home

sur.ly

Domain Information

Server location:
Virginia, United States (US)

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US

The domain sur.ly has been seen to resolve to the following 2 IP addresses.

54.173.41.122
ec2-54-173-41-122.compute-1.amazonaws.com
May 5, 2015

50.22.67.229
apache01.brasilservidores.com
August 28, 2014

File downloads found at URLs served by sur.ly.

1 / 68
http://sur.ly/external?url=mctvconverter.vivolum.net/.../article_list.siteswift?c=download&d=article:14:10&do=all&so=all  (mc-tvconverter_2.0.0_setup.exe)

1 / 68      (PUP)
https://sur.ly/external?url=s3.amazonaws.com/.../HSS-3.42-install-plain-716-plain.exe&forceHttps=0  (079c2605019b56a64e939d2a9abd8018)

3 / 68      (inconclusive)
http://sur.ly/.../download.php?file=multiunlockclient_install.exe  (3c57878b24bfa211607d2407ebbbd740)

1 / 68      (PUP)
https://sur.ly/external?url=s3.amazonaws.com/.../HSS-3.42-install-plain-716-plain.exe&forceHttps=0  (079c2605019b56a64e939d2a9abd8018)

0 / 68
http://sur.ly/external?url=www8.garmin.com/.../MapInstall_400.exe  (3f6f467ffd3c4b7aba30baa55ba9fbc6)

0 / 68
http://sur.ly/external?url=astrojargon.net/files/.../setupeosinfo.exe  (15d2228d2f722a910f93faa28baa11b8)

0 / 68
http://sur.ly/external?url=astrojargon.net/files/.../setupeosinfo.exe  (15d2228d2f722a910f93faa28baa11b8)

3 / 68      (inconclusive)
http://sur.ly/.../download.php?file=multiunlockclient_install.exe  (3c57878b24bfa211607d2407ebbbd740)

0 / 68
http://sur.ly/external?url=astrojargon.net/files/.../setupeosinfo.exe  (15d2228d2f722a910f93faa28baa11b8)

The following 5 files have been seen to comunicate with sur.ly in live environments.

TCP » 54.173.41.122:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.173.41.122:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.173.41.122:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.173.41.122:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.173.41.122:80
online-guardian-v2.0.9.exe

TCP » 54.173.41.122:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.