Domain > bold-union-c2f6.j09055766021.workers.dev

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2026-01-20	172.67.176.165 (ClassC)

HTTP/1.1 200 OKDate: Tue, 20 Jan 2026 06:12:37 GMTContent-Type: text/htmlContent-Length: 6346Connection: keep-aliveVary: accept-encodingReport-To: {group:cf-nel,max_age:604800,endpoints:{url:https://a.nel.cloudflare.com/report/v4?sLcciJNHw3Y3GAlJVFpgdTenzhDpZXbLf8%2F4Eq%2BqgLFEHpujMOE6ZrcM6OBeiAdO1B72Hh3s5JOag9o5tRaxdtmgq9jszIuydOnSZtu0koxUcaevh3186T9SAu5LvJIThRK0lLGJy}}Nel: {report_to:cf-nel,success_fraction:0.0,max_age:604800}Server: cloudflareCF-RAY: 9c0c6bd55b9b6c24-PDXalt-svc: h3:443; ma86400

!DOCTYPE html>        html langen>        head>            meta charsetUTF-8>            meta nameviewport contentwidthdevice-width, initial-scale1.0>            meta http-equivX-UA-Compatible contentieedge>            title>SezarSec Worker Panel/title>            style>                @import url(https://fonts.googleapis.com/css2?familyPoppins:wght@300;400;600&displayswap);                                body {                  font-family: Poppins, sans-serif;                  color: #ffffff;                  margin: 0;                  padding: 0;                  display: flex;                  justify-content: center;                  align-items: center;                  min-height: 100vh;                  position: relative;                  overflow: hidden;              }                .container {                  background: rgba(255, 255, 255, 0.1);                  backdrop-filter: blur(10px);                  border-radius: 10px;                  padding: 40px;                  box-shadow: 0 8px 32px 0 rgba(31, 38, 135, 0.37);                  border: 1px solid rgba(255, 255, 255, 0.18);                  text-align: center;                  max-width: 500px;                  width: 90%;                  position: relative;                  z-index: 1;              }                h1 {                    font-size: 2.5em;                    margin-bottom: 20px;                    color: #fff;                    text-shadow: 2px 2px 4px rgba(0,0,0,0.1);                }                .btn {                    background: none;                    color: white;                    border: solid 1px white;                    padding: 12px 24px;                    margin: 10px 0;                    border-radius: 10px;                    cursor: pointer;                    transition: all 0.3s ease;                    font-size: 1em;                    font-weight: 600;                    display: inline-flex;                    align-items: center;                    justify-content: center;                    text-decoration: none;                }                .btn:hover {                    transform: translateY(-3px);                    box-shadow: 0 7px 14px rgba(50, 50, 93, .1), 0 3px 6px rgba(0, 0, 0, .08);                }                .btn img {                    width: 24px;                    height: 24px;                    margin-right: 10px;                }                #subscription-link {                    background: rgba(255, 255, 255, 0.1);                    padding: 15px;                    border-radius: 10px;                    margin-top: 20px;                    font-size: 0.9em;                    word-break: break-all;                }                .animate-charcter {                    background-image: linear-gradient(                        -225deg,                        #231557 0%,                        #44107a 29%,                        #ff1361 67%,                        #fff800 100%                    );                    background-size: auto auto;                    background-clip: border-box;                    background-size: 200% auto;                    color: #fff;                    background-clip: text;                    -webkit-background-clip: text;                    -webkit-text-fill-color: transparent;                    animation: textclip 2s linear infinite;                    display: inline-block;                }                @keyframes textclip {                    to {                        background-position: 200% center;                    }                }                body::before {                  content: ;                  position: fixed;                  top: 0;                  left: 0;                  width: 100%;                  height: 100%;                  background: linear-gradient(125deg, #283a6c ,#015869 ,#7088c6 ,#00b2a4 ,#b5b9dc);                  background-size: 400% 400%;                  animation: gradient 15s ease infinite;                  z-index: -1;              }                            @keyframes gradient {                  0% {                      background-position: 0% 50%;                  }                  50% {                      background-position: 100% 50%;                  }                  100% {                      background-position: 0% 50%;                  }              }            /style>        /head>        body>            div classcontainer>                h1 classanimate-charcter>SezarSec Worker Panel/h1>                a hrefhttps://t.me/SezarSec classbtn target_blank>                    img srcdata:image/svg+xml,%3Csvg xmlnshttp://www.w3.org/2000/svg viewBox0 0 24 24 fillwhite%3E%3Cpath dM9.78 18.65l.28-4.23 7.68-6.92c.34-.31-.07-.46-.52-.19L7.74 13.3 3.64 12c-.88-.25-.89-.86.2-1.3l15.97-6.16c.73-.33 1.43.18 1.15 1.3l-2.72 12.81c-.19.91-.74 1.13-1.5.71L12.6 16.3l-1.99 1.93c-.23.23-.42.42-.83.42z/%3E%3C/svg%3E altTelegram Icon />                    Join Our Telegram Channel                /a>                p>Your Subscription link will be:/p>                div idsubscription-link>strong>https://{worker-address}/sub/{clean-ip}/strong>/div>                button idget-clean-ip classbtn>Get Clean IP/button>            /div>            script>                document.getElementById(get-clean-ip).onclick  async function() {                    const response  await fetch(https://raw.githubusercontent.com/ircfspace/cf2dns/refs/heads/master/list/ipv4.json);                    const data  await response.json();                    const randomIndex  Math.floor(Math.random() * data.length);                    const cleanIP  datarandomIndex.ip;                    const workerAddress  window.location.hostname;                    const subscriptionLink  `https://${workerAddress}/sub/${cleanIP}`;                    document.getElementById(subscription-link).innerHTML  `a href${subscriptionLink} target_blank>${subscriptionLink}/a>`;                }            /script>        /body>        /html>

Port 443

HTTP/1.1 200 OKDate: Tue, 20 Jan 2026 06:12:37 GMTContent-Type: text/htmlContent-Length: 6346Connection: keep-aliveVary: accept-encodingReport-To: {group:cf-nel,max_age:604800,endpoints:{url:https://a.nel.cloudflare.com/report/v4?sH%2BJ26hdCsUiUs5%2BaoQ%2BH%2FcXx3YWZtKaqxiEJRQ5jWtFZxK8jnwJsEX1G4oFW4D43Bk8TuzqfsMf9UHAj4rrYS3ifeeAhJ2bn8mIAA8lpE0sqRLQvsUYqdl9imBPvo3s9tDVPPcBmz2A%3D}}Nel: {report_to:cf-nel,success_fraction:0.0,max_age:604800}Server: cloudflareCF-RAY: 9c0c6bd6cd0b53d9-PDXalt-svc: h3:443; ma86400

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > bold-union-c2f6.j09055766021.workers.dev

Is this malicious?

DNS Resolutions

Port 80

Port 443