Domain > mk-qa-auth.mykaarma.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2021-04-27	143.204.154.120 (ClassC)
2024-01-11	18.161.6.102 (ClassC)
2024-06-30	18.161.6.126 (ClassC)
2024-10-24	18.161.6.57 (ClassC)
2025-01-07	18.172.170.28 (ClassC)

HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Thu, 11 Jan 2024 03:19:44 GMTContent-Type: text/htmlContent-Length: 915Connection: keep-aliveX-Cache: Error from cloudfrontVia: 1.1 8f251d23da31b683c3c9d6

!DOCTYPE HTML PUBLIC -//W3C//DTD HTML 4.01 Transitional//EN http://www.w3.org/TR/html4/loose.dtd>HTML>HEAD>META HTTP-EQUIVContent-Type CONTENTtext/html; charsetiso-8859-1>TITLE>ERROR: The request could not be satisfied/TITLE>/HEAD>BODY>H1>403 ERROR/H1>H2>The request could not be satisfied./H2>HR noshade size1px>Bad request.We cant connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.BR clearall>If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.BR clearall>HR noshade size1px>PRE>Generated by cloudfront (CloudFront)Request ID: gRlh3iyFVTLPb9648TFtCn2U768XPLAZOrrsd69LAeq6eWgLxJkKQA/PRE>ADDRESS>/ADDRESS>/BODY>/HTML>

Port 443

HTTP/1.1 200 OKContent-Type: text/html;charsetUTF-8Transfer-Encoding: chunkedConnection: keep-aliveDate: Thu, 11 Jan 2024 03:19:44 GMTContent-Security-Policy-Report-Only: script-src https://d3oia8etll

!DOCTYPE html>html langen>head>head>    link hrefnull/null/css/bootstrap.min.css relstylesheet        mediascreen />    link hrefnull/null/css/cognito-login.css relstylesheet        mediascreen />        title>Signin/title>    script srcnull/null/js/amazon-cognito-advanced-security-data.min.js >/script>    script>    function getAdvancedSecurityData(formReference) {        if (typeof AmazonCognitoAdvancedSecurityData  undefined) {            return true;        }        // UserpoolId is not available on frontend for springboard. We do not use userPoolId        // anyway other than put in context data.         var userPoolId  ;        var clientId  getUrlParameter(client_id);        var username  ;        var usernameInput  document.getElementsByName(username)0;        if (usernameInput && usernameInput.value) {            username  usernameInput.value;        }        var asfData  AmazonCognitoAdvancedSecurityData.getData(username, userPoolId, clientId);        if (typeof asfData  undefined) {            return true;        }        if (formReference && formReference.cognitoAsfData) {            formReference.cognitoAsfData.value  asfData        }        return true;    }    function getUrlParameter(name) {        name  name.replace(//, \).replace(//, \);        var regex  new RegExp(\?& + name + (^&#*));        var results  regex.exec(location.search);        return results  null ?  : decodeURIComponent(results1.replace(/+/g,  ));    }    function onSubmit(evt, formRef) {        formRef.querySelector(buttontypesubmit).disabled  true;        if (!!formRef.submitted) {            evt.preventDefault();            return false;        } else {            formRef.submitted  true;            return getAdvancedSecurityData(formRef);        }    }/script>    meta nameviewport contentwidthdevice-width, initial-scale1>/head>/head>body spellcheckfalse>    div classcontainer>        div classmodal-dialog>            div classmodal-content background-customizable modal-content-mobile visible-xs visible-sm>                div

Subdomains

Date	Domain	IP
729.mykaarma.com	2024-07-04	3.163.24.57
static.mykaarma.com	2024-05-12	108.138.94.118
payisland.mykaarma.com	2024-10-05	3.163.24.39
tracking.mykaarma.com	2024-11-25	174.129.219.211
mk-qa-auth.mykaarma.com	2024-01-11	18.161.6.102
qa-loki.mykaarma.com	2024-06-10	44.199.46.222
api.mykaarma.com	2023-08-16	52.206.63.100
qa-api.mykaarma.com	2024-11-25	34.230.219.243
www.qa-api.mykaarma.com	2024-11-25	34.230.219.243
www.api.mykaarma.com	2025-01-06	44.195.141.250
qa-admin.mykaarma.com	2024-09-10	3.210.23.120
dev-auth.cognito.mykaarma.com	2024-07-17	18.161.6.42
app.mykaarma.com	2023-08-16	44.196.133.203
www.app.mykaarma.com	2024-12-26	44.195.141.250
api-tpr.mykaarma.com	2024-09-02	3.163.24.89
files.mykaarma.com	2024-02-19	18.161.6.45
qa-files.mykaarma.com	2024-08-21	99.84.66.110
qa-dsd-walkaround-files.mykaarma.com	2024-02-21	3.163.24.73
communication-files.mykaarma.com	2024-12-27	3.165.160.89
dev-transportation-files.mykaarma.com	2024-07-26	99.84.66.39
qa-kpaper-files.mykaarma.com	2024-09-28	3.163.24.60
dev-kpaper-files.mykaarma.com	2024-12-27	3.163.189.61
payment-files.mykaarma.com	2024-12-29	204.246.191.31
qa02-payment-files.mykaarma.com	2024-10-18	3.163.24.8
qa-insights.mykaarma.com	2024-12-26	3.210.23.120
accounts.mykaarma.com	2024-06-11	99.84.66.39
connect.mykaarma.com	2024-02-08	99.84.66.9
www.mykaarma.com	2024-12-28	34.197.178.222

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > mk-qa-auth.mykaarma.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains