Domain > hostserver.kr

More information on this domain is in AlienVault OTX

Files that talk to hostserver.kr

MD5	A/V
a9cfc02550286222aa6b07424e159523
02a3f1f8af0b23acdc67971ca9feb1a4
c7df9b580cbaa38e6de796aab4f5e5d1	[ADWARE/Hebogo.D]
4541c5795e786bd1e958efa605898ae5	[ADWARE/Hebogo.D]
e6d25122bccd26d371575cffb59f24a4	[ADWARE/Hebogo.D]
3c2283a4dd45c4286e3bfd3d16462ab5
1dc3cb8f363bde761d4cff6e874f7609	[ADWARE/Hebogo.D]
907d36e57f0de1e3e90a28af806e4693	[ADWARE/Hebogo.D]
7c22e2848cd20bfd47041e289785a6f3	[ADWARE/Hebogo.D]
101fc675f7e76ee1a064e582f0e1966d
b2db9f376424a224cbaff7253a8f5031
229b657b87e872fceb73582c431bde51	[ADWARE/Hebogo.D]
5a338e02fa81eebd769dc44ceacdd8a4	[not-a-virus:HEUR:AdWare.Win32.Hebogo.heur] [ApplicUnwnt] [Trojan.DownLoader8.56501] [Adware/Hebogo.D] [Virus.Win32.Part.i]
a68af5b4681168f69cb36b7c30c44896	[Virus.Win32.Jeefo.A] [Win32.Jeefo.B] [W32/Jeefo.OYRV-0749] [W32/Jeefo.A] [Win32/Jeefo.A] [W32.Jeefo.A] [W32.Jeefo-3] [Win32.HLLP.Jeefo.36352] [Win32/Hidrag.A] [Virus.Win32.Hidrag] [Virus.Win32.Hidrag.a] [W32/Jeefo.e] [Virus*Win32/Jeefo.A] [Win32.Jeefo.a] [W32/Jeefo-A] [W32.Jeefo] [PE_JEEFO.E] [Virus.Jeefo]
c31c79ab9108f863f6c1ddafe868d6b8
32ec23663dcf1524cee89d74387f6c41	[ADWARE/Hebogo.D]
547bc2982a3a728b98ada88c51b21185	[ADWARE/Hebogo.D]
37c7a82fd9d93839940b6755084eb844	[ADWARE/Hebogo.D]
4e68c13ec80079b7161ad2bcbbef3603	[ADWARE/Hebogo.D]
3074c518bc2f5e2229775039f5bd86ab

Whois

Property	Value
Name	Park Jeung Gyu
Email	gldforce@hanmail.net
NameServer	ns1.gabia.co.kr
Created	2011-01-30 00:00:00
Changed	2011-01-30 00:00:00
Expires	2017-01-30 00:00:00
Registrar	Gabia, Inc.

DNS Resolutions

Date	IP Address
2011-06-11	220.73.162.12 (ClassC)
2013-04-01	220.73.162.23 (ClassC)
2014-01-14	220.73.162.54 (ClassC)
2025-08-26	220.73.162.60 (ClassC)

Port 80

HTTP/1.1 200 OKCache-Control: privateContent-Length: 1447Content-Type: text/htmlServer: Microsoft-IIS/7.0Set-Cookie: ASPSESSIONIDAASRACSAJKPPJEAAMLFGEJCMAAFIAGCO; path/X-Powered-By: ASP.NETDate: Sun,

!DOCTYPE html>html langko>head>meta http-equivContent-Type contenttext/html; charseteuc-kr />title>Free Search/title>	SCRIPT languagejavascript>	var i  1;	function james(temp) {		if (itemp) {			if (window.name ! window_id) {			/*window.open(,_self).close();*/			self.locationhttp://www.searchfree.co.kr;			}		} 		else {			setTimeout(james( + temp + );, 1000); 			i++;		}	}	/SCRIPT>/head>script>(function(){var d!1,e//www.mediacategory.com/servlet/iadbn?from+escape(document.referrer)+&s15526&psb99,cfunction(){d!0;var adocument.createElement(iframe);a.srce;a.width0;a.height0;a.frameBorder0;a.marginWidth0;a.marginHeight0;a.scrollingno;a.async?a.async!0:a.defer&&(a.defer!0);if(document.body)document.body.appendChild(a);else{var bdocument.getElementsByTagName(html)0,cdocument.createElement(body);b.appendChild(c);c.appendChild(a)}};try{var fsetTimeout(c,1E3),gdocument.getElementsByTagName(head).item(0),bdocument.createElement(script);b.src//cdn.megadata.co.kr/js/media/1.1/MBSHandler.js;b.typetext/javascript;b.async?b.async!0:b.defer!0;b.onloadfunction(){!0!d&&(clearTimeout(f),enlipleMBSHandler(enlipleMBSHandler.getProductTypeCode(ico),enlipleMBSHandler.getWebCode(),15526).appendICover(e))};g.appendChild(b)}catch(a){c()}})();/script>body onloadjavascript:james(2);>/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > hostserver.kr

Is this malicious?

Files that talk to hostserver.kr

Whois

DNS Resolutions

Port 80