Help RSS API Feed Maltego Contact                        

Domain > yahoo.fr

More information on this domain is in AlienVault OTX

Is this malicious?

Reports
http://researchcenter.paloaltonetworks.com/2016/02...    
https://otx.alienvault.com/pulse/56cf3cc167db8c17d...    

Files that talk to yahoo.fr
MD5A/V
69105950b2bb95843dea5937bea0e8f0[HW32.CDB.5919] [Packed.Win32.Katusha.3!O] [WS.Reputation.1] [Kryptik.CDQY] [TrojWare.Win32.Kryptik.CBCJ] [BackDoor.Slym.13873] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [Crypt_s.GNC] [Trojan.Win32.Kryptik.CBCJ]
7b34d19bfbc7f1b735f825de01b281f8
61add6d0496b8d0d386deef1dcca6a26[HW32.CDB.Ec21] [W32/Worm-AAEH.pq!61ADD6D0496B] [WS.Reputation.1] [Worm.Win32.VB.NG] [Win32.HLLW.Autoruner2.12869] [Worm/Vobfus.A.635] [Mal/VB-ALW] [Worm:Win32/Vobfus] [W32/Trojan.ZKKJ-0621] [Trojan/Win32.Jorik] [PE:Malware.XPACK-HIE/Heur!1.9C48] [Worm.Win32.Vobfus] [Inject2.ABIR] [Trojan.Win32.Injector.BCTT]
970a7ea91d4845a5c13d26b6fa4664a0[HW32.CDB.95aa] [PWSZbot-FBOS!970A7EA91D48] [Trojan.Crypt.NKN] [TROJ_FORUCON.BMC] [Trojan.Win32.Inject.nnuq] [TR/Dropper.VB.7310] [Virus.Win32.Heur.p] [SHeur4.BWOZ]
f82e84b4dbc7696e5ab2311a01300c4f[TROJ_FORUCON.BMC] [Packed/PECompact] [Heuristic.LooksLike.Win32.Suspicious.C!81] [Win32/Extats.A] [SHeur4.BUXJ]
abe19665682ad3e10ba09471775c150b[Malware.Packer.FFS] [Heuristic.LooksLike.Win32.Suspicious.E]
e21b3469b4fc1efddf76d8c89f1ebb2a[Malware.Packer.HGX1] [Heuristic.LooksLike.Win32.Suspicious.E] [W32/Kryptik.AXUE!tr]
9aa81fa022c0b159758efa1bda4f9be1[HW32.CDB.A20b] [Packed.Win32.Katusha.3!O] [WS.Reputation.1] [Kryptik.CCFN] [Backdoor.Win32.Hlux.dthd] [UnclassifiedMalware] [BackDoor.Slym.13011] [Backdoor:Win32/Kelihos] [Heur.Trojan.Hlux] [Win32/Kryptik.CBNK] [Win32.Backdoor.Hlux.Hwcu] [Trojan.Crypt3] [W32/Kryptik.BD!tr] [Crypt3.OHL] [Backdoor.Win32.Hlux.Ac]
971d6821a96e8f41da919db02ebc60da[Malware.Packer.FFS] [Heuristic.LooksLike.Win32.Suspicious.E] [Trojan/Win32.Yakes] [W32/Kelihos.BCEB!tr]
3fb83eaf2a665f71ac2065f5f6956d50[HW32.CDB.5da2] [Packed.Win32.Katusha.1!O] [Trojan.Win32.Hlux.cynagk] [Trojan.FakeAV] [Kryptik.CDQY] [Win32/Kelihos.GeEUUIB] [Backdoor.Win32.Hlux.dqkq] [Backdoor.Hlux!m6CCC6SKjdo] [Win32.Backdoor.Hlux.Lose] [Backdoor.Win32.Hlux.DUHE] [Trojan.Packed.26581] [Trojan[Backdoor]/Win32.Hlux] [Win32.Hack.Hlux.dq.(kcloud)] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GNC] [Backdoor.Win32.Hlux.aDM]
4211b2d7121c11d5f032e6620030a384[HW32.CDB.Cd7e] [Packed.Win32.Katusha.3!O] [Hlux.ZY] [VirTool:Win32/Obfuscator.WT]
0f5f90b03b49b276d148f7e6be7c30f1[HW32.CDB.27e0] [Packed.Win32.Katusha.1!O] [Trojan.Win32.Hlux.cxxldj] [Trojan.FakeAV] [Kryptik.CCFN] [Win32/Kelihos.OWUMMQC] [Backdoor.Win32.Hlux.dqeh] [Backdoor.Hlux!9TTR+wn2IWc] [Backdoor.Win32.Hlux.DUHE] [BackDoor.Slym.12819] [Trojan[Backdoor]/Win32.Hlux] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Win32/Kryptik.CAXO] [Win32.Backdoor.Hlux.Hpn] [Trojan.Crypt_s] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GNC] [Backdoor.Win32.Hlux.ArxZ]
db5b440f6419090cd9567f3b33fd3ced[Malware.Packer.HGX1] [BackDoor.SlymENT.1498] [Heuristic.LooksLike.Win32.Suspicious.E] [W32/Kryptik.AXUE!tr]
833009a54c295a72ad64ab0941f482fe[Suspicious.Cloud.5] [Kryptik.CCFN] [TrojWare.Win32.Kryptik.BZOO] [Trojan.DownLoad3.28912] [TR/Crypt.EPACK.9220] [Heuristic.BehavesLike.Win32.Suspicious-BAY.K] [Mal/FakeAV-UF] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Win32.SuspectCrc] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GIF] [Trojan.Win32.Kryptik.BZOO]
b36385662ebdaf40bc3d28f90b6a4751[Spyware.Zbot.USBV] [Trojan] [BackDoor.SlymENT.1498] [Heuristic.LooksLike.Win32.Suspicious.E] [Trojan/Win32.Foreign]
3220ab9b63a767c299000ea9d9e3a056[HW32.CDB.1b0b] [Packed.Win32.Katusha.1!O] [Backdoor.Hlux!u8SUOkHyYnA] [Trojan.FakeAV] [Kryptik.CCFN] [Win32/Kelihos.RbUfAWB] [Backdoor.Win32.Hlux.dpoo] [Trojan.Win32.Hlux.cxxuzn] [TrojWare.Win32.Kryptik.CAUP] [BackDoor.Slym.12819] [Trojan[Backdoor]/Win32.Hlux] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [Backdoor.Hlux] [Win32/Kryptik.CAXO] [Win32.Backdoor.Hlux.Lgjg] [Trojan.Crypt_s] [W32/Kryptik.CAXO!tr] [Crypt_s.GNC] [Trojan.Win32.Kryptik.CAXO]
3a44da011fc699a6afc6cc7d07131dd6[HW32.CDB.14e7] [Trojan.Win32.Kryptik.cxajdj] [Kryptik.CDQY] [TrojWare.Win32.Kryptik.CAHC] [Trojan.Packed.26527] [Trojan:Win32/Dynamer!ac] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Backdoor.Win32.Kelihos] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GKZ]
18e659efd6bd23972f0a9a6a9ecae920[HW32.CDB.9c4f] [Trojan.Win32.Kryptik.cxapgj] [Kryptik.CCFN] [Backdoor.Win32.Hlux.dmyv] [Backdoor.Hlux!x5Q6ZTEiRSs] [BackDoor.Slym.13348] [Mal/FakeAV-UF] [Trojan[Backdoor]/Win32.Hlux] [VirTool:Win32/Obfuscator.WT] [Heur.Trojan.Hlux] [Win32/Kryptik.CASL] [Win32.SuspectCrc] [W32/Kryptik.BWUN!tr] [Crypt3.LQN] [Trojan.Win32.Kryptik.CASL] [Win32/Trojan.337]
651f650dfb3e715927cee5103e68e0c7[HW32.CDB.F91a] [Packed.Win32.Katusha.1!O] [Kryptik.CCQY] [Backdoor.Win32.Hlux.cri] [Win32.Malware!Drop] [Artemis!651F650DFB3E] [Backdoor:Win32/Kelihos.F] [W32/Hlux.CBWM!tr.bdr] [Crypt_s.GQG] [Backdoor.Win32.Hlux.AB]
27213d33434bf796a9f535ec98e8a918[HW32.CDB.03b6]

Whois
PropertyValue
Email ccops@markmonitor.com
NameServer ns2.yahoo.com
Created 1996-09-20 00:00:00
Changed 2015-05-02 00:00:00
Registrar MARKMONITOR Inc.

DNS Resolutions
DateIP Address
2013-05-1687.248.120.148 (ClassC)
2013-10-1777.238.178.122 (ClassC)
2013-10-1987.248.120.148 (ClassC)
2013-12-0277.238.178.122 (ClassC)
2014-04-2898.137.236.24 (ClassC)
2014-04-30106.10.212.24 (ClassC)
2014-05-02212.82.102.24 (ClassC)
2014-05-1277.238.184.24 (ClassC)
2014-05-1874.6.50.24 (ClassC)
2014-05-2377.238.184.24 (ClassC)
2014-05-30212.82.102.24 (ClassC)
2014-06-05106.10.212.24 (ClassC)
2014-06-1898.137.236.24 (ClassC)
2014-07-0174.6.50.24 (ClassC)
2017-01-02124.108.105.24 (ClassC)
2020-03-23124.108.115.101 (ClassC)
2020-03-23212.82.100.151 (ClassC)
2020-03-2598.136.103.24 (ClassC)
2020-03-2674.6.136.151 (ClassC)
2020-08-11106.10.248.151 (ClassC)
2020-08-17124.108.115.100 (ClassC)
2020-08-1774.6.136.150 (ClassC)
2020-08-17212.82.100.150 (ClassC)
2023-08-0998.136.103.23 (ClassC)
2023-11-01106.10.248.150 (ClassC)
2024-01-0613.49.212.207 (ClassC)
2024-01-1113.50.184.192 (ClassC)
2024-02-0354.161.105.65 (ClassC)
2024-02-1034.213.101.254 (ClassC)
2024-02-1444.228.206.170 (ClassC)
2024-02-1813.251.69.97 (ClassC)
2024-03-1034.225.127.72 (ClassC)
2025-03-2676.223.84.192 (ClassC)
2025-03-2913.248.158.7 (ClassC)

Subdomains
DateDomainIP
music.yahoo.fr2025-02-2713.248.158.7
be.yahoo.fr2023-07-1698.136.103.23
finance.yahoo.fr2014-10-17188.125.73.108
leboncotedelatartine.yahoo.fr2014-12-1974.6.50.150
annuaire.yahoo.fr2014-12-1574.6.50.150
store.yahoo.fr2024-10-0813.248.158.7
realestate.yahoo.fr2025-02-2776.223.84.192
lemagdestendances.laredoute.yahoo.fr2025-02-0278.109.84.27
retrospective.yahoo.fr2025-03-2913.248.158.7
shopping.yahoo.fr2025-02-2713.248.158.7
visit.webhosting.yahoo.fr2024-10-0813.248.158.7
search.yahoo.fr2024-02-1544.228.206.170
mali.yahoo.fr2024-10-2676.223.84.192
abelazi.yahoo.fr2025-02-2076.223.84.192
betobehk.yahoo.fr2024-09-2276.223.84.192
advertisingcentral.yahoo.fr2025-03-1076.223.84.192
ail.yahoo.fr2024-02-1644.228.206.170
mail.yahoo.fr2014-10-13188.125.73.108
pop.mail.yahoo.fr2024-12-0367.195.12.14
smtp.mail.yahoo.fr2013-05-26188.125.69.59
imail.yahoo.fr2023-12-2244.228.206.170
espanol.yahoo.fr2024-12-1013.248.158.7
mon.yahoo.fr2014-06-1074.6.50.150
bkambo.yahoo.fr2025-02-1876.223.84.192
video.yahoo.fr2025-03-2813.248.158.7
meteo.yahoo.fr2014-05-2674.6.50.24
info.yahoo.fr2024-02-1534.213.101.254
messenger.yahoo.fr2025-02-2776.223.84.192
courrier.yahoo.fr2014-05-3074.6.50.150
lyncdiscover.yahoo.fr2023-07-2098.136.103.23
adserver.yahoo.fr2023-12-2334.213.101.254
hotjobs.yahoo.fr2024-10-0813.248.158.7
analytics.yahoo.fr2024-10-0813.248.158.7
lemagdestendances.yahoo.fr2015-01-25106.10.212.24
vosmeilleuresidees.yahoo.fr2024-09-2976.223.84.192
www.vosmeilleuresidees.yahoo.fr2024-11-2213.248.158.7
games.yahoo.fr2024-10-0876.223.84.192
groupes.yahoo.fr2025-01-1213.248.158.7
encheres.yahoo.fr2024-07-0913.248.158.7
deals.yahoo.fr2024-10-0813.248.158.7
rivals.yahoo.fr2024-10-0813.248.158.7
yahooligans.yahoo.fr2024-10-0813.248.158.7
auctions.yahoo.fr2024-10-1413.248.158.7
marketingsolutions.yahoo.fr2025-02-2776.223.84.192
autos.yahoo.fr2015-04-01188.125.73.108
groups.yahoo.fr2025-02-2776.223.84.192
answers.yahoo.fr2024-01-1234.213.101.254
business.yahoo.fr2023-08-2498.136.103.23
sports.yahoo.fr2014-11-1074.6.50.150
fantasysports.yahoo.fr2025-02-2713.248.158.7
cricket.yahoo.fr2024-10-0876.223.84.192
sport.yahoo.fr2014-10-3074.6.50.150
eurosport.yahoo.fr2024-10-0813.248.158.7
www.yahoo.fr2014-10-14188.125.73.108
awww.yahoo.fr2023-07-1698.136.103.23
gwww.yahoo.fr2024-10-2076.223.84.192
lwww.yahoo.fr2024-10-1876.223.84.192
axis.hopfrwww.yahoo.fr2024-01-1234.213.101.254
chuvwww.yahoo.fr2023-07-1698.136.103.23
ywww.yahoo.fr2024-01-1044.228.206.170
wwxw.yahoo.fr2024-11-2676.223.84.192
buy.yahoo.fr2025-02-2676.223.84.192
wwwy.yahoo.fr2024-10-1676.223.84.192
View on OTX | View on ThreatMiner








Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]



� Copyright 2019 AlienVault, Inc. | Legal| Status| Do Not Sell My Personal Information