Domain > dev2.nidhi.apcfss.in

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-08-04	108.139.47.120 (ClassC)
2025-08-04	108.139.47.96 (ClassC)
2026-01-19	3.169.173.47 (ClassC)

HTTP/1.1 301 Moved PermanentlyServer: CloudFrontDate: Mon, 19 Jan 2026 01:01:04 GMTContent-Type: text/htmlContent-Length: 167Connection: keep-aliveLocation: https://dev2.nidhi.apcfss.in/X-Cache: Redirect from cloudfrontVia: 1.1 2d69093e294db929b26be80ccee94472.cloudfront.net (CloudFront)X-Amz-Cf-Pop: HIO52-P4X-Amz-Cf-Id: Cn1I4yp3fMOBuhjuC8yjaA0wg6wMGhhK-iIMNFaYeYBdfGLYhIxXzQX-XSS-Protection: 1; modeblockX-Frame-Options: DENYReferrer-Policy: no-referrerContent-Security-Policy: object-src *.ap.gov.in *.gov.in *.dev.nidhi.apcfss.in *.uat.nidhi.apcfss.in *.test.nidhi.apcfss.in *.ptest.nidhi.apcfss.in *.apcfss.in self blob:; default-src *.ap.gov.in *.gov.in *.dev.nidhi.apcfss.in *.uat.nidhi.apcfss.in *.test.nidhi.apcfss.in *.ptest.nidhi.apcfss.in *.apcfss.in self; script-src *.ap.gov.in *.gov.in *.dev.nidhi.apcfss.in *.uat.nidhi.apcfss.in *.ptest.nidhi.apcfss.in *.test.nidhi.apcfss.in *.apcfss.in www.counter12.com s4.histats.com s10.histats.com self unsafe-inline unsafe-eval; style-src https://unpkg.com/ fonts.googleapis.com self unsafe-inline; img-src *.tile.openstreetmap.org www.counter12.com *.ap.gov.in *.gov.in *.dev.nidhi.apcfss.in *.uat.nidhi.apcfss.in *.ptest.nidhi.apcfss.in *.test.nidhi.apcfss.in *.apcfss.in public-resources-nidhi-dev.s3.ap-south-1.amazonaws.com data: blob: filesystem: cid:; connect-src https://s3.ap-south-1.amazonaws.com *.lambda-url.ap-south-1.on.aws https://localhost.emudhra.com:26769 *.googleapis.com *.ap.gov.in *.gov.in *.dev.nidhi.apcfss.in *.ptest.nidhi.apcfss.in *.uat.nidhi.apcfss.in *.test.nidhi.apcfss.in self; base-uri self; form-action uatmerchant.onlinesbi.sbi self; frame-ancestors *.ap.gov.in *.gov.in *.dev.nidhi.apcfss.in *.ptest.nidhi.apcfss.in *.uat.nidhi.apcfss.in *.test.nidhi.apcfss.in https://test2.nidhi.apcfss.in https://dev2.nidhi.apcfss.in *.nidhi.apcfss.in https://qascfms.apcfss.in *.apcfss.in self ; font-src data: fonts.gstatic.com self; media-src ssl.gstatic.com blob: data: self; frame-src www.google.com *.ap.gov.in *.gov.in *.nidhi.apcfss.in *.dev.nidhi.apcfss.in *.ptest.nidhi.apcfss.in *.uat.nidhi.apcfss.in *.test.nidhi.apcfss.in *.apcfss.in data: blob:; manifest-src self; worker-src self; child-src self;X-Content-Type-Options: nosniffCache-Control: no-cache, public, max-age0, s-maxage3600, proxy-revalidateExpect-CT: enforce, max-age3600X-Permitted-Cross-Domain-Policies: noneVary: Origin

html>head>title>301 Moved Permanently/title>/head>body>center>h1>301 Moved Permanently/h1>/center>hr>center>CloudFront/center>/body>/html>

Port 443

HTTP/1.1 200 OKServer: CloudFrontContent-Type: text/htmlContent-Length: 644Connection: keep-aliveDate: Mon, 19 Jan 2026 01:01:06 GMTLast-Modified: Thu, 15 May 2025 10:42:39 GMTETag: ac822977482df16826d0afe9a76d782fx-amz-server-side-encryption: AES256x-amz-version-id: nullAccept-Ranges: bytesX-Cache: Miss from cloudfrontVia: 1.1 3caf9df4ca497afd40efb87f8957a7fa.cloudfront.net (CloudFront)X-Amz-Cf-Pop: HIO52-P4X-Amz-Cf-Id: wMqvd3_PQgi9SrbiVFnDDDy31RceIMJzPNaNrWET87DWBOd94VhSKQX-XSS-Protection: 1; modeblockX-Frame-Options: DENYReferrer-Policy: no-referrerContent-Security-Policy: object-src *.ap.gov.in *.gov.in *.dev.nidhi.apcfss.in *.uat.nidhi.apcfss.in *.test.nidhi.apcfss.in *.ptest.nidhi.apcfss.in *.apcfss.in self blob:; default-src *.ap.gov.in *.gov.in *.dev.nidhi.apcfss.in *.uat.nidhi.apcfss.in *.test.nidhi.apcfss.in *.ptest.nidhi.apcfss.in *.apcfss.in self; script-src *.ap.gov.in *.gov.in *.dev.nidhi.apcfss.in *.uat.nidhi.apcfss.in *.ptest.nidhi.apcfss.in *.test.nidhi.apcfss.in *.apcfss.in www.counter12.com s4.histats.com s10.histats.com self unsafe-inline unsafe-eval; style-src https://unpkg.com/ fonts.googleapis.com self unsafe-inline; img-src *.tile.openstreetmap.org www.counter12.com *.ap.gov.in *.gov.in *.dev.nidhi.apcfss.in *.uat.nidhi.apcfss.in *.ptest.nidhi.apcfss.in *.test.nidhi.apcfss.in *.apcfss.in public-resources-nidhi-dev.s3.ap-south-1.amazonaws.com data: blob: filesystem: cid:; connect-src https://s3.ap-south-1.amazonaws.com *.lambda-url.ap-south-1.on.aws https://localhost.emudhra.com:26769 *.googleapis.com *.ap.gov.in *.gov.in *.dev.nidhi.apcfss.in *.ptest.nidhi.apcfss.in *.uat.nidhi.apcfss.in *.test.nidhi.apcfss.in self; base-uri self; form-action uatmerchant.onlinesbi.sbi self; frame-ancestors *.ap.gov.in *.gov.in *.dev.nidhi.apcfss.in *.ptest.nidhi.apcfss.in *.uat.nidhi.apcfss.in *.test.nidhi.apcfss.in https://test2.nidhi.apcfss.in https://dev2.nidhi.apcfss.in *.nidhi.apcfss.in https://qascfms.apcfss.in *.apcfss.in self ; font-src data: fonts.gstatic.com self; media-src ssl.gstatic.com blob: data: self; frame-src www.google.com *.ap.gov.in *.gov.in *.nidhi.apcfss.in *.dev.nidhi.apcfss.in *.ptest.nidhi.apcfss.in *.uat.nidhi.apcfss.in *.test.nidhi.apcfss.in *.apcfss.in data: blob:; manifest-src self; worker-src self; child-src self;X-Content-Type-Options: nosniffStrict-Transport-Security: max-age31536000; includeSubDomains; preloadCache-Control: no-cache, public, max-age0, s-maxage3600, proxy-revalidateExpect-CT: enforce, max-age3600X-Permitted-Cross-Domain-Policies: noneVary: Origin

!doctype html>html langen>head>meta charsetutf-8/>link relicon href/favicon.ico/>meta nameviewport contentwidthdevice-width,initial-scale1/>meta nametheme-color content#000000/>meta namedescription contentLogin Page For Expenditure,Budget And Works/>link relapple-touch-icon href/logo192.png/>link relmanifest href/manifest.json/>title>Login/title>script deferdefer src/static/js/main.6fa00cf1.js>/script>link href/static/css/main.80cdb355.css relstylesheet>/head>body>noscript>You need to enable JavaScript to run this app./noscript>div idroot>/div>/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > dev2.nidhi.apcfss.in

Is this malicious?

DNS Resolutions

Port 80

Port 443