Domain > auth.dev.hbf.com.au

More information on this domain is in AlienVault OTX

Whois

Property	Value
Name	HBF Health Limited
Organization	HBF HEALTH LIMITED
NameServer	ns0.telstra.net
Changed	2016-07-13 05:13:32
Registrar	Corporation Service

DNS Resolutions

Date	IP Address
2024-06-24	76.223.106.8 (ClassC)
2025-09-25	13.248.244.122 (ClassC)

HTTP/1.1 200 OKDate: Thu, 25 Sep 2025 18:34:17 GMTServer: nginxContent-Type: text/html;charsetutf-8Vary: Accept-Encodingx-content-type-options: nosniffx-okta-request-id: aNWLKccxX7tgFPAlb-KI9wAACEEaccept-ch: Sec-CH-UA-Platform-Versionx-xss-protection: 0p3p: CPHONKcontent-security-policy-report-only: default-src self hbfdigitaldev.oktapreview.com auth.dev.hbf.com.au *.oktacdn.com hbf.com.au *.hbf.com.au https://www.googletagmanager.com www.googletagmanager.com https://myhbf.dev.sitecore.dev.aws.hbf.com.au https://www.google-analytics.com https://myhbf2077.sitecore-dev.aws.hbf.com.au; connect-src self hbfdigitaldev.oktapreview.com hbfdigitaldev-admin.oktapreview.com auth.dev.hbf.com.au *.oktacdn.com *.mixpanel.com *.mapbox.com hbfdigitaldev.kerberos.oktapreview.com hbfdigitaldev.mtls.oktapreview.com https://oinmanager.okta.com data: hbf.com.au *.hbf.com.au https://www.googletagmanager.com www.googletagmanager.com https://myhbf.dev.sitecore.dev.aws.hbf.com.au https://www.google-analytics.com https://myhbf2077.sitecore-dev.aws.hbf.com.au *.ingest.sentry.io; script-src unsafe-inline unsafe-eval self report-sample hbfdigitaldev.oktapreview.com auth.dev.hbf.com.au *.oktacdn.com hbf.com.au *.hbf.com.au https://www.googletagmanager.com www.googletagmanager.com https://myhbf.dev.sitecore.dev.aws.hbf.com.au https://www.google-analytics.com https://myhbf2077.sitecore-dev.aws.hbf.com.au; style-src unsafe-inline self report-sample hbfdigitaldev.oktapreview.com auth.dev.hbf.com.au *.oktacdn.com hbf.com.au *.hbf.com.au https://www.googletagmanager.com www.googletagmanager.com https://myhbf.dev.sitecore.dev.aws.hbf.com.au https://www.google-analytics.com https://myhbf2077.sitecore-dev.aws.hbf.com.au; frame-src self hbfdigitaldev.oktapreview.com hbfdigitaldev-admin.oktapreview.com auth.dev.hbf.com.au login.okta.com *.vidyard.com hbf.com.au *.hbf.com.au https://www.googletagmanager.com www.googletagmanager.com https://myhbf.dev.sitecore.dev.aws.hbf.com.au https://www.google-analytics.com https://myhbf2077.sitecore-dev.aws.hbf.com.au; img-src self hbfdigitaldev.oktapreview.com auth.dev.hbf.com.au *.oktacdn.com *.tiles.mapbox.com *.mapbox.com *.vidyard.com data: hbf.com.au *.hbf.com.au https://www.googletagmanager.com www.googletagmanager.com https://myhbf.dev.sitecore.dev.aws.hbf.com.au https://www.google-analytics.com https://myhbf2077.sitecore-dev.aws.hbf.com.au blob:; font-src self hbfdigitaldev.oktapreview.com auth.dev.hbf.com.au data: *.oktacdn.com fonts.gstatic.com hbf.com.au *.hbf.com.au https://www.googletagmanager.com www.googletagmanager.com https://myhbf.dev.sitecore.dev.aws.hbf.com.au https://www.google-analytics.com https://myhbf2077.sitecore-dev.aws.hbf.com.au; frame-ancestors selfcontent-security-policy: default-src self hbfdigitaldev.oktapreview.com auth.dev.hbf.com.au *.oktacdn.com hbf.com.au *.hbf.com.au https://www.googletagmanager.com www.googletagmanager.com https://myhbf.dev.sitecore.dev.aws.hbf.com.au https://www.google-analytics.com https://myhbf2077.sitecore-dev.aws.hbf.com.au; connect-src self hbfdigitaldev.oktapreview.com hbfdigitaldev-admin.oktapreview.com auth.dev.hbf.com.au *.oktacdn.com *.mixpanel.com *.mapbox.com hbfdigitaldev.kerberos.oktapreview.com hbfdigitaldev.mtls.oktapreview.com https://oinmanager.okta.com data: hbf.com.au *.hbf.com.au https://www.googletagmanager.com www.googletagmanager.com https://myhbf.dev.sitecore.dev.aws.hbf.com.au https://www.google-analytics.com https://myhbf2077.sitecore-dev.aws.hbf.com.au *.ingest.sentry.io; script-src unsafe-inline unsafe-eval self report-sample hbfdigitaldev.oktapreview.com auth.dev.hbf.com.au *.oktacdn.com hbf.com.au *.hbf.com.au https://www.googletagmanager.com www.googletagmanager.com https://myhbf.dev.sitecore.dev.aws.hbf.com.au https://www.google-analytics.com https://myhbf2077.sitecore-dev.aws.hbf.com.au; style-src unsafe-inline self report-sample hbfdigitaldev.oktapreview.com auth.dev.hbf.com.au *.oktacdn.com hbf.com.au *.hbf.com.au https://www.googletagmanager.com www.googletagmanager.com https://myhbf.dev.sitecore.dev.aws.hbf.com.au https://www.google-analytics.com https://myhbf2077.sitecore-dev.aws.hbf.com.au; frame-src self hbfdigitaldev.oktapreview.com hbfdigitaldev-admin.oktapreview.com auth.dev.hbf.com.au login.okta.com *.vidyard.com hbf.com.au *.hbf.com.au https://www.googletagmanager.com www.googletagmanager.com https://myhbf.dev.sitecore.dev.aws.hbf.com.au https://www.google-analytics.com https://myhbf2077.sitecore-dev.aws.hbf.com.au; img-src self hbfdigitaldev.oktapreview.com auth.dev.hbf.com.au *.oktacdn.com *.tiles.mapbox.com *.mapbox.com *.vidyard.com data: hbf.com.au *.hbf.com.au https://www.googletagmanager.com www.googletagmanager.com https://myhbf.dev.sitecore.dev.aws.hbf.com.au https://www.google-analytics.com https://myhbf2077.sitecore-dev.aws.hbf.com.au blob:; font-src self hbfdigitaldev.oktapreview.com auth.dev.hbf.com.au data: *.oktacdn.com fonts.gstatic.com hbf.com.au *.hbf.com.au https://www.googletagmanager.com www.googletagmanager.com https://myhbf.dev.sitecore.dev.aws.hbf.com.au https://www.google-analytics.com https://myhbf2077.sitecore-dev.aws.hbf.com.au; frame-ancestors selfx-rate-limit-limit: 60x-rate-limit-remaining: 59x-rate-limit-reset: 1758825317referrer-policy: strict-origin-when-cross-origincache-control: no-cache, no-storepragma: no-cacheexpires: 0x-frame-options: SAMEORIGINx-ua-compatible: IEedgecontent-language: enStrict-Transport-Security: max-age315360000; includeSubDomainsX-Robots-Tag: noindex,nofollowset-cookie: xids;Version1;Path/;Max-Age0set-cookie: sid;Version1;Path/;Max-Age0set-cookie: autolaunch_triggered; ExpiresThu, 01 Jan 1970 00:00:10 GMT; Path/set-cookie: activate_ca_modal_triggered; ExpiresThu, 01 Jan 1970 00:00:10 GMT; Path/set-cookie: JSESSIONIDF010158C805334F9A7D47616AE1D85BE; Path/; Secure; HttpOnlyset-cookie: t; ExpiresThu, 01 Jan 1970 00:00:10 GMT; Path/set-cookie: DTDI1msYYjgjeSY6Gj322eXNRww;Version1;Path/;Max-Age63072000;Secure;ExpiresSat, 25 Sep 2027 18:34:17 GMT;HttpOnlyTransfer-Encoding: chunked

!DOCTYPE html PUBLIC -//W3C//DTD HTML 4.01//EN http://www.w3.org/TR/html4/strict.dtd>html>head>    meta http-equivContent-Type contenttext/html; charsetUTF-8>    meta nameviewport contentwidthdevice-width, initial-scale1.0/>    meta namerobots contentnoindex,nofollow/>    !-- Styles generated from theme -->    link href/api/internal/brand/theme/style-sheet?touch-pointSIGN_IN_PAGE&v39ec54aae9c6fddfd16546a7d4d47e39d76c6d21035ed1fef5df47158fe9e69749423bc0a7e6ecf5bdda458a325ad589 relstylesheet typetext/css>    !-- Favicon from theme -->    link relshortcut icon hrefhttps://op3static.oktacdn.com/bc/image/fileStoreRecord?idfs0dpkxn7j48tdznz1d7 typeimage/x-icon/>    title>HBF - Sign In/title>    !-- Core widget js and css -->script typetext/javascript        srchttps://op3static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.35.1/js/okta-sign-in.min.js integritysha384-+V0tzUeVefBFE/NWJyCNvDFmHbwyXx6JNeIKWXc6jLwQsdSPvYVejAKEsxDkUm1+ crossoriginanonymous>/script>link relstylesheet      typetext/css      hrefhttps://op3static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.35.1/css/okta-sign-in.min.css      integritysha384-fxx+LDlIb08xQnHiuttLUvFQjDs5lrUHVoq4eWhpVlSteR2K2q21MbrOCkWfWqqs      crossoriginanonymous>!-- Customizable css theme options. Link your own stylesheet or override styles inline. -->link relstylesheet      typetext/css href integrity crossoriginanonymous>!-- styles for custom sign in -->link relstylesheet typetext/css hrefhttps://op3static.oktacdn.com/assets/loginpage/css/custom-signin.a91af2abfd04662e499bd3e151150dbf.css integritysha384-BhMidK4jYIQaVFKNVHUvbfdgrt4NVlnlTZMsOMWLdWkme3j1JcshKDNQiMssd7sN crossoriginanonymous>script typetext/javascript nonceCjenfBJDV8RUbikKqzd43A>    window.onerror  function (msg, _url, _lineNo, _colNo, error) {        if (window.console && window.console.error) {            if (error) {                console.error(error);            } else {                console.error(msg);            }        }        // Return true to suppress Script Error alerts in IE        return true;    };/script>    !-- Google Tag Manager -->    script>(function (w, d, s, l, i) {      wl  wl || ; wl.push({        gtm.start:          new Date().getTime(), event: gtm.js      }); var f  d.getElementsByTagName(s)0,        jd.createElement(s),dll!dataLayer?&l+l:;j.asynctrue;j.src        https://www.googletagmanager.com/gtm.js?id+i+dl;f.parentNode.insertBefore(j,f);    })(window,document,script,dataLayer,GTM-5CTVPB95);/script>    !-- End Google Tag Manager -->    style nonceCjenfBJDV8RUbikKqzd43A>        #login-bg-image-id {            background-image: none        }    /style>    !-- HBF provided styles -->    link relstylesheet hrefhttps://myhbf.dev.sitecore.dev.aws.hbf.com.au/styles/okta-sign-in.css>/head>body>  !-- Google Tag Manager (noscript) -->  noscript>iframe srchttps://www.googletagmanager.com/ns.html?idGTM-5CTVPB95 height0 width0      styledisplay:none;visibility:hidden>/iframe>/noscript>  !-- End Google Tag Manager (noscript) -->  div idlogin-bg-image-id classlogin-bg-image tb--background>/div>  div idokta-login-container>/div>  div idhbf-info-container stylevisibility:hidden;height:0;>      p classhbf-info-text>Forgot your password or member number?/p>      p classhbf-info-text>Tap ‘Cancel’ or ‘X’ on the top left to return to the previous screen./p>    /div>    div idhbf-help-container stylevisibility:hidden;height:0;>        p classhbf-call-text>Need help? Call us on /p>        a classhbf-call-link hreftel:133423>133 423./a>    /div>    div idhbf-invalid-org  stylevisibility:hidden;height:0;>      div classokta-sign-in-header auth-header>          img classauth-org-logo altHBF logo aria-labelHBF logo>      /div>      h2>Looks like something went wrong on our end/h2>      p>          Please tap ‘Cancel’ or ‘X’ on the top left to return to the previous screen and try again.          br />          Call us on a classhbf-call-link hreftel:133423>133 423/a> if you get stuck.      /p>    /div>  !--    OktaUtil defines a global OktaUtil object    that contains methods used to complete the Okta login flow.   -->  div idokta-sign-in classauth-container main-container unsupported-message-container styledisplay:none>    div idunsupported-cookie classunsupported-message styledisplay:none>        h2 classo-form-head>Cookies are required/h2>        p>Cookies are disabled on your browser. Please enable Cookies and refresh this page./p>        a classbutton button-primary target_blank href.>            Refresh        /a>    /div>/div>script typetext/javascript nonceCjenfBJDV8RUbikKqzd43A>  var signInSuccessCallBackFunction;  var oktaData  {redirectUri:https\x3A\x2F\x2Fauth.dev.hbf.com.au,isMobileSso:false,orgSyncToAccountChooserEnabled:true,fromUri:,isMobileClientLogin:false,countryIso:US,inactiveTab:{elementId:inactive\x2Dtab\x2Dmain\x2Ddiv,avoidPageRefresh:true,enabled:false},signIn:{logoText:HBF\x20logo,features:{emailRecovery:true,deviceFingerprinting:true,consent:true,useDeviceFingerprintForSecurityImage:true,customExpiredPassword:true,router:true,showPasswordToggleOnSignInPage:false,securityImage:false,autoPush:true,smsRecovery:true,idpDiscovery:false,selfServiceUnlock:true,webauthn:true,showPasswordRequirementsAsHtmlList:true,registration:false,rememberMe:false,callRecovery:false,multiOptionalFactorEnroll:true},baseUrl:https\x3A\x2F\x2Fauth.dev.hbf.com.au,brandName:HBF,assets:{baseUrl:https\x3A\x2F\x2Fop3static.oktacdn.com\x2Fassets\x2Fjs\x2Fsdk\x2Fokta\x2Dsignin\x2Dwidget\x2F7.35.1},customButtons:,idpDiscovery:{requestContext:},logo:https\x3A\x2F\x2Fop3static.oktacdn.com\x2Ffs\x2Fbco\x2F1\x2Ffs0ltm00fhzQLanlo1d7,language:en,helpLinks:{help:,forgotPassword:,unlock:,custom:},piv:{},i18n:{en:{primaryauth.username.tooltip:You\u2019ll\x20find\x20your\x20member\x20number\x20on\x20your\x20HBF\x20card.,account.unlock.email.or.username.placeholder:Email\x20or\x20Username,forgotpassword:Forgot\x20password\x3F,mfa.challenge.password.placeholder:Password,help:Help,password.forgot.email.or.username.tooltip:Email\x20or\x20Username,needhelp:Need\x20help\x20signing\x20in\x3F,primaryauth.username.placeholder:Member\x20number,password.forgot.email.or.username.placeholder:Email\x20or\x20Username,account.unlock.email.or.username.tooltip:Email\x20or\x20Username,unlockaccount:Unlock\x20account\x3F,primaryauth.password.placeholder:Password,primaryauth.title:Log\x20in}}},accountChooserDiscoveryUrl:https\x3A\x2F\x2Flogin.okta.com\x2Fdiscovery\x2Fiframe.html};  var runLoginPage  function(fn) {    var mainScript  document.createElement(script);    mainScript.src  https://op3static.oktacdn.com/assets/js/mvc/loginpage/initLoginPage.pack.58de3be0c9b511a0fdfd7ea4f69b56fc.js;    mainScript.integrity  sha384-cJ4LGViZBmIttMPH+ao2RyPuN5BztKWYWIa4smbm56r1cUhkU/Dr6vTS3UoPbKTI;    mainScript.crossOrigin  anonymous;    document.getElementsByTagName(head)0.appendChild(mainScript);    fn && mainScript.addEventListener(load, function () { setTimeout(fn, 1) });  };  var OktaUtil  {    _addClass: function(el, className) {      if(el) {        var elementClasses  el.className.split( );        if (elementClasses.indexOf(className)  -1) {          el.className +   + className;        }      }    },    _removeElement: function(el) {      if(el) {        el.parentNode.removeChild(el);      }    },    _hideElement: function(el) {      if(el) {        el.style.display  none;      }    },    _isDocumentVisible: function() {      return document.visibilityState  visible;    },    addLoginContainerClass: function () {      this._addClass(document.getElementById(okta-login-container), login-container);    },    showUnsupportedCookieWarning: function () {      document.getElementById(okta-sign-in).removeAttribute(style);      document.getElementById(unsupported-cookie).removeAttribute(style);    },    removeUnsupportedCookieWarning: function () {      this._removeElement(document.getElementById(okta-sign-in));    },    hideOktaLoginContainer: function () {      this._hideElement(document.getElementById(okta-login-container));    },    isChromeOs:  function () {      return /\bCrOS\b/.test(navigator.userAgent);    },    addChromeOSScript: function() {      var chromeOSScript  document.createElement(script);      chromeOSScript.src  /js/google/users-1.0.js;      document.getElementsByTagName(head)0.appendChild(chromeOSScript);    },    getSignInWidgetConfig: function () {        if (oktaData.inactiveTab && oktaData.inactiveTab.enabled && !this._isDocumentVisible() && !oktaData.inactiveTab.avoidPageRefresh) {            // Show a loading state and wait for the visibility event            this.hideOktaLoginContainer();            // remove stateToken so SIW does not attempt a login flow            oktaData.signIn.stateToken  undefined;        }        return oktaData.signIn;    },    completeLogin: function (res) {      signInSuccessCallBackFunction(res);    },    getRequestContext: function () {      return oktaData.requestContext;    },    setRedirectUri: function (uri) {      oktaData.redirectUri  uri;    },    init: function () {      if (!navigator.cookieEnabled) {        this.showUnsupportedCookieWarning();        this.hideOktaLoginContainer();      } else {        this.removeUnsupportedCookieWarning();        // add class if app login banner is present        if (oktaData.isAppBannerVisible) {          this.addLoginContainerClass();        }        oktaData.isCustomSignIn  true;        oktaData.hasChromeOSFeature  this.isChromeOs();        if (oktaData.hasChromeOSFeature) {          this.addChromeOSScript();        }        runLoginPage(function () {          var res  OktaLogin.initLoginPage(oktaData);          oktaData.signIn  res.signIn;          signInSuccessCallBackFunction  res.signInSuccessCallbackFn;        });      }    }  };  OktaUtil.init();  //# sourceURLOktaUtil.js/script>  script typetext/javascript nonceCjenfBJDV8RUbikKqzd43A>    (function () {        function showContainer(id) {            document.getElementById(id).style.visibility  visible;            document.getElementById(id).style.height  100%;        }        function hideContainer(id) {            document.getElementById(id).style.visibility  hidden;            document.getElementById(id).style.height  0;        }        /**         * requestContext object contains the okta application details,         * such as auth client & issuer.         */        var requestContext  OktaUtil.getRequestContext();        /**         * widgetConfig object contains the default widget configuration         *  with any custom overrides defined in our admin settings.         */        var widgetConfig  OktaUtil.getSignInWidgetConfig();        function initOktaSignIn() {            // Dont load the Sign-In Widget if we are missing the application context.            if (!requestContext) {                return;            }            var errorMessaging  {                usernameRequired: Please enter your member number,                passwordRequired: Please enter your password,                incorrectAuth: Your member number or password doesnt match our records.\n\n + To reset your password or find your member number, tap Cancel or X at the top left to return to the previous screen.,                lockedOut: Youve exceeded the number of login attempts. For security reasons, youll need to wait 15 minutes before trying again.,            }            widgetConfig.i18n.enprimaryauth.submit  Log in;            widgetConfig.i18n.enerror.username.required  errorMessaging.usernameRequired;            widgetConfig.i18n.enerror.password.required  errorMessaging.passwordRequired;            widgetConfig.i18n.enerrors.E0000004  errorMessaging.incorrectAuth;            widgetConfig.i18n.enerror.auth.lockedOut  errorMessaging.lockedOut;            widgetConfig.i18n.enerrors.E0000069  errorMessaging.lockedOut;            widgetConfig.logoText  HBF            // Render the Okta Sign-In Widget            var oktaSignIn  new OktaSignIn(widgetConfig);            oktaSignIn.renderEl({el: #okta-login-container},                OktaUtil.completeLogin,                function (error) {                    // Logs errors that occur when configuring the widget.                    // Remove or replace this with your own custom error handler.                    console.log(error.message, error);                }            );            oktaSignIn.on(afterRender, function (context) {                if (context.controller ! primary-auth) {                    hideContainer(hbf-info-container);                    showContainer(hbf-help-container);                }                if (context.controller  primary-auth) {                    showContainer(hbf-info-container);                    hideContainer(hbf-help-container);                }            });        }        initOktaSignIn();        window.addEventListener(load, () > {            // Use the same source for the logo as in our config            var invalidOrgContainerLogo  document.querySelector(#hbf-invalid-org .auth-org-logo);            if (invalidOrgContainerLogo && widgetConfig.logo) {                invalidOrgContainerLogo.src  widgetConfig.logo;            }            if (!requestContext) {                hideContainer(hbf-info-container);                hideContainer(hbf-help-container);                showContainer(hbf-invalid-org);                return;            }        })    })();  /script>/body>/html>

Subdomains

Date	Domain	IP
image.hello.hbf.com.au	2024-12-08	23.44.175.182
careers.hbf.com.au	2021-02-11	13.225.214.30
auth.dev.hbf.com.au	2025-09-25	13.248.244.122
www.hbf.com.au	2023-08-26	104.100.64.181

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > auth.dev.hbf.com.au

Is this malicious?

Whois

DNS Resolutions

Port 80

Port 443

Subdomains