Domain > bitter-bush-0189.1plws6gv.workers.dev

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-09-21	104.21.92.72 (ClassC)

HTTP/1.1 200 OKDate: Sun, 21 Sep 2025 17:47:23 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveCF-RAY: 982b6331cc9e816e-PDXReport-To: {endpoints:{url:https:\/\/a.nel.cloudflare.com\/report\/v4?sIP%2FaULa0V4P0f3B1TKTs6LPAWHVu4Uw6A9argWM9oq6oGCz%2FBWHc6V1yIw4WpGd5suy5EAEx5k0omdkUwwmndswq%2F5pq636EWt9KCBJxZjeVCE6bIV6XO%2FV6fVSIKfapqeBqU%2BIf7Vx32CqNYwXoKXlubYOl%2B671},group:cf-nel,max_age:604800}NEL: {success_fraction:0,report_to:cf-nel,max_age:604800}Server: cloudflarealt-svc: h3:443; ma86400server-timing: cfL4;desc?protoTCP&rtt6106&min_rtt6106&rtt_var3053&sent1&recv3&lost0&retrans0&sent_bytes0&recv_bytes76&delivery_rate0&cwnd249&unsent_bytes0&cid0000000000000000&ts0&x0

Try making requests to:      ul>      li>code>a href/redirect?redirectUrlhttps://example.com/>/redirect?redirectUrlhttps://example.com//a>/code>,/li>      li>code>a href/proxy?modify&proxyUrlhttps://example.com/>/proxy?modify&proxyUrlhttps://example.com//a>/code>, or/li>      li>code>a href/api/todos>/api/todos/a>/code>/li>

Port 443

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > bitter-bush-0189.1plws6gv.workers.dev

Is this malicious?

DNS Resolutions

Port 80

Port 443