studio.gomlab.com

Gretech Corp.

Domain Information

The domain studio.gomlab.com registered by Gretech Corp. was initially registered in January of 2008 through GABIA, INC.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrar:
GABIA, INC.

Server location:
Virginia, United States (US)

Create date:
Tuesday, January 22, 2008

Expires date:
Sunday, January 22, 2017

Updated date:
Monday, January 25, 2016

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc., US

Root domain:

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.GRETECH.GretechC.Installer.Meta (L), PUP.Gretech.GretechC.Installer.Meta (L), PUP.Gretech (L)
100.00%

The domain studio.gomlab.com has been seen to resolve to the following 10 IP addresses.

ec2-54-84-26-152.compute-1.amazonaws.com
September 2, 2016

ec2-52-203-29-113.compute-1.amazonaws.com
August 6, 2016

ec2-52-7-115-25.compute-1.amazonaws.com
August 6, 2016

ec2-54-210-232-211.compute-1.amazonaws.com
August 6, 2016

ec2-52-202-130-200.compute-1.amazonaws.com
July 6, 2016

ec2-52-202-40-97.compute-1.amazonaws.com
June 23, 2016

ec2-52-86-11-180.compute-1.amazonaws.com
June 23, 2016

ec2-52-1-216-47.compute-1.amazonaws.com
June 23, 2016

ec2-52-200-250-147.compute-1.amazonaws.com
April 20, 2016

ec2-52-200-249-110.compute-1.amazonaws.com
April 20, 2016

File downloads found at URLs served by studio.gomlab.com.

1 / 68      (PUP)

1 / 68      (PUP)

1 / 68      (PUP)

1 / 68      (PUP)

1 / 68      (PUP)
http://studio.gomlab.com/download_studio.gom  (unconfirmed 894286.torchdownload)

URL:
http://studio.gomlab.com/

Google Analytics:
UA-3555958

Title:
“GOM Studio. Anyone can easily create personal stations!”

Description:
“GOM Studio. Anyone can easily create personal stations!”

Network:
Amazon Web Services (AWS), running an EC2 instance

SSL certificate subject:
CN=*.gomlab.com, OU=Development Team, O=Gretech Corp., L=Gangnam-gu, S=Seoul, C=KR

SSL certificate issuer:
CN=thawte SSL CA - G2, O="thawte, Inc.", C=US

Web server:
Apache