ZeroCERT Team

Report

Result
Link
Whois
Reference

*Date : 2016.08.29 17:47
*Site : http://www.securitynews.co.kr/images/main/bgl.gif
*Title :
*Info : 221.143.46.12, KR(, Korea, Republic of)
*Check url : 258 counts
*Loading time : 12.604456sec
*Google SafeBrowsing(GSB) : www.securitynews.co.kr is suspicious url
*Result
(1) user information check - 6count
(2) user cookie check - 3count
(3) Suspicious url(NULL) - 2count
(4) Suspicious script has been detected (webshell) - 1count
(5) http://www.ro521.com/test.htm - 1count
(6) http://j5b.kr/bin/h.js - 1count
(7) Input site Registered Malicious url / Player 이도령 - 1count

Public Link : http://zerocert.org/?code=14aa2003731fe58ea9c7ee294c1e1dc66447ee9ff766198d2641cee5d9cda756

*Latest detected Domain

이 사이트는 최근 90일 동안 악성URL 삽입된 적이 없습니다.
이 사이트는 최근 90일 동안 악성코드 중개 역할한 적이 없습니다.
이 사이트는 최근 90일 동안 악성코드를 유포한 적이 없습니다.
Relation domain not found
Relation ip not found
same Domain not found
same IP : 127.0.0.1 3cnts
same IP bands: 127.0.0.x 3cnts
same ASN : 22549cnts

http://www.securitynews.co.kr/images/main/bgl.gif -> Malware url (Player 이도령)
    -> (-) b4179e02d7172e53061ae73e6893c9fa / Virustotal : 2016-08-29 01:53:42 33/56
    -> Suspicious script has been detected (webshell)
  [script] http://www.ro521.com/test.htm -> Malware url
    -> Suspicious url(NULL)
    [Location] http://ww38.ro521.com/test.htm
      -> Suspicious url(NULL)
      [Location] http://www.warning.or.kr
        [script] http://www.police.go.kr
          [Location] http://www.police.go.kr/main.html
            -> user information check
            [script] http://www.police.go.kr/portal/js/jquery-1.8.3.min.js
            [script] http://www.police.go.kr/portal/js/jquery.carouFredSel-6.2.1-packed.js
            [script] http://www.police.go.kr/portal/js/common.js
            [script] http://www.police.go.kr/portal/js/main.js
            [script] http://www.police.go.kr/portal/js/jquery.cookie.js
            [script] http://www.police.go.kr/portal/popupMng/script.do?siteId=02
            [script] http://www.police.go.kr/pluginfree/js/nppfs-1.0.0.js?dummy=20160829174832543
            [script] https://www.eprivacy.or.kr:40018/seal/mark.js
            [script] https://supdate.nprotect.net/nprotect2007/keycrypt/police/npkfx.js
            [script] http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd
            [script] http://www.w3.org/1999/xhtml
            [script] http://m.police.go.kr/m/main.html
            [script] http://www.police.go.kr/portal/propose_linkPop.jsp
            [script] http://www.moi.go.kr/frt/sub/popup/p_taegugki_banner/screen.do
            [script] http://polinlove.tistory.com
            [script] http://safe182.go.kr/schoolMain.do
            [script] http://my.police.go.kr
            [script] http://mail.police.go.kr
            [script] http://www.smpa.go.kr
            [script] http://www.bspolice.go.kr
            [script] http://www.dgpolice.go.kr
            [script] http://www.icpolice.go.kr
            [script] http://www.gjpolice.go.kr
            [script] http://www.djpolice.go.kr
            [script] http://www.uspolice.go.kr
            [script] http://www.ggpolice.go.kr
            [script] http://www.ggbpolice.go.kr
            [script] http://www.gwpolice.go.kr
            [script] http://www.cbpolice.go.kr
            [script] http://www.cnpolice.go.kr
            [script] http://www.jbpolice.go.kr
            [script] http://www.jnpolice.go.kr
            [script] http://www.gbpolice.go.kr
            [script] http://www.gnpolice.go.kr
            [script] http://www.jjpolice.go.kr
            [script] http://www.police.ac.kr
            [script] http://www.pti.go.kr
            [script] http://www.cpa.go.kr
            [script] http://www.kpia.go.kr/
            [script] http://www.koroad.or.kr
            [script] http://www.nph.go.kr
            [script] http://cyberbureau.police.go.kr
            [script] http://www.kpsi.go.kr/
            [script] http://www.safe182.go.kr/
            [script] http://crims.police.go.kr/
            [script] http://gosi.police.go.kr
            [script] http://www.safe182.go.kr/index.do
            [script] http://www.kpsi.go.kr/kcsi_information/wanted_list.html
            [script] http://www.juso.go.kr/openIndexPage.do
            [script] http://www.lost112.go.kr/
            [script] http://caroufredsel.frebsite.nl/code-examples/configuration.php
            [script] http://www.safe182.go.kr
            [script] http://www.pyeongchang2018.com
            [script] http://1398.acrc.go.kr
            [script] http://www.police.go.kr/portal/bbs/view.do?nttId=18708&bbsId=B0000002&menuNo=200066&delCode=0
            [script] http://www.police.go.kr/portal/bbs/view.do?nttId=18676&bbsId=B0000002&menuNo=200066&delCode=0
            [script] http://startupidea.kr/
            [script] http://www.mpss.go.kr/home/policy/policy/policyNation/?mode=view&cntId=21
            [script] http://www.police.go.kr/portal/bbs/view.do?nttId=18652&bbsId=B0000002&menuNo=200066&delCode=0
            [script] http://www.police.go.kr/portal/bbs/view.do?nttId=18618&bbsId=B0000002&menuNo=200066&delCode=0
            [script] http://www.police.go.kr/portal/bbs/view.do?nttId=18596&bbsId=B0000002&menuNo=200066&delCode=0
            [script] http://market.nlic.go.kr
            [script] http://www.dorandoran.go.kr/
            [script] http://campaign.childfund.or.kr/camp/cpView10000360_signup.do
            [script] http://www.liveinkorea.kr
            [script] http://www.wonderfuldriving.com/
            [script] http://www.police.go.kr/portal/bbs/view.do?nttId=17966&bbsId=B0000002&menuNo=200066
            [script] http://www.navy.mil.kr/NavyBoard/bbs/ucc/cheonanham_memorial_list.jsp?szCtgrID=663&szSeq=12&pg=1&pgrp=1
            [script] http://korea.kr/2016briefing/
            [script] http://www.kdream.or.kr/sub03_10.asp?menuCategory=3
            [script] http://policy.korea.kr
            [script] http://www.police.go.kr/portal/bbs/view.do?nttId=109729&bbsId=B0000015&searchCnd=&searchWrd=§ion=&sdate=&edate=&useAt=&replyAt=&menuNo=200073&viewType=&delCode=0&option1=&deptId=&pageIndex=1
            [script] http://www.budget.go.kr/front/web/datas/data05.jsp
            [script] http://www.mosf.go.kr/upload/fileupload/2016/01/BBS_201601030444444580.pdf
            [script] http://www.youth.go.kr/
            [script] http://www.economy.go.kr/main.do
            [script] http://www.better.go.kr/fz.sinmungo.RegulPrpslIsF.laf
            [script] http://www.police.go.kr/portal/main/contents.do?tab=1&menuNo=200440
            [script] http://www.normal.go.kr
            [script] http://www.police.go.kr/4zero/main.do
            [script] http://phishing-keeper.fss.or.kr/fss/vstop/avoid/phishing.jsp
            [script] http://polinlove.tistory.com/
            [script] http://blog.naver.com/polinlove2/
            [script] http://twitter.com/polinlove/
            [script] http://www.police.go.kr/mobile/main.do
            [script] http://www.police.go.kr/chief/main.do
            [script] http://www.police.go.kr/portal/main/contents.do?menuNo=200101
            [script] http://ap.police.go.kr/index.jsp
            [script] http://www.policemuseum.go.kr/
            [script] http://cyberbureau.police.go.kr/
            [script] http://www.knpgun.go.kr
            [script] http://www.police.go.kr/HR
            [script] http://susa.go.kr
            [script] http://www.112119.in/
            [script] http://www.chamsuri.co.kr/
            [script] http://police2016.global21.co.kr
            [script] http://cafe.daum.net/securityeducation
            [script] http://www.police.go.kr/applex_wdigm/help/popup_install.htm
            [script] http://www.moj.go.kr/HP/MOJ03/menu.do?strOrgGbnCd=100000&strRtnURL=MOJ_40208010
            [script] http://www.kics.go.kr/
            [script] http://blog.naver.com/susa-lab510
            [script] http://www.ytn.co.kr/program/program_list.php?s_mcd=0483
            [script] http://www.webwatch.co.kr/certification/situation.html?search_word=strSNSU&search_string=%EA%B2%BD%EC%B0%B0%EC%B2%AD&x=0&y=0#
            [script] http://www.eprivacy.or.kr/seal/mark.jsp?mark=e&code=2014-N025
            [script] http://www.cwd.go.kr/
            [script] http://www.culture.go.kr/wday
            [script] http://www.moi.go.kr/
            [script] http://www.korea.kr
            [script] http://www.pmaa.or.kr/police/
            [script] http://www.police.go.kr/COMMISSION/frame.jsp
            [script] http://www.minwon.go.kr/main?a=AA040OfferMainFrmApp&capp_biz_cd=13100000015&HighCtgCD=A01010001
            [script] http://www.ftc.go.kr/
            [script] http://www.ktv.go.kr/
            [script] http://s119.fss.or.kr/fss/seomin/index.jsp
            [script] http://www.women.go.kr/
            [script] http://www.index.go.kr/potal/main/PotalMain.do
            [script] http://www.korea.net/
            [script] http://www.gapck.or.kr/
            [script] http://www.koreagreenmother.org/
            [script] http://www.kgls.or.kr/
            [script] http://www.ex-police.or.kr/
            [script] http://www.nps.or.kr/
            [script] http://www.4rangg.org/
            [script] http://www.dokdohistory.com/
            [script] http://www.sexoffender.go.kr/
            [script] http://www.acrc.go.kr/acrc/index.do
            [script] http://www.open.go.kr/
            [script] http://www.koreabestdriver.or.kr/
            [script] http://www.korea.go.kr/main.do
            [script] http://www.epeople.go.kr/jsp/user/on/cu/CU02_07.jsp
            [script] http://pr.share.go.kr/
            [script] http://www.mpss.go.kr/snskorea
            [script] http://www.korea.kr/briefing/policyBriefingList.do
            [script] http://www.koroad.or.kr/
            [script] http://www.efine.go.kr/
            [script] http://humanrights.go.kr/00_main/main.jsp
            [script] http://www.sejong.go.kr/index.do
            [script] http://www.acrc.go.kr/acrc/board.do?command=searchDetail&menuId=050205
            [script] http://www.law.go.kr/%EB%B2%95%EB%A0%B9/%EA%B3%B5%EC%9D%B5%EC%8B%A0%EA%B3%A0%EC%9E%90%EB%B3%B4%ED%98%B8%EB%B2%95
            [script] http://www.mosf.go.kr/pr/20121210ebook/e-GCF.html
            [script] http://police.go.kr/popup/swf/ebook/1-2/1-2.html
            [script] http://police.go.kr/popup/swf/ebook/3-4/3-4.html
            [script] http://police.go.kr/popup/swf/ebook/5-6/5-6.html
            [script] http://www.safepeople.go.kr
            [script] http://www.seantour.com
            [script] http://korea.go.kr
            [script] http://www.kdream.or.kr
            [script] http://www.moe.go.kr/public/educationReform/
            [script] http://www.dorandoran.go.kr
            [script] http://onetouch.police.go.kr/
            [script] http://gosi.police.go.kr/
            [script] http://cyberbureau.police.go.kr/index.do
            [script] http://www.police.go.kr/memorial/main.do
            [script] http://ap.police.go.kr/main.html
            [script] http://www.iig.go.kr
            [script] http://www.anbosarang.co.kr/ebook/2016
            [script] http://e-gonghun.mpva.go.kr/user/RewardDisList.do
            [script] http://issue.korea.kr/mosf/2016taxation/
            [script] http://www.holidaygift.co.kr
            [script] http://www.culture.go.kr/contest
            [script] http://oneclick.law.go.kr
        [script] http://www.kocsc.or.kr
          -> user information check
          [script] http://www.kocsc.or.kr/assets/js/global.js
            -> user information check
            -> user cookie check
            [script] http://www.macromedia.com/go/getflashplayer
            [applet] http://www.kocsc.or.kr/assets/js/+swfUrl+
          [script] http://www.kocsc.or.kr/assets/js/prototype.js
            -> user information check
            [script] http://www.prototypejs.org/
            [script] http://www.yui-ext.com/
          [script] http://www.kocsc.or.kr/assets/js/Kent.js
            [script] http://www.redpeople.co.kr
          [script] http://www.kocsc.or.kr/assets/js/Scroller.js
          [script] http://www.kocsc.or.kr/assets/js/main.js
          [script] http://www.kocsc.or.kr/assets/js/common.js
          [script] http://www.kocsc.or.kr/assets/js/common2.js
            -> user cookie check
          [script] http://www.kocsc.or.kr/assets/js/zoom.js
            -> user information check
            -> user cookie check
          [script] http://dmaps.daum.net/map_js_init/postcode.v2.js
          [script] http://www.kocsc.or.kr/assets/js/jquery-1.5.2.min.js
            -> user information check
            [script] http://jquery.com/
            [script] http://jquery.org/license
            [script] http://sizzlejs.com/
          [script] http://www.kocsc.or.kr/assets/js/jquery.rolling.js
          [script] http://m.kocsc.or.kr/
            [script] http://m.kocsc.or.kr/m/js/DD_belatedPNG.js
            [script] http://kocsc.or.kr/assets/js/global.js
            [script] http://kocsc.or.kr/assets/js/Kent.js
            [script] http://kocsc.or.kr/assets/js/Scroller.js
            [script] http://kocsc.or.kr/assets/js/main.js
            [script] http://kocsc.or.kr/assets/js/common.js
            [script] http://kocsc.or.kr/assets/js/common2.js
            [script] http://kocsc.or.kr/assets/js/prototype.js
            [script] http://www.kocsc.or.kr/index.php?Pc=ture
          [script] http://remedy.kocsc.or.kr
            [script] http://www.w3.org/TR/html4/loose.dtd
          [script] http://www.kocsc.or.kr/02_infoCenter/info_Casebook_View.php?ko_board=info_Casebook&ba_id=9851&page=1
            [script] http://twitter.com/home?status=http%3A%2F%2Fkocsc.or.kr%2F02_infoCenter%2Finfo_Casebook_View.php%3Fko_board%3Dinfo_Casebook%26ba_id%3D9851
            [script] http://www.facebook.com/sharer.php?u=http%3A%2F%2Fme2.do%2FIMeb7heN&t=2015
            [script] http://kocsc.or.kr/02_infoCenter/info_Casebook_View.php?ko_board=info_Casebook&ba_id=9851
            [script] http://me2.do/IMeb7heN
            [script] http://me2.do/IMeb7heN&t=2015 방송통신심의 연감
          [script] http://www.kocsc.or.kr/02_infoCenter/info_Magazine_View.php?ko_board=info_Magazine&ba_id=9410&page=1
            [script] http://twitter.com/home?status=http%3A%2F%2Fkocsc.or.kr%2F02_infoCenter%2Finfo_Magazine_View.php%3Fko_board%3Dinfo_Magazine%26ba_id%3D9410
            [script] http://www.facebook.com/sharer.php?u=http%3A%2F%2Fme2.do%2F5U8wySUG&t=방송심의에
            [script] http://kocsc.or.kr/02_infoCenter/info_Magazine_View.php?ko_board=info_Magazine&ba_id=9410
            [script] http://me2.do/5U8wySUG
            [script] http://me2.do/5U8wySUG&t=방송심의에 관한 규정 해설집
          [script] http://www.kocsc.or.kr/02_infoCenter/Edu_View.php?ko_board=edu&ba_id=2626&page=1
            [script] http://twitter.com/home?status=http%3A%2F%2Fkocsc.or.kr%2Fedu_View.php%3Fko_board%3Dedu%26ba_id%3D2626
            [script] http://www.facebook.com/sharer.php?u=http%3A%2F%2Fme2.do%2FGSwzgrkW&t=정보이용
            [script] http://kocsc.or.kr/edu_View.php?ko_board=edu&ba_id=2626
            [script] http://me2.do/GSwzgrkW
            [script] http://me2.do/GSwzgrkW&t=정보이용 건전화 영상교재
          [script] http://www.kocsc.or.kr/02_infoCenter/info_Magazine_View.php?ko_board=info_Magazine&ba_id=9090&page=1
            [script] http://twitter.com/home?status=http%3A%2F%2Fkocsc.or.kr%2F02_infoCenter%2Finfo_Magazine_View.php%3Fko_board%3Dinfo_Magazine%26ba_id%3D9090
            [script] http://www.facebook.com/sharer.php?u=http%3A%2F%2Fme2.do%2F56L9rAZS&t=방송언어
            [script] http://kocsc.or.kr/02_infoCenter/info_Magazine_View.php?ko_board=info_Magazine&ba_id=9090
            [script] http://me2.do/56L9rAZS
            [script] http://me2.do/56L9rAZS&t=방송언어 가이드라인
          [script] http://kocsc.or.kr/02_infoCenter/Edu_View.php?ko_board=info_Magazine&ba_id=4737&page=1
            [script] http://kocsc.or.kr/assets/js/zoom.js
            [script] http://twitter.com/home?status=http%3A%2F%2Fkocsc.or.kr%2Fedu_View.php%3Fko_board%3Dedu%26ba_id%3D4737
            [script] http://www.facebook.com/sharer.php?u=http%3A%2F%2Fme2.do%2FGC1G67lK&t=학부모
            [script] http://kocsc.or.kr/edu_View.php?ko_board=edu&ba_id=4737
            [script] http://me2.do/GC1G67lK
            [script] http://me2.do/GC1G67lK&t=학부모 대상 사이버권리침해 예방 가이드 [알고 보니 안심돼요!]
          [script] http://www.kocsc.or.kr/02_infoCenter/Edu_View.php?ko_board=edu&ba_id=3252&page=1
            [script] http://twitter.com/home?status=http%3A%2F%2Fkocsc.or.kr%2Fedu_View.php%3Fko_board%3Dedu%26ba_id%3D3252
            [script] http://www.facebook.com/sharer.php?u=http%3A%2F%2Fme2.do%2FGFEinAyf&t=어린이
            [script] http://kocsc.or.kr/edu_View.php?ko_board=edu&ba_id=3252
            [script] http://me2.do/GFEinAyf
            [script] http://me2.do/GFEinAyf&t=어린이 사이버권리침해 예방가이드
          [script] http://www.kocsc.or.kr/01_online/community_Useinfo.php
            [script] http://www.kocsc.or.kr/01_online/community_Faq.php
          [script] http://www.kocsc.or.kr/01_onestop/onestop_info.php
          [script] http://www.safenet.ne.kr
            [script] http://www.safenet.ne.kr/js/mirae.js
            [script] http://www.safenet.ne.kr/js/default.js
            [script] http://www.safenet.ne.kr/js/flash_activex/mainflash.js
            [script] http://www.safenet.ne.kr/js/flash_activex/navi.js
          [script] http://www.greeninet.or.kr/
            [Location] http://www.greeninet.or.kr/frametop.htm
            [Location] http://www.greeninet.or.kr/frameleft.htm
            [Location] http://www.greeninet.or.kr/frameright.htm
            [Location] http://www.greeninet.or.kr/PI_FILTERING/jsp2/main/index.jsp
          [script] http://www.greeninet.or.kr
          [script] http://www.kcc.go.kr
          [script] http://helpcall.mnd.mil.kr/  -> Offline?
          [script] http://www.iteennet.or.kr
          [script] http://www.singo.or.kr
          [script] http://www.bj.or.kr  -> Offline?
          [script] http://spam.kocsc.or.kr  -> Offline?
          [script] http://kcc.go.kr
  [script] http://j5b.kr/bin/h.js -> Malware url  -> Offline?

*Country
127.0.0.1 ()

*Whois
query : securitynews.co.kr

# KOREAN(UTF8)

도메인이름 : securitynews.co.kr
등록인 : 코세스코리아(주)
등록인 주소 : 송파구 석촌동 292-18
등록인 우편번호 : 138847
책임자 : 코세스코리아(주)
책임자 전자우편 : help@kssi.re.kr
책임자 전화번호 : +82.024121146
등록일 : 2004. 11. 15.
최근 정보 변경일 : 2019. 07. 11.
사용 종료일 : 2025. 11. 15.
정보공개여부 : Y
등록대행자 : (주)메일플러그(http://www.mailplug.com)
DNSSEC : 미서명

1차 네임서버 정보
호스트이름 : ns3.ibi.net

2차 네임서버 정보
호스트이름 : ns4.ibi.net

네임서버 이름이 .kr이 아닌 경우는 IP주소가 보이지 않습니다.

# ENGLISH

Domain Name : securitynews.co.kr
Registrant : KOSSESKOREA
Registrant Address : 292-18 Seokchon-dong, Songpa-gu
Registrant Zip Code : 138847
Administrative Contact(AC) : KOSSESKOREA
AC E-Mail : help@kssi.re.kr
AC Phone Number : +82.024121146
Registered Date : 2004. 11. 15.
Last Updated Date : 2019. 07. 11.
Expiration Date : 2025. 11. 15.
Publishes : Y
Authorized Agency : MAILPLUG Inc.(http://www.mailplug.com)
DNSSEC : unsigned

Primary Name Server
Host Name : ns3.ibi.net

Secondary Name Server
Host Name : ns4.ibi.net

- KISA/KRNIC WHOIS Service -

Website Check

Report