Domain > www.ztzj.cn

More information on this domain is in AlienVault OTX

Files that talk to www.ztzj.cn

MD5	A/V
f6c0b7207456a73936279c324961f887	[TrojanDropper.VB.HV3] [Trojan/VBKrypt.kkr] [Riskware] [Trojan.Win32.StartPage.cqjna] [Win32/VBKrypt.DQ] [Trojan.Win32.VBKrypt.kkr] [Trojan.VBKrypt!0FqkaZCJTtw] [BackDoor.Pigeon.61745] [TROJ_VBDROP.SMIA] [Heuristic.LooksLike.Win32.Suspicious.J!80] [Mal/StartP-Z] [Win32.Troj.VBKrypt.k.(kcloud)] [TrojanDropper:Win32/VB.HV] [Trojan.VBKrypt.kkr] [Trojan.Popsenong!3D9B] [Trojan.Win32.Pasta] [W32/VBDropper.XC!tr]
BF4F27A8002D8FA00D2403CA4002910D
c6b06c4c165cc63f334ab68f588a9b83	[TrojanDropper.VB.HV3] [Riskware] [Trojan] [Trojan/VBKrypt.kkr] [Trojan.Win32.StartPage.cqjna] [Win32/VBKrypt.DQ] [TROJ_VBDROP.SMIA] [Trojan.Win32.VBKrypt.kkr] [TrojWare.Win32.TrojanDropper.VB.NQT] [BackDoor.Pigeon.61745] [TR/StartPage.OR.98] [Heuristic.LooksLike.Win32.Suspicious.J!80] [Mal/StartP-Z] [Win32.Troj.VBKrypt.k.(kcloud)] [TrojanDropper:Win32/VB.HV] [Trojan.VBRA.03253] [Trojan.Win32.Pasta] [W32/VBDropper.XC!tr]
F5A1E78C044CE2F5B5A8D03A875E4218

Whois

Property	Value
Organization	武汉哦哟科技有限公司
Email	hzy2001@tom.com
NameServer	f1g1ns2.dnspod.net

DNS Resolutions

Date	IP Address
2013-04-01	202.105.176.72 (ClassC)
2013-04-28	118.123.116.101 (ClassC)
2013-05-26	121.9.213.243 (ClassC)
2016-09-08	107.167.19.74 (ClassC)
2016-10-19	107.167.19.76 (ClassC)
2017-10-23	203.78.142.12 (ClassC)
2018-03-12	103.24.205.97 (ClassC)
2018-05-25	47.90.43.141 (ClassC)
2019-02-05	117.25.139.121 (ClassC)
2019-02-20	104.193.88.77 (ClassC)
2019-02-20	104.193.88.123 (ClassC)
2024-10-31	172.67.155.201 (ClassC)
2024-11-03	104.21.34.72 (ClassC)
2024-11-23	172.66.0.102 (ClassC)
2024-12-24	104.21.16.1 (ClassC)
2025-01-21	104.21.112.1 (ClassC)
2025-02-12	104.21.80.1 (ClassC)
2025-03-07	104.21.48.1 (ClassC)
2025-04-30	104.21.96.1 (ClassC)
2025-08-26	104.18.1.39 (ClassC)
2025-08-30	104.18.0.39 (ClassC)
2025-09-13	154.207.79.238 (ClassC)
2025-11-18	154.207.79.248 (ClassC)
2025-12-18	154.207.79.230 (ClassC)
2025-12-29	154.207.79.229 (ClassC)
2026-01-20	154.207.79.218 (ClassC)
2026-01-25	154.207.79.216 (ClassC)

HTTP/1.1 403 ForbiddenDate: Sun, 03 Dec 2023 04:25:16 GMTContent-Type: text/html; charsetUTF-8Content-Length: 4300Connection: closeCross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy:

