Domain > cnup.whatwouldoakleydo.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-10-20	139.59.125.111 (ClassC)
2025-11-28	139.59.32.223 (ClassC)

HTTP/1.1 302 Moved TemporarilyServer: openrestyDate: Fri, 28 Nov 2025 15:07:22 GMTContent-Type: text/htmlContent-Length: 142Connection: keep-aliveX-Debug-Lua: runningSet-Cookie: ab_test_assignmenturl|https://random.hnmujikj.cn/qq999/referral_top_banner/?sourceSEO_CN&trafficSourceSEO_orange_2025_11_19|73.63; Path/; Max-Age2592000; ExpiresSun, 28-Dec-25 15:07:22 GMT; SameSiteLaxX-AB-Test-Variant: url:https://random.hnmujikj.cn/qq999/referral_top_banner/?sourceSEO_CN&trafficSourceSEO_orange_2025_11_19X-AB-Test-Hash: 73.63Set-Cookie: clickIdj77y4tal2mhs; Path/; Max-Age2592000; ExpiresSun, 28-Dec-25 15:07:22 GMT; SameSiteLaxX-AB-Test-Action: redirectX-AB-Test-Redirect-URL: https://random.hnmujikj.cn/qq999/referral_top_banner/?sourceSEO_CN&trafficSourceSEO_orange_2025_11_19&utm_sourcecnup.whatwouldoakleydo.com&utm_campaignfapnetProtonFebruary19&clickIdj77y4tal2mhs&siteUrl%2F&platformUnknown&mt1764342442&utm_mediumdirect&ip52.40.234.105&uidj77y4tal2mhsLocation: https://random.hnmujikj.cn/qq999/referral_top_banner/?sourceSEO_CN&trafficSourceSEO_orange_2025_11_19&utm_sourcecnup.whatwouldoakleydo.com&utm_campaignfapnetProtonFebruary19&clickIdj77y4tal2mhs&siteUrl%2F&platformUnknown&mt1764342442&utm_mediumdirect&ip52.40.234.105&uidj77y4tal2mhsX-Frame-Options: SAMEORIGINX-Content-Type-Options: nosniff

html>head>title>302 Found/title>/head>body>center>h1>302 Found/h1>/center>hr>center>openresty/center>/body>/html>

Port 443

HTTP/1.1 302 Moved TemporarilyServer: openrestyDate: Fri, 28 Nov 2025 15:07:22 GMTContent-Type: text/htmlContent-Length: 142Connection: keep-aliveX-Debug-Lua: runningSet-Cookie: ab_test_assignmenturl|https://random.hnmujikj.cn/qq999/referral_top_banner/?sourceSEO_CN&trafficSourceSEO_orange_2025_11_19|73.63; Path/; Max-Age2592000; ExpiresSun, 28-Dec-25 15:07:22 GMT; SameSiteLaxX-AB-Test-Variant: url:https://random.hnmujikj.cn/qq999/referral_top_banner/?sourceSEO_CN&trafficSourceSEO_orange_2025_11_19X-AB-Test-Hash: 73.63Set-Cookie: clickIda67g0anzw5fr; Path/; Max-Age2592000; ExpiresSun, 28-Dec-25 15:07:22 GMT; SameSiteLaxX-AB-Test-Action: redirectX-AB-Test-Redirect-URL: https://random.hnmujikj.cn/qq999/referral_top_banner/?sourceSEO_CN&trafficSourceSEO_orange_2025_11_19&mt1764342442&clickIda67g0anzw5fr&siteUrl%2F&uida67g0anzw5fr&utm_sourcecnup.whatwouldoakleydo.com&utm_campaignfapnetProtonFebruary19&platformUnknown&ip52.40.234.105&utm_mediumdirectLocation: https://random.hnmujikj.cn/qq999/referral_top_banner/?sourceSEO_CN&trafficSourceSEO_orange_2025_11_19&mt1764342442&clickIda67g0anzw5fr&siteUrl%2F&uida67g0anzw5fr&utm_sourcecnup.whatwouldoakleydo.com&utm_campaignfapnetProtonFebruary19&platformUnknown&ip52.40.234.105&utm_mediumdirectStrict-Transport-Security: max-age31536000; includeSubDomainsX-Frame-Options: DENYX-Content-Type-Options: nosniff

html>head>title>302 Found/title>/head>body>center>h1>302 Found/h1>/center>hr>center>openresty/center>/body>/html>

Subdomains

Date	Domain	IP
cnzh.whatwouldoakleydo.com	2025-11-28	139.59.32.223
cnup.whatwouldoakleydo.com	2025-11-28	139.59.32.223
cnget.whatwouldoakleydo.com	2025-11-28	139.59.32.223

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > cnup.whatwouldoakleydo.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains