Domain > partners.wellz.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2024-12-05	18.238.25.36 (ClassC)
2026-02-25	3.163.24.111 (ClassC)

HTTP/1.1 301 Moved PermanentlyServer: CloudFrontDate: Wed, 25 Feb 2026 18:25:58 GMTContent-Type: text/htmlContent-Length: 167Connection: keep-aliveLocation: https://partners.wellz.com/X-Cache: Redirect from cloudfrontVia: 1.1 a235f5b7b15b9c8025af96fb0081dd58.cloudfront.net (CloudFront)X-Amz-Cf-Pop: HIO52-P2X-Amz-Cf-Id: 8CDKXOsge-xA2ZBf7iqCtT5aPjCgu1DU7h_tiLN7kXAeBKcqx15_0gX-XSS-Protection: 1; modeblockX-Frame-Options: SAMEORIGINReferrer-Policy: strict-origin-when-cross-originContent-Security-Policy: default-src self; script-src self unsafe-inline unsafe-eval https://*.clevertap-prod.com https://*.googletagmanager.com https://*.google-analytics.com https://d2r1yp2w7bby2u.cloudfront.net/js/a.js https://*.wzrkt.com; style-src self unsafe-inline https://fonts.googleapis.com; font-src self https://fonts.gstatic.com data: ; img-src self data: https://*.s3.eu-west-1.amazonaws.com https://*.s3.us-east-1.amazonaws.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://*.google.pt https://*.google.com.br https://flagcdn.com; connect-src self data: https://*.wellz.com https://wellz-care.auth.us-east-1.amazoncognito.com https://cognito-idp.us-east-1.amazonaws.com https://browser-intake-datadoghq.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://api.timekit.io https://ext-otel.nv.prd.eu.gympass.cloud https://unleash-edge.eu.wellz.com https://distributions.crowdin.net wss://*.us1.twilio.com wss://global.vss.twilio.com; frame-src self https://player.vimeo.com https://td.doubleclick.net https://wellz.daily.co; media-src self https://gympass-production-nv-eu-west-1-wellz-cms-strapi.s3.eu-west-1.amazonaws.com https://gympass-production-nv-eu-west-1-strapinv.s3.eu-west-1.amazonaws.com; object-src none; base-uri self; worker-src blob: https://partners-cf.eu.wellz.com https://partners.wellz.com; manifest-src self;X-Content-Type-Options: nosniffVary: Origin

html>head>title>301 Moved Permanently/title>/head>body>center>h1>301 Moved Permanently/h1>/center>hr>center>CloudFront/center>/body>/html>

Port 443

HTTP/1.1 200 OKContent-Type: text/htmlContent-Length: 2690Connection: keep-aliveDate: Wed, 25 Feb 2026 18:25:59 GMTAccept-Ranges: bytesServer: nginx/1.21.3Last-Modified: Thu, 15 Jan 2026 19:55:55 GMTVary: Accept-EncodingETag: 6969464b-a82Expires: Wed, 25 Feb 2026 18:25:58 GMTCache-Control: no-cacheX-Cache: Miss from cloudfrontVia: 1.1 44e3ef26e727fc044d711ef45aefcd72.cloudfront.net (CloudFront)X-Amz-Cf-Pop: HIO52-P2X-Amz-Cf-Id: fxCHoHXN_kunOvB0ccChhYwgInwipnoDHfcRFE_HS5cHzaqeS8y6FQX-XSS-Protection: 1; modeblockX-Frame-Options: SAMEORIGINReferrer-Policy: strict-origin-when-cross-originContent-Security-Policy: default-src self; script-src self unsafe-inline unsafe-eval https://*.clevertap-prod.com https://*.googletagmanager.com https://*.google-analytics.com https://d2r1yp2w7bby2u.cloudfront.net/js/a.js https://*.wzrkt.com; style-src self unsafe-inline https://fonts.googleapis.com; font-src self https://fonts.gstatic.com data: ; img-src self data: https://*.s3.eu-west-1.amazonaws.com https://*.s3.us-east-1.amazonaws.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://*.google.pt https://*.google.com.br https://flagcdn.com; connect-src self data: https://*.wellz.com https://wellz-care.auth.us-east-1.amazoncognito.com https://cognito-idp.us-east-1.amazonaws.com https://browser-intake-datadoghq.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://api.timekit.io https://ext-otel.nv.prd.eu.gympass.cloud https://unleash-edge.eu.wellz.com https://distributions.crowdin.net wss://*.us1.twilio.com wss://global.vss.twilio.com; frame-src self https://player.vimeo.com https://td.doubleclick.net https://wellz.daily.co; media-src self https://gympass-production-nv-eu-west-1-wellz-cms-strapi.s3.eu-west-1.amazonaws.com https://gympass-production-nv-eu-west-1-strapinv.s3.eu-west-1.amazonaws.com; object-src none; base-uri self; worker-src blob: https://partners-cf.eu.wellz.com https://partners.wellz.com; manifest-src self;X-Content-Type-Options: nosniffStrict-Transport-Security: max-age31536000; includeSubDomains; preloadVary: Origin

