Domain > 27dh.com

More information on this domain is in AlienVault OTX

Files that talk to 27dh.com

MD5	A/V
2c24c5f2f13cfe30113657744f225961	[W32.SChajan.Trojan] [Artemis!2C24C5F2F13C] [Trojan-Downloader.Win32.Small] [W32/Behav-Heuristic-067] [W32/VisualBasicMalware!Eldorado] [Trojan.Click2.35083] [TROJ_DLDR.JB] [Heuristic.BehavesLike.Win32.Downloader.D] [Mal/Packer] [Backdoor/Huigezi.2007.aile] [TrojanDownloader:Win32/Small.AHM] [Win32.Trojan.Dldr.Hrfg] [Trojan.Win32.Downloader.ax] [Win32/Trojan.b7f]
788173718ce6cbc65a61e1f3d341e151	[TrojanDownloader*Win32/Small.AHM]

Whois

Property	Value
Email	2191228474@qq.com
NameServer	DNS11.PARKPAGE.FOUNDATIONAPI.COM
Created	2014-04-17 00:00:00
Changed	2015-04-18 00:00:00
Expires	2016-04-17 00:00:00
Registrar	PDR LTD. D/B/A PUBLI

DNS Resolutions

Date	IP Address
2010-05-07	61.129.51.70 (ClassC)
2013-07-19	8.5.1.40 (ClassC)
2013-08-18	8.5.1.40 (ClassC)
2014-06-20	174.139.12.246 (ClassC)
2019-02-20	47.91.157.125 (ClassC)
2019-08-02	47.52.135.116 (ClassC)
2024-09-27	152.32.175.174 (ClassC)
2025-01-12	154.85.60.150 (ClassC)
2025-03-04	103.218.240.184 (ClassC)
2025-03-20	101.36.119.77 (ClassC)

Port 80

HTTP/1.1 200 OKServer: nginx/1.12.2Date: Fri, 02 Aug 2019 22:31:38 GMTContent-Type: text/html; charsetutf-8Transfer-Encoding: chunkedConnection: keep-alive

!DOCTYPE html>html>head>    meta charsetutf-8 />    meta nameviewport contentwidthdevice-width,user-scalableno,initial-scale1.0 />    title>域名出售/title>    meta http-equivContent-Type contenttext/html; charsetutf-8 />    meta nameKeywords />    meta nameDescription />    !--if IE 6>    script srchttp://www.22.cn/js/pngpic.js>/script>    script>    DD/belatedPNG.fix(img);    /script>    !endif-->    /head>body>        div classbody-content>        style typetext/css>    * {        margin: 0;        padding: 0;    }    body {        overflow-x: hidden;        color: #666;    }    #wrap-ymtl {        width: 100%;    }        #wrap-ymtl .top {            width: 100%;            height: 150px;            background: #ff7200;            text-align: center;            line-height: 150px;            color: #fff;            font-size: 36px;        }        #wrap-ymtl .tip {            width: 100%;            height: 50px;            background: #e3e3e3;            line-height: 50px;            text-align: center;            color: #666;            font-size: 14px;        }        #wrap-ymtl .content {            width: 1000px;            height: 422px;            margin: 0 auto;            background-image: url(https://www.22.cn/images/pk/ymtl-bg.png);            background-repeat: no-repeat;            overflow: hidden;        }            #wrap-ymtl .content .cont {                width: 650px;                height: 275px;                margin: 65px auto 0 auto;            }                #wrap-ymtl .content .cont .cont-left {                    width: 275px;                    height: 275px;                    float: left;                    margin-left: 10px;                    ;                    background-image: url(https://www.22.cn/images/pk/all1.png);                    background-size: contain;                    background-repeat: no-repeat;                    background-position: center;                }                #wrap-ymtl .content .cont .cont-right {                    w

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > 27dh.com

Is this malicious?

Files that talk to 27dh.com

Whois

DNS Resolutions

Port 80