Domain > www.epostbank.go.kr

More information on this domain is in AlienVault OTX

Files that talk to www.epostbank.go.kr

MD5	A/V
74c7fd7485b506227b48c8d7a753598f	[Suspicious.Cloud.5] [BackDoor.Tdss.11228] [Artemis] [TrojanSpy:Win32/Wedots.A] [Artemis!74C7FD7485B5] [BScope.P2P-Worm.Palevo] [Win32.SuspectCrc] [PSW.Banker7.AQY.dropper]
54ef9c6081750e1edc56c1acda43a22f	[HW32.Packed.815C] [Artemis!54EF9C608175] [Win32.Trojan.Startpage.Sxox] [BehavesLike.Win32.BadFile.cc] [TrojanSpy:Win32/Wedots.A]
4d478143711cbd2c7f26c3a5ed354bad	[HW32.Packed.2437] [Artemis!4D478143711C] [TSPY_WEDOTS.B] [TSPY_WEDOTS.B] [BehavesLike.Win32.BadFile.cc] [TrojanSpy:Win32/Wedots.A] [Win32/Heur] [Win32/Trojan.97a]
ce57ff193cbe410b1b9561c33e0da6a2
11b9401daec4c85cddd9fba66fae75ba	[Backdoor.Trojan] [BackDoor.Tdss.11228] [TrojanSpy:Win32/Wedots.A] [BScope.P2P-Worm.Palevo] [Win32/DH{Jw9YZ1I}] [Win32/Trojan.97a]
f201e087e3c3a827497798939b891acb
6937609df01ac327b02a41d780aefbd8	[Suspicious.Cloud.5] [Mal/EncPk-CK] [BackDoor.Tdss.11228] [BehavesLike.Win32.BadFile.cc] [W32/Banker.ABEA!tr.spy] [Artemis!6937609DF01A] [BScope.P2P-Worm.Palevo] [PSW.Banker7.BWA] [Trojan.Win32.Banker.ABEA]
efcb0636e429e3f099400ef276db96b0
7cdc187a56e483a6aa0a519a8c2c3c62

Whois

Property	Value
Name	koreapost
Email	cdms@ibi.net
Address	Sorin-dong, Chongno-gu Seoul
Zip Code	11011
NameServer	ns2.kornet.net
Created	2000-04-10 00:00:00
Changed	2014-03-04 00:00:00
Expires	2017-04-10 00:00:00
Registrar	IBI.net

DNS Resolutions

Date	IP Address
2019-09-07	210.90.8.170 (ClassC)
2025-01-17	125.60.0.198 (ClassC)

HTTP/1.1 200 OKDate: Mon, 24 Jun 2019 07:35:02 GMTContent-length: 1655Content-type: text/htmlSet-Cookie: ccsession20190624163502d25a08b500dcf070; domain.epostbank.go.kr; path/Set-Cookie: ccguid2019062

!DOCTYPE HTML PUBLIC-//W3C//DTD HTML 4.01 Frameset//EN http://www.w3.org/TR/html4/frameset.dtd>html langko>head>meta http-equivContent-Type contenttext/html; charseteuc-kr>title>우체국예금우체국보험/title>script typetext/javascript>!-- W3C Mofify LJI 20170922 -->!--var isFrame  Y;var epostUri  window.location.hostname;var epostProtocol  window.location.protocol;//alert(epostUri + epostUri);//alert(epostProtocol + epostProtocol);if( epostProtocol  http:) {window.location  https:// + epostUri;}// 다이렉트보험으로 접속하고자 할 경우 written by jinkoon 2017.02.02 startif ( epostUri.indexOf(postinsu.kr) ! -1 )location.replace(https://www.postinsu.kr/idMain.jsp);function isMobile() {if(/Android|webOS|iPhone|iPad|iPod|BlackBerry|IEMobile|Opera Mini/i.test(navigator.userAgent)) {var host  location.host;if (host.indexOf(postinsu.kr) > 0){location.replace(https://m.postinsu.kr:20433/);} else {location.replace(http://m.epostbank.kr);}}}// 2017.03.20 www.postinsu.kr을 다이렉트 홈페이지로 접속하기 위한 스크립트 코드추가function changeHost() { var host  location.host;if( host.indexOf(epostbank.go.kr)  -1 && host.indexOf(postinsu.kr)  -1 ) { // 두 도메인이 다 없으면 예금메인으로 이동 location.replace(https://www.epostbank.go.kr); //}}isMobile();changeHost();//-->/script>/head>frameset title전체 프레임 rows100%,* >frame src/main.jsp idepost_main nameepost_main scrollingauto title메인프레임>frame src/common/blank.jsp nameepost_blank scrollingno noresize title하단프레임>/frameset>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > www.epostbank.go.kr

Is this malicious?

Files that talk to www.epostbank.go.kr

Whois

DNS Resolutions

Port 80