Domain > ctexpressonline.secureimagesend.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2021-11-30	13.226.23.145 (ClassC)
2021-11-30	13.226.23.197 (ClassC)
2021-11-30	13.226.23.219 (ClassC)
2022-04-13	108.156.93.13 (ClassC)
2024-03-09	99.84.71.186 (ClassC)
2024-06-02	99.84.66.85 (ClassC)
2024-07-23	99.84.66.63 (ClassC)
2025-04-14	99.84.66.103 (ClassC)
2025-04-23	3.175.34.109 (ClassC)
2026-01-17	3.175.34.88 (ClassC)
2026-02-11	3.175.34.31 (ClassC)

HTTP/1.1 200 OKContent-Type: text/htmlContent-Length: 1815Connection: keep-aliveDate: Sat, 09 Mar 2024 01:01:22 GMTLast-Modified: Sun, 09 Apr 2023 14:59:05 GMTETag: 4c8fe3b4a987c0905b4663610d9fd2a9x-a

html>head>  script typetext/javascript>    function redir() {      // Secure Image send urls have either 3 subparts in production or 4 subparts in non-production.       // Example of the secure image send url in production is aietest.secureimagesend.com      // Example of the same in non-production is aietest.distro.secureimagesend.com	          // First subpart is the identifier through which the initiative is identified like aietest      // In case of non production environments, the second subpart identifies the environment.       // And the last two subparts identify the domain secureimagesend.com and fastimagesend.com. Only these two domains are currently supported.      var subparts  window.location.hostname.split(.);      var subdomain  subparts0;      var domain  subpartssubparts.length-2;      var suffix  subpartssubparts.length-1;      var validUrl  (suffix  com && (domain  secureimagesend || domain  fastimagesend));      if (subparts.length  4) {          var env  subparts1;          validUrl  validUrl && (env  sandbox || env  distro || env  validation || env  lightning || env  innovate);      }      if (!validUrl) {          window.location  http://medicalimaging.works/;      } else {        var newLocation  https://www.intelegrid.com;      	if (subparts.length  4) {            if (subparts1  innovate) {               newLocation  https://imaging-innovate.imedidata.com;            } else {			         newLocation  https://imaging- + subparts1 + .imedidata.net;		        }        }        window.location  newLocation + /EvenFlow/API/IntelemageOpen/ISRedirect?uid + subdomain;      }    }  /script>/head>body onload redir()>/body>/html>

Subdomains

Date	Domain	IP
testupload.secureimagesend.com	2024-09-28	99.84.66.85
cooksecureshuttle.secureimagesend.com	2024-02-16	99.84.71.204
ctexpressonline.secureimagesend.com	2024-03-09	99.84.71.186
uploadtest.secureimagesend.com	2024-11-29	99.84.66.103
www.secureimagesend.com	2024-10-05	13.224.14.57

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > ctexpressonline.secureimagesend.com

Is this malicious?

DNS Resolutions

Port 80

Subdomains