thegymmum.com
Classification: Malicious
thegymmum.com is a malicious hostname. Linked to Apt37 activity. Reported by Maltiverse, last seen 2023-07-05. Resolves to 91.195.240.117 and 4 more.
Current activity
- Online — resolving/reachable. Last checked 2026-10-18 04:37:18.
MITRE ATT&CK associations
Intrusion sets: APT37 (G0067)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Top Popularity Site | Cisco Umbrella | 2022-08-06 12:07:35 | 2023-09-04 00:30:25 | benign | |
| Apt37 | Maltiverse | 2023-07-04 04:28:50 | 2023-07-05 20:51:40 | malicious-activity | G0067 APT37 |
Tags
aptIP addresses resolved by this hostname
- 91.195.240.117 (2022-08-06 12:07:35)
- 204.11.56.48 (2023-09-20 10:08:02)
- 208.91.197.46 (2023-10-30 17:56:51)
- 188.40.141.211 (2025-07-08 16:05:09)
- 44.192.95.127 (2026-10-18 04:37:18)
Whois information
- AS name
- AS40034 Confluence Networks Inc
- Domain
- thegymmum.com
- TLD
- com
- DNSSEC
- ['unsigned']
- Nameservers
- NS1.CSOF.NET, NS2.CSOF.NET, NS3.CSOF.NET, NS4.CSOF.NET
- Registrant
- Dynadot Inc
- Contact email
- [email protected]
- Domain created
- 2026-07-16 10:25:50
- Domain expires
- 2027-07-16 10:25:50
- First indexed
- 2022-08-06 12:07:35
- Last updated
- 2026-10-18 04:37:18