Domain > hao.360.cn

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to hao.360.cn

MD5	A/V
897cf98652a11beb0e220ee423aa3e95	[Artemis!897CF98652A1] [Trojan.Chad.DRP] [WS.Reputation.1] [TR/Dldr.Megone.tga] [Heuristic.BehavesLike.Win32.Suspicious-PKR.G] [Troj/StartP-HV] [Trojan[Backdoor]/Win32.ZAccess] [PE:Trojan.Crypt!6.191F] [not-a-virus:Downloader.NSIS] [W32/StartP.HV!tr] [Hacktool.Win32.Downloader.aU]
14c29746aefcc82fa5a48c893eec681a	[Artemis!14C29746AEFC] [Trojan.Chad.DRP] [WS.Reputation.1] [PE:Trojan.Crypt!6.191F] [Troj/StartP-HV] [TR/Dldr.Megone.tga] [Heuristic.BehavesLike.Win32.Suspicious-PKR.G] [Trojan[Backdoor]/Win32.ZAccess] [TrojanDownloader:Win32/Hicrazyk.B] [NSIS/TrojanDownloader.Grinidou.I] [not-a-virus:Downloader.NSIS] [Hacktool.Win32.Downloader.aFtK]
b93f2df287a3db133ce8755c275e6f4d	[Artemis!B93F2DF287A3] [PUA.Downloader!] [Win32.Trojan.Falsesign.Pezn] [TR/Rogue.992944.1] [Trj/CI.A] [Trojan.SuspectCRC]
b0256073f5a4fb26587cc848c8b705dc	[Artemis!B0256073F5A4] [Trojan-Clicker.Win32.StartPage.w] [Trojan.Win32.SMSSend.czvatx] [Trojan.SMSSend.4698] [Trojan[Clicker]/Win32.StartPage] [Win32.Troj.StartPage.w.(kcloud)] [Win32.Trojan.Falsesign.Pber] [Trojan.Win32.Phires] [Win32/Trojan.Clicker.915]
f41b106ab531f6a1f8e7b14fdd1f44ae	[Artemis!F41B106AB531] [Trojan.Chad.DRP] [WS.Reputation.1] [TR/Dldr.Megone.tga] [Troj/StartP-HV] [Trojan[Backdoor]/Win32.ZAccess] [TrojanDownloader:Win32/Hicrazyk.B] [PE:Trojan.Crypt!6.191F] [not-a-virus:Downloader.NSIS] [W32/StartP.HV!tr] [Hacktool.Win32.Downloader.Anm]
f01f12f5021c3f6e8aa96dbcf556c0f2
3e5e6f3a129ee402b5fd96d07cb7f442
d2d09c47d1874e22ca69b7495d0c5fe6	[Trojan.AD194A8BB] [PE:Malware.Obscure/Heur!1.9E03[F1]]
6141de78ec32b96c8550ba67c67f40b8
048a89c0084460743267aea9755b0b47	[W32.Clod278.Trojan.3cb4] [Win32.Trojan-Downloader.VB.r] [Heur.AdvML.C] [Trojan.Win32.Symmi.dxnzcl] [Trojan.Win32.S.Downloader.20480.UO[h]] [Troj/Paskod-B] [Downloader.VB.Win32.96572] [Trojan-FFJD!048A89C00844] [TrojanDownloader:Win32/Tinub.C] [Trojan.VB.Downloader.196] [Trojan/Win32.Downloader] [Trojan-FFJD!048A89C00844] [Trj/CI.A] [Trojan.DL.VB!hRR6prWEt1U] [Trojan-Downloader.Win32.VB] [W32/VBObfus.M!tr] [Win32/VBCrypt] [Trojan.Win32.VB.Bqqk] [Win32/Trojan.df2]
20839486bd251f9000cea193ada1eb1e
5147032b85c1ee42017a7e1911415f39	[Trojan.CryptoWall] [Trojan/Filecoder.co] [Trojan.Kazy.D88AFE] [Win32.Trojan.WisdomEyes.151026.9950.9993] [W32/S-014aa685!Eldorado] [Heur.AdvML.C] [Win32/Filecoder.CryptoWall.D] [Ransom_Crowti.R00XC0DFT16] [Trojan.Win32.ZPACK.doclve] [Trojan.Encoder.514] [Trojan.Foreign.Win32.48786] [Ransom_Crowti.R00XC0DFT16] [Troj/Wonton-NV] [W32/S-014aa685!Eldorado] [Trojan/Foreign.xgc] [TR/Crypt.ZPACK.105871] [Trojan[Ransom]/Win32.Foreign] [Ransom:Win32/Crowti!rfn] [Trojan/Win32.Crowti.R135311] [Win32/Crowti.dKeJEKC] [Hoax.Foreign] [Spyware.Filecoder.CO] [Win32.Trojan.Filecoder.Ssqp] [Trojan.Win32.Filecoder] [W32/Kryptik.DAAI!tr] [Crypt3.CERK]
afc0b84ffe85d54e14003031545a3ccd
68e53157154216558ff02d6f3d43fee9	[Trojan.AdLoad.CN] [Trojan.Graftor.D47052] [Heur.AdvML.B] [TrojanDropper.Injector.bjta] [Trojan.Win32.Tonmye]

Whois

Property	Value
Organization	北京奇虎科技有限公司
Email	caoshu@360.cn
NameServer	ns4.360safe.com
Created	2003-03-17 12:20:05
Expires	2016-03-17 12:48:36

DNS Resolutions

Date	IP Address
2013-04-01	209.177.92.21 (ClassC)
2013-04-01	113.31.42.4 (ClassC)
2013-04-01	125.39.187.24 (ClassC)
2013-04-01	122.143.8.140 (ClassC)
2013-04-01	209.177.82.37 (ClassC)
2013-04-01	125.39.187.25 (ClassC)
2013-04-01	209.177.82.39 (ClassC)
2013-04-09	113.31.42.3 (ClassC)
2013-04-20	124.95.150.207 (ClassC)
2013-04-20	122.143.24.2 (ClassC)
2013-04-20	180.210.234.4 (ClassC)
2013-04-20	221.204.248.92 (ClassC)
2013-05-27	182.118.46.142 (ClassC)
2013-05-27	123.235.32.3 (ClassC)
2013-05-27	182.118.12.185 (ClassC)
2013-07-29	54.230.88.247 (ClassC)
2013-08-19	54.230.120.138 (ClassC)
2013-09-05	54.230.6.159 (ClassC)
2013-09-11	54.230.122.226 (ClassC)
2013-10-13	54.230.90.187 (ClassC)
2013-10-23	54.230.91.113 (ClassC)
2013-11-20	54.230.120.81 (ClassC)
2013-11-21	54.230.122.91 (ClassC)
2013-11-25	54.230.5.231 (ClassC)
2013-11-26	54.230.90.158 (ClassC)
2013-11-26	54.230.88.251 (ClassC)
2013-11-27	54.230.7.24 (ClassC)
2013-11-27	54.230.5.205 (ClassC)
2013-11-27	54.230.7.27 (ClassC)
2013-11-27	54.230.120.228 (ClassC)
2013-11-27	54.230.7.94 (ClassC)
2013-11-27	54.230.6.186 (ClassC)
2013-11-28	54.230.88.16 (ClassC)
2013-12-02	205.251.253.24 (ClassC)
2013-12-03	54.230.91.252 (ClassC)
2013-12-05	54.230.90.85 (ClassC)
2013-12-09	54.230.89.50 (ClassC)
2013-12-10	205.251.253.29 (ClassC)
2013-12-10	54.230.90.83 (ClassC)
2013-12-16	54.230.89.64 (ClassC)
2013-12-18	54.230.88.168 (ClassC)
2013-12-18	216.137.39.5 (ClassC)
2013-12-21	54.230.88.61 (ClassC)
2013-12-28	101.199.103.209 (ClassC)
2013-12-28	106.120.160.253 (ClassC)
2014-01-01	106.120.160.239 (ClassC)
2014-02-12	111.206.81.234 (ClassC)
2014-05-01	101.4.60.209 (ClassC)
2014-05-02	101.4.60.208 (ClassC)
2014-05-09	111.206.81.234 (ClassC)
2019-02-16	104.192.110.198 (ClassC)
2019-06-09	111.206.66.62 (ClassC)
2019-11-03	36.110.236.68 (ClassC)
2019-11-10	180.163.237.212 (ClassC)
2021-10-26	58.205.218.54 (ClassC)
2021-11-03	112.64.200.245 (ClassC)
2021-11-04	221.130.200.202 (ClassC)
2021-11-04	123.125.81.78 (ClassC)
2022-04-11	101.198.2.134 (ClassC)
2024-04-08	101.199.255.102 (ClassC)
2025-08-26	180.163.237.169 (ClassC)
2026-01-19	140.207.202.123 (ClassC)

Port 80

Subdomains

Date	Domain	IP
xiaohua.hao.360.cn	2014-08-27	8.37.233.6
huid.hao.360.cn	2014-05-09	101.199.103.128
weather.hao.360.cn	2014-05-09	220.181.158.235
cdn.shouji.weather.hao.360.cn	2025-06-02	104.192.108.192
cdn.weather.hao.360.cn	2013-04-01	113.31.42.3

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]