Domain > incoming-payments-dev.ggatravelservices.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-09-02	35.164.9.127 (ClassC)
2025-12-05	3.169.173.3 (ClassC)

HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Fri, 05 Dec 2025 18:36:25 GMTContent-Type: text/htmlContent-Length: 915Connection: keep-aliveX-Cache: Error from cloudfrontVia: 1.1 38789cdd14ddea5c4c609cb0e6656396.cloudfront.net (CloudFront)X-Amz-Cf-Pop: HIO52-P4X-Amz-Cf-Id: As__ApGvz1sMjIvwdtcLnAk6amY3tM_URynjLuIfHnRDb1JyKJMNBg

!DOCTYPE HTML PUBLIC -//W3C//DTD HTML 4.01 Transitional//EN http://www.w3.org/TR/html4/loose.dtd>HTML>HEAD>META HTTP-EQUIVContent-Type CONTENTtext/html; charsetiso-8859-1>TITLE>ERROR: The request could not be satisfied/TITLE>/HEAD>BODY>H1>403 ERROR/H1>H2>The request could not be satisfied./H2>HR noshade size1px>Bad request.We cant connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.BR clearall>If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.BR clearall>HR noshade size1px>PRE>Generated by cloudfront (CloudFront)Request ID: As__ApGvz1sMjIvwdtcLnAk6amY3tM_URynjLuIfHnRDb1JyKJMNBg/PRE>ADDRESS>/ADDRESS>/BODY>/HTML>

Port 443

HTTP/1.1 200 OKContent-Type: text/htmlContent-Length: 1280Connection: keep-aliveDate: Fri, 05 Dec 2025 18:36:26 GMTLast-Modified: Wed, 19 Nov 2025 15:56:38 GMTETag: 8fe5919e6c32da1badaaba269e144139x-amz-server-side-encryption: AES256x-amz-version-id: fO2UORGZy_DtcQcLQf8JXB5uSe85o.NCAccept-Ranges: bytesServer: AmazonS3X-Cache: Miss from cloudfrontVia: 1.1 08437041a08295a47ee88412dbd8c35a.cloudfront.net (CloudFront)X-Amz-Cf-Pop: HIO52-P4X-Amz-Cf-Id: 2RYqJlMKnKDrSyit1fAKh3EsPGi9EEO4Rz7tKNu_tD4wEcHmlMDsfA

!DOCTYPE html>html langen>head>    meta charsetUTF-8 />    link relicon typeimage/svg+xml href/vite.svg />    meta nameviewport contentwidthdevice-width, initial-scale1.0 />    meta http-equivContent-Security-Policy contentscript-src self https://js.verygoodsecurity.com https://js3.verygoodsecurity.com https://js.verygoodvault.com https://js3.verygoodvault.com https://test-htp.tokenex.com https://htp.tokenex.com; connect-src self https://incoming-payments-dev.ggatravelservices.com https://incoming-payments-qa.ggatravelservices.com https://*.verygoodproxy.com https://*.vgs.io https://js.verygoodsecurity.com https://js3.verygoodsecurity.com https://js.verygoodvault.com https://js3.verygoodvault.com https://vgs-collect-keeper.apps.verygood.systems https://test-htp.tokenex.com https://htp.tokenex.com; frame-src https://js.verygoodsecurity.com https://js3.verygoodsecurity.com https://js.verygoodvault.com https://js3.verygoodvault.com https://test-htp.tokenex.com https://htp.tokenex.com;>    title>Payment Demos/title>  script typemodule crossorigin src/assets/index-jvBiMSO5.js>/script>  link relstylesheet crossorigin href/assets/index-CmrvJTb3.css>/head>body>div idroot>/div>/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > incoming-payments-dev.ggatravelservices.com

Is this malicious?

DNS Resolutions

Port 80

Port 443