home

browser.yandex.by

Domain Information

Server location:
Moscow City, Russia (RU)

ASN:
AS13238 YANDEX Yandex LLC,RU

Root domain:
yandex.by

Scanner detections:
Detections  (98% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Yandex.Installer.Meta (L), PUP.Yandex (L)
100.00%

The domain browser.yandex.by has been seen to resolve to the following 2 IP addresses.

213.180.204.206
onepage.msup.yandex.net
April 19, 2016

87.250.250.85
https.nodejs.spec.yandex.net
June 18, 2015

File downloads found at URLs served by browser.yandex.by.

1 / 68      (PUP)
https://browser.yandex.by/download/?_rdr=safe&from=link_main_search_21_&banerid=0401030112&utm_referrer=https://.../&lite=1  (yandex.exe)

1 / 68      (PUP)
https://browser.yandex.by/.../?ncrnd=1192&download_date=1437659055&.exe  (yandex.exe)

1 / 68      (PUP)
https://browser.yandex.by/download/?from=wizard___one_|&banerid=0500000134&utm_referrer=https://yandex.by/.../?lr=158&clid=2243372-216&win=209&msid=1463218999.94641.22886.4663&text=скачать все яндексы&suggest_reqid=180955803145071047970693979181496&csg=197,25532,19,43,0,0,0&lite=1  (yandex.exe)

1 / 68      (PUP)
https://browser.yandex.by/download/?from=link_main_search_21_&banner_id=t604469198&reqid=1466583430955-519843-ws27-411-ATOMS-distr_portal&banerid=040109301466583430955519843274:eyJpZHMiOlsiMjA3OTI4MDkiXSwidWEiOiJNb3ppbGxhLzUuMCAoV2luZG93cyBOVCA2LjE7IFdpbjY0OyB4NjQpIEFwcGxlV2ViS2l0LzUzNy4zNiAoS0hUTUwsIGxpa2UgR2Vja28pIENocm9tZS81MS4wLjI3MDQuMTAzIFNhZmFyaS81MzcuMzYiLCJ1cmwiOiIvZGVza3RvcC8/ZnJvbT1saW5rX21haW5fc2VhcmNoXzIxXyZiYW5uZXJfaWQ9dDYwNDQ2OTE5OCZyZXFpZD0xNDY2NTgzNDMwOTU1LTUxOTg0My13czI3LTQxMS1BVE9NUy1kaXN0cl9wb3J0YWwmYmFuZXJpZD0wNDAxMDkzMDE0NjY1ODM0MzA5NTU1MTk4NDMyNzQmaG9zdD1zb2Z0bGluayIsInl1aWQiOiI3NTk5NjgwOTcxNDY2NTgzNDI5In0=&host=softlink&utm_referrer=https://.../&zih=1&lite=1  (yandex.exe)

1 / 68      (PUP)
https://browser.yandex.by/.../?from=popup_main_neyb_1_&banner_id=99025520&reqid=1467617359974-146198-ws25-001-ATOMS-distr_portal&banerid=610109301467617359974146198250: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&host=portal_popup&zih=1&lite=1  (yandex.exe)

1 / 68      (PUP)
https://browser.yandex.by/download?partner_id=switch-browser-by&banerid=0896040599:1510454921469472578:CNzq0ofbpc4CFU2NGwod0fAKMg:http://yandex.by/set/ya_browser/.../?from=adwords-serp&utm_source=google&utm_medium=search&utm_campaign=brand&gclid=CNzq0ofbpc4CFU2NGwod0fAKMg  (yandex.exe)

1 / 68      (PUP)
https://browser.yandex.by/download/?utm_referrer=https://.../&_rdr=com&banerid=6302000000&lite=1  (yandex.exe)

1 / 68      (PUP)
https://browser.yandex.by/download/?banerid=6300000000:579dca88da7ae500166dcc1b&utm_referrer=http://.../redir?q=скачать яндекс браузер&via_page=1&sig=7edfffbe7a8c2d63ffa9b8d17dcc1402&redir=http://browser.yandex.ru/&zih=1&lite=1  (yandex.exe)

1 / 68      (PUP)
https://browser.yandex.by/download/?from=wizard___one_|&banerid=0500000134:578f3e2bd949ef001777fa5a&utm_referrer=https://yandex.by/.../?text=crfxfnm яндекс браузер&lr=155&zih=1&lite=1  (yandex.exe)

1 / 68      (PUP)
https://browser.yandex.by/.../?net=yes&lang=by&from=adwords_serp_brand-BY_Yandex-Browser_|&banerid=0802050030:579637888124fc001670db4b&utm_source=google&utm_medium=search&utm_campaign=keywords_software&gclid=CJTU2ob-js4CFeLUcgodo1wNyw&zih=1&lite=1  (yandex.exe)

1 / 68      (PUP)
https://browser.yandex.by/.../?from=teaser_main_neyb_logo-protect4_&banner_id=1931836870&reqid=1469265419554-248105-vsearch33-40-ATOMS-distr_portal&banerid=020109301469265419554248105334:5793361e3c888800164dd9d1&host=teaser&zih=1&lite=1  (yandex.exe)

1 / 68      (PUP)
https://browser.yandex.by/download/?_rdr=safe&ncrnd=327&utm_referrer=https://.../ok_iframe.html?web_server=ok.ru&first_start=0&logged_user_id=570495263453&sig=7ab5f5ae9ead85a46d3efef9d07da20c&refplace=user_apps_portlet&new_sig=1&apiconnection=1145111552_1455730603915&authorized=1&session_key=bf470889b0bae6f963e5af1aa35115d1f94b2d6fc3eb28f60e8ea9.7925&clientLog=0&session_secret_key=a57b225be6703db56d2586fb97e0974d&auth_sig=97f6e60c2302b15c9801ab9c23aeacfa&api_server=https://api.ok.ru/&ip_geo_location=BY,04,Minsk&application_key=CBAFACEFEBABABABA&lite=1  (yandex.exe)

1 / 68      (PUP)
https://browser.yandex.by/download/.../ZnJvbT1wb3B1cF9tYWluX25leWJfMV8mYmFubmVyX2lkPTk5MDI1NTIwJnJlcWlkPTE0NjcxNDQ4MDQzODItMzc2MTA0LXNhczEtMDQ2My1BVE9NUy1kaXN0cl9wb3J0YWwmYmFuZXJpZD02MTAxMDkzMDE0NjcxNDQ4MDQzODIzNzYxMDQxMDQmaG9zdD1wb3J0YWxfcG9wdXAiLCJ5dWlkIjoiMTQxNDU0NTc4MTQ2MzA1NTc2MiJ9&host=portal_popup&zih=1&lite=1  (yandex.exe)

1 / 68      (PUP)
https://browser.yandex.by/.../?from=teaser_main_neyb_logo-turbo1_&banner_id=1931836868&reqid=1470059718849-551013-sas1-0546-ATOMS-distr_portal&banerid=020109301470059718849551013105:579f54d543b28b0017099b26&host=teaser&zih=1&lite=1  (yandex.exe)

1 / 68      (PUP)
https://browser.yandex.by/download/.../ZnJvbT1wb3B1cF9tYWluX25leWJfMV8mYmFubmVyX2lkPTk5MDI1NTIwJnJlcWlkPTE0NjY3OTQxNzk2NDAtODQxODAyLWltZ3MyOC0wNjAtQVRPTVMtZGlzdHJfcG9ydGFsJmJhbmVyaWQ9NjEwMTA5MzAxNDY2Nzk0MTc5NjQwODQxODAyMjgwJmhvc3Q9cG9ydGFsX3BvcHVwIiwieXVpZCI6IjE3ODY3NTIwMTQxMzk5ODc3NCJ9&host=portal_popup&zih=1&lite=1  (yandex.exe)

1 / 68      (PUP)
https://browser.yandex.by/.../?from=popup_main_neyb_1_&banner_id=99025520&reqid=1469908113095-970775-imgs28-146-ATOMS-distr_portal&banerid=610109301469908113095970775281:579d04abda7ae500166d343c&host=portal_popup&zih=1&lite=1  (yandex.exe)

1 / 68      (PUP)
https://browser.yandex.by/.../?_rdr=safe&from=strip_main_neyb_red-curve-60_&banerid=0101000334&lite=1  (yandex.exe)

1 / 68      (PUP)
https://browser.yandex.by/.../?ncrnd=7361&banerid=6400000000:577bf7bf5ef469170057ff9c&zih=1&lite=1  (yandex.exe)

