Domain > shenguiling.com

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to shenguiling.com

MD5	A/V
3ef507d1df665739607d260625044a62
d3b22b9ce46132647a6422dba100ccd0
ffb716e2ed66381a02c31b05212c1305	[Trojan.ServStart.A] [Win.Trojan.Rincux-179] [DDoS.Attack.342] [Win32/ServStart.AD] [W32/ServStart.AA!tr] [Trojan.Win32.ServStart] [TrojanDownloader*Win32/Yemrok.A] [Troj/Dloadr-DNE] [Backdoor.Nitol] [WORM_NITOL.SMB] [Virus.EC90@2FF50FF15@124.mg] [BScope.Trojan.Win32.Inject.2]
d3165c2fbf55381545ae9f291dfa13a5	[Trojan.ServStart.A] [Win.Trojan.Rincux-179] [DDoS.Attack.342] [Win32/ServStart.AD] [W32/ServStart.AA!tr] [Trojan.Win32.ServStart] [TrojanDownloader*Win32/Yemrok.A] [Troj/Dloadr-DNE] [Backdoor.Nitol] [WORM_NITOL.SMB] [Virus.EC90@2FF50FF15@124.mg] [BScope.Trojan.Win32.Inject.2]
9d6aea743ff501e022f07b95a134b18a	[Trojan.ServStart.A] [Win.Trojan.Rincux-179] [DDoS.Attack.342] [Win32/ServStart.AD] [W32/ServStart.AA!tr] [Trojan.Win32.ServStart] [TrojanDownloader*Win32/Yemrok.A] [Troj/Dloadr-DNE] [Backdoor.Nitol] [WORM_NITOL.SMB] [Virus.EC90@2FF50FF15@124.mg] [BScope.Trojan.Win32.Inject.2]
dd656166002ac24afe36fea6c40ac974	[Trojan.ServStart.A] [Win.Trojan.Rincux-179] [DDoS.Attack.342] [Win32/ServStart.AD] [W32/ServStart.AA!tr] [Trojan.Win32.ServStart] [TrojanDownloader*Win32/Yemrok.A] [Troj/Dloadr-DNE] [Backdoor.Nitol] [WORM_NITOL.SMB] [Virus.EC90@2FF50FF15@124.mg] [BScope.Trojan.Win32.Inject.2]
d12ce7739e9d24b59ef3d4e31ea8470a	[Trojan.ServStart.A] [Win.Trojan.Rincux-179] [DDoS.Attack.342] [Win32/ServStart.AD] [W32/ServStart.AA!tr] [Trojan.Win32.ServStart] [TrojanDownloader*Win32/Yemrok.A] [Troj/Dloadr-DNE] [Backdoor.Nitol] [WORM_NITOL.SMB] [Virus.EC90@2FF50FF15@124.mg] [BScope.Trojan.Win32.Inject.2]
e265d2a15a0a0f73f8c5b217814ab8ca	[Trojan.ServStart.A] [Win.Trojan.Rincux-179] [DDoS.Attack.342] [Win32/ServStart.AD] [W32/ServStart.AA!tr] [Trojan.Win32.ServStart] [TrojanDownloader*Win32/Yemrok.A] [Troj/Dloadr-DNE] [Backdoor.Nitol] [WORM_NITOL.SMB] [Virus.EC90@2FF50FF15@124.mg] [BScope.Trojan.Win32.Inject.2]
4bad502f3805b734d1c31f4c41f663ea
8ce3bd7619c0310d526687542fcd163e	[Trojan-FHNO!8CE3BD7619C0] [Virus.EC90@2FF50FF15@124.mg] [Win32/ServStart.DT] [Backdoor.Nitol] [W32/ServStart.AA!tr] [TrojanDownloader*Win32/Yemrok.A] [Trojan.Win32.ServStart] [WORM_NITOL.SMB] [Troj/Dloadr-DNE] [Trojan.ServStart.A] [BScope.Trojan.Win32.Inject.2] [Win.Trojan.Rincux-179] [DDoS.Attack.342]
526ecde096ccaae5f398a387856369b3	[Trojan-FHNO!526ECDE096CC] [Virus.EC90@2FF50FF15@124.mg] [Win32/ServStart.DT] [Backdoor.Nitol] [W32/ServStart.AA!tr] [TrojanDownloader*Win32/Yemrok.A] [Trojan.Win32.ServStart] [WORM_NITOL.SMB] [Troj/Dloadr-DNE] [BScope.Trojan.Win32.Inject.2] [Trojan.ServStart.A] [Win.Trojan.Rincux-179] [DDoS.Attack.342]
068956ce6cf9da11bf778132e27cd223	[DDoS.Attack.342] [Win.Trojan.Rincux-179] [Trojan.ServStart.A] [BScope.Trojan.Win32.Inject.2] [WORM_NITOL.SMB] [Trojan.ServStart.Win32.7913] [W32/Trojan.GDCM-8370] [DDoS*Win32/Nitol.B] [W32/ServStart.AA!tr] [Backdoor.Nitol] [Win32/ServStart.DT] [Virus.EC90@2FF50FF15@124.mg] [Trojan-FHNO!068956CE6CF9]

Whois

Property	Value
Email	411486861@qq.com
NameServer	F1G1NS2.DNSPOD.NET
Created	2014-07-15 00:00:00
Changed	2014-07-15 00:00:00
Expires	2015-07-15 00:00:00
Registrar	XIN NET TECHNOLOGY C

DNS Resolutions

Date	IP Address
2015-05-15	-
2015-06-24	222.136.82.150 (ClassC)
2016-03-31	183.60.149.220 (ClassC)
2016-04-11	119.147.145.218 (ClassC)
2016-10-29	115.231.232.154 (ClassC)
2020-05-05	103.19.2.6 (ClassC)
2020-05-24	127.0.0.1 (ClassC)
2024-04-08	154.91.90.121 (ClassC)
2024-09-04	154.91.82.185 (ClassC)
2025-08-10	178.157.57.250 (ClassC)

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]