Domain > service.70yx.com

More information on this domain is in AlienVault OTX

Property	Value
Email	YuMing@YinSiBaoHu.AliYun.com
NameServer	DNS28.HICHINA.COM
Created	2008-05-27 00:00:00
Changed	2015-01-07 00:00:00
Expires	2019-05-27 00:00:00
Registrar	HICHINA ZHICHENG TEC

DNS Resolutions

Date	IP Address
2013-04-22	59.151.11.140 (ClassC)
2019-08-02	42.62.52.42 (ClassC)
2025-08-06	42.62.52.46 (ClassC)

HTTP/1.1 200 OKCache-Control: privateContent-Type: text/html; charsetgb2312Server: Microsoft-IIS/7.0Set-Cookie: ASP.NET_SessionIdfe2btwczsplawa0skucqlhz3; path/; HttpOnlyX-AspNet-Version: 4.0.30319X-P

!DOCTYPE html PUBLIC -//W3C//DTD XHTML 1.0 Transitional//EN http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd>html xmlnshttp://www.w3.org/1999/xhtml>head>meta http-equivContent-Type contenttext/html; charsetgb2312 />title>������Ϸ�ͷ�����/title>meta namekeywords content />meta namedescription content />link hrefstyle/master.css relstylesheet typetext/css />script languagejavascript typetext/javascript src/js/js_tooltip.js>/script>script languagejavascript typetext/javascript src/js/common.js>/script>script languagejavascript>    function passportlogout() {        if (!confirm(��ȷ��Ҫ�˳���))            return false;        else            location.href  http://reg.70yx.com/logout.aspx?ReturnURLhttp://service.70yx.com/;    }/script>/head>body>    form methodpost action./ idform1>input typehidden nameLeft1_ScriptManager1_HiddenField idLeft1_ScriptManager1_HiddenField value />input typehidden name__VIEWSTATE id__VIEWSTATE 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 />script src/ScriptResource.axd?dtRIx4XaFzApviZRta_alJjzdt_3kUrjsD_Y1QhGA5vUeBsZtCKny6Z00lBvKHCgRQclaBiKaFCPiJg7YBx1BIIT2U25tY-pqH3_SMli6peUyaJokLNMSc7yYJ_0uGnhZ0&tffffffff886f56f4 typetext/javascript>/script>script src/default.aspx?_TSM_HiddenField_Left1_ScriptManager1_HiddenField&_TSM_CombinedScripts_%3b%3bAjaxControlToolkit%2c+Version%3d3.5.7.607%2c+Culture%3dneutral%2c+PublicKeyToken%3d28f01b0e84b

Subdomains

Date	Domain	IP
han1.70yx.com	2025-06-27	124.243.199.14
hxregion1.70yx.com	2025-07-08	42.62.52.36
download2.70yx.com	2025-04-24	221.204.209.225
download3.70yx.com	2015-01-23	60.6.200.232
service.70yx.com	2019-08-02	42.62.52.42
tg.70yx.com	2014-02-24	123.130.123.151
patch.70yx.com	2015-01-23	58.51.150.52
hp2region.70yx.com	2013-09-14	115.238.152.204
hxregion.70yx.com	2025-06-28	42.62.52.36
client.70yx.com	2024-06-01	124.243.199.20

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

MD5	A/V
605f41aa29df494e362dbd4f8e819be0	[W32.AcLuC.PE] [Win32.Almanahe.D] [Virus/W32.Alman.B] [Virus.Win32.Almanahe.2!O] [W32.Almanahe.B] [W32/Almanahe.c] [Virus.Win32.Alman.xyevp] [W32/Alman.C] [W32.Almanahe.B!inf] [Alman.D] [Win32/Almanahe.F!x386] [PE_CORELINK.C-1] [Win32:Alman] [W32.Alman-4] [Virus.Win32.Alman.b] [Win32.Alman.B] [PE:Worm.Magistr.g!497223] [Virus.Win32.Alman.A] [Win32.Alman.1] [Virus.Alman.Win32.2] [W32/Alman.BB] [W32/Alman-C] [Win32/Almana.c] [Virus/Win32.Alman.b] [Worm.DLan.c.79872] [Virus:Win32/Almanahe.B] [Win32/Alman.C] [Virus.Win32.Alman.B] [W32/Almanahe.C] [Win32/Alman.NAB] [Virus.Win32.Magister.a] [Virus.Win32.Almanahe] [W32/Alman.DB] [Win32/Alman] [Virus.Win32.Alman.$NAB] [Virus.Win32.Alman.C]

Domain > service.70yx.com

Is this malicious?

Files that talk to service.70yx.com

Whois

DNS Resolutions

Port 80

Subdomains