www.91yudao.com
Classification: Malicious
www.91yudao.com is a malicious hostname. Linked to Emotet malware. Reported by Hybrid-Analysis and Abuse.ch (Trojan.Generic), last seen 2021-01-23.
Current activity
- Online — resolving/reachable. Last checked 2026-10-18 08:39:24.
MITRE ATT&CK associations
Malware families: EMOTET (S0367)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Top Popularity Site | Cisco Umbrella | 2024-07-28 17:53:57 | 2025-05-12 01:34:18 | benign | |
| Emotet | Abuse.ch | 2021-01-23 08:31:03 | 2021-01-23 08:31:03 | malicious-activity | S0367 Emotet |
| Trojan.Generic | Hybrid-Analysis | 2021-01-22 10:31:18 | 2021-01-22 10:31:18 |
Tags
emotetIP addresses resolved by this hostname
- 124.156.135.253 (2021-01-22 10:31:19)
- 104.21.16.1 (2025-05-12 01:34:16)
- 2606:4700:3030::6815:5001 (2025-05-12 01:34:16)
- 2606:4700:3030::6815:3001 (2025-05-12 01:34:16)
- 2606:4700:3030::6815:2001 (2025-05-12 01:34:16)
- 104.21.32.1 (2025-05-12 01:34:16)
- 2606:4700:3030::6815:1001 (2025-05-12 01:34:16)
- 104.21.48.1 (2025-05-12 01:34:16)
- 104.21.96.1 (2025-05-12 01:34:16)
- 104.21.80.1 (2025-05-12 01:34:16)
- 2606:4700:3030::6815:6001 (2025-05-12 01:34:16)
- 2606:4700:3030::6815:4001 (2025-05-12 01:34:16)
- 104.21.64.1 (2025-05-12 01:34:16)
- 2606:4700:3030::6815:7001 (2025-05-12 01:34:16)
- 104.21.112.1 (2025-05-12 01:34:16)
- 91.192.107.59 (2026-10-18 08:39:24)
Whois information
- AS name
- AS4134 Chinanet
- Domain
- 91yudao.com
- TLD
- com
- DNSSEC
- ['unsigned']
- Nameservers
- DANICA.NS.CLOUDFLARE.COM, PETE.NS.CLOUDFLARE.COM, NS1.JULYDNS.COM, NS2.JULYDNS.COM
- Registrant
- Gname.com Pte. Ltd.
- Address
- Redacted for privacy
- City
- Redacted for privacy
- State
- Redacted for privacy
- Country
- CN — China 🇨🇳
- Contact email
- [email protected], [email protected]
- Domain created
- 2024-10-23 10:08:50
- Domain expires
- 2026-10-23 10:08:50
- First indexed
- 2021-01-22 10:31:18
- Last updated
- 2026-10-18 08:39:24