1 / 68      (PUP)
https://browser.yandex.by/download/?banerid=6301000000:5798ac1d43b28b001701a1fd&utm_referrer=http://yandex.by/.../jsredir?from=yandex.by;search/;web;;&text=&etext=1129.TOG_ntTZ9tnHQRu3ScjMigg9w2UcejWeM6QuezxJK1n4vMX2AzdhJbC4oerv-tV13ndEhJf3fMeATIihJzJm0A.bd418b3704f73563e9a801caad0e790d960da14a&uuid=&state=PEtFfuTeVD5kpHnK9lio9T6U0-imFY5IWwl6BSUGTYk4N0pAo4tbW7k-9yswz34ZtuHeaWUt4r5FJ44PF-VGSr7FkBMMyw2c&data=UlNrNmk5WktYejY4cHFySjRXSWhXSll2d0VCWEpBd1FHSWJfc1Ixemt1bGVvd1JLdlByZ2FvVEtIVmZraUFObF94U3lfSFFPQXdTQlJPa3prejFfZUFyc2Y5cjlua0ljR1V6bFREcmFqbms&b64e=2&sign=927fe21e3e687dfd480699793faf44a2&keyno=0&cst=AiuY0DBWFJ5Hyx_fyvalFK3whI1Re3MEHWU2U3sr-lQHBOcB6Rw5m10UqDDb4D8bMP2q_tqhsfJdV_uWbjNg9Oqoyb-_ZJR5Uy9tqB2XbYFy-scxp1vuWvWaLczsczmXajxc_JpjGXo7TwJUSM0Xgu8aOBH0WsQpZv-rJDh0MI9E4UECOcYTX3qiqWlcNN3fFqUuSX6lU88CfUBGyAitg-_Zchkn1UVN90tSsAvyQ0xHQnh7gwKp1EUUQwVX92fZl49M920rOe9QdwhKfa_lSH8gOb2QsISOlMJfai6HFAG5XJe-Y6gaBgnax08DzW  (yandex.exe)

1 / 68      (PUP)
http://browser.yandex.by/.../?from=banner_serp__devushka_|&banerid=0302000107&download_date=1378557408&.exe  (yandex.exe)

1 / 68      (PUP)
http://browser.yandex.by/.../?from=strip_main_neyb_red-orange-wave-turbo_|&banerid=0101000176&download_date=1413828124&.exe  (yandex.exe)

1 / 68      (PUP)
https://browser.yandex.by/.../?from=popup_main_chrome_logo-text3_&banner_id=1908026859&reqid=1468914914801-114950-imgs28-190-ATOMS-distr_portal&banerid=610109301468914914801114950281:578ddcedff3f4c0016149097&host=portal_popup&zih=1&lite=1  (yandex.exe)

1 / 68      (PUP)
https://browser.yandex.by/.../?from=teaser_main_neyb_logo-protect4_&banner_id=1931836870&reqid=1469309828375-912803-imgs28-146-ATOMS-distr_portal&banerid=020109301469309828375912803281:5793e39ebaa945001778c3a8&host=teaser&zih=1&lite=1  (yandex.exe)

1 / 68      (PUP)
https://browser.yandex.by/.../?from=teaser_main_neyb_tower-protect3_&banner_id=1931836869&reqid=1468774373488-256595-imgs30-160-ATOMS-distr_portal&banerid=020109301468774373488256595301:578bb7f8395a8200175844bf&host=teaser&zih=1&lite=1  (yandex.exe)

1 / 68      (PUP)
https://browser.yandex.by/download/?_rdr=safe&utm_referrer=http://.../search?q=скачать яндекс браузер&fr=chxtn6.0.1&gp=811014&lite=1  (yandex.exe)

1 / 68      (PUP)
https://browser.yandex.by/download/?_rdr=safe&utm_referrer=http://yandex.by/.../jsredir?text=скачать яндекс браузер&from=yandex.by;suggest;web&state=dtype=stred/pid=1/cid=71613/part=%D1%81%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%20%D1%8F/suggestion=%D1%81%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%20%D1%8F%D0%BD%D0%B4%D0%B5%D0%BA%D1%81%20%D0%B1%D1%80%D0%B0%D1%83%D0%B7%D0%B5%D1%80/region=149/*&data=url=http%3A%2F%2Fbrowser.yandex.by&ts=1460050791&uid=21012193145952  (yandex.exe)

1 / 68      (PUP)
https://browser.yandex.by/download/.../ZnJvbT1wb3B1cF9tYWluX25leWJfMV8mYmFubmVyX2lkPTk5MDI1NTIwJnJlcWlkPTE0NjU5MjYxMzQ3NzYtNzM5NTI2LXZzZWFyY2gzMy0zNi1BVE9NUy1kaXN0cl9wb3J0YWwmYmFuZXJpZD02MTAxMDkzMDE0NjU5MjYxMzQ3NzY3Mzk1MjYzMzMmaG9zdD1wb3J0YWxfcG9wdXAiLCJob3N0IjoiYnJvd3Nlci55YW5kZXguYnkiLCJ5dWlkIjoiMTgwNjA0MzcyMTQ0NDEyNjUyMCJ9&host=portal_popup&zih=1&lite=1  (yandex.exe)

1 / 68      (PUP)
https://browser.yandex.by/download/?_rdr=safe&utm_referrer=https://ec-cdn-prod4.contractwarsgame.com/vk/index.html?api_url=https://.../api.php&api_id=2034070&api_settings=2105375&viewer_id=187616478&viewer_type=2&sid=5bb2b08bdeaed5c1ca8adab40dc5ddf88e882ee525e3e3574f773e0f509504588657eab9605e39f8d893c&secret=a10d23640f&access_token=f57a12b2fc43f8bb561d2c590b901386b4ae25882c937a64a19b949d7978b24bda861fcbe3e5be0361a3b&user_id=187616478&group_id=0&is_app_user=1&auth_key=fa667c7f51b4dffba3e8160fe2e5eecd&language=0&parent_language=0&ad_info=ElsdCQBURlNlAwBcHUVUXiN2A1dzBx5pU1BXIgZUJlIEAWcgAUoLQQ==&is_secure=1&ads_app_id=2034070_8505713f4fc280e54a&referrer=user_apps&lc_name=c0b86333&hash=&lite=1  (yandex.exe)

1 / 68      (PUP)
https://browser.yandex.by/download/?banerid=6300000000:5799e34fda7ae50016694da2&utm_referrer=http://.../redir?q=скачать яндекс браузер&via_page=1&sig=7cbb1c6d9c991729f86dad109ad0a017&redir=https://browser.yandex.by/&zih=1&lite=1  (yandex.exe)

1 / 68      (PUP)
https://browser.yandex.by/download/?_rdr=safe&utm_referrer=https://vkogz.thesaga.ru/.../?access_token=110807706-8439568-29:f5e27e1fedfd095e3cac25b28004cde0c397e647807ced33b7df517d0bf14fb7&app_id=15&platform=ok&session_id=6f62d4f84c83e3c95c0ac8c94e1e969dd924c7eebfcdfef52ec92f4.186&sig=28e990a0e74258af762d89c452dfd324&sn_app_id=1245289984&sn_uid=459450708019&time=1457332284&token_expire_at=1458541884&uid=110807706&lite=1  (yandex.exe)

 
Latest 30 of 132 download URLs

The following 21 files have been seen to comunicate with browser.yandex.by in live environments.

TCP » 213.180.204.206:80
autoDENGI.exe (autoDENGI by autodengi.com)

TCP » 213.180.204.206:443
uran.exe (Uran by uCoz Media and Chromium Authors)

TCP » 213.180.204.206:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 213.180.204.206:443
browser.exe (Yandex by YANDEX)

TCP » 213.180.204.206:443
crossbrowse.exe (Crossbrowse)

TCP » 213.180.204.206:443
browser.exe (Yandex by YANDEX)

TCP » 213.180.204.206:443
browser.exe (Yandex by YANDEX)

TCP » 213.180.204.206:443
browser.exe (Yandex by YANDEX)

TCP » 213.180.204.206:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 87.250.250.85:80
punto.exe

TCP » 87.250.250.85:80
punto.exe

TCP » 213.180.204.206:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 213.180.204.206:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 213.180.204.206:443
client.exe (ClientWrapper)

TCP » 87.250.250.85:80
punto.exe

TCP » 87.250.250.85:80
browser.exe (Yandex by YANDEX)

TCP » 87.250.250.85:80
punto.exe

TCP » 87.250.250.85:80
punto.exe

TCP » 87.250.250.85:80
punto.exe

TCP » 87.250.250.85:443
browser.exe (Yandex by YANDEX)

 
Latest 20 of 32 files

com.tr

yandex.com

yandex.kz

yandex.net

yandex.ru

yandex.ua

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.