Domain > cffandaijiaoben.816.workers.dev

Welcome! Right click nodes and scroll the mouse to navigate the graph.

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-10-11	104.21.94.199 (ClassC)

HTTP/1.1 200 OKDate: Sat, 11 Oct 2025 04:52:06 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveCF-Ray: 98cbbefacde05edd-PDXCF-Cache-Status: DYNAMICAge: 39Cache-Control: no-cacheLast-Modified: Sat, 11 Oct 2025 03:18:08 GMTServer: cloudflareVary: Accept-Encoding, Accept-EncodingVia: cache12.l2et15-80,0,304-0,H, cache3.l2et15-81,0, cache15.cn15114,200-0,H, cache15.cn1511,0Ali-Swift-Global-Savetime: 1760158287Content-MD5: Dg2x8xb0OZpPcKE/YkOaYwEagleId: 2f6619d917601583260232834eTiming-Allow-Origin: *x-alicdn-tsign-info: One slice successX-ALICDN-Via: cache12.l2et15-8MTP;FT24;R1;UR1;CT0;S304;EE0;US304;UE0, cache3.l2et15-8MT;FT1;R2;ST5;UR1;CT0;UHT1X-Cache: HIT TCP_REFRESH_HIT dirn:7:454668354x-oss-cdn-auth: successx-oss-object-type: Symlinkx-oss-request-id: 68E9E24F886DDF323108C285x-oss-server-time: 3x-oss-storage-class: Standardx-oss-version-id: CAEQrwIYgYCA6JWNxc4ZIiA0YjM2Mjg5NzlkZGE0YmNlOWIxNzhkMjA3YzY2ODYwNg--X-Swift-CacheTime: 60X-Swift-SaveTime: Sat, 11 Oct 2025 04:52:06 GMTReport-To: {group:cf-nel,max_age:604800,endpoints:{url:https://a.nel.cloudflare.com/report/v4?sIN8nbcA8adM8tNAFC0%2FNAv0CT5HRp6iUnyikTRKGhr0IGxz%2Be%2BltN7GdVhdbNNTWd9CV7YH8ihQ1sj4SL6Hh84q6ijVpTJ38s9FI7KkPPw1lLoFGKKgKvs4diUCT}}Nel: {report_to:cf-nel,success_fraction:0.0,max_age:604800}alt-svc: h3:443; ma86400

