Domain > merchant.tatapayments.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2024-03-08	23.205.249.157 (ClassC)
2024-06-08	23.56.168.178 (ClassC)
2025-04-10	23.210.244.151 (ClassC)
2025-11-02	23.216.147.204 (ClassC)

HTTP/1.1 200 OKContent-Type: text/htmlETag: 660c5b34-913Last-Modified: Tue, 02 Apr 2024 19:23:32 GMTX-Content-Type-Options: nosniffX-XSS-Protection: 1; modeblockX-Frame-Options: DENYContent-Security-Policy: default-src self blob:; 		script-src self unsafe-eval unsafe-inline 			https://alcdn.msauth.net 			https://unpkg.com 			https://fonts.googleapis.com             https://www.gstatic.com 			https://login.microsoftonline.com 			https://fonts.gstatic.com; 		style-src self unsafe-inline https://fonts.googleapis.com; 		font-src self https://fonts.gstatic.com; 		connect-src self 			https://api.tatapayments.com 			https://login.microsoftonline.com 			https://unpkg.com 			https://fonts.googleapis.com             https://www.gstatic.com 			https://fonts.gstatic.com; 		img-src self blob: unsafe-eval;X-Akamai-Transformed: 9 1179 0 pmbmRUM,2Cache-Control: must-revalidate, max-age86400Date: Sun, 02 Nov 2025 07:20:08 GMTContent-Length: 5819Connection: keep-aliveServer-Timing: cdn-cache; descREVALIDATEServer-Timing: edge; dur684Server-Timing: origin; dur147Server-Timing: ak_p; desc1762068007495_388944006_1016417150_83895_7119_6_9_-;dur1

!DOCTYPE html>html>head>  !--    If you are serving your web app in a path other than the root, change the    href value below to reflect the base path you are serving from.    The path provided below has to start and end with a slash / in order for    it to work correctly.    For more details:    * https://developer.mozilla.org/en-US/docs/Web/HTML/Element/base    This is a placeholder for base href that will be replaced by the value of    the `--base-href` argument provided to `flutter build`.  -->  base href/>  meta charsetUTF-8>  meta contentIEEdge http-equivX-UA-Compatible>  meta namedescription contentA new Flutter project.>  !-- iOS meta tags & icons -->  meta nameapple-mobile-web-app-capable contentyes>  meta nameapple-mobile-web-app-status-bar-style contentblack>  meta nameapple-mobile-web-app-title contentMerchant Dashboard>  link relapple-touch-icon hreficons/Icon-192.png>  !-- Favicon -->  link relicon typeimage/png hreffavicon.png/>  title> TATA PAY/title>  link relmanifest hrefmanifest.json>  script>    // The value below is injected by flutter build, do not touch.    var serviceWorkerVersion  629505035;  /script>  !-- This script adds the flutter initialization JS code -->  script srcflutter.js defer>/script>  script typetext/javascript srchttps://alcdn.msauth.net/browser/2.13.1/js/msal-browser.min.js          integritysha384-2Vr9MyareT7qv+wLp1zBt78ZWB4aljfCTMUrml3/cxm0W81ahmDOC6uyNmmn0Vrc          crossoriginanonymous>/script>  script srcassets/packages/aad_oauth/assets/msalv2.js>/script>script>(window.BOOMR_mqwindow.BOOMR_mq||).push(addVar,{rua.upush:false,rua.cpush:false,rua.upre:false,rua.cpre:false,rua.uprl:false,rua.cprl:false,rua.cprf:false,rua.trans:,rua.cook:false,rua.ims:false,rua.ufprl:false,rua.cfprl:false,rua.isuxp:false,rua.texp:norulematch,rua.ceh:false,rua.ueh:false,rua.ieh.st:0});/script>                              script>!function(a){var ehttps://s.go-mpulse.net/boomerang/,taddEventListener;if(FalseTrue)a.BOOMR_configa.BOOMR_config||{},a.BOOMR_config.PageParamsa.BOOMR_config.PageParams||{},a.BOOMR_config.PageParams.pci!0,ehttps://s2.go-mpulse.net/boomerang/;if(window.BOOMR_API_key7ZCLC-WD8HC-W3925-DDW59-BNRVV,function(){function n(e){a.BOOMR_onloade&&e.timeStamp||(new Date).getTime()}if(!a.BOOMR||!a.BOOMR.version&&!a.BOOMR.snippetExecuted){a.BOOMRa.BOOMR||{},a.BOOMR.snippetExecuted!0;var i,_,o,rdocument.createElement(iframe);if(at)at(load,n,!1);else if(a.attachEvent)a.attachEvent(onload,n);r.srcjavascript:void(0),r.title,r.rolepresentation,(r.frameElement||r).style.cssTextwidth:0;height:0;border:0;display:none;,odocument.getElementsByTagName(script)0,o.parentNode.insertBefore(r,o);try{_r.contentWindow.document}catch(O){idocument.domain,r.srcjavascript:var ddocument.open();d.domain+i+;void(0);,_r.contentWindow.document}_.open()._lfunction(){var athis.createElement(script);if(i)this.domaini;a.idboomr-if-as,a.srce+7ZCLC-WD8HC-W3925-DDW59-BNRVV,BOOMR_lstart(new Date).getTime(),this.body.appendChild(a)},_.write(bo+dy onloaddocument._l();>),_.close()}}(),.length>0)if(a&&performancein a&&a.performance&&functiontypeof a.performance.setResourceTimingBufferSize)a.performance.setResourceTimingBufferSize();!function(){if(BOOMRa.BOOMR||{},BOOMR.pluginsBOOMR.plugins||{},!BOOMR.plugins.AK){var etrue?1:0,t,ngquou2ix3cj4y2ihaytq-f-f37f2b20e-clientnsv4-s.akamaihd.net,ifalsetrue?2:1,_{ak.v:39,ak.cp:1522352,ak.ai:parseInt(968393,10),ak.ol:0,ak.cr:6,ak.ipv:4,ak.proto:http/1.1,ak.rid:3c954b7e,ak.r:51519,ak.a2:e,ak.m:,ak.n:essl,ak.bpcip:52.40.234.0,ak.cport:7309,ak.gh:23.46.208.134,ak.quicv:,ak.tlsv:tls1.2,ak.0rtt:,ak.0rtt.ed:,ak.csrc:-,ak.acc:bbr,ak.t:1762068007,ak.ak:hOBiQwZUYzCg5VSAfCLimQar+Pb8y5SSgDD8PiGaN6MimFcXm7GNHg2f8VxlfZEeCQsg1pLrkyDM1LLcVnNL78Xld7wyJuVXCvmholonmDOg+aS8uEq8Z/cu5L5ao+5FmjJygpexixZfVMiiCi07ggV2PnL0Ul7SMYs/8V9uGBrpz2JlxHiMpYYMazHihHP299Qcgles4eDiTJKfZqLx6uu5/zwm1+QVk5UoRSUi0KIRnIwcCtx4eTnKLGRbp0U+nzzano7lkaJyvFKPvFrnoSa0nJNG3splA9ZDcaApoUaBcYwkT9Z0DRB2fVHoqIzIVuhuEAS3shk5u/8p22Pj4PK0R7bxxWyZFBrHS8kzTUmyungeMjGQ4fEJOAwBz1KqmzeabID7uEv0rcBOS0OS8GvGVXxUViQ5bNvVBWh3aZ/wYk4QfQszvD3/PgH+HILHM,ak.pv:1,ak.dpoabenc:,ak.tf:i};if(!t)_ak.rudst;var o{i:!1,av:function(e){var thttp.initiator;if(e&&(!et||spa_hardet))_ak.feovoid 0!a.aFeoApplied?1:0,BOOMR.addVar(_)},rv:function(){var aak.bpcip,ak.cport,ak.cr,ak.csrc,ak.gh,ak.ipv,ak.m,ak.n,ak.ol,ak.proto,ak.quicv,ak.tlsv,ak.0rtt,ak.0rtt.ed,ak.r,ak.acc,ak.t,ak.tf;BOOMR.removeVar(a)}};BOOMR.plugins.AK{akVars:_,akDNSPreFetchDomain:n,init:function(){if(!o.i){var aBOOMR.subscribe;a(before_beacon,o.av,null,null),a(onbeacon,o.rv,null,null),o.i!0}return this},is_complete:function(){return!0}}}}()}(window);/script>/head>body>  script>    window.addEventListener(load, function(ev) {      // Download main.dart.js      _flutter.loader.loadEntrypoint({        serviceWorker: {          serviceWorkerVersion: serviceWorkerVersion,        }      }).then(function(engineInitializer) {        return engineInitializer.initializeEngine();      }).then(function(appRunner) {        return appRunner.runApp();      });    });     window.fixPasswordCss  () > {      let style  document.createElement(style);      style.innerHTML  ::-ms-reveal { display: none; };      document.head.appendChild(style);    }  /script>/body>/html>

Subdomains

Date	Domain	IP
api.pa.tatapayments.com	2024-07-07	23.46.17.25
api.tatapayments.com	2024-08-03	23.44.175.171
dapi.tatapayments.com	2024-09-12	23.46.17.14
pfapi.tatapayments.com	2025-10-13	23.216.147.196
ppapi.tatapayments.com	2025-10-17	23.216.147.196
sapi.tatapayments.com	2025-10-11	23.216.147.196
merchant.tatapayments.com	2025-11-02	23.216.147.204
www.tatapayments.com	2024-11-25	23.46.17.40

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > merchant.tatapayments.com

Is this malicious?

DNS Resolutions

Port 443

Subdomains