Domain > sso-contiki.uat.travcorpservices.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2016-06-30	52.85.209.129 (ClassC)
2016-07-17	52.85.209.17 (ClassC)
2024-08-18	204.246.191.7 (ClassC)
2025-01-18	108.138.94.94 (ClassC)
2025-01-26	108.138.94.95 (ClassC)
2025-06-28	204.246.191.50 (ClassC)
2025-07-01	99.84.66.82 (ClassC)
2025-07-14	204.246.191.70 (ClassC)
2025-07-27	204.246.191.73 (ClassC)
2025-08-14	99.84.66.60 (ClassC)
2025-09-14	3.169.173.101 (ClassC)
2025-09-25	3.169.173.81 (ClassC)

HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Sat, 15 Jul 2023 09:56:17 GMTContent-Type: text/htmlContent-Length: 915Connection: keep-aliveX-Cache: Error from cloudfrontVia: 1.1 c8997576b0e59159a991d9

!DOCTYPE HTML PUBLIC -//W3C//DTD HTML 4.01 Transitional//EN http://www.w3.org/TR/html4/loose.dtd>HTML>HEAD>META HTTP-EQUIVContent-Type CONTENTtext/html; charsetiso-8859-1>TITLE>ERROR: The request could not be satisfied/TITLE>/HEAD>BODY>H1>403 ERROR/H1>H2>The request could not be satisfied./H2>HR noshade size1px>Bad request.We cant connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.BR clearall>If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.BR clearall>HR noshade size1px>PRE>Generated by cloudfront (CloudFront)Request ID: X9b6FfFWBenYGf_8hPrrNJklFlPV4cnWjwdui-3tL1HxbN0zWAwrVA/PRE>ADDRESS>/ADDRESS>/BODY>/HTML>

Port 443

HTTP/1.1 403 ForbiddenContent-Type: text/htmlContent-Length: 1233Connection: keep-aliveCache-control: no-cacheset-cookieDate: Sat, 15 Jul 2023 09:56:17 GMTServer: Microsoft-IIS/10.0Set-Cookie: AWSELB4

!DOCTYPE html PUBLIC -//W3C//DTD XHTML 1.0 Strict//EN http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd>html xmlnshttp://www.w3.org/1999/xhtml>head>meta http-equivContent-Type contenttext/html; charsetiso-8859-1/>title>403 - Forbidden: Access is denied./title>style typetext/css>!--body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}fieldset{padding:0 15px 10px 15px;} h1{font-size:2.4em;margin:0;color:#FFF;}h2{font-size:1.7em;margin:0;color:#CC0000;} h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} #header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:trebuchet MS, Verdana, sans-serif;color:#FFF;background-color:#555555;}#content{margin:0 0 0 2%;position:relative;}.content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}-->/style>/head>body>div idheader>h1>Server Error/h1>/div>div idcontent> div classcontent-container>fieldset>  h2>403 - Forbidden: Access is denied./h2>  h3>You do not have permission to view this directory or page using the credentials that you supplied./h3> /fieldset>/div>/div>/body>/html>

Subdomains

Date	Domain	IP
mmd.travcorpservices.com	2024-06-25	18.172.170.18
ch.prod.travcorpservices.com	2024-11-21	99.86.38.103
sso-contiki.prod.travcorpservices.com	2024-07-28	18.161.6.35
sso.prod.travcorpservices.com	2024-07-06	18.161.6.70
api.mtp.prod.travcorpservices.com	2024-08-30	18.238.238.17
sso-trafalgar.prod.travcorpservices.com	2024-07-09	18.161.6.35
booking-services.prod.travcorpservices.com	2024-08-21	99.84.66.9
acgcms.prod.travcorpservices.com	2025-01-12	52.84.162.29
booking-services-getours.prod.travcorpservices.com	2024-09-18	99.84.66.116
lcw.prod.travcorpservices.com	2024-11-28	3.163.24.52
sso-contiki.travcorpservices.com	2024-03-08	204.246.191.54
api.travcorpservices.com	2019-09-11	13.249.87.4
sso.travcorpservices.com	2024-03-08	204.246.191.129
payment-services.travcorpservices.com	2024-03-11	204.246.191.129
sso-utilities.travcorpservices.com	2025-07-02	107.21.96.66
poc.uat.travcorpservices.com	2024-08-20	34.194.34.147
sso-contiki.uat.travcorpservices.com	2024-08-18	204.246.191.7
booking-services-api.uat.travcorpservices.com	2024-07-09	18.161.6.17
sso.uat.travcorpservices.com	2024-08-18	204.246.191.7
booking-services-luxurygoldvacations.uat.travcorpservices.com	2024-02-28	18.172.170.75
payment-card-services.prod-payment.travcorpservices.com	2024-04-22	18.161.6.123
api.mtp.dev.travcorpservices.com	2024-06-30	3.163.24.36
lcw.dev.travcorpservices.com	2024-07-29	18.161.6.128
reviewapps-redux.dev.travcorpservices.com	2024-10-05	204.246.191.68
dashboard.reviewapps-redux.dev.travcorpservices.com	2024-07-07	18.161.6.53
paymentgateway.travcorpservices.com	2024-08-30	18.172.170.127
teamcity.travcorpservices.com	2025-06-24	52.208.220.252

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > sso-contiki.uat.travcorpservices.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains