Domain > ecms.express-scripts.com

More information on this domain is in AlienVault OTX

Whois

Property	Value
Email	domains@express-scripts.com
NameServer	NS02.MEDCO.COM
Created	1995-09-28 00:00:00
Changed	2013-02-03 00:00:00
Expires	2020-09-27 00:00:00
Registrar	MARKMONITOR INC.

DNS Resolutions

Date	IP Address
2025-02-20	3.168.102.129 (ClassC)
2025-04-15	3.170.91.15 (ClassC)
2025-09-27	3.169.173.96 (ClassC)
2025-10-30	3.169.173.117 (ClassC)
2025-11-07	18.161.6.90 (ClassC)
2025-11-17	18.161.6.112 (ClassC)

HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Fri, 19 Sep 2025 00:03:06 GMTContent-Type: text/htmlContent-Length: 919Connection: keep-aliveX-Cache: Error from cloudfrontVia: 1.1 1cbc126937aab64e42a05f

!DOCTYPE HTML PUBLIC -//W3C//DTD HTML 4.01 Transitional//EN http://www.w3.org/TR/html4/loose.dtd>HTML>HEAD>META HTTP-EQUIVContent-Type CONTENTtext/html; charsetiso-8859-1>TITLE>ERROR: The request could not be satisfied/TITLE>/HEAD>BODY>H1>403 ERROR/H1>H2>The request could not be satisfied./H2>HR noshade size1px>Request blocked.We cant connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.BR clearall>If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.BR clearall>HR noshade size1px>PRE>Generated by cloudfront (CloudFront)Request ID: AfR-Xjst4vlzaIFij_2078gEs2KDdU7dDRcXlG8Myjbt4Ge3GwMh0A/PRE>ADDRESS>/ADDRESS>/BODY>/HTML>

Subdomains

Date	Domain	IP
fl1imail03.express-scripts.com	2014-04-25	167.211.4.32
ns04.express-scripts.com	2025-11-07	167.211.104.150
prc.express-scripts.com	2025-11-07	167.211.52.65
securemessage.express-scripts.com	2022-11-10	148.163.137.209
careersblog.express-scripts.com	2014-08-08	184.168.36.1
i.mail.express-scripts.com	2023-08-25	104.103.220.65
dl.mail.express-scripts.com	2024-01-13	13.56.7.252
m.express-scripts.com	2015-08-11	167.211.101.39
spam.express-scripts.com	2025-10-02	148.163.133.209
prod.login.express-scripts.com	2025-10-03	44.196.169.172
p.login.developer.express-scripts.com	2024-11-25	44.208.229.144
int.login.developer.express-scripts.com	2024-12-01	3.234.87.122
dev.login.developer.express-scripts.com	2025-01-02	54.166.179.204
autodiscover.express-scripts.com	2025-11-07	167.18.79.97
dl.health-programs.express-scripts.com	2024-03-01	13.56.10.172
ecms.express-scripts.com	2025-09-27	3.169.173.96
dl.orders.express-scripts.com	2024-01-13	13.56.7.252
careers.express-scripts.com	2024-05-30	100.24.229.173
dl.benefits.express-scripts.com	2025-07-16	18.144.119.190
www.express-scripts.com	2025-11-07	167.211.52.57

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > ecms.express-scripts.com

Is this malicious?

Whois

DNS Resolutions

Port 80

Port 443

Subdomains