Domain > 168mv.cn

More information on this domain is in AlienVault OTX

Property	Value
Organization	李敬战
Email	qq@xyylb.com
NameServer	ns2.360wzb.com

DNS Resolutions

Date	IP Address
2013-04-01	65.19.141.204 (ClassC)
2013-05-12	65.19.157.228 (ClassC)
2014-11-20	118.192.42.180 (ClassC)
2018-04-14	47.91.170.222 (ClassC)
2018-11-20	198.15.134.102 (ClassC)
2019-09-17	104.217.205.156 (ClassC)
2021-11-24	104.232.153.100 (ClassC)
2023-01-24	38.26.234.97 (ClassC)
2025-05-26	154.39.166.19 (ClassC)
2025-12-20	38.238.200.45 (ClassC)
2026-02-05	201.5.244.208 (ClassC)

Port 80

HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 04 Aug 2019 13:58:25 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveVary: Accept-EncodingX-Powered-By: PHP/5.4.41

!DOCTYPE html>html langen>head>	meta charsetUTF-8>	meta http-equivX-UA-Compatible contentIE8 />  meta nameviewport contentwidthdevice-width, initial-scale1.0, maximum-scale1.0, user-scalableno />  !-- The above 3 meta tags *must* come first in the head; any other head content must come *after* these tags -->  meta namedescription content>  meta nameauthor content>  link relicon href#>	style>		html, body {			height: auto;			width: 100%;			margin: 0 auto;		}		iframe {			height: 100%;			width: 100%;			position: absolute;			border: none;		}	/style>/head>script>var _hmt  _hmt || ;(function() {  var hm  document.createElement(script);  hm.src  https://hm.baidu.com/hm.js?a8881d881608f03afdfdfc6245807994;  var s  document.getElementsByTagName(script)0;   s.parentNode.insertBefore(hm, s);})();/script>script typetext/javascript src//js.users.51.la/20243167.js>/script>body>script>var bForcepc  fGetQuery(dv)  pc;function fBrowserRedirect(){    var sUserAgent  navigator.userAgent.toLowerCase();	    var bIsIpad  sUserAgent.match(/ipad/i)  ipad;    var bIsIphone  sUserAgent.match(/iphone/i)  iphone;    var bIsIos  sUserAgent.match(/ios/i)  ios;    var bIsmacos  sUserAgent.match(/mac os/i)  mac os;    var bIsAndroid  sUserAgent.match(/android/i)  android;    var bIsaz  sUserAgent.match(/Android/i)  Android;    var bIslinux  sUserAgent.match(/linux/i)  linux;     var bIsWM  sUserAgent.match(/windows mobile/i)  windows mobile;       if(bIsIpad||bIsIphone||bIsIos||bIsmacos){ //判断苹果访问        var sUrl  location.href;   		var ddocument.referrer;        if(!bForcepc){          if(d.indexOf(baidu)>0||d.indexOf(google)>0||d.indexOf(sogou)>0||d.indexOf(bing)>0||d.indexOf(live)>0||d.indexOf(soso)>0||d.indexOf(youdao)>0||d.indexOf(zhongsou)>0||d.indexOf(yahoo)>0||d.indexOf(114)>0||d.indexOf(360.cn)>0||d.indexOf(bing)>0||d.indexOf(search)>0){window.location.hrefhttp://www.566805.com:8168/www/fl/ios.php //优化跳转                  }else{            window.location.href  http://www.566805.com:8168/www/fl/ios.php  //苹

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

MD5	A/V
f57d77a66a135abf88859df4713e977a	[Trojan/W32.Buzus.112128.AB] [Worm.Autorun.DM8] [Worm.Autorun] [Trojan.Buzus!H/hwkBtRT5Y] [W32.Buzus] [Win32/AutoRun.Delf.EP] [WORM_YMINKY.SMRP] [Win.Trojan.Buzus-17146] [Worm.Win32.AutoRun.gcpj] [Trojan.Win32.Buzus.hbhre] [Trojan.Win32.Buzus.108032.D[h]] [PE:Trojan.Killav!1.9D95] [Troj/Buzus-FX] [TrojWare.Win32.NTRootkit.BJ] [Win32.HLLW.Autoruner.45767] [Trojan.Buzus.Win32.54775] [WORM_YMINKY.SMRP] [BehavesLike.Win32.Backdoor.cc] [Trojan/Buzus.oqp] [W32/Delf.EP!worm] [Trojan/Win32.Buzus] [Trojan.Graftor.Elzob.676] [Backdoor/Win32.Hupigon] [Worm:Win32/Yeltminky.A] [W32/Autorun.worm.bby] [BScope.P2P-Worm.Palevo] [Trojan-PWS.Win32.Lmir] [Worm.Win32.AutoRun.gcpj]

Domain > 168mv.cn

Is this malicious?

Files that talk to 168mv.cn

Whois

DNS Resolutions

Port 80