gd-weimi.com - URL scan, 22 Aug 2026

MalwareAnalyzer by Cyble scanned gd-weimi.com and returned a unknown verdict (score 6). The page resolved to 120.79.230.82 on Aliyun Computing Co., LTD in CN. 2 domains and 1 IP were contacted. 2 malware samples communicate with this URL (Phishing). This is a point-in-time observation from 22 Aug 2026; the page may have changed since.

Scan result

• Verdict: unknown (score 6) · Confidence 9%
• Scanned URL: http://gd-weimi.com/upfolder/e/files/20210912011920.pdf
• Domain: gd-weimi.com · IP: 120.79.230.82 · AS37963 · CN
• Server: nginx/1.12.0
• Page title: IIS 8.5 详细错误 - 403.0 - Forbidden
• HTTP status: 403 · text/html; charset=utf-8
• Scan tier: standard · observed 2026-08-22 08:59:44 UTC

Malware communicating with this URL (2)

These samples were observed contacting or being served from gd-weimi.com. Each links to its full analysis.

• Phishing - referenced · 7e90ee2a6f1a6f383c8295ff2abc8b60 · first seen 2026-08-15
• Phishing - referenced · 81bce915065732b507f6d78d31e92031 · first seen 2026-08-12

Antivirus & YARA (0 of 48 engines)

No engine flagged this page's content.

Why this verdict

• Served over plaintext HTTP

Detected technologies

• Nginx

Contacted infrastructure

• 120.79.230.82 - AS37963 Aliyun Computing Co., LTD (China)

Observed indicators

• gd-weimi.com
• go.microsoft.com
• 120.79.230.82
• http://gd-weimi.com/upfolder/e/files/20210912011920.pdf
• http://go.microsoft.com/fwlink/?LinkID=66439
• http://go.microsoft.com/fwlink/?LinkID=62293&IIS70Error=403,0,0x00000000,9600

Questions about gd-weimi.com

Is gd-weimi.com safe?

The scan of gd-weimi.com on 22 Aug 2026 reached no verdict either way (score 6). Too little was captured to judge it, which is an unknown rather than a pass.

What malware is associated with gd-weimi.com?

2 analysed samples communicate with this URL, including Phishing.

How was gd-weimi.com checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the standard tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of gd-weimi.com

Scanned on MalwareAnalyzer by Cyble · Open interactive scan