Domain > staging.sagefindsvip.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2020-02-18	104.22.3.132 (ClassC)
2026-02-16	104.18.14.74 (ClassC)

HTTP/1.1 301 Moved PermanentlyDate: Mon, 16 Feb 2026 04:16:33 GMTContent-Type: text/htmlContent-Length: 167Connection: keep-aliveCache-Control: max-age3600Expires: Mon, 16 Feb 2026 05:16:33 GMTLocation: https://staging.sagefindsvip.com/X-Content-Type-Options: nosniffContent-Security-Policy: base-uri self; connect-src self appcues.net api.appcues.net *.api.appcues.net consentcdn.cookiebot.com *.consentcdn.cookiebot.com edge.fullstory.com *.edge.fullstory.com rs.fullstory.com *.rs.fullstory.com analytics.google.com *.analytics.google.com bam.nr-data.net *.bam.nr-data.net logx.optimizely.com *.logx.optimizely.com wss://api.appcues.net rum.optimizely.com stats.g.doubleclick.net tapi.optimizely.com www.google-analytics.com; default-src none; font-src self fonts.gstatic.com; form-action self; frame-src self *.cdn-pci.optimizely.com consentcdn.cookiebot.com td.doubleclick.net; frame-ancestors *.clarusmarketing.com; img-src self imgsct.cookiebot.com *.cf2.rackcdn.com www.googletagmanager.com *.claruscommerce.com blob: stats.g.doubleclick.net analytics.google.com images.appcues.com client-data.knak.io cdn.optimizely.com www.google-analytics.com; script-src self unsafe-inline unsafe-eval fast.appcues.com *.fast.appcues.com consent.cookiebot.com *.consent.cookiebot.com consentcdn.cookiebot.com *.consentcdn.cookiebot.com edge.fullstory.com *.edge.fullstory.com www.googletagmanager.com *.www.googletagmanager.com js-agent.newrelic.com *.js-agent.newrelic.com cdn-pci.optimizely.com *.cdn-pci.optimizely.com challenges.cloudflare.com app.optimizely.com; style-src self unsafe-inline fast.appcues.com; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?mW_mTsMdIo.rVRdpC0NBNz0hdUBXl7buFt.T7vUxqu30-1771215393-1.0.1.1-skRSCSqIQoFCoVuNK0V3F3i40iQNwbbE1MiSfwCNXhMW9pBwG_hUmch.mgOFOl.LiROW1633W2LeGI2XzCw4WoYzrNzF7zA2V2IhEkyraQOjk0PUdL28p55yGzBzLs3u2At_GbiYTiNWkuYdYGgMZuawIkXoHaUqBTUChnD6mY92e8._MsvewO9.qlYfDsLL3gQGO15tLXemb239ETQSeQ; report-to cf-buxapjiwyjngvcatReport-To: {endpoints:{url:https:\/\/csp-reporting.cloudflare.com\/cdn-cgi\/script_monitor\/report?mW_mTsMdIo.rVRdpC0NBNz0hdUBXl7buFt.T7vUxqu30-1771215393-1.0.1.1-skRSCSqIQoFCoVuNK0V3F3i40iQNwbbE1MiSfwCNXhMW9pBwG_hUmch.mgOFOl.LiROW1633W2LeGI2XzCw4WoYzrNzF7zA2V2IhEkyraQOjk0PUdL28p55yGzBzLs3u2At_GbiYTiNWkuYdYGgMZuawIkXoHaUqBTUChnD6mY92e8._MsvewO9.qlYfDsLL3gQGO15tLXemb239ETQSeQ},group:cf-buxapjiwyjngvcat,max_age:86400}Server: cloudflareCF-RAY: 9cea3af12dca817f-PDX

html>head>title>301 Moved Permanently/title>/head>body>center>h1>301 Moved Permanently/h1>/center>hr>center>cloudflare/center>/body>/html>

Port 443

HTTP/1.1 302 FoundDate: Mon, 16 Feb 2026 04:16:34 GMTContent-Type: text/html; charsetutf-8Transfer-Encoding: chunkedConnection: keep-aliveCF-RAY: 9cea3af18d3f58c2-PDXSet-Cookie: AWSALB5Q+yRkk0ul4m5ZQjGFTagR8/0FK63zliC1bra8dtLL0dDELKFro8ynrAT04fvWBB4OrCh4twHYXn7oRqvtMlML9EF+q2w/HQH5c+wOSQai5ulFSfyhR+9HiwxGi5; ExpiresMon, 23 Feb 2026 04:16:33 GMT; Path/Set-Cookie: AWSALBCORS5Q+yRkk0ul4m5ZQjGFTagR8/0FK63zliC1bra8dtLL0dDELKFro8ynrAT04fvWBB4OrCh4twHYXn7oRqvtMlML9EF+q2w/HQH5c+wOSQai5ulFSfyhR+9HiwxGi5; ExpiresMon, 23 Feb 2026 04:16:33 GMT; Path/; SameSiteNone; SecureSet-Cookie: 527b8397813d4bc7df69bd0127258ffdEzVkdjpG8S0d7qMfM9Zn5Bd92tRTF/AxCmR2+h7RzekXtiXroBz4m4FP8GyLYdb7yblmycK3QdPtmQhnQ5C0AcUDgtrE+tD/VDzuDqLTSYIU/emW+AfiQexs1k4D8oaee8xrit1CVIouca7su7CsOYHcXgFz8vWcR1lWLzmRsWDXih2gl87o5e9X2tQOXQpmbXVI4x5jcHT4UwDtKYmJ9g/uIiBJJ+QWTcVSRgxhkehNlMFr4HB7QeNNUAVM2kU2HWdwtRJ3Z6gChHyEj0Wt9vP9HenEW7E0kNLpGCJ3PBQ; expiresFri, 31-Dec-9999 23:59:59 GMT; path/; secure; HttpOnly; SameSiteStrictCache-Control: privatelocation: /joinx-frame-options: SAMEORIGINx-machine-name: WEB2cf-cache-status: DYNAMICStrict-Transport-Security: max-age31536000; includeSubDomains; preloadX-Content-Type-Options: nosniffContent-Security-Policy: base-uri self; connect-src self appcues.net api.appcues.net *.api.appcues.net consentcdn.cookiebot.com *.consentcdn.cookiebot.com edge.fullstory.com *.edge.fullstory.com rs.fullstory.com *.rs.fullstory.com analytics.google.com *.analytics.google.com bam.nr-data.net *.bam.nr-data.net logx.optimizely.com *.logx.optimizely.com wss://api.appcues.net rum.optimizely.com stats.g.doubleclick.net tapi.optimizely.com www.google-analytics.com; default-src none; font-src self fonts.gstatic.com; form-action self; frame-src self *.cdn-pci.optimizely.com consentcdn.cookiebot.com td.doubleclick.net; frame-ancestors *.clarusmarketing.com; img-src self imgsct.cookiebot.com *.cf2.rackcdn.com www.googletagmanager.com *.claruscommerce.com blob: stats.g.doubleclick.net analytics.google.com images.appcues.com client-data.knak.io cdn.optimizely.com www.google-analytics.com; script-src self unsafe-inline unsafe-eval fast.appcues.com *.fast.appcues.com consent.cookiebot.com *.consent.cookiebot.com consentcdn.cookiebot.com *.consentcdn.cookiebot.com edge.fullstory.com *.edge.fullstory.com www.googletagmanager.com *.www.googletagmanager.com js-agent.newrelic.com *.js-agent.newrelic.com cdn-pci.optimizely.com *.cdn-pci.optimizely.com challenges.cloudflare.com app.optimizely.com; style-src self unsafe-inline fast.appcues.com; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m2F5qcPCx1EPwcX6i.mpfmQbvnhw5H30NJTN4j0xCV90-1771215394-1.0.1.1-L4pXijmH9MJJTa0YyHmjSZjGdDe5RXL9ITm4QcrWIDCwf5zWGACY0GOOCoBWu6tcrxvvTG1QwQcAjCZ.rGg5dLjQzcl3yHhscn_AwiYU3hd6dRcchap2i_sFUoJJkuDcJloqq.8hbXP6EI7fC_f9GMi3qRBiM170NkfEpsPhyT.YCHWJE5CrhozDBxATXxfF8HRIFcIhamOI0hn9aaFn0Q; report-to cf-sktilrdzgclctisqReport-To: {endpoints:{url:https:\/\/csp-reporting.cloudflare.com\/cdn-cgi\/script_monitor\/report?m2F5qcPCx1EPwcX6i.mpfmQbvnhw5H30NJTN4j0xCV90-1771215394-1.0.1.1-L4pXijmH9MJJTa0YyHmjSZjGdDe5RXL9ITm4QcrWIDCwf5zWGACY0GOOCoBWu6tcrxvvTG1QwQcAjCZ.rGg5dLjQzcl3yHhscn_AwiYU3hd6dRcchap2i_sFUoJJkuDcJloqq.8hbXP6EI7fC_f9GMi3qRBiM170NkfEpsPhyT.YCHWJE5CrhozDBxATXxfF8HRIFcIhamOI0hn9aaFn0Q},group:cf-sktilrdzgclctisq,max_age:86400}Server: cloudflare

html>head>title>Object moved/title>/head>body>h2>Object moved to a href/join>here/a>./h2>/body>/html>

Subdomains

Date	Domain	IP
staging2.sagefindsvip.com	2025-05-05	104.18.15.74
staging4.sagefindsvip.com	2026-01-25	104.18.14.74
staging.sagefindsvip.com	2026-02-16	104.18.14.74
www.sagefindsvip.com	2026-01-18	104.18.15.74

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > staging.sagefindsvip.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains