Help RSS API Feed Maltego Contact                        

Domain > yhoo.com

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to yhoo.com
MD5A/V
3fb83eaf2a665f71ac2065f5f6956d50[HW32.CDB.5da2] [Packed.Win32.Katusha.1!O] [Trojan.Win32.Hlux.cynagk] [Trojan.FakeAV] [Kryptik.CDQY] [Win32/Kelihos.GeEUUIB] [Backdoor.Win32.Hlux.dqkq] [Backdoor.Hlux!m6CCC6SKjdo] [Win32.Backdoor.Hlux.Lose] [Backdoor.Win32.Hlux.DUHE] [Trojan.Packed.26581] [Trojan[Backdoor]/Win32.Hlux] [Win32.Hack.Hlux.dq.(kcloud)] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GNC] [Backdoor.Win32.Hlux.aDM]
0f5f90b03b49b276d148f7e6be7c30f1[HW32.CDB.27e0] [Packed.Win32.Katusha.1!O] [Trojan.Win32.Hlux.cxxldj] [Trojan.FakeAV] [Kryptik.CCFN] [Win32/Kelihos.OWUMMQC] [Backdoor.Win32.Hlux.dqeh] [Backdoor.Hlux!9TTR+wn2IWc] [Backdoor.Win32.Hlux.DUHE] [BackDoor.Slym.12819] [Trojan[Backdoor]/Win32.Hlux] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Win32/Kryptik.CAXO] [Win32.Backdoor.Hlux.Hpn] [Trojan.Crypt_s] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GNC] [Backdoor.Win32.Hlux.ArxZ]
888cf6888e476ab89daef8385b7ae881[HW32.CDB.B8e4] [Backdoor.Hlux.r3] [Trojan.Win32.Hlux.cxcinh] [Kryptik.CCFN] [Backdoor.Win32.Hlux.djfk] [Backdoor.Hlux!Jm3TflIszzA] [Mal/Kelihos-A] [TrojWare.Win32.Kryptik.BZOO] [Trojan.DownLoad3.28912] [Trojan[Backdoor]/Win32.Hlux] [Backdoor:Win32/Kelihos] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GHF] [Trojan.Win32.Kryptik.BZIX]
2748ea7375275e992ebde4575fe7c1a6[HW32.CDB.90bf] [Backdoor.Hlux.r3] [Backdoor.Hlux!wF4QLfqeA5I] [Kryptik.CCFN] [Backdoor.Win32.Hlux.crc] [Trojan.Win32.Hlux.cwzkvh] [TrojWare.Win32.Kryptik.BZOO] [BackDoor.Slym.14056] [Heuristic.LooksLike.Win32.Suspicious.E] [Mal/Kelihos-A] [Trojan[Backdoor]/Win32.Hlux] [Backdoor:Win32/Kelihos] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GID] [Trojan.Win32.Kryptik.BZOO]
981a83b3f0d4a74b0b38becda7c8cb9c[Artemis!981A83B3F0D4] [Trojan.Win32.Crypt.cxd] [W32/Yakes.FHJN!tr] [Win32/Cryptor]
4cca20614b980e5237e738d8f322f151[HW32.Laneul.jcwu] [Trojan.Ransom.ED]
038a21f4f89d526f853bba2a18b81708[Worm.Win32.Ngrbot.afvw] [Win32.HLLW.Autoruner2.1926] [TR/Crypt.Xpack.77749]

Whois
PropertyValue
Email domainadmin@yahoo-inc.com
NameServer NS2.YAHOO.COM
Created 1997-09-30 00:00:00
Changed 2014-08-28 00:00:00
Expires 2015-09-29 00:00:00
Registrar MARKMONITOR INC.

DNS Resolutions
DateIP Address
2014-05-2498.139.102.145 (ClassC)
2014-05-3068.180.206.184 (ClassC)
2014-06-21188.125.73.108 (ClassC)
2014-07-08188.125.73.108 (ClassC)
2015-05-2074.6.50.150 (ClassC)
2023-12-2344.228.206.170 (ClassC)
2024-02-1434.213.101.254 (ClassC)
2025-06-2313.248.158.7 (ClassC)
2025-08-0876.223.84.192 (ClassC)

Port 80

Subdomains
DateDomainIP
91.yhoo.com2025-02-0776.223.84.192
agentportal.flurry.vip.bf2.yhoo.com2025-03-1013.248.158.7
14.yhoo.com2024-02-1634.213.101.254
84.yhoo.com2024-02-1634.213.101.254
305.yhoo.com2024-02-1644.228.206.170
85.yhoo.com2023-07-1298.136.103.23
1988.yhoo.com2025-04-0776.223.84.192
98.yhoo.com2025-02-0713.248.158.7
shine.yhoo.com2014-08-1274.6.50.150
mail.yhoo.com2014-06-2174.6.50.150
powell.yhoo.com2014-08-0274.6.50.150
aol.com.yhoo.com2024-01-1234.213.101.254
in.yhoo.com2014-11-0274.6.50.150
autodiscover.yhoo.com2024-08-1976.223.84.192
www.yhoo.com2014-10-16188.125.73.108
333www.yhoo.com2025-04-0976.223.84.192
View on OTX | View on ThreatMiner








Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]



� Copyright 2019 AlienVault, Inc. | Legal| Status| Do Not Sell My Personal Information