Domain > dow.858656.com

More information on this domain is in AlienVault OTX

Property	Value
Email	858656.com@163.com
NameServer	NS2.DNS.COM.CN
Created	2007-09-08 00:00:00
Changed	2014-09-09 00:00:00
Expires	2015-09-08 00:00:00
Registrar	BEIJING INNOVATIVE L

DNS Resolutions

Date	IP Address
2025-07-24	47.93.151.126 (ClassC)

HTTP/1.1 200 OKCache-Control: privateContent-Type: text/html; charsetutf-8Server: Microsoft-IIS/7.5X-AspNet-Version: 4.0.30319X-Powered-By: ASP.NETDate: Tue, 04 Feb 2025 12:35:15 GMTContent-Length: 14

!DOCTYPE html>html xmlnshttp://www.w3.org/1999/xhtml>head>    meta http-equivContent-Type contenttext/html; charsetutf-8 />    title>康银母婴专线/title>/head>body>    script typetext/javascript>        var sUserAgent  navigator.userAgent.toLowerCase();        var bIsIpad  sUserAgent.match(/ipad/i)  ipad;        var bIsIphoneOs  sUserAgent.match(/iphone os/i)  iphone os;        var bIsMidp  sUserAgent.match(/midp/i)  midp;        var bIsUc7  sUserAgent.match(/rv:1.2.3.4/i)  rv:1.2.3.4;        var bIsUc  sUserAgent.match(/ucweb/i)  ucweb;        var bIsAndroid  sUserAgent.match(/android/i)  android;        var bIsCE  sUserAgent.match(/windows ce/i)  windows ce;        var bIsWM  sUserAgent.match(/windows mobile/i)  windows mobile;        if (!(bIsIpad || bIsIphoneOs || bIsMidp || bIsUc7 || bIsUc || bIsAndroid || bIsCE || bIsWM)) {            var ua  navigator.userAgent.toLowerCase();                        if (ua.match(/MicroMessenger/i)  micromessenger) {                //在微信中打开                window.location.href  /ky_phone/index.aspx;            }            else {                window.location.href  /ky_pc/index.aspx;            }        }        else {                        window.location.href  /ky_phone/index.aspx;        }    /script>/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

MD5	A/V
6a280aef8ff8cc5045dd788940b632ce	[Win32.Klest.F] [W32/Cekar.dam] [Virus.Klest] [Virus] [W32/Cekar.E] [W32.Mumawow.F!inf] [NetworkWorm] [PE_CEKAR.SM] [W32.Wace] [Trojan.Win32.Patched.ir] [W32/Cekar-E] [Virus.Win32.Downloader.ba0] [Win32.HLLW.Wace] [W32/Cekar.B] [Heuristic.LooksLike.Win32.SuspiciousPE.N!87] [Win32/Ch2Ch2.a] [Win32.LwyLoad.e.150016] [Virus:Win32/Cekar.B] [Win32/Logogo] [Malware.Mumawow] [Win32/Drowor.C] [Win32.Logogo.g] [W32/Drowor.WE] [Win32/Cekar.G] [W32/Cekar.A]

Domain > dow.858656.com

Is this malicious?

Files that talk to dow.858656.com

Whois

DNS Resolutions

Port 80