Domain > gahyqah.com

Welcome! Right click nodes and scroll the mouse to navigate the graph.

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to gahyqah.com

MD5	A/V
0537c9f2dc45b10be4c276600f7af035	[W32.UcoeoylA.Trojan] [Backdoor.Win32.Shiz.1!O] [Trojan.Apppatch] [Backdoor/Shiz.jjb] [Trojan.Win32.Friendzy.tmmfd] [Trojan.Malcol] [BKDR_SHIZ.SMA] [Backdoor.Win32.Shiz.raj] [TrojanSpy.Shiz!AJNoLSx0nKA] [Backdoor.Win32.A.Shiz.231424] [UnclassifiedMalware] [Trojan.Packed.20771] [Trojan.Shiz.Win32.1240] [TR/Friendzy.A.1] [Mal/ZXC-A] [Backdoor/Shiz.bat] [Trojan[Backdoor]/Win32.Shiz] [Win32.Hack.Shiz.(kcloud)] [PWS:Win32/Simda.G] [Backdoor/Win32.Shiz] [Trojan-Inject.Winlogon.22805] [Win32/Spy.Shiz.NBX] [PE:Trojan.Simda!1.9A1E] [Backdoor.Win32.Shiz] [W32/Shiz.RAJ!tr] [SHeur3.CNOH]
87f7ce02879c766a0a4e5db1fbd23a34	[BDS/Simda.A.9]
10358ee94e5f833daf1549e150ea611c	[Win.Trojan.Shiz-1978] [Trojan.Packed.20771] [Win32/Kryptik.QEN] [W32/Shiz.HPH!tr] [PWS*Win32/Simda.D] [Mal/FakeAv-NL] [Backdoor.Shiz]
d0acd37e9075990d0f1289db350c258d	[W32.UserinitPipd.Trojan] [Backdoor/W32.Shiz.256512.C] [Spyware] [Trojan/Spy.Shiz.ncd] [Trojan.Win32.Shiz.vocax] [Trojan.Shiz-352] [Backdoor.Shiz!fiMls0TYMYQ] [Backdoor.Win32.A.Shiz.261960] [Backdoor.Win32.Shiz.HEU] [Trojan.Packed.20771] [Win32.Hack.Shiz.(kcloud)] [PWS:Win32/Simda.AF] [Trojan.Jorik.Shiz] [Win32/Spy.Shiz.NCD] [Backdoor.Win32.Simda.p] [Backdoor.Win32.Shiz] [W32/Shiz.YWP!tr.bdr] [SHeur4.ETB]
029fb322799493db698b6f5f07699b30	[Win.Trojan.Shiz-46] [Trojan.Packed.20771] [Win32/Spy.Shiz.NCD] [W32/Shiz.YWP!tr.bdr] [W32/Trojan2.NPSV] [SHeur4.GQH] [Trojan.Win32.Jorik] [Trojan.Apppatch] [Backdoor*Win32/Simda] [Trojan.Win32.Simda.g] [Mal/ZboCheMan-A] [TROJ_AG.F60BC039] [Trojan.Jorik.Shiz]
7e58410266c1a912928c3759a297aa34	[Backdoor.Shiz.rc] [Trojan.Shiz-101] [Trojan.Packed.20771] [Win32/Kryptik.SSU] [W32/Shiz.A!tr.bdr] [Trojan.Win32.Jorik] [Backdoor.Win32.Shiz.tiq] [Backdoor*Win32/Simda] [Mal/ZboCheMan-A] [TROJ_AG.592372C6] [Backdoor.Shiz]
296e28705a31428f3f2a1dbc27a30c02	[PWS*Win32/Simda.G] [BackDoor.acm] [SHeur3.CNOH]
2ed18f55d33db821ad0ba605643d5f67	[BackDoor.acx] [Backdoor*Win32/Simda]
b3fe75911ab7c6b24b427596052b181b	[Trojan.Packed.20771] [Win32/Kryptik.ULA] [W32/Shiz.YWP!tr.bdr] [PWS*Win32/Simda.AF] [Mal/ZboCheMan-A]
6f394c6a4d58c75f0d40eb988c4c125f
81ca2afb02000d2ab1858e3449c33cbf	[Backdoor.Shiz.rc] [Trojan.Shiz-58] [Trojan.Packed.20771] [Win32/Spy.Shiz.NCD] [W32/Shiz.NCD!tr] [SHeur4.BYP] [Backdoor.Win32.Shiz] [Backdoor.Win32.Shiz.tiq] [Trojan.Apppatch] [PWS*Win32/Simda] [Mal/ZboCheMan-A] [BScope.Trojan.Diple]
6fa7ef1d7e0ca04aff15372a9918adb1	[PWS.Simda.A] [WIN.Trojan.Shiz-240] [Trojan.DownLoader5.58022] [Win32/Spy.Shiz.NBX] [W32/Shiz.HPH!tr] [Win32.SuspectCrc] [PWS*Win32/Simda.D] [Mal/FakeAv-NL] [Malware-Cryptor.Bambarbiya] [Backdoor.Shiz.Win32.3594]
c6f8d22ebbcfae29c28ee251c6a72493
02ec9900722cdd37f5861c77b21e90c0	[PWS*Win32/Simda.AF] [BackDoor.acx]
dbbf082a18571fe3fc58d900c74f77b8	[Trojan.Packed.20771] [Win32/Kryptik.RNX] [W32/Shiz.HPH!tr] [Backdoor.Win32.Simda] [Backdoor.Win32.Shiz.raj] [BKDR_SHIZ.SMA] [Backdoor.Shiz]
0727b6b493555907870ae77c65d4d330	[DR/Zbot.H] [Backdoor.Shiz.r8] [Win.Trojan.Shiz-2043] [Trojan.Packed.20771] [Win32/Kryptik.RSP] [W32/Shiz.HPH!tr] [SHeur3.COQC] [Backdoor.Win32.Simda] [Backdoor.Win32.Shiz.raj] [Trojan.Apppatch] [Backdoor*Win32/Simda] [Mal/ZboCheMan-A] [BKDR_SHIZ.SMA] [Backdoor.Shiz]
408c34ee9c87bd7f055b12cee68557d7
34920722bdfe2ce5cff7e2f692939666	[W32.UserinitJpocLnr.Trojan] [Backdoor/W32.Shiz.211456] [Backdoor.Win32.Shiz.1!O] [Trojan.Apppatch] [Backdoor.Shiz.Win32.3603] [Backdoor/Shiz.hwf] [Trojan.Kryptik!f1mYQCGsxYA] [WS.Reputation.1] [Simda.TEM] [Backdoor.Win32.Shiz.raj] [Trojan.Win32.Shiz.sjhaw] [Backdoor.Win32.A.Shiz.211456] [Trojan.Packed.20771] [BKDR_CYCBOT.SME4] [Mal/FakeAv-NL] [Backdoor/Shiz.azc] [Trojan[Backdoor]/Win32.Shiz] [Win32.Hack.Shiz.(kcloud)] [Backdoor:Win32/Simda] [Backdoor/Win32.Shiz] [Backdoor.Shiz] [Backdoor.Win32.Shiz.auB] [Backdoor.Win32.Simda] [W32/Shiz.HPH!tr] [SHeur3.CLSQ]
5ec2e6a90462c3166b1c6348edadd290	[Backdoor*Win32/Simda] [BDS/Simda.A.9]
0aeaef003c60059fa6739278a0773981	[Win.Trojan.Shiz-1138] [Trojan.PWS.Ibank.332] [Win32/Kryptik.ALZZ] [W32/Shiz.HPH!tr] [Trojan.Win32.Crypt] [Backdoor.Win32.Shiz.raj] [BKDR_CYCBOT.SME4] [Trojan.Jorik.Shiz]

DNS Resolutions

Date	IP Address
2013-04-01	208.94.246.218 (ClassC)
2013-09-04	96.43.141.186 (ClassC)
2013-11-08	96.43.141.186 (ClassC)
2013-12-06	64.74.223.46 (ClassC)
2013-12-28	64.74.223.46 (ClassC)
2014-06-26
2015-09-01	54.148.180.204 (ClassC)
2016-09-01	93.174.4.26 (ClassC)
2017-09-13	217.70.184.38 (ClassC)
2018-06-06	107.23.255.195 (ClassC)
2018-09-12	104.239.157.210 (ClassC)
2018-09-12	23.253.126.58 (ClassC)
2022-09-07	95.101.28.102 (ClassC)
2022-09-22	11.23.33.44 (ClassC)
2025-03-08	23.253.46.64 (ClassC)
2025-03-21	162.255.119.102 (ClassC)

Port 80

Subdomains

Date	Domain	IP
www.gahyqah.com	2023-08-28	198.54.117.218

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]