameformat-detection contenttelephoneno>meta namemsapplication-tap-highlight contentno>meta nameviewport contentwidthdevice-width,initial-scale1>meta namedescription contentAccess the customer portal sign in page. Log in to use the portal to manage your B2B account and view order history.>link relicon typeimage/ico sizes48x48 href/favicon.ico>link relicon typeimage/svg+xml href/caas-assets/app-main/app-icons/favicon.svg>link relapple-touch-icon href/caas-assets/app-main/app-icons/apple-touch-icon.png>style>#bcaas-invalid-program {                display: none;                font-size: 20px;                position: fixed;                text-align: center;                height: 200px;                width: 400px;                top: 50%;                left: 50%;                margin-top: -100px;                margin-left: -200px;                line-height: 2;                color: #e57373;            }/style>  script typemodule crossorigin src/assets/index-464a7520.js>/script>  link relstylesheet href/assets/index-ce5d5acc.css>link relmanifest href/manifest.json>/head>body>script>window.bcaas{amplitudeToken:79395e425b11d2a88909212299b566f5,mainUrl:https://staging.trevipay.app,isTrackable:true,helpHeroEnabled:false,helpHeroTourId:,sessionId:default,disabledLocales:,features:{batchCharges:true,chargeFee:true,customerRememberDevice:true,disablePasswordRecycleBuyer:true,disablePasswordRecycleClient:false,disablePasswordRecycleSeller:false,disbursementsV1:true,disbursementsV2:true,disputeOutcomes:true,disputesV2:true,embeddedDisputeCenter:true,enableBuyerNotificationPreference:true,enableCancelStandAloneCredit:false,enableChooseGroupTypePage:true,enableCustomerContacts:true,enableCustomerChannel:true,enableCustomerFeeInfo:true,enableDuplicatePayers:true,enablePrimaryContactPage:true,rmsApplicationCenter:true,roleBasedPermissionsFromDatabase:true,serverPagination:true,serverSidePagination:true,tapDisbursements:true,useAutoPayInfoFromB2bc:true,ukEmandate:true,enableDisputePage:true,frontendTelemetry:true,frontendTracking:true,helpFeature:true,medallia:true,useNewWidgets:true},sumologicRumToken:ZaVnC4dhaV2-PYCJO0CbiK5w_mgeZ3C_otWyTMmmIc5pc_GMJXbXZ3K6y-wlVAcfsQiMujlO2Vvj2NTIAqhGhL8Y6fwfFM3MftI4ePmDrjY0RrpWNud5kw,apps:{payByInvoiceTrevipay:{url:https://static.staging.trevipay.app/static/logos/pay-by-invoice-color.svg},ukEmandate:{url:https://static.staging.trevipay.app/static/uk-direct-debit-instruction/direct-debit-instruction-form.pdf}},metaDescription:}/script>div idq-app>/div>div idbcaas-invalid-program>div>This program does not exist./div>/div>script>(function (theElem) {                if (                    window.bcaas &&                    !(                        window.bcaas.currentProgram ||                        (window.bcaas.maintenanceWindow && window.bcaas.maintenanceWindow.isActive)                    )                ) {                    theElem.style.display  block;                }            })(document.getElementById(bcaas-invalid-program));/script>/body>/html>

Subdomains

Date	Domain	IP
app3.staging.trevipay.app	2025-01-20	99.84.66.114
app5.staging.trevipay.app	2025-04-11	99.84.66.114
app-miguel.staging.trevipay.app	2024-07-28	99.84.66.63

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > app5.staging.trevipay.app

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains