LeakIX - Host worker-salar.zibadokht-amirali.workers.dev

Domain worker-salar.zibadokht-amirali.workers.dev

CLOUDFLARENET

Software information

cloudflare

tcp/443

A JSON configuration file has been found

A JSON configuration file has been found at config.json.

It may contains application configuration such as credentials.

False positive might happen when hitting a JSON API endpoint.

IP: 172.67.166.229
Domain: worker-salar.zibadokht-amirali.workers.dev
Port: 443
URL: https://worker-salar.zibadokht-amirali.workers.dev

First seen 2024-08-05 10:58
- Fingerprint: b18befd9dd65368260c217da60c217da60c217da60c217da60c217da60c217da
```
{"ok":-100,"url":"https://weibo.com/login.php?url=https%3A%2F%2Fwww.google.com%2Fsearch%3Fq%3Dedtunnel"}
```
  Found on 2024-08-05 10:58
Create report

Open service 172.67.166.229:443 · worker-salar.zibadokht-amirali.workers.dev

2024-09-16 03:49

HTTP/1.1 403 Forbidden
Date: Mon, 16 Sep 2024 03:49:03 GMT
Content-Type: text/plain;charset=UTF-8
Content-Length: 47
Connection: close
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LAYBL5nqF35uuLMLUBsr0jRyJninGUoj3P5SUZgOOVayl5DqHfvxBU5XHh0qfQF2zFMHu9TWt%2BtG14jpLetclX8gakHQr1jiXdOn1XJTcTyHgcnDOrpRZp8EuLCEjpeFqxaL42LjMPG%2FFUUG5mq%2FgXPdjgEml3MHA%2BC02K8%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 8c3de25bde609bbf-FRA
alt-svc: h3=":443"; ma=86400


Redirects to www.kuaidi100.com are not allowed.

Found 3 days ago by HttpPlugin

Create report

Open service 172.67.166.229:443 · worker-salar.zibadokht-amirali.workers.dev

2024-09-14 03:08

HTTP/1.1 403 Forbidden
Date: Sat, 14 Sep 2024 03:08:41 GMT
Content-Type: text/plain;charset=UTF-8
Content-Length: 44
Connection: close
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=awtChVmv%2BPy2SA73dSM%2Fwqxk%2BjDZGWwUyOMEUtexm%2BjE%2FZfV8HXYtXlEfrmfwDgNFuPQINHnYX8Yk2gnsRJizgNuRq1c7DVnPT5P1OoRuD%2FdkWiotpEszNVxEWY4Y1cv7k%2BCc67sV1I5NXS6KqlTYUud7F3E717KYb4tyXs%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 8c2d2c7d298f5fe5-SIN
alt-svc: h3=":443"; ma=86400


Redirects to www.liepin.com are not allowed.

Found 2024-09-14 by HttpPlugin

Create report

Open service 172.67.166.229:443 · worker-salar.zibadokht-amirali.workers.dev

2024-09-12 06:38

HTTP/1.1 403 Forbidden
Date: Thu, 12 Sep 2024 06:38:57 GMT
Content-Type: text/plain; charset=UTF-8
Content-Length: 16
Connection: close
CF-Ray: 8c1de5c7faf37cea-EWR
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Vary: Accept-Encoding
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IUDg%2BATzSpjDQHgaYF7ePL2rt59ml%2FqKQJTacc7XnCX7WnE5OB%2FMGdx%2FSGbwx%2Fzi7O8r0MTP1rvJxzQxSm6rZps%2ByF5ghMNXTUh0vbvTplvw1%2BnGd2XHwUOTDNxIfeYUVCEZh%2FbMrywhYOStNJk4kJuH%2B9Lg4Du%2FBE4YGWA%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
alt-svc: h3=":443"; ma=86400


error code: 1003

Found 2024-09-12 by HttpPlugin

Create report

Open service 172.67.166.229:443 · worker-salar.zibadokht-amirali.workers.dev

2024-09-10 06:30

HTTP/1.1 403 Forbidden
Date: Tue, 10 Sep 2024 06:30:44 GMT
Content-Type: text/plain; charset=UTF-8
Content-Length: 16
Connection: close
CF-Ray: 8c0d5f00595fbb7d-FRA
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Vary: Accept-Encoding
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hzfn7YRPy8r4qpGnLqoOc4vv8RXD%2F%2Bxs%2BK%2BhKs3%2BOlOF6PGodXeC93w8iudRh9Lb552yTpi4tDRQdwtlvXEq%2FgjNdSYGbtdzoUArpe0w%2FSeOS3RNv7DvqbUSeHvcT1jSyFIKNfmQtmzNc3yx9srI3gIrJ7nUxtwl4oMbS44%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
alt-svc: h3=":443"; ma=86400


error code: 1003

Found 2024-09-10 by HttpPlugin

Create report

Open service 172.67.166.229:443 · worker-salar.zibadokht-amirali.workers.dev

2024-09-08 04:12

HTTP/1.1 200 OK
Date: Sun, 08 Sep 2024 04:12:18 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
CF-Ray: 8bfc196659372c4a-FRA
CF-Cache-Status: DYNAMIC
Vary: Accept-Encoding
My-app: 200 from 10.90.4.119:80
X-Server: 10.90.7.225
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=x6Iv4rZWK1N3Ow7i0uJC2qRD9d2uIVz%2FxPRffCItq%2B1oMpBz6NtfDtR4yBqd15SL7ZXQndJh5Iouc%2BDQ54B3IX5rBaq%2Bdm82u1w7WnIRY5uKT%2Fb%2Bc3J21hFWCctkM3C8gAgAVNQuJNK0wai0SqKV%2B1Mcv28mn68fU4oOhzo%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
alt-svc: h3=":443"; ma=86400

Found 2024-09-08 by HttpPlugin

Create report

Open service 172.67.166.229:443 · worker-salar.zibadokht-amirali.workers.dev

2024-08-18 05:27

HTTP/1.1 403 Forbidden
Date: Sun, 18 Aug 2024 05:27:53 GMT
Content-Type: text/plain;charset=UTF-8
Content-Length: 42
Connection: close
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yyPa4jDB5a5BSxZuMrx4skLiI8yWvclDSQZ3p4%2BQXNQ17kpRPEKiHzzKyB%2F91uYXoA3JkTX%2BWDIq8Sw2bsM%2Flr6hfNB6gMmxUNQBj8GhTNVMpaHfKmpGk9%2FtKx8gDOJeQ%2FBZvin98ez025hFFZzupm1yIsLtNDYQc1dlqpE%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 8b4f7f508f5dc344-EWR
alt-svc: h3=":443"; ma=86400


Redirects to www.youth.cn are not allowed.

Found 2024-08-18 by HttpPlugin

Create report

Open service 172.67.166.229:443 · worker-salar.zibadokht-amirali.workers.dev

2024-08-16 05:54

HTTP/1.1 403 Forbidden
Date: Fri, 16 Aug 2024 05:54:44 GMT
Content-Type: text/plain; charset=UTF-8
Content-Length: 16
Connection: close
CF-Ray: 8b3f2be5da3b4d2b-FRA
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Vary: Accept-Encoding
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=m7oK5vnei4gvfAtzHRuOqHm2DWWceWHbWqmPrYSbf0iRYRX8OLpQHPIrNKzIvp%2Fanz3JLZaRtvhixlrbNvETEctBMaK7k0o6cGcpTaAiGLoF9bVmY%2BRC0HzBAa%2Bi3YdTcgGolK2TkVKfRgEHBiSJctxvJ1NL0cN6o%2BFHPDE%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
alt-svc: h3=":443"; ma=86400


error code: 1003

Found 2024-08-16 by HttpPlugin

Create report

Open service 172.67.166.229:443 · worker-salar.zibadokht-amirali.workers.dev

2024-08-14 04:33

HTTP/1.1 200 OK
Date: Wed, 14 Aug 2024 04:33:28 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
CF-Ray: 8b2e3a105b468f39-FRA
CF-Cache-Status: DYNAMIC
Set-Cookie: uuid_tt_dd=10_169090600-1723610008142-795135; Max-Age=34560000; Path=/; Domain=.csdn.net;
Strict-Transport-Security: max-age=0; preload
Vary: Accept-Encoding, Origin
Set-Cookie: dc_session_id=10_1723610008142.791652; Max-Age=34560000; Path=/; Domain=.csdn.net;
Set-Cookie: csrfToken=QWGhGQ_akks2pR11Zc1R6uXD; path=/; secure
X-Cache: BYPASS
x-content-type-options: nosniff
x-download-options: noopen
x-readtime: 314
X-Request-Id: c6cb160f146b4c0bfa71e9b4a495b07b
X-Response-Time: 313
x-xss-protection: 1; mode=block
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qzn8i8Ho0RuUJeBOgpEXimsWyGwFflbTiwOmbU0sRkMpZw8%2FHjyqdljhdamFV40czZFDa4h%2Bz9azwuyV%2BqZ0wJFJjYDbHoF1WfGPadW%2B9%2BZxJbbWaQ9tJHXtV572yOd15zKOpufW%2BGfRmAcWcbKa4LhXBy3xqvlueONdx%2Bw%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
alt-svc: h3=":443"; ma=86400

Found 2024-08-14 by HttpPlugin

Create report

Open service 172.67.166.229:443 · worker-salar.zibadokht-amirali.workers.dev

2024-08-12 05:48

HTTP/1.1 403 Forbidden
Date: Mon, 12 Aug 2024 05:48:15 GMT
Content-Type: text/plain;charset=UTF-8
Content-Length: 45
Connection: close
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XWEE3wMGFuu37qlsgqzZP8vavaLUBg89vVaWUfyztBmLE7IqxaP7QV71tWLXp0MdpzxCtg1ckBn8yo6LNIgjGsc7jt47nmRWFo8qcJrmF51hsI23iqHVx8dmpcNPPmD2pO%2FktnHM3Pz5eXRtXF3VebRo3LepkQSaFKIxz1o%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 8b1e2cc2eb1ace8d-SIN
alt-svc: h3=":443"; ma=86400


Redirects to www.tmtpost.com are not allowed.

Found 2024-08-12 by HttpPlugin

Create report

Open service 172.67.166.229:443 · worker-salar.zibadokht-amirali.workers.dev

2024-08-10 07:49

HTTP/1.1 403 Forbidden
Date: Sat, 10 Aug 2024 07:50:00 GMT
Content-Type: text/plain;charset=UTF-8
Content-Length: 46
Connection: close
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=P%2B%2B8sImLbFizVrf2FYBcDYK4a91hYzs5rK2EoRuv1zeDWpNoBBRNaeRxZO9AsJOtt%2B7Xs%2BDVVDe6rZ4UQ7wbOvzVcx6H1ChC4ocCojXKVVPPsBa3xl%2B3TWGnVp5TKk3iM7bKpFgvGDIRUseMiohqZHqIMCtrZL2juDiByJ8%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 8b0e647cbc7daabf-YYZ
alt-svc: h3=":443"; ma=86400


Redirects to www.ximalaya.com are not allowed.

Found 2024-08-10 by HttpPlugin

Create report

Open service 172.67.166.229:443 · worker-salar.zibadokht-amirali.workers.dev

2024-08-08 08:00

HTTP/1.1 403 Forbidden
Date: Thu, 08 Aug 2024 08:00:55 GMT
Content-Type: text/plain;charset=UTF-8
Content-Length: 44
Connection: close
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hUxCvQgHZYJsWdJHF7KGEFAmiAW1dFDQyR7mt72MNlupen4q1%2FiBfBkZxzblBkcwZ4BcWF3TgfQ092xob8vU4iawkMWAnklhppwWiBYcncjy8f%2FrJBC0yXsJapOowV7iCEnQfO3G0LcmHt%2BKmlNeoCnGSUTsKW0RJ7PePYQ%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 8afdf9b60f982647-NRT
alt-svc: h3=":443"; ma=86400


Redirects to www.hao123.com are not allowed.

Found 2024-08-08 by HttpPlugin

Create report

Open service 172.67.166.229:443 · worker-salar.zibadokht-amirali.workers.dev

2024-08-07 02:01

HTTP/1.1 403 Forbidden
Date: Wed, 07 Aug 2024 02:01:23 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
CF-Ray: 8af3adae093629f0-BOM
CF-Cache-Status: DYNAMIC
x-ws-request-id: 66b2d573_PS-000-01acR41_1999-13362
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2F4aUwiPSKxFLT43YBx1m3ecCliz91BUOh5SXpPvbQPpGOOkE93cyW9oGj3TQkuHBqp%2BxQ6rcKN%2FoBdR2e8OH2NMkp5G82FZF2AawtVwLS7siyJxQjK6Qn6rOEFL%2BLtNv2vZYkbL8bEdpQaJS%2FlXxfJDJgeCKO%2Ffxiphii3o%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
alt-svc: h3=":443"; ma=86400

Page title: 403 Forbidden

<!DOCTYPE html>
<html>
	<head>
		<meta charset="utf-8">
		<meta http-equiv="X-UA-Compatible" content="IE=edge">
		<meta name="viewport" content="width=device-width, initial-scale=1">
		<title>403 Forbidden</title>
		<style type="text/css">body{margin:5% auto 0 auto;padding:0 18px}.P{margin:0 22%}.O{margin-top:20px}.N{margin-top:10px}.M{margin:10px 0 30px 0}.L{margin-bottom:60px}.K{font-size:25px;color:#F90}.J{font-size:14px}.I{font-size:20px}.H{font-size:18px}.G{font-size:16px}.F{width:230px;float:left}.E{margin-top:5px}.D{margin:8px 0 0 -20px}.C{color:#3CF;cursor:pointer}.B{color:#909090;margin-top:15px}.A{line-height:30px}.hide_me{display:none}</style>
	</head>
	<body>
		<div id="p" class="P">
			<div class="K">403</div>
			<div class="O I">Forbidden</div>
			<p class="J A L">Error Times: Wed, 07 Aug 2024 02:01:23 GMT
				<br>
				<span class="F">IP: 172.70.218.90</span>Node information: PS-000-01acR41
				<br>URL: https://www.ynet.com/
				<br>Request-Id: 66b2d573_PS-000-01acR41_1999-13362
				<br>
				<br>Check:
				<span class="C G" onclick="s(0)">Details</span></p>
		</div>
		<div id="d" class="hide_me P H">
			<div class="K">ERROR</div>
			<p class="O I">The Requested URL could not be retrieved</p>
			<div class="O">
				<div>While trying to retrieve the URL:</div>
				<pre class="B G">https://www.ynet.com/</pre></div>
			<div class="M">
				<span>The following error was encountered:</span>
				<ul class="E">
					<li class="D G">Invalid Request</li></ul>
			</div>
			<p class="M">The access control configuration prevents your request at this time.
				<p></p>Please contact your service provider if you feel this is incorrect.</p>
			<a class="N C" href="#" onclick="s(1)">return</a></div>
		<script type="text/javascript">function e(i) {
				return document.getElementById(i);
			}
			function d(i, t) {
				e(i).style.display = (t ? 'block': 'none');
			}
			function s(e) {
				d('p', e);
				d('d', !e);
			}</script>
	</body>
</html>

Found 2024-08-07 by HttpPlugin

Create report

zibadokht-amirali.workers.dev*.zibadokht-amirali.workers.dev

Fingerprint:

f4760f14aac5b9ec1a2966c9359598a60cf83bb5a1cb1c1678b879cfd4b0cf6e

CN:

zibadokht-amirali.workers.dev

Key:

ECDSA-256

Issuer:

WE1

Not before:

2024-08-05 11:22

Not after:

2024-11-03 11:22

Domain summary

worker-salar.zibadokht-amirali.workers.dev 12

1 recorded

IP summary

172.67.166.229 2

1 recorded

Domain worker-salar.zibadokht-amirali.workers.dev

Software information

A JSON configuration file has been found

zibadokht-amirali.workers.dev*.zibadokht-amirali.workers.dev

Domain summary

IP summary