Help RSS API Feed Maltego Contact

Domain > riyah.net

More information on this domain is in AlienVault OTX

Is this malicious?

Most users have voted this as MALICIOUS

Files that talk to riyah.net

MD5	A/V
5629ca7c1ac8a5611c14633ab895c1ce	[Artemis!5629CA7C1AC8] [BehavesLike.Win32.Multiplug.dm] [BScope.Trojan.Diple]
573b662adffb9d14fd7ef572c6d6a44e	[BScope.Trojan.Diple]
cbadcd33fec81a63e44dfb6c5f971545	[TROJ_KRYPTIK.XXTZS] [Trojan.DownLoader18.4061] [TROJ_KRYPTIK.XXTZS] [BehavesLike.Win32.BadFile.fh] [Trojan.Jaik.D25C5] [Trojan/Win32.Diple] [Artemis!CBADCD33FEC8] [BScope.Trojan.Diple]
e46e08c265b9691bbc7e15807125c14f
6bd838caec01f070d69a3cda8f1f3d61	[HW32.Packed.3A4D] [Trojan.DownLoader19.54371] [BehavesLike.Win32.PWSZbot.tc] [Artemis!6BD838CAEC01] [Win32.Risk.Adware.Wsui] [Win32/Virus.Adware.f45]
7282b0c319e20af958555ffc17405c60	[Artemis!7282B0C319E2] [Trojan.Downloader] [Suspicious.Cloud.9] [APW_MultiPlug] [Trojan.Win32.Miner.ayi] [Trojan.DownLoader18.29671] [APW_MultiPlug] [BehavesLike.Win32.Keylog.fh] [Trojan.Miner.ak] [TR/Graftor.320000.1] [PUP/Win32.MultiPlug] [Trojan:Win32/Dynamer!ac] [Win32.Trojan.Miner.Agkw] [Trojan.Win32.Miner] [W32/Miner.AYI!tr]
f983049d7c76fce7c6c5d318055717ea	[HW32.Packed.31A9] [Artemis!F983049D7C76] [Win32.Trojan.WisdomEyes.151026.9950.9997] [Trojan.Win32.DownLoader20.ebghzq] [Trojan.Win32.Z.Multiplug.1644032[h]] [Trojan.DownLoader20.8092] [Adware.Adposhel.Win32.26] [BehavesLike.Win32.MultiPlug.tc] [W32/Adware.CNSI-4123] [Trojan.Adware.Dropper.124] [PUP.MultiPlug/Variant] [Win32.Risk.Adware.Eeqt] [PUA.Adposhel!] [PUA.DNSUnlocker] [Riskware/Adposhel] [Adware.Win32.Adposhel.E] [Win32/Virus.Adware.f45]
8d472d3050230bedca05376e7bb410ba
1e41d22109e557b24c9f6544736a108d	[W32.HorabidyAI.Trojan] [Trojan.DNSChanger] [Win32.Trojan.WisdomEyes.151026.9950.9984] [Trojan.Zlob.Q] [BKDR_ZEGOST.YNSK] [Trojan.Win32.DownLoader18.dznvnv] [Troj/Zegost-IJ] [UnclassifiedMalware] [Trojan.DownLoader18.44193] [Backdoor.PePatch.Win32.100295] [BKDR_ZEGOST.YNSK] [BehavesLike.Win32.PWSZbot.dh] [W32/Trojan.QSXC-5521] [AdWare.PennyBee.br] [TR/Rogue.296448.25] [Uds.Dangerousobject.Multi!c] [Trojan/Win32.Diple.N1862851993] [Trojan:Win32/Dynamer!ac] [Win32.Trojan.Rogue.Dztx] [PUA.DNSUnlocker] [Pakes2_c.BWFL] [Win32/Trojan.Multi.daf]

Whois

Property	Value
Email	privacy@dynadot.com
NameServer	MIA.NS.CLOUDFLARE.COM
Created	2015-10-17 00:00:00
Changed	2015-11-08 00:00:00
Expires	2016-10-17 00:00:00
Registrar	DYNADOT, LLC

DNS Resolutions

Date	IP Address
2015-10-19	52.0.217.44 (ClassC)
2015-11-23	185.17.184.10 (ClassC)
2016-01-20	185.17.184.11 (ClassC)
2019-08-16	81.171.14.67 (ClassC)
2025-08-11	139.185.35.109 (ClassC)
2026-01-08	193.123.83.99 (ClassC)

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

� Copyright 2019 AlienVault, Inc. | Legal| Status| Do Not Sell My Personal Information