content.qtrax.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain content.qtrax.com is registered by proxy through GODADDY.COM, LLC and was originally registered in August of 2003. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in New York City, New York within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Cloudfront CDN service which utilizes a number of proxy IP Addresses (see below).
Remove Malware from content.qtrax.com - Powered by Reason Core Security
Registrar:
GODADDY.COM, LLC

Server location:
New York, United States (US)

Create date:
Friday, August 01, 2003

Expires date:
Thursday, August 01, 2019

Updated date:
Saturday, October 18, 2014

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:

Scanner detections:
Detections  (86% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Optional.Installer.Qtrax.K, PUP.Optional.Startup.Qtrax.M, PUP.Optional.Installer.K
85.71%

Trend Micro House Call
TROJ_GE.4CA041CE, TROJ_GE.C8391591, TROJ_GEN.F47V0808, Suspicious_GEN.F47V0129
71.43%

Dr.Web
DLOADER.Trojan
57.14%

F-Prot
W32/Undefined.Threat, W32/A-77a4fa28
28.57%

McAfee
Artemis!849568AFDDC9
28.57%

McAfee Web Gateway
Artemis!849568AFDDC9
28.57%

VIPRE Antivirus
Trojan.Win32.Generic
14.29%

Trend Micro
TROJ_FORUCON.BMC
14.29%

Qihoo 360 Security
HEUR/QVM42.0.Malware.Gen
14.29%

The domain content.qtrax.com has been seen to resolve to the following 41 IP addresses.

server-54-192-195-220.iad53.r.cloudfront.net
February 3, 2016

server-54-192-195-199.iad53.r.cloudfront.net
February 3, 2016

server-54-192-195-193.iad53.r.cloudfront.net
February 3, 2016

server-54-192-195-170.iad53.r.cloudfront.net
February 3, 2016

server-54-192-195-118.iad53.r.cloudfront.net
February 3, 2016

server-54-192-195-26.iad53.r.cloudfront.net
February 3, 2016

server-54-192-195-8.iad53.r.cloudfront.net
February 3, 2016

server-54-192-195-233.iad53.r.cloudfront.net
February 3, 2016

server-54-240-160-168.iad12.r.cloudfront.net
April 17, 2015

server-54-230-19-95.iad12.r.cloudfront.net
April 17, 2015

server-54-230-19-36.iad12.r.cloudfront.net
April 17, 2015

server-54-230-18-201.iad12.r.cloudfront.net
April 17, 2015

server-54-230-18-122.iad12.r.cloudfront.net
April 17, 2015

server-54-230-17-236.iad12.r.cloudfront.net
April 17, 2015

server-54-230-17-125.iad12.r.cloudfront.net
April 17, 2015

server-54-230-16-118.iad12.r.cloudfront.net
April 17, 2015

server-54-230-195-74.iad53.r.cloudfront.net
March 15, 2015

server-54-230-38-24.jfk1.r.cloudfront.net
April 16, 2014

server-54-230-36-144.jfk1.r.cloudfront.net
April 16, 2014

server-204-246-169-180.jfk1.r.cloudfront.net
April 16, 2014

server-54-230-39-119.jfk1.r.cloudfront.net
April 16, 2014

server-54-230-36-201.jfk1.r.cloudfront.net
April 16, 2014

server-54-230-37-244.jfk1.r.cloudfront.net
April 16, 2014

server-54-230-39-65.jfk1.r.cloudfront.net
April 16, 2014

server-54-230-37-122.jfk1.r.cloudfront.net
April 16, 2014

server-204-246-169-146.jfk1.r.cloudfront.net
February 3, 2014

server-54-230-39-162.jfk1.r.cloudfront.net
February 3, 2014

server-54-230-38-159.jfk1.r.cloudfront.net
February 3, 2014

server-204-246-169-40.jfk1.r.cloudfront.net
February 3, 2014

server-204-246-169-223.jfk1.r.cloudfront.net
February 3, 2014

 
Showing 30 of 41 IP Addresses

File downloads found at URLs served by content.qtrax.com.

2 / 68      (PUP)

5 / 68      (PUP)
http://content.qtrax.com/.../QtraxSetup.exe  (ecec5cfcbf1780cf489e270f2a5ff525)

5 / 68      (PUP)
http://content.qtrax.com/.../QtraxSetup.exe  (2f1e6035cee13870b91f5069a5c15eaf)

1 / 68      (inconclusive)
http://content.qtrax.com/.../QtraxSetup.exe  (50b4be0938b6c8ce05449e8418dce277)

2 / 68      (PUP)
http://content.qtrax.com/Installer/.../QtraxSetup.exe  (110fc8f6a5b4c48b520ad21e7b7f8574)

5 / 68      (PUP)
http://content.qtrax.com/.../QtraxSetup.exe  (849568afddc9aab10b54086f7d4fe9d9)

4 / 68      (PUP)
http://content.qtrax.com/.../QtraxSetup.exe  (340544e264cd823c738ffb7a6fdef12c)

The following 15 files have been seen to comunicate with content.qtrax.com in live environments.

URL:
http://content.qtrax.com/

Network:
Amazon Cloudfront

Web server:
AmazonS3

Remove Malware from content.qtrax.com - Powered by Reason Core Security