home

cfile229.uf.daum.net

Kakao Corp.

Domain Information

The domain cfile229.uf.daum.net registered by Kakao Corp. was initially registered in March of 1996 through NETPIA.COM, INC.. The hosted servers are located in Seoul, Seoul-T'Ukpyolsi within Korea which resides on the Asia Pacific Network Information Centre network.
Registrar:
NETPIA.COM, INC.

Server location:
Seoul-T'Ukpyolsi, Korea (KR)

Create date:
Tuesday, March 5, 1996

Expires date:
Friday, March 6, 2020

Updated date:
Thursday, November 19, 2015

ASN:
AS3786 LGDACOM LG DACOM Corporation,KR

Root domain:
daum.net

Whois:
2 daum.net records

The domain cfile229.uf.daum.net has been seen to resolve to the following 3 IP addresses.

114.108.157.208
December 15, 2015

66.114.52.13
April 16, 2014

66.114.52.19
April 16, 2014

File downloads found at URLs served by cfile229.uf.daum.net.

0 / 68
http://cfile229.uf.daum.net/.../24741540539C275821B9DC  (01라인이모티콘.zip)

0 / 68
http://cfile229.uf.daum.net/.../142C93444F54C29F0753AB  (scenery_아름다운_자연-.pps)

0 / 68
http://cfile229.uf.daum.net/.../1770C84C4E16816E0353BC  (14바람의_알레그로_반주곡.exe)

5 / 68      (Malware)
http://cfile229.uf.daum.net/.../263C94435312E78F2DD080  (졸은글과_절경.exe)

1 / 68
http://cfile229.uf.daum.net/.../137F42164AA8C5436C9604  (project1.exe(日本美的感覺_映像)0910-c..exe)

16 / 68    (PUP)
http://cfile229.uf.daum.net/.../1652713B4FF2245901C650  (30-11180_lingoes_2.7.5.exe)

The following 18 files have been seen to comunicate with cfile229.uf.daum.net in live environments.

TCP » 66.114.52.19:80
1468567241.exe

TCP » 66.114.52.13:80
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 66.114.52.19:80
1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

TCP » 66.114.52.19:80
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 66.114.52.13:80
1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

TCP » 66.114.52.19:80
umbrella282_upd.exe (Iminent Service by Iminent)

TCP » 66.114.52.19:80
gamelogin.exe (gamelogin by 337 Technology Limited)

TCP » 66.114.52.13:443
browser.exe (Browser)

TCP » 66.114.52.13:80
umbrella282_upd.exe (Iminent Service by Iminent)

TCP » 66.114.52.13:80
{6ae11fc7-5aaf-401c-8438-ef3bbc2bb80b}.exe (toolmini Application)

TCP » 66.114.52.13:80
gamelogin.exe (gamelogin by 337 Technology Limited)

TCP » 66.114.52.19:80
1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

TCP » 66.114.52.13:80
Iminent.Messengers.exe (Iminent Messengers by Iminent)

TCP » 66.114.52.13:80
Iminent.exe (Iminent)

TCP » 66.114.52.19:80
Iminent.Messengers.exe (Iminent Messengers by Iminent)

TCP » 66.114.52.19:80
weathermini.exe (The Desktop Weather by ShenZhen Enode Techology co,.Ltd)

TCP » 66.114.52.13:80
kmplayer_3.7.0.109.exe

TCP » 66.114.52.13:80
Iminent.exe (Iminent)

TCP » 66.114.52.13:80
Iminent.Messengers.exe (Iminent Messengers by Iminent)

TCP » 66.114.52.19:80
3.9.0.124_20140513022949.exe (The KMPlayer by PandoraTV)

 
Latest 20 of 40 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.