home

cdn.gomlab.com

Gretech Corp.

Domain Information

The domain cdn.gomlab.com registered by Gretech Corp. was initially registered in January of 2008 through GABIA, INC.. The hosted servers are located in San Jose, California within the United States which resides on the CDNetworks Inc. network.
Registrar:
GABIA, INC.

Server location:
California, United States (US)

Create date:
Tuesday, January 22, 2008

Expires date:
Sunday, January 22, 2017

Updated date:
Monday, January 25, 2016

ASN:
AS36408 CDNETWORKSUS-02 - CDNetworks Inc.,US

Root domain:
gomlab.com

Whois:
1 gomlab.com record

The domain cdn.gomlab.com has been seen to resolve to the following 7 IP addresses.

66.114.52.14
September 18, 2016

66.114.52.18
August 26, 2016

66.114.52.11
August 26, 2016

66.114.52.9
July 21, 2016

174.35.27.71
July 21, 2016

174.35.27.77
July 15, 2016

174.35.27.76
July 15, 2016

File downloads found at URLs served by cdn.gomlab.com.

0 / 68
https://cdn.gomlab.com/gretech/.../GOMPLAYERGLOBALSETUP.EXE  (9fa18b11-567f-ebd0-0b2e-000f16edcb22_1d1e56458a73350)

1 / 68      (PUP)
https://cdn.gomlab.com/gretech/.../GOMPLAYERGLOBALSETUP.EXE  (74590182252c5dc29683e45e6294ec26)

1 / 68      (PUP)
https://cdn.gomlab.com/gretech/.../GOMAUDIOGLOBALSETUP.EXE  (f5bcb7860f7e775a05a9582d61cbb6a8)

0 / 68
https://cdn.gomlab.com/gretech/.../GOMPLAYERGLOBALSETUP.EXE  (78b2619f93fe5aba57a8399bf94f0adb)

The following 35 files have been seen to comunicate with cdn.gomlab.com in live environments.

TCP » 66.114.52.14:80
1468567241.exe

TCP » 66.114.52.9:80
1468567241.exe

TCP » 174.35.27.76:80
1468567241.exe

TCP » 66.114.52.11:80
1468567241.exe

TCP » 174.35.27.71:80
1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

TCP » 66.114.52.11:80
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 174.35.27.76:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 66.114.52.11:80
1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

TCP » 66.114.52.18:80
1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

TCP » 66.114.52.9:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 174.35.27.71:80
1468567241.exe

TCP » 66.114.52.18:80
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 66.114.52.14:80
1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

TCP » 174.35.27.76:80
umbrella282_upd.exe (Iminent Service by Iminent)

TCP » 174.35.27.76:80
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 66.114.52.14:80
browser.exe (Browser)

TCP » 174.35.27.71:80
gamelogin.exe (gamelogin by 337 Technology Limited)

TCP » 66.114.52.14:80
1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

TCP » 66.114.52.11:80
umbrella282_upd.exe (Iminent Service by Iminent)

TCP » 174.35.27.71:80
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

 
Latest 20 of 137 files

URL:
http://cdn.gomlab.com/

SSL certificate subject:
CN=ssl2.cdngc.net, O=CDNetworks Inc., L=San Jose, S=California, C=US

SSL certificate issuer:
CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US

Web server:
PWS/8.1.38

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.