Domain > sk.ybinst4.ec.yimg.com

More information on this domain is in AlienVault OTX

Files that talk to sk.ybinst4.ec.yimg.com

MD5	A/V
136f501b986d03dd1275b4d53f7e6d90	[Trojan/W32.Small.32768.BMO] [Artemis!136F501B986D] [Trojan.Zbot] [Trojan.Win32.A.Downloader.67840.C] [Trojan.Inject1.11609] [TR/Spy.Bovigs.A] [Troj/Ixeshe-E] [Malware-Cryptor.SB] [Trj/Downloader.MDW] [Trojan.Win32.Downloader.ao] [Win32/Trojan.Spy.df6]

Whois

Property	Value
Email	domainadmin@yahoo-inc.com
NameServer	NS2.YAHOO.COM
Created	1997-05-14 00:00:00
Changed	2015-04-13 00:00:00
Expires	2016-05-15 00:00:00
Registrar	MARKMONITOR INC.

DNS Resolutions

Date	IP Address
2014-06-18	212.82.108.12 (ClassC)
2023-12-19	69.147.87.250 (ClassC)
2024-10-20	13.52.93.183 (ClassC)
2025-07-04	69.147.88.14 (ClassC)
2025-08-03	69.147.88.15 (ClassC)

HTTP/1.1 404 Not Found on AcceleratorDate: Sun, 16 Jul 2023 07:29:22 GMTConnection: keep-aliveServer: ATSCache-Control: no-storeContent-Type: text/htmlContent-Language: enX-Frame-Options: DENYContent-

!DOCTYPE html>html langen-us>  head>    meta http-equivcontent-type contenttext/html; charsetUTF-8>    meta charsetutf-8>    title>Yahoo/title>    meta nameviewport contentwidthdevice-width,initial-scale1,minimal-ui>    meta http-equivX-UA-Compatible contentIEedge,chrome1>    style>      html {          height: 100%;      }      body {          background: #fafafc url(https://s.yimg.com/nn/img/sad-panda-201402200631.png) 50% 50%;          background-size: cover;          height: 100%;          text-align: center;          font: 300 18px helvetica neue, helvetica, verdana, tahoma, arial, sans-serif;          margin: 0;      }      table {          height: 100%;          width: 100%;          table-layout: fixed;          border-collapse: collapse;          border-spacing: 0;          border: none;      }      h1 {          font-size: 42px;          font-weight: 400;          color: #400090;      }      p {          color: #1A1A1A;      }      #message-1 {          font-weight: bold;          margin: 0;      }      #message-2 {          display: inline-block;          *display: inline;          zoom: 1;          max-width: 17em;          _width: 17em;      }      /style>      script>      !function(){if(windowwindow.top){var owindow.location.host;o.endsWith(.yahoo.com)&&window.location.replace(https://www.yahoo.com/),o.endsWith(.aol.com)&&window.location.replace(https://www.aol.com/),o.endsWith(.huffpost.com)&&window.location.replace(https://www.huffpost.com/),o.endsWith(.engadget.com)&&window.location.replace(https://www.engadget.com/)}}();      /script>  /head>  body>  !-- status code : 404 -->  !-- Not Found on Accelerator -->  !-- host machine: ec17.ycpi.sja.yahoo.com -->  !-- timestamp: 1689492562.662 -->  !-- url: http://sk.ybinst4.ec.yimg.com/-->  script typetext/javascript>    function buildUrl(url, parameters){      var qs  ;      for(var key in parameters) {        var value  parameterskey;        qs.push(encodeURIComponent(key) +  + encodeURIComponent(value));      }      url  url + ? + qs.join(&);

Subdomains

Date	Domain	IP
ac.ybinst0.ec.yimg.com	2023-12-26	69.147.87.249
bf.ybinst0.ec.yimg.com	2024-07-13	34.223.47.50
gq.ybinst0.ec.yimg.com	2024-07-08	34.223.47.50
test.ybinst0.ec.yimg.com	2025-07-01	69.147.88.14
ac.ybinst1.ec.yimg.com	2023-12-20	69.147.87.250
bf.ybinst1.ec.yimg.com	2025-03-02	69.147.88.14
sk.ybinst1.ec.yimg.com	2025-03-18	69.147.88.15
yql2.ec.yimg.com	2025-03-08	69.147.88.14
ybinst2.ec.yimg.com	2023-12-04	69.147.87.249
ac.ybinst2.ec.yimg.com	2024-09-21	44.231.59.15
test.ybinst2.ec.yimg.com	2025-05-29	69.147.88.15
yql3.ec.yimg.com	2025-03-12	69.147.88.15
ybinst3.ec.yimg.com	2025-06-29	69.147.88.14
ac.ybinst3.ec.yimg.com	2023-12-20	69.147.87.249
ybinst4.ec.yimg.com	2024-07-08	184.169.149.104
ac.ybinst4.ec.yimg.com	2024-10-03	44.231.59.15
sk.ybinst4.ec.yimg.com	2014-06-18	212.82.108.12
test.ybinst4.ec.yimg.com	2025-06-23	69.147.88.15
ybinst5.ec.yimg.com	2023-11-24	69.147.87.250
ac.ybinst5.ec.yimg.com	2024-07-10	34.223.47.50
bf.ybinst5.ec.yimg.com	2025-07-05	69.147.88.15
ac.ybinst6.ec.yimg.com	2024-07-12	184.169.149.104
gq.ybinst6.ec.yimg.com	2025-04-30	69.147.88.14
ybinst7.ec.yimg.com	2024-10-30	13.52.93.183
ac.ybinst7.ec.yimg.com	2024-07-11	184.169.149.104
gq.ybinst7.ec.yimg.com	2024-07-31	209.73.183.16
ybinst8.ec.yimg.com	2024-07-05	34.223.47.50
ac.ybinst8.ec.yimg.com	2023-12-04	69.147.87.250
bf.ybinst8.ec.yimg.com	2025-03-08	69.147.88.15
sk.ybinst8.ec.yimg.com	2025-07-21	69.147.88.14
ac.ybinst9.ec.yimg.com	2024-10-03	44.231.59.15
bf.ybinst9.ec.yimg.com	2024-08-10	13.52.93.183
test.ybinst9.ec.yimg.com	2025-07-05	69.147.88.14

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > sk.ybinst4.ec.yimg.com

Is this malicious?

Files that talk to sk.ybinst4.ec.yimg.com

Whois

DNS Resolutions

Port 80

Subdomains