Domain > statics.591.com.hk

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2015-12-04	52.76.179.160 (ClassC)
2016-07-03	52.85.209.170 (ClassC)
2016-09-09	54.230.90.227 (ClassC)
2016-10-13	52.84.66.236 (ClassC)
2017-03-17	52.84.3.70 (ClassC)
2018-08-06	13.33.107.221 (ClassC)
2018-09-21	13.32.174.138 (ClassC)
2018-09-21	13.32.174.183 (ClassC)
2018-09-21	13.32.174.32 (ClassC)
2018-09-21	13.32.174.83 (ClassC)
2018-11-03	143.204.158.119 (ClassC)
2018-11-03	143.204.158.77 (ClassC)
2024-09-18	99.84.66.25 (ClassC)
2024-09-27	99.84.66.10 (ClassC)
2024-11-22	99.84.66.103 (ClassC)
2025-01-28	18.238.217.50 (ClassC)
2025-03-20	99.84.66.38 (ClassC)
2025-07-16	3.175.34.128 (ClassC)
2025-07-27	3.175.34.28 (ClassC)
2025-08-06	3.175.34.62 (ClassC)

Port 80

HTTP/1.1 200 OKContent-Type: application/octet-streamContent-Length: 1268Connection: keep-aliveServer: openrestyDate: Thu, 05 Sep 2024 16:13:09 GMTAccept-Ranges: bytesETag: 60efd138-4f4Last-Modified:

?php/** * 代码来自8591 * */$query_array     explode(,, $_GETf);$files           array();$extensions      array();foreach((array) $query_array as $filepath){    $filepath        strpos($filepath, ?)  false ? $filepath : substr($filepath, 0, strpos($filepath, ?));    $extensions    pathinfo($filepath, PATHINFO_EXTENSION);    $files         $filepath;}if(empty($files)) exit;$extensions      array_unique($extensions);if(count($extensions)>1){    header(HTTP/1.1 404 Not Found);    exit;}// clearob_clean();switch($extensions0){    case css:        header(Content-type: text/css);        break;    case js:        header(Content-type: application/x-javascript);        break;    default:        header(HTTP/1.1 404 Not Found);        exit;        break;}foreach($files as $file){   if (! file_exists($file)) {        header(HTTP/1.1 404 Not Found);        exit;   }   $dir_name  dirname($file);   $content   file_get_contents($file);   $content   str_replace(url(images/, url( . $dir_name . / . images/, $content);   $content   str_replace(../images/, images/, $content);   echo $content;}exit;

Port 443

HTTP/1.1 200 OKContent-Type: application/octet-streamContent-Length: 1268Connection: keep-aliveServer: openrestyDate: Thu, 05 Sep 2024 16:13:09 GMTAccept-Ranges: bytesETag: 60efd138-4f4Last-Modified:

Subdomains

Date	Domain	IP
p1.591.com.hk	2024-06-04	99.84.66.13
p2.591.com.hk	2025-08-05	203.69.66.155
pub.591.com.hk	2024-10-12	99.84.66.25
sale.591.com.hk	2025-01-19	203.69.66.155
help.591.com.hk	2025-05-09	203.69.66.155
statics.591.com.hk	2024-09-18	99.84.66.25
tajs.591.com.hk	2024-10-04	18.238.217.25
ms.591.com.hk	2024-10-04	99.84.66.25
rent.591.com.hk	2025-07-24	203.69.66.155
www.591.com.hk	2013-12-05	203.119.2.120

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > statics.591.com.hk

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains