Domain > baohao1.hw1-hw2.workers.dev

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2026-02-06	104.21.59.179 (ClassC)

HTTP/1.1 200 OKDate: Fri, 06 Feb 2026 21:01:58 GMTContent-Type: text/htmlContent-Length: 5530Connection: keep-aliveReport-To: {group:cf-nel,max_age:604800,endpoints:{url:https://a.nel.cloudflare.com/report/v4?sZKWf4t8FaCftHvC80e4NNgn63tWLCuRGvSpRNNn3t7PUHm5JwouGfEJK5z%2BFQI%2FN9Jve72poq8sjlHwV247QnG5Cmec%2F4%2FHnkfcLth145c52eN2G%2BoJ%2FTpXbFA%3D%3D}}Nel: {report_to:cf-nel,success_fraction:0.0,max_age:604800}Server: cloudflareCF-RAY: 9c9d95f86f38e6e0-PDXalt-svc: h3:443; ma86400

!DOCTYPE html>  html langen>  head>    meta charsetUTF-8>    meta nameviewport contentwidthdevice-width, initial-scale1.0>    title>Worker Control Panel/title>    style>      body {        font-family: Arial, sans-serif;        display: flex;        justify-content: center;        align-items: center;        min-height: 100vh;        margin: 0;        background-color: #f0f0f0;      }      .container {        text-align: center;        padding: 20px;        background-color: white;        border-radius: 8px;        box-shadow: 0 2px 4px rgba(0,0,0,0.1);        max-width: 800px;        width: 100%;      }      input, button {        margin: 10px 0;        padding: 10px;        width: 200px;        border-radius: 4px;        border: 1px solid #ddd;      }      button {        background-color: #4CAF50;        border: none;        color: white;        cursor: pointer;      }      #status {        margin-top: 20px;        font-weight: bold;      }      table {        width: 100%;        border-collapse: collapse;        margin-top: 20px;      }      th, td {        border: 1px solid #ddd;        padding: 8px;        text-align: left;      }      th {        background-color: #f2f2f2;      }      #loginForm, #dashboard {        display: none;      }    /style>  /head>  body>    div classcontainer>      h1>Worker Control Panel/h1>      div idloginForm>        input typepassword idpassword placeholderEnter password>        button onclicklogin()>Login/button>      /div>      div iddashboard>        button onclickrunScript()>Run Script/button>        div idstatus>/div>        table idresultsTable>          thead>            tr>              th>Account/th>              th>Type/th>              th>Status/th>              th>Message/th>              th>Last Run/th>            /tr>          /thead>          tbody>/tbody>        /table>      /div>    /div>    script>      let password  ;      function showLoginForm() {        document.getElementById(loginForm).style.display  block;        document.getElementById(dashboard).style.display  none;      }      function showDashboard() {        document.getElementById(loginForm).style.display  none;        document.getElementById(dashboard).style.display  block;        fetchResults();      }      async function checkAuth() {        const response  await fetch(/check-auth);        const data  await response.json();        if (data.authenticated) {          showDashboard();        } else {          showLoginForm();        }      }      async function login() {        password  document.getElementById(password).value;        const formData  new FormData();        formData.append(password, password);        const response  await fetch(/login, {           method: POST,          body: formData        });        const result  await response.json();        if (result.success) {          showDashboard();        } else {          alert(Incorrect password);        }      }      async function runScript() {        const statusDiv  document.getElementById(status);        statusDiv.textContent  Executing script...;        try {          const response  await fetch(/run, { method: POST });          if (response.ok) {            const results  await response.json();            displayResults(results);            statusDiv.textContent  Script executed successfully!;          } else if (response.status  401) {            statusDiv.textContent  Unauthorized. Please login again.;            showLoginForm();          } else {            statusDiv.textContent  Error executing script.;          }        } catch (error) {          statusDiv.textContent  Error:  + error.message;        }      }      async function fetchResults() {        try {          const response  await fetch(/results);          if (response.ok) {            const data  await response.json();            if (data.authenticated) {              displayResults(data.results);            } else {              showLoginForm();            }          } else {            console.error(Failed to fetch results);            showLoginForm();          }        } catch (error) {          console.error(Error fetching results:, error);          showLoginForm();        }      }      function displayResults(results) {        const tbody  document.querySelector(#resultsTable tbody);        tbody.innerHTML  ;        results.forEach(result > {          result.cronResults.forEach((cronResult, index) > {            const row  tbody.insertRow();            if (index  0) {              row.insertCell(0).textContent  result.username;              row.insertCell(1).textContent  result.type;            } else {              row.insertCell(0).textContent  ;              row.insertCell(1).textContent  ;            }            row.insertCell(2).textContent  cronResult.success ? Success : Failed;            row.insertCell(3).textContent  cronResult.message;            row.insertCell(4).textContent  new Date(result.lastRun).toLocaleString();          });        });      }      // 页面加载时检查认证状态      document.addEventListener(DOMContentLoaded, checkAuth);    /script>  /body>  /html>

Port 443

HTTP/1.1 200 OKDate: Fri, 06 Feb 2026 21:01:58 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveReport-To: {group:cf-nel,max_age:604800,endpoints:{url:https://a.nel.cloudflare.com/report/v4?sUIdvh4dfvdFE55IyKMAcCnn7YZRUhvse%2FleKJsXVpiKF24ZD4I7UVTir4jTb9dGGquEbbSdIhJuur4VXi5fSOBtKAB4Avsr1fs9DxfzVSxf4GYt9rczKjv4%3D}}Nel: {report_to:cf-nel,success_fraction:0.0,max_age:604800}Server: cloudflareCF-RAY: 9c9d95f958c6e22a-PDXalt-svc: h3:443; ma86400

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > baohao1.hw1-hw2.workers.dev

Is this malicious?

DNS Resolutions

Port 80

Port 443