Domain > rgh.ecs.retp.c1.vanguard.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2020-12-17	65.9.68.28 (ClassC)
2020-12-17	65.9.68.62 (ClassC)
2020-12-17	65.9.68.70 (ClassC)
2021-04-19	13.225.53.70 (ClassC)
2021-05-11	54.230.103.15 (ClassC)
2021-05-11	54.230.103.93 (ClassC)
2021-06-07	13.226.178.87 (ClassC)
2021-07-26	54.230.31.92 (ClassC)
2022-01-03	52.222.158.13 (ClassC)
2022-01-16	99.84.125.29 (ClassC)
2022-06-28	18.65.185.107 (ClassC)
2023-12-08	18.67.17.118 (ClassC)
2025-02-26	3.163.165.98 (ClassC)
2025-04-04	3.163.24.126 (ClassC)
2025-04-09	3.163.24.86 (ClassC)
2025-04-17	3.163.24.100 (ClassC)
2025-04-23	3.163.24.37 (ClassC)
2025-05-27	3.163.165.26 (ClassC)
2025-06-05	3.163.165.127 (ClassC)

HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Wed, 23 Aug 2023 03:07:29 GMTContent-Type: text/htmlContent-Length: 915Connection: keep-aliveX-Cache: Error from cloudfrontVia: 1.1 2f64e28be83a9bbc21e5af

!DOCTYPE HTML PUBLIC -//W3C//DTD HTML 4.01 Transitional//EN http://www.w3.org/TR/html4/loose.dtd>HTML>HEAD>META HTTP-EQUIVContent-Type CONTENTtext/html; charsetiso-8859-1>TITLE>ERROR: The request could not be satisfied/TITLE>/HEAD>BODY>H1>403 ERROR/H1>H2>The request could not be satisfied./H2>HR noshade size1px>Bad request.We cant connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.BR clearall>If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.BR clearall>HR noshade size1px>PRE>Generated by cloudfront (CloudFront)Request ID: BCjv69Kg1so1xXur5iJ6T2uOapYgHnrk7SRtmXrqOTohDGgLhkBT3g/PRE>ADDRESS>/ADDRESS>/BODY>/HTML>

Port 443

HTTP/1.1 200 OKContent-Type: text/htmlContent-Length: 1759Connection: keep-aliveCache-Control: no-cache, no-store, max-age0, must-revalidateDate: Wed, 23 Aug 2023 03:07:29 GMTExpires: 0Pragma: no-cach

!DOCTYPE html>html langen>head>  title>RGH/title>  meta charsetutf-8>  meta nameviewport contentwidthdevice-width, initial-scale1>  meta namerobots contentnoindex, nofollow>  meta http-equivX-UA-Compatible contentIEedge>  link relicon typeimage/x-icon hrefhttps://www.vanguard.com/favicon.ico>  link relstylesheet typetext/css hrefglobal-header/vgncss>!-- Use full URL -->  link relstylesheet typetext/css hrefglobal-header/styles>!-- Use full URL -->/head>body>  div idvgn-globalHeader classrgh-header data-vgn-sourcetaxonomy>/div>!-- Use full URL -->  div idmainContent>  	!-- Page content goes here -->  	br>  	br>  	br>  	br>  	a href/>Full nav/a>  	br>  	a href/?noNavtrue>No nav (no menu, no site preferences, no social links)/a>  	br>  	a href/?internalOnlytrue>Internal only (adds green indicator bar on top, no effect externally)/a>  	br>  	a href/?noNavtrue&internalOnlytrue>Internal only no nav/a>  	br>  	a href/?corporatetrue>Corporate (non-Retail-specific, no menu)/a>  	br>  	a href/?corporatetrue&internalOnlytrue>Corporate internal only/a>  	br>  	!-- Do not include this script on any page. It is only meant for RGH demo page links to work. -->	script typetext/javascript>		var header  document.getElementById(vgn-globalHeader);		header.setAttribute(data-vgn-source, header.getAttribute(data-vgn-source) + window.location.search);	/script>  	br>  	br>  	br>  	br>  /div>  div idvgn-globalFooter data-ref#vgn-globalHeader >/div>    script typetext/javascript srcglobal-header/vgnjs>/script>!-- Use full URL -->/body>/html>

Subdomains

Date	Domain	IP
xmm-mobile-bff.retp.c1.vanguard.com	2024-06-23	18.161.6.100
pvr-sign-up.retp.c1.vanguard.com	2025-03-15	99.84.66.57
digital-advisor.retp.c1.vanguard.com	2024-06-23	3.163.24.61
static.ecs.retp.c1.vanguard.com	2024-06-26	3.163.24.41
rgh.ecs.retp.c1.vanguard.com	2025-02-26	3.163.165.98
apps.ecs.retp.c1.vanguard.com	2022-01-20	54.192.73.129
retforms.retp.c1.vanguard.com	2024-07-01	3.163.24.124
mc3-cloudfront.retp.c1.vanguard.com	2024-11-06	18.65.229.49

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > rgh.ecs.retp.c1.vanguard.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains