Domain > sanshuigood.vicp.cc

More information on this domain is in AlienVault OTX

Files that talk to sanshuigood.vicp.cc

MD5	A/V
e7b3ebf7fb62915a8748cf93d346b1ac	[Unix.Trojan.Elknot] [Backdoor.Linux.Ganiw.a] [Linux.BackDoor.Gates.6] [Linux/DDoS-BD]
f0254554c488afa4c4762a5fbc244271

Whois

Property	Value
Email	cyy@vavic.com
NameServer	NS2.EXHERA.COM
Created	2006-08-03 07:52:52
Changed	2015-04-08 00:40:12
Registrar	WEB COMMERCE COMMUNI

DNS Resolutions

Date	IP Address
2015-11-24	222.186.21.106 (ClassC)
2015-12-02	174.128.255.232 (ClassC)
2015-12-08	117.21.173.70 (ClassC)
2016-09-18	117.21.173.114 (ClassC)
2019-09-01	61.142.176.23 (ClassC)
2025-01-11	47.111.82.157 (ClassC)
2025-05-28	146.56.248.213 (ClassC)

Port 80

HTTP/1.1 200 OKServer: nginxDate: Sun, 23 Jun 2019 00:53:13 GMTContent-Type: text/htmlContent-Length: 1681Last-Modified: Thu, 10 Aug 2017 08:28:44 GMTConnection: keep-aliveAccept-Ranges: bytes

!DOCTYPE html>html>head>meta charsetutf-8>meta http-equivX-UA-Compatible contentIEEdge,chrome1>title>您的帐号未办理实名认证 - 暂时无法访问/title>link relstylesheet href//static.orayimg.com/css/style-2.2.21.css />link relstylesheet href//static.orayimg.com/peanuthull/css/peanuthull-2.2.10.css />script src//static.orayimg.com/js/jquery-1.7.2.js>/script>script src//static.orayimg.com/js/jquery.extend/jquery.window-1.1.2.js>/script>style>.noflow-wrap{	background:#2b3642 url(./img/unrealname_bg.jpg) no-repeat bottom center;}/style>/head>body>div classnoflow-wrap>	div classcontainer>		a hrefhttp://hsk.oray.com classlogo>			img src//static.orayimg.com/peanuthull/img/noflow_logo.png>		/a>		div classcontent-wrap stylepadding-top: 15%;>			p classtext stylefont-size: 32px;line-height: 48px;margin: 10px auto;>您的帐号span stylecolor:#ff0042;vertical-align: baseline>未办理实名认证/span>，span iddomainname stylevertical-align: baseline>/span>暂时无法访问/p>			p classtext stylefont-size: 18px;>遵《中华人民共和国网络安全法》规定，请尽快办理实名认证/p>			p classtel>如有疑问，请联系Oray客服：020-62219018/p>			div classbtn-wrap>				a stylemargin-left: 40px; hrefhttps://console.oray.com/account/real/ classbtn btn-primary target_blank>立即认证/a>			/div>		/div>	/div>/div>script>var host  location.host;if (host.indexOf(:) ! -1) {	hostArr  host.split(:);	host  hostArr0;}$(#domainname).html(host);/script>/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > sanshuigood.vicp.cc

Is this malicious?

Files that talk to sanshuigood.vicp.cc

Whois

DNS Resolutions

Port 80