Domain > gatyfus.com

Welcome! Right click nodes and scroll the mouse to navigate the graph.

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to gatyfus.com

MD5	A/V
0537c9f2dc45b10be4c276600f7af035	[W32.UcoeoylA.Trojan] [Backdoor.Win32.Shiz.1!O] [Trojan.Apppatch] [Backdoor/Shiz.jjb] [Trojan.Win32.Friendzy.tmmfd] [Trojan.Malcol] [BKDR_SHIZ.SMA] [Backdoor.Win32.Shiz.raj] [TrojanSpy.Shiz!AJNoLSx0nKA] [Backdoor.Win32.A.Shiz.231424] [UnclassifiedMalware] [Trojan.Packed.20771] [Trojan.Shiz.Win32.1240] [TR/Friendzy.A.1] [Mal/ZXC-A] [Backdoor/Shiz.bat] [Trojan[Backdoor]/Win32.Shiz] [Win32.Hack.Shiz.(kcloud)] [PWS:Win32/Simda.G] [Backdoor/Win32.Shiz] [Trojan-Inject.Winlogon.22805] [Win32/Spy.Shiz.NBX] [PE:Trojan.Simda!1.9A1E] [Backdoor.Win32.Shiz] [W32/Shiz.RAJ!tr] [SHeur3.CNOH]
87f7ce02879c766a0a4e5db1fbd23a34	[BDS/Simda.A.9]
10358ee94e5f833daf1549e150ea611c	[Win.Trojan.Shiz-1978] [Trojan.Packed.20771] [Win32/Kryptik.QEN] [W32/Shiz.HPH!tr] [PWS*Win32/Simda.D] [Mal/FakeAv-NL] [Backdoor.Shiz]
d0acd37e9075990d0f1289db350c258d	[W32.UserinitPipd.Trojan] [Backdoor/W32.Shiz.256512.C] [Spyware] [Trojan/Spy.Shiz.ncd] [Trojan.Win32.Shiz.vocax] [Trojan.Shiz-352] [Backdoor.Shiz!fiMls0TYMYQ] [Backdoor.Win32.A.Shiz.261960] [Backdoor.Win32.Shiz.HEU] [Trojan.Packed.20771] [Win32.Hack.Shiz.(kcloud)] [PWS:Win32/Simda.AF] [Trojan.Jorik.Shiz] [Win32/Spy.Shiz.NCD] [Backdoor.Win32.Simda.p] [Backdoor.Win32.Shiz] [W32/Shiz.YWP!tr.bdr] [SHeur4.ETB]
029fb322799493db698b6f5f07699b30	[Win.Trojan.Shiz-46] [Trojan.Packed.20771] [Win32/Spy.Shiz.NCD] [W32/Shiz.YWP!tr.bdr] [W32/Trojan2.NPSV] [SHeur4.GQH] [Trojan.Win32.Jorik] [Trojan.Apppatch] [Backdoor*Win32/Simda] [Trojan.Win32.Simda.g] [Mal/ZboCheMan-A] [TROJ_AG.F60BC039] [Trojan.Jorik.Shiz]
7e58410266c1a912928c3759a297aa34	[Backdoor.Shiz.rc] [Trojan.Shiz-101] [Trojan.Packed.20771] [Win32/Kryptik.SSU] [W32/Shiz.A!tr.bdr] [Trojan.Win32.Jorik] [Backdoor.Win32.Shiz.tiq] [Backdoor*Win32/Simda] [Mal/ZboCheMan-A] [TROJ_AG.592372C6] [Backdoor.Shiz]
296e28705a31428f3f2a1dbc27a30c02	[PWS*Win32/Simda.G] [BackDoor.acm] [SHeur3.CNOH]
9B433B2373275D5825843888630800E4
2ed18f55d33db821ad0ba605643d5f67	[BackDoor.acx] [Backdoor*Win32/Simda]
b3fe75911ab7c6b24b427596052b181b	[Trojan.Packed.20771] [Win32/Kryptik.ULA] [W32/Shiz.YWP!tr.bdr] [PWS*Win32/Simda.AF] [Mal/ZboCheMan-A]
6f394c6a4d58c75f0d40eb988c4c125f
81ca2afb02000d2ab1858e3449c33cbf	[Backdoor.Shiz.rc] [Trojan.Shiz-58] [Trojan.Packed.20771] [Win32/Spy.Shiz.NCD] [W32/Shiz.NCD!tr] [SHeur4.BYP] [Backdoor.Win32.Shiz] [Backdoor.Win32.Shiz.tiq] [Trojan.Apppatch] [PWS*Win32/Simda] [Mal/ZboCheMan-A] [BScope.Trojan.Diple]
6fa7ef1d7e0ca04aff15372a9918adb1	[PWS.Simda.A] [WIN.Trojan.Shiz-240] [Trojan.DownLoader5.58022] [Win32/Spy.Shiz.NBX] [W32/Shiz.HPH!tr] [Win32.SuspectCrc] [PWS*Win32/Simda.D] [Mal/FakeAv-NL] [Malware-Cryptor.Bambarbiya] [Backdoor.Shiz.Win32.3594]
c6f8d22ebbcfae29c28ee251c6a72493
02ec9900722cdd37f5861c77b21e90c0	[PWS*Win32/Simda.AF] [BackDoor.acx]
dbbf082a18571fe3fc58d900c74f77b8	[Trojan.Packed.20771] [Win32/Kryptik.RNX] [W32/Shiz.HPH!tr] [Backdoor.Win32.Simda] [Backdoor.Win32.Shiz.raj] [BKDR_SHIZ.SMA] [Backdoor.Shiz]
0727b6b493555907870ae77c65d4d330	[DR/Zbot.H] [Backdoor.Shiz.r8] [Win.Trojan.Shiz-2043] [Trojan.Packed.20771] [Win32/Kryptik.RSP] [W32/Shiz.HPH!tr] [SHeur3.COQC] [Backdoor.Win32.Simda] [Backdoor.Win32.Shiz.raj] [Trojan.Apppatch] [Backdoor*Win32/Simda] [Mal/ZboCheMan-A] [BKDR_SHIZ.SMA] [Backdoor.Shiz]
C10CC3386725956FAA831B82FB5E0C07
408c34ee9c87bd7f055b12cee68557d7
34920722bdfe2ce5cff7e2f692939666	[W32.UserinitJpocLnr.Trojan] [Backdoor/W32.Shiz.211456] [Backdoor.Win32.Shiz.1!O] [Trojan.Apppatch] [Backdoor.Shiz.Win32.3603] [Backdoor/Shiz.hwf] [Trojan.Kryptik!f1mYQCGsxYA] [WS.Reputation.1] [Simda.TEM] [Backdoor.Win32.Shiz.raj] [Trojan.Win32.Shiz.sjhaw] [Backdoor.Win32.A.Shiz.211456] [Trojan.Packed.20771] [BKDR_CYCBOT.SME4] [Mal/FakeAv-NL] [Backdoor/Shiz.azc] [Trojan[Backdoor]/Win32.Shiz] [Win32.Hack.Shiz.(kcloud)] [Backdoor:Win32/Simda] [Backdoor/Win32.Shiz] [Backdoor.Shiz] [Backdoor.Win32.Shiz.auB] [Backdoor.Win32.Simda] [W32/Shiz.HPH!tr] [SHeur3.CLSQ]

Whois

Property	Value
NameServer	NS22.DOMAINCONTROL.COM
Created	2014-03-13 00:00:00
Changed	2015-04-24 00:00:00
Expires	2015-03-13 00:00:00
Registrar	GODADDY.COM, LLC

DNS Resolutions

Date	IP Address
2011-08-29	208.73.210.29 (ClassC)
2012-07-07	69.43.161.157 (ClassC)
2013-01-31	63.156.206.202 (ClassC)
2013-04-01	141.8.225.7 (ClassC)
2013-08-06	91.195.240.83 (ClassC)
2013-08-15	69.43.161.180 (ClassC)
2014-06-26	86.124.164.25 (ClassC)
2015-01-30	86.124.164.25 (ClassC)
2015-03-16	50.63.202.81 (ClassC)
2015-06-09	195.22.26.254 (ClassC)
2015-06-09	195.22.26.231 (ClassC)
2015-06-09	195.22.26.252 (ClassC)
2015-08-09	195.22.26.253 (ClassC)
2016-01-11	195.22.28.197 (ClassC)
2016-01-11	195.22.28.199 (ClassC)
2016-01-19	195.22.28.198 (ClassC)
2016-06-16	50.63.202.34 (ClassC)
2018-03-19	185.53.179.29 (ClassC)
2019-02-28	67.55.121.97 (ClassC)
2019-04-02	91.195.240.89 (ClassC)
2019-04-10	91.195.240.87 (ClassC)
2019-06-11	154.207.42.222 (ClassC)
2019-07-25	62.60.251.244 (ClassC)
2019-07-27	62.0.58.94 (ClassC)
2020-03-04	154.204.153.167 (ClassC)
2020-05-04	154.90.36.229 (ClassC)
2020-06-01	155.159.53.210 (ClassC)
2020-06-21	47.245.10.98 (ClassC)
2020-07-04	47.245.11.53 (ClassC)
2024-05-19	162.249.66.86 (ClassC)
2024-08-24	5.79.71.225 (ClassC)
2024-11-02	178.162.217.107 (ClassC)
2024-11-22	5.79.71.205 (ClassC)
2024-12-14	178.162.203.226 (ClassC)
2024-12-30	85.17.31.82 (ClassC)
2025-01-05	178.162.203.202 (ClassC)
2025-01-12	85.17.31.122 (ClassC)
2025-01-20	178.162.203.211 (ClassC)

Subdomains

Date	Domain	IP
ww2.gatyfus.com	2013-05-14	208.73.211.30
ww34.gatyfus.com	2013-04-01	63.149.176.12
ww35.gatyfus.com	2024-07-07	85.17.31.82

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]