Domain > bs.yandex.ru

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to bs.yandex.ru

MD5	A/V
43d1067bedc059a12c0506911eece405	[WS.Reputation.1] [Mal/Behav-109]
6af66843c70a65e657f0175e3006c744	[Mal/Behav-109]
959a275a9d5d3b4d8b44fdda689ad9e6
7dc1fe30a29e0098d2a52fcdb7abbe63	[JS/Redirector.bb] [Decode.A] [Troj/JsRedir-NV] [JS/Redir.NV!tr]
4f4a8b26a6d94a3644c02dcde02f41b9
61c3cabfac167cdc1c862e500bf639fc
8ec3e540a72d1c370b6a1324372f5220	[W32.HfsIframe.Ff12]
8b296afbfa155dddb2a47505c80d50be	[JS/Iframe.AQ] [JS/Exploit-Blacole.ht] [JS/IFrame.RS] [Blacole.US] [Trojan.Script.Expack.bwzdcj] [TrojWare.JS.Blacole.AG] [JS.IFrame.454] [JS/BlacoleRef.DD.20] [Heuristic.BehavesLike.JS.Infected.A] [Troj/Iframe-JH] [Trojan:JS/BlacoleRef.DD] [JS/Kryptik.AOQ] [Trojan.JS.BlacoleRef] [JS/Iframe.JH!tr] [JS/Exploit] [JS.BlacoleRef.DD.17]
0345a378dfe935d334b27f52ba6232f3	[Mal/Iframe-AN]
cfef377a6fa348a2e1222a2aade080d7
4e72209a33244bd9b781196de15153d9	[Trojan.Script.490180] [JS/Iframe.AQ] [JS/Exploit-Blacole.ht] [JS/IFrame.RS] [Blacole.UX] [Trojan.Script.Expack.bwzdcj] [TrojWare.JS.Blacole.AG] [JS.IFrame.454] [JS/BlacoleRef.DD.20] [Heuristic.BehavesLike.JS.Infected.A] [Troj/Iframe-JH] [Trojan:JS/BlacoleRef.DD] [JS/Kryptik.AOQ] [Trojan.JS.BlacoleRef] [JS/Iframe.JH!tr] [JS/Exploit]
1a11f106ceb01bd7fa55612b45170c6a
2e4262e88dad92fdb329cf3fcf7a5182
6e4bca5d79359ffe8e7fbbe6bc382955
db673e36cf0e2dd583086a22bf1b28d0	[Troj/JSRedir-NZ]
daf2bd2e12f09908690da1a362793c23
96298ddbc5502b6e9b420c37bd312020	[W32/Delf.OZI!tr.spy]
6691af0d2733e89aea6ff5460b441474
041efe5bf84851db66a4029ee220d4a2
a6bd00d4d642cbf789318b1af26a58e6

DNS Resolutions

Date	IP Address
2014-06-12	87.250.250.90 (ClassC)
2014-10-25	93.158.134.90 (ClassC)
2014-11-13	213.180.204.90 (ClassC)
2015-05-17	-
2025-11-24	77.88.21.90 (ClassC)
2025-11-27	87.250.250.90 (ClassC)
2025-12-10	93.158.134.90 (ClassC)
2026-01-03	213.180.193.90 (ClassC)
2026-01-23	213.180.204.90 (ClassC)

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]