Domain > expressconnect2-st2.nationwideexcessandsurplus.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2022-02-19	44.233.156.213 (ClassC)
2024-11-13	44.241.228.229 (ClassC)

HTTP/1.1 200 Date: Wed, 13 Nov 2024 00:25:06 GMTContent-Type: text/html; charsetUTF-8Content-Length: 1353Connection: keep-aliveSet-Cookie: AWSALB+EaLI4AIov4wdqcp/P3u6I8HWG4uiCKOaxIvL+S0zIM/emREHZaq4v6SlgyvJ0BO+MGZ5wFI0nBHzIcIQjDypGExJTrvHGsFYgH+NTEQGyIB+RsvL5eTakewzbF4; ExpiresWed, 20 Nov 2024 00:25:06 GMT; Path/Set-Cookie: AWSALBCORS+EaLI4AIov4wdqcp/P3u6I8HWG4uiCKOaxIvL+S0zIM/emREHZaq4v6SlgyvJ0BO+MGZ5wFI0nBHzIcIQjDypGExJTrvHGsFYgH+NTEQGyIB+RsvL5eTakewzbF4; ExpiresWed, 20 Nov 2024 00:25:06 GMT; Path/; SameSiteNone; SecureServer: ApacheAccess-Control-Max-Age: 1000Access-Control-Allow-Headers: X-Requested-With, Content-Type, Origin, Authorization, Accept, Client-Security-Token, Accept-EncodingAccess-Control-Allow-Methods: POST, GET, OPTIONS, DELETE, PUTFeature-Policy: fullscreen none; microphone noneAccept-Ranges: bytesETag: W/1353-1683137054000Last-Modified: Wed, 03 May 2023 18:04:14 GMTVary: OriginX-Content-Type-Options: nosniffReferrer-Policy: no-referrerX-Frame-Options: SAMEORIGINContent-Security-Policy: frame-ancestors self *.iscs.com *.guidewire.net *.authorize.net *.chasepaymentechhostedpay-var.com *.chasepaymentechhostedpay.comStrict-Transport-Security: max-age31536000; includeSubDomains; preloadSet-Cookie: JSESSIONIDAE37483A7319DF614755F1C8CCDEAF57; Path/; Secure; HttpOnly;HttpOnly;Secure;HttpOnly;Secure;SameSiteNone;X-XSS-Protection: 1; modeblock

!DOCTYPE html PUBLIC -//W3C//DTD XHTML 1.0 Strict//EN http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd>html xmlnshttp://www.w3.org/1999/xhtml xml:langen>head>    meta http-equivcontent-type contentapplication/xhtml+xml; charsetutf-8 />    meta nameauthor contentGuidewire />    meta namegenerator contentInsuranceNow />    link relapple-touch-icon sizes180x180 hrefapple-touch-icon.png/>    link relicon typeimage/png hreffavicon-32x32.png sizes32x32/>    link relicon typeimage/png hreffavicon-16x16.png sizes16x16/>    link relmanifest hrefmanifest.json/>    link relmask-icon hrefsafari-pinned-tab.svg color#5bbad5/>    meta nametheme-color content#ffffff/>    title>Guidewire InsuranceNow™/title>/head>body>	script typetext/javascript>	    // Redirect JavaScript	    // The line below will automatically load the specified page in	    // a browser that support javascript, while non JavaScript-enabled	    // browsers will ignore the command and display this page.	    this.location  innovation?rqCOUserStartPage;	/script>    table cellspacing10>        tr>            td>a hrefinnovation?rqCOUserStartPage>Guidewire InsuranceNow™/a>/td>        /tr>           /table>/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > expressconnect2-st2.nationwideexcessandsurplus.com

Is this malicious?

DNS Resolutions

Port 80

Port 443