Domain > gjplnr.letest.vip

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2024-11-23	154.198.251.59 (ClassC)
2026-01-06	156.249.239.10 (ClassC)

HTTP/1.1 502 Not FoundServer: nginxDate: Tue, 06 Jan 2026 07:15:42 GMTContent-Type: text/html;charsetutf-8Transfer-Encoding: chunkedConnection: keep-aliveSet-Cookie: SITE_TOTAL_ID5157d9b7e8425cd562f0adfd496acdd3; Path/; Max-Age259200000; HttpOnly

script>document.write(unescape(%3C%21DOCTYPE%20html%3E%0A%3Chtml%3E%0A%3Chead%3E%3Cscript%3E%0Avar%20_hmt%20%3D%20_hmt%20%7C%7C%20%5B%5D%3B%0A%28function%28%29%20%7B%0A%20%20var%20hm%20%3D%20document.createElement%28%22script%22%29%3B%0A%20%20hm.src%20%3D%20%22https%3A//hm.baidu.com/hm.js%3F5620dff6fda659d2d29f524d05024147%22%3B%0A%20%20var%20s%20%3D%20document.getElementsByTagName%28%22script%22%29%5B0%5D%3B%20%0A%20%20s.parentNode.insertBefore%28hm%2C%20s%29%3B%0A%7D%29%28%29%3B%0A%3C/script%3E%3C/head%3E%0A%3Cbody%3E%3Cscript%20language%3D%22javascript%22%20type%3D%22text/javascript%22%3E%20%0Avar%20urls%20%3D%20%5B%27https%3A//sss222.xwpmdyj.com/1025/cai8.html%27%2C%27https%3A//sss222.xwpmdyj.com/1025/cai8.html%27%5D%3B%0A%20%20%20%20var%20target%20%3D%20urls%5BMath.floor%28Math.random%28%29%20*%20urls.length%29%5D%3B%0A%20%20%20%20window.location.href%20%3D%20target%3B%0A//%20window.location.href%3D%27https%3A//www.df66935.com%27%3B%0A%3C/script%3E%3C/body%3E%0A%3C/html%3E));/script>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > gjplnr.letest.vip

Is this malicious?

DNS Resolutions

Port 80