home

get.gymnastsel.space

Domain Information

Server location:
Washington, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
gymnastsel.space

The domain get.gymnastsel.space has been seen to resolve to the following 16 IP addresses.

52.85.142.61
server-52-85-142-61.iad12.r.cloudfront.net
June 3, 2016

52.85.142.203
server-52-85-142-203.iad12.r.cloudfront.net
June 3, 2016

52.85.142.161
server-52-85-142-161.iad12.r.cloudfront.net
June 3, 2016

52.85.142.157
server-52-85-142-157.iad12.r.cloudfront.net
June 3, 2016

52.85.142.153
server-52-85-142-153.iad12.r.cloudfront.net
June 3, 2016

52.85.142.103
server-52-85-142-103.iad12.r.cloudfront.net
June 3, 2016

52.85.142.87
server-52-85-142-87.iad12.r.cloudfront.net
June 3, 2016

52.85.142.64
server-52-85-142-64.iad12.r.cloudfront.net
June 3, 2016

52.85.131.55
server-52-85-131-55.iad53.r.cloudfront.net
May 24, 2016

52.85.131.51
server-52-85-131-51.iad53.r.cloudfront.net
May 24, 2016

52.85.131.21
server-52-85-131-21.iad53.r.cloudfront.net
May 24, 2016

52.85.131.17
server-52-85-131-17.iad53.r.cloudfront.net
May 24, 2016

52.85.131.217
server-52-85-131-217.iad53.r.cloudfront.net
May 24, 2016

52.85.131.175
server-52-85-131-175.iad53.r.cloudfront.net
May 24, 2016

52.85.131.146
server-52-85-131-146.iad53.r.cloudfront.net
May 24, 2016

52.85.131.100
server-52-85-131-100.iad53.r.cloudfront.net
May 24, 2016

File downloads found at URLs served by get.gymnastsel.space.

0 / 68
http://get.gymnastsel.space/?s=co&ses=452874573413282624&flp=1  (learn_english_for_children.exe.zip)

0 / 68
http://get.gymnastsel.space/?s=co&ses=667384359985589952&flp=1  (autocad.exe.zip)

The following 18 files have been seen to comunicate with get.gymnastsel.space in live environments.

TCP » 52.85.142.103:80
se.exe

TCP » 52.85.142.153:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.85.142.103:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.85.142.161:80
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 52.85.142.103:80
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 52.85.142.203:80
Mobogenie.exe (Mobogenie by Mobogenie.com)

TCP » 52.85.142.161:80
mobogenieP2sp.exe (mobogenie by mobogenie.com)

TCP » 52.85.142.87:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.85.142.153:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 52.85.142.161:80
mybrowser.exe (MyBrowser)

TCP » 52.85.142.161:80
whatsapptime.exe

TCP » 52.85.142.161:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.85.142.61:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.85.142.87:80
Mobogenie.exe (Mobogenie by Mobogenie.com)

TCP » 52.85.142.87:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.85.142.103:443
online-guardian-v2.0.9.exe

TCP » 52.85.142.153:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 52.85.142.203:443
online-guardian-v2.0.9.exe

TCP » 52.85.142.203:443
ManyCam.exe (ManyCam Virtual Webcam by Visicom Media)

TCP » 52.85.142.61:443
ManyCam.exe (ManyCam Virtual Webcam by Visicom Media)

 
Latest 20 of 32 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.