home

cps.yingyonghui.com

Beijing Zhanghuitianxia Technology Co., Ltd.

Domain Information

The domain cps.yingyonghui.com registered by Beijing Zhanghuitianxia Technology Co., Ltd. was initially registered in July of 2010 through GODADDY.COM, LLC. The hosted servers are located in Foshan, Guangdong within China which resides on the Asia Pacific Network Information Centre network.
Registrar:
GODADDY.COM, LLC

Server location:
Guangdong, China (CN)

Create date:
Friday, July 9, 2010

Expires date:
Sunday, July 9, 2017

Updated date:
Monday, June 15, 2015

ASN:
AS58543 CHINATELECOM-GUANGDONG-IDC Guangdong, CN

Root domain:
yingyonghui.com

Whois:
1 yingyonghui.com record

The domain cps.yingyonghui.com has been seen to resolve to the following 3 IP addresses.

183.56.172.10
May 18, 2016

183.62.114.249
May 18, 2016

183.56.172.229
May 18, 2016

File downloads found at URLs served by cps.yingyonghui.com.

0 / 68
http://cps.yingyonghui.com/cps/yyh/channel/.../com.yingyonghui.market_1_30057821.apk  (1ea4697f2eece6a1790c96007e317ec7)

0 / 68
http://cps.yingyonghui.com/cps/yyh/channel/.../com.yingyonghui.market_1_30057821_-com.kingroot.master-.apk  (8b58b74724815c3309bc8690688cbe9f)

0 / 68
http://cps.yingyonghui.com/cps/yyh/channel/.../com.yingyonghui.market_1_30052763_-com.gameloft.android.ANMP.GloftGGHM-.apk  (cb6254b04d00b806fb318a7379bc7cfb)

The following 19 files have been seen to comunicate with cps.yingyonghui.com in live environments.

TCP » 183.56.172.10:80
life_assistant.crx

TCP » 183.56.172.10:80
leidian.crx

TCP » 183.56.172.10:80
music.crx

TCP » 183.56.172.10:80
novel.crx

TCP » 183.56.172.10:80
life_assistant.crx

TCP » 183.56.172.10:80
leidian.crx

TCP » 183.56.172.10:80
shipin.crx

TCP » 183.56.172.10:80
music.crx

TCP » 183.56.172.10:80
novel.crx

TCP » 183.56.172.10:80
leidian.crx

TCP » 183.56.172.10:80
ejmoceoaphoacojefmkhmfbgkidaefdl.crx

TCP » 183.56.172.10:80
live_assist.crx

TCP » 183.56.172.229:80
piao_5.2.0.32.crx

TCP » 183.56.172.229:80
piao.crx

TCP » 183.56.172.229:80
piao.crx

TCP » 183.56.172.229:80
fqb.crx

TCP » 183.56.172.229:80
fvddownloader_2.1.1.crx

TCP » 183.56.172.229:80
cortica_addon_3.2.0.88.crx

TCP » 183.62.114.249:80
mail_check_1.0.1.1029.crx

URL:
http://cps.yingyonghui.com/

Web server:
nginx

7r7z.com

869v.com

duowan.com

it376.com

ke8u.com

miliao.com

miui.com

moyoi.com

sh5y.com

winrar.com.cn

yeecall.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.