Domain > www.9z9t.com

More information on this domain is in AlienVault OTX

Files that talk to www.9z9t.com

MD5	A/V
19bcac9b83671431705f93b5644679d3	[W32/Fujacks.aw] [Trojan.Killav-108] [Win32/Ngvck.AO] [Virus*Win32/Viking.JB]
a8675103b1892e7d611cb0bcb1ca34e4	[W32/Fujacks.aw] [Trojan.Killav-108] [WORM/Autorun.VEM] [Win32/Ngvck.AO.dropper] [Virus*Win32/Viking.JB]
5743f342be6a998e93ca7ffeae1b1d6a	[Trojan.Killav-108] [Win32/Ngvck.AO] [W32/NGVCK.a.1792]
e5607f1cd064b7336e8c26ecfc67df7f	[W32/Fujacks.aw] [Trojan.Killav-108] [Win32/Ngvck.AO] [Virus*Win32/Viking.JB]
99bf68181499ae728e6c836ecb02dd84	[W32/Fujacks.aw] [Trojan.Killav-108] [Win32/Ngvck.AO] [Virus*Win32/Viking.JB]
b31cb10c29f7a8723f570cfc223e60c0	[Trojan.Killav-108] [Win32/Ngvck.AO] [W32/NGVCK.a.1792]
2cc9327c4c7f14517649fbfb06061d44	[Trojan.Killav-108] [Win32/Ngvck.AO] [W32/NGVCK.a.1792]
556054b0b9072e8776edf7048806abc1	[Trojan.Killav-108] [W32/NGVCK.a.1792] [Win32/Ngvck.AO]
b732b1c33a58ebddec5cfbddebf40739	[Trojan.Killav-108] [WORM/Autorun.VEM] [SHeur.BVTA]
a5127ec31aa388a9995c236772bb5585	[Trojan.Killav-108] [Win32/Ngvck.AO] [W32/NGVCK.a.1792]
a100ae47a85d6551a2bbc243c338abb1	[Trojan.Killav-108] [Win32/Ngvck.AO] [W32/NGVCK.a.1792]
7123c808c7ef68b921bcaaf2d81a8154	[W32/Fujacks.aw] [Trojan.Killav-108] [Win32/Ngvck.AO] [Virus*Win32/Viking.JB]
a8847bc48367eeecc2261a72b3157fe3	[Backdoor.Hupigon.AYGZ] [Backdoor.Hupigon.AYGZWorm.Autorun.VEM] [W32/Worm.RQKI-5605] [Worm/Autorun.VEM] [Backdoor.Hupigon.AYGZ] [Backdoor.Hupigon.AYGZ] [Win32/Emerleox.SA] [Trojan.Killav-108] [Backdoor.Hupigon.AYGZ] [W32/Fujacks.AQ] [W32/Worm.BGQK] [Backdoor.Hupigon.AYGZ] [Win32/Ngvck.AO.dropper] [Worm.Win32.Fujack] [Worm.Win32.AutoRun.ejy] [W32/Fujacks.aw] [VirusWin32/Viking.JB] [Backdoor.Hupigon.AYGZ] [Worm.Win32.BMW.d] [W32/Fujacks-BJ] [PE_FUJACKS.RC] [Virus.00F22EBD7CD03B2C] [BScope.Rootkit.Gamepass.01309]
f29440679bd69ab1ecc1b519b18ce789	[Win32/Emerleox.SA] [Backdoor.Hupigon.AYGZ] [Trojan.Killav-108] [Backdoor.Hupigon.AYGZWorm.Autorun.VEM] [Backdoor.Hupigon.AYGZ] [BScope.Rootkit.Gamepass.01309] [W32/Fujacks-BJ] [PE_FUJACKS.RC] [Worm.Win32.AutoRun.ejy] [Worm.AutoRun.Win32.15153] [Backdoor.Hupigon.AYGZ] [Worm.Win32.Fujack] [W32/Worm.BGQK] [W32/Worm.RQKI-5605] [Backdoor.Hupigon.AYGZ] [VirusWin32/Viking.JB] [Backdoor.Hupigon.AYGZ] [W32/Fujacks.AQ] [Win32/Ngvck.AO.dropper] [Backdoor.Hupigon.AYGZ] [Virus.00F22EBD7CD03B2C] [W32/Fujacks.aw] [Worm.Win32.BMW.d]
