home

yayzap.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain yayzap.com is registered by proxy through GODADDY.COM, LLC and was originally registered in March of 2015. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Scottsdale, Arizona within the United States which resides on the GoDaddy.com, LLC network.
Registrar:
GODADDY.COM, LLC

Server location:
Arizona, United States (US)

Create date:
Tuesday, March 31, 2015

Expires date:
Friday, March 31, 2017

Updated date:
Wednesday, April 6, 2016

ASN:
AS26496 AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC,US

Whois:
2 yayzap.com records

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.YayZap.Installer (M)
100.00%

The domain yayzap.com has been seen to resolve to the following 2 IP addresses.

184.168.221.32
ip-184-168-221-32.ip.secureserver.net
April 6, 2016

74.120.16.184
January 28, 2016

File downloads found at URLs served by yayzap.com.

1 / 68      (PUP)
http://yayzap.com/yay/.../iaY1NPM86qTvnGly 4VGbXQ623 UhdE3wvqhPmujLQt8AG0qHAcI3xo6IW vqHd5ZpcDXAZGzvzHnDCdQKKzDNb8oM0eYDQ4Rat6pjdzWhAVCtVjLCxZfKkAC6gm8fs62L0uELk8JjWcBW8YUgRfZkDMOma0xC Ddcww==&c=gameId2811  (yaygames.exe)

1 / 68      (PUP)
http://yayzap.com/yay/gameclk.php?cp=OTM4MjAyNTg3OE6UXWU6teqLBZXcId3hmyhaL5rSwLVGUKOA/.../I3VhQb7s8VsKlyWpY4cFyL1Ao7EB63x8Yy53V1NizTAfA8I9HpBdO3Iu2gyYKPgMePo6xOpSApnMmOtKcfpTcvW12Ei7hc1Vpoco7H7&c=gameId2811  (yaygames.exe)

The following 49 files have been seen to comunicate with yayzap.com in live environments.

TCP » 184.168.221.32:80
googleupdate.exe13d7b73 (globalUpdate Update by globalUpdate)

TCP » 184.168.221.32:80
53431e5d-123a-4132-929f-edd70094c003-5.exe (Sense by Object Browser)

TCP » 184.168.221.32:80
111d40f8-4a7e-41e8-89c6-9280f3bbdccc-5.exe (Ge-Force by iWebar)

TCP » 184.168.221.32:80
3b0963c3-f34e-4ea1-b698-b22e42d44528-10.exe (MediaPlayersvideos 1.1 by Enter)

TCP » 184.168.221.32:80
199a15b42c3bcdccaf79bb920057390f5de049fcf37ab82699bb0ec62cd855e4 (I - Cinema by DiscountFrenzy)

TCP » 184.168.221.32:80
ddc263de-b91b-4f7b-9315-f0b9ef68a3a0-5.exe (GoHD by InstallMoon)

TCP » 184.168.221.32:80
53431e5d-123a-4132-929f-edd70094c003-4.exe (Sense by Object Browser)

TCP » 184.168.221.32:80
fe0aba47-b5bc-435c-8c40-10352fa23d1b-5.exe (HD-Quality-1.1V02.12 by HD-QualityV02.12)

TCP » 184.168.221.32:80
132fb973-4298-4853-a196-f2c937c3c504-5.exe (HQ-Video-Pro-2.1cV02.12 by HQ-VideoV02.12)

TCP » 184.168.221.32:80
sexymligofpe.exe

TCP » 184.168.221.32:80
app lid-codedownloader.exe (App Lid by Lid)

TCP » 184.168.221.32:80
5c9d1a28-82c6-4b06-9649-83cc90f16ffe-5.exe (HQ-VidPro-2.5cV04.12 by HQ-Video2.5dV04.12)

TCP » 184.168.221.32:80
57718c3a-e93d-4413-b4fd-f9d6d46e78d3-5.exe (TheTorntvs V10 1.1 - by no)

TCP » 184.168.221.32:25
sexymligofpe.exe

TCP » 184.168.221.32:80
b157cc16-2c62-4e68-8e21-75b6d6ed8111-5.exe (Object Browser)

TCP » 184.168.221.32:80
c6576ccf-ef1b-42f7-aaf1-49268a4dbfba-2.exe (App Lid by Lid)

TCP » 184.168.221.32:80
fe0aba47-b5bc-435c-8c40-10352fa23d1b-7.exe (HD-Quality-1.1V02.12 by HD-QualityV02.12)

TCP » 184.168.221.32:80
34f10d8a-b8ba-4bec-bae2-1dd6495b7ae3-5.exe (Internet Speed Checker by Speedchecker)

TCP » 184.168.221.32:80
3b1819cd61fb94db4848bf3096c646eed94904aa3e125c986384ebc3dbf78159 (I - Cinema by DiscountFrenzy)

TCP » 184.168.221.32:80
111d40f8-4a7e-41e8-89c6-9280f3bbdccc-7.exe (Ge-Force by iWebar)

 
Latest 20 of 52 files

January 28, 2016
maby.yayzap.com

URL:
http://yayzap.com/

Title:
“Yayzap | The best free online games.”

Description:
“The best free online games. YayZap offers only the best free games!”

Web server:
Apache/2.4.6 (CentOS) PHP/5.4.16 (PHP/5.4.16)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.