Domain > wap.xiashayy.com

More information on this domain is in AlienVault OTX

Files that talk to wap.xiashayy.com

MD5	A/V
6def6deb61bc5a985223e42bb39fcc91	[Trojan.Script.Vbs-heuristic.druvzi]

DNS Resolutions

Date	IP Address
2025-08-11	45.200.199.172 (ClassC)

Port 80

HTTP/1.1 200 OKServer: nginxDate: Mon, 02 Jun 2025 12:54:32 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: keep-aliveVary: Accept-Encoding

html>head>title>盛达优配/title>/head>body>script>document.write(meta nameviewport contentwidthdevice-width,initial-scale1, maximum-scale1, user-scalableno>style>html,body{width:100%;height:100%;margin:0;padding:0}/style>);  var iframe  document.createElement(iframe);iframe.src  https://wieuk.cc.shieh.com.ajeo.cn.engzhuang.com:3443/shengda/#/?invide_code000000;  iframe.scrolling  auto;  iframe.style.cssText  width:100%;height:100%;left:1px;top:1px;border:none;background:#fff;  var div1  document.createElement(div);  var div   document.createElement(div);  div1.style.cssText  -webkit-overflow-scrolling:touch;width:100%;height:100%;z-index:9999999999;position:fixed;top:0;left:0;;    var is_mobi  navigator.userAgent.toLowerCase().match(/(ipad|iphone|android|coolpad|mmp|smartphone|midp|wap|xoom|symbian|j2me|blackberry|wince)/i) ! null;  if (is_mobi) {    div1.style.overflow  auto;  }  div1.appendChild(iframe);  div.appendChild(div1);  document.write(div.innerHTML);/script>script>var _hmt  _hmt || ;(function() {  var hm  document.createElement(script);  hm.src  https://hm.baidu.com/hm.js?708a751ee3ebc52598342af5fb959ffd;  var s  document.getElementsByTagName(script)0;   s.parentNode.insertBefore(hm, s);})();/script>/script>/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > wap.xiashayy.com

Is this malicious?

Files that talk to wap.xiashayy.com

DNS Resolutions

Port 80