home

t.qservz.com

Group M Worldwide, Inc.

Domain Information

The domain t.qservz.com registered by Group M Worldwide, Inc. was initially registered in August of 2011 through CSC CORPORATE DOMAINS, INC.. The hosted servers are located in Karlsruhe, Baden-Wurttemberg within Germany which resides on the RIPE Network Coordination Centre network.
Registrar:
CSC CORPORATE DOMAINS, INC.

Server location:
Baden-Wurttemberg, Germany (DE)

Create date:
Tuesday, August 2, 2011

Expires date:
Tuesday, August 2, 2016

Updated date:
Tuesday, June 30, 2015

ASN:
AS49024 FHE3 FHE3 GmbH,DE

Root domain:
qservz.com

Whois:
1 qservz.com record

The domain t.qservz.com has been seen to resolve to the following 2 IP addresses.

95.131.121.198
t.qservz.com
February 29, 2016

95.131.121.199
t.qservz.com
February 29, 2016

File downloads found at URLs served by t.qservz.com.

0 / 68
https://t.qservz.com/tr.aspx?campaign=5c645cc19a53ac1dfb155840d886050c&type=pps&retmode=3&orderid=&level=sale&redirect_url=http://sea.quisma.com/tcr.php?cl=8333134323236323131303&v=&vz=sale_1&vv=&po=&c1=&c2=&c3=&c4=&pi=&redirect=http://create.kodak.com/asset-s/01/e/ed/.../edb1d315-a10d-4988-adef-ebe072a401fa.exe  (d8246eb7-17c1-4476-a972-aed8f57ff1ec.exe)

0 / 68
https://t.qservz.com/tr.aspx?campaign=5c645cc19a53ac1dfb155840d886050c&type=pps&retmode=3&orderid=&level=sale&redirect_url=http://sea.quisma.com/tcr.php?cl=8333134323236323131303&v=&vz=sale_1&vv=&po=&c1=&c2=&c3=&c4=&pi=&redirect=http://create.kodak.com/asset-s/01/e/ed/.../edb1d315-a10d-4988-adef-ebe072a401fa.exe  (d8246eb7-17c1-4476-a972-aed8f57ff1ec.exe)

0 / 68
https://t.qservz.com/tr.aspx?campaign=5c645cc19a53ac1dfb155840d886050c&type=pps&retmode=3&orderid=&level=sale&redirect_url=http://sea.quisma.com/tcr.php?cl=8333134323236323131303&v=&vz=sale_2&vv=&po=&c1=&c2=&c3=&c4=&pi=&redirect=http://picturecenter.kdfse.com/admin/asset/.../rest.php?assetKey=digilabs_fotobook&partner=&retailer=eu1-DEU&country=DEU&layout=kex&application=KPCO&language=ger&component_id=KPCO  (MyPhotoCreationInstaller.exe)

The following 5 files have been seen to comunicate with t.qservz.com in live environments.

TCP » 95.131.121.199:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 95.131.121.199:443
online-guardian-v2.0.9.exe

TCP » 95.131.121.199:443
browser.exe (speed browser by Fast Applications)

TCP » 95.131.121.198:443
apptrailers.exe

TCP » 95.131.121.198:80
online-guardian-v2.0.9.exe

TCP » 95.131.121.198:80
jingling.exe

URL:
http://t.qservz.com/

Title:
“Unbenanntes Dokument”

SSL certificate subject:
CN=*.qservz.com, O="Group M Worldwide, INC.", L=New York, S=NY, C=US

SSL certificate issuer:
CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US

Web server:
nginx (ASP.NET)

Facebook:
Shares:  9

Statistics are for the previous month.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.