home

getmdl.io

Domain Information

Server location:
California, United States (US)

ASN:
AS15169 GOOGLE - Google Inc.

The domain getmdl.io has been seen to resolve to the following 4 IP addresses.

216.239.34.21
any-in-2215.1e100.net
July 27, 2016

216.239.32.21
any-in-2015.1e100.net
July 27, 2016

216.239.38.21
any-in-2615.1e100.net
July 27, 2016

216.239.36.21
any-in-2415.1e100.net
July 27, 2016

The following 98 files have been seen to comunicate with getmdl.io in live environments.

TCP » 216.239.32.21:80
jingling.exe

TCP » 216.239.32.21:80
jingling.exe

TCP » 216.239.32.21:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 216.239.34.21:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 216.239.38.21:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 216.239.36.21:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 216.239.32.21:80
ContentFinder.exe (ContentFinder by ContentFinder Software)

TCP » 216.239.34.21:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 216.239.32.21:80
sys.exe

TCP » 216.239.32.21:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 216.239.32.21:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 216.239.32.21:80
bfa0d68f.exe (Client Server Runtime Process by Microsoft)

TCP » 216.239.36.21:80
ContentFinder.exe (ContentFinder by ContentFinder Software)

TCP » 216.239.34.21:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 216.239.36.21:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 216.239.34.21:80
jingling.exe

TCP » 216.239.36.21:80
ContentFinder.exe (ContentFinder by DigitalSoftware Group)

TCP » 216.239.38.21:80
jingling.exe

TCP » 216.239.34.21:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 216.239.38.21:80
UCBrowser.exe (UC Browser by UCWeb)

 
Latest 20 of 193 files

July 27, 2016
code.getmdl.io

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.