Domain > rplayer.production.ms.leya.ninja

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2021-01-15	52.17.9.0 (ClassC)
2021-11-22	99.86.186.128 (ClassC)
2025-07-20	99.84.66.125 (ClassC)
2025-08-13	18.161.6.11 (ClassC)
2025-10-01	18.161.6.82 (ClassC)
2025-11-25	18.161.6.5 (ClassC)
2026-02-17	18.161.6.110 (ClassC)

HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Wed, 14 Aug 2024 16:26:25 GMTContent-Type: text/htmlContent-Length: 915Connection: keep-aliveX-Cache: Error from cloudfrontVia: 1.1 ee32c7a76e2727d565413c

!DOCTYPE HTML PUBLIC -//W3C//DTD HTML 4.01 Transitional//EN http://www.w3.org/TR/html4/loose.dtd>HTML>HEAD>META HTTP-EQUIVContent-Type CONTENTtext/html; charsetiso-8859-1>TITLE>ERROR: The request could not be satisfied/TITLE>/HEAD>BODY>H1>403 ERROR/H1>H2>The request could not be satisfied./H2>HR noshade size1px>Bad request.We cant connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.BR clearall>If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.BR clearall>HR noshade size1px>PRE>Generated by cloudfront (CloudFront)Request ID: AP-qrHXyioDPN6m5agw43d2Bf0L0qMnryJ8ZWo9beqXAbpsQsoN_tg/PRE>ADDRESS>/ADDRESS>/BODY>/HTML>

Subdomains

Date	Domain	IP
lb.qa.ms.leya.ninja	2024-11-25	34.241.8.198
cf.rplayer.qa.ms.leya.ninja	2024-11-14	99.86.38.122
bla.production.ms.leya.ninja	2026-01-11	18.161.6.82
kpib.production.ms.leya.ninja	2025-11-30	18.161.6.5
rplayer.production.ms.leya.ninja	2025-07-20	99.84.66.125
cf.rplayer.production.ms.leya.ninja	2024-07-14	99.84.66.31
superactivator.production.ms.leya.ninja	2026-01-07	18.161.6.5

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > rplayer.production.ms.leya.ninja

Is this malicious?

DNS Resolutions

Port 80

Subdomains