Domain > securemessage.express-scripts.com

More information on this domain is in AlienVault OTX

Whois

Property	Value
Email	domains@express-scripts.com
NameServer	NS02.MEDCO.COM
Created	1995-09-28 00:00:00
Changed	2013-02-03 00:00:00
Expires	2020-09-27 00:00:00
Registrar	MARKMONITOR INC.

DNS Resolutions

Date	IP Address
2014-05-28	167.211.4.32 (ClassC)
2014-05-30	64.129.212.30 (ClassC)
2014-06-10	167.211.4.30 (ClassC)
2014-06-12	64.129.212.31 (ClassC)
2014-09-11	167.211.4.31 (ClassC)
2015-02-27	64.129.212.33 (ClassC)
2015-10-23	64.129.212.32 (ClassC)
2016-06-20	167.211.104.141 (ClassC)
2019-10-01	167.18.104.140 (ClassC)
2019-11-26	167.211.104.140 (ClassC)
2022-11-10	148.163.137.209 (ClassC)
2025-08-01	148.163.133.209 (ClassC)

HTTP/1.1 403 ForbiddenDate: Mon, 25 Nov 2024 16:42:52 GMTServer:  Strict-Transport-Security: max-age31536000; includeSubDomainsLast-Modified: Thu, 25 Jul 2024 20:14:14 GMTETag: 898-61e1809e03180Accept

!DOCTYPE html>html>	!--	  Copyright (c) 2004-2024 by Proofpoint, Inc.  All Rights Reserved.	  See the file COPYRIGHT for details on copyright notices for	  licensed components used in this product.	  See the file src/opensource/OPENSOURCE for details on copyright notices	  required by Open Source components used in this product.	  Proofpoint, Proofpoint Protection Server, MLX Engine, and the Proofpoint	  logos are trademarks or registered trademarks of Proofpoint, Inc.	-->	head>		!-- Note:  this html page need to be at least 512 byte for IE to display its content. -->		title>Forbidden/title>		style typetext/css>!--		body		{			background-color: #F2F2F2;			font-family: Lucida Grande, Arial, Helvetica, sans-serif;			font-size: 8pt;		}		div.outerMessageBoxFrame		{			background-color: #FFFFFF;			border-color: #CCCCCC;			border-style: solid;			border-width: 1px;			padding: 1px;			margin-top: 100px;			margin-left: 100px;			margin-right: 100px;		}		div.messageTitleBar		{			background-color: #EEEEEE;			color: #333333;			font-size: 12pt;			font-weight: bold;			padding-left: 1em;			padding-top: 0.5ex;			padding-bottom: 0.5ex;		}		div.messageContentArea		{			padding-top: 5ex;			padding-bottom: 5ex;			padding-left: 1.5em;			padding-right: 1.5em;		}		div.htmlErrorMessageArea		{			margin-left: 1.5em;			margin-right: 1.5em;			padding-top: 0.5ex;			padding-bottom: 0.5ex;			text-align: right;			border-top-width: 1px;			border-top-style: solid;			border-top-color: #CCCCCC;		}		span.htmlErrorMessage		{			color: #CCCCCC;		}		div.copyrightStatementArea		{			color:rgba(0, 0, 0, 0.5);			text-align: center;		}		-->		/style>	/head>	body>		div classouterMessageBoxFrame>			div classmessageTitleBar>				Forbidden			/div>			div classmessageContentArea>				p>					You do not have permission to access this page.				/p>			/div>			div classhtmlErrorMessageArea>				span classhtmlErrorMessage>					HTTP Error 403				/span>			/div>		/div>		div classcopyrightStatementArea>			Copyright © 2009-2024 Proofpoint, Inc.  All rights reserved.		/div>	/body>

Subdomains

Date	Domain	IP
fl1imail03.express-scripts.com	2014-04-25	167.211.4.32
ns04.express-scripts.com	2025-06-15	167.211.104.150
prc.express-scripts.com	2025-06-03	167.211.52.65
securemessage.express-scripts.com	2022-11-10	148.163.137.209
careersblog.express-scripts.com	2014-08-08	184.168.36.1
i.mail.express-scripts.com	2023-08-25	104.103.220.65
dl.mail.express-scripts.com	2024-01-13	13.56.7.252
m.express-scripts.com	2015-08-11	167.211.101.39
spam.express-scripts.com	2025-06-10	148.163.133.209
p.login.developer.express-scripts.com	2024-11-25	44.208.229.144
int.login.developer.express-scripts.com	2024-12-01	3.234.87.122
dev.login.developer.express-scripts.com	2025-01-02	54.166.179.204
autodiscover.express-scripts.com	2025-06-03	167.18.79.97
dl.health-programs.express-scripts.com	2024-03-01	13.56.10.172
dl.orders.express-scripts.com	2024-01-13	13.56.7.252
careers.express-scripts.com	2024-05-30	100.24.229.173
dl.benefits.express-scripts.com	2025-07-16	18.144.119.190
www.express-scripts.com	2025-06-03	167.211.52.57

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > securemessage.express-scripts.com

Is this malicious?

Whois

DNS Resolutions

Port 443

Subdomains