Domain > hp.preprod.myconnect.webhelp.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2022-08-07	3.65.67.243 (ClassC)
2025-10-17	18.157.75.32 (ClassC)
2025-11-20	52.28.209.206 (ClassC)
2025-12-01	3.65.121.159 (ClassC)

HTTP/1.1 200 OKDate: Fri, 17 Oct 2025 06:11:32 GMTContent-Type: text/htmlContent-Length: 1223Connection: keep-aliveLast-Modified: Tue, 06 Feb 2024 16:05:30 GMTETag: 65c258ca-4c7Accept-Ranges: bytesStr

!DOCTYPE html>html langen>  head>    meta charsetutf-8 />    title>AgentPanel/title>    base href/>    link relpreconnect hrefhttps://fonts.googleapis.com />    link relpreconnect hrefhttps://fonts.gstatic.com crossorigin />    link      hrefhttps://fonts.googleapis.com/css2?familyMontserrat:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&displayswap      relstylesheet    />    meta nameviewport contentwidthdevice-width, initial-scale1 />    link relicon typeimage/x-icon hreffavicon.ico />    !-- This is needed because the Stomp + SockJS dependencies rely on global -->    script>      var global  window;    /script>    script src./assets/connect-streams-min.js defer>/script>    script src./assets/connect-taskjs-min.js defer>/script>    script src./assets/connect-chatjs-min.js defer>/script>  /head>  body>    div idroot>/div>  script srcruntime.js typemodule>/script>script srcpolyfills.js typemodule>/script>script srcvendor.js typemodule>/script>script srcmain.js typemodule>/script>/body>/html>

Subdomains

Date	Domain	IP
hp-admin-preprod.myconnect.webhelp.com	2025-10-29	18.194.55.228
hp.preprod.myconnect.webhelp.com	2025-10-17	18.157.75.32

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > hp.preprod.myconnect.webhelp.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains