Domain > ddia.shop.insurancemenu.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2021-12-09	52.222.149.56 (ClassC)
2025-03-08	18.238.238.20 (ClassC)
2025-03-28	18.161.6.80 (ClassC)
2025-07-13	18.161.6.115 (ClassC)
2025-08-06	18.161.6.33 (ClassC)
2026-02-05	3.169.173.78 (ClassC)
2026-02-26	3.169.173.36 (ClassC)

HTTP/1.1 200 OKContent-Type: text/htmlContent-Length: 2133Connection: keep-aliveLast-Modified: Wed, 07 Aug 2024 19:26:39 GMTx-amz-server-side-encryption: AES256x-amz-meta-codebuild-content-sha256: 1a6

!doctype html>html langen dirltr>head>meta charsetUTF-8/>meta nameviewport contentwidthdevice-width,initial-scale1,shrink-to-fitno/>script>var id  ;      function gtag() {        window.dataLayer  window.dataLayer || ;        dataLayer.push(arguments);        var f  document.getElementsByTagName(script)0,            j  document.createElement(script);        j.async  true;        j.src  https://www.googletagmanager.com/gtag/js?id + id;        f.parentNode.insertBefore(j, f);      }      (function(w, d, s, l, i) {        // id of the IM tag that we always want to send        id  UA-8101365-7        gtag(js, new Date());        // Set different ids based on window.location.origin and different behavior -        // if sponsor uses gtag manager execute function fully        // else - sponsor just wants tag - so call gtag function and stop function execution        if (window.location.origin  https://ddia.shop.insurancemenu.com) {          id  GTM-5W6LS5T;        } else if (window.location.origin  https://ddwi.shop.insurancemenu.com) {          id  G-GHK2LYWBQ4          gtag(js, new Date());          gtag(config, G-GHK2LYWBQ4);          return;        } else {          return;        }        wl  wl || ;        wl.push({            gtm.start: new Date().getTime(),            event: gtm.js        });        var f  d.getElementsByTagName(s)0,            j  d.createElement(s),            dl  l ! dataLayer ? &l + l : ;        j.async  true;        j.src  https://www.googletagmanager.com/gtm.js?id + id + dl;        f.parentNode.insertBefore(j, f);      })(window, document, script, dataLayer);/script>link relicon hreffavicon.ico/>base href//>title>InsuranceMenu/title>link relicon hreffavicon.ico>script deferdefer srcruntime.f3afe4f62264fa1dee6e.js>/script>script deferdefer srcvendors.708391dca38737198d98.js>/script>script deferdefer srcmain.38081997d5d21af11a50.js>/script>/head>body>div idroot>/div>/body>/html>

Subdomains

Date	Domain	IP
api.insurancemenu.com	2025-12-09	54.204.168.225
individual.form.insurancemenu.com	2024-09-19	3.165.160.71
ddia.shop.insurancemenu.com	2025-03-08	18.238.238.20
externaltest.insurancemenu.com	2025-09-07	3.163.24.126

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > ddia.shop.insurancemenu.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains