Browser Traffic to Unprotected Perplexity Test Subdomain (BragJack)

Ibrahim Saud@tektrix

•updated Sep 17, 2026•0•0•0

Detects outbound TLS and HTTP traffic directed towards 'testing.perplexity.com', an unlocked test subdomain reportedly associated with the BragJack campaign for AI agent hijacking. This indicates potential interaction with an adversary-controlled or compromised infrastructure used to intercept or manipulate AI agent sessions.