Domain > 1qdisk.vicp.cc

More information on this domain is in AlienVault OTX

Files that talk to 1qdisk.vicp.cc

MD5	A/V
a3e963a6189ca175c140f5328e120582	[Packed.Win32.TDSS.2!O] [UnclassifiedMalware] [DLOADER.Trojan] [BehavesLike.Win32.Dropper.dm] [W32/Trojan.YEYM-3809] [Heur:TrojanDropper.TDSS] [BDS/Zegost.282624.3] [Backdoor:Win32/Zegost.BZ] [Backdoor/Win32.Zegost] [BScope.P2P-Worm.Palevo] [PE:Trojan.Darier!1.9CCD] [Backdoor.Win32.Farfli] [W32/Farfli.AXW!tr]
6f8d5e34b858c246f04e0fac3674ea41
1d8ae61398434cd26e4442af4c3e0095	[Packed.Win32.Katusha.1!O] [Backdoor.Bot] [WS.Reputation.1] [Trojan.Win32.Farfli.djbyhg] [UnclassifiedMalware] [BehavesLike.Win32.Trojan.cm] [Heur:TrojanDropper.TDSS] [Backdoor/Win32.Farfli] [Trojan-GameThief.Win32.Magania] [W32/Farfli.CLM!tr] [Win32/Heur] [Trojan.Win32.Farfli.BAYA] [Artemis!1D8AE6139843] [BehavesLike.Win32.Kudj.cm] [PE:Malware.Obscure/Heur!1.9E03]
24097d613f19fc6a5278e07f5f5933ae	[Trojan/W32.KRBanker.45177] [Trojan.Rimod.r7] [Trojan.Win32.ServStart.dawnyd] [Backdoor.Trojan] [ServStart.G] [Trojan.Win32.ServStart.aqj] [Trojan.ServStart!n6igvhGx4as] [PE:Backdoor.Storm!1.9C70] [Trojan.DownLoad3.33677] [TR/Graftor.129744.44] [Trojan:Win32/Rimod!gmb] [W32/Trojan.MCUG-2362] [Trojan.ServStart] [Win32.Trojan.Servstart.Hnkz] [Trojan.Win32.ServStart] [W32/ServStart.EF!tr] [Downloader.Small.KTA] [Trojan.Win32.ServStart.BHB] [Trojan.ServStart.Win32.2683] [W32/Trojan5.JWW] [UnclassifiedMalware] [Trojan/Win32.ServStart] [Win32.Troj.ServStart.a.(kcloud)]
2fc8a443720c95a40206b76b4d3cecde	[Backdoor.Farfli!DrQZbUbDG5U] [Win32/Farfli.PZ] [Backdoor.Win32.Farfli.zsj] [Trojan.Win32.Farfli.dwpugq] [Troj/Zegost-GO] [Backdoor/Farfli.xg] [Trojan[Backdoor]/Win32.Farfli] [Trojan.Mikey.D5B6A] [Trojan/Win32.Zegost] [Backdoor:Win32/Zegost!rfn] [PE:Trojan.Zegost!1.65A1[F1]]

Whois

Property	Value
Email	cyy@vavic.com
NameServer	NS2.EXHERA.COM
Created	2006-08-03 07:52:52
Changed	2015-04-08 00:40:12
Registrar	WEB COMMERCE COMMUNI

DNS Resolutions

Date	IP Address
0000-00-00	115.144.79.123 (ClassC)
2014-06-30	101.79.5.180 (ClassC)
2014-06-30	101.79.5.241 (ClassC)
2015-05-05	115.144.79.123 (ClassC)
2016-03-31	103.31.15.64 (ClassC)
2017-08-11	106.75.65.176 (ClassC)
2018-12-20	174.128.255.253 (ClassC)
2019-06-20	174.128.255.236 (ClassC)
2019-06-25	174.128.255.245 (ClassC)
2019-07-12	174.128.255.232 (ClassC)
2019-08-09	174.128.255.234 (ClassC)
2019-08-13	174.128.255.229 (ClassC)
2019-08-24	174.128.255.254 (ClassC)
2019-08-24	174.128.255.228 (ClassC)
2019-08-31	174.128.255.237 (ClassC)
2019-09-17	174.128.255.233 (ClassC)
2019-10-08	174.128.255.230 (ClassC)
2020-12-31	174.128.255.252 (ClassC)
2025-10-28	0.0.0.0 (ClassC)

HTTP/1.1 200 OKServer: nginxDate: Thu, 20 Jun 2019 06:50:27 GMTContent-Type: text/htmlContent-Length: 3854Last-Modified: Wed, 04 Nov 2015 21:47:28 GMTConnection: keep-aliveVary: Accept-EncodingETag: 5

!DOCTYPE html>html>head>meta charsetutf-8 />meta http-equivX-UA-Compatible contentIEEdge,chrome1 />title>很抱歉，您访问的花生壳动态域名不在线，请稍后再尝试访问！/title>link hrefimg/style.css typetext/css relstylesheet />script>location.assign(http://offline-adv.oray.com/?host + location.host);/script>script>  (function(i,s,o,g,r,a,m){iGoogleAnalyticsObjectr;irir||function(){  (ir.qir.q||).push(arguments)},ir.l1*new Date();as.createElement(o),  ms.getElementsByTagName(o)0;a.async1;a.srcg;m.parentNode.insertBefore(a,m)  })(window,document,script,//www.google-analytics.com/analytics.js,ga);  ga(create, UA-42330484-1, auto);  ga(send, pageview);/script>/head>body>div classheader-wrapper>    div classheader>        div classlogo>a hrefhttp://www.oray.com/jump/44063>img srcimg/ph_logo.png >/a>/div>        div classext>很抱歉，您访问的a href http://www.oray.com/jump/43573 target_blank classred>花生壳动态域名/a>span iddomain>/span>不在线，请稍后再尝试访问！/div>    /div>/div>div classcontainer>	ul classclear pic>    	li>a hrefhttp://www.oray.com/jump/43772 target_blank>img src./img/pic_10.jpg border0 />/a>/li>    	li idpic-sl>/li>    	li>a hrefhttp://www.oray.com/jump/44058 target_blank>img src./img/pic_04.jpg border0 />/a>/li>    /ul>        div idad-wrapper classadpic clear styleheight: 520px>    /div>    script typetext/javascript languageJavaScript>	pic  new Array(4);	pic0  a hrefhttp://www.oray.com/jump/44101 target_blank>img src./img/pic_sl-01.png border0 />/a>;	pic1  a hrefhttp://www.oray.com/jump/44102 target_blank>img src./img/pic_sl-02.png border0 />/a>;	pic2  a hrefhttp://www.oray.com/jump/44103 target_blank>img src./img/pic_sl-03.png border0 />/a>;	pic3  a hrefhttp://www.oray.com/jump/44104 target_blank>img src./img/pic_sl-04.png border0 />/a>;	index  Math.floor(Math.random() * pic.length);	document.getElementById(pic-sl).innerHTML  picindex;		document.title  很抱歉，您访问的花生壳动态域名 + location.host + 不在线，请稍后再尝试�

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > 1qdisk.vicp.cc

Is this malicious?

Files that talk to 1qdisk.vicp.cc

Whois

DNS Resolutions

Port 80