ZeroCERT Team

Report

Result
Link
Whois
Reference

*Date : 2014.12.14 23:25
*Site : http://www.tongilgyo.org/
*Info : 1.234.21.126, KR(Seoul, Korea, Republic of)
*Check url : 49 counts
*Loading time : 0sec
*Google SafeBrowsing : Not founds.
*Result
(1) user information check - 4건 발견
(2) user cookie check - 4건 발견
(3) Suspicious url(NULL) - 2건 발견
(4) Suspicious script has been detected - 1건 발견
(5) http://stlc.ivehost.net/info/all.js - 1건 발견
(6) user tracking code (google-analytics.com) - 1건 발견
(7) user tracking code (google-analytics.com) - 1건 발견

http://zerocert.org/?code=1543b440e89f0b4038fe2b53cadcb4412293804c8bbb7b6378ceb679c9b6b991

*Latest detected Domain

이 사이트는 최근 90일 동안 악성URL 삽입된 적이 없습니다.
이 사이트는 최근 90일 동안 악성코드 중개 역할한 적이 없습니다.
이 사이트는 최근 90일 동안 악성코드를 유포한 적이 없습니다.
Relation domain not found
Relation ip not found
same Domain not found
same IP : 3.33.130.190 6cnts
same IP bands: 3.33.130.x 6cnts
same ASN : 39436cnts

http://www.tongilgyo.org/
    -> Suspicious url(NULL)
  [Location] http://www.tongilgyo.org/tongil/
    -> user tracking code (google-analytics.com)
    [script(*)] http://www.google-analytics.com/ga.js
    [location] http://www.ffwp.org
      -> user cookie check
      [script] http://www.ffwp.org/common/js/jquery-1.8.3.js
        -> user information check
        [script] http://www.w3.org/TR/css3-selectors/#attribute-selectors
      [script] http://www.ffwp.org/common/js/jquery.easing.js
      [script] http://www.ffwp.org/common/js/common.js
      [script] http://www.ffwp.org/common/js/json2.js
      [script] http://www.ffwp.org/common/js/bxslider/jquery.bxslider.min.js
      [img] http://www.ffwp.org/data/thum/20141124204630work-5  -> Offline
      [img] http://www.ffwp.org/data/thum/2014121395811천력  -> Offline
      [img] http://www.ffwp.org/data/thum/2014121220032광주  -> Offline
      [img] http://www.ffwp.org/data/thum/20141212114619해양교구  -> Offline
      [img] http://www.ffwp.org/data/thum/20141210173725서울남부  -> Offline
      [img] http://www.ffwp.org/data/thum/20141212142918제주  -> Offline
      [img] http://www.ffwp.org/data/thum/2014121110550(8)  -> Offline
    [frame] http://www.tongilgyo.org/tongil/?mid=main_movies&type=movie
      -> user tracking code (google-analytics.com)
      [frame] mms://vod.tongilgyo.org/webvod/home/tongilgyo_intro.wmv -> pass
    [script] http://www.tongilgyo.org/tongil/common/js/jquery.js
      -> user information check
    [script] http://www.tongilgyo.org/tongil/common/js/x.js
      -> user information check
      -> user cookie check
    [script] http://www.tongilgyo.org/tongil/common/js/common.js
      -> user information check
      -> user cookie check
    [script] http://www.tongilgyo.org/tongil/common/js/js_app.js
    [script] http://www.tongilgyo.org/tongil/common/js/xml_handler.js
    [script] http://www.tongilgyo.org/tongil/common/js/xml_js_filter.js
    [script] http://www.tongilgyo.org/tongil/layouts/tongilgyo_main/plugins/lang/js/language.js
      -> user cookie check
      -> Suspicious script has been detected
      [frame] http://stlc.ivehost.net/info/all.js -> Malware url  -> Offline
    [script] http://www.tongilgyo.org/tongil/layouts/tongilgyo_main/plugins/gnbmenu/js/jquery.droppy.js
    [script] http://www.tongilgyo.org/tongil/layouts/tongilgyo_main/plugins/sitemap/js/sitemap.js
    [script] http://www.tongilgyo.org/tongil/widgets/sejin7940_content/skins/default/js/content_widget.js
    [script] http://www.tongilgyo.org/tongil/widgets/login_info/skins/tingenara/js/login.js
    [script] http://www.tongilgyo.org/tongil/widgets/content/skins/main_m/js/content_widget.js
    [script] http://www.tongilgyo.org/tongil/layouts/tongilgyo_main/js/layout.js
    [script] http://widgets.twimg.com/j/2/widget.js
    [script] http://www.tongilgyo.org/tongil/layouts/tongilgyo_main/js/pngFix.min.js
    [script] http://www.tongilgyo.org/tongil/addons/autolink/autolink.js
    [script] http://www.tongilgyo.org/tongil/common/js/plugins/ui/jquery-ui.packed.js
      [script] http://jqueryui.com/about
        -> Suspicious url(NULL)
        [Location] http://jqueryui.com/about/
    [script] http://www.tongilgyo.org/tongil/common/js/plugins/ui/jquery.ui.datepicker-ko.js
    [script] http://www.tongilgyo.org/tongil/addons/resize_image/js/resize_image.min.js
    [script] http://www.tongilgyo.org/tongil/layouts/tongilgyo_main/js/gotop.js
    [script] http://www.tongilgyo.org/tongil/layouts/tongilgyo_main/js/quicks.js  -> Offline
    [script] http://www.tongilgyo.org/tongil/layouts/tongilgyo_main/plugins/gnbmenu/js/jquery.lavalamp.js
    [script] http://www.tongilgyo.org/tongil/layouts/tongilgyo_main/plugins/gnbmenu/js/jquery.easing.1.3.js
    [script] http://www.tongilgyo.org/tongil/files/cache/js_filter_compiled/efec9068f09c632f602b1c4df2229f72.ko.compiled.js
    [script] http://www.tongilgyo.org/tongil/files/cache/js_filter_compiled/21ea629f148903ae2b88fd5bc99074f0.ko.compiled.js
    [location] http://www.tongilgyo.org/tongil/?mid=main_en
    [location] http://www.tongilgyo.org/tongil/?mid=main_jp
    [script] http://www.xe-art.com  -> Offline?

*Country

3.33.130.190 (Seattle, United States)

*Whois
Domain Name: tongilgyo.org
Registry Domain ID: 11e1393c3d114b7a9be5e8fee5a28d0b-LROR
Registrar WHOIS Server: whois.tucows.com
Registrar URL: http://www.tucows.com
Updated Date: 2023-05-21T03:54:35Z
Creation Date: 2009-05-31T23:36:16Z
Registry Expiry Date: 2026-05-31T23:36:16Z
Registrar: Tucows Domains Inc.
Registrar IANA ID: 69
Registrar Abuse Contact Email: domainabuse@tucows.com
Registrar Abuse Contact Phone: +1.4165350123
Domain Status: ok https://icann.org/epp#ok
Registry Registrant ID: REDACTED
Registrant Name: REDACTED
Registrant Organization: Data Protected
Registrant Street: REDACTED
Registrant City: REDACTED
Registrant State/Province:
Registrant Postal Code: REDACTED
Registrant Country: KR
Registrant Phone: REDACTED
Registrant Phone Ext: REDACTED
Registrant Fax: REDACTED
Registrant Fax Ext: REDACTED
Registrant Email: REDACTED
Registry Admin ID: REDACTED
Admin Name: REDACTED
Admin Organization: REDACTED
Admin Street: REDACTED
Admin City: REDACTED
Admin State/Province: REDACTED
Admin Postal Code: REDACTED
Admin Country: REDACTED
Admin Phone: REDACTED
Admin Phone Ext: REDACTED
Admin Fax: REDACTED
Admin Fax Ext: REDACTED
Admin Email: REDACTED
Registry Tech ID: REDACTED
Tech Name: REDACTED
Tech Organization: REDACTED
Tech Street: REDACTED
Tech City: REDACTED
Tech State/Province: REDACTED
Tech Postal Code: REDACTED
Tech Country: REDACTED
Tech Phone: REDACTED
Tech Phone Ext: REDACTED
Tech Fax: REDACTED
Tech Fax Ext: REDACTED
Tech Email: REDACTED
Name Server: ns71.domaincontrol.com
Name Server: ns72.domaincontrol.com
DNSSEC: unsigned
URL of the ICANN Whois Inaccuracy Complaint Form: https://icann.org/wicf/
>>> Last update of WHOIS database: 2025-05-22T06:19:54Z <<<

For more information on Whois status codes, please visit https://icann.org/epp

Terms of Use: Access to Public Interest Registry WHOIS information is provided to assist persons in determining the contents of a domain name registration record in the Public Interest Registry registry database. The data in this record is provided by Public Interest Registry for informational purposes only, and Public Interest Registry does not guarantee its accuracy. This service is intended only for query-based access. You agree that you will use this data only for lawful purposes and that, under no circumstances will you use this data to (a) allow, enable, or otherwise support the transmission by e-mail, telephone, or facsimile of mass unsolicited, commercial advertising or solicitations to entities other than the data recipient's own existing customers; or (b) enable high volume, automated, electronic processes that send queries or data to the systems of Registry Operator, a Registrar, or Identity Digital except as reasonably necessary to register domain names or modify existing registrations. All rights reserved. Public Interest Registry reserves the right to modify these terms at any time. By submitting this query, you agree to abide by this policy. The Registrar of Record identified in this output may have an RDDS service that can be queried for additional information on how to contact the Registrant, Admin, or Tech contact of the queried domain name.

Website Check

Report