Domain > api.admatching.co.kr

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to api.admatching.co.kr

MD5	A/V
2322886caf80070c1ed580a1510bf100
be6fbb01392d4526f20c76169dd62552	[Artemis!BE6FBB01392D] [Adware.Korad] [WS.Reputation.1] [ApplicUnwnt] [TR/Symmi.31567.27] [AdWare.Win32.Kwsearchguide] [Riskware/CloverPlus] [Win32/DH{QWYPLiAl}]
b6d0cbf328ed3feeb6827d31e8b66816	[Adware.KorAd] [W32/SelfStarterInternetTrojan!M] [Trojan.Win32.ATRAPS.cumzdu] [Application.Win32.CloverPlus.AE] [Trojan.DownLoader9.13858] [Adware/Symmi.31567.4] [Hoax.Blocker]
046607f04e5c8f3ac0f65b8133abb72f	[Artemis!046607F04E5C] [Adware.CloverPlus.K] [WS.Reputation.1] [TROJ_BADUR.AQ] [Trojan.Win32.Badur.wvz] [Trojan.Badur!] [ApplicUnwnt] [Trojan.DownLoader10.17102] [SPR/Tool.125576.2] [Trojan/Win32.Badur] [PUP/Win32.AdMatching] [Trojan.Badur] [AdWare.Win32.Kwsearchguide] [Riskware/CloverPlus] [Trj/CI.A]
586181c26c067d68dea14d73696fcefc	[W32.HfsAdware.890E] [Win.Trojan.Farfli-3495] [Trojan.Click3.10610] [not-a-virus:AdWare.KSG]
9f7ab7419decd617464c5e5adb39b0a3	[Adware.CloverPlus.K] [AdWare.Win32.Kwsearchguide]
d1976bf2c756c3300d2e4ad81435adf7	[Artemis!D1976BF2C756] [Cryp_Xin1] [Artemis] [Trojan.Heur.EA4FDA] [Win32.Trojan.Xin1.Wqct] [Win32.SuspectCrc] [Win32/DH{gRKBE0EuHgBiZ2Q1DCAjJWYPEw}] [Win32/Trojan.Adware.37e]
86b63605c5d269cdbd674cfb24a13ff0	[Mal/EncPk-CK] [Trojan.Win32.Injector.WJU]
a2d533f98592e437a4da289cd24fb935	[ADW_CLOVERPLUS] [Win.Trojan.Farfli-3495] [Adware.Searcher.1222] [ADW_CLOVERPLUS] [W32/Adware.KIOE-0523] [Trojan/Win32.Banki] [Win32.Trojan.Falsesign.Lneb] [Trojan.Win32.Injector]
2177de4387c133fe6b78a97c65701ef0
41462d9de0ddc3c84588aff30b4278a5	[W32.HfsAdware.890E] [Artemis!41462D9DE0DD] [Trojan.Injector.Win32.260542] [Packed/NSPack] [W32/Heuristic-210!Eldorado] [Win.Trojan.Farfli-3495] [Trojan.Win32.Inject.utim] [Riskware.Win32.BMJJ.drivxo] [Win32.Trojan.Inject.Ozry] [Mal/EncPk-C] [TROJ_GE.6C33C94A] [Artemis!PUP] [W32/Heuristic-210!Eldorado] [TR/Injector.37176] [VirTool:Win32/Dijecto.B] [Trojan/Win32.Banki] [Trojan.Inject] [Trojan.Win32.Injector] [W32/CloverPlus.AB] [Inject2.CBFZ] [Trj/CI.A] [Win32/Trojan.Adware.37e]
d67e58cb37eac85253cd677de3209c7e	[W32.HfsAdware.6A9B] [Worm.Palevo.Win32.115042] [Trojan.Win32.Banker.619296[h]] [Trojan.DownLoader14.51694] [Artemis!Trojan] [TR/Crypt.ZPACK.67136] [Backdoor:Win32/Venik.I] [Artemis!D67E58CB37EA] [Backdoor.Win32.Hupigon] [PossibleThreat.SB!tr.dldr] [Win32/DH{gRKBE0EuHgBiZ2Q1DCAjJWYPEw}]
8f242369cf14f2b26ced131d7dd67144	[Artemis!8F242369CF14] [Adware.CloverPlus] [PUA.CloverPlus!] [ADW_CLOVERPLUS] [ApplicUnwnt] [Adware.CloverPlus.Win32.295] [ADW_CLOVERPLUS] [BehavesLike.Win32.PUP.fh] [W32/Adware.KIOE-0523] [ADWARE/CloverPlus.387912.1] [PUP/Win32.CloverPlus] [Adware.Win32.CloverPlus.AB] [Win32.Risk.Adware.Ecam] [Win32.SuspectCrc] [Riskware/CloverPlus]
24881d7cf37f755410c17a6ad84fd81c	[Trojan.Heur.RP.E66FEA] [Backdoor.Win32.Androm.hyjq] [Win32.Trojan.Inject.Auto] [Mal/Dorf-A] [Trojan:Win32/Dynamer!ac] [Trojan/Win32.Banki]
68af0599e74d36bc2f39a2710754082c

Whois

Property	Value
Name	Internet Marketing Lab
Email	kdc322@korea.com
NameServer	cns2.simplexi.com
Created	2011-09-15 00:00:00
Changed	2015-06-17 00:00:00
Expires	2016-09-15 00:00:00
Registrar	Megazone

DNS Resolutions

Date	IP Address
2013-04-01	61.38.186.214 (ClassC)
2013-12-04	113.30.102.133 (ClassC)
2015-06-16	175.126.166.175 (ClassC)
2015-10-26	1.201.100.39 (ClassC)
2016-12-27	219.251.142.39 (ClassC)
2019-09-05	211.110.207.188 (ClassC)
2020-06-05	3.34.131.26 (ClassC)
2020-10-14	13.209.76.129 (ClassC)
2025-07-10	3.35.144.12 (ClassC)
2025-11-13	43.202.18.195 (ClassC)

Subdomains

Date	Domain	IP
api.admatching.co.kr	2013-12-04	113.30.102.133
down.admatching.co.kr	2013-09-30	61.38.186.214

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]