qualitygums.com - suspicious URL scan, 23 Aug 2026
MalwareAnalyzer by Cyble scanned qualitygums.com and returned a suspicious verdict (score 40). The page resolved to 45.113.122.70 on Hostgator.com LLC in IN. The domain was registered 5403 days ago through BigRock Solutions Ltd. 3 domains and 1 IP were contacted, over 19 HTTP requests. 3 malware samples communicate with this URL (Phishing). This is a point-in-time observation from 23 Aug 2026; the page may have changed since.
Scan result
- Verdict: suspicious (score 40) · Confidence 43%
- Scanned URL:
https://qualitygums.com/userfiles/file/gobunurebunesamisebamu.pdf - Domain: qualitygums.com · IP: 45.113.122.70 · AS394695 · IN
- Server: Apache
- Page title: 404 Page Not Found
- HTTP status: 404 · text/html; charset=UTF-8
- Registrar: BigRock Solutions Ltd · domain age 5403 days · created 2011-11-07
- HTTP requests captured: 19
- Scan tier: fast · observed 2026-08-23 09:27:46 UTC
Malware communicating with this URL (3)
These samples were observed contacting or being served from qualitygums.com. Each links to its full analysis.
- Phishing - referenced ·
fea52021ef8236a229a6760dbf3eb703· first seen 2026-08-23 - Phishing - referenced ·
4edf4405c8d2c6e1669d0ae5b9967b5c· first seen 2026-08-13 - Phishing - referenced ·
d45dbdee2260d646d44e8f8844764c21· first seen 2026-08-11
Antivirus & YARA (1 of 48 engines)
- YARA: JPCERT/CC [yara]: JPCERT_LODEINFO (page content)
These signatures matched text in the page. Pages that quote or document malware can match them, so on their own they do not make a page malicious.
Why this verdict
- Antivirus/YARA detection in page content: JPCERT_LODEINFO
Detected technologies
- Apache
- jQuery
- Bootstrap
Contacted infrastructure
- 45.113.122.70 - AS394695 Hostgator.com LLC (India)
Observed indicators
- qualitygums.com
- maxcdn.bootstrapcdn.com
- fonts.googleapis.com
- 45.113.122.70
- https://qualitygums.com/userfiles/file/gobunurebunesamisebamu.pdf
- https://qualitygums.com/cache/photos/shares/web/quality-gums-logo_64_x_64.webp
- https://qualitygums.com/assets/front_assets/fonts/css/all.min.css
- https://qualitygums.com/assets/front_assets/revolution/fonts/pe-icon-7-stroke/css/pe-icon-7-stroke.css
- https://qualitygums.com/assets/front_assets/revolution/fonts/font-awesome/css/font-awesome.css
- https://qualitygums.com/assets/front_assets/revolution/css/settings.css
- https://qualitygums.com/assets/front_assets/revolution/css/layers.css
- https://qualitygums.com/assets/front_assets/revolution/css/navigation.css
- https://qualitygums.com/assets/front_assets/css/lib/bootstrap.min.css
- https://qualitygums.com/assets/front_assets/css/lib/flickity.min.css
- https://qualitygums.com/assets/front_assets/css/lib/magnific-popup.min.css
- https://qualitygums.com/assets/front_assets/css/lib/owl.carousel.min.css
- https://qualitygums.com/assets/front_assets/css/lib/slick.min.css
- https://qualitygums.com/assets/front_assets/css/lib/aos.min.css
- https://qualitygums.com/assets/front_assets/css/navbar.css
- https://qualitygums.com/assets/front_assets/css/main.css
Other scans of qualitygums.com (3)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 24 Aug 2026 - suspicious ·
https://qualitygums.com/userfiles/file/kuxozox.pdf - 13 Aug 2026 - suspicious ·
https://qualitygums.com/userfiles/file/42429125039.pdf - 11 Aug 2026 - unknown ·
https://qualitygums.com/userfiles/file/99651835856.pdf
Questions about qualitygums.com
- Is qualitygums.com safe?
- No. MalwareAnalyzer scanned qualitygums.com on 23 Aug 2026 and returned a suspicious verdict with a score of 40 out of 100. Treat it as hostile until it is re-checked.
- What malware is associated with qualitygums.com?
- 3 analysed samples communicate with this URL, including Phishing.
- How was qualitygums.com checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of qualitygums.com
Scanned on MalwareAnalyzer by Cyble · Open interactive scan