Domain > forms.insurance.claims.principal.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2024-10-09	3.166.181.30 (ClassC)
2025-06-02	3.166.96.47 (ClassC)
2025-06-02	3.166.96.75 (ClassC)
2026-02-22	3.163.24.36 (ClassC)

HTTP/1.1 200 OKContent-Type: text/htmlContent-Length: 2000Connection: keep-aliveDate: Sat, 21 Feb 2026 23:25:42 GMTLast-Modified: Tue, 10 Feb 2026 14:56:24 GMTETag: 78ce253cf3074091dfcec7a23dea001ex-amz-server-side-encryption: AES256x-amz-version-id: CB2jovCc8muSAyOIfVl_ODHG3NTQNRKzAccept-Ranges: bytesServer: AmazonS3X-Cache: Hit from cloudfrontVia: 1.1 2830cb5e13bca87f2bb0e5ab70955cce.cloudfront.net (CloudFront)X-Amz-Cf-Pop: HIO52-P2X-Amz-Cf-Id: 3tw7ecdHM-GZON7YbJVDwa8XVa54pnddy1ho1CEUArZHMUMRH2HfogAge: 44628X-XSS-Protection: 1; modeblockX-Frame-Options: SAMEORIGINReferrer-Policy: strict-origin-when-cross-originX-Content-Type-Options: nosniffStrict-Transport-Security: max-age31536000; includeSubDomains

!doctype html>html langen>head>script>var dataLayerwindow.dataLayerwindow.dataLayer||;dataLayer.push({event:info-added,business-units:{gcbi:!1,pgi:!1,pi:!1,ris:!1,usis:!0}})/script>script>!function(e,t,a,n){enen||,en.push({gtm.start:(new Date).getTime(),event:gtm.js});var gt.getElementsByTagName(a)0,mt.createElement(a);m.async!0,m.srchttps://www.googletagmanager.com/gtm.js?idGTM-TN78FGB,g.parentNode.insertBefore(m,g)}(window,document,script,dataLayer)/script>meta charsetutf-8/>link relshortcut icon typeimage/x-icon hrefhttps://www.principalcdn.com/css/horizon/v2/favicon.ico>link hrefhttps://clinicaltables.nlm.nih.gov/autocomplete-lhc-versions/17.0.2/autocomplete-lhc.min.css relstylesheet>link hrefhttps://cdn.jsdelivr.net/npm/select2@4.1.0-rc.0/dist/css/select2.min.css relstylesheet/>meta nameviewport contentwidthdevice-width,initial-scale1/>meta nametheme-color content#000000/>meta namedescription contentPrincipal claim forms/>link relapple-touch-icon hrefhttps://www.principalcdn.com/css/horizon/v2/apple-touch-icon.png/>link relmanifest href/manifest.json/>title>Claim Forms/title>script deferdefer src/static/js/main.bbf15f5b.js>/script>link href/static/css/main.3e9ddca1.css relstylesheet>/head>body>noscript>iframe srchttps://www.googletagmanager.com/ns.html?idGTM-TN78FGB height0 width0 styledisplay:none;visibility:hidden>/iframe>/noscript>noscript>You need to enable JavaScript to run this app./noscript>span idpds-sessionTimer-config data-prevent-auto-loadtrue>/span>div idroot>/div>script srchttps://ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js>/script>script srchttps://cdn.jsdelivr.net/npm/select2@4.1.0-rc.0/dist/js/select2.min.js>/script>script typetext/javascript srchttps://clinicaltables.nlm.nih.gov/autocomplete-lhc-versions/18.3.0/autocomplete-lhc.min.js>/script>/body>/html>

Subdomains

Date	Domain	IP
insurance.claims.principal.com	2024-11-25	99.84.66.86
forms-service.insurance.claims.principal.com	2024-05-27	3.223.194.205
forms.insurance.claims.principal.com	2026-02-22	3.163.24.36

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > forms.insurance.claims.principal.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains