Domain > expressconnect2-dev3.nationwideexcessandsurplus.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2022-02-19	44.233.156.213 (ClassC)
2024-11-13	44.241.228.229 (ClassC)

HTTP/1.1 200 Date: Wed, 13 Nov 2024 00:31:06 GMTContent-Type: text/html; charsetUTF-8Content-Length: 1353Connection: keep-aliveSet-Cookie: AWSALBCmc8tHktTEOK2hg958pFlqlq1C7zy/UvzrlsPRsI1hEv7f9h9QHSsbKsKO3v77ld6LF0Gf26uZVoxUmbYTeUJL3XIzuqr8nUlVwfqM4nEqDaOq/qfJ2dxSb6YDN2; ExpiresWed, 20 Nov 2024 00:31:06 GMT; Path/Set-Cookie: AWSALBCORSCmc8tHktTEOK2hg958pFlqlq1C7zy/UvzrlsPRsI1hEv7f9h9QHSsbKsKO3v77ld6LF0Gf26uZVoxUmbYTeUJL3XIzuqr8nUlVwfqM4nEqDaOq/qfJ2dxSb6YDN2; ExpiresWed, 20 Nov 2024 00:31:06 GMT; Path/; SameSiteNone; SecureServer: ApacheAccess-Control-Max-Age: 1000Access-Control-Allow-Headers: X-Requested-With, Content-Type, Origin, Authorization, Accept, Client-Security-Token, Accept-EncodingAccess-Control-Allow-Methods: POST, GET, OPTIONS, DELETE, PUTFeature-Policy: fullscreen none; microphone noneAccept-Ranges: bytesETag: W/1353-1683137054000Last-Modified: Wed, 03 May 2023 18:04:14 GMTVary: OriginX-Content-Type-Options: nosniffReferrer-Policy: no-referrerX-Frame-Options: SAMEORIGINContent-Security-Policy: frame-ancestors self *.iscs.com *.guidewire.net *.authorize.net *.chasepaymentechhostedpay-var.com *.chasepaymentechhostedpay.comStrict-Transport-Security: max-age31536000; includeSubDomains; preloadSet-Cookie: JSESSIONID478DA776430902D308620755CC4D955F; Path/; Secure; HttpOnly;HttpOnly;Secure;HttpOnly;Secure;SameSiteNone;X-XSS-Protection: 1; modeblock

!DOCTYPE html PUBLIC -//W3C//DTD XHTML 1.0 Strict//EN http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd>html xmlnshttp://www.w3.org/1999/xhtml xml:langen>head>    meta http-equivcontent-type contentapplication/xhtml+xml; charsetutf-8 />    meta nameauthor contentGuidewire />    meta namegenerator contentInsuranceNow />    link relapple-touch-icon sizes180x180 hrefapple-touch-icon.png/>    link relicon typeimage/png hreffavicon-32x32.png sizes32x32/>    link relicon typeimage/png hreffavicon-16x16.png sizes16x16/>    link relmanifest hrefmanifest.json/>    link relmask-icon hrefsafari-pinned-tab.svg color#5bbad5/>    meta nametheme-color content#ffffff/>    title>Guidewire InsuranceNow™/title>/head>body>	script typetext/javascript>	    // Redirect JavaScript	    // The line below will automatically load the specified page in	    // a browser that support javascript, while non JavaScript-enabled	    // browsers will ignore the command and display this page.	    this.location  innovation?rqCOUserStartPage;	/script>    table cellspacing10>        tr>            td>a hrefinnovation?rqCOUserStartPage>Guidewire InsuranceNow™/a>/td>        /tr>           /table>/body>/html>

Subdomains

Date	Domain	IP
expressconnect2-st2.nationwideexcessandsurplus.com	2024-11-13	44.241.228.229
expressconnect2-dev3.nationwideexcessandsurplus.com	2024-11-13	44.241.228.229
talon.nationwideexcessandsurplus.com	2024-06-03	52.40.50.114
access.nationwideexcessandsurplus.com	2023-08-15	104.96.163.206
act.nationwideexcessandsurplus.com	2023-08-15	23.53.34.8
www.nationwideexcessandsurplus.com	2024-09-28	23.46.228.169

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > expressconnect2-dev3.nationwideexcessandsurplus.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains