Domain > sso.nonprod.groupriskanalytics.optum.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2024-11-25	20.118.48.6 (ClassC)
2025-10-26	40.77.102.169 (ClassC)

Port 80

HTTP/1.1 403 Ip ForbiddenContent-Length: 1892Connection: closeContent-Type: text/htmlDate: Mon, 25 Nov 2024 02:25:49 GMTx-ms-forbidden-ip: 52.40.234.105

!DOCTYPE html>html>head>    title>Web App - Unavailable/title>    style typetext/css>        html {            height: 100%;            width: 100%;        }        #feature {            width: 960px;            margin: 95px auto 0 auto;            overflow: auto;        }        #content {            font-family: Segoe UI;            font-weight: normal;            font-size: 22px;            color: #ffffff;            float: left;            width: 460px;            margin-top: 68px;            margin-left: 0px;            vertical-align: middle;        }            #content h1 {                font-family: Segoe UI Light;                color: #ffffff;                font-weight: normal;                font-size: 60px;                line-height: 48pt;                width: 800px;            }        p a, p a:visited, p a:active, p a:hover {            color: #ffffff;        }        #content a.button {            background: #0DBCF2;            border: 1px solid #FFFFFF;            color: #FFFFFF;            display: inline-block;            font-family: Segoe UI;            font-size: 24px;            line-height: 46px;            margin-top: 10px;            padding: 0 15px 3px;            text-decoration: none;        }            #content a.button img {                float: right;                padding: 10px 0 0 15px;            }            #content a.button:hover {                background: #1C75BC;            }    /style>/head>body bgcolor#00abec>    div idfeature>        div idcontent>            h1 idunavailable>Error 403 - Forbidden/h1>            p idtryAgain>The web app you have attempted to reach has blocked your access./p>        /div>    /div>/body>/html>

Port 443

HTTP/1.1 403 Ip ForbiddenContent-Length: 1892Connection: closeContent-Type: text/htmlDate: Mon, 25 Nov 2024 02:25:49 GMTx-ms-forbidden-ip: 52.40.234.105

Subdomains

Date	Domain	IP
prod2.groupriskanalytics.optum.com	2025-05-03	40.83.57.174
nonprod2.groupriskanalytics.optum.com	2024-11-25	40.77.102.169
staging2.groupriskanalytics.optum.com	2025-05-30	13.67.236.124
batch2.groupriskanalytics.optum.com	2025-05-26	52.165.32.221
sandbox2.groupriskanalytics.optum.com	2025-05-27	13.89.50.181
nonprod.groupriskanalytics.optum.com	2024-11-25	20.221.90.254
sso.nonprod.groupriskanalytics.optum.com	2024-11-25	20.118.48.6
staging.groupriskanalytics.optum.com	2024-11-25	20.236.195.5
batch.groupriskanalytics.optum.com	2024-11-24	20.80.71.227
sso.groupriskanalytics.optum.com	2025-01-01	20.40.202.20

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > sso.nonprod.groupriskanalytics.optum.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains