Domain > anifarmolyek.alirezamoradi-farhmand30.workers.dev

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2024-09-16	104.21.91.82 (ClassC)
2025-09-18	172.67.212.133 (ClassC)

HTTP/1.1 412 Precondition FailedDate: Thu, 18 Sep 2025 13:38:39 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveCF-Ray: 98113eb0883dff12-PDXCF-Cache-Status: DYNAMICServer: cloudflarex-sec-request-id: 78f97eee-8b89-4ea1-9baf-d69c1a9bbc4dVary: accept-encodingReport-To: {group:cf-nel,max_age:604800,endpoints:{url:https://a.nel.cloudflare.com/report/v4?sMxDUZJhUCFsZpuxX4yb2aNsBTIlaSPB%2FdSBOq82EkytTefwQXqyTtSMeUwg0E1dJU%2FpV9XlK%2Bj4YlPgFQLCvApqDhORrcnx5zpvLY20mjk6A5e5%2B6UwXs%2Bj9Ket73Qh4im68HbmxImYaSwyQ9RlJ}}Nel: {report_to:cf-nel,success_fraction:0.0,max_age:604800}alt-svc: h3:443; ma86400

!DOCTYPE html>html langzh-cn>head>    meta http-equivAccess-Control-Allow-Origin content* />    meta http-equivPage-Enter contentblendTrans(Duration0.5)>    meta http-equivPage-Exit contentblendTrans(Duration0.5)>    meta http-equivContent-Type contenttext/html; charsetutf-8>    meta nameviewport contentwidthdevice-width, user-scalableno, initial-scale1.0, maximum-scale1.0, minimum-scale1.0>    meta namespm_prefix content333.937>    title>出错啦! - bilibili.com/title>    link relshortcut icon href//static.hdslb.com/images/favicon.ico>    script typetext/javascript src//s1.hdslb.com/bfs/static/jinkela/long/js/jquery/jquery1.7.2.min.js>/script>    style>        body {          margin: 0;          padding: 0;          width: 100vw;          height: 100vh;        }       .error-container {          height: 100%;          width: 100%;          display: flex;          justify-content: center;          align-items: center;        }        .captcha-content {          text-align: center;        }        .txt-wrap {          margin-top: 15px;          font-size: 12px;          line-height: 22px;          color: #999;          text-align: left;        }        .txt-item.err-code {          font-size: 28px;          font-weight: 700;          text-align: center;          color: #4c93ff;          margin-top: 16px;        }                .captcha-img {          width: 160px;          height: 160px;          margin: auto;          background: url(https://i0.hdslb.com/bfs/static/jinkela/long/412/%E9%A1%B5%E9%9D%A2%E7%8A%B6%E6%80%81%E5%9B%BE.png) no-repeat center / cover;        }        .err-text {          color: #03a9f4;        }        .err-default {          font-size: 16px;          margin-top: 10px;        }      /style>/head>body>    noscript>          strong>抱歉！我们需要允许JavaScript才能够正常运行。请打开后重试~/strong>          strong>错误：412/strong>      /noscript>      div classerror-container>        div classcaptcha-content>          div classcaptcha-img>/div>          div classtxt-item err-code>错误号: 412/div>          div classtxt-item err-text>/div>          div classtxt-item err-default>由于触发哔哩哔哩安全风控策略，该次访问请求被拒绝。             div classtxt-item>The request was rejected because of the bilibili security control policy./div>          /div>          div classtxt-wrap>            div classtxt-item datetime_now>/div>            div classtxt-item user_url>/div>            div classtxt-item user_ip>/div>            div classtxt-item user_id>/div>          /div>          div classcheck-input>              div classtitle>/div>              div classbox-pic>/div>              div classbox>/div>              div classstate>/div>          /div>      /div>    /div>    script typetext/javascript charsetutf-8 src//security.bilibili.com/static/js/sha256.min.js>/script>    script typetext/javascript charsetutf-8 src//security.bilibili.com/static/js/js.cookie.min.js>/script>    script typetext/javascript charsetutf-8 src//security.bilibili.com/static/js/412.js>/script>/body>/html>

Port 443

HTTP/1.1 200 OKDate: Thu, 18 Sep 2025 13:38:39 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveCF-Ray: 98113eb4aea6fef3-PDXCF-Cache-Status: DYNAMICNel: {report_to:cf-nel,success_fraction:0.0,max_age:604800}Server: cloudflareStrict-Transport-Security: max-age31536000; includeSubDomains; preloadVary: Accept-EncodingVia: cache30.l2nu16-133,0, ens-cache14.us24223,0access-control-allow-credentials: truedocument-policy: include-js-call-stacks-in-crash-reportseagleid: 083055a217582027195855403eproxy-status: 0000201200062000reporting-endpoints: main-endpointhttps://mon.zijieapi.com/monitor_browser/collect/batch/security/?biddouyin_web, default/report/pc_web_crashserver-timing: cdn-cache;descMISS,edge;dur190,origin;dur33timing-allow-origin: *x-tt-logid: 20250918213839A6242D2416D14CAA2C02x-tt-system-error: 3x-tt-trace-host: 01ae3485c412db67097a2fefa88ba0f972db81e247ab26c6566c2ec68104ae5907005604021d051d05ca202abaf146aac61c4d43c23bafbd70a40252b8e9fb427f20efdfa50eaf5d341122fe520f7b85b8x-tt-trace-id: 00-250918213839A6242D2416D14CAA2C02-12BA72FD649CDCE9-00x-tt-trace-tag: id03;cdn-cachemiss;typedynReport-To: {group:cf-nel,max_age:604800,endpoints:{url:https://a.nel.cloudflare.com/report/v4?sW4iNuPMxjpLB%2FK02c5rj%2FOMWVrtumtudIUAYaREa2J9nf65%2F%2F31zRr24pG4%2FR9m%2BamQK2ujAxP0%2Fx%2BhQSXilljVXfDQmY3oLaa5B9z%2BFBFBJky9NDUFfVTWRFKZPQ%2BHmAQ1fTxV4wnXbTnbAbPEb}}alt-svc: h3:443; ma86400

!DOCTYPE html>html langen>head>link reliconhrefdata:;base64,>head>script>;(function(w,d,u,b,n,pc,ga,ae,po,s,p,e,t,pp){pcprecollect;gagetAttribute;aeaddEventListener;poPerformanceObserver;sfunction(m){p.slice.call(arguments);p.push(Date.now(),location.href);(mpc?s.p.a:s.q).push(p)};s.q;s.p{a:};wns;edocument.createElement(script);e.srcu+?bid+b+&globalName+n;e.crossOriginu.indexOf(sdk-web)>0?anonymous:use-credentials;d.getElementsByTagName(head)0.appendChild(e);if(ae in w){s.pcErrfunction(e){ee||w.event;te.target||e.srcElement;if(t instanceof Element||t instanceof HTMLElement){if(tga(integrity)){wn(pc,sri,tga(href)||tga(src))}else{wn(pc,st,{tagName:t.tagName,url:tga(href)||tga(src)})}}else{wn(pc,err,e.error)}};s.pcRejfunction(e){ee||w.event;wn(pc,reject,e.reason||(e.detail&&e.detail.reason))};wae(error,s.pcErr,true);wae(unhandledrejection,s.pcRej,true)};if(PerformanceLongTaskTimingin w){pps.pp{entries:};pp.observernew PerformanceObserver(function(l){pp.entriespp.entries.concat(l.getEntries())});pp.observer.observe({entryTypes:longtask,largest-contentful-paint,layout-shift})}})(window,document,https://lf3-short.ibytedapm.com/slardar/fe/sdk-web/browser.cn.js,waf_js,WAFJS)/script>script srchttps://lf-waf-js.byted-static.com/obj/waf-jschallenge/out-sha256.js>/script>/head>body onloadreadygo()>script>function readygo(){var ps;for(const i of navigator.plugins)ps+i.name;window.WAFJS(context.merge,{referrer:document.referrer, history:window.history.length,plugins:ps,platform:navigator.platform,webdriver:navigator.webdriver,vendor:navigator.vendor,langs:navigator.languages.length});window.WAFJS(init,{bid:waf_js});window.WAFJS(start);var wci_wafchallengeid,cseyJ2Ijp7ImEiOiJKbjFEM1VoNE5QL1FoOEhkTHE3WGZhSWR1OGMreWFtZFlJZHI5S2wxclIwPSIsImIiOjE3NTgyMDI3MTksImMiOiJHUmltNkNyak9HejIwbGdaUkxBMWx1cU1WdHFLNmpIQlZwZEpuMU5XL1lzPSJ9LCJzIjoiM01jUUpoZ2ZJeDBTMFVmZUtPMVZ2dWJaeEZGOUh6M1VuSU5tTUlWSzFVUT0ifQ,cJSON.parse(atob(cs)),prefixb64tou8a(c.v.a),expectb64tohex(c.v.c),i0,iidsetInterval(function(){expects256(prefix,+i)&&(c.dbtoa(+i),clearInterval(iid),document.cookiewci++btoa(JSON.stringify(c))+; Max-Age1,window.location.reload()),i++,i>1e6&&clearInterval(iid)},1)}/script>Please wait.../body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > anifarmolyek.alirezamoradi-farhmand30.workers.dev

Is this malicious?

DNS Resolutions

Port 80

Port 443