Domain > cybercfo.co.kr

More information on this domain is in AlienVault OTX

Files that talk to cybercfo.co.kr

MD5	A/V
3e42c5e0d4dd20d96929ed30a60a2bb9	[Artemis!3E42C5E0D4DD] [Trojan.ADH.2] [UnclassifiedMalware] [Heuristic.BehavesLike.Win32.Suspicious-PKR.O] [Trojan.ADH] [Trojan-Downloader.Delphi]

Whois

Property	Value
Name	WebCash
Email	potato@webcash.co.kr
Address	11F WebCash Kyobo, Document Yo-uido-dong Yongdungpo-gu Seoul
Zip Code	150737
NameServer	ns3.coocon.co.kr
Created	2004-07-30 00:00:00
Changed	2015-07-30 00:00:00
Expires	2016-05-29 00:00:00
Registrar	Whois Corp.

DNS Resolutions

Date	IP Address
2013-01-05	220.73.162.237 (ClassC)
2013-10-09	211.218.148.213 (ClassC)
2024-12-29	218.145.64.55 (ClassC)

HTTP/1.1 200 OKDate: Thu, 23 May 2024 07:49:16 GMTServer: ApacheLast-Modified: Fri, 23 Nov 2018 08:40:23 GMTSet-Cookie: SCOUTERx3ual1vt793esv; path/; Max-Age2147483647; ExpiresTue, 10-Jun-2092 11:03:2

html>head>title> sERP- �ڱݰ�����ǰ & ���İ���12 /title>link relSHORTCUT ICON href/favicon.ico>meta http-equivContent-Type contenttext/html; charseteuc-kr>/head>script>	var url  document.location.href;	var idx  url.indexOf(.);    if(url.indexOf(ibkserp)> -1 ){        location.hrefhttp://serp2.webcash.co.kr;//������ �븮 ��û���� �� ���������� ������ ó����. 20180612 nicklaud    }else{        location.hrefhttp://www.serp.co.kr;     //serp�� ��û���� ibkserp ������ ��������ǰ�� �渮����� �������� 20181123 sangmuk.kim    }	var devMark  ;	if ( url.indexOf(dev.) > -1  )	{	    devMark  dev.;	}	else if ( url.indexOf(test.) > -1  )	{	    devMark  test.;	}/*alert( url );*/  /script>script typetext/javascript src/acecounter/portal_counter.js>/script> frameset rows0,100%,*,*,* cols* frameborderNO border0 framespacing0> 	frame src/main/sessionInvalidate.jsp namesol_hidden frameborderno scrollingno noresize>	frame src/main/main.jsp namesol_body  frameborderyes scrollingauto>/frameset>noframes>body>/body>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  /noframes>/html>xx!-- blanks for ie8. not delete xx

Subdomains

Date	Domain	IP
ibase.cybercfo.co.kr	2024-12-22	220.73.162.237
www.cybercfo.co.kr	2024-06-28	218.145.64.55

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > cybercfo.co.kr

Is this malicious?

Files that talk to cybercfo.co.kr

Whois

DNS Resolutions

Port 80

Subdomains