theshangai.info
Classification: Malicious
theshangai.info is a malicious hostname. Linked to Solar malware. 2 sightings from Cybercrime-tracker.net (Betabot), last seen 2022-12-28.
Current activity
- Offline — no longer resolving. Last online 2023-01-12 10:22:28.
MITRE ATT&CK associations
Malware families: SOLAR (S1166)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Solar | Cybercrime-tracker.net | 2017-10-15 15:12:21 | 2022-12-28 08:16:57 | malicious-activity | S1166 Solar |
| Betabot | Cybercrime-tracker.net | 2017-10-15 15:01:48 | 2022-12-28 08:14:49 | malicious-activity |
IP addresses resolved by this hostname
- 23.253.126.58 (2017-10-15 15:01:48)
- 104.239.157.210 (2017-10-15 15:01:48)
- 64.225.91.73 (2023-01-12 10:22:28)
Whois information
- AS name
- AS13768 Peer 1 Network (USA) Inc.
- Domain
- theshangai.info
- TLD
- info
- Nameservers
- NS1.ARBOR-SINKHOLE.NET, NS1.ASERTDNS.COM
- Registrant
- Gandi SAS
- Address
- Obfuscated whois Gandi-63-65 boulevard Massena
- City
- Obfuscated whois Gandi-Paris
- State
- Paris
- Country
- FR — France 🇫🇷
- Contact email
- [email protected], [email protected]
- First indexed
- 2017-10-15 15:01:48
- Last updated
- 2026-09-20 22:20:22