Domain > expressconnect2-uat.nationwideexcessandsurplus.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2022-02-19	44.233.156.213 (ClassC)
2025-01-01	44.237.200.94 (ClassC)

HTTP/1.1 200 Date: Wed, 01 Jan 2025 20:06:27 GMTContent-Type: text/html; charsetUTF-8Content-Length: 1353Connection: keep-aliveSet-Cookie: AWSALBVHUZi1vR/v6GflX8tzzwCzhnKiwVs8ZtiyXnkqfLzLuTC/eQO5DSHYEbe0HgxGkbWmnD3a5+og0aZib4x4+l8aLGjHZ2aE6DDXJQbB47IgaB+f7EHB8k3yKQDmFR; ExpiresWed, 08 Jan 2025 20:06:27 GMT; Path/Set-Cookie: AWSALBCORSVHUZi1vR/v6GflX8tzzwCzhnKiwVs8ZtiyXnkqfLzLuTC/eQO5DSHYEbe0HgxGkbWmnD3a5+og0aZib4x4+l8aLGjHZ2aE6DDXJQbB47IgaB+f7EHB8k3yKQDmFR; ExpiresWed, 08 Jan 2025 20:06:27 GMT; Path/; SameSiteNone; SecureServer: ApacheAccess-Control-Max-Age: 1000Access-Control-Allow-Headers: X-Requested-With, Content-Type, Origin, Authorization, Accept, Client-Security-Token, Accept-EncodingAccess-Control-Allow-Methods: POST, GET, OPTIONS, DELETE, PUTFeature-Policy: fullscreen none; microphone noneAccept-Ranges: bytesETag: W/1353-1725026194000Last-Modified: Fri, 30 Aug 2024 13:56:34 GMTVary: OriginX-Content-Type-Options: nosniffReferrer-Policy: no-referrerX-Frame-Options: SAMEORIGINContent-Security-Policy: frame-ancestors self *.iscs.com *.guidewire.net *.authorize.net *.chasepaymentechhostedpay-var.com *.chasepaymentechhostedpay.comStrict-Transport-Security: max-age31536000; includeSubDomains; preloadSet-Cookie: JSESSIONIDF9ECAD29724F4BE6CE5C83B18471A75B; Path/; Secure; HttpOnly;HttpOnly;Secure;HttpOnly;Secure;SameSiteNone;X-XSS-Protection: 1; modeblock

!DOCTYPE html PUBLIC -//W3C//DTD XHTML 1.0 Strict//EN http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd>html xmlnshttp://www.w3.org/1999/xhtml xml:langen>head>    meta http-equivcontent-type contentapplication/xhtml+xml; charsetutf-8 />    meta nameauthor contentGuidewire />    meta namegenerator contentInsuranceNow />    link relapple-touch-icon sizes180x180 hrefapple-touch-icon.png/>    link relicon typeimage/png hreffavicon-32x32.png sizes32x32/>    link relicon typeimage/png hreffavicon-16x16.png sizes16x16/>    link relmanifest hrefmanifest.json/>    link relmask-icon hrefsafari-pinned-tab.svg color#5bbad5/>    meta nametheme-color content#ffffff/>    title>Guidewire InsuranceNow™/title>/head>body>	script typetext/javascript>	    // Redirect JavaScript	    // The line below will automatically load the specified page in	    // a browser that support javascript, while non JavaScript-enabled	    // browsers will ignore the command and display this page.	    this.location  innovation?rqCOUserStartPage;	/script>    table cellspacing10>        tr>            td>a hrefinnovation?rqCOUserStartPage>Guidewire InsuranceNow™/a>/td>        /tr>           /table>/body>/html>

Subdomains

Date	Domain	IP
expressconnect2-st1.nationwideexcessandsurplus.com	2025-01-01	52.13.199.168
expressconnect2-uat2.nationwideexcessandsurplus.com	2025-01-01	52.13.199.168
expressconnect2-st2.nationwideexcessandsurplus.com	2024-11-13	44.241.228.229
expressconnect2-dev2.nationwideexcessandsurplus.com	2024-11-13	44.241.228.229
expressconnect2-st3.nationwideexcessandsurplus.com	2025-01-01	52.13.199.168
expressconnect2-dev3.nationwideexcessandsurplus.com	2024-11-13	44.241.228.229
launch.nationwideexcessandsurplus.com	2024-11-25	104.70.127.18
talon.nationwideexcessandsurplus.com	2024-06-03	52.40.50.114
forms.nationwideexcessandsurplus.com	2024-11-17	23.46.228.170
access.nationwideexcessandsurplus.com	2023-08-15	104.96.163.206
expressconnect2-uat.nationwideexcessandsurplus.com	2025-01-01	44.237.200.94
act.nationwideexcessandsurplus.com	2023-08-15	23.53.34.8
expressconnect2-pt.nationwideexcessandsurplus.com	2024-11-13	44.241.228.229
www.nationwideexcessandsurplus.com	2024-09-28	23.46.228.169

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > expressconnect2-uat.nationwideexcessandsurplus.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains