Help RSS API Feed Maltego Contact                        

Domain > hub5pr.hz.sandai.net

More information on this domain is in AlienVault OTX

Is this malicious?
Most users have voted this as MALICIOUS

Files that talk to hub5pr.hz.sandai.net
MD5A/V
cf75fa2ae7be234b6e79aee438aa930e
8626c057ea7f91dfcadc0c2036e38407
902fa7e87e8b186a40a364236ef2c732
46a8d9eeed6e27bf485f1f3c86d7dbcd
8f2b938e14f7e1a852f299191ba4feb5[W32.HfsAdware.170E] [Adware.SpeedingUpMyPC.Win32.403] [Trojan.Nsis.Sogou.dylwew] [Win.Trojan.Sogou] [not-a-virus:Downloader.Win32.Sogou.g] [Application.Win32.Sogou.B] [BackDoor.Gbot.2817] [Adware.Sogou] [Artemis!PUP] [RiskWare[Downloader]/Win32.Sogou.g] [Win32.Application.Sogou.A] [Artemis!8F2B938E14F7] [Adware.Sogou] [Downloader.Sogou] [not-a-virus:Downloader.Sogou]
bc886f93a364b7c550e55125a54c54dd
5aa6a243a30da0e024a179ab9a67333c
8d324e0949ae72820cbb0454645af647[Artemis!8D324E0949AE] [W32/Trojan.CZYU-2749] [Downloader] [Trojan.Win32.Z.Zusy.1968640[h]] [UnclassifiedMalware] [BehavesLike.Win32.Dropper.th] [Trojan.Zusy.D2BA7C] [Trj/GdSda.A] [Win32.Adware.Downloader.Auto] [Atros3.AHBM]
3e9161c04f171db253b980d547692732[W32/Trojan.JBIS-2793] [not-a-virus:AdWare.Win32.Sogou.q] [Trojan.Win32.DownLoader19.ebcgea] [Trojan.Win32.Z.Psw.2289664[h]] [UnclassifiedMalware] [Trojan.DownLoader19.60199] [Tool.Chindo.Win32.217] [BehavesLike.Win32.PackedAP.vc] [Adware/Win32.Download] [Win32.Trojan.Downloader.Qzof] [RiskWare.Chindo!] [Trojan.Win32.PSW] [Riskware/Chindo] [Trj/CI.A]

Whois
PropertyValue
Email wkn@sandai.net
NameServer NS2.XUNLEI.NET
Created 2003-01-27 00:00:00
Changed 2013-08-01 00:00:00
Expires 2017-01-27 00:00:00
Registrar HICHINA ZHICHENG TEC

DNS Resolutions
DateIP Address
2013-04-0158.254.134.238 (ClassC)
2017-05-0158.254.134.150 (ClassC)
2017-05-0158.254.134.233 (ClassC)
2017-05-0258.254.134.138 (ClassC)
2017-06-1058.254.134.136 (ClassC)
2017-06-1458.254.134.137 (ClassC)
2019-06-10119.188.108.16 (ClassC)
2019-06-10119.188.108.17 (ClassC)
2019-06-10119.188.108.13 (ClassC)
2019-06-10119.188.108.18 (ClassC)
2019-06-10119.188.108.14 (ClassC)
2019-06-10119.188.108.19 (ClassC)
2019-06-10119.188.108.15 (ClassC)
2019-06-10119.188.108.20 (ClassC)
2019-08-1547.92.195.246 (ClassC)
2019-08-1547.92.125.145 (ClassC)
2019-08-1547.92.39.6 (ClassC)
2019-08-1547.92.169.85 (ClassC)
2019-08-1547.92.171.207 (ClassC)
2019-08-1547.92.194.216 (ClassC)
2024-12-20116.132.219.22 (ClassC)
2024-12-25140.206.220.33 (ClassC)

Subdomains
DateDomainIP
twin14528vm6.sandai.net2015-02-11111.161.125.232
lb1.c0367.sandai.net2014-01-1458.251.57.175
lb1.c04028.sandai.net2014-09-16163.177.79.253
sr.m.hub.sandai.net2024-05-09112.64.218.40
idx.m.hub.sandai.net2024-05-16112.64.218.40
cncidx.m.hub.sandai.net2024-07-13112.64.218.154
master.hub.sandai.net2024-05-10112.64.218.154
cdn.vabs.hub.sandai.net2023-12-04222.73.33.248
m.v6.shub.sandai.net2024-06-16116.132.219.184
cnc.m.v6.shub.sandai.net2024-08-31116.132.218.191
hub5btmain.v6.shub.sandai.net2024-06-16112.64.218.40
hub5sr.v6.shub.sandai.net2024-06-02116.132.219.184
hub5emu.v6.shub.sandai.net2024-08-15116.132.219.184
hub5idx.v6.shub.sandai.net2024-06-02116.132.219.184
hub5sr.shub.sandai.net2015-03-24123.129.242.139
hub5idx.shub.sandai.net2014-04-30123.129.242.139
hub5c.sandai.net2024-06-29112.64.218.64
hub5btmain.em.sandai.net2013-11-05123.129.242.139
hub5pn.em.sandai.net2024-04-07153.3.232.174
hub5sr.em.sandai.net2024-10-02180.163.203.6
hub5u.em.sandai.net2024-09-0247.92.164.165
hub5emu.em.sandai.net2024-07-13180.163.203.6
hub5btmain.sandai.net2015-02-15123.129.242.139
hub5c.maxthon.sandai.net2024-07-30116.132.223.136
hub5t.maxthon.sandai.net2024-06-28116.132.219.184
hub5u.maxthon.sandai.net2024-12-1047.102.130.81
hub5c.union.sandai.net2024-06-16112.64.218.64
ftp.union.sandai.net2024-04-2561.160.227.237
hub5t.union.sandai.net2024-05-16116.132.219.184
hub5u.union.sandai.net2024-12-2247.102.130.81
hub5pn.sandai.net2014-09-30182.118.14.152
g1.hub5pn.sandai.net2024-06-1358.144.251.1
g2.hub5pn.sandai.net2024-04-08123.6.27.68
g3.hub5pn.sandai.net2024-04-08111.206.4.194
xzb.hub5pn.sandai.net2024-04-08111.206.4.164
cnc.hub5pn.sandai.net2024-09-18220.202.21.136
g1.cnc.hub5pn.sandai.net2024-09-07111.206.4.195
g2.cnc.hub5pn.sandai.net2024-07-1058.144.251.1
g3.cnc.hub5pn.sandai.net2024-06-28111.206.4.195
down.sandai.net2014-02-04112.80.23.153
game4.down.sandai.net2014-03-11112.80.23.132
mac.down.sandai.net2024-06-13180.163.207.107
upgrade.down.sandai.net2024-10-15180.97.147.12
patch.down.sandai.net2024-07-04180.163.145.201
m.down.sandai.net2014-01-2958.222.24.240
com.down.sandai.net2023-11-30101.226.26.218
xmp.down.sandai.net2014-02-06112.80.23.131
down.co.sandai.net2014-02-14112.80.23.160
xmp.down.co.sandai.net2015-02-11112.87.43.16
hub5btmain.wap.sandai.net2024-06-02116.132.218.191
hub5pn.wap.sandai.net2024-04-17211.91.242.37
hub5sr.wap.sandai.net2024-06-16116.132.223.136
hub5u.wap.sandai.net2024-08-1547.102.130.81
hub5emu.wap.sandai.net2024-07-30112.64.218.64
hub5pr.sandai.net2024-11-07140.206.220.33
hub5sr.sandai.net2013-09-03123.129.242.139
cnchub5sr.sandai.net2024-05-17116.132.219.184
hub4t.sandai.net2024-05-16116.132.223.136
hub5t.sandai.net2014-09-30123.129.242.139
hub5u.sandai.net2024-12-2247.102.130.81
cnchub5u.sandai.net2024-09-04116.132.255.125
hub5emu.sandai.net2015-05-13123.129.242.139
02.rcv.sandai.net2014-11-14119.189.1.39
www.sandai.net2024-11-29112.124.227.84
score.phub.hz.sandai.net2014-11-06163.177.79.152
relay.phub.hz.sandai.net2014-11-0658.254.134.245
hub5sr.shub.hz.sandai.net2024-06-16112.64.218.40
hub5idx.shub.hz.sandai.net2024-07-13112.64.218.64
hub5c.hz.sandai.net2014-11-06123.129.242.140
hub5pnc.hz.sandai.net2014-11-06119.188.108.56
hub5pn.hz.sandai.net2019-10-14118.212.146.21
pmap.hz.sandai.net2014-11-06122.143.5.59
hub5pr.hz.sandai.net2019-06-10119.188.108.13
imhub5pr.hz.sandai.net2019-08-15121.9.209.150
hub5sr.hz.sandai.net2019-08-07112.87.43.227
hubstat.hz.sandai.net2014-11-06123.129.242.154
hub5u.hz.sandai.net2014-11-0658.254.134.201
View on OTX | View on ThreatMiner








Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]



� Copyright 2019 AlienVault, Inc. | Legal| Status| Do Not Sell My Personal Information