Domain > 618188.com

More information on this domain is in AlienVault OTX

Files that talk to 618188.com

MD5	A/V
d2ae93ee268c304f208d7eeaa4bf2a97	[TrojanAPT.LecnaCShip.MUE.Z4] [Trojan.DDoS.Nitol] [Backdoor.CPEX.Win32.31205] [Posible_Worm32] [Trojan.Win32.Gamania.drvyfe] [Suspicious.Cloud.5] [Trojan.Win32.Lapka.bw] [Mal/Behav-004] [Trojan.PWS.Gamania.44384] [TROJ_NITOL.SMN1] [BehavesLike.Win32.HLLPSassy.mc] [W32/Trojan.VUVX-7552] [TR/Staser.apzjs] [DDoS:Win32/Nitol.A] [Dropper/Win32.Dinwod] [Artemis!D2AE93EE268C] [Worm.Win32.ServStart.D] [PE:Trojan.Nitol!1.9E17] [Trojan.Win32.ServStart] [W32/SDBot.BX!tr] [Win32/Trojan.f54]
cd5f134dfa1201ee9ecb2e3da7a3c517	[Trojan.Rincux.AW] [Trojan.Rincux.AW] [DDoS*Win32/Nitol.B] [Trojan.Rincux.AW] [Trojan.Rincux.AW] [BKDR_ZEGOST.SMSB] [Trojan.Rincux] [Trojan.Rincux.AW] [Trojan.Rincux.AW] [Mal/Behav-116] [Trojan.Rincux.AW] [Trojan.DnsAmp.1] [Trojan.Staser.Win32.27] [Trojan.StartSrv.2115] [Trojan.ServStart.A] [Trojan.Rincux.AW] [Trojan.90E092D45CE346D0] [DoS-FAK!CD5F134DFA12]

Whois

Property	Value
Email	38781303@qq.com
NameServer	NS12.XINCACHE.COM
Created	2005-10-12 00:00:00
Changed	2015-08-22 00:00:00
Expires	2016-10-12 00:00:00
Registrar	XIN NET TECHNOLOGY C

DNS Resolutions

Date	IP Address
2025-03-31	14.1.97.58 (ClassC)

HTTP/1.1 200 OKCache-Control: privateContent-Length: 58962Content-Type: text/htmlServer: Microsoft-IIS/7.5Set-Cookie: ASPSESSIONIDQATRRTRCNBHJNBDAGLMFMIGJFEACPPOC; path/X-Powered-By: ASP.NETDate: Fri,

!DOCTYPE HTML PUBLIC -//W3C//DTD HTML 4.01 Transitional//EN> html xmlnshttp://www.w3.org/1999/xhtml>head>meta http-equivContent-Type contenttext/html; charsetgb2312 />title>�����վ�ռ���������ϵͳ/title> meta namekeywords content�����վ�ռ���������ϵͳ />meta namedescription content�����վ�ռ���������ϵͳ />meta propertyqc:admins contentxxxxxx />link hrefcss/css.css relstylesheet typetext/css />SCRIPT typetext/javascript srcjs/ntab.js>/SCRIPT>/head>body>table width1003 border0 aligncenter cellpadding0 cellspacing0>  tr>    td>img srcimages/web_top_1.gif width1003 height24 />/td>  /tr>/table>script languageJavaScript typetext/javascript>function QQLogin(){var Awindow.open(qqlogin/login.asp);} /script>script languageJavaScript>function correctPNG() {     var arVersion  navigator.appVersion.split(MSIE)     var version  parseFloat(arVersion1)     if ((version > 5.5) && (document.body.filters))      {       for(var j0; jdocument.images.length; j++)       {           var img  document.imagesj           var imgName  img.src.toUpperCase()           if (imgName.substring(imgName.length-3, imgName.length)  PNG)           {             var imgID  (img.id) ? id + img.id +   :              var imgClass  (img.className) ? class + img.className +   :              var imgTitle  (img.title) ? title + img.title +   : title + img.alt +               var imgStyle  display:inline-block; + img.style.cssText              if (img.align  left) imgStyle  float:left; + imgStyle             if (img.align  right) imgStyle  float:right; + imgStyle             if (img.parentElement.href) imgStyle  cursor:hand; + imgStyle             var strNewHTML  span  + imgID + imgClass + imgTitle             +  style + width: + img.width + px; height: + img.height + px; + imgStyle + ;             + filter:progid:DXImageTransform.Microsoft.AlphaImageLoader             + (src + img.src + , sizingMethodscale);>/span>              img.outerHTML  strNewHTML             j  j-1           }       }     }    }function MM_swapImgRestore() { //v3.0  var i,x,adocum

Subdomains

Date	Domain	IP
mm.618188.com	2015-06-11	183.86.211.54

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > 618188.com

Is this malicious?

Files that talk to 618188.com

Whois

DNS Resolutions

Port 80

Subdomains