Domain > gsair.flights.ctrip.com

More information on this domain is in AlienVault OTX

Whois

Property	Value
Email	domainmaster@ctrip.com
NameServer	NS3.CTRIP.COM
Created	1999-08-09 00:00:00
Changed	2015-04-07 00:00:00
Expires	2022-08-09 00:00:00
Registrar	MARKMONITOR INC.

DNS Resolutions

Date	IP Address
2014-08-23	140.207.228.16 (ClassC)
2016-07-04	140.206.211.14 (ClassC)
2017-08-21	23.63.227.24 (ClassC)
2017-08-21	165.254.155.58 (ClassC)
2018-08-07	104.81.117.210 (ClassC)
2018-08-07	23.194.72.235 (ClassC)
2020-08-15	140.206.211.12 (ClassC)
2021-06-10	211.95.54.3 (ClassC)
2022-05-12	162.14.137.1 (ClassC)
2022-05-12	162.14.145.44 (ClassC)
2022-12-29	23.66.82.123 (ClassC)
2023-07-31	23.7.114.196 (ClassC)
2023-08-31	23.220.144.140 (ClassC)
2023-08-31	23.47.51.133 (ClassC)
2023-08-31	23.47.51.149 (ClassC)
2023-11-16	23.198.6.2 (ClassC)
2023-11-16	23.198.6.51 (ClassC)
2023-11-16	23.198.6.52 (ClassC)
2023-11-18	23.56.99.24 (ClassC)
2023-11-18	23.56.99.90 (ClassC)
2023-11-20	23.221.220.16 (ClassC)
2023-11-20	23.221.220.32 (ClassC)
2023-12-12	23.52.42.180 (ClassC)
2023-12-12	23.52.42.207 (ClassC)
2023-12-12	23.66.127.138 (ClassC)
2023-12-12	23.52.42.210 (ClassC)
2024-04-01	23.66.127.144 (ClassC)
2024-04-01	23.66.127.159 (ClassC)
2024-04-01	23.66.127.140 (ClassC)
2024-04-01	23.66.127.143 (ClassC)
2024-05-02	23.55.104.16 (ClassC)
2024-05-02	23.55.104.90 (ClassC)
2024-08-03	23.48.37.17 (ClassC)
2024-08-03	23.48.37.43 (ClassC)
2024-08-13	23.47.72.14 (ClassC)
2024-08-13	23.47.72.8 (ClassC)
2024-09-13	23.56.169.16 (ClassC)
2024-09-13	23.64.112.75 (ClassC)
2024-09-13	23.56.169.74 (ClassC)
2025-04-07	23.46.228.178 (ClassC)
2025-05-03	23.46.228.165 (ClassC)
2025-09-13	23.216.147.207 (ClassC)
2025-12-11	23.216.147.202 (ClassC)
2026-02-04	23.46.228.168 (ClassC)
2026-02-11	23.216.147.206 (ClassC)

HTTP/1.1 200 OKContent-Type: text/html;charsetUTF-8Content-Language: en-USDate: Sun, 15 Sep 2024 01:55:04 GMTTransfer-Encoding:  chunkedConnection: keep-aliveConnection: Transfer-Encodingx-cdn-pop: US

!DOCTYPE html>html>head>    meta http-equivContent-Type contenttext/html; charsetutf-8 />    meta http-equivCache-Control contentno-transform  />        meta namedescription content携程旅行网为您提供海航旗下天津航公司特价机票，海航旗下天津航机票信息尽在携程机票(flights.ctrip.com) />        meta namekeywords content海航旗下天津航特价机票 />        title>海航旗下天津航特价机票，海航旗下天津航打折机票【携程航空信息】/title>    link relshortcut icon href//www.ctrip.com/favicon.ico mce_href//www.ctrip.com/favicon.ico typeimage/x-icon />    style typetext/css>        #base_bd,        .cui_nav,        .cui_hd {            margin: 0 auto;        }    /style>input typehidden idstatic.resource.url value//webresource.c-ctrip.com/ResFlightOnline/P2>input typehidden idstatic.resource.version value202006051739>link  typetext/css charsetUTF-8 relstylesheet  href//webresource.c-ctrip.com/ResFlightOnline/P2/styles/cui110425.css?v202006051739 />link  typetext/css charsetUTF-8 relstylesheet  href//webresource.c-ctrip.com/ResFlightOnline/P2/styles/seo.css?v202006051739 />/head>body>    div idhp_header>div idleftSideNavLayer classrelativeLeftSideNavLayer styleposition: fixed; top:0; left: 0;bottom: 0;z-index: 998>div rolenavigation classlsn_left_nav_container_CT1cL>div classlsn_small_left_nav_container_KMgI->div classlsn_top_button_wrap_t3-TA>div classlsn_button_icon_dvatN>div classpc_home-tabbtnIcon lsn_ico_9C9TD>/div>/div>/div>div styleflex: 1;>div styleposition: relative; overflow: hidden; width: 100%; height: 100%;>div styleposition: absolute; top: 0px; left: 0px; right: 0px; bottom: 0px; overflow: hidden; -webkit-overflow-scrolling: touch; margin-right: 0px; margin-bottom: 0px;>div classlsn_nav_content_wrap_ci7QT>div classlsn_first_nav_wrap_LZamG>button aria-label酒店 按回车键打开菜单 classlsn_top_nav_qdgwe>span classpc_home-jiudian lsn_top_nav_icon_ijnym>/span>span classlsn_top_nav_font_4h1KU>酒店/span>/button>div classlsn_son_nav_wrap

Subdomains

Date	Domain	IP
ctslb-bgp-oy90.ctrip.com	2017-08-18	140.206.211.31
download2.ctrip.com	2021-07-27	23.222.156.80

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > gsair.flights.ctrip.com

Is this malicious?

Whois

DNS Resolutions

Port 80

Port 443

Subdomains