Domain > kpopcon.net

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2018-12-10	54.230.3.28 (ClassC)
2018-12-10	54.230.3.99 (ClassC)
2018-12-10	54.230.192.155 (ClassC)
2018-12-10	54.230.3.110 (ClassC)
2019-04-24	54.192.49.125 (ClassC)
2019-04-24	54.192.49.224 (ClassC)
2019-04-24	54.192.49.23 (ClassC)
2019-11-05	143.204.29.81 (ClassC)
2024-09-13	1.234.10.68 (ClassC)
2025-05-26	210.106.106.98 (ClassC)
2026-02-10	211.253.37.226 (ClassC)

Port 443

HTTP/1.1 200 OKCache-Control: privateContent-Type: text/html;charsetutf-8; Charsetutf-8Server: Microsoft-IIS/10.0P3P: CPALL CURa ADMa DEVa TAIa OUR BUS IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA

!--style>	body{background: url(/data/kpopcon/ios_intro.jpg) center center no-repeat;background-size: cover;height:100vh;}/style>-->script languagejavascript src/m/jscript/jquery-1.12.4.min.js>/script>script languagejavascript src/m/jscript/app_connect.js>/script>script typetext/javascript src/jscript/AES.js>/script>/head>body>/body>/html>script>if (getLCS(UserIDSave)!null && getLCS(UserIDSave)! && getLCS(uuuuuuuID)!null && getLCS(uuuuuuuID)!) { 	$.ajax({ 		url:/m/mobile_loginOk.asp 		, type:post 		, data:{token:1APOORJLOM0N5HEUY0N0, id:getLCS(uuuuuuuID), pass:AES.aesDecrypt(getLCS(uuuuuuuPASS)), pwd:getLCS(uuuuuuuPWD)} 		, success:function(r){			if (!(/result\w+/).test(r)) {				if (document.URL.indexOf(intro.asp)>-1){					location.replace(/);				}else if (r.indexOf(DormantMemberSms.asp)>-1){					removeLCS(UserIDSave);					removeLCS(uuuuuuuID);					removeLCS(uuuuuuuPASS);					removeLCS(uuuuuuuPWD);					$(body).append(r);				}else{					location.reload();				}			}else{				removeLCS(UserIDSave);				removeLCS(uuuuuuuID);				removeLCS(uuuuuuuPASS);				removeLCS(uuuuuuuPWD);				location.reload();			}		} 		, error:function(r){				removeLCS(UserIDSave);				removeLCS(uuuuuuuID);				removeLCS(uuuuuuuPASS);				removeLCS(uuuuuuuPWD);				location.reload();		}	});	setTimeout(function(){location.replace(/default.asp);}, 0);}else{	var otype  localStorage.getItem(otype);	var otoken  localStorage.getItem(otoken);	otype  otypenull ? isnull : otype ? isnull: otype;	otoken  otokennull ? isnull : otoken ? isnull: otoken;	if (otype!isnull && otoken!isnull){		$.ajax({			url:/OAuth/oauth_auto_login.asp,			data:{otype:otype,otoken:otoken},			success:function(res){ }		})	}	setTimeout(function(){location.replace(/default.asp);}, 0);}/script>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > kpopcon.net

Is this malicious?

DNS Resolutions

Port 443