Domain > admindemo.youbenefited.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-11-11	54.200.207.63 (ClassC)
2026-01-27	35.95.250.20 (ClassC)

HTTP/1.1 302 FoundDate: Tue, 27 Jan 2026 10:55:14 GMTContent-Type: text/html; charsetutf-8Content-Length: 123Connection: keep-aliveCache-Control: privateLocation: /AdminX-Content-Type-Options: nosniffContent-Security-Policy: default-src self http://localhost:50042 https://dc.services.visualstudio.com https://www.google-analytics.com http://35.82.192.55/ https://benefited-development.s3.us-west-2.amazonaws.com/ https://benefited-qa.s3.us-west-2.amazonaws.com/ https://benefited-prod.s3.us-west-2.amazonaws.com/;style-src self unsafe-inline https://cdnjs.cloudflare.com https://maxcdn.bootstrapcdn.com http://code.jquery.com/ui/1.12.1/themes/base/jquery-ui.css https://fonts.googleapis.com https://cdn.jsdelivr.net;;script-src self unsafe-inline unsafe-eval https://cdnjs.cloudflare.com;script-src-elem self unsafe-inline unsafe-eval https://cdnjs.cloudflare.com http://az416426.vo.msecnd.net https://use.typekit.net https://ajax.googleapis.com https://maxcdn.bootstrapcdn.com https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net;font-src self unsafe-inline unsafe-eval http://cdnjs.cloudflare.com https://maxcdn.bootstrapcdn.com https://fonts.gstatic.com;frame-src self data: unsafe-inline unsafe-eval https://www.youtube.com/embed/_Iqf9FpfOjw https://demo.docusign.net/ https://docusign.net/ https://account-d.docusign.com/ https://account.docusign.com/ https://na.account.docusign.com/ https://na4.docusign.net/;img-src self unsafe-inline unsafe-eval https://localhost http://s.svgbox.net;Permissions-Policy: accelerometer(), camera(), geolocation(), gyroscope(), magnetometer(), microphone(), payment(), usb()Strict-Transport-Security: max-age31536000; includeSubDomainsReferrer-Policy: same-originSet-Cookie: ASP.NET_SessionIdi3zr3cmtcwhfhnszbzfwfcyt; path/; secure; HttpOnly; SameSiteLaxSet-Cookie: ASP.NET_SessionIdi3zr3cmtcwhfhnszbzfwfcyt; path/; secure; HttpOnly; SameSiteLaxSet-Cookie: CompanyIdoLioWHX5lj3iDqrZ6uLHWg; path/; secureSet-Cookie: CompanyProgramIdAiRrjND43/0CL7PdvBv2GA; path/; secureSet-Cookie: CompanyNameAiRrjND43/0CL7PdvBv2GA; path/; secureSet-Cookie: IsSuperAdminikAzim9l1gc4LDvOTg23WQ; path/; secureSet-Cookie: IsProducerAdminikAzim9l1gc4LDvOTg23WQ; path/; secureSet-Cookie: UsingCompanyikAzim9l1gc4LDvOTg23WQ; path/; secureSet-Cookie: SiteIdoLioWHX5lj3iDqrZ6uLHWg; path/; secureSet-Cookie: ProducerIdKeyoLioWHX5lj3iDqrZ6uLHWg; path/; secureSet-Cookie: HasTuitionReimbursementikAzim9l1gc4LDvOTg23WQ; path/; secureSet-Cookie: HasCompanyLogoikAzim9l1gc4LDvOTg23WQ; path/; secureSet-Cookie: ReturnUrlAiRrjND43/0CL7PdvBv2GA; path/; secureSet-Cookie: HasTuitionAssistanceikAzim9l1gc4LDvOTg23WQ; path/; secureSet-Cookie: HasTuitionInquiryikAzim9l1gc4LDvOTg23WQ; path/; secureSet-Cookie: HasCapWaiverRequestikAzim9l1gc4LDvOTg23WQ; path/; secureSet-Cookie: IsProducerReadOnlyCompaniesAiRrjND43/0CL7PdvBv2GA; path/; secureSet-Cookie: EnableProcessingStepsikAzim9l1gc4LDvOTg23WQ; path/; secureSet-Cookie: EmployeeIdoLioWHX5lj3iDqrZ6uLHWg; path/; secureSet-Cookie: HasManagerApprovalFormikAzim9l1gc4LDvOTg23WQ; path/; secureSet-Cookie: TopNavHasTuitionReimbursementikAzim9l1gc4LDvOTg23WQ; path/; secureSet-Cookie: TopNavHasTuitionAssistanceikAzim9l1gc4LDvOTg23WQ; path/; secureSet-Cookie: TopNavHasCapWaiverRequestikAzim9l1gc4LDvOTg23WQ; path/; secureSet-Cookie: TopNavHasManagerApprovalFormikAzim9l1gc4LDvOTg23WQ; path/; secureSet-Cookie: TopNavHasTuitionInquiryikAzim9l1gc4LDvOTg23WQ; path/; secure

html>head>title>Object moved/title>/head>body>h2>Object moved to a href/Admin>here/a>./h2>/body>/html>

Subdomains

Date	Domain	IP
www.dashboard.youbenefited.com	2026-01-03	44.229.1.157
admin.youbenefited.com	2026-01-05	35.85.81.26
www.admin.youbenefited.com	2026-01-04	44.229.1.157
www.dashboarddemo.youbenefited.com	2026-01-05	44.229.1.157
admindemo.youbenefited.com	2026-01-27	35.95.250.20

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > admindemo.youbenefited.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains