home

www.qmeye.net

YinSi BaoHu Yi KaiQi (Hidden by Whois Privacy Protection Service)

Domain Information

The domain www.qmeye.net registered by YinSi BaoHu Yi KaiQi (Hidden by Whois Privacy Protection Service) was initially registered in December of 2013 through HICHINA ZHICHENG TECHNOLOGY LTD.. The hosted servers are located in Seattle, Washington within the United States. The domain uses the Amazon Cloudfront CDN service which utilizes a number of proxy IP Addresses (see below).
Registrar:
HICHINA ZHICHENG TECHNOLOGY LTD.

Server location:
Washington, United States (US)

Create date:
Tuesday, December 3, 2013

Expires date:
Saturday, December 3, 2016

Updated date:
Tuesday, December 3, 2013

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
qmeye.net

Whois:
1 qmeye.net record

The domain www.qmeye.net has been seen to resolve to the following 38 IP addresses.

52.85.142.31
server-52-85-142-31.iad12.r.cloudfront.net
May 28, 2016

52.85.142.12
server-52-85-142-12.iad12.r.cloudfront.net
May 28, 2016

52.85.142.9
server-52-85-142-9.iad12.r.cloudfront.net
May 28, 2016

52.85.142.230
server-52-85-142-230.iad12.r.cloudfront.net
May 28, 2016

52.85.142.192
server-52-85-142-192.iad12.r.cloudfront.net
May 28, 2016

52.85.142.157
server-52-85-142-157.iad12.r.cloudfront.net
May 28, 2016

52.85.142.96
server-52-85-142-96.iad12.r.cloudfront.net
May 28, 2016

52.85.142.75
server-52-85-142-75.iad12.r.cloudfront.net
May 28, 2016

52.85.131.64
server-52-85-131-64.iad53.r.cloudfront.net
May 27, 2016

52.85.131.14
server-52-85-131-14.iad53.r.cloudfront.net
May 27, 2016

52.85.131.235
server-52-85-131-235.iad53.r.cloudfront.net
May 27, 2016

52.85.131.225
server-52-85-131-225.iad53.r.cloudfront.net
May 27, 2016

52.85.131.203
server-52-85-131-203.iad53.r.cloudfront.net
May 27, 2016

52.85.131.202
server-52-85-131-202.iad53.r.cloudfront.net
May 27, 2016

52.85.131.169
server-52-85-131-169.iad53.r.cloudfront.net
April 14, 2016

52.85.131.161
server-52-85-131-161.iad53.r.cloudfront.net
April 14, 2016

52.85.131.146
server-52-85-131-146.iad53.r.cloudfront.net
April 14, 2016

52.85.131.29
server-52-85-131-29.iad53.r.cloudfront.net
April 14, 2016

52.85.131.236
server-52-85-131-236.iad53.r.cloudfront.net
April 14, 2016

52.85.131.230
server-52-85-131-230.iad53.r.cloudfront.net
April 14, 2016

52.85.131.219
server-52-85-131-219.iad53.r.cloudfront.net
April 14, 2016

52.85.131.191
server-52-85-131-191.iad53.r.cloudfront.net
April 14, 2016

52.85.131.24
server-52-85-131-24.iad53.r.cloudfront.net
April 2, 2016

52.85.131.239
server-52-85-131-239.iad53.r.cloudfront.net
April 2, 2016

52.85.131.145
server-52-85-131-145.iad53.r.cloudfront.net
April 2, 2016

52.85.131.102
server-52-85-131-102.iad53.r.cloudfront.net
April 2, 2016

52.85.131.77
server-52-85-131-77.iad53.r.cloudfront.net
April 2, 2016

52.85.131.52
server-52-85-131-52.iad53.r.cloudfront.net
April 2, 2016

52.85.131.40
server-52-85-131-40.iad53.r.cloudfront.net
April 2, 2016

52.85.131.27
server-52-85-131-27.iad53.r.cloudfront.net
April 2, 2016

 
Showing 30 of 38 IP Addresses

File downloads found at URLs served by www.qmeye.net.

0 / 68
http://www.qmeye.net/QmEye_pc.exe  (78b521f9cc7f844994f901ad4d5eeae2)

0 / 68
http://www.qmeye.net/android.apk  (44272f88d516dae465042ab0cae8a5b2)

0 / 68
http://www.qmeye.net/QmEye_pc.exe  (42607d503a75f97acc82a5452446fd81)

0 / 68
http://www.qmeye.net/QmEye_pc.exe  (0e9b5014978d044e1054339e26888b16)

0 / 68
http://www.qmeye.net/QmEye_pc.exe  (77e7f14774e38616e1fcbb08004f227c)

The following 15 files have been seen to comunicate with www.qmeye.net in live environments.

TCP » 54.192.195.197:443
online-guardian-v2.0.9.exe

TCP » 52.85.142.9:80
Mobogenie.exe (Mobogenie by Mobogenie.com)

TCP » 52.85.142.31:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 54.192.195.197:443
online-guardian-v2.0.9.exe

TCP » 52.85.142.9:80
Mobogenie.exe (Mobogenie by Mobogenie.com)

TCP » 52.85.142.12:443
browser.exe (Browser)

TCP » 52.85.142.12:443
online-guardian-v2.0.9.exe

TCP » 52.85.142.12:80
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 52.85.142.96:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.85.131.230:443
browser.exe (Browser)

TCP » 52.85.142.96:443
citrio.exe (Citrio by CatalinaGroup)

TCP » 54.192.195.197:443
onlineguardian-v2.exe

TCP » 52.85.142.12:443
online-guardian-v2.0.9.exe

TCP » 52.85.142.75:443
whatsapptime.exe

TCP » 52.85.142.75:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.85.142.9:80
browser.exe (Browser)

TCP » 52.85.142.9:443
browser.exe (Browser)

TCP » 52.85.142.96:443
whatsapptime.exe

TCP » 52.85.142.12:80
Trezaa.Service.exe (Trezaa.Service by Microsoft)

TCP » 52.85.142.230:80
beamrise.exe (Beamrise by The Beamrise Authors)

 
Latest 20 of 34 files

URL:
http://www.qmeye.net/

Network:
Amazon Cloudfront

Web server:
AmazonS3

Facebook:
Shares:  1

Statistics are for the previous month.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.