html>  head>    meta charsetutf-8 />    title>Wellz Care/title>    base href/new-provider/ />    meta namecolor-scheme contentlight dark />    meta      nameviewport      contentviewport-fitcover, widthdevice-width, initial-scale1.0, minimum-scale1.0, maximum-scale1.0, user-scalableno    />    meta nameformat-detection contenttelephoneno />    meta namemsapplication-tap-highlight contentno />    !-- Checks to use dark and light icon themes -->    link relshortcut icon idfavicon href/assets/favicon/light/favicon.ico />    link relicon idicon-32 typeimage/png sizes32x32 href/assets/favicon/light/favicon-32x32.png>    link relicon idicon-16 typeimage/png sizes16x16 href/assets/favicon/light/favicon-16x16.png>    link relmanifest idmanifest href/assets/favicon/light/site.webmanifest />    script>      const usesDarkMode  window.matchMedia((prefers-color-scheme: dark)).matches || false;      const favicon  document.getElementById(favicon);      const manifest  document.getElementById(manifest);      const icon32  document.getElementById(icon-32);      const icon16  document.getElementById(icon-16);      function switchIcon(usesDarkMode) {        if (usesDarkMode) {          favicon.href  /assets/favicon/dark/favicon.ico;          manifest.href  /assets/favicon/dark/site.webmanifest;          icon32.href  /assets/favicon/dark/favicon-32x32.png          icon16.href  /assets/favicon/dark/favicon-16x16.png        } else {          favicon.href  /assets/favicon/light/favicon.ico;          manifest.href  /assets/favicon/light/site.webmanifest;          icon32.href  /assets/favicon/light/favicon-32x32.png          icon16.href  /assets/favicon/light/favicon-16x16.png        }      }      window.matchMedia((prefers-color-scheme: dark)).addEventListener( change, (e) > switchIcon(e.matches));      switchIcon(usesDarkMode);    /script>    !-- add to homescreen for ios -->    meta nameapple-mobile-web-app-capable contentyes />    meta nameapple-mobile-web-app-title contentWellz Care />    meta nameapple-mobile-web-app-status-bar-style contentblack />    link relmask-icon href/assets/favicon/light/safari-pinned-tab.svg color#5bbad5>    link relapple-touch-icon sizes180x180 href/assets/favicon/light/apple-touch-icon.png>    script typemodule crossorigin src/assets/index-9fad22b6.js>/script>    link relstylesheet href/assets/index-1d0e2dfb.css>  /head>  body>    div idroot>/div>      /body>/html>

Subdomains

Date	Domain	IP
billing.wellz.com	2026-01-29	44.215.47.59
app.wellz.com	2025-10-10	3.169.173.38
partners.wellz.com	2026-02-25	3.163.24.111
www.wellz.com	2024-11-25	44.209.38.62

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > partners.wellz.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains