Domain > qegyhig.com

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to qegyhig.com

MD5	A/V
0537c9f2dc45b10be4c276600f7af035	[W32.UcoeoylA.Trojan] [Backdoor.Win32.Shiz.1!O] [Trojan.Apppatch] [Backdoor/Shiz.jjb] [Trojan.Win32.Friendzy.tmmfd] [Trojan.Malcol] [BKDR_SHIZ.SMA] [Backdoor.Win32.Shiz.raj] [TrojanSpy.Shiz!AJNoLSx0nKA] [Backdoor.Win32.A.Shiz.231424] [UnclassifiedMalware] [Trojan.Packed.20771] [Trojan.Shiz.Win32.1240] [TR/Friendzy.A.1] [Mal/ZXC-A] [Backdoor/Shiz.bat] [Trojan[Backdoor]/Win32.Shiz] [Win32.Hack.Shiz.(kcloud)] [PWS:Win32/Simda.G] [Backdoor/Win32.Shiz] [Trojan-Inject.Winlogon.22805] [Win32/Spy.Shiz.NBX] [PE:Trojan.Simda!1.9A1E] [Backdoor.Win32.Shiz] [W32/Shiz.RAJ!tr] [SHeur3.CNOH]
87f7ce02879c766a0a4e5db1fbd23a34	[BDS/Simda.A.9]
10358ee94e5f833daf1549e150ea611c	[Win.Trojan.Shiz-1978] [Trojan.Packed.20771] [Win32/Kryptik.QEN] [W32/Shiz.HPH!tr] [PWS*Win32/Simda.D] [Mal/FakeAv-NL] [Backdoor.Shiz]
d0acd37e9075990d0f1289db350c258d	[W32.UserinitPipd.Trojan] [Backdoor/W32.Shiz.256512.C] [Spyware] [Trojan/Spy.Shiz.ncd] [Trojan.Win32.Shiz.vocax] [Trojan.Shiz-352] [Backdoor.Shiz!fiMls0TYMYQ] [Backdoor.Win32.A.Shiz.261960] [Backdoor.Win32.Shiz.HEU] [Trojan.Packed.20771] [Win32.Hack.Shiz.(kcloud)] [PWS:Win32/Simda.AF] [Trojan.Jorik.Shiz] [Win32/Spy.Shiz.NCD] [Backdoor.Win32.Simda.p] [Backdoor.Win32.Shiz] [W32/Shiz.YWP!tr.bdr] [SHeur4.ETB]
029fb322799493db698b6f5f07699b30	[Win.Trojan.Shiz-46] [Trojan.Packed.20771] [Win32/Spy.Shiz.NCD] [W32/Shiz.YWP!tr.bdr] [W32/Trojan2.NPSV] [SHeur4.GQH] [Trojan.Win32.Jorik] [Trojan.Apppatch] [Backdoor*Win32/Simda] [Trojan.Win32.Simda.g] [Mal/ZboCheMan-A] [TROJ_AG.F60BC039] [Trojan.Jorik.Shiz]
7e58410266c1a912928c3759a297aa34	[Backdoor.Shiz.rc] [Trojan.Shiz-101] [Trojan.Packed.20771] [Win32/Kryptik.SSU] [W32/Shiz.A!tr.bdr] [Trojan.Win32.Jorik] [Backdoor.Win32.Shiz.tiq] [Backdoor*Win32/Simda] [Mal/ZboCheMan-A] [TROJ_AG.592372C6] [Backdoor.Shiz]
296e28705a31428f3f2a1dbc27a30c02	[PWS*Win32/Simda.G] [BackDoor.acm] [SHeur3.CNOH]
9B433B2373275D5825843888630800E4
2ed18f55d33db821ad0ba605643d5f67	[BackDoor.acx] [Backdoor*Win32/Simda]
b3fe75911ab7c6b24b427596052b181b	[Trojan.Packed.20771] [Win32/Kryptik.ULA] [W32/Shiz.YWP!tr.bdr] [PWS*Win32/Simda.AF] [Mal/ZboCheMan-A]
6f394c6a4d58c75f0d40eb988c4c125f
81ca2afb02000d2ab1858e3449c33cbf	[Backdoor.Shiz.rc] [Trojan.Shiz-58] [Trojan.Packed.20771] [Win32/Spy.Shiz.NCD] [W32/Shiz.NCD!tr] [SHeur4.BYP] [Backdoor.Win32.Shiz] [Backdoor.Win32.Shiz.tiq] [Trojan.Apppatch] [PWS*Win32/Simda] [Mal/ZboCheMan-A] [BScope.Trojan.Diple]
6fa7ef1d7e0ca04aff15372a9918adb1	[PWS.Simda.A] [WIN.Trojan.Shiz-240] [Trojan.DownLoader5.58022] [Win32/Spy.Shiz.NBX] [W32/Shiz.HPH!tr] [Win32.SuspectCrc] [PWS*Win32/Simda.D] [Mal/FakeAv-NL] [Malware-Cryptor.Bambarbiya] [Backdoor.Shiz.Win32.3594]
c6f8d22ebbcfae29c28ee251c6a72493
02ec9900722cdd37f5861c77b21e90c0	[PWS*Win32/Simda.AF] [BackDoor.acx]
dbbf082a18571fe3fc58d900c74f77b8	[Trojan.Packed.20771] [Win32/Kryptik.RNX] [W32/Shiz.HPH!tr] [Backdoor.Win32.Simda] [Backdoor.Win32.Shiz.raj] [BKDR_SHIZ.SMA] [Backdoor.Shiz]
0727b6b493555907870ae77c65d4d330	[DR/Zbot.H] [Backdoor.Shiz.r8] [Win.Trojan.Shiz-2043] [Trojan.Packed.20771] [Win32/Kryptik.RSP] [W32/Shiz.HPH!tr] [SHeur3.COQC] [Backdoor.Win32.Simda] [Backdoor.Win32.Shiz.raj] [Trojan.Apppatch] [Backdoor*Win32/Simda] [Mal/ZboCheMan-A] [BKDR_SHIZ.SMA] [Backdoor.Shiz]
408c34ee9c87bd7f055b12cee68557d7
34920722bdfe2ce5cff7e2f692939666	[W32.UserinitJpocLnr.Trojan] [Backdoor/W32.Shiz.211456] [Backdoor.Win32.Shiz.1!O] [Trojan.Apppatch] [Backdoor.Shiz.Win32.3603] [Backdoor/Shiz.hwf] [Trojan.Kryptik!f1mYQCGsxYA] [WS.Reputation.1] [Simda.TEM] [Backdoor.Win32.Shiz.raj] [Trojan.Win32.Shiz.sjhaw] [Backdoor.Win32.A.Shiz.211456] [Trojan.Packed.20771] [BKDR_CYCBOT.SME4] [Mal/FakeAv-NL] [Backdoor/Shiz.azc] [Trojan[Backdoor]/Win32.Shiz] [Win32.Hack.Shiz.(kcloud)] [Backdoor:Win32/Simda] [Backdoor/Win32.Shiz] [Backdoor.Shiz] [Backdoor.Win32.Shiz.auB] [Backdoor.Win32.Simda] [W32/Shiz.HPH!tr] [SHeur3.CLSQ]
5ec2e6a90462c3166b1c6348edadd290	[Backdoor*Win32/Simda] [BDS/Simda.A.9]

Whois

Property	Value
Email	maddy_1002@yahoo.co.in
NameServer	NS2.SUSPENDED-DOMIAN.COM
Created	2011-08-12 00:00:00
Changed	2014-08-14 00:00:00
Expires	2015-08-12 00:00:00
Registrar	BIGROCK SOLUTIONS LI

DNS Resolutions

Date	IP Address
2013-05-14	96.126.114.18 (ClassC)
2013-08-15	208.91.197.101 (ClassC)
2014-06-26	198.74.50.135 (ClassC)
2017-07-18	198.74.50.135 (ClassC)
2018-08-21	127.0.0.1 (ClassC)
2023-09-14	35.186.223.180 (ClassC)
2024-11-25	104.21.30.183 (ClassC)
2024-12-27	172.67.173.131 (ClassC)

Port 80

Subdomains

Date	Domain	IP
www.qegyhig.com	2023-09-14	35.186.223.180

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]