Domain > api.unclaimedretirementbenefits.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2023-10-21	34.206.216.4 (ClassC)
2025-10-04	35.85.205.210 (ClassC)

HTTP/1.1 200 OKDate: Sat, 04 Oct 2025 15:14:49 GMTContent-Type: text/html; charsetutf-8Content-Length: 2095Connection: keep-aliveSet-Cookie: AWSALBLo0U0FnTaeNF/CgbUP0eQTWLlkZ800Q8QdKTIBueGs3nlIoFbZXT8WdAfDCELMYQRN872C0dsSYsaOuSIo8c+Juk94WpBd+uauysAeVKUqF5XRBfNMzj6okxRvpU; ExpiresSat, 11 Oct 2025 15:14:49 GMT; Path/Set-Cookie: AWSALBCORSLo0U0FnTaeNF/CgbUP0eQTWLlkZ800Q8QdKTIBueGs3nlIoFbZXT8WdAfDCELMYQRN872C0dsSYsaOuSIo8c+Juk94WpBd+uauysAeVKUqF5XRBfNMzj6okxRvpU; ExpiresSat, 11 Oct 2025 15:14:49 GMT; Path/; SameSiteNone; SecureLast-Modified: Tue, 30 Sep 2025 21:15:28 GMTETag: 68dc4870-82fServer: PenChecksStrict-Transport-Security: max-age31536000; includeSubDomains; preloadX-Frame-Options: SAMEORIGINX-Content-Type-Options: nosniffX-XSS-Protection: 1; modeblockReferrer-Policy: originPermissions-Policy: geolocation(),sync-xhr(),fullscreen(self)Content-Security-Policy: default-src self data: https://*.penchecks.com https://unclaimedretirementbenefits.com https://mybenefitelection.com https://*.unclaimedretirementbenefits.com https://*.mybenefitelection.com https://*.flatfile.com https://*.flatfile.io https://cdn.pendo.io https://data.pendo.io https://app.pendo.io https://pendo-static-4896574669651968.storage.googleapis.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://*.gstatic.com wss://api.us.flatfile.io https://*.fontawesome.com https://*.mxpnl.com https://*.split.io https://cdn.jsdelivr.net https://cdn.cookielaw.org https://mcusercontent.com; script-src self unsafe-eval unsafe-inline https://*.penchecks.com https://unclaimedretirementbenefits.com https://mybenefitelection.com https://*.unclaimedretirementbenefits.com https://*.mybenefitelection.com https://*.flatfile.com https://*.flatfile.io https://cdn.pendo.io https://data.pendo.io https://app.pendo.io https://pendo-static-4896574669651968.storage.googleapis.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://*.gstatic.com https://*.mxpnl.com https://*.split.io https://cdn.cookielaw.org https://pendo-static-4896574669651968.storage.googleapis.com; style-src self unsafe-inline https://*.penchecks.com https://unclaimedretirementbenefits.com https://mybenefitelection.com https://*.unclaimedretirementbenefits.com https://*.mybenefitelection.com https://pro.fontawesome.com https://fonts.googleapis.com https://cdn.jsdelivr.net  https://cdn.pendo.io https://pendo-static-4896574669651968.storage.googleapis.com; font-src self https://*.penchecks.com https://unclaimedretirementbenefits.com https://mybenefitelection.com https://*.unclaimedretirementbenefits.com https://*.mybenefitelection.com https://pro.fontawesome.com https://fonts.googleapis.com https://fonts.gstatic.com https://cdn.jsdelivr.net; connect-src self https://*.penchecks.com https://unclaimedretirementbenefits.com https://mybenefitelection.com https://*.unclaimedretirementbenefits.com https://*.mybenefitelection.com https://*.flatfile.com https://*.flatfile.io https://cdn.pendo.io https://data.pendo.io https://app.pendo.io https://pendo-static-4896574669651968.storage.googleapis.com https://*.browser-intake-datadoghq.com https://browser-intake-datadoghq.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://*.gstatic.com https://cdn.cookielaw.org https://*.split.io https://geolocation.onetrust.com ws: https://*.ijoin401k.com https://cdn.jsdelivr.net; frame-src self https://*.penchecks.com https://unclaimedretirementbenefits.com https://mybenefitelection.com https://*.unclaimedretirementbenefits.com https://*.mybenefitelection.com https://*.flatfile.com https://*.flatfile.io https://*.gstatic.com https://*.google.com https://app.pendo.io; frame-ancestors self https://www.google.com; object-src none; base-uri self; upgrade-insecure-requestsAccept-Ranges: bytes

!doctype html>html langen>head>    meta charsetUTF-8 />    !-- default -->    link relicon typeimage/png href/assets/NRURB-favicon-light-BwEbDMaM.png />    !-- PNG -->    link        relicon        typeimage/png        href/favicons/NRURB-favicon-light.png        media(prefers-color-scheme: light)    />    link        relicon        typeimage/png        href/favicons/NRURB-favicon-dark.png        media(prefers-color-scheme: dark)    />    !-- SVG -->    link        relicon        typeimage/svg+xml        href/favicons/NRURB-favicon-light.svg        media(prefers-color-scheme: light)    />    link        relicon        typeimage/svg+xml        href/favicons/NRURB-favicon-dark.svg        media(prefers-color-scheme: dark)    />    meta nameviewport contentwidthdevice-width, initial-scale1.0 />    title>National Registry/title>    !--    Pendo setup -->    script>        (function(apiKey) {            (function(p, e, n, d, o) {                let v, w, x, y, z                o  pd  pd || {}                o._q  o._q ||                 v  initialize, identify, updateOptions, pageLoad, track                for (w  0, x  v.length; w  x; ++w) (function(m) {                    om  om || function() {                        o._qm  v0 ? unshift : push(m.concat(.slice.call(arguments, 0)))                    }                })(vw)                y  e.createElement(n)                y.async  !0                y.src  https://cdn.pendo.io/agent/static/ + apiKey + /pendo.js                z  e.getElementsByTagName(n)0                z.parentNode.insertBefore(y, z)            })(window, document, script, pendo)        })(c4cd39d3-57f0-49dc-5d1a-4c18fe4913ee)    /script>  script typemodule crossorigin src/assets/index-DFFHosTU.js>/script>  link relstylesheet crossorigin href/assets/index-Bm2-nhQG.css>/head>body>div idapp>/div>/body>/html>

Subdomains

Date	Domain	IP
staging.unclaimedretirementbenefits.com	2025-03-23	54.218.204.82
api.unclaimedretirementbenefits.com	2025-10-04	35.85.205.210
www.unclaimedretirementbenefits.com	2023-11-01	34.205.49.92

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > api.unclaimedretirementbenefits.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains