Domain > tietuku.com

More information on this domain is in AlienVault OTX

Files that talk to tietuku.com

MD5	A/V
1fada2de9d49cedb02f55764669db036	[PWS-FCCD!ED56F191936E] [Trojan.PWS.QQPass!AdJXPZiYJ94] [Suspicious.Cloud] [Win32/Oflwr.A!crypt] [Trojan.Win32.Scar.ksjy] [Trojan.DownLoader14.438] [Trojan.QQPass.Win32.25682] [PWS-FCCD!ED56F191936E] [W32/QQPass.COWD!tr.pws] [Trojan/Win32.Stealer] [PWS:Win32/QQpass.KB] [TrojanPSW.QQPass] [Trojan.Win32.PSW] [Trojan.Win32.Scar.ksjy]

Whois

Property	Value
Email	fh29p442m@enamewhois.com
NameServer	LV3NS2.FFDNS.NET
Created	2012-08-26 00:00:00
Changed	2015-04-24 00:00:00
Expires	2015-08-26 00:00:00
Registrar	ENAME TECHNOLOGY CO.

DNS Resolutions

Date	IP Address
2014-11-04	222.73.144.164 (ClassC)
2016-06-19	14.18.142.94 (ClassC)
2017-03-23	121.12.98.18 (ClassC)
2019-07-14	52.66.29.61 (ClassC)
2021-10-14	61.156.152.213 (ClassC)
2022-02-10	222.138.7.147 (ClassC)
2022-02-24	123.6.2.18 (ClassC)
2022-10-21	211.97.85.229 (ClassC)
2023-03-13	42.231.136.108 (ClassC)
2023-08-27	61.243.158.204 (ClassC)
2023-09-27	124.163.196.133 (ClassC)
2023-10-08	125.39.165.103 (ClassC)
2023-11-30	218.24.84.101 (ClassC)
2024-01-09	116.177.242.62 (ClassC)
2024-01-31	61.241.131.41 (ClassC)
2024-03-10	42.177.83.225 (ClassC)
2024-03-14	42.177.83.224 (ClassC)
2024-04-23	36.249.65.232 (ClassC)
2024-04-29	123.6.42.149 (ClassC)
2024-06-08	113.201.158.139 (ClassC)
2024-06-22	42.177.83.111 (ClassC)
2024-06-30	123.6.25.199 (ClassC)
2024-07-13	14.205.93.60 (ClassC)
2024-07-26	42.177.83.214 (ClassC)
2024-07-28	116.162.13.76 (ClassC)
2024-08-06	60.28.220.246 (ClassC)
2024-08-21	123.138.255.99 (ClassC)
2024-08-31	42.177.83.134 (ClassC)
2024-09-07	116.196.147.238 (ClassC)
2024-09-13	58.251.62.56 (ClassC)
2025-08-04	8.134.70.139 (ClassC)

HTTP/1.1 200 OKServer: nginxDate: Sun, 27 Aug 2023 08:12:01 GMTContent-Type: text/html; charsetutf-8Vary: Accept-EncodingSet-Cookie: PHPSESSID6ga9cfcukmtke1h13u6h33eu46; path/Expires: Thu, 19 Nov 1981

!DOCTYPE html>html>	head>		meta http-equivContent-Type contenttext/html; charsetUTF-8>		meta namereferrer contentalways>		link relshortcut icon href/favicon.ico typeimage/x-icon>		title>贴图库 — 免费、高速、稳定、专业图片外链/title>		meta namekeywords content贴图库,图床,图盘,图片上传,免费图床,图片外链,免费图片外链,图片外链空间,淘宝图片外链,qq空间图片外链,相册外链,免费支持外链相册>		meta namedescription content专业提供图片上传，支持外链，提供高速免费无限量图片存储和外链空间。>		meta nameauthor contentTietuku>		meta namecopyright contentTietuku>		meta http-equivX-UA-Compatible contentIEedge,chrome1>		meta http-equivCache-Control contentmax-age86400>		script src/static/js/renderH5.js>		/script>		link relstylesheet href/static/css/base.css>		link href/static/css/bamboo.0.1.css relstylesheet>		style>			body{background:#fbfbfb;}		/style>		link href/static/css/component.433216.css relstylesheet>		link href/static/css/index.cf7411.css?804 relstylesheet>		link relstylesheet href/static/layui/css/layui.css typetext/css mediascreen/>		script src//cdn.staticfile.org/jquery/1.12.3/jquery.min.js>/script>		script src//res.ilayuis.com/layui/release/layer/dist/layer.js-v351-1.js>/script>		script>		lr();		function lr(){			const timeElapsedDate.now();			const todaynew Date(timeElapsed).toLocaleDateString();			const localTimelocalStorage.getItem(payment_);			if(localTime!today){				layer.open({					type: 1,title: false,closeBtn: false,area: 500px;,shade: 0.5,id: gonggao,btn: 我知道了,关闭,btnAlign: c,moveType: 1,content: span stylecolor:#FF6A00;font-size:16px;>div styletext-align:center;>促销活动/div>br>流量原价del stylecolor:gray>0.3元/每GB/del>，现促销价font stylecolor:red;font-weight:bold;>0.12/font>元/每GB(HTTPS请求次数免费)。购买1000G以上享受折上折！/span>					,yes: function(layero){						localStorage.setItem(payment_, today);						layer.closeAll();					}				});			}		}		/script>		st

Subdomains

Date	Domain	IP
i1.tietuku.com	2015-04-18	1.192.225.207
i2.tietuku.com	2014-12-12	182.140.227.252
i3.tietuku.com	2015-02-11	1.192.225.206
i4.tietuku.com	2015-06-19	106.39.201.243
www.tietuku.com	2015-02-10	119.28.48.239

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > tietuku.com

Is this malicious?

Files that talk to tietuku.com

Whois

DNS Resolutions

Port 80

Subdomains