Domain > mx-eu.mail.am0.yahoodns.net

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to mx-eu.mail.am0.yahoodns.net

MD5	A/V
d42c1a59b111316f7481770349e653db	[HW32.CDB.87f3] [Malware.Packer.OCD]
4c6eb01b40395d4a8294f7393f0a5936	[HW32.CDB.E642] [W32/Worm-AAEH.pq!4C6EB01B4039] [WS.Reputation.1] [Injector.GJTG] [Worm.Win32.VB.NG] [Win32.HLLW.Autoruner2.12544] [Worm/Vobfus.agcpv] [Mal/VB-ALW] [Worm:Win32/Vobfus.ZR] [PE:Malware.XPACK-HIE/Heur!1.9C48] [Worm.Win32.Vobfus] [Inject2.ABEP] [Trojan.Win32.Injector.BCCY] [Win32/Worm.221]
69105950b2bb95843dea5937bea0e8f0	[HW32.CDB.5919] [Packed.Win32.Katusha.3!O] [WS.Reputation.1] [Kryptik.CDQY] [TrojWare.Win32.Kryptik.CBCJ] [BackDoor.Slym.13873] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [Crypt_s.GNC] [Trojan.Win32.Kryptik.CBCJ]
7b34d19bfbc7f1b735f825de01b281f8
ebbf2139fa265c6896be78fe8bbd44f7
61add6d0496b8d0d386deef1dcca6a26	[HW32.CDB.Ec21] [W32/Worm-AAEH.pq!61ADD6D0496B] [WS.Reputation.1] [Worm.Win32.VB.NG] [Win32.HLLW.Autoruner2.12869] [Worm/Vobfus.A.635] [Mal/VB-ALW] [Worm:Win32/Vobfus] [W32/Trojan.ZKKJ-0621] [Trojan/Win32.Jorik] [PE:Malware.XPACK-HIE/Heur!1.9C48] [Worm.Win32.Vobfus] [Inject2.ABIR] [Trojan.Win32.Injector.BCTT]
970a7ea91d4845a5c13d26b6fa4664a0	[HW32.CDB.95aa] [PWSZbot-FBOS!970A7EA91D48] [Trojan.Crypt.NKN] [TROJ_FORUCON.BMC] [Trojan.Win32.Inject.nnuq] [TR/Dropper.VB.7310] [Virus.Win32.Heur.p] [SHeur4.BWOZ]
f82e84b4dbc7696e5ab2311a01300c4f	[TROJ_FORUCON.BMC] [Packed/PECompact] [Heuristic.LooksLike.Win32.Suspicious.C!81] [Win32/Extats.A] [SHeur4.BUXJ]
abe19665682ad3e10ba09471775c150b	[Malware.Packer.FFS] [Heuristic.LooksLike.Win32.Suspicious.E]
e21b3469b4fc1efddf76d8c89f1ebb2a	[Malware.Packer.HGX1] [Heuristic.LooksLike.Win32.Suspicious.E] [W32/Kryptik.AXUE!tr]
9aa81fa022c0b159758efa1bda4f9be1	[HW32.CDB.A20b] [Packed.Win32.Katusha.3!O] [WS.Reputation.1] [Kryptik.CCFN] [Backdoor.Win32.Hlux.dthd] [UnclassifiedMalware] [BackDoor.Slym.13011] [Backdoor:Win32/Kelihos] [Heur.Trojan.Hlux] [Win32/Kryptik.CBNK] [Win32.Backdoor.Hlux.Hwcu] [Trojan.Crypt3] [W32/Kryptik.BD!tr] [Crypt3.OHL] [Backdoor.Win32.Hlux.Ac]
971d6821a96e8f41da919db02ebc60da	[Malware.Packer.FFS] [Heuristic.LooksLike.Win32.Suspicious.E] [Trojan/Win32.Yakes] [W32/Kelihos.BCEB!tr]
3fb83eaf2a665f71ac2065f5f6956d50	[HW32.CDB.5da2] [Packed.Win32.Katusha.1!O] [Trojan.Win32.Hlux.cynagk] [Trojan.FakeAV] [Kryptik.CDQY] [Win32/Kelihos.GeEUUIB] [Backdoor.Win32.Hlux.dqkq] [Backdoor.Hlux!m6CCC6SKjdo] [Win32.Backdoor.Hlux.Lose] [Backdoor.Win32.Hlux.DUHE] [Trojan.Packed.26581] [Trojan[Backdoor]/Win32.Hlux] [Win32.Hack.Hlux.dq.(kcloud)] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GNC] [Backdoor.Win32.Hlux.aDM]
4211b2d7121c11d5f032e6620030a384	[HW32.CDB.Cd7e] [Packed.Win32.Katusha.3!O] [Hlux.ZY] [VirTool:Win32/Obfuscator.WT]
8e0c45d714cfb9ec425923a8167305d6
0f5f90b03b49b276d148f7e6be7c30f1	[HW32.CDB.27e0] [Packed.Win32.Katusha.1!O] [Trojan.Win32.Hlux.cxxldj] [Trojan.FakeAV] [Kryptik.CCFN] [Win32/Kelihos.OWUMMQC] [Backdoor.Win32.Hlux.dqeh] [Backdoor.Hlux!9TTR+wn2IWc] [Backdoor.Win32.Hlux.DUHE] [BackDoor.Slym.12819] [Trojan[Backdoor]/Win32.Hlux] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Win32/Kryptik.CAXO] [Win32.Backdoor.Hlux.Hpn] [Trojan.Crypt_s] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GNC] [Backdoor.Win32.Hlux.ArxZ]
db5b440f6419090cd9567f3b33fd3ced	[Malware.Packer.HGX1] [BackDoor.SlymENT.1498] [Heuristic.LooksLike.Win32.Suspicious.E] [W32/Kryptik.AXUE!tr]
833009a54c295a72ad64ab0941f482fe	[Suspicious.Cloud.5] [Kryptik.CCFN] [TrojWare.Win32.Kryptik.BZOO] [Trojan.DownLoad3.28912] [TR/Crypt.EPACK.9220] [Heuristic.BehavesLike.Win32.Suspicious-BAY.K] [Mal/FakeAV-UF] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Win32.SuspectCrc] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GIF] [Trojan.Win32.Kryptik.BZOO]
b36385662ebdaf40bc3d28f90b6a4751	[Spyware.Zbot.USBV] [Trojan] [BackDoor.SlymENT.1498] [Heuristic.LooksLike.Win32.Suspicious.E] [Trojan/Win32.Foreign]
3220ab9b63a767c299000ea9d9e3a056	[HW32.CDB.1b0b] [Packed.Win32.Katusha.1!O] [Backdoor.Hlux!u8SUOkHyYnA] [Trojan.FakeAV] [Kryptik.CCFN] [Win32/Kelihos.RbUfAWB] [Backdoor.Win32.Hlux.dpoo] [Trojan.Win32.Hlux.cxxuzn] [TrojWare.Win32.Kryptik.CAUP] [BackDoor.Slym.12819] [Trojan[Backdoor]/Win32.Hlux] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [Backdoor.Hlux] [Win32/Kryptik.CAXO] [Win32.Backdoor.Hlux.Lgjg] [Trojan.Crypt_s] [W32/Kryptik.CAXO!tr] [Crypt_s.GNC] [Trojan.Win32.Kryptik.CAXO]

