Domain > hkan79.vicp.cc

More information on this domain is in AlienVault OTX

Property	Value
Email	cyy@vavic.com
NameServer	NS2.EXHERA.COM
Created	2006-08-03 07:52:52
Changed	2015-04-08 00:40:12
Registrar	WEB COMMERCE COMMUNI

DNS Resolutions

Date	IP Address
2015-03-02	192.187.124.251 (ClassC)
2019-09-01	61.142.176.23 (ClassC)
2025-01-21	47.111.82.157 (ClassC)
2025-07-29	146.56.248.213 (ClassC)

Port 80

HTTP/1.1 200 OKServer: nginxDate: Sat, 22 Jun 2019 05:05:33 GMTContent-Type: text/htmlContent-Length: 1681Last-Modified: Thu, 10 Aug 2017 08:28:44 GMTConnection: keep-aliveAccept-Ranges: bytes

!DOCTYPE html>html>head>meta charsetutf-8>meta http-equivX-UA-Compatible contentIEEdge,chrome1>title>您的帐号未办理实名认证 - 暂时无法访问/title>link relstylesheet href//static.orayimg.com/css/style-2.2.21.css />link relstylesheet href//static.orayimg.com/peanuthull/css/peanuthull-2.2.10.css />script src//static.orayimg.com/js/jquery-1.7.2.js>/script>script src//static.orayimg.com/js/jquery.extend/jquery.window-1.1.2.js>/script>style>.noflow-wrap{	background:#2b3642 url(./img/unrealname_bg.jpg) no-repeat bottom center;}/style>/head>body>div classnoflow-wrap>	div classcontainer>		a hrefhttp://hsk.oray.com classlogo>			img src//static.orayimg.com/peanuthull/img/noflow_logo.png>		/a>		div classcontent-wrap stylepadding-top: 15%;>			p classtext stylefont-size: 32px;line-height: 48px;margin: 10px auto;>您的帐号span stylecolor:#ff0042;vertical-align: baseline>未办理实名认证/span>，span iddomainname stylevertical-align: baseline>/span>暂时无法访问/p>			p classtext stylefont-size: 18px;>遵《中华人民共和国网络安全法》规定，请尽快办理实名认证/p>			p classtel>如有疑问，请联系Oray客服：020-62219018/p>			div classbtn-wrap>				a stylemargin-left: 40px; hrefhttps://console.oray.com/account/real/ classbtn btn-primary target_blank>立即认证/a>			/div>		/div>	/div>/div>script>var host  location.host;if (host.indexOf(:) ! -1) {	hostArr  host.split(:);	host  hostArr0;}$(#domainname).html(host);/script>/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

MD5	A/V
ab983a9da0be2228d9a93a5516d0b615	[W32.Clod219.Trojan.441c] [Trojan.Dynamer.013231] [Backdoor.Farfli] [Backdoor.Farfli!K4fVMrdL4ys] [W32/S-cc53b2b7!Eldorado] [Backdoor.Win32.Farfli.ktp] [Troj/Zegost-HE] [TrojWare.Win32.Vehidis.AZR] [Backdoor.Farfli.Win32.1802] [W32/S-cc53b2b7!Eldorado] [Heur:Trojan/Dialer] [W32/Farfli.BBA!tr] [Trojan[Backdoor]/Win32.Farfli] [Trojan.Kazy.D95299] [Backdoor:Win32/Zegost.BZ] [Backdoor/Win32.Zegost] [Backdoor.Farfli] [PE:Backdoor.Farfli!1.A1B3[F1]] [Trojan.Win32.Farfli]
01315f264c9b0642d4b86b37cd3c94ea

Domain > hkan79.vicp.cc

Is this malicious?

Files that talk to hkan79.vicp.cc

Whois

DNS Resolutions

Port 80