home

it-mg42.mail.yahoo.com

Yahoo! Inc.

Domain Information

The domain it-mg42.mail.yahoo.com registered by Yahoo! Inc. was initially registered in January of 1995 through MARKMONITOR INC.. The hosted servers are located in Sunnyvale, California within the United States which resides on the Yahoo! network.
Registrar:
MARKMONITOR INC.

Server location:
California, United States (US)

Create date:
Wednesday, January 18, 1995

Expires date:
Thursday, January 19, 2023

Updated date:
Wednesday, August 26, 2015

ASN:
AS10310 YAHOO-1 - Yahoo!

Root domain:
yahoo.com

Whois:
1 yahoo.com record

The domain it-mg42.mail.yahoo.com has been seen to resolve to the following 4 IP addresses.

206.190.57.60
r1.ycpi.vip.dcb.yahoo.net
July 10, 2016

216.115.101.179
r2.ycpi.vip.nyc.yahoo.net
July 10, 2016

216.115.101.178
r1.ycpi.vip.nyc.yahoo.net
July 10, 2016

206.190.57.61
r2.ycpi.vip.dcb.yahoo.net
July 10, 2016

File downloads found at URLs served by it-mg42.mail.yahoo.com.

0 / 68
https://it-mg42.mail.yahoo.com/.../iframemsg?id=ab8012e1-bfca-1822-7dd1-688f7e63bba8&data=eyJyZXN1bHQiOm51bGwsImVycm9yIjp7ImNvZGUiOiJFUC01MDAwIiwibWVzc2FnZSI6IkZhaWxlZCB0byBwcm9jZXNzIHRoZSBjbGllbnQgcmVxdWVzdCIsInJlcXVlc3RJZCI6ImM4MWM0YWViLTY2MDctMDNlYy0wMThiLTJjMDAwNjAxMDAwMCIsInJlc291cmNlIjoiL3dzL2Rvd25sb2FkL21haWxib3hlcy9ALmlkPT1WakotaFo2b1BjVFBkXzQ2d1k2bVdYZDNKSm5BOXJtY2M2T2VwWmQ5dEx4NlNYeThIN0hybkVlblhKZ2RJNmV4MVh5bE9fa3NqMWFPZXJoMzhBM212S3lGblEvbWVzc2FnZXMvQC5pZD09QUtWVWZid0FBZHBnVjJGYmxnelJRRlh3VTFjL2NvbnRlbnQvcGFydHMvQC5pZD09Mi9yYXcifX0  (29d9a344f0148218f6d8810a91684e39)

The following 38 files have been seen to comunicate with it-mg42.mail.yahoo.com in live environments.

TCP » 206.190.57.60:443
ekrn.exe (ESET Smart Security by ESET)

TCP » 206.190.57.60:80
snackr.exe

TCP » 206.190.57.60:443
plsapp.exe (plsapp.exe by Sendori)

TCP » 206.190.57.60:443
ContentExplorer.exe (ContentExplorer)

TCP » 206.190.57.60:80
Seagate.Dashboard.Uploader.exe (Seagate Dashboard by Seagate Technology)

TCP » 206.190.57.60:443
Client.exe

TCP » 206.190.57.60:80
pokki.exe (Pokki)

TCP » 206.190.57.60:443
PastaLeadsService.exe (PastaLeadsService)

TCP » 206.190.57.60:443
Client.exe

TCP » 206.190.57.60:443
AVKProxy.exe (G Data Security Software by G Data Software AG)

TCP » 206.190.57.61:80
avwebgrd.exe (Avira Professional Security by Avira Operations GmbH & Co. KG)

TCP » 206.190.57.61:80
Seagate.Dashboard.Uploader.exe (Seagate Dashboard by Seagate Technology)

TCP » 206.190.57.61:80
xlqEng1.exe (XLQ by Leo van Rijswijk)

TCP » 206.190.57.61:80
palemoon.exe (Pale Moon by Moonchild Productions)

TCP » 206.190.57.61:443
saina.exe (Saina by Mozilla)

TCP » 206.190.57.61:443
ekrn.exe (ESET Smart Security by ESET)

TCP » 206.190.57.61:80
AVKProxy.exe (G Data Security Software by G Data Software AG)

TCP » 206.190.57.61:80
yahoomessenger.exe (Yahoo! Messenger by Yahoo!)

TCP » 206.190.57.61:443
AVKProxy.exe (G Data Security Software by G Data Software AG)

TCP » 206.190.57.61:443
HD-Network.exe (BlueStacks by BlueStack Systems)

 
Latest 20 of 48 files

URL:
http://it-mg42.mail.yahoo.com/

SSL certificate subject:
CN=www.yahoo.com, O=Yahoo Inc., L=Sunnyvale, S=California, C=US

SSL certificate issuer:
CN=Symantec Class 3 Secure Server CA - G4, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Web server:
ATS

Facebook:
Shares:  4

Statistics are for the previous month.

flickr.com

tumblr.com

ymail.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.