!DOCTYPE html>html langen-US>head>title>Just a moment.../title>meta http-equivContent-Type contenttext/html; charsetUTF-8>meta http-equivX-UA-Compatible contentIEEdge>meta namerobots contentnoindex,nofollow>meta nameviewport contentwidthdevice-width,initial-scale1>link href/cdn-cgi/styles/challenges.css relstylesheet>meta http-equivrefresh content105>/head>body classno-js>div classmain-wrapper rolemain>div classmain-content>noscript>div idchallenge-error-title>div classh2>span classicon-wrapper>div classheading-icon warning-icon>/div>/span>span idchallenge-error-text>Enable JavaScript and cookies to continue/span>/div>/div>/noscript>/div>/div>script>(function(){window._cf_chl_opt{cvId: 2,cZone: www.ztzj.cn,cType: non-interactive,cNounce: 36185,cRay: 82f90b72fabfeb47,cHash: f2228b21f6b1676,cUPMDTk: /?__cf_chl_tka2YVpPpMYJADp7kbX43tGFucb4vkWd6mBVbfsLTQZvE-1701577516-0-gaNycGzNBLs,cFPWv: b,cTTimeMs: 1000,cMTimeMs: 105000,cTplV: 5,cTplB: cf,cK: visitor-time,fa: /?__cf_chl_f_tka2YVpPpMYJADp7kbX43tGFucb4vkWd6mBVbfsLTQZvE-1701577516-0-gaNycGzNBLs,md: 7R84a.3eZht1bTpqIP177Orv4aVHElQeCI6H2iAA.VE-1701577516-0-ASKxBYvMT6rCny3atXgE07_tVvMvkVAuq9uLIRRzFkUZcH6-ZsWJqVf0--fIM3C-p2zxH_CSP4vksDGaL21D8D4wsWDp1YsCe3GaqXNm_PuWzoWTgt5KEvRvqsGqNtx34UHMa1jwukFNNklUSSpaXlVYHiiT9aMzJhk0IhsQUW4auqS_5VUrMwecPpyOqzMg-Dz-4wPCd8rMnzwV5978OWGBXF3HPBIX6ecKiLKWBxUlQTwuzY-oQd_PD3GwmW8WeaEwzMvY9vklWvHW8j__kfOdtu75mh_ODQai39TgIwLwn0q_spOOspL_Ne6LxOlmOc3qJQH20SuQvobWdaGRIs7FjIoDE2iekdMfSdlVFB71E8nO0OV6m_7AKm40yYn2jaZ3Q8Hf_lozqqQQvEXdRRPIJbPO227K1rt2JcRkL7Jw_bxNtCAHRNJMUAUf9ZxZS8L3qUuvrgnv7VWpWUEfeMEgNPTxDeMweIQ76SL-WYJI5UwwuFW7RYiUWO20ffzpKRN1IBfz0TJ5Us5lSkD42d-5RAeQHuv2sBtx1mfcFFrgYg0DFqxWU-4uQsZum0TVCO6Zow3dnB2LxOgdt4MqAAsmJeLeZ7uTPftk01I46_zqlYwBlreDS3qNDJevBDZLPf7s5Q0zpZgRswxFVwnMOAPQSF052GB_ticzegtLBM9mQNGRfBq2-m_gyIeXuFzueLgI8BWaYbTqiLpl_qBB0VWsLFFqV9qVJHdTIM1JfLNF-P6ndb9ZWl7BJQ0TuC5QIKvGmSv9OXs_8WvSSjhS5ubjKjNRkH5chN553Mz88R32Xvp_rhfILQhY3Bti-QHDjl89Fw2jje0OF4IsTrE6Q0kd-kohoZcjjYS3tp68lxfYVdsTIqLH3ySev9DVj1fmwzxuRrSkk_K3AKrpsq9stGTmLFzIZ5-c0eS

Port 443

HTTP/1.1 403 ForbiddenDate: Sun, 03 Dec 2023 04:25:16 GMTContent-Type: text/html; charsetUTF-8Content-Length: 5110Connection: closeCross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy:

!DOCTYPE html>html langen-US>head>title>Just a moment.../title>meta http-equivContent-Type contenttext/html; charsetUTF-8>meta http-equivX-UA-Compatible contentIEEdge>meta namerobots contentnoindex,nofollow>meta nameviewport contentwidthdevice-width,initial-scale1>link href/cdn-cgi/styles/challenges.css relstylesheet>meta http-equivrefresh content105>/head>body classno-js>div classmain-wrapper rolemain>div classmain-content>noscript>div idchallenge-error-title>div classh2>span classicon-wrapper>div classheading-icon warning-icon>/div>/span>span idchallenge-error-text>Enable JavaScript and cookies to continue/span>/div>/div>/noscript>/div>/div>script>(function(){window._cf_chl_opt{cvId: 2,cZone: www.ztzj.cn,cType: non-interactive,cNounce: 97335,cRay: 82f90b7359413096,cHash: c96d11fb622be0c,cUPMDTk: /?__cf_chl_tkXPuXtPKH5ybbTSDOMoch9MCl29hYytsqBK6NQYyP_Vk-1701577516-0-gaNycGzNB-U,cFPWv: b,cTTimeMs: 1000,cMTimeMs: 105000,cTplV: 5,cTplB: cf,cK: visitor-time,fa: /?__cf_chl_f_tkXPuXtPKH5ybbTSDOMoch9MCl29hYytsqBK6NQYyP_Vk-1701577516-0-gaNycGzNB-U,md: LUuwOLWc3lfk85UNrxehmZfOgoVPQ5U6dzWuX9.iRcc-1701577516-0-AY-mLGfhVRDU8uBuCee66WudQZ16_lxkvF0MiZ62IfQ-f79nM_4MW5bdDFXbfdxktZ5E27KIT4_8XK4lVx0Kf1oAgDDXDFVb57cMWmlRpGdE3yy-IxBwxpYSM-xphZa-X68HO_j7pOZqIt4jqoy97fkRFzZpVSk330X4_xVpjRXn6i5YjZOgCHl0iDCq9kbhAAaYYReZeJDGQVke87rMpMVUiwYqbt_TG5YotwLC0jyTxDxEt5-mCXnpIAAf1SzraBfhSxg3bfzhZP5nBHHFtzbh9Te7Ozaqog4FTa9nSoKAl-NQwiDq1SFfra8expE_3qRpdhryR4DvPIsa4cj7oKf2ybGqE7LvEwRnRDYqhb_Korz6WUseBS9Izr2zh5eZkccEuRmQwGvwLAwiOBJV9qABiyglaGA1vL-asawie79BL5O_aE51yzt1vz6hbDrN8vrgCIuEE8lu9zHj0WZ7Fca_P3l81rPfOvtL5twHJrjqfNrSPR79t19LqF4JXS0Zkgz9CbraZfE7C_5q1y-TixloELC0WBLOy2iqvOziLKk2743AnCUu73M4Y46X7Ehypc1ZaN4BdK-MOw6rqxyAZtTM1mdGjcqm_ubSvI4gxgH5JqogZAqQ2yOZRBgTIyAca7LIfFuMS3x342tL5PlCNyWSqhK7WjFjrgz0wXkr7lWtuqt06himktLkD5Y6Dt2Xfhp83s65eKcFlrodSaPQNbPMC3DduC1bZwUDSHDm8ELzbFA7Cc_4R2h7GKY7q3rsymxSkSiJe2NRHpKe8J7jGQJ_H5hVoW8H3L_YE6QtGNU3tKm1vAjrur4A_4dWhUgaEfaZrgYdG59ZYCx3K68lsWYyfl0KS5N_yLQ4XLcL_3eVZuosPG_0Z0aXKpfNwAS3rm7z_oNLXHpk_rAtsZScz_0_RkV6U1aTQhM

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > www.ztzj.cn

Is this malicious?

Files that talk to www.ztzj.cn

Whois

DNS Resolutions

Port 80

Port 443