Domain > 429f5b88.c2199508e2c671caf817e776.workers.dev

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2026-01-26	104.21.77.16 (ClassC)

HTTP/1.1 200 OKDate: Mon, 26 Jan 2026 04:17:52 GMTContent-Type: text/html;charsetUTF-8Content-Length: 2369Connection: keep-aliveVary: accept-encodingReport-To: {group:cf-nel,max_age:604800,endpoints:{url:https://a.nel.cloudflare.com/report/v4?sOPeQM2tHnMTrA5W7ITN1bKPKWKBDAGAkP3PDgsQI%2BruZ12Vd0uUVEs8QZU3XdA4vYESejvt90%2FDr6zdEJWUX%2Bsct1W%2BlgpYUH3sJ%2BYCreN4rN3D613KNSOW5oo%2BhUlxwVrf637i%2FMiHAOnFslg%3D%3D}}Nel: {report_to:cf-nel,success_fraction:0.0,max_age:604800}Server: cloudflareCF-RAY: 9c3d33fd89db97a5-PDXalt-svc: h3:443; ma86400

!doctype html>html langen-US>head>    meta charsetutf-8>    meta nameviewport contentwidthdevice-width, initial-scale1>    title>One more step before you proceed.../title>    script srchttps://cdn.jsdelivr.net/gh/Joe12387/detectIncognito@main/dist/es5/detectIncognito.min.js>/script>    script async defer srchttps://challenges.cloudflare.com/turnstile/v0/api.js?onloadonloadTurnstileCallback>/script>    script>        let isPrivateMode  false;        // Check only for Chrome incognito        detectIncognito().then((result) > {            isPrivateMode  (result.browserName  Chrome && result.isPrivate);            console.log(Is Chrome Incognito:, isPrivateMode);        });        var verifyCallback_CF  function(response) {            if (response && response.length > 10) {                var cfForm  document.querySelector(#cfForm);                cfForm.querySelector(inputnamechromeIncognito).value  isPrivateMode ? true : false;                cfForm.submit();            }        };        window.onloadTurnstileCallback  function() {            turnstile.render(#turnstileCaptcha, {                sitekey: 0x4AAAAAABnS2_d8tJrck11_,                callback: verifyCallback_CF,            });        };    /script>    style>        body {            font-family: -apple-system, BlinkMacSystemFont, Segoe UI, Roboto, Oxygen, Ubuntu, Cantarell, sans-serif;            background: #f0f2f5;            margin: 0;            padding: 20px;            display: flex;            justify-content: center;            align-items: center;            min-height: 100vh;        }        .container {            background: white;            padding: 30px;            border-radius: 8px;            box-shadow: 0 2px 4px rgba(0,0,0,0.1);            text-align: center;            max-width: 400px;            width: 100%;        }        h1 {            color: #1a73e8;            font-size: 24px;            margin-bottom: 20px;        }    /style>/head>body>    div classcontainer>        p>One more step before you proceed.../p>        form idcfForm methodPOST>            input typehidden namechromeIncognito valuefalse>            div idturnstileCaptcha>/div>        /form>    /div>/body>/html>

Port 443

HTTP/1.1 200 OKDate: Mon, 26 Jan 2026 04:17:52 GMTContent-Type: text/html;charsetUTF-8Content-Length: 2369Connection: keep-aliveVary: accept-encodingReport-To: {group:cf-nel,max_age:604800,endpoints:{url:https://a.nel.cloudflare.com/report/v4?sp2D2ox1PgHCOu9Pernhi5xDXSVzOnJ2ihYuRl%2F3iqaY7s%2FC3zh6J9CWMzE0vqYgqdo8Zg1h04PlZ1cnfJzBPYvQvFAQtxC8xFci%2FnUu3OgEKAssCKJ7WnOPOFAuk7OuvByXF08KEjNcaiABSaQ%3D%3D}}Nel: {report_to:cf-nel,success_fraction:0.0,max_age:604800}Server: cloudflareCF-RAY: 9c3d3400c848c8da-PDXalt-svc: h3:443; ma86400

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > 429f5b88.c2199508e2c671caf817e776.workers.dev

Is this malicious?

DNS Resolutions

Port 80

Port 443