Domain > shop.qlf.sezane.dev

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-09-07	3.171.76.33 (ClassC)
2025-12-11	3.163.24.62 (ClassC)

HTTP/1.1 301 Moved PermanentlyServer: CloudFrontDate: Thu, 11 Dec 2025 16:30:46 GMTContent-Type: text/htmlContent-Length: 167Connection: keep-aliveLocation: https://shop.qlf.sezane.dev/X-Cache: Redirect from cloudfrontVia: 1.1 518bdec7a5119a665abaf6315a08e6a8.cloudfront.net (CloudFront)X-Amz-Cf-Pop: HIO52-P2Alt-Svc: h3:443; ma86400X-Amz-Cf-Id: FQbgoOOmDxJQrI1gtKhZJsxqqsI8mtCKJooo7-d9ajkQ9vSAdMUxywX-XSS-Protection: 1; modeblockContent-Security-Policy: default-src self;base-uri self;object-src none;manifest-src self;img-src self data: blob: https:;child-src self blob:;media-src self https://media.octobre-editions.com https://media.sezane.com;font-src self data: https:;form-action self https:;style-src self unsafe-inline https:;frame-src self https:;connect-src self data: https:;script-src self unsafe-eval unsafe-inline https:;frame-ancestors self auth.qlf.sezane.dev auth.qlf.octobre-editions.dev shop.qlf.sezane.dev shop.qlf.octobre-editions.dev backoffice.qlf.sezane.dev backoffice.qlf.octobre-editions.dev account.qlf.sezane.dev account.qlf.octobre-editions.dev;report-uri https://browser-intake-datadoghq.eu/api/v2/logs?dd-api-keypub26be5fdda47a293cb61a8e2c17081751&dd-evp-origincontent-security-policy&ddsourcecsp-report&ddtagsservice%3Acheckout%2Cenv%3Aqlf;report-to csp-endpointX-Content-Type-Options: nosniffCache-Control: private, no-cache, no-store, must-revalidateContent-Security-Policy-Report-Only: default-src self;base-uri self;object-src none;manifest-src self;img-src self data: blob: https:;child-src self blob:;media-src self https://media.octobre-editions.com https://media.sezane.com;font-src self data: https:;form-action self https:;style-src self unsafe-inline https:;frame-src self https:;connect-src self data: https:;script-src self unsafe-eval unsafe-inline https:;report-uri https://browser-intake-datadoghq.eu/api/v2/logs?dd-api-keypub26be5fdda47a293cb61a8e2c17081751&dd-evp-origincontent-security-policy&ddsourcecsp-report&ddtagsservice%3Acheckout%2Cenv%3Aqlf;report-to csp-endpointExpires: 0Pragma: no-cacheReporting-Endpoints: https://browser-intake-datadoghq.eu/api/v2/logs?dd-api-keypub26be5fdda47a293cb61a8e2c17081751&dd-evp-origincontent-security-policy&ddsourcecsp-report&ddtagsservice%3Acheckout%2Cenv%3Aqlf

html>head>title>301 Moved Permanently/title>/head>body>center>h1>301 Moved Permanently/h1>/center>hr>center>CloudFront/center>/body>/html>

Port 443

HTTP/1.1 200 OKServer: CloudFrontContent-Type: text/htmlContent-Length: 1926Connection: keep-aliveDate: Wed, 10 Dec 2025 22:20:03 GMTLast-Modified: Tue, 25 Nov 2025 12:45:05 GMTETag: 230c3cc5423a3f67aa39460e8c8cc9f8x-amz-server-side-encryption: AES256x-amz-version-id: iSoPzN2wxXWwm9JvO4mJfpnyeHyOk0hnAccept-Ranges: bytesX-Cache: Hit from cloudfrontVia: 1.1 fd441d5d42c4e243bf0b88902034e302.cloudfront.net (CloudFront)X-Amz-Cf-Pop: HIO52-P2Alt-Svc: h3:443; ma86400X-Amz-Cf-Id: NbltSH4sFTVYRmQPiBqN3b3xbvOlsnjozQSXxVkrq5toEtdPBjcfagAge: 65445X-XSS-Protection: 1; modeblockContent-Security-Policy: default-src self;base-uri self;object-src none;manifest-src self;img-src self data: blob: https:;child-src self blob:;media-src self https://media.octobre-editions.com https://media.sezane.com;font-src self data: https:;form-action self https:;style-src self unsafe-inline https:;frame-src self https:;connect-src self data: https:;script-src self unsafe-eval unsafe-inline https:;frame-ancestors self auth.qlf.sezane.dev auth.qlf.octobre-editions.dev shop.qlf.sezane.dev shop.qlf.octobre-editions.dev backoffice.qlf.sezane.dev backoffice.qlf.octobre-editions.dev account.qlf.sezane.dev account.qlf.octobre-editions.dev;report-uri https://browser-intake-datadoghq.eu/api/v2/logs?dd-api-keypub26be5fdda47a293cb61a8e2c17081751&dd-evp-origincontent-security-policy&ddsourcecsp-report&ddtagsservice%3Acheckout%2Cenv%3Aqlf;report-to csp-endpointX-Content-Type-Options: nosniffStrict-Transport-Security: max-age63072000; includeSubDomains; preloadCache-Control: private, no-cache, no-store, must-revalidateContent-Security-Policy-Report-Only: default-src self;base-uri self;object-src none;manifest-src self;img-src self data: blob: https:;child-src self blob:;media-src self https://media.octobre-editions.com https://media.sezane.com;font-src self data: https:;form-action self https:;style-src self unsafe-inline https:;frame-src self https:;connect-src self data: https:;script-src self unsafe-eval unsafe-inline https:;report-uri https://browser-intake-datadoghq.eu/api/v2/logs?dd-api-keypub26be5fdda47a293cb61a8e2c17081751&dd-evp-origincontent-security-policy&ddsourcecsp-report&ddtagsservice%3Acheckout%2Cenv%3Aqlf;report-to csp-endpointExpires: 0Pragma: no-cacheReporting-Endpoints: https://browser-intake-datadoghq.eu/api/v2/logs?dd-api-keypub26be5fdda47a293cb61a8e2c17081751&dd-evp-origincontent-security-policy&ddsourcecsp-report&ddtagsservice%3Acheckout%2Cenv%3Aqlf

!doctype html>html translateno>    head>        meta charsetutf-8 />        link relicon href/favicon.ico />        meta nameviewport contentwidthdevice-width, initial-scale1 />        meta nametheme-color content#ffffff media(prefers-color-scheme: light) />        meta nametheme-color content#ffffff media(prefers-color-scheme: dark) />        meta namerobots contentnoindex />        link relpreconnect href//cdn.cookielaw.org/ />        link relpreconnect href//geolocation.onetrust.com/ crossorigin />        link relpreconnect href//www.googletagmanager.com/ />      script typemodule crossorigin src/assets/index-7IWFoS13.js>/script>      link relstylesheet crossorigin href/assets/index-BybfF46s.css>    /head>    body>        script>            window.global || window;        /script>                script>            !(function (a, b, c, d, e, f) {                a.ddjskey  e;                a.ddoptions  f || null;                var m  b.createElement(c),                    n  b.getElementsByTagName(c)0;                (m.async  1), (m.src  d), n.parentNode.insertBefore(m, n);            })(window, document, script, https://js.datadome.co/tags.js, 5F68926B445D9B87687EB78046D91D, {                ajaxListenerPath: api.sezane.com,            });        /script>        !-- Google Tag Manager (noscript) -->        noscript            >iframe                srchttps://www.googletagmanager.com/ns.html?idGTM-NXV9XX                height0                width0                styledisplay: none; visibility: hidden            >/iframe        >/noscript>        !-- End Google Tag Manager (noscript) -->                noscript>You need to enable JavaScript to run this app./noscript>        div idroot>/div>    /body>/html>

Subdomains

Date	Domain	IP
auth.qlf.sezane.dev	2024-02-21	3.163.24.5
api.qlf.sezane.dev	2024-07-25	18.65.229.111
shop.qlf.sezane.dev	2025-12-11	3.163.24.62
erp.qlf.sezane.dev	2024-08-28	18.161.6.9

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > shop.qlf.sezane.dev

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains