Domain > userservices.net

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to userservices.net

MD5	A/V
709622547c3e4b44144047282940995b	[HW32.CDB.9120] [Packed.Win32.Katusha.1!O] [Backdoor.Hlux!iLXsQOxcJ2A] [Kryptik.CCFN] [Backdoor.Win32.Hlux.dprt] [TrojWare.Win32.Kryptik.CAUP] [Trojan.Packed.26581] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Win32/Kryptik.CAXO] [Backdoor.Win32.Kelihos] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GNC] [Backdoor.Win32.Hlux.AP]
e6d960bf587f5cb1497520fe716f1fb4	[Malware.Packer.FFS] [BackDoor.SlymENT.2075] [Heuristic.LooksLike.Win32.Suspicious.E] [Backdoor:Win32/Kelihos.F] [PE:Malware.XPACK/RDM!5.1]
2855d896ffb37c2fd165ff7e54b55220	[HW32.CDB.89ca] [Trojan.Win32.Tepfer.cxaqha] [Kryptik.CCFN] [Trojan-PSW.Win32.Tepfer.twka] [Trojan.PWS.Tepfer!4r2LvpOQWF0] [BackDoor.Slym.13348] [Mal/FakeAV-UF] [Trojan[PSW]/Win32.Tepfer] [Backdoor:Win32/Kelihos] [Heur.Trojan.Hlux] [Win32/Kryptik.CASL] [W32/Hlux.BWUN!tr.bdr] [Trojan.Win32.Kryptik.CASL] [Win32/Trojan.337]
177c5ed8526c7f0446c1ee92993aa6eb	[HW32.CDB.5774] [Heuristic.BehavesLike.Win32.Suspicious-BAY.G] [Heur.Trojan.Hlux]
1d309b266dbe76d86b01314a65c97cce	[HW32.CDB.8c27] [Trojan.Kryptik!/yxP5762iCg] [Kryptik.CCFN] [Trojan.Win32.Kryptik.cxmihh] [UnclassifiedMalware] [Trojan.Packed.26527] [Win32.Troj.Undef.(kcloud)] [Backdoor:Win32/Kelihos] [W32/Trojan.LLHB-6858] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Backdoor.Win32.Kelihos] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GKU] [Trojan.Win32.Kryptik.CAHC]
981a83b3f0d4a74b0b38becda7c8cb9c	[Artemis!981A83B3F0D4] [Trojan.Win32.Crypt.cxd] [W32/Yakes.FHJN!tr] [Win32/Cryptor]
038a21f4f89d526f853bba2a18b81708	[Worm.Win32.Ngrbot.afvw] [Win32.HLLW.Autoruner2.1926] [TR/Crypt.Xpack.77749]

Whois

Property	Value
NameServer	NS2.VISP.NET
Created	1998-09-12 00:00:00
Changed	2014-08-13 00:00:00
Expires	2015-09-11 00:00:00
Registrar	TUCOWS DOMAINS INC.

DNS Resolutions

Date	IP Address
2025-12-11	52.32.157.119 (ClassC)

Port 80

Port 443

Subdomains

Date	Domain	IP
smtp-in-1.userservices.net	2014-05-24	204.16.46.1
smtp-in-2.userservices.net	2014-07-13	204.16.46.11
NSH2.USERSERVICES.NET	2025-06-28	209.235.134.136
smtp-in-3.userservices.net	2014-07-13	204.16.46.1

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]