Domain > autumn-salad-3288.8c1582606d.workers.dev

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-12-11	104.21.67.249 (ClassC)

HTTP/1.1 200 OKDate: Thu, 11 Dec 2025 09:52:36 GMTContent-Type: text/htmlContent-Length: 6121Connection: keep-aliveVary: accept-encodingReport-To: {group:cf-nel,max_age:604800,endpoints:{url:https://a.nel.cloudflare.com/report/v4?s5xOH4yitdONgCTH1N2HAfwA4xN1Yn0gC6aj4PVbI35p43kMOG8lvXg1buH2%2FilCFaJAxRZ045Ipuy6yOEZ%2FbZQD7USybm86EZqpam52wo4mDx1Wg9SvwhcV9NfOiiaH8HDxSV8lzeb0%3D}}Nel: {report_to:cf-nel,success_fraction:0.0,max_age:604800}Server: cloudflareCF-RAY: 9ac417124d130ba9-PDXalt-svc: h3:443; ma86400

!DOCTYPE html>  html langen>  head>    meta charsetUTF-8>    meta nameviewport contentwidthdevice-width, initial-scale1.0>    title>Non-TLS Config Refiner/title>    style>      /* General Reset */      * {        margin: 0;        padding: 0;        box-sizing: border-box;      }        body {        font-family: Segoe UI, Tahoma, Geneva, Verdana, sans-serif;        background: linear-gradient(to right, #fff, #f4f4f4);        color: #333;        padding: 50px 20px;      }        .container {        max-width: 900px;        margin: 0 auto;        padding: 40px;        background-color: #fff;        border-radius: 15px;        box-shadow: 0 10px 20px rgba(0, 0, 0, 0.1);      }        h1 {        text-align: center;        font-size: 36px;        color: #FF8C00;        margin-bottom: 20px;      }        h2 {        font-size: 24px;        color: #444;        margin-top: 40px;      }        label {        font-weight: bold;        font-size: 14px;        display: block;        margin-bottom: 8px;        color: #444;      }        inputtypetext, textarea {        width: 100%;        padding: 12px 16px;        margin-bottom: 20px;        border-radius: 10px;        border: 2px solid #ddd;        font-size: 16px;        transition: border 0.3s;        box-shadow: inset 0 1px 5px rgba(0,0,0,0.1);      }        inputtypetext:focus, textarea:focus {        border-color: #FF8C00;        outline: none;        box-shadow: inset 0 1px 5px rgba(255, 140, 0, 0.3);      }        button {        width: 100%;        padding: 15px;        background-color: #FF8C00;        color: #fff;        font-size: 18px;        border: none;        border-radius: 10px;        cursor: pointer;        box-shadow: 0 4px 6px rgba(0, 0, 0, 0.1);        transition: transform 0.2s ease, box-shadow 0.2s ease;      }        button:hover {        background-color: #e67e22;        transform: translateY(-2px);        box-shadow: 0 6px 10px rgba(0, 0, 0, 0.15);      }        button:active {        transform: translateY(2px);        box-shadow: none;      }        .error {        color: red;        font-size: 14px;        margin-bottom: 20px;        text-align: center;      }        .refined-box {        background-color: #f9f9f9;        padding: 15px;        border-radius: 10px;        border: 1px solid #ddd;        word-wrap: break-word;        box-shadow: inset 0 0 10px rgba(0, 0, 0, 0.1);      }        .copy-icon {        display: inline-block;        margin-top: 10px;        font-size: 20px;        cursor: pointer;        color: #FF8C00;        transition: color 0.2s ease;      }        .copy-icon:hover {        color: #e67e22;      }        @media (max-width: 600px) {        .container {          padding: 20px;        }          h1 {          font-size: 28px;        }          button {          font-size: 16px;        }          inputtypetext, textarea {          font-size: 14px;        }      }    /style>  /head>  body>    div classcontainer>      h1>Non-TLS Config Refiner/h1>      form idconfig-form>        label forconfig>Config (vless, vmess, or trojan):/label>        textarea idconfig rows6>/textarea>          label forhostname>Hostname pointing to Server IP:/label>        input typetext idhostname placeholderEnter your server hostname>          label forclean-ip>Clean IP:/label>        input typetext idclean-ip value162.159.141.134 placeholderEnter Cloudflare clean IP>          button typesubmit>Refine Config/button>        div classerror iderror>/div>      /form>        h2>Refined Config/h2>      div idrefined-config classrefined-box>/div>      span idcopy-btn classcopy-icon>📋 Copy/span>    /div>      script>      document.getElementById(config-form).addEventListener(submit, async function(event) {        event.preventDefault();        const config  document.getElementById(config).value;        const hostname  document.getElementById(hostname).value;        const cleanIp  document.getElementById(clean-ip).value;          const errorDiv  document.getElementById(error);        const refinedConfigDiv  document.getElementById(refined-config);        errorDiv.textContent  ;        refinedConfigDiv.textContent  ;          // Input validation        if (!config && !hostname) {          errorDiv.textContent  Please enter your Config and Hostname;          return;        } else if (!config) {          errorDiv.textContent  Please enter your vmess, vless or trojan config;          return;        } else if (!hostname) {          errorDiv.textContent  Please enter a hostname pointing to your Server IP Address.;          return;        } else if (!cleanIp) {          errorDiv.textContent  Please input your Cloudflare Clean IP address.;          return;        }          // Send POST request to the worker for refinement        const response  await fetch(/, {          method: POST,          headers: {            Content-Type: application/json          },          body: JSON.stringify({            config,            hostname,            cleanIp          })        });          const result  await response.json();          if (result.error) {          errorDiv.textContent  result.error;        } else {          refinedConfigDiv.textContent  result.refinedConfig;        }      });        // Copy to clipboard functionality      document.getElementById(copy-btn).addEventListener(click, () > {        const refinedConfig  document.getElementById(refined-config).textContent;        if (refinedConfig) {          navigator.clipboard.writeText(refinedConfig).then(() > {            alert(Config copied to clipboard!);          }).catch(err > {            alert(Failed to copy:  + err);          });        }      });    /script>  /body>  /html>

Port 443

HTTP/1.1 200 OKDate: Thu, 11 Dec 2025 09:52:36 GMTContent-Type: text/htmlContent-Length: 6121Connection: keep-aliveVary: accept-encodingReport-To: {group:cf-nel,max_age:604800,endpoints:{url:https://a.nel.cloudflare.com/report/v4?sl9JsxJ6WCcQahgASzJlUHG83HswGmVwJ4YXdP%2Bg1Tf2a6AeJoj9OVZV5XNYomDWOshgWuUeLa3R3BROiCmvly1BNiv5YqvNxGrD21bZNgGP8YXbH7vPQgV213trW0L8KPdrezwgi}}Nel: {report_to:cf-nel,success_fraction:0.0,max_age:604800}Server: cloudflareCF-RAY: 9ac417134bd95ebf-PDXalt-svc: h3:443; ma86400

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > autumn-salad-3288.8c1582606d.workers.dev

Is this malicious?

DNS Resolutions

Port 80

Port 443