Domain > yuuls.com

More information on this domain is in AlienVault OTX

Files that talk to yuuls.com

MD5	A/V
61b408e2de1c4996c3708f1f46913d60	[HW32.CDB.C1b5] [Trojan.Kryptik!QyFpAm9uzfY] [Kryptik.CCFN] [Backdoor.Win32.Hlux.djft] [Trojan.Win32.S.PSW-Tepfer.835600.AI] [UnclassifiedMalware] [BackDoor.Slym.14044] [Mal/Kelihos-A] [Trojan[Backdoor]/Win32.Hlux] [Trojan/Win32.Tepfer] [W32/Trojan.AJYO-7526] [Backdoor.Hlux] [Trojan.Crypt_s] [W32/Kryptik.BWUN!tr] [Crypt3.HUF] [Trojan.Win32.Kryptik.BZIX]

Whois

Property	Value
Email	domain@wisa.co.kr
NameServer	DNS1.CAFE24.COM
Created	2008-04-16 00:00:00
Changed	2014-09-11 00:00:00
Expires	2016-04-16 00:00:00
Registrar	DOTNAME KOREA CORP

DNS Resolutions

Date	IP Address
2014-04-25	203.238.183.99 (ClassC)
2015-06-03	-
2021-02-23	45.56.79.23 (ClassC)
2024-06-08	52.71.57.184 (ClassC)
2024-06-28	3.19.116.195 (ClassC)
2024-12-25	3.130.253.23 (ClassC)
2025-04-11	3.130.204.160 (ClassC)
2025-04-24	54.209.32.212 (ClassC)
2025-05-18	3.94.41.167 (ClassC)
2026-02-27	13.223.25.84 (ClassC)

Port 80

HTTP/1.1 200 OKServer: openresty/1.13.6.1Date: Tue, 23 Feb 2021 23:30:15 GMTContent-Type: text/html; charsetutf-8Content-Length: 1559Connection: closeVary: Accept-LanguageContent-Language: en

!DOCTYPE html>html>head>meta http-equivx-ua-compatible contentIEedge>title>/title>script typetext/javascript>(function() {var p  eyJ1cmkiOiIvIiwiYXJncyI6IiIsInJlZmVyZXIiOiIiLCJob3N0X25hbWUiOiJ5dXVscy5jb20ifQ:1lEh8B:PZy89V902nr7CbYuTS8yQw8ghtA, as  http://yuuls.com/mtm/async/;function d(n){window.location.href  http://www42.yuuls.com/+n;}function ar(r) {if (r.slice(0, 1) ! .) {try {window.location.assign(r);} catch (err) {}try {var mar  document.createElement(meta);mar.httpEquiv  refresh;mar.content  0;url+r;document.getElementsByTagName(head)0.appendChild(mar);} catch (err) {}} else {var s  document.createElement(span);s.idecode;s.appendChild(document.createTextNode(r.slice(1)));document.getElementsByTagName(body)0.appendChild(s);}}if (fetch in window) {try {fetch(as + p + /1, {credentials: include}).then(function(r) {if (!r.ok) {throw Error(50x);}return r.text();}).then(function(r) {ar(r);});} catch (err) {d(2);}} else {try {var x  new XMLHttpRequest();x.open(GET, as + p + /2, false);x.onerror  function() {d(3);};x.onload  function() {if (x.status  200) {ar(x.responseText);} else {d(4);}};x.onreadystatechange  function(r) {if (x.readyState  4){if (x.status  200) {ar(x.responseText);} else {d(6);}}};x.send();} catch (err) {d(5);}}})();/script>meta http-equivrefresh content5;urlhttp://yuuls.com/mtm/direct/eyJ1cmkiOiIvIiwiYXJncyI6IiIsInJlZmVyZXIiOiIiLCJob3N0X25hbWUiOiJ5dXVscy5jb20ifQ:1lEh8B:PZy89V902nr7CbYuTS8yQw8ghtA/1 />/head>body>/body>/html>

Port 443

Subdomains

Date	Domain	IP
mail.yuuls.com	2014-04-25	203.246.167.103

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]