home

www.gomlab.com

Gretech Corp.

Domain Information

The domain www.gomlab.com registered by Gretech Corp. was initially registered in January of 2008 through GABIA, INC.. The hosted servers are located in Seattle, Washington within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Cloudfront CDN service which utilizes a number of proxy IP Addresses (see below).
Registrar:
GABIA, INC.

Server location:
Washington, United States (US)

Create date:
Tuesday, January 22, 2008

Expires date:
Sunday, January 22, 2017

Updated date:
Monday, January 25, 2016

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
gomlab.com

Whois:
2 gomlab.com records

The domain www.gomlab.com has been seen to resolve to the following 18 IP addresses.

52.85.142.118
server-52-85-142-118.iad12.r.cloudfront.net
July 2, 2016

52.85.142.104
server-52-85-142-104.iad12.r.cloudfront.net
July 2, 2016

52.85.142.69
server-52-85-142-69.iad12.r.cloudfront.net
July 2, 2016

52.85.142.64
server-52-85-142-64.iad12.r.cloudfront.net
July 2, 2016

52.85.142.33
server-52-85-142-33.iad12.r.cloudfront.net
July 2, 2016

52.85.142.8
server-52-85-142-8.iad12.r.cloudfront.net
July 2, 2016

52.85.142.203
server-52-85-142-203.iad12.r.cloudfront.net
July 2, 2016

52.85.142.195
server-52-85-142-195.iad12.r.cloudfront.net
July 2, 2016

52.85.130.89
server-52-85-130-89.iad53.r.cloudfront.net
April 20, 2016

52.85.130.87
server-52-85-130-87.iad53.r.cloudfront.net
April 20, 2016

52.85.130.18
server-52-85-130-18.iad53.r.cloudfront.net
April 20, 2016

52.85.130.174
server-52-85-130-174.iad53.r.cloudfront.net
April 20, 2016

52.85.130.165
server-52-85-130-165.iad53.r.cloudfront.net
April 20, 2016

52.85.130.154
server-52-85-130-154.iad53.r.cloudfront.net
April 20, 2016

52.85.130.139
server-52-85-130-139.iad53.r.cloudfront.net
April 20, 2016

52.85.130.99
server-52-85-130-99.iad53.r.cloudfront.net
April 20, 2016

38.109.102.179
February 6, 2014

38.109.102.175
February 6, 2014

File downloads found at URLs served by www.gomlab.com.

0 / 68
http://www.gomlab.com/eng/.../down.html?seq=239  (mtp181e.exe)

0 / 68
http://www.gomlab.com/eng/.../down.html?seq=179  (mpeg2dssetup-1.exe)

2 / 68      (false positives)
http://www.gomlab.com/tw/.../down.html?seq=123  (wrar420.exe)

0 / 68
http://www.gomlab.com/eng/.../down.html?seq=219  (coreaacsetup.exe)

The following 17 files have been seen to comunicate with www.gomlab.com in live environments.

TCP » 52.85.142.33:443
clearscreenplayerbrowser.exe

TCP » 52.85.142.104:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.85.130.99:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.85.142.203:80
Mobogenie.exe (Mobogenie by Mobogenie.com)

TCP » 52.85.142.104:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.85.142.69:443
whatsapptime.exe

TCP » 52.85.142.69:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.85.142.8:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.85.142.118:443
stormwatchbrowser.exe

TCP » 52.85.142.8:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.85.142.118:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.85.142.118:443
stormwatchapp.exe

TCP » 52.85.142.33:443
ManyCam.exe (ManyCam Virtual Webcam by Visicom Media)

TCP » 52.85.130.99:80
BrowserSafer.exe (BrowserSafer by Installer Technology Co)

TCP » 52.85.142.118:443
whatsapptime.exe

TCP » 52.85.142.118:80
messengertime.exe

TCP » 52.85.142.33:443
whatsapptime.exe

TCP » 52.85.142.104:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.85.142.118:443
online-guardian-v2.0.9.exe

TCP » 52.85.142.195:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

 
Latest 20 of 32 files

URL:
http://www.gomlab.com/

Google Analytics:
UA-3555958

Title:
“GOMlab.com include technical information and download link of GOM Media Player, GOM Audio, GOM Video Converter and GOM Remote.”

Description:
“free media player, free video player, free movie player, free video converter, free encorder, free audio, free remote, free download software”

Network:
Amazon Cloudfront

SSL certificate subject:
CN=*.gomlab.com, OU=Development Team, O=Gretech Corp., L=Gangnam-gu, S=Seoul, C=KR

SSL certificate issuer:
CN=thawte SSL CA - G2, O="thawte, Inc.", C=US

Web server:
Apache

Facebook:
Likes:  49
Shares:  199
Comments:  56

Statistics are for the previous month.

gomplayer.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.