Domain > rhodemlogic.com

More information on this domain is in AlienVault OTX

Files that talk to rhodemlogic.com

MD5	A/V
431e5e1aee2c056a307507f44352203c	[JS.Trojan-Downloader.Nemucod.od] [JS_NEMUCOD.SMK14] [Trojan.Script.Heuristic-js.iacgm] [JS_NEMUCOD.SMK14] [Js.Trojan.Raas.Auto] [JS/Nemucod.BOO!tr]
565846e131453b540b41b2d84349ba92	[Trojan.Ransom.Locky.BY] [JS/Nemucod.CA2!Eldorado] [JS_NEMUCOD.SMK14] [Trojan.Script.Heuristic-js.iacgm] [JS_NEMUCOD.SMK14] [JS/Nemucod.CA2!Eldorado] [Js.Trojan.Raas.Auto]
da93fd089562e2f909f9c657f6935fd6	[W97M.Downloader.ETV] [W97M/Downloader.bni] [Troj.Downloader.Script!c] [W97M.Downloader] [Trojan.Ole2.Vbs-heuristic.druvzi] [W97M.Downloader.ETV] [HEUR_VBA.O2] [W97M.Downloader.ETV] [X97M/Downloader] [Macro.Trojan.Dropperd.Auto] [VBS/Jenxcus.A] [virus.office.obfuscated.1]
34b85253e6a9d0bd85c52bbef958a945	[Trojan.Ole2.Vbs-heuristic.druvzi] [Troj.Downloader.Script!c] [HEUR_VBA.O2] [HEUR.VBA.Trojan.e] [Macro.Trojan.Dropperd.Auto] [VBS/Jenxcus.A] [virus.office.obfuscated.1]
ef443a0cdc6d8d9bf267477f8c6f3298	[JS.Trojan-Downloader.Nemucod.od] [JS/Nemucod.CA2!Eldorado] [JS.Downloader.D] [JS_NEMUCOD.SMK14] [Trojan.Script.Heuristic-js.iacgm] [Js.Trojan.Raas.Auto] [JS_NEMUCOD.SMK14] [JS/Nemucod.CA2!Eldorado] [Trojan-Ransom.Script.Locky]

Whois

Property	Value
Email	cslee@rhodemlogic.com
NameServer	NS2.HHOSTING.CO.KR
Created	2004-03-24 00:00:00
Changed	2016-10-31 00:00:00
Expires	2019-03-24 00:00:00
Registrar	GABIA, INC.

DNS Resolutions

Date	IP Address
2024-01-05	218.232.104.232 (ClassC)
2025-05-28	222.231.2.23 (ClassC)

Port 80

HTTP/1.1 200 OKDate: Mon, 25 Dec 2023 12:35:05 GMTServer: Apache/2.2.15 (CentOS)X-Powered-By: PHP/5.3.3Content-Length: 7609Content-Type: text/html

HTML>HEAD>TITLE>The Fitness-Build your body/TITLE>META http-equivContent-Type contenttext/html; charseteuc-kr>SCRIPT languageJavaScript>!--function MM_swapImgRestore() { //v3.0  var i,x,adocument.MM_sr; for(i0;a&&ia.length&&(xai)&&x.oSrc;i++) x.srcx.oSrc;}function MM_preloadImages() { //v3.0  var ddocument; if(d.images){ if(!d.MM_p) d.MM_pnew Array();    var i,jd.MM_p.length,aMM_preloadImages.arguments; for(i0; ia.length; i++)    if (ai.indexOf(#)!0){ d.MM_pjnew Image; d.MM_pj++.srcai;}}}function MM_findObj(n, d) { //v4.01  var p,i,x;  if(!d) ddocument; if((pn.indexOf(?))>0&&parent.frames.length) {    dparent.framesn.substring(p+1).document; nn.substring(0,p);}  if(!(xdn)&&d.all) xd.alln; for (i0;!x&&id.forms.length;i++) xd.formsin;  for(i0;!x&&d.layers&&id.layers.length;i++) xMM_findObj(n,d.layersi.document);  if(!x && d.getElementById) xd.getElementById(n); return x;}function MM_swapImage() { //v3.0  var i,j0,x,aMM_swapImage.arguments; document.MM_srnew Array; for(i0;i(a.length-2);i+3)   if ((xMM_findObj(ai))!null){document.MM_srj++x; if(!x.oSrc) x.oSrcx.src; x.srcai+2;}}//-->/SCRIPT>style typetext/css>!--body {	margin-left: 0px;	margin-top: 0px;	margin-right: 0px;	margin-bottom: 0px;	background-image: url();}#Layer1 {	position:absolute;	left:0px;	top:808px;	width:764px;	height:20px;	z-index:20;}#Layer2 {	position:absolute;	left:0px;	top:213px;	width:265px;	height:336px;	z-index:21;}#Layer3 {	position:absolute;	left:265px;	top:213px;	width:685px;	height:578px;	z-index:22;}#Layer4 {	position:absolute;	left:-3px;	top:786px;	width:1006px;	height:22px;	z-index:23;}-->/style>script>window.onloadfunction(){	//window.open(popup.html,�˾��˸�,width340,height507);}/script>/HEAD>BODY text#000000 onLoadMM_preloadImages(VIPA/main_img/images/left-over_01.jpg,VIPA/main_img/images/left-over_02.jpg,VIPA/main_img/images/left-over_03.jpg,VIPA/main_img/images/left-over_04.jpg,VIPA/main_img/images/left-over_05.jpg,VIPA/main_img/images/left_over_01.jpg,VIPA/main_img/images/left_over_02.jpg,VIPA/main_img/images/left_over_03.jpg,VIPA

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > rhodemlogic.com

Is this malicious?

Files that talk to rhodemlogic.com

Whois

DNS Resolutions

Port 80