Domain > my.healthnetcalifornia.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-05-29	3.171.61.64 (ClassC)
2025-11-04	3.175.34.87 (ClassC)

HTTP/1.1 301 Moved PermanentlyDate: Tue, 04 Nov 2025 00:50:10 GMTContent-Type: text/htmlContent-Length: 167Connection: keep-aliveLocation: https://my.healthnetcalifornia.com/X-Cache: Redirect from cloudfrontVia: 1.1 dcc3860be799b53566333f33c09b4790.cloudfront.net (CloudFront)X-Amz-Cf-Pop: HIO52-P3Alt-Svc: h3:443; ma86400X-Amz-Cf-Id: tPlbqh70d8FFSrEqbXzKpdmNj_MF94czwTv8u3ZTi5Av1u1lrETeRAX-XSS-Protection: 1; modeblockX-Frame-Options: DENYReferrer-Policy: strict-origin-when-cross-originContent-Security-Policy: upgrade-insecure-requests; form-action self https://*.centene.com; object-src none; frame-ancestors self https://experience.adobe.com https://universal-editor-service.experiencecloud.live; base-uri self; default-src self; style-src self unsafe-inline https://*.typekit.net https://*.cnc-interceptor.com https://fonts.googleapis.com https://*.centene.com https://universal-editor-service.adobe.io https://*.my.site.com https://cdn-prod.securiti.ai; media-src https://*.centene.com; connect-src self https://d3oycsykclpu1v.cloudfront.net https://js-cdn.dynatrace.com https://api.amplitude.com https://*.softheon.com https://*.token.awswaf.com https://*.bf.dynatrace.com https://assets.adobedtm.com https://maps.googleapis.com https://*.ambetterhealth.com https://*.centene.com https://*.entrykeyid.com https://dpm.demdex.net https://centene.sc.omtrdc.net https://adobedc.demdex.net https://centene.data.adobedc.net https://*.siteintercept.qualtrics.com https://siteintercept.qualtrics.com https://browser-update.org https://participant.connect.us-west-2.amazonaws.com https://participant.connect.us-east-1.amazonaws.com wss://*.transport.connect.us-east-1.amazonaws.com wss://*.transport.connect.us-west-2.amazonaws.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://*.adobeaemcloud.com https://*.my.site.com https://*.my.salesforce-scrt.com https://cdn-prod.securiti.ai https://app.securiti.ai https://maps.gstatic.com; frame-src https://centenecorp.demdex.net https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/ https://*.my.site.com/; font-src self https://*.typekit.net https://*.cnc-interceptor.com https://fonts.gstatic.com; script-src self unsafe-inline unsafe-eval https://*.cnc-interceptor.com https://*.token.awswaf.com https://js-cdn.dynatrace.com https://maps.googleapis.com https://*.centene.com https://assets.adobedtm.com https://centene.sc.omtrdc.net https://siteintercept.qualtrics.com https://*.siteintercept.qualtrics.com https://browser-update.org https://universal-editor-service.adobe.io https://cdn.experience.adobe.net https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://*.my.site.com https://cdn-prod.securiti.ai https://maps.gstatic.com https://gateway.zscalerthree.net https://d3oycsykclpu1v.cloudfront.net; img-src self data: https://*.centene.com https://centene.sc.omtrdc.net https://cm.everesttech.net https://dpm.demdex.net https://t4.ftcdn.net https://*.force.com https://*.my.salesforce.com https://*.adobeaemcloud.com https://maps.gstatic.com ; worker-src self blob:X-Content-Type-Options: nosniffCross-Origin-Embedder-Policy: unsafe-noneCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: cross-originExpect-CT: enforce, max-age3600Permissions-Policy: accelerometer(), autoplay(), camera(), display-capture(), encrypted-media(), gamepad(), gyroscope(), magnetometer(), microphone(), midi(), payment(), usb()Server: CenteneVary: Origin

html>head>title>301 Moved Permanently/title>/head>body>center>h1>301 Moved Permanently/h1>/center>hr>center>CloudFront/center>/body>/html>

Port 443

HTTP/1.1 403 ForbiddenContent-Type: text/htmlContent-Length: 3473Connection: keep-aliveLast-Modified: Thu, 25 Sep 2025 14:34:26 GMTAccept-Ranges: bytesServer: CenteneDate: Mon, 03 Nov 2025 08:06:29 GMTETag: 05a225dc6290898b99201144b68087fdX-Cache: Error from cloudfrontVia: 1.1 c705ee033a363383cd13caf9803ae766.cloudfront.net (CloudFront)X-Amz-Cf-Pop: HIO52-P3Alt-Svc: h3:443; ma86400X-Amz-Cf-Id: R3MH5CMukaZLQH3wLMZEfPvV6E5RRcVjeGYwh9yo0z0yCS_0hG_HTQAge: 60222X-XSS-Protection: 1; modeblockX-Frame-Options: DENYReferrer-Policy: strict-origin-when-cross-originContent-Security-Policy: upgrade-insecure-requests; form-action self https://*.centene.com; object-src none; frame-ancestors self https://experience.adobe.com https://universal-editor-service.experiencecloud.live; base-uri self; default-src self; style-src self unsafe-inline https://*.typekit.net https://*.cnc-interceptor.com https://fonts.googleapis.com https://*.centene.com https://universal-editor-service.adobe.io https://*.my.site.com https://cdn-prod.securiti.ai; media-src https://*.centene.com; connect-src self https://d3oycsykclpu1v.cloudfront.net https://js-cdn.dynatrace.com https://api.amplitude.com https://*.softheon.com https://*.token.awswaf.com https://*.bf.dynatrace.com https://assets.adobedtm.com https://maps.googleapis.com https://*.ambetterhealth.com https://*.centene.com https://*.entrykeyid.com https://dpm.demdex.net https://centene.sc.omtrdc.net https://adobedc.demdex.net https://centene.data.adobedc.net https://*.siteintercept.qualtrics.com https://siteintercept.qualtrics.com https://browser-update.org https://participant.connect.us-west-2.amazonaws.com https://participant.connect.us-east-1.amazonaws.com wss://*.transport.connect.us-east-1.amazonaws.com wss://*.transport.connect.us-west-2.amazonaws.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://*.adobeaemcloud.com https://*.my.site.com https://*.my.salesforce-scrt.com https://cdn-prod.securiti.ai https://app.securiti.ai https://maps.gstatic.com; frame-src https://centenecorp.demdex.net https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/ https://*.my.site.com/; font-src self https://*.typekit.net https://*.cnc-interceptor.com https://fonts.gstatic.com; script-src self unsafe-inline unsafe-eval https://*.cnc-interceptor.com https://*.token.awswaf.com https://js-cdn.dynatrace.com https://maps.googleapis.com https://*.centene.com https://assets.adobedtm.com https://centene.sc.omtrdc.net https://siteintercept.qualtrics.com https://*.siteintercept.qualtrics.com https://browser-update.org https://universal-editor-service.adobe.io https://cdn.experience.adobe.net https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://*.my.site.com https://cdn-prod.securiti.ai https://maps.gstatic.com https://gateway.zscalerthree.net https://d3oycsykclpu1v.cloudfront.net; img-src self data: https://*.centene.com https://centene.sc.omtrdc.net https://cm.everesttech.net https://dpm.demdex.net https://t4.ftcdn.net https://*.force.com https://*.my.salesforce.com https://*.adobeaemcloud.com https://maps.gstatic.com ; worker-src self blob:X-Content-Type-Options: nosniffStrict-Transport-Security: max-age15724800; includeSubDomains; preloadCross-Origin-Embedder-Policy: unsafe-noneCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: cross-originExpect-CT: enforce, max-age3600Permissions-Policy: accelerometer(), autoplay(), camera(), display-capture(), encrypted-media(), gamepad(), gyroscope(), magnetometer(), microphone(), midi(), payment(), usb()Vary: Origin

!DOCTYPE html>html langen>head>meta charSetutf-8 data-next-head/>meta nameviewport contentwidthdevice-width data-next-head/>link data-next-fontsize-adjust relpreconnect href/ crossoriginanonymous/>link relpreload href/s/error/_next/static/css/6d9c0b4341f03885.css asstyle/>link relstylesheet href/s/error/_next/static/css/6d9c0b4341f03885.css data-n-g/>noscript data-n-css>/noscript>script defer noModule src/s/error/_next/static/chunks/polyfills-42372ed130431b0a.js>/script>script src/s/error/_next/static/chunks/webpack-5b9a4dee97056bde.js defer>/script>script src/s/error/_next/static/chunks/framework-b265a3f0764547ed.js defer>/script>script src/s/error/_next/static/chunks/main-7ad86348a8a2955a.js defer>/script>script src/s/error/_next/static/chunks/pages/_app-8531c446498e4b03.js defer>/script>script src/s/error/_next/static/chunks/pages/404-3208fe45dcf06b1f.js defer>/script>script src/s/error/_next/static/TA2k81No2IfyS16pC_yeO/_buildManifest.js defer>/script>script src/s/error/_next/static/TA2k81No2IfyS16pC_yeO/_ssgManifest.js defer>/script>/head>body>div id__next>/div>script id__NEXT_DATA__ typeapplication/json>{props:{pageProps:{}},page:/404,query:{},buildId:TA2k81No2IfyS16pC_yeO,assetPrefix:/s/error,nextExport:true,autoExport:true,isFallback:false,scriptLoader:{strategy:afterInteractive,id:spa-qualtrics,dangerouslySetInnerHTML:{__html:\n(function(){var gfunction(e,h,f,g){\nthis.getfunction(a){for(var aa+\\,cdocument.cookie.split(\;\),b0,ec.length;b\u003ce;b++){for(var dcb;\ \d.charAt(0);)dd.substring(1,d.length);if(0d.indexOf(a))return d.substring(a.length,d.length)}return null};\nthis.setfunction(a,c){var b\\,bnew Date;b.setTime(b.getTime()+6048E5);b\; expires\+b.toGMTString();document.cookiea+\\+c+b+\; path/; \};\nthis.checkfunction(){var athis.get(f);if(a)aa.split(\:\);else if(100!e)\v\h\u0026\u0026(eMath.random()\u003ee/100?0:100),ah,e,0,this.set(f,a.join(\:\));else return!0;var ca1;if(100c)return!0;switch(a0){case \v\:return!1;case \r\:return ca2%Math.floor(100/c),a2++,this.set(f,a.join(\:\)),!c}return!0};\nthis.gofunction(){if(this.check()){var adocument.createElement(\script\);a.type\text/javascript\;a.srcg;document.body\u0026\u0026document.body.appendChild(a)}};\nthis.startfunction(){var tthis;\complete\!document.readyState?window.addEventListener?window.addEventListener(\load\,function(){t.go()},!1):window.attachEvent\u0026\u0026window.attachEvent(\onload\,function(){t.go()}):t.go()};};\ntry{(new g(100,\r\,\QSI_S_ZN_2moM98HRXEQLBwa\,\https://zn2mom98hrxeqlbwa-centene.siteintercept.qualtrics.com/SIE/?Q_ZIDZN_2moM98HRXEQLBwa\)).start()}catch(i){}})();\n}},{strategy:afterInteractive,id:spa-browsercheck,dangerouslySetInnerHTML:{__html:\n            var $buoop  {required:{e:-4,f:-3,o:-3,s:-2,c:-3},insecure:true,api:2024.06 }; \n            function $buo_f(){ \n             var e  document.createElement(\script\); \n             e.src  \//browser-update.org/update.min.js\; \n             document.body.appendChild(e);\n            };\n            try {document.addEventListener(\DOMContentLoaded\, $buo_f,false)}\n            catch(e){window.attachEvent(\onload\, $buo_f)}\n        \n}}}/script>/body>/html>

Subdomains

Date	Domain	IP
fehb.healthnetcalifornia.com	2024-11-24	3.163.24.53
sc.healthnetcalifornia.com	2025-01-14	3.165.160.89
cardinalcare.healthnetcalifornia.com	2024-11-25	3.163.24.79
wellcare.healthnetcalifornia.com	2025-11-03	3.175.34.106
edison.healthnetcalifornia.com	2024-11-25	3.163.24.53
ifp.healthnetcalifornia.com	2024-12-24	3.163.165.117
member.healthnetcalifornia.com	2024-12-21	23.41.4.73
smetrics.healthnetcalifornia.com	2024-10-14	63.140.36.51
wellcare-es.healthnetcalifornia.com	2024-11-25	18.161.6.96
ifp-es.healthnetcalifornia.com	2025-10-25	3.169.173.12
calpers.healthnetcalifornia.com	2024-11-25	3.165.160.117
sfhss.healthnetcalifornia.com	2024-11-25	3.163.24.53
supplement.healthnetcalifornia.com	2024-11-25	3.163.24.79
my.healthnetcalifornia.com	2025-11-04	3.175.34.87
providerlibrary.healthnetcalifornia.com	2024-11-25	3.163.24.62

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > my.healthnetcalifornia.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains