Domain > api-emaction.windeling.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2026-01-11	104.21.21.252 (ClassC)

HTTP/1.1 301 Moved PermanentlyDate: Sun, 11 Jan 2026 08:49:45 GMTContent-Type: text/htmlContent-Length: 167Connection: keep-aliveCache-Control: max-age3600Expires: Sun, 11 Jan 2026 09:49:45 GMTLocation: https://api-emaction.windeling.com/Report-To: {endpoints:{url:https:\/\/a.nel.cloudflare.com\/report\/v4?sx5rRu%2F%2BAJipcF6Asj8RFUKdFsUkYMZZpjQZO63LQckowqG0CMG5D4Yvl8A%2BXTFFUJtR5QgBoEtHcmu29UlNW3mLeQKhFxBAzKRK4oIqMymXA8jCb3eni5mzUN%2Bp8EzRoLo%2FH7C8i5oeWpTmjaA%3D%3D},group:cf-nel,max_age:604800}NEL: {success_fraction:0,report_to:cf-nel,max_age:604800}X-Content-Type-Options: nosniffspeculation-rules: /cdn-cgi/speculationServer: cloudflareCF-RAY: 9bc329a07f0ec146-PDXalt-svc: h3:443; ma86400server-timing: cfL4;desc?protoTCP&rtt6010&min_rtt6010&rtt_var3005&sent1&recv3&lost0&retrans0&sent_bytes0&recv_bytes65&delivery_rate0&cwnd249&unsent_bytes0&cid0000000000000000&ts0&x0

html>head>title>301 Moved Permanently/title>/head>body>center>h1>301 Moved Permanently/h1>/center>hr>center>cloudflare/center>/body>/html>

Port 443

HTTP/1.1 403 ForbiddenDate: Sun, 11 Jan 2026 08:49:45 GMTContent-Type: text/html; charsetUTF-8Content-Length: 6415Connection: closeaccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UAcf-mitigated: challengecritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UAcross-origin-embedder-policy: require-corpcross-origin-opener-policy: same-origincross-origin-resource-policy: same-originorigin-agent-cluster: ?1permissions-policy: accelerometer(),browsing-topics(),camera(),clipboard-read(),clipboard-write(),geolocation(),gyroscope(),hid(),interest-cohort(),magnetometer(),microphone(),payment(),publickey-credentials-get(),screen-wake-lock(),serial(),sync-xhr(),usb()referrer-policy: same-originserver-timing: chlray;desc9bc329a0ded3d74dx-content-type-options: nosniffx-frame-options: SAMEORIGINCache-Control: private, max-age0, no-store, no-cache, must-revalidate, post-check0, pre-check0Expires: Thu, 01 Jan 1970 00:00:01 GMTReport-To: {endpoints:{url:https:\/\/a.nel.cloudflare.com\/report\/v4?s3xRFTFyQryFd2OrZQaUq1nzNlQ1InSGLasqUe2X3RodFtK%2Fn6gb6M07s5QvabiRVGt3%2FReU%2Btp%2B9Um9lO5ddsHap%2FwijVMIcQKaHZw1nsxB4ZY0BqALPZRX%2FNu6gsZjBC1ZbpjQW5gUtN5MfHw%3D%3D},group:cf-nel,max_age:604800}NEL: {success_fraction:0,report_to:cf-nel,max_age:604800}Strict-Transport-Security: max-age15552000; includeSubDomains; preloadspeculation-rules: /cdn-cgi/speculationServer: cloudflareCF-RAY: 9bc329a0ded3d74d-PDXalt-svc: h3:443; ma86400server-timing: cfL4;desc?protoTCP&rtt5569&min_rtt5540&rtt_var1611&sent4&recv6&lost0&retrans0&sent_bytes2856&recv_bytes737&delivery_rate513748&cwnd252&unsent_bytes0&cid953303358872c31f&ts29&x0

!DOCTYPE html>html langen-US>head>title>Just a moment.../title>meta http-equivContent-Type contenttext/html; charsetUTF-8>meta http-equivX-UA-Compatible contentIEEdge>meta namerobots contentnoindex,nofollow>meta nameviewport contentwidthdevice-width,initial-scale1>style>*{box-sizing:border-box;margin:0;padding:0}html{line-height:1.15;-webkit-text-size-adjust:100%;color:#313131;font-family:system-ui,-apple-system,BlinkMacSystemFont,Segoe UI,Roboto,Helvetica Neue,Arial,Noto Sans,sans-serif,Apple Color Emoji,Segoe UI Emoji,Segoe UI Symbol,Noto Color Emoji}body{display:flex;flex-direction:column;height:100vh;min-height:100vh}.main-content{margin:8rem auto;padding-left:1.5rem;max-width:60rem}@media (width  720px){.main-content{margin-top:4rem}}.h2{line-height:2.25rem;font-size:1.5rem;font-weight:500}@media (width  720px){.h2{line-height:1.5rem;font-size:1.25rem}}#challenge-error-text{background-image:url(data:image/svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHdpZHRoPSIzMiIgaGVpZ2h0PSIzMiIgZmlsbD0ibm9uZSI+PHBhdGggZmlsbD0iI0IyMEYwMyIgZD0iTTE2IDNhMTMgMTMgMCAxIDAgMTMgMTNBMTMuMDE1IDEzLjAxNSAwIDAgMCAxNiAzbTAgMjRhMTEgMTEgMCAxIDEgMTEtMTEgMTEuMDEgMTEuMDEgMCAwIDEtMTEgMTEiLz48cGF0aCBmaWxsPSIjQjIwRjAzIiBkPSJNMTcuMDM4IDE4LjYxNUgxNC44N0wxNC41NjMgOS41aDIuNzgzem0tMS4wODQgMS40MjdxLjY2IDAgMS4wNTcuMzg4LjQwNy4zODkuNDA3Ljk5NCAwIC41OTYtLjQwNy45ODQtLjM5Ny4zOS0xLjA1Ny4zODktLjY1IDAtMS4wNTYtLjM4OS0uMzk4LS4zODktLjM5OC0uOTg0IDAtLjU5Ny4zOTgtLjk4NS40MDYtLjM5NyAxLjA1Ni0uMzk3Ii8+PC9zdmc+);background-repeat:no-repeat;background-size:contain;padding-left:34px}@media (prefers-color-scheme: dark){body{background-color:#222;color:#d9d9d9}}/style>meta http-equivrefresh content360>/head>body>div classmain-wrapper rolemain>div classmain-content>noscript>div classh2>span idchallenge-error-text>Enable JavaScript and cookies to continue/span>/div>/noscript>/div>/div>script>(function(){window._cf_chl_opt  {cvId: 3,cZone: api-emaction.windeling.com,cType: managed,cRay: 9bc329a0ded3d74d,cH: zeJ541Ajz.OLAENTpPkfyIXvyGsj5ROmKuh.Ub5R9rs-1768121385-1.2.1.1-VAvym_uz6YTFP0RTH7e_Of8rwLfzsobD8XtLiqyfeh1RnKaS4Eeo9d9Ie3uOc0hK,cUPMDTk:\/?__cf_chl_tkCDxkufjez17D_oWlTWghFrvkV10pppn2efntxRcQmyk-1768121385-1.0.1.1-XPtT3oKA93GLIRFpYMk6AzNecUy2hsfEzah.OYzKikQ,cFPWv: g,cITimeS: 1768121385,cTplC:0,cTplV:5,cTplB: 0,fa:\/?__cf_chl_f_tkCDxkufjez17D_oWlTWghFrvkV10pppn2efntxRcQmyk-1768121385-1.0.1.1-XPtT3oKA93GLIRFpYMk6AzNecUy2hsfEzah.OYzKikQ,md: QXAMrLIrCCYTf4Qki2oQIeB.Zp1GR67mVc067LJvIqo-1768121385-1.2.1.1-SOCCHixrBr5f3hgLGSLhBi59DCrcOkN8nMB_NC47Fn5VSSUcQ0QwY6jfVSq_BXmZjt90jPKdoeOEFWiM.SMXeT.Aapi3svVFInFwpe8YKQ8vhuyoptzcW6LccHbu6v0YxFEORhGLGZWUus09HGXjvQT768Rf_FIym4CK9D4lXQfh5H1LRq.sf_4hoZMsBctb7B4vm6OMupxgKXj0jLn0HjXI1FDXprK6Bf5gliy2XE6Is9dqfv4irAuINPHjScnkVTQoP7U_gWVglZ8W0aoVRQJn_mzkAX3Zida.GPH0uAHAjIuIPLiP66ih2bB.eD_BQQIQCeGg7yuSewfPL8T9Z.THcJtbE0kW.i6s7NfxNGqqDaLb31ltV_AgvajP7vIqOGh5NOizg7xTAK__OH4y7YJqH7TJwWIVIDyZN3_qnqiuk9ZjWzgZXZI.lN9M4UAY59vJ.fw9kq7YeXqUxcbCtKxfDkrht7QSY_U66V1PU5QTgzOPQSpWSW19Z50fX6cjTp7A.o0DBXUtbWA2LHDbsa2HDRPG5x6LJlgoXdy0Gn9Ph_5aXkh0A6XOhlWC8at7EzTw3k_G6jYEwbz..98vLHIZN3.hheoLhhRQfZwvWw_KjVVWt_k9BgWVoVh467pvnva2hq2M6lq8c1RSNl68UaS.i1fxd0JGHzPrYESyzl1X0v_VMFOqn4IXW1Iu2KvavMzl0R5WrVPMpCDOF42nTekl4rJ4ggJ6JLZ2mZYle3p_KqQb9u6vipdsyYaC4CPhPO6pyftkYeSg2kNqdhCgR6zOpwQ3DM.O43Mxxn1dybs,mdrd: DISjIzejsnqYPCA4OQvEyt.gRqrItlJRoi.5M7C7N4k-1768121385-1.2.1.1-oPS.saq6Xx5l.iivZV0Mx4MwzoNVV_pO8QajOQ6tKjZ3b0prl4pff7eAYuAlJ48kg5aN0XJ0CWp.7P3OwfZZvBjPeH0JEsLFcN.55QbA77xKsZpXpacw5RQOQQBOeiG6vcPRoiKIJPmsJHLvMiQnQq8C6OmIr1H_4JWM4ndQfrNFXjWBazjemAXwk5wtuXA8jODC9kLqtujKqA0Sa5Bm.dNRWehBAegdmnwyvhy8mQ8TPzUFPFg1YrYxLLk_zBe1OOWcm4X2K3XtW0L4wnuMiM2QFb2N3fdTG5ctfMPsKtVahGYrndpgnSoPIjWABkza2eXudzAJ.tD2tzDgEW6nuk1.gGYS0YAjYVEhmwF2VA2aiIy3tzGYdui9YHaztuuYR37ZuPRFC2biqx.HgozIrRtOkoqyuOUaYKELXdz9hbx8PHUIsIslLKbgxnvKcnCBZHinu_lqqTz.uPXv78FjnndhyFpAC3QQlTU1TE6dUSvonRuaCc8uSUAY9wV6nlDRbQsFkh5pBQDiy91Ih2BV4e8tAaSc2s55XKD3JAJYqK3cvQ_JDdl4Xweuou8jnQ13dCQarQzyyjuoqqEQg7oJT39PSq7livWxP.53ctBPG_uYxWNFnptbylbyl1SerIEGGdWXrmwG2ARBUh5dFFE35oYCnZtXfqyUS01xAuymbbfilsrdALa1ZbKwFREgUv80rmsjdB2Cf7cXgnBTuoshhRkVjbaKs00RuWu1XlsPCYodfC5EfyIDG1dSDpi5g9.JFwsDhoyknnIaRbr5uQXb_ju.wOsMmTbjAfVTeB1jkH1LITyN6zjwkwBpi47zvhSX_M5Xt9qIs2gBYQ_.xSNZpCkbzTUvF3s_hbHbro_o8w0R5OjkkXIQxnwHAYhbTmRBTy_jkCMaBTeTqhI.Hcj5t7N4lxvxW66InyS_mq5ErprT2n6X2UbKdqB52nXWRq21Nt27Vgwf_cxbpGfgWeRZ0hlb4HpfaesaaV.yOojOYZQoLUiM7CTggTGShgKi65sS6euzsgNLT91xmkvYayI6eEP.yQcGeLaOYJHgETDYrO3idMHZkCxfjB6wfmMpgQ2S_0sZtwGT9GpqzgXIPyERdV8O.xweOM1DCYas4KDqziWvb8y86vY.oefL_w_HcA8V7vM_9qWXNjS2YxeauZD.ap7y357Ry9x4VHWLHyfJu0CNfITeAc4QtLUAM84H9_4VEx84a._XwVGbC7ahpgkrt8Bd4RDSsTAytk5AeEFsRZDbSHufyPCZLMJzLCLtgawWdCCMewvlFJ.nAcIkyPRKUwIbxGO.9JcrNSGaIJHxJF3i_xdNYvB7Kzrgyym2c9_I8bfhF1GC2XSDEvIWWoc_.IsQNHasTPWCzXNcriVPbYj2P0lzgPWMP5fzjPIcDed4qW3kFsvQSIm2BNFsQckHPnzBDQOUu89nWQz8vDLLFeFJi7WUlXNZsNVs83vUhLePl6KxlGQnulYqEIsNN4erXgLhT5U9KDCsaY91GvhpoQxAg4hB7fRvTcENht1Coem.3DpeIf.9T853ZzLNrtAXs..Fu3hqmAqrFqRfuKhZdF_lhu5lSoZG.W51uGuxvmjoArghx8yuxwvgV9RPescw.K1mRCTMO7MwOvD0qtNl_2e1q7IqM_yVMN.KC5QpWeKzP9f6EYoKNBHOJgGHuvwQF0sVXbSziXQ0u4V3G11GAeDY9M9P_yFTZIqtNhVbqEnSQg1Nx0p5_e48PHK0ixnP5sbxp1rg4ZbnfSh0EL6qldLeWAY3_b7tY3qLfEBgf_Sr0HVv6xVszH3IZD9wKuAeEKb1QjhLdFtZqYtds7pPPOrNLSjaJYulUZ13xr.8ZgrLOJMzb.BM9ObDKMCSQ7dazcH45ZSLc6XXpja8Pz874QlnnGJeYjwoVhCp9NUYM5WNlkmqoQFGQBhpHzPOC5Qu.YXN3RNDjs9.SEOvIXKDiaQR.ZRjwQtZNVBYcGgzmkzafdUbWQbi3cpu7oWWqRNOLg,};var a  document.createElement(script);a.src  /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray9bc329a0ded3d74d;window._cf_chl_opt.cOgUHash  location.hash   && location.href.indexOf(#) ! -1 ? # : location.hash;window._cf_chl_opt.cOgUQuery  location.search   && location.href.slice(0, location.href.length - window._cf_chl_opt.cOgUHash.length).indexOf(?) ! -1 ? ? : location.search;if (window.history && window.history.replaceState) {var ogU  location.pathname + window._cf_chl_opt.cOgUQuery + window._cf_chl_opt.cOgUHash;history.replaceState(null, null,\/?__cf_chl_rt_tkCDxkufjez17D_oWlTWghFrvkV10pppn2efntxRcQmyk-1768121385-1.0.1.1-XPtT3oKA93GLIRFpYMk6AzNecUy2hsfEzah.OYzKikQ+ window._cf_chl_opt.cOgUHash);a.onload  function() {history.replaceState(null, null, ogU);}}document.getElementsByTagName(head)0.appendChild(a);}());/script>/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > api-emaction.windeling.com

Is this malicious?

DNS Resolutions

Port 80

Port 443