Domain > b.yu0123456.com

More information on this domain is in AlienVault OTX

Is this malicious?

Most users have voted this as MALICIOUS

Files that talk to b.yu0123456.com

MD5	A/V
21057a70c4f7a6ecc630e766b8b47b20	[Trojan.Win32.DownLoad3.dqapeg] [W32/Adware.JUHA-6272] [TROJ_GE.E5C62EC1] [TrojWare.Win32.TrojanDownloader.VB.PMEA] [TROJ_GE.0795F442] [BehavesLike.Win32.AdwareOutBrowse.tc] [ADWARE/Verti.20480] [Artemis!8E4CDD9347AE] [TScope.Trojan.VB] [Riskware/OutBrowse] [Downloader.FGJ] [Adware.Win32.OutBrowse.BU]
f5d9a8fec909210fed2e7e9a2b2559dd	[Trojan.KillAv.DR] [Artemis!F5D9A8FEC909] [Trojan.Ransom] [Trojan] [Trojan/Foreign.qot] [Trojan.Win32.Foreign.xqxpf] [Trojan.ADH] [TROJ_SPNR.08IM12] [WIN.Ransom.Foreign] [Trojan-Ransom.Win32.Foreign.qot] [Trojan.Foreign!2fy15KSZc3I] [Trojan.Win32.A.Foreign.109600] [Mal/KillAV-J] [TrojWare.Win32.Ransom.Foreign.QOT] [Win32.HLLW.Autoruner1.24454] [TR/Injector.mel] [TROJ_SPNR.08IM12] [Artemis!F5D9A8FEC909] [Trojan/Foreign.aqf] [Win32.Troj.Undef.(kcloud)] [Trojan:Win32/Killav] [Trojan/Win32.Jorik] [Hoax.Foreign.qot] [Trojan.ADH] [Win32/AutoRun.VB.XW] [Trojan-Ransom.Win32.Foreign] [W32/Foreign.QOT!tr] [Trj/CI.A]
e29c3788471cf0bdaa407c843b400157	[Trojan.KillAv.DR] [Riskware] [Riskware] [Trojan/Injector.ust] [Trojan.Win32.Jorik.wteyk] [Trojan.Win32.Jorik.VBNA.bb] [Trojan.VBNA!xbLueX/rTek] [Troj/KillAV-IC] [Win32.HLLW.Autoruner1.24454] [TR/Buzy.EB.6] [TROJ_HIDEFIL.BMC] [Trojan/Jorik.ftgz] [Trojan/Win32.Jorik] [Trojan:Win32/Killav] [Trojan/Win32.Jorik] [Trojan.Jorik.VBNA] [Win32.SuspectCrc] [W32/Injector.VMC!tr]
95ad56efa37399f14df52030ad4f8a56	[Trojan.KillAv.DR] [Trojan.Ransom] [Trojan] [Trojan] [Trojan/Dropper.Injector.frgf] [Trojan.Win32.Injector.zrjhj] [W32.Rontokbro@mm] [Inject.AYLR] [TROJ_SPNR.15JC12] [Trojan-Dropper.Win32.Injector.frgf] [VirTool.VBInject!mo3O26g+vnk] [TrojWare.Win32.Injector.VZP] [Win32.HLLW.Autoruner1.24454] [TR/Jorik.EB.3] [TROJ_NOTOOLS.BMC] [TrojanDropper.Injector.apdp] [VirTool:Win32/VBInject] [Trojan/Win32.Jorik] [TrojanDropper.Injector] [Email-Worm.Rontokbro!rem] [Trojan-Dropper.Win32.Injector] [W32/Injector.VZP!tr]
88e7bbf44b1e97440ff6807c4c28871e	[Trojan.KillAv.DR] [W32/Autorun.worm.aadv] [Trojan.Ransom] [Trojan] [Trojan] [Trojan/Dropper.Injector.ftdb] [Trojan.Win32.Jorik.bcgfeh] [Inject.AYLR] [TROJ_SPNR.15JB12] [Trojan.Win32.Jorik.VBNA.ow] [VirTool.VBInject!yJg73IG9DEA] [TrojWare.Win32.Injector.QH] [Win32.HLLW.Autoruner1.24454] [TR/Jorik.EB] [W32/Autorun.worm.aadv] [Mal/KillAV-J] [TrojanDropper.Injector.aqod] [Trojan/Win32.Jorik] [VirTool:Win32/VBInject] [Trojan/Win32.Jorik] [Win32/AutoRun.VB.XW] [Trojan.Win32.KillAV] [W32/Injector.FTDB!tr] [Inject.BWH]
29c26dd7fff7d8744d9e6072cce66094	[Trojan.KillAv.DR] [Trojan] [Trojan] [Trojan/Jorik.VBNA.et] [Trojan.Win32.Jorik2.bbndqj] [Trojan.ADH] [VirTool.VBInject!rZkCQlRr6Mw] [TrojWare.Win32.Injector.AJR] [Win32.HLLW.Autoruner1.24454] [TR/Buzy.EB.9] [Trojan/Jorik.gzcy] [Trojan/Win32.Jorik] [VirTool:Win32/VBInject] [Trojan/Win32.Jorik] [Trojan.Jorik.VBNA] [Trojan.ADH] [Win32/AutoRun.VB.XW] [Trojan.Win32.Jorik] [W32/Injector.VZP!tr]
8186c7bf72a3e394df28742c09e5657e	[Trojan.Win32.Jorik.VBNA!O] [Trojan.KillAv.DR] [Trojan.Symmi.D9AE] [Trojan.Win32.Jorik2.bbndqj] [Win32/AutoRun.VB.XW] [Win32.HLLW.Autoruner1.24454] [Worm.VBNA.Win32.210211] [Trojan/Jorik.gzcy] [Trojan/Win32.VBNA] [Worm:Win32/Esfury.X] [Trojan/Win32.Jorik] [Trojan.VBNA] [PE:HackTool.VBInject!6.4DA[F1]] [Trojan.Win32.Jorik] [W32/Injector.VZP!tr]
3cbdb7f772ffd0288d48eb363c23bef0	[W32.GracindA.Worm] [Trojan-Dropper.Win32.Injector!O] [Trojan.KillAv.DR] [Artemis!3CBDB7F772FF] [Trojan/Dropper.Injector.fogn] [Trojan.DR.Injector!mMfPmYw0Ero] [SecurityRisk.Downldr] [TROJ_FORUCON.BMC] [Trojan-Dropper.Win32.Injector.fogn] [Trojan.Win32.Injector.woppd] [TrojWare.Win32.Injector.UST] [Win32.HLLW.Autoruner1.24454] [Dropper.Injector.Win32.37368] [TROJ_FORUCON.BMC] [Trojan-FBMN!0CB4B7569DCE] [TrojanDropper.Injector.amkp] [TR/Buzy.EB.9] [Trojan[Dropper]/Win32.Injector] [Trojan:Win32/VBInject.T] [Trojan.Symmi.D497] [Trojan/Win32.Jorik] [TrojanDropper.Injector] [Trojan.Win32.Jorik] [W32/Injector.XXE!tr] [Trojan.Win32.Dropper.fogn]
24dce1f861cf872e118e557eb4114f3c	[WS.Reputation.1] [TROJ_GE.ABA88ABE] [Trojan.Win32.FlowSpirit.dgozjr] [W32/Trojan.BPXW-9284] [TR/Rogue.640512.1] [Trojan.SuspectCRC] [Riskware/FlowSpirit] [Hacktool.Win32.FlowSpirit.BH]
ec5eef6fa8a12645c6abc8a89c99ea0b
87297bf57ccd79a6e5819398533276f3	[Worm.Esfury.X3] [Trojan/AutoRun.VB.xw] [Win32.Worm.VB.an] [Trojan.Win32.AntiAV.dwywyi] [W32/A-4321779e!Eldorado] [W32.Rontokbro@mm] [TROJ_SPNV.01D014] [Trojan.Win32.AntiAV.trq] [Trojan.StartPage!hfz4A9WTREs] [Troj.W32.Cossta] [Mal/VB-GI] [Worm.Win32.VB.pcy] [Win32.HLLW.Autoruner1.61047] [Trojan.StartPage.Win32.20029] [TROJ_SPNV.01D014] [BehavesLike.Win32.Trojan.tz] [W32/A-4321779e!Eldorado] [Trojan/StartPage.oxt] [Trojan/Win32.StartPage] [Win32.Troj.AntiAV.t.(kcloud)] [Worm:Win32/Esfury.X] [Trojan/Win32.AntiAV] [Win32/Startpage.NPKAOaC] [Win32.Trojan.Antiav.Dyzx] [Worm.Win32.Esfury] [W32/AutoRun.XW!tr] [Trojan.Win32.StartPage.At]
1c7f2c6661cbf85e07da1630ac1c9fe5	[Worm.Esfury.X3] [Trojan/AutoRun.VB.xw] [Win32.Worm.VB.an] [Trojan.Win32.AntiAV.trq] [Trojan.Win32.AntiAV.dwywyi] [Trojan.Win32.StartPage.abq] [Worm.Win32.VB.pcy] [Win32.HLLW.Autoruner1.61047] [Trojan.StartPage.Win32.20602] [BehavesLike.Win32.Suspicious.vz] [Mal/VB-GI] [Trojan/StartPage.oxt] [Trojan/Win32.StartPage] [Backdoor.W32.VB.lVCJ] [Worm:Win32/Esfury.X] [Trojan/Win32.StartPage] [Worm.Esfury!1.A182] [Trojan.StartPage!cwgHM+XlI18] [Worm.Win32.Esfury] [W32/AutoRun.XW!tr] [Win32/Trojan.Dropper.7b4]
6165f3fc3071b002ef124225d0d855db	[JS/Redirector.dg] [JS/Redirector.dg]

Whois

Property	Value
Email	YESUPINC@YAHOO.COM
NameServer	DNS2.NAME-SERVICES.COM
Created	2015-01-02 00:00:00
Changed	2015-08-18 00:00:00
Expires	2017-01-02 00:00:00
Registrar	ENOM, INC.

DNS Resolutions

Date	IP Address
2024-06-01	199.115.115.116 (ClassC)
2024-07-30	94.229.72.118 (ClassC)
2024-08-19	207.244.76.129 (ClassC)
2024-09-30	94.229.72.119 (ClassC)
2024-10-17	207.244.76.132 (ClassC)
2025-01-11	94.229.72.120 (ClassC)
2025-02-08	94.229.72.121 (ClassC)
2025-06-02	23.82.16.57 (ClassC)
2025-06-07	23.82.16.55 (ClassC)
2025-06-17	23.82.16.53 (ClassC)
2025-07-26	23.82.16.54 (ClassC)
2025-08-10	23.82.16.56 (ClassC)

Port 443

Subdomains

Date	Domain	IP
a.yu0123456.com	2025-05-14	23.82.16.53
b.yu0123456.com	2024-06-01	199.115.115.116

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]