hm.baidu.com - URL scan, 21 Aug 2026
MalwareAnalyzer by Cyble scanned hm.baidu.com and returned a unknown verdict (score -12). The page resolved to 14.215.183.79 on CHINANET Guangdong province network in CN. The domain was registered 9810 days ago through MarkMonitor Information Technology (Shanghai) Co., Ltd.. 1 domain and 1 IP were contacted. 23 malware samples communicate with this URL. This is a point-in-time observation from 21 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score -12) · Confidence 15%
- Scanned URL:
https://hm.baidu.com/hm.js?3f59711b6e16a4e8b6d8758e7eb0d66b - Domain: hm.baidu.com · IP: 14.215.183.79 · AS4134 · CN
- Server: apache
- HTTP status: 200 · text/plain; charset=utf-8
- Registrar: MarkMonitor Information Technology (Shanghai) Co., Ltd. · domain age 9810 days · created 1999-10-11
- TLS issuer: C=BE, O=GlobalSign nv-sa, CN=GlobalSign RSA OV SSL CA 2018 · valid to Jan 24 02: · subject C=CN, ST=Beijing, L=Beijing, O=Beijing Baidu Netcom Science Technology Co., Ltd., CN=baidu.com
- Evidenced operator: Beijing Baidu Netcom Science Technology Co., Ltd.
- Scan tier: fast · observed 2026-08-21 00:17:16 UTC
Malware communicating with this URL (23)
These samples were observed contacting or being served from hm.baidu.com. Each links to its full analysis.
- e0ddc6ff7a872010620a19ad7b3b26f32c45eceef3a04071cfd166d12acd7872 - referenced ·
e0ddc6ff7a872010620a19ad7b3b26f3· first seen 2026-08-21 - 48bad7016939a8cb78ffac64ef78eeee654141bc24127ea6bdf7e06ce75e7c2b - referenced ·
48bad7016939a8cb78ffac64ef78eeee· first seen 2026-08-20 - 54b42d5c52e78ee91dfc574d2893c0137f40a9d30bcd45c9bc48bd578729d337 - referenced ·
54b42d5c52e78ee91dfc574d2893c013· first seen 2026-08-20 - 562971644ffe3ab5868a001baf4563c6ac0ab6f238e14628142ef485d61fcb3c - referenced ·
562971644ffe3ab5868a001baf4563c6· first seen 2026-08-19 - 73d8de459d4cb33e21e4a2a19a48aa88bbe70c30adc734c618376073b5fdeeb1 - referenced ·
73d8de459d4cb33e21e4a2a19a48aa88· first seen 2026-08-16 - 4089e7a65b1df2d9be13c0462dafe0b713cec69641a214a7fcb6ca1a62525847 - referenced ·
4089e7a65b1df2d9be13c0462dafe0b7· first seen 2026-08-16 - 3cac416bd50b979aab6217f6f4706db990d2f144aabd57dd04897daa1d069842 - referenced ·
3cac416bd50b979aab6217f6f4706db9· first seen 2026-08-15 - f55c3048fbc1bb5cad750ebf0e886507413e13083cb308b0397866b9f17d5ade - referenced ·
f55c3048fbc1bb5cad750ebf0e886507· first seen 2026-08-15 - 739b868893617e4dd7933b5c675e639d8bee7b831eb809a08bda12066e7f0a70 - referenced ·
739b868893617e4dd7933b5c675e639d· first seen 2026-08-15 - a0bc56af8068c80d9d2e6a49406306dce372a7bb7f36681dffa7daaa3c049aad - referenced ·
a0bc56af8068c80d9d2e6a49406306dc· first seen 2026-08-15 - e91f5086b4e979eb2118f62c0c3a31b9f9d7536c8f1c9833d099e114e57188af - referenced ·
e91f5086b4e979eb2118f62c0c3a31b9· first seen 2026-08-14 - e8b3ef2acec859e800be975218771e597e53e7faaed56a0a28c681db7f19a823 - referenced ·
e8b3ef2acec859e800be975218771e59· first seen 2026-08-14 - 0e937ba616f17e62e22905205b60448d9409f05bb9f285a524568ac1f9477fbd - referenced ·
0e937ba616f17e62e22905205b60448d· first seen 2026-08-14 - fe30309744256c3fe326e26c17b04bb8878827888af476c1bc6a51d5e5ac129f - referenced ·
fe30309744256c3fe326e26c17b04bb8· first seen 2026-08-14 - ba0deb07124b42384feda3903763821b308ba8191af10b2afa7105404893c9e2 - referenced ·
ba0deb07124b42384feda3903763821b· first seen 2026-08-14
Why this verdict
- Valid TLS, no impersonation or off-origin credential post
Detected technologies
- Apache
Contacted infrastructure
- 14.215.183.79 - AS4134 CHINANET Guangdong province network (China)
Observed indicators
- hm.baidu.com
- 14.215.183.79
- https://hm.baidu.com/hm.js?3f59711b6e16a4e8b6d8758e7eb0d66b
Other scans of hm.baidu.com (10)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 23 Aug 2026 - unknown ·
http://nenayu.com/filespath/files/20210912030234.pdf - 23 Aug 2026 - unknown ·
https://googledrive.gustavodrivefilme.workers.dev/0:/ - 23 Aug 2026 - unknown ·
https://cloverapple.51aiops.com/ - 23 Aug 2026 - unknown ·
https://poppyapple.towardsmart.com/ - 23 Aug 2026 - unknown ·
https://hm.baidu.com/ - 23 Aug 2026 - unknown ·
https://www.d.cn/ - 23 Aug 2026 - suspicious ·
http://www.vvchem.com/buy/ - 23 Aug 2026 - unknown ·
http://www.vvchem.com/sell/ - 23 Aug 2026 - unknown ·
http://www.vvchem.com/products/ - 23 Aug 2026 - unknown ·
http://doingthing.com/downloads/blog/geust/files/fuxusuji.pdf
Questions about hm.baidu.com
- Is hm.baidu.com safe?
- The scan of hm.baidu.com on 21 Aug 2026 reached no verdict either way (score -12). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with hm.baidu.com?
- 23 analysed samples communicate with this URL.
- How was hm.baidu.com checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of hm.baidu.com
Scanned on MalwareAnalyzer by Cyble · Open interactive scan