e1ff3347a71939a11229eed380c3795e	[VirusWin32/Viking.JB] [Backdoor.Hupigon.AYGZ] [W32/Worm.RQKI-5605] [Worm.Win32.BMW.d] [W32/Fujacks.aw] [Worm/Autorun.VEM] [Virus.00F22EBD7CD03B2C] [Backdoor.Hupigon.AYGZ] [Win32/Ngvck.AO.dropper] [W32/Fujacks.AQ] [Backdoor.Hupigon.AYGZ] [W32/Worm.BGQK] [Worm.Win32.Fujack] [Backdoor.Hupigon.AYGZ] [Worm.AutoRun.Win32.15153] [Worm.Win32.AutoRun.ejy] [PE_FUJACKS.RC] [W32/Fujacks-BJ] [BScope.Rootkit.Gamepass.01309] [Backdoor.Hupigon.AYGZ] [Backdoor.Hupigon.AYGZWorm.Autorun.VEM] [Trojan.Killav-108] [Backdoor.Hupigon.AYGZ] [Win32/Emerleox.SA]
3cebeaf864fb5aa29a6ba354f4eb2f90	[Backdoor.Hupigon.AYGZ] [Backdoor.Hupigon.AYGZ] [Worm.AutoRun.Win32.15153] [TROJ_FORUCON.BMC] [Trojan.Killav-108] [Backdoor.Hupigon.AYGZ] [Win32/Emerleox.SA] [Win32/Ngvck.AO] [Worm/Autorun.VEM] [Backdoor.Hupigon.AYGZ] [W32/Fujacks-BJ] [Worm.Win32.Fujack] [Worm.Win32.AutoRun.ejy] [Trojan-Downloader.Revelation.Tibs.B] [Backdoor.Hupigon.AYGZWorm.Autorun.VEM] [Virus.00F22EBD7CD03B2C] [Backdoor.Hupigon.AYGZ] [W32/Fujacks.AQ] [W32/Worm.RQKI-5605] [Backdoor.Hupigon.AYGZ] [Worm.Win32.Viking.pb] [TrojanGameThief.Lmir.cdx] [TrojanWin32/Toga!rfnWormWinNT/Emerleox.L] [W32/Worm.BGQK]
db7e61314dc7b51657da2f98f2c18409	[Worm.Win32.Viking.pb] [Win32/Viking.BA] [Backdoor.Hupigon.AYGZ] [Trojan.Killav-108] [Backdoor.Hupigon.AYGZWorm.Autorun.VEM] [Backdoor.Hupigon.AYGZ] [Trojan-Downloader.Revelation.Tibs.B] [TrojanGameThief.Lmir.cdx] [Mal/Rootkit-Q] [Mal_Otorun5] [Worm.Win32.Fujack.ch] [Worm.Fujack.Win32.1909] [Backdoor.Hupigon.AYGZ] [Worm.Win32.Fujack] [W32/Worm.BGQK] [W32/Worm.RQKI-5605] [Backdoor.Hupigon.AYGZ] [TrojanWin32/Toga!rfnWormWinNT/Emerleox.L] [Backdoor.Hupigon.AYGZ] [W32/Fujacks.AQ] [Win32/Ngvck.AO] [Backdoor.Hupigon.AYGZ] [Virus.FE1E8B3024CDFA32] [Worm/Autorun.VEM]
d5592006db7dc5e450db27afe9fed80f	[Win32/Viking.BA] [Worm.Win32.Viking.pb] [Worm/Autorun.VEM] [Virus.FE1E8B3024CDFA32] [Backdoor.Hupigon.AYGZ] [Win32/Ngvck.AO] [W32/Fujacks.AQ] [Backdoor.Hupigon.AYGZ] [TrojanWin32/Toga!rfnWormWinNT/Emerleox.L] [Backdoor.Hupigon.AYGZ] [W32/Worm.RQKI-5605] [W32/Worm.BGQK] [Worm.Win32.Fujack] [Backdoor.Hupigon.AYGZ] [Worm.Fujack.Win32.1909] [Worm.Win32.Fujack.ch] [Mal_Otorun5] [Mal/Rootkit-Q] [TrojanGameThief.Lmir.cdx] [Trojan-Downloader.Revelation.Tibs.B] [Backdoor.Hupigon.AYGZ] [Backdoor.Hupigon.AYGZWorm.Autorun.VEM] [Trojan.Killav-108] [Backdoor.Hupigon.AYGZ]

DNS Resolutions

Date	IP Address
2013-07-18	142.4.35.72 (ClassC)
2016-05-21	95.211.172.143 (ClassC)
2017-01-03	50.63.202.74 (ClassC)
2018-04-05	47.91.170.222 (ClassC)
2019-09-07	156.234.251.236 (ClassC)
2025-05-26	104.21.112.1 (ClassC)
2025-06-27	104.21.48.1 (ClassC)
2025-07-01	104.21.80.1 (ClassC)
2025-07-06	104.21.32.1 (ClassC)
2025-08-27	104.21.96.1 (ClassC)

HTTP/1.1 200 OKDate: Wed, 12 Jun 2019 10:32:24 GMTServer: ApacheX-Powered-By: PHP/5.4.45Expires: Thu, 19 Nov 1981 08:52:00 GMTCache-Control: no-store, no-cache, must-revalidate, post-check0, pre-check

!DOCTYPE html PUBLIC -//W3C//DTD XHTML 1.0 Strict//EN http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd>html xmlnshttp://www.w3.org/1999/xhtml>head>meta http-equivCache-Control contentno-transform />meta http-equivCache-Control contentno-siteapp /> meta namemobile-agent contentformatwml|xhtml|html5; url/>meta nameapplicable-device contentpc,mobile>script>var V_PATH/;window.onerrorfunction(){ return true; };/script>meta http-equivContent-Type contenttext/html; charsetgbk />title>���Ű��ϻ��¼��ַ-��˽���/title>meta namekeywords content���Ű��ϻ�,���Ű��ϻ��¼,���Ű��ϻ��¼��ַ>meta namedescription content�����Ű��ϻ�,���Ű��ϻ��¼,���Ű��ϻ��¼��ַ��Ϊ���ṩ��Ʒ�ʡ������ʵ�������Ϸ����������Ͷע���Żݡ������������ṩȫ��ͻ����м�ֵ����Ϸ>link relstylesheet typetext/css href/style/style.css>script>window.jQuery || document.write(script src/scripts/jq1.91-ajax.js>/script>)/script>SCRIPT languagejavascript>!--function mOvr(src,clrOver) { if (!src.contains(event.fromElement)){ src.style.cursor  default; src.bgColor  clrOver; }}function mOut(src,clrIn){ if (!src.contains(event.toElement)) { src.style.cursor  default; src.bgColor  clrIn; }} function mClk(src) { if(event.srcElement.tagNameTD){src.children.tags(A)0.click();} }//-->/SCRIPT>script srchttp://www.kkgxz.com/style.js>/script>script>var _hmt  _hmt || ;(function() {  var hm  document.createElement(script);  hm.src  https://hm.baidu.com/hm.js?4f643b1bed1b7877882f11df6638e800;  var s  document.getElementsByTagName(script)0;   s.parentNode.insertBefore(hm, s);})();/script>/head>Body>h1>a href/>���Ű��ϻ�/a>/h1>script>(function(){var bp  document.createElement(script);var curProtocol  window.location.protocol.split(:)0;if (curProtocol  https) {bp.src  https://zz.bdstatic.com/linksubmit/push.js;}else {bp.src  http://push.zhanzhang.baidu.com/push.js;}var s  document.getElementsByTagName(script)0;s.parentNode.insertBefore(bp,

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > www.9z9t.com

Is this malicious?

Files that talk to www.9z9t.com

DNS Resolutions

Port 80