Domain > niray.com.cn

More information on this domain is in AlienVault OTX

Files that talk to niray.com.cn

MD5	A/V
7c5548b8200650440848b5b47e56b2eb	[Artemis!7C5548B82006] [WS.Reputation.1] [Trojan.Win32.Cutwail.cgs] [UnclassifiedMalware] [BackDoor.Bulknet.1150] [TrojanDownloader:Win32/Cutwail.BS] [Trojan/Win32.Tepfer] [Trojan-Downloader.Win32.Cutwail] [W32/Cutwail.CGS!tr] [Trojan.Win32.Cutwail.Azpq]
33d59790d4d3544afd6451254ec798b1	[W32.DalverT.Trojan] [Backdoor/W32.Pushdo.89600.B] [Backdoor.Pushdo.rw4] [Spyware.ZeuS] [Trojan.Win32.Bulknet.czolua] [W32/Trojan2.OEJI] [Backdoor.Trojan] [Win32/Cutwail.CCE] [TROJ_CUTWAIL.YAI] [Backdoor.Win32.Pushdo.rmj] [Backdoor.Pushdo!XgbPif+v0XE] [Backdoor.Win32.A.Pushdo.89600] [UnclassifiedMalware] [BackDoor.Bulknet.1442] [Backdoor.Pushdo.Win32.715] [TR/Cutwail.A.75] [Mal/Zbot-QL] [Trojan[Backdoor]/Win32.Pushdo] [TrojanDownloader:Win32/Cutwail] [W32/Trojan.RRZR-0800] [Backdoor.Pushdo] [Trj/WLT.A] [Win32/Wigon.PH] [Win32.Backdoor.Pushdo.Lkxp] [Trojan.Cutwail] [W32/Pushdo.RMJ!tr.bdr] [Trojan.Win32.Wigon.bPH] [Win32/Trojan.3ea] [Backdoor.Pushdo.r4]
5345aff5ce85c0d99c484f2716071b7a	[Win32.Heur.KVMF58.hy.(kcloud)]
390fc8a6672ba631df610de3fc76ad22	[Heur.Win32.Veebee.1!O] [Trojan.LVBP.ED] [W32/Trojan2.OAPU] [TROJ_FORUCON.BMC] [Trojan-PSW.Win32.Tepfer.swki] [Trojan.PWS.Stealer.3128] [TR/Dropper.VB.7976] [W32/Trojan.VAGS-5670] [Trojan-PWS.Win32.Tepfer] [Trojan.Win32.InfoStealer.AY]
42d2401c479fc20e5d1d8c6efca7f19e	[Trojan.Downloader.JQRA] [Trojan.Cutwail.rw4] [RDN/Downloader.a!qm] [Trojan.Cutwail!mQbvvMquKfg] [W32/Trojan2.OEGP] [ZBot.UPRE] [Win32/Cutwail.ReCaaAD] [TROJ_SPNR.0BEM14] [Trojan.Win32.Cutwail.ctz] [Trojan.Win32.Cutwail.cydmbj] [UnclassifiedMalware] [BackDoor.Bulknet.1150] [TR/Jaik.1660.4] [Mal/Zbot-PT] [Trojan/Win32.Cutwail] [Win32.Troj.Cutwail.c.(kcloud)] [TrojanDownloader:Win32/Cutwail] [W32/Trojan.AFBM-0787] [Win32/Wigon.PI] [Trj/WLT.A] [Win32.Trojan.Cutwail.Pdmg] [Trojan-Downloader.Win32.Cutwail] [W32/Cutwail.CTZ!tr] [Trojan.Win32.Wigon.bPI] [Win32/Trojan.a00]
b84dc225a3c93b1a2a403a332a27257c	[W32.WingMaI.Trojan] [RDN/Downloader.a!qm] [WS.Reputation.1] [Cutwail.COY] [Backdoor.Win32.Pushdo.rmc] [Backdoor.Pushdo!JByiFQxqnkU] [TR/Cutwail.A.68] [Mal/Zbot-PY] [TrojanDownloader:Win32/Cutwail] [Trj/dtcontx.L] [Win32/Wigon.PI] [Win32.Backdoor.Pushdo.Pezl] [Trojan-Downloader.Win32.Cutwail] [W32/Wigon.PI!tr] [Backdoor.Win32.Pushdo.Awv] [Win32/Trojan.9f9]
901fd56bd89d217effeca7e998d48b8f	[BC.Heuristic.Trojan.SusPacked.BF-6.A] [Mal/EncPk-ZC] [Heuristic.LooksLike.Win32.SuspiciousPE.J!86] [TrojanDownloader.Upatre.A6] [Downloader-FVD!901FD56BD89D] [Trojan.Downloader] [Trojan.DL.Small!WegiOz7B/54] [W32/Trojan3.GJV] [Trojan.Zbot] [Upatre.X] [TROJ_UPATRE.BU] [Trojan.Win32.DownLoad3.cmcabg] [TrojWare.Win32.Spy.Zbot.ADCX] [TR/Yarwi.B.15] [TrojanDownloader:Win32/Upatre.A] [W32/Trojan.SXFM-2396] [Win32/TrojanDownloader.Small.AAB] [PE:Malware.FakePDF@CV!1.9C28] [Trojan.Injector] [Zbot.DFA] [Trojan.DownLoad3.28]
8043461e3d18f379dfd5c1d3dda25c6f	[TrojanDownloader.Cutwail.BS4] [PWS-FBOF!] [Spyware.Zbot] [Trojan.Cutwail!ksLthdR/J5A] [W32/Trojan2.OBNX] [Backdoor.Trojan] [Kryptik.CDDW] [Win32/Cutwail.CAK] [BKDR_PUSHDO.IP] [Trojan.Win32.Cutwail.chg] [Trojan.Win32.Cutwail.cucyjl] [Trojan.Win32.A.Cutwail.87552] [TrojWare.Win32.Spy.Zbot.FRIN] [Trojan.PWS.Panda.5756] [TR/Injector.90112.43] [Trojan/Cutwail.ab] [Trojan/Win32.Cutwail] [Win32.Troj.Cutwail.c.(kcloud)] [TrojanDownloader:Win32/Cutwail.BS] [Spyware/Win32.Zbot] [W32/Trojan.WQFW-5190] [Trj/WLT.A] [Win32/Wigon.PI] [Win32.Trojan.Cutwail.Dxcl] [Trojan-Downloader.Win32.Cutwail] [W32/Cutwail.CHG!tr] [SHeur4.BRVM] [Trojan.Win32.Cutwail.aG]
48c156b5fb7c17d44265886e05c84cb4	[W32.ApfixwitB.Trojan] [Backdoor.Pushdo.r4] [Trojan.Win32.Pushdo.cxsxde] [WS.Reputation.1] [ZBot.STQQ] [TROJ_SPNV.01DR14] [Backdoor.Win32.Pushdo.rln] [Trojan.Kryptik!Zvn35zSbM+Y] [UnclassifiedMalware] [Trojan.DownLoader11.6956] [TR/Dldr.Cutwail.BS.431] [Mal/Zbot-PT] [Trojan[Backdoor]/Win32.Pushdo] [TrojanDownloader:Win32/Cutwail.BS] [W32/Trojan.HDHP-3086] [Backdoor.Pushdo] [Win32.Backdoor.Pushdo.Pfjl] [Trojan-Dropper.Necurs] [W32/Pushdo.CAKI!tr.bdr] [Trojan.Win32.Kryptik.bCAKI] [Win32/Backdoor.f04]
005b480a6b845bbd5286e699c29b9426	[Backdoor.Bot] [BC.Heuristic.Trojan.SusPacked.BF-6.A] [Heuristic.LooksLike.Win32.Suspicious.J!81] [Win32/Heur] [Virus.Win32.Heur]
899636b5d06c3ad2fccb62462f16c072	[TR/Kryptik.dfs] [TrojanDownloader*Win32/Cutwail.BS]
f15be0daa762c12cda891a6390d77e86	[WS.Reputation.1] [TROJ_CRILOCK.RNT] [Backdoor.Win32.Pushdo.rks] [TR/Crypt.ZPACK.40047] [Trojan[Backdoor]/Win32.Pushdo] [W32/Pushdo.RKS!tr.bdr] [SHeur4.BTFZ]
c277ea5a86f25ac0b704caf5832fc614	[Trojan.Zbot] [Trojan/Win32.Zbot] [Trojan-PWS.Win32.Fareit] [W32/Zbot.QLVH!tr]
1dc798c5cda1dfb8e321e68f1cf116c4	[W32.DalverM.Trojan] [Trojan.Cutwail.r5] [RDN/Downloader.a!qr] [Trojan.Cutwail] [TROJ_CUTWAIL.YAJ] [Trojan.Win32.Cutwail.cuo] [Trojan.Cutwail!Dw5GluQCwY0] [UnclassifiedMalware] [BackDoor.Bulknet.1150] [Trojan/Win32.Cutwail] [TrojanDownloader:Win32/Cutwail.BS] [W32/Trojan.LTBF-7078] [Trj/CI.A] [Win32.Trojan.Cutwail.Eclb] [Trojan] [W32/Cutwail.CBPJ!tr] [Crypt3.OXR] [Trojan.Win32.Kryptik.BCBPJ] [Win32/Trojan.Multi.daf]
5b88188ee5306549b12d14aabea25e4f	[Cutwail-FCWE!5B88188EE530] [Trojan.Downloader] [Backdoor.Trojan] [Kryptik.CCOH] [TROJ_SPNV.01J013] [BackDoor.Bulknet.1150] [TR/Dldr.Cutwail.BS.274] [Trj/Ransom.BB] [TrojanDownloader:Win32/Cutwail.BS] [Backdoor/Win32.Trojan] [Win32/Wigon.PH] [Trojan-Downloader.Win32.Cutwail] [W32/Kryptik.BMDF] [Trojan.Win32.Kryptik.BMDF]
9e79c93a017e5a7232fb2c8de35d3d19	[RDN/Downloader.a!qh] [Spyware.ZeuS] [Trojan.Cutwail!YdjtHWnkh+w] [WS.Reputation.1] [ZBot.UPRE] [TROJ_CUTWAIL.XZQ] [Trojan.Win32.Cutwail.csw] [UnclassifiedMalware] [TR/Changeling.A.1489] [Mal/Zbot-PT] [TrojanDownloader:Win32/Cutwail] [Trojan/Win32.Cutwail] [W32/Trojan.IGDL-1304] [Trojan.Cutwail] [Win32/Wigon.PH] [Trojan-Dropper.Necurs] [W32/Cutwail.CSW!tr] [Trojan.Win32.Wigon.PH] [Win32/Trojan.Multi.daf]
175dcdd59c914b24d14c40a7e96786c1	[W32.Sality.PE] [Win32.Sality.3] [Trojan.Win32.Krap.1!O] [W32.Sality.U] [Virus.Sality.Win32.20] [Win32.Sality.BL] [W32.Sality.AE] [Sality.ZHB] [Win32/Sality.AA] [PE_SALITY.RL] [Win32:SaliCode] [Virus.Win32.Sality.beygb] [Win32.Sality.N] [Mal/Sality-D] [Win32.Sector.22] [W32/Sality.AT] [Heuristic.LooksLike.Win32.Suspicious.F] [Virus:Win32/Sality.AT] [Win32/Kashu.E] [Virus.Win32.Sality.bakc] [W32/Sality.AA] [Win32/Sality.NBA] [Virus.Win32.Sality] [Win32/Sality] [Virus.Win32.Sality.$Emu] [Win32/Trojan.1ef]
4811b6c64abcf7909a07eba5931d0a1d	[Spyware.Zbot.TE]
befb64cbe1dbd0d82dfbfe4d5ea6249a	[Packed.Win32.Katusha.1!O] [PWSZbot-FTJ!BEFB64CBE1DB] [Spyware.Zbot.ED] [Trojan.Win32.Cutwail.cuodvy] [Trojan.DownLoader9.48272] [Trojan/Win32.Cutwail] [Trojan.Cutwail]
7cdb7bd134239bf0fc686cdec723ff12	[Trojan] [Backdoor.Trojan] [TrojanDownloader:Win32/Cutwail] [W32/Backdoor.UMOH-9056] [Backdoor/Win32.Androm] [Win32/Wigon.PH] [W32/Wigon.PH] [Crypt2.BOOA] [Trojan.Win32.Kryptik.BMUN]

Whois

Property	Value
Organization	梁宇
Email	liangyuwangzhan@163.com
NameServer	f1g1ns2.dnspod.net
Created	2014-05-29 11:48:19
Expires	2015-05-29 11:48:19

DNS Resolutions

Date	IP Address
2013-09-27	118.144.82.146 (ClassC)
2013-12-17	112.125.17.103 (ClassC)
2014-07-03	23.110.217.141 (ClassC)
2014-11-04	182.16.23.214 (ClassC)
2019-08-15	142.54.161.123 (ClassC)
2019-09-06	173.208.141.20 (ClassC)
2024-05-17	154.219.101.70 (ClassC)
2025-05-27	45.205.221.209 (ClassC)
2025-07-07	47.91.170.222 (ClassC)
2025-07-12	47.76.127.217 (ClassC)
2026-01-08	108.186.253.226 (ClassC)

Port 80

HTTP/1.1 200 OKDate: Thu, 15 Aug 2019 23:28:19 GMTServer: Apache/2.4.18 (Ubuntu)Vary: Accept-EncodingContent-Length: 2313Content-Type: text/html; charsetUTF-8

!DOCTYPE html PUBLIC -//W3C//DTD XHTML 1.0 Transitional//EN http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd>html xmlnshttp://www.w3.org/1999/xhtml>head>meta http-equivContent-Type contenttext/html; charsetutf-8 />meta namedescription content您要找的内容已被删除 />title>未备案 阻断提示！/title>/head> body>div styledisplay: none>script typetext/javascript async src//js.users.51.la/20260911.js>/script> /div>script>(function() {    var canonicalURL, curProtocol;    //Get the link> tag    var x  document.getElementsByTagName(link);    //Find the last canonical URL    if (x.length > 0) {        for (i  0; i  x.length; i++) {            if (xi.rel.toLowerCase()  canonical && xi.href) {                canonicalURL  xi.href;            }        }    }    //Get protocol    if (!canonicalURL) {        curProtocol  window.location.protocol.split(:)0;    }    else {        curProtocol  canonicalURL.split(:)0;    }    //Get current URL if the canonical URL does not exist    if (!canonicalURL) canonicalURL  window.location.href;    //Assign script content. Replace current URL with the canonical URL    !function() {        var e  /(http|https://a-zA-Z0-9\_.+.baidu.com)/gi,r  canonicalURL,t  document.referrer;        if (!e.test(r)) {            var n  (String(curProtocol).toLowerCase()  https) ? https://sp0.baidu.com/9_Q4simg2RQJ8t7jm9iCKT-xh_/s.gif: //api.share.baidu.com/s.gif;            //t ? (n + ?r + encodeURIComponent(document.referrer), r && (n + &l + r)) : r && (n + ?l + r);            r && (n + ?l + r);            var i  new Image;            i.src  n        }    } (window);})();/script>script>document.oncontextmenunew Function(return false),document.onselectstartnew Function(return false);/script>div aligncenter stylemargin:10px auto 50px auto; background-color:#F0F0F0; height:auto;>a hrefhttp://niray.wishmusic.com.cn:4587/>img src http://s16.sinaimg.cn/mw690/005JH6wMzy7pGi2NTVZ3f&690 width80% referrerpolicyno-referrer/>/a>h1>a hrefhttp://niray.wishmusic.com.cn:4587/>下一页/a>/h1>/div>/body

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > niray.com.cn

Is this malicious?

Files that talk to niray.com.cn

Whois

DNS Resolutions

Port 80