» www.yolaplay.com
Overview
Analysis
IPs Addresses (3)
Downloads (420)
Network (4)
Website Detail
Statistics
Related Domains (1)

www.yolaplay.com

Mary Hogue

Domain Information

The domain www.yolaplay.com registered by Mary Hogue was initially registered in January of 2013 through GODADDY.COM, LLC. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Scottsdale, Arizona within the United States which resides on the GoDaddy.com, LLC network.

Registrant:

Mary Hogue

Registrar:

KEY-SYSTEMS GMBH

Server location:

Arizona, United States (US)

Create date:

Monday, January 7, 2013

Expires date:

Sunday, January 7, 2018

Updated date:

Monday, March 23, 2015

ASN:

AS26496 AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC,US

Root domain:

yolaplay.com

Whois:

3 yolaplay.com records

Scanner detections:

Detections (85% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.DownloadShield.Installer (M), Adware.DownloadShield.Bundle.Meta (M), PUP.Download.Installer (M), PUP.NOSIBAY.Installer, PUP (M)

97.50%

SUPERAntiSpyware

Trojan.Agent/Gen-Downloader

7.50%

VIPRE Antivirus

DownloadShield

5.00%

McAfee

Artemis!EF8477CF97DF, Artemis!8E7F61B3E588

5.00%

Vba32 AntiVirus

suspected of Trojan.Downloader.gen.h

5.00%

AVG

MultiBundle

5.00%

Microsoft Security Essentials

Worm:Win32/NeksMiner.A

2.50%

F-Secure

Application:W32/Generic.70053c248f!Online

2.50%

Trend Micro House Call

Suspicious_GEN.F47V0504

2.50%

Qihoo 360 Security

HEUR/QVM42.0.Malware.Gen

2.50%

ESET NOD32

Win32/DownWare.AR potentially unwanted application

2.50%

The domain www.yolaplay.com has been seen to resolve to the following 3 IP addresses.

104.18.32.217

June 19, 2015

104.18.33.217

June 19, 2015

50.63.127.1

p3nlhg472c1472.shr.prod.phx3.secureserver.net

January 17, 2014

File downloads found at URLs served by www.yolaplay.com.

1 / 68 (Adware)

http://www.yolaplay.com/.../download (bandicam_setup.exe)

1 / 68 (Adware)

http://www.yolaplay.com/.../download (petrescuesagasetup.exe)

0 / 68

http://www.yolaplay.com/.../Scrabble_Setup.exe (0ee354af178ac331bb07fa1fa69be33f)

1 / 68 (Adware)

http://www.yolaplay.com/.../BadPiggies_Setup.exe (28f7dffe5e7addd8c20a8a8274e716de)

1 / 68 (Adware)

http://www.yolaplay.com/.../download (cubeworldsetup.exe)

1 / 68 (Adware)

http://www.yolaplay.com/.../Fishdom_Setup.exe (a5fd17bf7f4b3a57a5117165d98c3a4c)

1 / 68 (Adware)

http://www.yolaplay.com/.../download (gameofwarsetup.exe)

1 / 68 (Adware)

http://www.yolaplay.com/.../PapaPearSaga_Setup.exe (0c5f2d391f1053792b4f3b85a96e7026)

1 / 68 (Adware)

http://www.yolaplay.com/.../download (happywheels_setup.exe)

1 / 68 (Adware)

http://www.yolaplay.com/.../download (roblox_setup.exe)

1 / 68 (Adware)

http://www.yolaplay.com/.../download (03a83a44-201e-3d66-7ad4-55c22096d3cd_1d1bcf7fe0fa830)

1 / 68 (Adware)

http://www.yolaplay.com/.../Agario_Setup.exe (61ef443cfb796a4201dda6508b4f4983)

1 / 68 (Adware)

http://www.yolaplay.com/.../download (bubblewitchsagasetup.exe)

1 / 68 (Adware)

http://www.yolaplay.com/.../download (slender_setup.exe)

1 / 68 (Adware)

http://www.yolaplay.com/.../download (riftsetup.exe)

1 / 68 (Adware)

http://www.yolaplay.com/.../CandyCrushSagaSetup.exe (01ab23d69dda47b8a16f8750f6e99c4c)

1 / 68 (Adware)

http://www.yolaplay.com/.../Rift_Setup.exe (442427de93245311c9f939efef504b20)

0 / 68

http://www.yolaplay.com/.../SlenderSetup.exe (8293050dfd086eb9c22449f7dc5b0883)

1 / 68 (Adware)

http://www.yolaplay.com/.../download (dinerdashsetup.exe)

1 / 68 (Adware)

http://www.yolaplay.com/.../WorldofWarcraft_Setup.exe (827e2164ad5a5c5e8473caef2ac0a80d)

1 / 68 (Adware)

http://www.yolaplay.com/.../Octodad_Setup.exe (a19b83897234fc5e0ac748136c244032)

1 / 68 (Adware)

http://www.yolaplay.com/.../download (farmheroessaga_setup.exe)

1 / 68 (Adware)

http://www.yolaplay.com/.../CandyCrushSagaSetup.exe (b99eeacd65007100edac1352f499eaf9)

1 / 68 (Adware)

http://www.yolaplay.com/.../download (agario_setup.exe)

0 / 68

http://www.yolaplay.com/.../download (installwizard101.exe)

0 / 68

http://www.yolaplay.com/.../download (thininstaller_native.exe)

0 / 68

http://www.yolaplay.com/.../download (225436-652975-call-of-duty-dawnville.exe)

2 / 68 (false positives)

http://www.yolaplay.com/.../CubeWorld_Setup.exe (wrar420.exe)

1 / 68 (Adware)

http://www.yolaplay.com/.../CandyCrushSaga_Setup.exe (08a2684f89282abea7c016fd5d32b643)

1 / 68 (Adware)

http://www.yolaplay.com/.../FarmHeroesSaga_Setup.exe (1d6e68d8aaa0a18df4185e45d49870d8)

Latest 30 of 420 download URLs

The following 4 files have been seen to comunicate with www.yolaplay.com in live environments.

TCP » 50.63.127.1:80

jingling.exe

TCP » 50.63.127.1:80

jingling.exe

TCP » 50.63.127.1:80

online-guardian-v2.0.9.exe

TCP » 50.63.127.1:80

bfa0d68f.exe (Client Server Runtime Process by Microsoft)

URL:

http://www.yolaplay.com/

Title:

“YolaPlay”

SSL certificate subject:

CN=sni52529.cloudflaressl.com, OU=PositiveSSL Multi-Domain, OU=Domain Control Validated

SSL certificate issuer:

CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Web server:

cloudflare-nginx

Facebook:

Likes: 1

Shares: 1

Statistics are for the previous month.

Related Domains

pachin.net

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.