!DOCTYPE html>html langcmn-Hans>head>meta charsetutf-8>meta http-equivX-UA-Compatible contentIEedge,chrome1>meta namebaidu-site-verification contentpwGxrkznTF>meta namerenderer contentwebkit>title>学习强国/title>link reldns-prefetch href//bootcdn.xuexi.cn>style>body { min-width: 1200px }/style>script typetext/javascript>window.GRAY_INJECTOR{appName:pc_web_page,version:20250807da9f9c9853,localStorageKey:pc_web_page_20250807da9f9c9853,chunks:{headChunks:{tagName:link,attributes:{href:/lgpage/common/base.24467a.css,rel:stylesheet}},bodyChunks:{tagName:script,attributes:{src:/lgpage/common/vendor.24467a.js}},{tagName:script,attributes:{src:/lgpage/page/index.entry.393270.js}}},_insert:function(e,r,t){for(var tdocument.getElementsByTagName(t)0,odocument.createDocumentFragment(),athis,n0;ne.length;n++){var ien,sdocument.createElement(en.tagName);if(i.attributes)for(var c in i.attributes)!1!i.attributesc&&s.setAttribute(c,i.attributesc);i.attributes&&asyncin i.attributes||(s.async!1),r&&(s.onerrorfunction(e){a._onLoadError(e,this.href)}),o.appendChild(s)}t.appendChild(o)},_onLoadError:function(e,r){console.error(Get gray file +r+ error.),this.removeGrayConfig(),location.reload()},_getGrayConfigFromStorage:function(){if(window.localStorage)try{return JSON.parse(localStorage.getItem(this.localStorageKey))}catch(e){console.error(Get gray config error.)}return null},updateGrayConfig:function(e){var r;window.localStorage&&e.version&&e.chunks&&((rthis._getGrayConfigFromStorage())&&e.versionr.version||(this._removeHistoryGrayConfig(),localStorage.setItem(this.localStorageKey,JSON.stringify({version:e.version,chunks:e.chunks}))))},removeGrayConfig:function(){window.localStorage&&localStorage.removeItem(this.localStorageKey)},_removeHistoryGrayConfig:function(){for(var e in localStorage)/^pc_web_page_a-zA-Z0-9{18}/.test(e)&&localStorage.removeItem(e)},getAppVersion:function(){try{var ethis._getGrayConfigFromStorage();return e&&e.version||this.version}catch(e){return this.version}},render:function(){this.isGray!1;try{var e;window.localStorage&&(ethis._getGrayConfigFromStorage())&&e.version&&e.chunks&&e.chunks.headChunks&&e.chunks.bodyChunks&&(this.versione.version,this.chunkse.chunks,this.isGray!0)}catch(e){console.error(Gray injector render error.+e)}this._insert(this.chunks.headChunks,this.isGray,head),this._insert(this.chunks.bodyChunks,this.isGray,body)}};/script>/head>body>script>try {        window.__getIEVersion  function() {          var userAgent  window.navigator.userAgent;          var isIE  userAgent.indexOf(compatible) > -1 && userAgent.indexOf(MSIE) > -1;          var isEdge  userAgent.indexOf(Edge) > -1 && !isIE;          var isIE11  userAgent.indexOf(Trident) > -1 && userAgent.indexOf(rv:11.0) > -1;          if (isIE) {            var reIE  new RegExp(MSIE (\\d+\\.\\d+););            reIE.test(userAgent);            var fIEVersion  parseFloat(RegExp$1);            if (fIEVersion  7) {              return 7;            } else if (fIEVersion  8) {              return 8;            } else if (fIEVersion  9) {              return 9;            } else if (fIEVersion  10) {              return 10;            } else {              return 6;            }          } else if (isEdge) {            return edge;          } else if (isIE11) {            return 11;          } else {            return -1;          }        }        var ieVersion  __getIEVersion();        window.__lessIEVersion  function(version) {          if (ieVersion ! -1 && ieVersion ! edge) {            return ieVersion  version;          }          return false;        }        if (window.__lessIEVersion(11)) {          window.location.href  /update;        }      } catch (e) {        window.__pre_error  e;      }/script>script>try {      window.getUidFromCookie  function() {        function get (name) {          var cookies  document.cookie ? document.cookie.split(; ) :           for (var i  0; i  cookies.length; i++) {            var parts  cookiesi.split()            var value  parts.slice(1).join()                  try {              var found  decodeURIComponent(parts0)              if (name  found) {                return value.replace(/(%\dA-F{2})+/gi, decodeURIComponent);              }            } catch (e) {              console.error(e);            }          }        }        var cookieToken  get(token);        var cookieUID  get(__UID__);        var uid  cookieToken ? token: + cookieToken : (          cookieUID ? UID: + cookieUID : undefined        );        return uid;      }      !(function(c,b,d,a){ca||(ca{});ca.config        {          pid: hr5uxr169c@9c7272e8e46233f,          environment: prod,          enableSPA: false,          release: 1754549013657,          useFmp: true,          sendResource: true,          disableHook: true,          autoSendPv: false,          enableLinkTrace: false,          appType: web,          imgUrl: https://arms-retcode.aliyuncs.com/r.png?,          sample: 1,          uid: window.getUidFromCookie(),          parseResponse: function (res) {            if (!res || typeof res ! object || res.websocket) return {};            var code  res.code || res.errorCode || res.status;            var msg  res.errorMessage || res.msg || res.message || res.subMsg || res.errorMsg || res.ret || res.errorResponse || res.body || ;            if (typeof msg  object) {              code  code || msg.code || msg.status;              msg  msg.reason || msg.message || msg.msg || msg.info || msg.ret || JSON.stringify(msg);            }            var success  code  0 || code  200;            msg  success ?  : msg;            if (!success) {              return { msg: msg, code: code, success: success };            }          },          ignore: {            ignoreErrors:               /^Script error\.?$/,              function (str) {                return (str && str.indexOf(chrome-extension://) > 0);              }            ,            ignoreResErrors:               function (str) {                return (str && str.indexOf(chrome-extension://) > 0);              }                      }        };      with(b)with(body)with(insertBefore(createElement(script),firstChild))setAttribute(crossorigin,,srcd)      })(window,document,https://retcode.alicdn.com/retcode/bl.js,__bl);    } catch (e) {      console.error(arms js load failed, e);    }/script>script srchttps://long-term-cache.xuexi.cn/common/itrace-sdk-117.js>/script>script>try {    window.CUSTOM_ITRACE_KEY  __wpkFront_pc;    var getUidFromCookieForItrace  function() {      function get (name) {        var cookies  document.cookie ? document.cookie.split(; ) : ;        for (var i  0; i  cookies.length; i++) {          var parts  cookiesi.split();          var value  parts.slice(1).join();          try {            var found  decodeURIComponent(parts0);            if (name  found) {              return value.replace(/(%\dA-F{2})+/gi, decodeURIComponent);            }          } catch (e) {            console.error(e);          }        }      }      var cookieToken  get(token);      var cookieUID  get(__UID__);      var uid  cookieToken ?  + cookieToken : (        cookieUID ?  + cookieUID : undefined      );      return uid;    }    var __wpkFront_pc_sampleRate  (prod  prod) ? 0.01 : 1;    if (Math.random()  __wpkFront_pc_sampleRate) {      windowwindow.CUSTOM_ITRACE_KEY  new window.wpkReporter({        bid: (prod  prod) ? c9ea6o13-njqexfe0 : ju92t22k-fhx0yp8s,        supportBeaconBody: false,        uid: getUidFromCookieForItrace(),        rel: window.GRAY_INJECTOR && window.GRAY_INJECTOR.getAppVersion && window.GRAY_INJECTOR.getAppVersion(),        cluster: qg,        beforeSend: function (data) {          if (!data) return true;          switch (data.category) {            // 移除浏览器插件的异常            case 1:              if (data.w_file && data.w_file.indexOf(chrome-extension://)  0) {                return false;              }              if (data.stack && data.stack.indexOf(chrome-extension://) > 0) {                return false;              }              if (data.stack && data.stack.indexOf(moz-extension://) > 0) {                return false;              }              return true;            case 2:              if (data.w_res && data.w_res.indexOf(px-itrace.xuexi.cn) ! -1) {                return false;              }              if (data.w_res && data.w_res.indexOf(videocloud.cn-hangzhou.log.aliyuncs.com) ! -1) {                return false;              }              return true;            default:              return true;          }        },        spa: true      });      windowwindow.CUSTOM_ITRACE_KEY.installAll();      windowwindow.CUSTOM_ITRACE_KEY.addPlugin(wpkblankPlugin, {        enable:true,        onloadDuration: 0,        wsDuration: 0,      });    }  } catch(e) {    console.error(init wpkReporter fail, e);  }/script>script>if( /Android|webOS|iPhone|iPad|iPod|BlackBerry|IEMobile|Opera Mini/i.test(navigator.userAgent) ) {        var maxClientWidth  1280;        var scale  window.screen.width / maxClientWidth;        var oMeta  document.createElement(meta);        oMeta.name  viewport;        oMeta.content  initial-scale + scale + , user-scalableyes;        document.getElementsByTagName(head)0.appendChild(oMeta);      }      if(window.location.search.indexOf(idindex) ! -1){        window.document.body.style.minWidth  1400px;      }/script>script>window.pageIdindex;window.document.body.style.minWidth  1400px;/script>div idroot>/div>script typetext/javascript>if(window.GRAY_INJECTOR){try{GRAY_INJECTOR.render()}catch(e){console.error(GRAY_INJECTOR.render error+e)}}/script>/body>/html>

Port 443

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > cffandaijiaoben.816.workers.dev

Is this malicious?

DNS Resolutions

Port 80

Port 443