Domain > careers-worker.jefferies.workers.dev

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-11-22	104.21.17.158 (ClassC)

HTTP/1.1 404 Not FoundDate: Sat, 22 Nov 2025 21:19:28 GMTContent-Type: text/html;charsetUTF-8Content-Length: 3405Connection: keep-aliveCF-Ray: 9a2b771cec865ee6-PDXCache-Control: private, max-age0, no-store, no-cache, must-revalidate, post-check0, pre-check0Expires: Thu, 01 Jan 1970 00:00:01 GMTServer: cloudflareVary: Accept-EncodingReferrer-Policy: same-originX-Frame-Options: SAMEORIGINReport-To: {group:cf-nel,max_age:604800,endpoints:{url:https://a.nel.cloudflare.com/report/v4?sFvgVcg8XRDCD0H0qDeCCcEtwLEI1vEpsZrRtUQJhppXJQ86GjkPWTwlSBFYzIcGcbnfFIDFbotV8WiYBDN4Zra%2FqwuTrLhsNVmzlJXyMGvDHNXYsUJ%2F%2FVAINygnGmPOefLw%3D}}Nel: {report_to:cf-nel,success_fraction:0.0,max_age:604800}alt-svc: h3:443; ma86400

!DOCTYPE html>html>head>    script>    function makeHttpObject() {        try {            return new XMLHttpRequest();        } catch(error) {}        try {            return new ActiveXObject();        } catch(error) {}        throw new Error(Could not create HTTP request object.);    }    function readCookie(name) {        let nameEQ  name + ;        let ca  document.cookie.split(;);        for(let i  0; i  ca.length; i++) {            let c  cai;            while(c.charAt(0)   )                c  c.substring(1, c.length);            if(c.indexOf(nameEQ)  0)                return c.substring(nameEQ.length, c.length);        }        return ;    }    function replacecontent() {        // required for honoring site preferences from provided cookie consent        let langCookieVal  readCookie(siteLang);        let anchortext  (document.URL.split(#).length > 1) ? document.URL.split(#)1 : langCookieVal;		// Original Instruction//        const host  https://hdid.fa.us2.oraclecloud.com/;//        const ceBaseURL  host + hcmUI/CandidateExperience/en/sites/CX_1/;         const host  https://hdid.fa.us2.oraclecloud.com/;        const ceBaseURL  host + hcmUI/CandidateExperience/; 		//		        var replaced  null;        var xhr  makeHttpObject();        xhr.open(GET, ceBaseURL + anchortext, true);        xhr.setRequestHeader(ora-irc-vanity-domain, Y);        xhr.send();        xhr.onreadystatechange  function() {            if(xhr.readyState ! 4) return;            if(xhr.status > 200 && xhr.status  300) {                replaced  xhr.responseText;                //REQUIRED: makes the short links work by replacing                window.location.href  # + xhr.responseURL.replace(ceBaseURL, );                document.open(text/html, replace);                document.write(replaced);                document.close();            }        };    }    /script>    style>        .app-loading-spinner {            background: #f2f2f0;            position: fixed;            top: 0;            left: 0;            right: 0;            bottom: 0;            opacity: 1;            visibility: visible;            z-index: 100;            transition: opacity .4s, visibility .4s;            color: #5e717d;        }              .app-loading-spinner::before {            display: block;            content: ;            background: url(data:image/svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHdpZHRoPSIxMDAiIGhlaWdodD0iMTAwIj48cGF0aCBkPSJNOTggNTBoMmMwIDI3LjYxNC0yMi4zODYgNTAtNTAgNTBTMCA3Ny42MTQgMCA1MCAyMi4zODYgMCA1MCAwdjJDMjMuNDkgMiAyIDIzLjQ5IDIgNTBzMjEuNDkgNDggNDggNDggNDgtMjEuNDkgNDgtNDh6IiBmaWxsPSIjMzMzIiBmaWxsLXJ1bGU9Im5vbnplcm8iLz48L3N2Zz4);            position: absolute;            top: 50%;            left: 50%;            width: 100px;            height: 100px;            margin: -50px 0 0 -50px;            animation: app-loading-rotate-spinner .6s linear infinite;        }                @keyframes app-loading-rotate-spinner {            0% {                transform: rotate(0deg);            }            100% {                transform: rotate(360deg);            }        }    /style>/head>body onloadreplacecontent()>    div classapp-loading-spinner>/div>/body>

Port 443

HTTP/1.1 404 Not FoundDate: Sat, 22 Nov 2025 21:19:28 GMTContent-Type: text/html;charsetUTF-8Content-Length: 3405Connection: keep-aliveCF-Ray: 9a2b771d9971afe8-PDXCache-Control: private, max-age0, no-store, no-cache, must-revalidate, post-check0, pre-check0Expires: Thu, 01 Jan 1970 00:00:01 GMTServer: cloudflareVary: Accept-EncodingReferrer-Policy: same-originX-Frame-Options: SAMEORIGINReport-To: {group:cf-nel,max_age:604800,endpoints:{url:https://a.nel.cloudflare.com/report/v4?sGiTkDYhCCTkPUB1tyRJlAI4jSG2eCeutz2FUrYRZXLTgHntKmoSU1KefcijZXoStBdkV8kyymOZ7cU4GIclLN4VQSLBXoNDUjHAE6e9GsvZb%2FOwV2EJ4WD6qESWS4XLErrBNrA%3D%3D}}Nel: {report_to:cf-nel,success_fraction:0.0,max_age:604800}alt-svc: h3:443; ma86400

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > careers-worker.jefferies.workers.dev

Is this malicious?

DNS Resolutions

Port 80

Port 443