home

dl.spyalertapp.com

Long Mile Solutions, LLC  (via a Proxy Registrant)

Domain Information

The domain dl.spyalertapp.com is registered by proxy through GODADDY.COM, LLC and was originally registered in May of 2013. This domain has been known to host and distribute potentially unwanted software. The hosted servers are located in Seattle, Washington within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Cloudfront CDN service which utilizes a number of proxy IP Addresses (see below). The domain is associated with the publisher Long Mile Solutions, LLC who is located in CARLSBAD, California in the United States.
Registrar:
GODADDY.COM, LLC

Server location:
Washington, United States (US)

Create date:
Wednesday, May 1, 2013

Expires date:
Sunday, May 1, 2016

Updated date:
Saturday, May 2, 2015

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
spyalertapp.com

Whois:
3 spyalertapp.com records

Scanner detections:
Detections  (95% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.LongMileSolutions.F, PUP.Installer.LongMileSolutions.N, PUP.Installer.LongMileSolutions.K, PUP.Optional.Installer.F, PUP.Injekt.LongMileSolutions.Installer (M), PUP.installCore.Compiler.Installer (M), PUP.Injekt.LongMile.Installer (M)
100.00%

VIPRE Antivirus
SearchDonkey, Trojan.Win32.Generic!SB.0, Injekt, Threat.4784449
66.67%

ESET NOD32
Win32/ExFriendAlert (variant), MSIL/Adware.PullUpdate
66.67%

McAfee
Artemis!32C0863BCB25, Artemis!A6085D632AB1, Artemis!9D5E75C156F4, Artemis!6E86589E549B, Artemis!183CF05E8846, Artemis!0C4B84EF70EA, Artemis!CE61C231CE69, Artemis!39A15F671078
57.14%

Trend Micro House Call
TROJ_GEN.F47V1010, TROJ_GEN.F47V1026, TROJ_GEN.F47V1104, TROJ_GEN.F47V1012, Suspici.1E48FE7A, TROJ_GEN.F47V1004, TROJ_GE.2EE9AFF8, TROJ_GEN.F47V0531
52.38%

Vba32 AntiVirus
suspected of Trojan.Downloader.gen.h
47.62%

avast!
JS:BHO-O [PUP], Win32:BHO-AMO [PUP], JS:BHO-N [PUP], Win32:Adware-gen [Adw]
42.86%

Dr.Web
Adware.Plugin.128, Program.Unwanted.79, Adware.Yontoo.55, Adware.Plugin.36
38.10%

Malwarebytes
PUP.Optional.ExfriendAlert, PUP.Optional.SearchDonkey.A, PUP.Optional.MultiExtension.A, PUP.Optional.Updater.A, PUP.Optional.SpyAlert.A
33.33%

Norman
Malware
23.81%

Bkav FE
W32.Clodb6c.Trojan, W32.Clodbcf.Trojan, W32.Clod63a.Trojan, W32.Clodeb2.Trojan
19.05%

Sophos
Spy Alert, Generic PUA PJ
19.05%

Agnitum Outpost
Riskware.Agent, PUA.PullUpdate
14.29%

IKARUS anti.virus
PUA.ClientConnect, AdWare.Win32.ExFriendAlert
14.29%

ESET NOD32
multiple threats, Win32/ExFriendAlert.B potentially unwanted application
9.52%

The domain dl.spyalertapp.com has been seen to resolve to the following 135 IP addresses.

52.84.125.174
server-52-84-125-174.iad16.r.cloudfront.net
August 29, 2016

52.84.125.169
server-52-84-125-169.iad16.r.cloudfront.net
August 29, 2016

52.84.125.164
server-52-84-125-164.iad16.r.cloudfront.net
August 29, 2016

52.84.125.105
server-52-84-125-105.iad16.r.cloudfront.net
August 29, 2016

52.84.125.69
server-52-84-125-69.iad16.r.cloudfront.net
August 29, 2016

52.84.125.49
server-52-84-125-49.iad16.r.cloudfront.net
August 29, 2016

52.84.125.43
server-52-84-125-43.iad16.r.cloudfront.net
August 29, 2016

52.84.125.239
server-52-84-125-239.iad16.r.cloudfront.net
August 29, 2016

52.85.131.223
server-52-85-131-223.iad53.r.cloudfront.net
June 8, 2016

52.85.131.140
server-52-85-131-140.iad53.r.cloudfront.net
June 8, 2016

52.85.131.33
server-52-85-131-33.iad53.r.cloudfront.net
June 8, 2016

52.85.131.27
server-52-85-131-27.iad53.r.cloudfront.net
June 8, 2016

52.85.131.242
server-52-85-131-242.iad53.r.cloudfront.net
June 8, 2016

52.85.142.157
server-52-85-142-157.iad12.r.cloudfront.net
May 20, 2016

52.85.142.110
server-52-85-142-110.iad12.r.cloudfront.net
May 20, 2016

52.85.142.99
server-52-85-142-99.iad12.r.cloudfront.net
May 20, 2016

52.85.142.97
server-52-85-142-97.iad12.r.cloudfront.net
May 20, 2016

52.85.142.77
server-52-85-142-77.iad12.r.cloudfront.net
May 20, 2016

52.85.142.74
server-52-85-142-74.iad12.r.cloudfront.net
May 20, 2016

52.85.142.19
server-52-85-142-19.iad12.r.cloudfront.net
May 20, 2016

52.85.142.174
server-52-85-142-174.iad12.r.cloudfront.net
May 20, 2016

52.85.131.120
server-52-85-131-120.iad53.r.cloudfront.net
May 16, 2016

52.85.131.53
server-52-85-131-53.iad53.r.cloudfront.net
May 16, 2016

52.85.131.46
server-52-85-131-46.iad53.r.cloudfront.net
May 16, 2016

52.85.131.250
server-52-85-131-250.iad53.r.cloudfront.net
May 16, 2016

52.85.131.220
server-52-85-131-220.iad53.r.cloudfront.net
May 16, 2016

52.85.131.190
server-52-85-131-190.iad53.r.cloudfront.net
May 16, 2016

52.85.131.123
server-52-85-131-123.iad53.r.cloudfront.net
May 16, 2016

52.85.131.74
server-52-85-131-74.iad53.r.cloudfront.net
April 21, 2016

52.85.131.38
server-52-85-131-38.iad53.r.cloudfront.net
April 21, 2016

 
Showing 30 of 135 IP Addresses

File downloads found at URLs served by dl.spyalertapp.com.

11 / 68    (Adware)
http://dl.spyalertapp.com/SpyAlert/28502/.../Setup.exe  (8d033bb78339dd1b92c4abc782f94b24)

0 / 68
http://dl.spyalertapp.com/SpyAlert/28602/.../Setup.exe  (10a777605d881a98a13d59247abcfa39)

1 / 68      (Adware)
http://dl.spyalertapp.com/SpyAlert/627/.../Setup.exe  (b27e137b2848b338cd56561c2b0a7412)

9 / 68      (Adware)
http://dl.spyalertapp.com/SpyAlert/28902/.../Setup.exe  (a6085d632ab1841f13efa22f02f5e0eb)

7 / 68      (Adware)
http://dl.spyalertapp.com/SpyAlert/28602/.../Setup.exe  (ce61c231ce692df6065534d559228e53)

3 / 68      (PUP)
http://dl.spyalertapp.com/SpyAlert/28602/.../Setup.exe  (75b9457bb7bb3f0dcd065c67823bf743)

13 / 68    (Adware)
http://dl.spyalertapp.com/SpyAlert/628/.../Setup.exe  (859b4df2dc809a81364e7f3388bf398d)

1 / 68      (Adware)
http://dl.spyalertapp.com/SpyAlert/28502/.../Setup.exe  (5ef9c7627a9e3d6f4e26eaea5ecec7df)

7 / 68      (Adware)
http://dl.spyalertapp.com/SpyAlert/27602/.../Setup.exe  (6e86589e549b3692858eded56216c5e7)

1 / 68      (Adware)
http://dl.spyalertapp.com/SpyAlert/628/.../Setup.exe  (5c2f340d5869da5f3060eeaa397faa73)

4 / 68      (Adware)
http://dl.spyalertapp.com/SpyAlert/625/.../Setup.exe  (03176a86e7391ffc99f6eec9ccd18ff3)

1 / 68      (Adware)
http://dl.spyalertapp.com/SpyAlert/625/.../Setup.exe  (34d4ac511abf6202691a65a9df4c3f97)

9 / 68      (Adware)
http://dl.spyalertapp.com/SpyAlert/627/.../Setup.exe  (39a15f6710780f2afd9ef2fa775a5923)

19 / 68    (Adware)
http://dl.spyalertapp.com/SpyAlert/312/.../Setup.exe  (471f2f8ac4e81c48bd58d69e9a4da312)

4 / 68      (Adware)
http://dl.spyalertapp.com/SpyAlert/29001/.../Setup.exe  (d11a87af3b49a68d0ed24961a8f19b2b)

5 / 68      (Adware)
http://dl.spyalertapp.com/SpyAlert/27502/.../Setup.exe  (b85483a2c7955639cf0e4b3df200880c)

7 / 68      (Adware)
http://dl.spyalertapp.com/SpyAlert/28902/.../Setup.exe  (4100ed5f8bd3968d62e241d4638c7d1c)

16 / 68    (Adware)
http://dl.spyalertapp.com/SpyAlert/29302/.../Setup.exe  (fb7b8d2e382292556e5a959b0a196704)

5 / 68      (Adware)
http://dl.spyalertapp.com/SpyAlert/28002/.../Setup.exe  (183cf05e8846a18dab9850ce696c3bf3)

11 / 68    (Adware)
http://dl.spyalertapp.com/SpyAlert/27702/.../Setup.exe  (0c4b84ef70ea55fbadcd20c85e5df888)

6 / 68      (Adware)
http://dl.spyalertapp.com/SpyAlert/28802/.../Setup.exe  (spyalertsetup.exe)

6 / 68      (Adware)
http://dl.spyalertapp.com/SpyAlert/28502/.../Setup.exe  (32c0863bcb2543a55436ecd5bc1df462)

The following 82 files have been seen to comunicate with dl.spyalertapp.com in live environments.

TCP » 52.85.142.99:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.230.50.13:443
online-guardian-v2.0.9.exe

TCP » 54.192.195.235:443
online-guardian.exe

TCP » 54.230.37.244:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 54.230.37.244:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 54.192.195.235:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.84.125.174:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.85.142.174:80
Mobogenie.exe (Mobogenie by Mobogenie.com)

TCP » 52.85.142.99:443
jingling.exe

TCP » 52.85.142.110:80
jingling.exe

TCP » 52.84.125.239:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 52.85.142.74:443
UCBrowser.exe (by UCWeb)

TCP » 52.85.142.77:80
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 52.85.142.99:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.84.125.174:443
citrio.exe (Citrio by CatalinaGroup)

TCP » 52.85.142.99:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.85.142.110:80
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 54.192.192.10:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 54.192.192.10:80
browser.exe (Browser)

TCP » 54.192.192.10:443
browser.exe (Browser)

 
Latest 20 of 164 files

URL:
http://dl.spyalertapp.com/

Title:
“App Download”

Network:
Amazon Cloudfront

Web server:
AmazonS3

attractionalertapp.com

recordcheckerapp.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.