Tuesday, September 18, 2012

Daily Deals/Result Glider Spyware


It has surprised me the extent to which this spyware has made its way into a lot of people's browsers.  The sites dropdowndeals.com,app.mysupercheap.com and resultglider.com all seem to be the same company (see DNS trace below).   Both Mozilla and Intuit mention this spyware, so it's fairly pervasive.


If anyone finds a site which is prompting these users to download this plug-in, let me know...Mozilla mentions that a lot of travel sites are offering this browser download.  

Here's an article that talks about this company:


I also wonder if that's why we were seeing invalid crossdomain.xml requests too:


DNS records below:

Non-authoritative answer:
Address: 4.30.3.59


Non-authoritative answer:
Address: 4.30.3.140


Non-authoritative answer:
Address: 4.30.3.177

They also appear to hosting YouTube Best Video Downoader (http://www.bestvideodownloader.com) and are using a mail forwarding address in Michigan:

http://www.bbb.org/western-michigan/business-reviews/internet-services/alactro-in-grandville-mi-38141335

7 comments:

  1. Info is out of this world, I would bang to see more from your writers.
    hot uk deals extra

    ReplyDelete
  2. As the job seekers does not only rely on the employment news, they also expect information related to the exam as well as the sarkari results Hindi and English which we find here very apt.

    ReplyDelete
  3. Flipkart is one of the biggest world wide eCommerce Site so here you will get Flipkart apple iphonethere

    ReplyDelete
  4. Jabong is one of the top online fashion related website you can getjabong offersthat

    ReplyDelete
  5. Jabong is one of the top online fashion related website you can getjabong offersthat

    ReplyDelete
  6. Thank u for Sharing this Information. For more cashback Offers And cashback coupons just ping me

    ReplyDelete