Domain > hr.workstream.us

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2022-09-24	18.154.227.101 (ClassC)
2024-03-14	18.164.13.84 (ClassC)
2024-07-15	13.32.208.103 (ClassC)
2024-07-15	13.32.208.14 (ClassC)
2025-06-03	18.64.67.39 (ClassC)
2025-07-09	108.138.94.67 (ClassC)
2025-12-12	3.169.173.15 (ClassC)
2026-01-10	3.169.173.73 (ClassC)

HTTP/1.1 200 OKContent-Type: text/htmlContent-Length: 8517Connection: keep-aliveServer: CloudFrontLast-Modified: Thu, 27 Nov 2025 05:23:48 GMTx-amz-server-side-encryption: AES256Accept-Ranges: bytesSt

!doctype html>html langen>  head>    meta charsetutf-8 />    title>HR - Workstream/title>    base href/s/ws-mfe-parent/ />    meta nameapple-itunes-app contentapp-id1456210037 />    meta nameviewport contentwidthdevice-width, initial-scale1 />    link relicon typeimage/x-icon href/favicon.ico />    !-- Google tag (gtag.js) -->    script  async  srchttps://www.googletagmanager.com/gtag/js?idG-T85J0RVMW2>/script>script>  window.dataLayer  window.dataLayer || ;  function gtag() {    dataLayer.push(arguments);  }  gtag(js, new Date());  gtag(config, G-T85J0RVMW2);/script>    !-- Mobile redirect -->    script typetext/javascript>  var continueInBrowser  window.sessionStorage.getItem(continueInBrowser);  if (!continueInBrowser) {    // mobile / oidc redirect    var userAgent  navigator.userAgent || navigator.vendor || window.opera;    var isMobile  /iPad|iPhone|iPod|android/i.test(userAgent);    var currentURL  window.location.href;    var paramsUrl  currentURL.split(#)1;    var needRedirect       !!paramsUrl && paramsUrl ! / && paramsUrl ! /login;    if (needRedirect) {      var oidc  oidc;      var path  paramsUrl.startsWith(`/${oidc}`)        ? `${oidc}/launch`        : mobile/download;      if (isMobile || path.startsWith(oidc)) {        window.location.href           window.location.protocol +          // +          window.location.host +          `/${path}.html?from` +          encodeURIComponent(window.location.href);      }    }  }/script>    !-- Rangy -->    script srchttps://cdnjs.cloudflare.com/ajax/libs/rangy/1.3.0/rangy-core.min.js>/script>script srchttps://cdnjs.cloudflare.com/ajax/libs/rangy/1.3.0/rangy-selectionsaverestore.min.js>/script>script>  // make an array of users for demo  var users  hayatbiralem, evchan, denislexic, Noseratio;/script>    !-- Google maps -->    script  typetext/javascript  srchttps://maps.googleapis.com/maps/api/js?keyAIzaSyDHYEUG4JZs1OEA9ubzynJboxCm7A19CEY&librariesplaces>/script>    !-- HelloSign -->    script  typetext/javascript  srchttps://s3.amazonaws.com/cdn.hellosign.co

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > hr.workstream.us

Is this malicious?

DNS Resolutions

Port 80

Port 443