Domain > expressconnect2-dev1.nationwideexcessandsurplus.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2022-02-19	44.233.156.213 (ClassC)
2025-01-17	54.191.225.132 (ClassC)

HTTP/1.1 200 Date: Fri, 17 Jan 2025 09:09:34 GMTContent-Type: text/html; charsetUTF-8Content-Length: 1353Connection: keep-aliveSet-Cookie: AWSALBVXD8pUR24JbS27ucqx3r7T2C8RBAHsrZ80JM0BJUMy0DNVf5MMtffvkS9O+eIfNlFobnZ2VckEVTDVdcNt+kVrf+ph2a/gqTOCn/u4dJ83iDpUs9ipgKAkd9hv3v; ExpiresFri, 24 Jan 2025 09:09:34 GMT; Path/Set-Cookie: AWSALBCORSVXD8pUR24JbS27ucqx3r7T2C8RBAHsrZ80JM0BJUMy0DNVf5MMtffvkS9O+eIfNlFobnZ2VckEVTDVdcNt+kVrf+ph2a/gqTOCn/u4dJ83iDpUs9ipgKAkd9hv3v; ExpiresFri, 24 Jan 2025 09:09:34 GMT; Path/; SameSiteNone; SecureServer: ApacheAccess-Control-Max-Age: 1000Access-Control-Allow-Headers: X-Requested-With, Content-Type, Origin, Authorization, Accept, Client-Security-Token, Accept-EncodingAccess-Control-Allow-Methods: POST, GET, OPTIONS, DELETE, PUTFeature-Policy: fullscreen none; microphone noneAccept-Ranges: bytesETag: W/1353-1725018994000Last-Modified: Fri, 30 Aug 2024 11:56:34 GMTVary: OriginX-Content-Type-Options: nosniffReferrer-Policy: no-referrerX-Frame-Options: SAMEORIGINContent-Security-Policy: frame-ancestors self *.iscs.com *.guidewire.net *.authorize.net *.chasepaymentechhostedpay-var.com *.chasepaymentechhostedpay.comStrict-Transport-Security: max-age31536000; includeSubDomains; preloadSet-Cookie: JSESSIONID1DEAAC088BE1DE3DD5A1DD257F6AF45F; Path/; Secure; HttpOnly;HttpOnly;Secure;HttpOnly;Secure;SameSiteNone;X-XSS-Protection: 1; modeblock

!DOCTYPE html PUBLIC -//W3C//DTD XHTML 1.0 Strict//EN http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd>html xmlnshttp://www.w3.org/1999/xhtml xml:langen>head>    meta http-equivcontent-type contentapplication/xhtml+xml; charsetutf-8 />    meta nameauthor contentGuidewire />    meta namegenerator contentInsuranceNow />    link relapple-touch-icon sizes180x180 hrefapple-touch-icon.png/>    link relicon typeimage/png hreffavicon-32x32.png sizes32x32/>    link relicon typeimage/png hreffavicon-16x16.png sizes16x16/>    link relmanifest hrefmanifest.json/>    link relmask-icon hrefsafari-pinned-tab.svg color#5bbad5/>    meta nametheme-color content#ffffff/>    title>Guidewire InsuranceNow™/title>/head>body>	script typetext/javascript>	    // Redirect JavaScript	    // The line below will automatically load the specified page in	    // a browser that support javascript, while non JavaScript-enabled	    // browsers will ignore the command and display this page.	    this.location  innovation?rqCOUserStartPage;	/script>    table cellspacing10>        tr>            td>a hrefinnovation?rqCOUserStartPage>Guidewire InsuranceNow™/a>/td>        /tr>           /table>/body>/html>

Subdomains

Date	Domain	IP
expressconnect2-st1.nationwideexcessandsurplus.com	2025-01-01	52.13.199.168
expressconnect2-dev1.nationwideexcessandsurplus.com	2025-01-17	54.191.225.132
expressconnect2-uat2.nationwideexcessandsurplus.com	2025-01-01	52.13.199.168
expressconnect2-st2.nationwideexcessandsurplus.com	2024-11-13	44.241.228.229
expressconnect2-dev2.nationwideexcessandsurplus.com	2024-11-13	44.241.228.229
expressconnect2-st3.nationwideexcessandsurplus.com	2025-01-01	52.13.199.168
expressconnect2-dev3.nationwideexcessandsurplus.com	2024-11-13	44.241.228.229
launch.nationwideexcessandsurplus.com	2024-11-25	104.70.127.18
talon.nationwideexcessandsurplus.com	2024-06-03	52.40.50.114
forms.nationwideexcessandsurplus.com	2024-11-17	23.46.228.170
access.nationwideexcessandsurplus.com	2023-08-15	104.96.163.206
expressconnect2-uat.nationwideexcessandsurplus.com	2025-01-01	44.237.200.94
act.nationwideexcessandsurplus.com	2023-08-15	23.53.34.8
expressconnect2-pt.nationwideexcessandsurplus.com	2024-11-13	44.241.228.229
www.nationwideexcessandsurplus.com	2024-09-28	23.46.228.169

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > expressconnect2-dev1.nationwideexcessandsurplus.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains