Domain > pospa.or.kr

Welcome! Right click nodes and scroll the mouse to navigate the graph.

More information on this domain is in AlienVault OTX

Whois

Property	Value
Name	POSCO outsourcing partner corporation association
Email	good_story_1999@yahoo.co.kr
Address	1~623, Geumho-dong, Gwangyang-si, Jeollanam-do KR
Zip Code	545874
NameServer	ns1.idmdesign.net
Created	2005-05-04 00:00:00
Changed	2009-11-20 00:00:00
Expires	2017-05-04 00:00:00
Registrar	Inames Co., Ltd.

DNS Resolutions

Date	IP Address
2025-02-02	211.196.153.124 (ClassC)

HTTP/1.1 200 OKServer: nginxDate: Sun, 02 Feb 2025 13:30:52 GMTContent-Type: text/htmlContent-Length: 1575Connection: keep-aliveVary: Accept-EncodingExpires: Thu, 01 Jan 1970 00:00:01 GMTCache-Control: no-cache

html xmlnshttp://www.w3.org/1999/xhtml xml:langko langko>head>meta http-equivContent-Type contenttext/html; charsetutf-8 />style typetext/css>body { width:100%; height:100%; } .wrap { position:fixed; top:50%; left:50%; margin:-185px 0 0 -315px; width:630px; height:370px; } h1 {margin: 0 0 20px; font-size: 15pt;}/style>/head>body>script typetext/javascript src/cupid.js >/script>script>function toNumbers(t){var e;return t.replace(/(..)/g,function(t){e.push(parseInt(t,16))}),e}function toHex(){for(var t,t1arguments.length&&arguments0.constructorArray?arguments0:arguments,e,o0;ot.length;o++)e+(16>to?0:)+to.toString(16);return e.toLowerCase()}function getUrlParams(){var t{};return window.location.search.replace(/?&+(^&+)(^&*)/gi,function(e,o,r){tor}),t}var atoNumbers(1fe9404dc1901ed73765f0932d30df32),btoNumbers(c557ef823378cc49d5fb392e148d1ba9),ctoNumbers(e1370442a07e33f912b6150f09279b7c),nownew Date,timenow.getTime();time+864e5,now.setTime(time),document.cookieCUPID+toHex(slowAES.decrypt(c,2,a,b))+; expires+now.toUTCString()+; path/,oParamsgetUrlParams(),nCkattempt0,oParams.ckattempt&&(nCkattemptparseInt(oParams.ckattempt)),nCkattempt3&&(location.hrefhttp://pospa.or.kr/?ckattempt1);/script>div classwrap>div aligncenter>h1>자동등록방지를 위해 보안절차를 거치고 있습니다./h1>p>Please prove that you are human./p>form action/___verify methodPOST>input typesubmit value  OK  >/form>/div>/div>/body>/html>

Port 443

HTTP/1.1 200 OKServer: nginxDate: Sun, 02 Feb 2025 13:30:53 GMTContent-Type: text/htmlContent-Length: 1576Connection: keep-aliveVary: Accept-EncodingExpires: Thu, 01 Jan 1970 00:00:01 GMTCache-Control: no-cache

html xmlnshttp://www.w3.org/1999/xhtml xml:langko langko>head>meta http-equivContent-Type contenttext/html; charsetutf-8 />style typetext/css>body { width:100%; height:100%; } .wrap { position:fixed; top:50%; left:50%; margin:-185px 0 0 -315px; width:630px; height:370px; } h1 {margin: 0 0 20px; font-size: 15pt;}/style>/head>body>script typetext/javascript src/cupid.js >/script>script>function toNumbers(t){var e;return t.replace(/(..)/g,function(t){e.push(parseInt(t,16))}),e}function toHex(){for(var t,t1arguments.length&&arguments0.constructorArray?arguments0:arguments,e,o0;ot.length;o++)e+(16>to?0:)+to.toString(16);return e.toLowerCase()}function getUrlParams(){var t{};return window.location.search.replace(/?&+(^&+)(^&*)/gi,function(e,o,r){tor}),t}var atoNumbers(1fe9404dc1901ed73765f0932d30df32),btoNumbers(5e17ae4bf0624397828d1c63843faa0b),ctoNumbers(94c0d121ac26bf198c9d1a88b1b88883),nownew Date,timenow.getTime();time+864e5,now.setTime(time),document.cookieCUPID+toHex(slowAES.decrypt(c,2,a,b))+; expires+now.toUTCString()+; path/,oParamsgetUrlParams(),nCkattempt0,oParams.ckattempt&&(nCkattemptparseInt(oParams.ckattempt)),nCkattempt3&&(location.hrefhttps://pospa.or.kr/?ckattempt1);/script>div classwrap>div aligncenter>h1>자동등록방지를 위해 보안절차를 거치고 있습니다./h1>p>Please prove that you are human./p>form action/___verify methodPOST>input typesubmit value  OK  >/form>/div>/div>/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > pospa.or.kr

Is this malicious?

Whois

DNS Resolutions

Port 80

Port 443