Whois

Property	Value
Email	domainadmin@yahoo-inc.com
NameServer	NS2.YAHOO.COM
Created	2009-01-20 00:00:00
Changed	2014-12-20 00:00:00
Expires	2016-01-20 00:00:00
Registrar	MARKMONITOR INC.

DNS Resolutions

Date	IP Address
2013-05-16	77.238.177.9 (ClassC)
2014-03-24	188.125.69.79 (ClassC)
2025-05-03	188.125.72.74 (ClassC)
2025-06-23	188.125.72.73 (ClassC)

Subdomains

Date	Domain	IP
mta5.am0.yahoodns.net	2014-03-24	66.196.118.36
mta6.am0.yahoodns.net	2013-04-30	74.6.136.244
mta7.am0.yahoodns.net	2014-03-24	66.196.118.33
mx2.sbcglobal.am0.yahoodns.net	2014-05-30	98.136.217.192
mx-van.mail.am0.yahoodns.net	2014-07-05	98.139.171.244
mx-rogers.mail.am0.yahoodns.net	2014-03-24	98.139.214.154
mx-bt.mail.am0.yahoodns.net	2013-05-16	212.82.111.207
mx-eu.mail.am0.yahoodns.net	2014-03-24	188.125.69.79
any-pop-secure-legacy.mail.am0.yahoodns.net	2014-09-16	188.125.69.44
mx-biz.mail.am0.yahoodns.net	2014-03-24	98.139.171.245
smtp.mail.us.am0.yahoodns.net	2015-05-14	63.250.193.228
star.smtp.mail.eu.am0.yahoodns.net	2013-10-28	188.125.68.56

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]