Domain > devin-743a6b20824c4fcebb9d0916348856a2.vscode-frontend.devinapps.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-07-28	18.245.96.3 (ClassC)
2025-11-18	18.161.6.113 (ClassC)

HTTP/1.1 200 OKContent-Type: text/htmlContent-Length: 4259Connection: keep-aliveDate: Tue, 18 Nov 2025 10:23:59 GMTLast-Modified: Sat, 01 Nov 2025 01:50:24 GMTETag: 1f9806c855d6ca2a5433d48ccb09d99ax-amz-server-side-encryption: AES256Accept-Ranges: bytesServer: AmazonS3X-Cache: Miss from cloudfrontVia: 1.1 b6cdb2111444305bd4957a473b711ad6.cloudfront.net (CloudFront)X-Amz-Cf-Pop: HIO52-P1Alt-Svc: h3:443; ma86400X-Amz-Cf-Id: yQFwz0Z5gwSphhi0VNbqI3L0TmEJZBPB8SU-J_Ex0aNHsh4YhpwxAw

!-- See regular old workbench.html and the following html file from @vscode/test-web which is served when running ./scripts/code-web.sh https://github.com/microsoft/vscode-test-web/blob/8d85903401152a059339d26b214397593d481273/views/workbench-esm.html -->!doctype html>html stylebackground-color: #181818>	head>		script>			performance.mark(code/didStartRenderer);		/script>		meta charsetutf-8 />		!-- Mobile tweaks -->		meta namemobile-web-app-capable contentyes />		meta nameapple-mobile-web-app-capable contentyes />		meta nameapple-mobile-web-app-title contentCode />		link			relapple-touch-icon			href/devin-192.png		/>		!-- Disable pinch zooming -->		meta			nameviewport			contentwidthdevice-width, initial-scale1.0, maximum-scale1.0, minimum-scale1.0, user-scalableno		/>		!-- Workbench Auth Session -->		meta			idvscode-workbench-auth-session			data-settings		/>		!-- Workbench Icon/Manifest/CSS -->		link			relicon			href/favicon.ico			typeimage/x-icon		/>		link			relmanifest			href/manifest.json			crossoriginuse-credentials		/>		link			relstylesheet			href/out/vs/workbench/workbench.web.main.css		/>		script>			const urlParams  new URLSearchParams(window.location.search);			const allowAnalytics  urlParams.get(allowAnalytics)  true;			if (allowAnalytics) {				(function(h,o,t,j,a,r){					h.hjh.hj||function(){(h.hj.qh.hj.q||).push(arguments)};					h._hjSettings{hjid:6386432,hjsv:6};					ao.getElementsByTagName(head)0;					ro.createElement(script);r.async1;					r.srct+h._hjSettings.hjid+j+h._hjSettings.hjsv;					a.appendChild(r);				})(window,document,https://static.hotjar.com/c/hotjar-,.js?sv);				var s  document.createElement(script);				s.src  https://js.sentry-cdn.com/ca20bca191ce5f6b35ce49f0445628af.min.js;				s.crossOrigin  anonymous;				document.head.appendChild(s);			}		/script>	/head>	body aria-label>		style>			.devin-spinner {				position: fixed;				top: 50%;				left: 50%;				transform: translate(-50%, -50%);				width: 50px;				height: 50px;				border: 5px solid #f3f3f3;				border-top: 5px solid #3498db;				border-radius: 50%;				animation: spin 1s linear infinite;			}			@keyframes spin {				0% {					transform: translate(-50%, -50%) rotate(0deg);				}				100% {					transform: translate(-50%, -50%) rotate(360deg);				}			}		/style>		div classdevin-spinner>/div>		script>			// DEVIN_VSCODE_TERMINAL_PASTE_INJECTION_CANARY			function replaceWorkspaceTrust() {				const metaTag  document.getElementById(					vscode-workbench-web-configuration,				);				console.log(Replacing meta tag:, metaTag);				if (metaTag) {					const settings  JSON.parse(						metaTag.getAttribute(data-settings),					);					settings.enableWorkspaceTrust  false;					metaTag.setAttribute(						data-settings,						JSON.stringify(settings),					);				}			}			replaceWorkspaceTrust();			function removeSpinner() {				console.log(Removing spinner);				const spinner  document.querySelector(.devin-spinner);				if (spinner) {					spinner.remove();				}			}			removeSpinner();		/script>	/body>	!-- Startup (do not modify order of script tags!) -->	script>		const baseUrl  new URL(			,			window.location.origin,		).toString();		globalThis._VSCODE_FILE_ROOT  baseUrl + /out/;		globalThis._VSCODE_CONNECTION_TOKEN  (new URLSearchParams(window.location.search)).get(tkn) || ;	/script>	script>		performance.mark(code/willLoadWorkbenchMain);	/script>	!-- always ensure built in english NLS messages -->	script typemodule src/out/nls.messages.js>/script>	!-- attempt to load NLS messages in case non-english -->	!-- script typemodule src{{WORKBENCH_NLS_URL}}>/script> -->	!-- Load React libraries directly as UMD builds -->	script src/out/react-bundle/dist/react.min.js>/script>	script src/out/react-bundle/dist/react-dom.min.js>/script>	script src/out/react-bundle/dist/react-dom-client.min.js>/script>	script		typemodule		src/out/vs/code/browser/workbench/workbench.js	>/script>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > devin-743a6b20824c4fcebb9d0916348856a2.vscode-frontend.devinapps.com

Is this malicious?

DNS Resolutions

Port 80

Port 443