home

full-ggp.muonline.webzen.com

WEBZEN Inc.

Domain Information

The domain full-ggp.muonline.webzen.com registered by WEBZEN Inc. was initially registered in June of 1998 through GABIA, INC.. The hosted servers are located in Warsaw, Mazowieckie within Poland which resides on the Akamai Technologies, Inc. network.
Registrar:
GABIA, INC.

Server location:
Mazowieckie, Poland (PL)

Create date:
Monday, June 29, 1998

Expires date:
Wednesday, November 23, 2016

Updated date:
Wednesday, November 26, 2014

ASN:
AS20940 AKAMAI-ASN1 Akamai International B.V., US

Root domain:
webzen.com

Whois:
1 webzen.com record

The domain full-ggp.muonline.webzen.com has been seen to resolve to the following 7 IP addresses.

104.96.220.161
a104-96-220-161.deploy.static.akamaitechnologies.com
May 19, 2016

104.96.220.155
a104-96-220-155.deploy.static.akamaitechnologies.com
May 19, 2016

174.35.27.76
December 18, 2015

174.35.76.28
October 13, 2015

174.35.73.165
October 13, 2015

174.35.27.73
October 12, 2015

66.114.52.13
October 12, 2015

File downloads found at URLs served by full-ggp.muonline.webzen.com.

0 / 68
http://full-ggp.muonline.webzen.com/.../MU_Downloader.exe  (aa4d395765b01b5c3922eb5781cb5da4)

0 / 68
http://full-ggp.muonline.webzen.com/.../MU_Downloader.exe  (ec06de192f02169ba8f615c3163431f0)

1 / 68      (Malware)
http://full-ggp.muonline.webzen.com/.../MU_Downloader.exe  (1891960ef61f6df2aebed139d03edccd)

0 / 68
http://full-ggp.muonline.webzen.com/.../MU_Downloader.exe  (b9602d16a30d7ebb67d5c6dea4444be8)

15 / 68    (Infected)
http://full-ggp.muonline.webzen.com/.../C9_Downloader.exe  (8860e9b62a6c8f07efeaac2bb956b76e)

0 / 68
http://full-ggp.muonline.webzen.com/.../C9_Downloader.exe  (b9ae1275b5846b2ef1b4efb54d893c52)

0 / 68
http://full-ggp.muonline.webzen.com/.../MU_Downloader.exe  (dce818fbb297a3c5524d82ddd2f5af47)

The following 58 files have been seen to comunicate with full-ggp.muonline.webzen.com in live environments.

TCP » 174.35.76.28:80
1468567241.exe

TCP » 174.35.27.73:80
1468567241.exe

TCP » 104.96.220.155:443
beamrise.exe (Beamrise by The Beamrise Authors)

TCP » 174.35.27.76:80
1468567241.exe

TCP » 66.114.52.13:80
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 174.35.27.76:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 66.114.52.13:80
1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

TCP » 174.35.27.73:80
Iminent.Messengers.exe (Iminent Messengers by Iminent)

TCP » 174.35.76.28:80
1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

TCP » 174.35.76.28:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 174.35.27.73:80
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 174.35.27.76:80
umbrella282_upd.exe (Iminent Service by Iminent)

TCP » 174.35.27.73:80
1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

TCP » 174.35.27.76:80
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 174.35.27.73:80
umbrella282_upd.exe (Iminent Service by Iminent)

TCP » 104.96.220.155:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 174.35.76.28:80
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 104.96.220.155:443
kometa.exe (Kometa by Kometa Authors)

TCP » 104.96.220.161:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 104.96.220.155:80
GPlayer.exe (by Exent Technologies)

 
Latest 20 of 132 files

URL:
http://full-ggp.muonline.webzen.com/

Web server:
PWS/8.1.20.25

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.