home

stapi.yappyz.com

SIEN

Domain Information

The domain stapi.yappyz.com registered by SIEN was initially registered in January of 2013 through GANDI SAS. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Fort Myers, Florida within the United States which resides on the Akamai Technologies, Inc. network.
Registrar:
GANDI SAS

Server location:
Florida, United States (US)

Create date:
Thursday, January 3, 2013

Expires date:
Tuesday, January 3, 2017

Updated date:
Monday, January 4, 2016

ASN:
AS20940 AKAMAI-ASN1 Akamai International B.V.,US

Root domain:
yappyz.com

Whois:
3 yappyz.com records

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.SIENSA.O, PUP.Installer.SIENSA.L, PUP.Installer.SIENSA.P, PUP.Sien.SIENSA.Installer (M), PUP.Sien.SIENSA.Bundler (M), PUP.Sien (M)
100.00%

K7 AntiVirus
Unwanted-Program , Adware
34.78%

Agnitum Outpost
PUA.ToolBar
34.78%

Baidu Antivirus
PUA.Win32.Iminent, Adware.Win32.ToolBar
34.78%

McAfee
Artemis!B87FA8908E19, Artemis!ED87DB69C742
34.78%

Kaspersky
not-a-virus:AdWare.Win32.ToolBar
34.78%

Zillya! Antivirus
Adware.Toolbar.Win32.122
34.78%

Sophos
Generic PUA EP, Generic PUA AB
34.78%

IKARUS anti.virus
PUA.Toolbar.Iminent
26.09%

VIPRE Antivirus
Iminent, Trojan.Win32.Generic
26.09%

Bkav FE
HW32.CDB, W32.HfsAdware
26.09%

Fortinet FortiGate
Adware/Toolbar, Riskware/Iminent
26.09%

Panda Antivirus
Trj/Chgt.F, Trj/Chgt.L
26.09%

Trend Micro House Call
Suspicious_GEN.F47V0904, Suspicious_GEN.F47V1116
26.09%

ESET NOD32
Win32/Toolbar.Iminent (variant), Win32/Toolbar.Iminent.C potentially unwanted (variant)
21.74%

The domain stapi.yappyz.com has been seen to resolve to the following 14 IP addresses.

23.62.6.161
a23-62-6-161.deploy.static.akamaitechnologies.com
June 8, 2016

104.96.220.144
a104-96-220-144.deploy.static.akamaitechnologies.com
May 20, 2016

104.96.220.115
a104-96-220-115.deploy.static.akamaitechnologies.com
May 20, 2016

198.47.116.36
April 14, 2016

198.47.116.49
April 14, 2016

23.3.13.187
a23-3-13-187.deploy.static.akamaitechnologies.com
April 5, 2016

23.3.13.200
a23-3-13-200.deploy.static.akamaitechnologies.com
April 5, 2016

23.0.160.88
a23-0-160-88.deploy.static.akamaitechnologies.com
March 1, 2016

23.0.160.97
a23-0-160-97.deploy.static.akamaitechnologies.com
March 1, 2016

168.143.242.243
February 3, 2016

168.143.242.225
August 13, 2015

168.143.242.251
August 13, 2015

23.62.6.176
a23-62-6-176.deploy.static.akamaitechnologies.com
September 22, 2014

23.62.6.210
a23-62-6-210.deploy.static.akamaitechnologies.com
September 22, 2014

File downloads found at URLs served by stapi.yappyz.com.

1 / 68      (PUP)
http://stapi.yappyz.com/yappyz/.../setup.exe  (yappyz.exe)

1 / 68      (PUP)
http://stapi.yappyz.com/yappyz/.../setup.exe  (candy bubble.exe)

1 / 68      (PUP)
http://stapi.yappyz.com/yappyz/.../setup.exe  (escape_from_yepy.exe)

1 / 68      (PUP)
http://stapi.yappyz.com/yappyz/.../setup.exe  (home_sheep_home.exe)

1 / 68      (PUP)
http://stapi.yappyz.com/yappyz/.../setup.exe  (bomb_it.exe)

1 / 68      (PUP)
http://stapi.yappyz.com/yappyz/.../setup.exe  (snail_bob_4.exe)

1 / 68      (PUP)
http://stapi.yappyz.com/yappyz/.../setup.exe  (mystery_iq_test.exe)

1 / 68      (PUP)
http://stapi.yappyz.com/yappyz/.../setup.exe  (yappyz.exe)

1 / 68      (PUP)
http://stapi.yappyz.com/yappyz/.../setup.exe  (yappyz.exe)

1 / 68      (PUP)
http://stapi.yappyz.com/yappyz/.../setup.exe  (harlem_shake.exe)

29 / 68    (PUP)
http://stapi.yappyz.com/yappyz/.../setup.exe  (angry_birds.exe)

1 / 68      (PUP)
http://stapi.yappyz.com/yappyz/.../setup.exe  (pirates_love_daisies.exe)

1 / 68      (PUP)
http://stapi.yappyz.com/yappyz/.../setup.exe  (jelly_wheels.exe)

1 / 68      (PUP)
http://stapi.yappyz.com/yappyz/.../setup.exe  (5evlxt3j.exe)

31 / 68    (PUP)
http://stapi.yappyz.com/yappyz/.../setup.exe  (yappyzuninstall.exe)

1 / 68      (PUP)
http://stapi.yappyz.com/yappyz/.../setup.exe  (doodle_jump.exe)

16 / 68    (PUP)
http://stapi.yappyz.com/yappyz/.../setup.exe  (angry_birds.exe)

1 / 68      (PUP)
http://stapi.yappyz.com/yappyz/.../setup.exe  (mario_super.exe)

16 / 68    (PUP)
http://stapi.yappyz.com/yappyz/.../setup.exe  (angry_birds.exe)

16 / 68    (PUP)
http://stapi.yappyz.com/yappyz/.../setup.exe  (yappyzuninstall.exe)

10 / 68    (PUP)
http://stapi.yappyz.com/yappyz/.../setup.exe  (yappyz.exe)

10 / 68    (PUP)
http://stapi.yappyz.com/yappyz/.../setup.exe  (fancy_pants.exe)

16 / 68    (PUP)
http://stapi.yappyz.com/yappyz/.../setup.exe  (minecraft_game.exe)

The following 64 files have been seen to comunicate with stapi.yappyz.com in live environments.

TCP » 23.3.13.200:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 104.96.220.144:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 104.96.220.144:80
plugin.exe

TCP » 104.96.220.115:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 23.3.13.200:80
GPlayer.exe (by Exent Technologies)

TCP » 23.62.6.176:80
browser.exe (Speed Browser by Long Mile Solutions)

TCP » 104.96.220.144:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 23.62.6.210:80
wikithemes.exe

TCP » 23.62.6.176:80
apptrailers.exe

TCP » 104.96.220.115:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 23.62.6.176:80
apptrailers.exe

TCP » 23.62.6.176:80
browser.exe (Speed Browser by Smart Applications)

TCP » 104.96.220.144:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 23.62.6.210:80
wikithemes.exe

TCP » 104.96.220.115:443
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 104.96.220.144:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 104.96.220.144:80
genieutils.exe

TCP » 23.3.13.200:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 23.3.13.200:80
tmp5c5e.exe

TCP » 23.3.13.200:80
notification.exe

 
Latest 20 of 76 files

URL:
http://stapi.yappyz.com/

Web server:
Microsoft-IIS/7.5,MCC-PROD08 (ASP.NET) (Version: 4.0.30319)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.