Domain > www.stanstedexpress.com

More information on this domain is in AlienVault OTX

Is this malicious?

Most users have voted this as not malicious

Whois

Property	Value
Email	gtld@demys.com
NameServer	NS1.DEMYSDNS.NET
Created	1999-09-21 00:00:00
Changed	2016-06-20 00:00:00
Expires	2017-09-21 00:00:00
Registrar	DEMYS LIMITED

DNS Resolutions

Date	IP Address
2014-03-06	5.102.186.21 (ClassC)
2024-06-11	104.18.6.50 (ClassC)
2024-07-22	104.18.7.50 (ClassC)
2024-08-04	104.18.43.208 (ClassC)
2024-11-12	104.18.3.179 (ClassC)
2024-12-28	104.18.2.179 (ClassC)

Port 443

HTTP/1.1 200 OKDate: Tue, 11 Jun 2024 16:41:37 GMTContent-Type: text/html; charsetutf-8Transfer-Encoding: chunkedConnection: keep-aliveCache-Control: no-cache,no-storePragma: no-cacheExpires: -1Vary:

!DOCTYPE html>html dirltr langen classno-js usn>head>        !-- Google Fonts -->link reldns-prefetch href//fonts.googleapis.com>link reldns-prefetch href//fonts.gstatic.com>    script typeapplication/ld+json>{  @context: https://schema.org/,  @type: WebSite,  name: Stansted Express,  url: https://www.stanstedexpress.com/,  potentialAction: {    @type: SearchAction,    target: https://www.stanstedexpress.com/search-results/?search_field_modal{search_term_string},    query-input: required namesearch_term_string  }}/script>    meta charsetutf-8>            script>                window.dataLayer  window.dataLayer || ;            /script>                !-- Optimize Page hiding snippet -->                style>                    .async-hide {                        opacity: 0 !important                    }                /style>                script>                    (function (a, s, y, n, c, h, i, d, e) {                        s.className +   + y; h.start  1 * new Date;                        h.end  i  function () { s.className  s.className.replace(RegExp( ? + y), ) };                        (an  an || ).hide  h; setTimeout(function () { i(); h.end  null }, c); h.timeout  c;                    })(window, document.documentElement, async-hide, dataLayer, 4000,                        { GTM-PS3H4L: true });                /script>                !-- End Optimize Page hiding snippet -->                !-- Google Tag Manager -->                script>                    (function (w, d, s, l, i) {                        wl  wl || ; wl.push({                            gtm.start:                                new Date().getTime(), event: gtm.js                        }); var f  d.getElementsByTagName(s)0,                            j  d.createElement(s), dl  l ! dataLayer ? &l + l : ; j.async  true; j.src                                 https://www.googletagmanager.com/gtm.js?id + i + dl; f.parentNode.insertBefore(j, f);                    })(window, document, script, dataLayer, GTM-PS3H4L);                /script>

Subdomains

Date	Domain	IP
mobile.stanstedexpress.com	2024-07-22	104.18.6.50
backoffice-api.stanstedexpress.com	2024-06-11	104.18.7.50
hotels.stanstedexpress.com	2024-07-24	151.101.21.134
www.stanstedexpress.com	2024-06-11	104.18.6.50

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]