CONTINUOUS INTERNET TELEMETRY24H DRIFT10,710 material changesacross 10,284 domains · +81 vs yesterdayDNS DRIFT767 domains changed DNS providertop destination parity.domains · -13 vs yesterdayEMAIL DRIFT194 domains switched email providertop destination cloudflare.net · +24 vs yesterdayCERT DRIFT217 domains switched issuing CA24h · -13 vs yesterdayNOW809 curated domains not reachable-540 vs yesterdaySITE ERRORS18,180 sites serving errorslast probe · 5xx / 404 / TLSTHROTTLED95,067 throttled or blocked our scanner429 rate-limit / 403 bot-block

benefitfocus.com

Observed Jul 21, 2026, 19:26 UTC (2d ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Up right now
Runs onFastly
Email byMicrosoft 365
Secured byLet's Encrypt
Registered withNetwork Solutions, LLC
Also usesZoomAtlassianDocuSignGoogle Search ConsoleMiro
IPv6 · 2 subdomains · fortune_500
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat benefitfocus.com actually stands on - every host below is a signed observation
benefitfocus.com
A / AAAA
23.185.0.22620:12a:8001::22620:12a:8000::2
Fastlyserves the site
NS
bella.ns.cloudflare.comwill.ns.cloudflare.com
cloudflare.comanswers its DNS
MX
benefitfocus-com.mail.protection.outlook.combenefitfocusinc.mail.protection.outlook.com
Microsoft 365receives its email
TLS
benefitfocus.com
Let's Encryptissued its certificate

DNS Records

A 1

  • 23.185.0.2

AAAA 2

  • 2620:12a:8001::2
  • 2620:12a:8000::2

MX 2

  • 10benefitfocus-com.mail.protection.outlook.com
  • 10benefitfocusinc.mail.protection.outlook.com

TXT 20

  • 8hp88v4fgj2cxtpn7l1ny5950g22hbw2
  • Dynatrace-site-verification=3bfaec9b-c56d-4dfd-adc4-e32c0f5443b7__4rj2pdskvjkb1hu4h9grr3e7oi
  • Dynatrace-site-verification=7033b7e8-bf57-41b7-8608-5a9353f939b9__v185e0ch14csle7508nps8qj9m
  • MS=ms19939014
  • ZOOM_verify_Bmd9bUDJT6KDPB1pD-PApA
  • _mntrd9rkjar328nc5b5js8ypph1xpcl
  • apple-domain-verification=Fh3tNAZigf6wxU6N
  • atlassian-domain-verification=eQtVxzqaGTMjCroxU5DsHK6vwcYW3jzYoFmerjYH1IVsbaYarncR/koz/7KBzoyJ
  • bQhYm4AGqBXYq2La5P47G5ncrFug4l1uJZBkk2c9ut82DP2U1a5LGzEmyUZb3jG7LEt7ps2rmv3VW2SHc4yQTQ==
  • ciscocidomainverification=778c14a1213a747dcc3101a93817fec4c3d35eba1a617e08ef86363fe1b96786

NS 2

  • bella.ns.cloudflare.com
  • will.ns.cloudflare.com

SOA 1

  • bella.ns.cloudflare.com dns.cloudflare.com

SRV 6

  • ygg1.vp.vc:5060 p10
  • ygg2.vp.vc:5060 p50
  • ygg1.vp.vc:5061 p10
  • ygg2.vp.vc:5061 p50
  • c2s.benefitfocus.com.webexconnect.com:5222 p5
  • s2s.benefitfocus.com.webexconnect.com:5269 p5

TLS Certificates (3)

Common NameIssuerExpires
benefitfocus.com C=US, O=Let's Encrypt, CN=YR2 Sat, 05 Sep 2026 09:46:50 +0000
YR2 C=US, O=ISRG, CN=Root YR Sat, 02 Sep 2028 23:59:59 +0000
Root YR C=US, O=Internet Security Research Group, CN=ISRG Root X1 Thu, 02 Sep 2032 23:59:59 +0000

Subdomains (2)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for benefitfocus.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for benefitfocus.com <a href="https://domaindrift.io/t/benefitfocus.com"> <img src="https://domaindrift.io/badge/benefitfocus.com.svg" width="300" height="64" alt="DomainDrift signed observations for benefitfocus.com"> </a>

Ed25519 Receipt

Receipt ID
rcpt_8d914d70208b7f2b
Output Hash
292acab3abae8f335597af9068ea29a59cdfce0f0f8a3745d8850d555eeb1ca0
Signature
ed25519:581aed83b33febb869f84e121913b50b3bc919bdd78ad74d68db53f8c51a2b5437b0e87a5ab25ec61a70ad617cc1d818c210a8251c77e313de8f3131cf70300d
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser