Domain > dreamsearch.or.kr

More information on this domain is in AlienVault OTX

Property	Value
Name	han kyung su
Email	zp1492@nate.com
NameServer	ns2.siidc.net
Created	2012-06-11 00:00:00
Changed	2015-08-01 00:00:00
Expires	2018-06-11 00:00:00
Registrar	Gabia, Inc.

DNS Resolutions

Date	IP Address
2012-12-28	221.143.49.37 (ClassC)
2013-02-09	221.143.49.39 (ClassC)
2013-07-16	112.175.173.50 (ClassC)
2013-11-07	183.111.148.50 (ClassC)
2015-07-15	190.93.242.8 (ClassC)
2015-07-17	190.93.243.8 (ClassC)
2015-07-21	141.101.123.8 (ClassC)
2015-07-25	190.93.240.8 (ClassC)
2024-12-25	27.0.236.142 (ClassC)
2025-01-12	27.0.236.139 (ClassC)
2025-01-15	211.249.222.34 (ClassC)

HTTP/1.1 200 Date: Sun, 24 Dec 2023 15:33:46 GMTContent-Type: text/html;charsetUTF-8Content-Length: 40710Vary: Accept-EncodingT_USERID: cff3202fa7bf9629e3b6fac8c625d2b11db5ff16Set-Cookie: REACTION_GUE

!DOCTYPE html>html langko>	                                                                                head>                script typetext/javascript>if (!window.T) { window.T  {} }window.T.config  {TOP_SSL_URL:https://www.tistory.com,PREVIEW:false,ROLE:guest,PREV_PAGE:,NEXT_PAGE:,BLOG:{id:3926930,name:dreamsearch,title:드림서치 - 꿈을 찾아서,isDormancy:true,nickName:newsletter,status:open},NEED_COMMENT_LOGIN:false,COMMENT_LOGIN_CONFIRM_MESSAGE:,LOGIN_URL:https://www.tistory.com/auth/login/?redirectUrlhttps://dreamsearch.or.kr/,DEFAULT_URL:https://dreamsearch.or.kr,USER:{name:null,homepage:null,id:0,profileImage:null},SUBSCRIPTION:{status:none,isConnected:false,isPending:false,isWait:false,isProcessing:false,isNone:true},IS_LOGIN:false,HAS_BLOG:false,IS_SUPPORT:false,TOP_URL:http://www.tistory.com,JOIN_URL:https://www.tistory.com/member/join,ROLE_GROUP:visitor};window.appInfo  {domain:tistory.com,topUrl:https://www.tistory.com,loginUrl:https://www.tistory.com/auth/login,logoutUrl:https://www.tistory.com/auth/logout};window.initData  {};window.TistoryBlog  {    basePath: ,    url: https://dreamsearch.or.kr,    tistoryUrl: https://dreamsearch.tistory.com,    manageUrl: https://dreamsearch.tistory.com/manage,    token: GFZrsWm+qiNcXN79qG4GfIjXO1PFuvFScWtczQefrZnRvnPJAtTCUxCQrghRumxF};var servicePath  ;var blogURL  ;/script>                                                                        !-- BusinessLicenseInfo - START -->                    link hrefhttps://tistory1.daumcdn.net/tistory_admin/userblog/tistory-03dc514303f3132d67c3f37f086d7a71da167d38/static/plugin/BusinessLicenseInfo/style.css relstylesheet typetext/css/>            script>function switchFold(entryId) {    var businessLayer  document.getElementById(businessInfoLayer_ + entryId);    if (businessLayer) {        if (businessLayer.className.indexOf(unfold_license) > 0) {            businessLayer.className  business_license_layer;        } else {            businessLayer.className  business_license_layer unfold_license;        }    }}/

Subdomains

Date	Domain	IP
www.dreamsearch.or.kr	2014-03-04	183.111.148.50

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

MD5	A/V
c4affbf8369b8bbd2066becb7f287c38	[BackDoor-EXZ] [Trojan.Win32.Wecod.aozp] [Packed:W32/PeCan.A] [Heuristic.BehavesLike.Win32.Suspicious-PKR.G] [Backdoor:Win32/Blohi.B] [MAS.Trojan.VB.01728] [Backdoor.Win32.Zegost]
685e6d1e442e2250ab070678cb099bc6	[Artemis!685E6D1E442E] [Artemis!Trojan] [PUA.Liuliangbao] [Riskware/Liuliangbao] [PUA.Win32.Liuliangbao.A] [Win32/Trojan.Adware.37e]
88801b7f5e9df51ef24b279df1bfc275
0c153ad62ec3f4d82bdbe5d281966e30	[PUP/Win32.Player]
bdfac31249e5a180b60254d5e1a163c1
571aff8d9a47304a449b7102dc75a8f4
1b09338516d7bbfc3b2dbf2c28558601
19aaf7c3aa8d424df7feede77ac3a605
31357bea9f860ea3630afdbbd2c5a29d

Domain > dreamsearch.or.kr

Is this malicious?

Files that talk to dreamsearch.or.kr

Whois

DNS Resolutions

Port 443

Subdomains