home

3c-bs.gmx.com

1&1 Mail & Media GmbH

Domain Information

The domain 3c-bs.gmx.com registered by 1&1 Mail & Media GmbH was initially registered in May of 1994 through PSI-USA, INC. DBA DOMAIN ROBOT. The hosted servers are located in Karlsruhe, Baden-Wurttemberg within Germany which resides on the RIPE Network Coordination Centre network.
Registrar:
PSI-USA, INC. DBA DOMAIN ROBOT

Server location:
Baden-Wurttemberg, Germany (DE)

Create date:
Saturday, May 7, 1994

Expires date:
Monday, May 8, 2017

Updated date:
Thursday, April 7, 2016

ASN:
AS8560 ONEANDONE-AS 1&1 Internet AG,DE

Root domain:
gmx.com

Whois:
1 gmx.com record

The domain 3c-bs.gmx.com has been seen to resolve to the following IP address.

217.72.201.130
3c-bs.gmx.com
April 10, 2016

File downloads found at URLs served by 3c-bs.gmx.com.

0 / 68
https://3c-bs.gmx.com/mail/client/attachment/download/.../;jsessionid=5EF56082C31FAE564DCFB01ED467F9A4-n2.bs09b  (att00001.htm)

0 / 68
https://3c-bs.gmx.com/mail/client/attachment/download/.../;jsessionid=10274E54FE2FB5A5EA91BC109B970963-n2.bs08b  (restaurantresume2.rtf)

0 / 68
https://3c-bs.gmx.com/mail/client/attachment/download/.../;jsessionid=CAD5456A15508769DADD0836A870C98F-n2.bs05b  (georg hahn kuppelsaal.vcf)

0 / 68
https://3c-bs.gmx.com/mail/client/attachment/download/.../;jsessionid=5844E52852845D85E519343738CB6F28-n1.bs07b  (message-delivery-status-attachment)

0 / 68
https://3c-bs.gmx.com/mail/client/attachment/download/.../;jsessionid=E789B01889C28D7FA2A1F7B7555BA9A1-n1.bs08a  (rops munesd 2016.rtf)

0 / 68
https://3c-bs.gmx.com/mail/client/attachment/download/.../;jsessionid=F11A22BE86B9B981C67233293CF80A7A-n2.bs14b  ({05307cf4-3bc3-4687-b9b8-27349900a6fc}.html)

0 / 68
https://3c-bs.gmx.com/mail/client/attachment/download/.../;jsessionid=F11A22BE86B9B981C67233293CF80A7A-n2.bs14b  ({0774358d-0192-49dd-91f8-c265eed8484c}.html)

0 / 68
https://3c-bs.gmx.com/mail/client/attachment/download/.../;jsessionid=0B159F14A141B2E6D0CECFEC0A5F7801-n1.bs16a  (att00001.htm)

0 / 68
https://3c-bs.gmx.com/mail/client/attachment/download/.../;jsessionid=A073C6314B25B28AD1A616DBFBF03F5D-n1.bs02b  (wudu foot wash trough - washware essentials.mht)

0 / 68
https://3c-bs.gmx.com/mail/client/attachment/download/.../;jsessionid=DA2436FED0EEAFE6EEFA801E01C62B62-n2.bs12b  (subcontract hs questionnaire.odt)

The following 13 files have been seen to comunicate with 3c-bs.gmx.com in live environments.

TCP » 217.72.201.130:443
online-guardian-v2.0.9.exe

TCP » 217.72.201.130:443
online-guardian-v2.0.9.exe

TCP » 217.72.201.130:443
produpd.exe (produpd.exe by Vested Development, Inc)

TCP » 217.72.201.130:443
onlineguardian-v2.exe

TCP » 217.72.201.130:443
online-guardian-v2.exe

TCP » 217.72.201.130:443
online-guardian-v2.exe

TCP » 217.72.201.130:443
produpd.exe (produpd.exe by Vested Development, Inc)

TCP » 217.72.201.130:443
online-guardian.exe

TCP » 217.72.201.130:443
online-guardian.exe

TCP » 217.72.201.130:443
Client.exe

TCP » 217.72.201.130:443
produpd.exe (produpd.exe by Vested Development, Inc)

TCP » 217.72.201.130:443
produpd.exe (produpd.exe by Vested Development, Inc)

TCP » 217.72.201.130:443
produpd.exe (produpd.exe by Vested Development, Inc)

URL:
http://3c-bs.gmx.com/

SSL certificate subject:
CN=*.gmx.com, O=1&1 Mail & Media Inc., L=Chesterbrook, S=Pennsylvania, C=US

SSL certificate issuer:
CN=thawte SSL CA - G2, O="thawte, Inc.", C=US

Web server:
Apache

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.