Domain > whir.net

Welcome! Right click nodes and scroll the mouse to navigate the graph.

More information on this domain is in AlienVault OTX

Whois

Property	Value
Email	ym@whir.net
NameServer	NS2.DNS-DIY.COM
Created	1998-03-20 00:00:00
Changed	2014-03-21 00:00:00
Expires	2024-03-19 00:00:00
Registrar	35 TECHNOLOGY CO., L

DNS Resolutions

Date	IP Address
2025-02-03	106.75.26.33 (ClassC)

HTTP/1.1 200 OKContent-Type: text/htmlLast-Modified: Fri, 25 Aug 2023 07:48:09 GMTAccept-Ranges: bytesETag: 675bb57d28d7d91:0Server: X-Powered-By: ezEIPX-Frame-Options: SAMEORIGINDate: Sun, 27 Aug 202

!DOCTYPE html>html langzh-cn>head>  meta charsetutf-8>    meta http-equivX-UA-Compatible contentIEedge,chrome1 />meta nameAuthor content>meta content namedesign>meta />title>北京万户软件技术有限公司/title>meta namekeywords content万户软件。协同办公，OA，移动办公，公文管理，无纸化会议，统一门户 ，智慧统战，三重一大，督查督办，项目管理，公文交换，信创系统，数字统战平台 />meta namedescription content万户软件是业内普遍认可的智慧政务办公专家,OA系统国家行业标准编制组长单位,协同软件国家行业标准编制组长单位,22年专注协同管理领域.为您提供定制化的智慧政务一体化办公解决方案,政务OA系统,移动OA,政府OA,公文管理,信息报送,督查督办,协同OA,政务办公自动化,可以免费试用 />link href/editor/editor.css relstylesheet typetext/css/>link relShortcut icon href/cn/images/ico/favicon.ico />link href/cn/css/common.css relstylesheet typetext/css>!--common-->link href/cn/css/css_whir.css relstylesheet typetext/css>!--style-->script typetext/javascript src/cn/scripts/jquery-3.4.1.js>/script>script typetext/javascript src/cn/scripts/common.js>/script>script typetext/javascript src/cn/scripts/fixedScroll.js>/script>!--effect s-->link relstylesheet typetext/css href/cn/css/slick.css/>script src/cn/scripts/slick.js>/script>       script typetext/javascript src/cn/scripts/mobileCode.js>/script>link relstylesheet typetext/css href/cn/css/magnific-popup.css/>script src/cn/scripts/jquery.magnific-popup.min.js>/script> link relstylesheet href/cn/css/animate.css>script src/cn/scripts/wow.js>/script>script>    new WOW().init();         if (/(iPhone|iPad|iPod|iOS|Android)/i.test(navigator.userAgent)) { //移动端            console.log(111);            window.location.href/wap/index.aspx             }/script>!--effect end-->!--if lt IE 9>  script typetext/javascript src/cn/scripts/html5shiv.v3.72.min.js>/script>  script typetext/javascript src/cn/scripts/respond.mi

Port 443

HTTP/1.1 200 OKServer: nginxDate: Sun, 27 Aug 2023 15:25:55 GMTContent-Type: text/html; charsetutf8Content-Length: 102824Connection: keep-aliveVary: Accept-EncodingLast-Modified: Fri, 25 Aug 2023 07:4

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

MD5	A/V
860dd245cbecd656df047b97456d0ad0	[HW32.CDB.9069] [Malware.Packer.FFS] [Heuristic.LooksLike.Win32.Suspicious.E] [PE:Malware.AntiWare!1.9D9B] [W32/Kelihos.KK@mm]
315325f544912a68464bf38e3edf6371	[HW32.CDB.9e5e] [Backdoor/W32.Hlux.829456.H] [Packed.Win32.Katusha.3!O] [Backdoor.Hlux.r3] [Backdoor.Hlux!aauIqdu764w] [Trojan.FakeAV] [Kryptik.CDQY] [Backdoor.Win32.Hlux.dqyy] [Win32.Backdoor.Hlux.Lhdb] [UnclassifiedMalware] [Trojan.Packed.26581] [Win32.Hack.Hlux.dq.(kcloud)] [Backdoor:Win32/Kelihos.F] [Backdoor.Hlux] [Trojan.Crypt_s] [W32/Kryptik.BWUN!tr] [Crypt_s.GNC] [Backdoor.Win32.Hlux.aZvR] [Win32/Trojan.337]

Domain > whir.net

Is this malicious?

Files that talk to whir.net

Whois

DNS Resolutions

Port 80

Port 443