Domain > base8.gyddos.com

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to base8.gyddos.com

MD5	A/V
cb0eb11eb2988f0241b9c5a7b3ab6136	[W32/Trojan.SGQF-3145] [Trojan.PWS.Gamania.43032] [Win32/ServStart.EQ] [W32/ServStart.GL!tr] [Trojan.Win32.ServStart] [Trojan.ServStart] [DDoS*Win32/Nitol.A] [Backdoor.Overie!486D] [Mal/Behav-004] [Backdoor.Nitol] [TROJ_NITOL.SMN1] [Trojan.Staser]
123c6b174f6e10c3c589b294322f13d9
0c42d4686a975465804666cd051b0e4b	[W32/Trojan.EQZK-4872] [Trojan.PWS.Gamania.43032] [Win32/ServStart.EQ] [W32/Staser.EQ!tr] [DoS.DAK.dropper] [Trojan.Win32.ServStart] [Trojan.Win32.Staser.tkc] [TROJ_NITOL.SMN1]
5a1025ef219031613a0ab11df4b6aa2e
fd1b7cf5d8d2e32c53d02839e30062fb
b628fb69ccbb451f346f90e2aed4c181
2e30d3c38836df4bb32f96a5aef451da
6291ac2e029019177204c5bdd590abde
24cfebe67350b22e7417a971eb23c18d
2dd717834f952b7b1300974d7948de19
211edc5504644b70839666a9a6785a33
ef2a80f190a771c8667a27873c53d519
653b105955e4ebb5ae20eb1fd22e8c0c
83cc9cd5f10586e2d4263c5f63c25648
c99e8e48a1d28dbca548020dd3571072
cff0e36f7235601fa6c29639ce58781f	[Trojan.Nitol.A] [Trojan.PWS.Gamania.43032] [Win32/ServStart.EQ] [W32/ServStart.GL!tr] [DoS.DAK] [Trojan.Win32.ServStart] [Trojan.Win32.Staser.tkc] [Trojan.Dropper.NT] [DoS-FAK!CFF0E36F7235] [DDoS*Win32/Nitol.A] [Backdoor.Overie!486D] [Mal/Behav-116] [Backdoor.Nitol] [TROJ_NITOL.SMN1] [Trojan.D9031FF7B670B7ED] [Trojan.Staser]
d94fbaa34ed648e4be5e0841fa692f78	[Trojan.DnsAmp.3] [Trojan.Staser] [Trojan.Nitol.A] [Mal/Behav-116] [TROJ_NITOL.SMN1] [Trojan-DDoS.Win32.Macri.os] [Trojan.Staser.Win32.263] [Trojan.Win32.ServStart] [Trojan.Dropper.NT] [DDoS*Win32/Nitol.A] [W32/ServStart.GL!tr] [Backdoor.Nitol] [DoS.DAK] [Win32/ServStart.EQ] [Backdoor.Overie!486D] [Trojan.D9031FF7B670B7ED] [DoS-FAK!D94FBAA34ED6]
fb8cb64e7919ef7496485f159974b060	[Backdoor.Overie!486D] [Trojan.Staser.tkc.dquj.mg] [Win32/ServStart.EQ] [Backdoor.Nitol] [W32/ServStart.GL!tr] [DDoS*Win32/Nitol.A] [Trojan.ServStart] [Trojan.Win32.ServStart] [Backdoor.CPEX.Win32.31209] [Trojan-DDoS.Win32.Macri.os] [TROJ_NITOL.SMN1] [Mal/Behav-004] [Trojan.Staser] [Trojan.DnsAmp.3]
47df0ac14bf38f33c478609f3cb01a02	[Trojan.DnsAmp.3] [Trojan.Staser] [Mal/Behav-004] [TROJ_NITOL.SMN1] [Trojan-DDoS.Win32.Macri.os] [Trojan.Staser.Win32.146] [Trojan.Win32.ServStart] [Trojan.ServStart] [DDoS*Win32/Nitol.A] [W32/ServStart.GL!tr] [Backdoor.Nitol] [Win32/ServStart.EQ] [Trojan.Staser.tkc.dquj.mg] [Backdoor.Overie!486D]
7e632df9a09b97a22f7d5e722fa0b7b3	[Backdoor.Overie!486D] [Trojan.DnsAmp.3] [Trojan.Staser] [Mal/Behav-004] [TROJ_NITOL.SMN1] [Trojan-DDoS.Win32.Macri.os] [Backdoor.CPEX.Win32.31209] [Trojan.Win32.ServStart] [Trojan.ServStart] [DDoS*Win32/Nitol.A] [W32/ServStart.GL!tr] [Backdoor.Nitol] [Win32/ServStart.EQ] [Trojan.Staser.tkc.dquj.mg]

Whois

Property	Value
Email	Privacy@sun-Privacy.com
NameServer	F1G1NS2.DNSPOD.NET
Created	2013-07-03 00:00:00
Changed	2015-04-06 00:00:00
Expires	2016-07-03 00:00:00
Registrar	SHANGHAI YOVOLE NETW

DNS Resolutions

Date	IP Address
2015-01-30	43.240.51.239 (ClassC)
2015-02-16	123.123.123.123 (ClassC)
2015-02-16	123.123.123.123 (ClassC)
2015-05-15	43.240.51.237 (ClassC)
2015-06-04	122.10.86.99 (ClassC)
2016-01-07	23.234.50.67 (ClassC)
2016-09-09	118.163.4.232 (ClassC)
2017-01-04	103.249.31.52 (ClassC)
2017-01-18	210.56.57.29 (ClassC)
2018-08-06	27.255.91.139 (ClassC)
2018-08-13	109.234.109.76 (ClassC)
2018-08-14	109.234.109.82 (ClassC)
2018-09-22	209.99.64.18 (ClassC)
2019-09-04	185.53.179.29 (ClassC)
2020-10-07	208.91.197.46 (ClassC)
2020-12-12	3.138.82.195 (ClassC)
2020-12-12	3.134.22.63 (ClassC)
2020-12-20	3.133.18.42 (ClassC)
2020-12-20	3.139.14.45 (ClassC)
2020-12-20	3.133.182.247 (ClassC)
2020-12-20	3.140.156.230 (ClassC)
2020-12-20	3.17.228.65 (ClassC)
2020-12-20	3.128.111.195 (ClassC)
2020-12-25	3.137.125.209 (ClassC)
2021-02-06	3.141.74.7 (ClassC)
2021-02-16	3.18.253.84 (ClassC)
2024-01-12	180.163.150.162 (ClassC)
2024-01-29	183.2.172.109 (ClassC)
2024-03-04	198.44.166.220 (ClassC)
2024-03-25	172.67.203.73 (ClassC)
2024-05-02	8.212.24.67 (ClassC)
2024-07-22	170.33.13.246 (ClassC)
2024-09-18	154.201.79.181 (ClassC)
2024-11-10	38.6.165.132 (ClassC)
2025-02-28	124.243.176.117 (ClassC)
2025-08-06	114.55.233.124 (ClassC)

Port 80

Subdomains

Date	Domain	IP
base7.gyddos.com	2015-02-09	43.240.51.227
base8.gyddos.com	2015-02-16	123.123.123.123
yk.gyddos.com	2024-04-11	8.212.24.67
down.gyddos.com	2025-08-03	114.55.233.124
vip.gyddos.com	2023-12-27	180.163.150.162
soft.gyddos.com	2019-08-01	185.53.179.29
www.gyddos.com	2014-12-13	61.160.224.238

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]