Domain > cfback.9161753.workers.dev

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-10-31	104.21.13.166 (ClassC)
2026-01-25	172.67.200.212 (ClassC)

HTTP/1.1 200 OKDate: Fri, 31 Oct 2025 01:02:03 GMTContent-Type: text/htmlContent-Length: 9012Connection: keep-aliveVary: accept-encodingReport-To: {group:cf-nel,max_age:604800,endpoints:{url:https://a

!DOCTYPE html>    html>    head>      meta charsetutf8 />      link hrefhttps://cdn.jsdelivr.net/npm/bootstrap@5.3.1/dist/css/bootstrap.min.css relstylesheet integritysha384-4bw+/aepP/YC94hEpVNVgiZdgIC5+VKNBQNGCHeKRQN+PtmoHDEXuppvnDJzQIu9 crossoriginanonymous>    /head>    body dirltr>      div classcontainer border p-0>        div classp-1 bg-primary text-white>          div classtext-nowrap fs-4 fw-bold text-center>V2RAY Worker - Control Panel/div>          div classtext-nowrap fs-6 text-center>            Version 2.2 by            a hrefhttps://twitter.com/vahidfarid target_blank classtext-white>Vahid Farid/a>          /div>        /div>                div classpx-4 py-2 bg-light>          label forsub-link classform-label fw-bold>            Your subscription link for v2ray clients/ span dirrtl>لینک ثبت نام شما برای کلاینت‌های v2ray/span>            (v2rayN, v2rayNG, v2rayA, Matsuri, Nekobox, Nekoray...)          /label>          input idsub-link readonly valuehttps://cfback.9161753.workers.dev/sub classp-1 stylewidth: calc(100% - 150px)>          button onclickvar tmpdocument.getElementById(sub-link);tmp.select();tmp.setSelectionRange(0,99999);navigator.clipboard.writeText(tmp.value) classbtn btn-primary p-1 mb-1>Copy/button>        /div>        div classpx-4 py-2 bg-light>          label forclash-link classform-label fw-bold>            Your subscription link for clash clients/ span dirrtl>لینک ثبت نام شما برای کلاینت‌های کلش/span>            (Clash, ClashX, ClashMeta...)          /label>          input idclash-link readonly valuehttps://cfback.9161753.workers.dev/clash classp-1 stylewidth: calc(100% - 150px)>          button onclickvar tmpdocument.getElementById(clash-link);tmp.select();tmp.setSelectionRange(0,99999);navigator.clipboard.writeText(tmp.value) classbtn btn-primary p-1 mb-1>Copy/button>        /div>        form classpx-4 py-4 border-top methodpost>          div classmb-1 p-1>            label forincludes classform-label fw-bold>

Port 443

HTTP/1.1 200 OKDate: Fri, 31 Oct 2025 01:02:04 GMTContent-Type: text/htmlContent-Length: 9012Connection: keep-aliveVary: accept-encodingReport-To: {group:cf-nel,max_age:604800,endpoints:{url:https://a

Subdomains

Date	Domain	IP
cl2.9161753.workers.dev	2025-09-21	104.21.13.166
chat-gpt-curly-bread-87bc.9161753.workers.dev	2025-09-24	172.67.200.212
cfback.9161753.workers.dev	2025-10-31	104.21.13.166
chatgpt.9161753.workers.dev	2025-09-24	104.21.13.166
chatgpt-test.9161753.workers.dev	2025-09-23	104.21.13.166

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > cfback.9161753.workers.dev

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains