Domain > www.mybenefitexpress.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-08-13	45.223.161.93 (ClassC)

HTTP/1.1 200 OKDate: Sat, 20 Apr 2024 12:49:25 GMTContent-Type: text/htmlConnection: keep-aliveLast-Modified: Thu, 04 Apr 2024 00:31:24 GMTAccept-Ranges: bytesETag: 3f82616c2786da1:0Server: Microsoft-

!--THIS TEMPLATE FILE IS USED TO CREATE LOGIN.HTML FILE AT BUILD TIME-->!DOCTYPE html>html>head>    meta http-equivCache-Control contentno-cache, no-store, must-revalidate />    meta http-equivPragma contentno-cache />    meta http-equivExpires content0 />    script srcassets/scripts/oidc-client.min.js>/script>    script typetext/javascript>        const idsvrUrl  https://id.mybenefitexpress.com;        const appUrl  https://mbe50.mybenefitexpress.com;        var tenant_acr  ;        if (getParameterByName(cid)) {            tenant_acr  tenant: + getParameterByName(cid);        }        function onUserLoggedOut(arg) {            const settings  {                authority: https://id.mybenefitexpress.com,  // DO NOT REPLACE TOKEN WITH ACTUAL VALUE IN GIT                client_id: mbe50,                redirect_uri: https://mbe50.mybenefitexpress.com/auth.html, // DO NOT REPLACE TOKEN WITH ACTUAL VALUE IN GIT                post_logout_redirect_uri: https://mbe50.mybenefitexpress.com, // DO NOT REPLACE TOKEN WITH ACTUAL VALUE IN GIT                response_type: id_token token,                scope: openid mbe,                monitorSession: true,                silent_redirect_uri: https://mbe50.mybenefitexpress.com/silent-renew.html,  // DO NOT REPLACE TOKEN WITH ACTUAL VALUE IN GIT                automaticSilentRenew: false,                silentRequestTimeout: 30000,                accessTokenExpiringNotificationTime: 30,                filterProtocolClaims: true,                loadUserInfo: true,                acr_values: tenant_acr            };            (new Oidc.UserManager(settings)).signinRedirect(tenant_acr);        }        function getParameterByName(name, url) {            if (!url) url  window.location.href;            name  name.replace(/\/g, \$&);            var regex  new RegExp(?& + name + ((^&#*)|&|#|$)),                results  regex.exec(url);            if (!results) return null;            if (!results2) return ;            return decodeURIComponent(results2.replace(/+/g,  ));        }

Subdomains

Date	Domain	IP
wsnet40.mybenefitexpress.com	2024-08-20	3.210.167.109
id.mybenefitexpress.com	2025-05-24	45.223.161.93
api-proxy.prod.mybenefitexpress.com	2024-06-11	18.210.8.187
selfservice.mybenefitexpress.com	2025-05-26	45.60.121.213
api.mybenefitexpress.com	2025-05-12	45.223.161.93
api-proxy.dv.mybenefitexpress.com	2024-06-09	23.23.34.166
www.mybenefitexpress.com	2025-08-13	45.223.161.93

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > www.mybenefitexpress.com

Is this malicious?

DNS Resolutions

Port 443

Subdomains