i.qualitysw.net

PERFECT PRIVACY, LLC  (Proxy Registrant)

Domain Information

The domain i.qualitysw.net is registered by proxy through Network Solutions, LLC and was originally registered in July of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Cloudfront CDN service which utilizes a number of proxy IP Addresses (see below).
Registrar:
Network Solutions, LLC

Server location:
Virginia, United States (US)

Create date:
Friday, July 25, 2014

Expires date:
Saturday, July 25, 2015

Updated date:
Tuesday, July 29, 2014

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:

Scanner detections:
Detections  (67% detected)

Scan engine
Details
Detections

VIPRE Antivirus
Rocketfuel Installer
66.67%

Trend Micro House Call
Suspicious_GEN.F47V1204, TROJ_GEN.R047C0OKT14
66.67%

ESET NOD32
Win32/Verti (variant)
66.67%

AVG
Wecan, Generic
66.67%

Baidu Antivirus
PUA.Win32.Verti
66.67%

Reason Heuristics
PUP.WecanSoftware.BB, PUP.Nextup
66.67%

K7 AntiVirus
Trojan
66.67%

Sophos
Generic PUA GD, NextUp
66.67%

McAfee
Artemis!A099AF31B982, Artemis!5CC9765FEC58
66.67%

Microsoft Security Essentials
Worm:Win32/NeksMiner.A
33.33%

F-Secure
Application:W32/Generic.70053c248f!Online
33.33%

Malwarebytes
PUP.Optional.WeCan.A
33.33%

SUPERAntiSpyware
Adware.Rocketful/Variant
33.33%

MicroWorld eScan
Trojan.Generic.12186129
33.33%

nProtect
Trojan.Generic.12186129
33.33%

The domain i.qualitysw.net has been seen to resolve to the following 16 IP addresses.

server-54-192-195-126.iad53.r.cloudfront.net
February 23, 2016

server-54-192-195-124.iad53.r.cloudfront.net
February 23, 2016

server-54-192-195-106.iad53.r.cloudfront.net
February 23, 2016

server-54-192-195-219.iad53.r.cloudfront.net
February 23, 2016

server-54-192-195-167.iad53.r.cloudfront.net
February 23, 2016

server-54-192-195-158.iad53.r.cloudfront.net
February 23, 2016

server-54-192-195-155.iad53.r.cloudfront.net
February 23, 2016

server-54-192-195-138.iad53.r.cloudfront.net
February 23, 2016

server-54-192-54-193.jfk6.r.cloudfront.net
May 3, 2015

server-54-230-53-82.jfk6.r.cloudfront.net
May 3, 2015

server-54-192-54-198.jfk6.r.cloudfront.net
May 3, 2015

server-54-230-55-223.jfk6.r.cloudfront.net
May 3, 2015

server-54-192-54-195.jfk6.r.cloudfront.net
May 3, 2015

server-54-192-55-161.jfk6.r.cloudfront.net
May 3, 2015

server-54-192-54-173.jfk6.r.cloudfront.net
May 3, 2015

server-54-230-52-91.jfk6.r.cloudfront.net
May 3, 2015

File downloads found at URLs served by i.qualitysw.net.

2 / 68      (false positives)

21 / 68    (Adware)

11 / 68    (Adware)

The following 41 files have been seen to comunicate with i.qualitysw.net in live environments.

 
Latest 20 of 49 files

URL:
http://i.qualitysw.net/

Network:
Amazon Cloudfront

Web server:
AmazonS3