Domain > claims.covertree.com

Welcome! Right click nodes and scroll the mouse to navigate the graph.

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2022-12-19	13.32.164.11 (ClassC)
2024-07-21	65.8.243.20 (ClassC)
2024-11-17	18.65.229.31 (ClassC)

HTTP/1.1 200 OKContent-Type: text/htmlContent-Length: 3742Connection: keep-aliveDate: Sun, 17 Nov 2024 22:53:49 GMTServer: _Accept-Ranges: bytesLast-Modified: Mon, 21 Oct 2024 09:10:15 GMTCache-Control: max-age0strict-transport-security: max-age31536000referrer-policy: strict-origin-when-cross-origincross-origin-embedder-policy-report-only: require-corp; report-todefaultcross-origin-opener-policy-report-only: same-origin; report-todefaultcross-origin-resource-policy: same-siteexpect-ct: max-age604800nel: {report_to:default,max_age:10886400}permissions-policy: accelerometer(), autoplay(self), camera(), document-domain(self), fullscreen(self), geolocation(), gyroscope(), magnetometer(), microphone(), midi(), payment(), picture-in-picture(self), sync-xhr(self), usb(), xr-spatial-tracking()x-content-type-options: nosniffx-xss-protection: 1; modeblock;content-security-policy: script-src self unsafe-inline unsafe-eval *.covertree.com *.us.auth0.com *.cloudfront.net maps.googleapis.com https://edge.fullstory.com https://rs.fullstory.com js.hsforms.net forms.hubspot.com js.hs-scripts.com js.stripe.com js.hs-analytics.net js.hs-banner.com js.hscollectedforms.net cdn.segment.com www.googletagmanager.com *.google-analytics.com cdn1.friendbuy.com ws.friendbuy.com api.segment.io www.googleadservices.com api.hsforms.com *.ingest.sentry.io *.us-east-1.amazonaws.com www.google.com googleads.g.doubleclick.net wss://*.appsync-realtime-api.us-east-1.amazonaws.com connect.podium.com lab.analyticspodium.com/sdk/vardata mind-flayer.podium.com//graphql www.gstatic.com https://*.hotjar.com; connect-src self covertree.com https://covertree.com *.covertree.com *.auth.us-east-1.amazoncognito.com *.us.auth0.com *.cloudfront.net maps.googleapis.com https://edge.fullstory.com https://rs.fullstory.com js.hsforms.net forms.hsforms.com forms.hubspot.com hubspot-forms-static-embed.s3.amazonaws.com js.hs-scripts.com js.stripe.com js.hs-analytics.net js.hs-banner.com js.hscollectedforms.net cdn.segment.com www.googletagmanager.com *.google-analytics.com cdn1.friendbuy.com ws.friendbuy.com api.segment.io www.googleadservices.com api.hsforms.com *.ingest.sentry.io *.us-east-1.amazonaws.com www.google.com googleads.g.doubleclick.net stats.g.doubleclick.net wss://*.appsync-realtime-api.us-east-1.amazonaws.com connect.podium.com lab.analyticspodium.com/sdk/vardata mind-flayer.podium.com//graphql www.gstatic.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://analytic.rollout.io https://conf.rollout.io https://push.rollout.io https://statestore.rollout.io https://x-api.rollout.io https://notify.bugsnag.com https://*.cloudbees.io https://*.analytics.google.comx-frame-options: DENYETag: 7cc8e415c7661433c9b298c2da83a4c6Vary: Accept-EncodingX-Cache: Miss from cloudfrontVia: 1.1 09331f0822fc98eebaf04130a83dbd44.cloudfront.net (CloudFront)X-Amz-Cf-Pop: SEA73-P1Alt-Svc: h3:443; ma86400X-Amz-Cf-Id: FA7iWaSa4FGk8byCycBtsgqHRLKaXLSP6UM7B3k4XqoHJnHIlKw40A

!DOCTYPE html>html langen>  head>    meta charsetutf-8 />    link relicon href/favicon.ico />    meta nameviewport contentwidthdevice-width, initial-scale1 />    meta nametheme-color content#000000 />    meta      namedescription      contentGather your loss details, file your claim, and minimize your losses with a few clicks on our online form.    />    link relapple-touch-icon href/logo192.png />    !--      manifest.json provides metadata used when your web app is installed on a      users mobile device or desktop. See https://developers.google.com/web/fundamentals/web-app-manifest/    -->    link relmanifest href/manifest.json />    !--      Notice the use of %PUBLIC_URL% in the tags above.      It will be replaced with the URL of the `public` folder during the build.      Only files inside the `public` folder can be referenced from the HTML.      Unlike /favicon.ico or favicon.ico, %PUBLIC_URL%/favicon.ico will      work correctly both with client-side routing and a non-root public URL.      Learn how to configure a non-root public URL by running `npm run build`.    -->    title>CoverTree | File your claim in three simple steps/title>    script typemodule crossorigin src/assets/index-9cef4459.js>/script>    link relstylesheet href/assets/index-e2e7d190.css>  /head>  body>    script>      window_fs_debug  false;      window_fs_host  fullstory.com;      window_fs_script  edge.fullstory.com/s/fs.js;      window_fs_org  19AB4B;      window_fs_namespace  FS;      (function(m,n,e,t,l,o,g,y){          if (e in m) {if(m.console && m.console.log) { m.console.log(FullStory namespace conflict. Please set window_fs_namespace.);} return;}          gmefunction(a,b,s){g.q?g.q.push(a,b,s):g._api(a,b,s);};g.q;          on.createElement(t);o.async1;o.crossOriginanonymous;o.srchttps://+_fs_script;          yn.getElementsByTagName(t)0;y.parentNode.insertBefore(o,y);          g.identifyfunction(i,v,s){g(l,{uid:i},s);if(v)g(l,v,s)};g.setUserVarsfunction(v,s){g(l,v,s)};g.eventfunction(i,v,s){g(event,{n:i,p:v},s)};          g.anonymizefunction(){g.identify(!!0)};          g.shutdownfunction(){g(rec,!1)};g.restartfunction(){g(rec,!0)};          g.log  function(a,b){g(log,a,b)};          g.consentfunction(a){g(consent,!arguments.length||a)};          g.identifyAccountfunction(i,v){oaccount;vv||{};v.acctIdi;g(o,v)};          g.clearUserCookiefunction(){};          g.setVarsfunction(n, p){g(setVars,n,p);};          g._w{};yXMLHttpRequest;g._wymy;yfetch;g._wymy;          if(my)myfunction(){return g._wy.apply(this,arguments)};          g._v1.3.0;      })(window,document,window_fs_namespace,script,user);    /script>    noscript>You need to enable JavaScript to run this app./noscript>    div idroot>/div>        !--      This HTML file is a template.      If you open it directly in the browser, you will see an empty page.      You can add webfonts, meta tags, or analytics to this file.      The build step will place the bundled scripts into the body> tag.      To begin the development, run `npm start` or `yarn start`.      To create a production bundle, use `npm run build` or `yarn build`.    -->    script>      // AWS Amplify needs this to work. See https://github.com/aws/aws-sdk-js/issues/3673      var isBrowser  () > typeof window ! undefined;      var isGlobal  () > typeof global ! undefined;      if (!isGlobal() && isBrowser()) {        var global  window;      }    /script>  /body>/html>

Subdomains

Date	Domain	IP
claims.staging.covertree.com	2024-11-08	99.84.66.59
agent.staging.covertree.com	2024-07-29	18.161.6.54
agent.develop.covertree.com	2024-02-22	3.163.24.122
claims.covertree.com	2024-11-17	18.65.229.31

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > claims.covertree.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains