Domain > 51yes.com

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to 51yes.com

MD5	A/V
6fc71be94256e7c6df228519ca4b4ac2	[JS/Exploit-Godakit.a] [Trojan.Html.Expack.brlvry] [Trojan.Malscript] [Kryptik.BTT] [Exploit:JS/DonxRef.A] [JS/Kryptik.NW] [Trojan.Script]
e762f3e3b079d74b688b2acd1650911b	[HW32.CDB.7cda] [Artemis!E762F3E3B079] [W32/Behav-Heuristic-066] [W32/Threat-HLLIM!Eldorado] [Suspicious.Cloud.5] [Win32/Oflwr.A!crypt] [Packed/MEW] [Cryp_MEW-11] [Heuristic.BehavesLike.Win32.Suspicious-BAY.G] [Mal/Behav-160] [PE:Trojan.Friet!1.9DB0] [IM-Worm.Win32.Sumom] [W32/Qhost_Banker.OM!tr] [Luhe.Packed.A]
92a969a6a1cad1307d9a232fb1c7944b	[HW32.CDB.Ecdb] [Trojan/Spy.FlyStudio.eyw] [Suspicious.Emit] [Win32.Trojan.Spy.Htcb] [Mal/HckPk-D] [PE:Trojan.Friet!1.9DB0]
00a6b5a1a5ab82e89ea40f7823483d8f	[JS/Exploit-Godakit.a] [Trojan.Html.Expack.brlvry] [Trojan.Malscript] [Kryptik.BTT] [Mal/ExpJS-BF] [Exploit:JS/DonxRef.A] [JS/Kryptik.NW] [Trojan.Script]
813bc9f66aae6d8435b832c5f08fa1c2
e189720834296cd475f0e39e360bd538	[JS/Exploit-Godakit.a] [Trojan.Html.Expack.brlvry] [Trojan.Malscript] [Kryptik.BTT] [Mal/ExpJS-BF] [Exploit:JS/DonxRef.A] [JS/Kryptik.NW] [Trojan.Script]
1abaa5438c2fae4140b2e50d0a86245c
7a203b929d74a9e464f31625898e5ed5	[HW32.CDB.54c0] [Trojan.Win32.Krap.1!O] [Trojan.FakeMS.ED] [Suspicious.BredoLab] [Suspicious!SA] [Mal/Behav-160] [UnclassifiedMalware] [Trojan.MulDrop5.6661] [Cryp_Xin1] [Heuristic.LooksLike.Win32.Suspicious.C] [Backdoor.Zegost] [W32/Farfli.WF!tr] [PSW.Banker6.BEMS] [Trojan.Win32.Banker.OM]
7681edb92c6ca3f5c51b3222096a1b47	[Packed/PECompact] [Heuristic.LooksLike.Win32.Suspicious.C!83] [Mal/Behav-160] [ASD.Prevention] [PE:Trojan.Friet!1.9DB0]
a44ec6576cb207a7cdf2233df25ea88d	[Trojan.Url.IframeB.rrxgp]
66e02bfc9a82a7c1ade3d485e7d1666b	[RDN/PWS-Banker!dn] [Trojan-Banker.Win32.Banker.bphd] [Trojan.PWS.Banker1.11693] [BehavesLike.Win32.Backdoor.gc] [Mal/EncPk-ACW] [TScope.Malware-Cryptor.SB] [Win32.Trojan-banker.Banker.Wrgq] [Trojan.Win32.Hiloti] [W32/Banker.AAXV!tr.spy] [Klone.dropper] [Trojan.Win32.Banker.Ac] [Win32/Trojan.58f] [Trojan.Win32.Banker.Ak]
6c8791edb12cdb08bee9c567a6d7904c	[HW32.Packed.2FDD] [Suspicious.Cloud.5] [Virus.Win32.Heur.l]
a9f392eee93215109b2afc0c887128dc	[Artemis!A9F392EEE932] [Trojan.Win32.Kitkiot.dxxxyg] [Win32/Kitkiot.A] [Trojan.Kitkiot!] [TrojWare.Win32.Kitkiot.~T] [Artemis!Trojan] [W32/Trojan.ICMZ-7569] [TR/Kitkiot.A.52] [Trojan:Win32/Skeeyah.A!bit] [Win32.Trojan.Falsesign.Lqop] [Trojan.Win32.Kitkiot] [Trojan.Win32.Kitkiot.A] [Win32/Trojan.5d4]
f8ec97cbc5cddc1da6f1d56d4aed8915	[Trojan.Win32.DownLoader17.dzauxk] [Trojan.DownLoader17.54579] [BehavesLike.Win32.Downloader.ch] [Trojan:Win32/Dynamer!ac] [Artemis!F8EC97CBC5CD] [Trj/GdSda.A] [Trojan.Win32.Kitkiot] [Atros3.RGE]
4be9f22829677e62d2ce762a14464068	[W32.GeminiC.Worm] [Packed.Win32.TDSS!O] [Trojan.Downloader] [W32/Heuristic-210!Eldorado] [Suspicious_F.E] [Win32/Oflwr.A!crypt] [Trojan.Win32.Badur.gixt] [Packed/FSG] [Mal/Behav-160] [Heuristic.BehavesLike.Win32.Suspicious-BAY.G] [PE:Trojan.Friet!1.9DB0] [W32/Qhost_Banker.OM!tr] [Luhe.Packed.A] [Trojan.Win32.Badur.aPti]
db4c077e35d249e8ccfd5bc434e58f62	[Packed.Win32.TDSS!O] [Trojan.Downloader] [W32/Heuristic-210!Eldorado] [Suspicious_F.E] [Win32/Oflwr.A!crypt] [Suspicious!SA] [Mal/Behav-160] [Trojan.MulDrop5.6661] [Heuristic.BehavesLike.Win32.Suspicious-BAY.G] [PE:Trojan.Friet!1.9DB0] [Luhe.Packed.A]
e7ec711409ded29fc55b0380f1ccf3a5	[HW32.CDB.618b] [Suspicious.Cloud.5] [Cryp_Xin1] [Packed/PECompact] [Trojan.Click3.4811] [Mal/Behav-160] [TrojanProxy:Win32/Potukorp.A] [PE:Trojan.Friet!1.9DB0]
0576b898bdd8b2f1366fb018111e5d42	[HW32.CDB.F532] [Artemis!0576B898BDD8] [Trojan.Dropper] [Suspicious.Cloud.5] [Packed/PECompact] [Trojan.Click3.4959] [Cryp_Xin1] [Heuristic.LooksLike.Win32.Suspicious.F] [PE:Trojan.Friet!1.9DB0] [Win32/Trojan.663]
4f8856f8e5bd14845511c893116d5dbf	[Packed.Win32.TDSS!O] [Trojan.Downloader] [Trojan.Win32.ASPM.cretrg] [W32/Heuristic-210!Eldorado] [Suspicious_F.E] [Win32/Oflwr.A!crypt] [Suspicious!SA] [Mal/Behav-160] [Trojan.MulDrop5.6900] [Heuristic.BehavesLike.Win32.Suspicious-BAY.G] [TrojanBanker.QHost] [PE:Trojan.Friet!1.9DB0] [SHeur4.BRVF]
00e133b99536613fc4af811fe7bb8e97	[Packed.Win32.TDSS!O] [Trojan.Downloader] [W32/Heuristic-210!Eldorado] [Suspicious_F.E] [Win32/Oflwr.A!crypt] [Packed/FSG] [Trojan.Click3.5580] [Heuristic.BehavesLike.Win32.Suspicious-BAY.G] [Mal/Behav-160] [PE:Trojan.Friet!1.9DB0] [Packed.Win32.PolyCrypt.d] [SHeur4.BRVX] [Trojan.Win32.Banker.OM]

Whois

Property	Value
Email	CQQYGSFPB@WHOISPRIVACYPROTECT.COM
NameServer	NS4.DNSV3.COM
Created	2003-11-24 00:00:00
Changed	2014-09-08 00:00:00
Expires	2015-11-24 00:00:00
Registrar	ENOM, INC.

DNS Resolutions

Date	IP Address
2009-10-26	222.191.251.98 (ClassC)
2010-06-04	58.215.74.30 (ClassC)
2010-06-04	222.173.188.49 (ClassC)
2010-06-04	222.173.188.56 (ClassC)
2010-06-04	61.147.67.174 (ClassC)
2010-06-04	222.173.188.54 (ClassC)
2010-12-24	61.147.124.217 (ClassC)
2010-12-26	222.191.251.102 (ClassC)
2011-01-04	222.191.251.167 (ClassC)
2011-01-05	221.181.73.215 (ClassC)
2011-01-09	61.147.67.163 (ClassC)
2011-01-23	58.215.74.8 (ClassC)
2011-02-07	222.173.188.44 (ClassC)
2011-02-22	221.181.73.220 (ClassC)
2011-02-28	222.173.188.52 (ClassC)
2011-03-04	221.181.73.218 (ClassC)
2011-03-09	58.215.74.19 (ClassC)
2011-03-11	222.191.251.155 (ClassC)
2011-03-23	61.147.124.247 (ClassC)
2011-03-23	61.147.125.67 (ClassC)
2011-04-22	222.173.188.35 (ClassC)
2011-05-07	222.191.251.186 (ClassC)
2011-07-18	222.173.188.43 (ClassC)
2012-05-04	203.191.149.34 (ClassC)
2012-10-18	222.173.188.55 (ClassC)
2012-12-26	222.191.251.131 (ClassC)
2012-12-30	222.173.188.39 (ClassC)
2012-12-30	61.147.67.212 (ClassC)
2012-12-31	222.191.251.75 (ClassC)
2013-01-01	58.215.76.136 (ClassC)
2013-01-04	58.215.65.137 (ClassC)
2013-01-11	61.147.124.125 (ClassC)
2013-01-24	222.173.188.53 (ClassC)
2013-01-25	61.147.124.79 (ClassC)
2013-03-05	222.191.251.136 (ClassC)
2013-05-01	58.215.76.109 (ClassC)
2013-05-10	61.147.125.68 (ClassC)
2013-05-11	58.215.76.101 (ClassC)
2013-06-21	58.215.65.83 (ClassC)
2013-08-06	58.215.65.207 (ClassC)
2013-08-09	221.181.73.217 (ClassC)
2013-09-06	58.215.76.207 (ClassC)
2013-10-06	58.215.76.205 (ClassC)
2013-11-05	61.147.125.75 (ClassC)
2013-11-06	61.147.124.75 (ClassC)
2014-02-19	61.147.124.71 (ClassC)
2014-03-22	61.147.125.69 (ClassC)
2014-06-05	61.147.124.144 (ClassC)
2014-11-09	61.147.125.165 (ClassC)
2015-02-04	61.147.124.147 (ClassC)
2025-08-02	74.208.215.38 (ClassC)

Port 80

Subdomains

Date	Domain	IP
count20.51yes.com	2016-12-15	61.147.67.184
count30.51yes.com	2015-04-03	222.191.251.131
count11.51yes.com	2014-07-24	222.191.251.98
count31.51yes.com	2014-01-26	61.147.124.125
count41.51yes.com	2020-05-10	61.147.124.71
count22.51yes.com	2014-05-06	58.215.76.205
count42.51yes.com	2013-11-23	61.147.124.79
count3.51yes.com	2019-09-01	58.215.65.137
count4.51yes.com	2014-05-14	221.181.73.220
count35.51yes.com	2014-06-27	58.215.65.83
count5.51yes.com	2014-06-26	58.215.76.207
count26.51yes.com	2014-03-06	61.147.125.67
count46.51yes.com	2017-01-05	162.159.208.96
count6.51yes.com	2014-02-22	221.181.73.215
count37.51yes.com	2014-05-16	61.147.67.212
count18.51yes.com	2020-05-12	222.191.251.131
count19.51yes.com	2013-06-10	58.215.76.136
count29.51yes.com	2017-02-24	162.159.238.155

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]