Domain > muosupport.expandshare.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2022-04-28	3.223.128.20 (ClassC)
2024-11-02	3.231.48.54 (ClassC)
2026-01-04	172.66.0.145 (ClassC)

HTTP/1.1 302 FoundDate: Sun, 04 Jan 2026 02:24:04 GMTContent-Type: text/html; charsetutf-8Transfer-Encoding: chunkedConnection: keep-aliveCF-RAY: 9b87470cfbe7fef4-PDXlocation: https://muosupport.expandshare.com/support/homestatus: 302 FoundCache-Control: no-storestrict-transport-security: max-age31536000; includeSubDomains; preloadpragma: no-cachex-xss-protection: 1; modeblockx-request-id: 6bf6c34c-d938-9956-ac3d-b06dcbdde3d4x-frame-options: SAMEORIGINx-content-type-options: nosniffcontent-security-policy: default-src self; connect-src self *.freshconnect.io/ *.freshsales.io/ *.freshworks.com/ *.freshdesk.com/ *.freshworksapi.com/ *.freshdeskusercontent.com/ *.freshdeskusercontent-euc.com/ *.freshdeskusercontent-in.com/ *.freshdeskusercontent-aus.com/ *.fconstage.io/ analytics.inlinemanual.com/__profile analytics.inlinemanual.com/__ptm backend.getbeamer.com/ heapanalytics.com/ d3h0owdjgzys62.cloudfront.net/ d2uy6ubiilaqku.cloudfront.net/assets/ dcdu85ocrj5q6.cloudfront.net/ dtdafz6i4gvv1.cloudfront.net/ d3r4aewxkdubw4.cloudfront.net/ d2lz1e868xzctj.cloudfront.net/ rum.haystack.es/freshdesk/analytics fonts.googleapis.com/ fonts.gstatic.com/ sentry.io/api/ wss://*.freshworksapi.com/ wss://*.freshdesk.com/ fg8vvsvnieiv3ej16jby.litix.io/ distillery.wistia.com/ pipedream.wistia.com/ freshworks.asknice.ly/ embedwistia-a.akamaihd.net/ embed-fastly.wistia.com/ maps.googleapis.com/ graph.microsoft.com/v1.0/ freshcaller-attachments.s3.amazonaws.com/production/ euc-freshcaller-attachments.s3.eu-central-1.amazonaws.com/production/ mec-freshcaller-attachments.s3.me-central-1.amazonaws.com/production/ au-freshcaller-attachments.s3-ap-southeast-2.amazonaws.com/production/ in-freshcaller-attachments.s3.ap-south-1.amazonaws.com/production/ pubsub.rtschannel.com/ api.fdcollab.com/ wss://pubsub.rtschannel.com/ cloudflareinsights.com/ data: blob: api.appcues.net/ wss://api.appcues.net/ fast.appcues.com/ cdn.jsdelivr.net/npm/@freshworks/crayons-icon@next/dist/ translate.googleapis.com/translate_a/t translate.googleapis.com/element/log fast.wistia.net/ fast.wistia.com/ embed-cloudfront.wistia.com/deliveries/ app.inlinemanual.com/ client-api.auryc.com/ *.surveyserv.com *.freshsurvey.com *.freddybot.com *.freshreports.com rum.haystack.es/freshreports/analytics dsv27oefxtf0.cloudfront.net/; font-src self *.freshdesk.com/ fonts.gstatic.com/ fonts.googleapis.com/ cdnjs.cloudflare.com/ajax/libs/font-awesome/4.2.0/fonts/ fast.wistia.net/ fast.wistia.com/ *.freddybot.com cdn.inlinemanual.com/inm/author/ data:; frame-src self https:; img-src self https: data: blob:; media-src self https: blob:; object-src none; script-src self *.freshworksapi.com/ *.freshworks.com/ *.myfreshworks.com/ *.freshdesk.com/ *.freshchat.com/ *.freshcaller.com/ *.freshconnect.io/ *.freshcloud.io/ *.fconstage.io/ accounts.freshworks.com/ wchat.freshchat.com/js/ wchat.freshchat.com/widget/js/ assets.calendly.com/assets/external/widget.js d3h0owdjgzys62.cloudfront.net/ d2uy6ubiilaqku.cloudfront.net/ dtdafz6i4gvv1.cloudfront.net/ dcdu85ocrj5q6.cloudfront.net/ d3r4aewxkdubw4.cloudfront.net/ app.getbeamer.com/js/beamer-embed.js analytics.inlinemanual.com/ cdn.inlinemanual.com/embed/ cdn.heapanalytics.com/ s3.amazonaws.com/assets.freshdesk.com/ cdnjs.cloudflare.com/ ajax.cloudflare.com/ static.cloudflareinsights.com/ js.chargebee.com/v1/chargebee.js js.braintreegateway.com/v1/braintree.js static.freshdev.io/ fast.wistia.net/ fast.wistia.com/ static.getbeamer.com/ calendly.com/ unpkg.com/@webcomponents/webcomponentsjs@2.4.3/custom-elements-es5-adapter.js unpkg.com/@webcomponents/webcomponentsjs@2.4.3/webcomponents-loader.js js-agent.newrelic.com/ www.googletagmanager.com/gtag/js static.asknice.ly/dist/standalone/asknicely-in-app-conversation.js www.dropbox.com/static/api/2/dropins.js js.live.net/v7.2/OneDrive.js apis.google.com/ asknice.ly bam.nr-data.net/ www.google-analytics.com/analytics.js maps.googleapis.com/ unpkg.com/@freshworks/crayons@v3/dist/crayons/crayons.esm.js unpkg.com/@freshworks/crayons@v3/dist/crayons/crayons.js s3.amazonaws.com/freshcaller-widget-loader/ in-freshcaller-widget-loader.s3.ap-south-1.amazonaws.com/ s3.eu-central-1.amazonaws.com/euc-freshcaller-widget-loader/ mec-freshcaller-widget-loader.s3.me-central-1.amazonaws.com/ au-freshcaller-widget-loader.s3-ap-southeast-2.amazonaws.com/ www.dropbox.com/static/api/1/dropbox.js fast.appcues.com/ translate.google.com/translate_a/element.js translate.googleapis.com/_/translate_http/_/js/ translate-pa.googleapis.com/v1/supportedLanguages cdn.surveyserv.com/widget.min.js cdn.freshdev.io/assets/marketplace-heap.js cdn.freshcloud.io/assets/marketplace-heap.js cdn.inlinemanual.com/inm/author/ app.inlinemanual.com/ *.surveyserv.com *.freshsurvey.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.freddybot.com d3el5jsqgryo0a.cloudfront.net accounts.google.com/ unsafe-inline unsafe-eval; style-src self *.freshworks.com *.myfreshworks.com/ *.freshchat.com/ d3h0owdjgzys62.cloudfront.net/ dcdu85ocrj5q6.cloudfront.net/ dtdafz6i4gvv1.cloudfront.net/ d3r4aewxkdubw4.cloudfront.net/ d2uy6ubiilaqku.cloudfront.net/ fonts.googleapis.com/ app.getbeamer.com/styles/beamer-embed.css s3.amazonaws.com/assets.freshdesk.com/ *.freshdesk.com/ wchat.freshchat.com/ calendly.com/ unpkg.com/@webcomponents/webcomponentsjs@2.4.3/custom-elements-es5-adapter.js unpkg.com/@webcomponents/webcomponentsjs@2.4.3/webcomponents-loader.js static.asknice.ly/dist/standalone/asknicely-in-app-conversation.css fast.appcues.com/ asknice.ly *.surveyserv.com *.freshsurvey.com *.freddybot.com cdn.inlinemanual.com/inm/author/ unsafe-inline; worker-src self blob:expires: Fri, 01 Jan 1990 00:00:00 GMTSet-Cookie: _x_w29_2; path/; HttpOnly; secureSet-Cookie: __cf_bmQ1R0zMnNYYmqT2PDyj2JCixm0SmZFfRIMlmimzO6WQ8-1767493444-1.0.1.1-wTOmUESWGgBEM9MsrWEV7ZHqV.ehX1P_qhMjZS9Eti72c07yKBzU9qIAYpDgf_anyFaRCx75bbnkuvKr1sNiopj5quO1F4OjiVxmtxJ.6LI; path/; expiresSun, 04-Jan-26 02:54:04 GMT; domain.muosupport.expandshare.com; HttpOnly; Securex-envoy-upstream-service-time: 39x-trace-id: 00-17f99c0052f135c84120fe7658fe7223-c9d6a4f07f29067b-01nel: { report_to: nel-endpoint-freshdesk, max_age: 2592000, include_subdomains: true}report-to: { group: nel-endpoint-freshdesk, max_age: 2592000, include_subdomains: true, endpoints: {url: https://edge-admin.us-east-1.freshedge.net/nelreports/freshdesk}}x-server-processing-time-ms: 44x-fw-ratelimiting-managed: falsecf-cache-status: DYNAMICServer: cloudflare

html>body>You are being a hrefhttps://muosupport.expandshare.com/support/home>redirected/a>./body>/html>

Subdomains

Date	Domain	IP
prod.medusa.expandshare.com	2023-09-29	44.214.160.103
prod.search.expandshare.com	2023-09-29	34.206.134.180
cdn.expandshare.com	2023-10-30	52.216.109.131
hills.expandshare.com	2025-02-27	52.70.22.156
support.expandshare.com	2024-07-28	44.198.39.175
muosupport.expandshare.com	2026-01-04	172.66.0.145
www.expandshare.com	2024-07-22	198.49.23.144
apply.expandshare.com	2024-03-30	65.8.161.49

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > muosupport.expandshare.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains