Help RSS API Feed Maltego Contact                        

Domain > hub5sr.shub.hz.sandai.net

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to hub5sr.shub.hz.sandai.net

MD5A/V
cf75fa2ae7be234b6e79aee438aa930e
46a8d9eeed6e27bf485f1f3c86d7dbcd
8f2b938e14f7e1a852f299191ba4feb5[W32.HfsAdware.170E] [Adware.SpeedingUpMyPC.Win32.403] [Trojan.Nsis.Sogou.dylwew] [Win.Trojan.Sogou] [not-a-virus:Downloader.Win32.Sogou.g] [Application.Win32.Sogou.B] [BackDoor.Gbot.2817] [Adware.Sogou] [Artemis!PUP] [RiskWare[Downloader]/Win32.Sogou.g] [Win32.Application.Sogou.A] [Artemis!8F2B938E14F7] [Adware.Sogou] [Downloader.Sogou] [not-a-virus:Downloader.Sogou]
5aa6a243a30da0e024a179ab9a67333c
8d324e0949ae72820cbb0454645af647[Artemis!8D324E0949AE] [W32/Trojan.CZYU-2749] [Downloader] [Trojan.Win32.Z.Zusy.1968640[h]] [UnclassifiedMalware] [BehavesLike.Win32.Dropper.th] [Trojan.Zusy.D2BA7C] [Trj/GdSda.A] [Win32.Adware.Downloader.Auto] [Atros3.AHBM]

Whois

PropertyValue
Email wkn@sandai.net
NameServer NS2.XUNLEI.NET
Created 2003-01-27 00:00:00
Changed 2013-08-01 00:00:00
Expires 2017-01-27 00:00:00
Registrar HICHINA ZHICHENG TEC

DNS Resolutions

DateIP Address
2019-10-22112.87.43.228 (ClassC)
2019-11-08140.206.225.233 (ClassC)
2024-06-16112.64.218.40 (ClassC)
2025-04-12112.64.218.64 (ClassC)
2025-07-10116.132.218.191 (ClassC)
2025-07-14112.64.218.154 (ClassC)
2025-08-06116.132.219.184 (ClassC)

Port 80

Subdomains

DateDomainIP
score.phub.hz.sandai.net2014-11-06163.177.79.152
relay.phub.hz.sandai.net2014-11-0658.254.134.245
hub5sr.shub.hz.sandai.net2024-06-16112.64.218.40
hub5idx.shub.hz.sandai.net2024-11-07112.64.218.40
hub5c.hz.sandai.net2014-11-06123.129.242.140
hub5pnc.hz.sandai.net2014-11-06119.188.108.56
hub5pn.hz.sandai.net2019-10-14118.212.146.21
pmap.hz.sandai.net2014-11-06122.143.5.59
hub5pr.hz.sandai.net2019-06-10119.188.108.13
imhub5pr.hz.sandai.net2019-08-15121.9.209.150
hub5sr.hz.sandai.net2019-08-07112.87.43.227
hubstat.hz.sandai.net2014-11-06123.129.242.154
hub5u.hz.sandai.net2014-11-0658.254.134.201
View on OTX | View on ThreatMiner








Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]



� Copyright 2019 AlienVault, Inc. | Legal| Status| Do Not Sell My Personal Information