ZeroCERT Team

Report

Result
Link
Whois
Reference

*Date : 2017.10.10 21:18
*Site : https://goo.gl/TJbxah
*Title : Moved Permanently
*Info : 172.217.26.14, US(Mountain View, United States)
*Check url : 42 counts
*Loading time : 47.373436sec
*Reference
  - MANGOSCAN : not found
  - VIRUSTOTAL : URL Hash 2017-10-10 06:44:15 1/64, FILE Hash not found
  - Google SafeBrowsing(GSB) : goo.gl is not found
*Result
(1) user information check - 2count
(2) https://renew-gpki.000webhostapp.com/update/?m=viewInputPasswdForMyInfo&menu=security&token_help=bW5kOTEz - 1count
(3) Input site Registered Malicious url - 1count
(4) user cookie check - 1count

Public Link : http://zerocert.org/?code=ee72eabfb6c3f98fa62b2658d18253119447e6a6bcc102fcd8cfa3ef1900f01e

*Latest detected Domain

이 사이트는 최근 90일 동안 악성URL 삽입된 적이 없습니다.
이 사이트는 최근 90일 동안 악성코드 중개 역할한 적이 없습니다.
이 사이트는 최근 90일 동안 악성코드를 유포한 적이 없습니다.
Relation domain not found
Relation ip not found
same Domain not found
same IP not found
same IP bands not found
same ASN not found

https://goo.gl/TJbxah -> Malware url
  [Location] https://renew-gpki.000webhostapp.com/update/?m=viewInputPasswdForMyInfo&menu=security&token_help=bW5kOTEz -> Malware url
    [script] https://renew-gpki.000webhostapp.com/update/resources/jquery-1.7.1.js  -> Offline?
    [script] https://renew-gpki.000webhostapp.com/resources/js/common/jquery/jquery.slide.js?version=20170612_11  -> Offline
    [script] https://renew-gpki.000webhostapp.com/update/resources/login.js  -> Offline
    [script] https://renew-gpki.000webhostapp.com/softforum/XecureWeb/xecureweb_up.js?version=20170612_11  -> Offline
    [script] https://renew-gpki.000webhostapp.com/resources/js/pages/login/makePCookie.js?version=20170612_11  -> Offline
    [script] https://renew-gpki.000webhostapp.com/pluginfree/jsp/nppfs.script-1.9.0.jsp  -> Offline
    [script] https://renew-gpki.000webhostapp.com/update/resources/nppfs-1.9.0.js
      -> user information check
      -> user cookie check
      [script(*)] https://supdate.nprotect.net/nprotect/nos_service/nos.service
    [script] https://renew-gpki.000webhostapp.com/update/resources/astx2.min.js?version=20170612_11  -> Offline
    [script] https://renew-gpki.000webhostapp.com/update/resources/astx2_ml.min.js?version=20170612_11  -> Offline
    [script] https://renew-gpki.000webhostapp.com/update/resources/astx2_jq.min.js?version=20170612_11  -> Offline
    [script] https://renew-gpki.000webhostapp.com/softforum/anySign4PCInterface.js?version=20170612_11  -> Offline
    [script] https://renew-gpki.000webhostapp.com/update/resources/AnySign4PC_min.js  -> Offline
    [script] https://renew-gpki.000webhostapp.com/update/resources/SecureProto.js  -> Offline
    [script] https://renew-gpki.000webhostapp.com/update/resources/makePCookie.js?version=20170612_11  -> Offline
    [script] https://renew-gpki.000webhostapp.com/update/js/vendor/jquery.ui.widget.js
    [script] https://renew-gpki.000webhostapp.com/update/js/jquery.iframe-transport.js
    [script] https://renew-gpki.000webhostapp.com/update/js/jquery.fileupload.js
      -> user information check
    [location] https://renew-gpki.000webhostapp.com/installSecurity.jsp  -> Offline
    [script] http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd  -> Offline?
    [script] http://www.w3.org/1999/xhtml  -> Offline?
    [script] http://www.gpki.go.kr  -> Offline?
    [script] http://www.epki.go.kr
    [script] http://mobile.korea.kr  -> Offline?
    [script] http://mail.korea.kr  -> Offline?
    [script] http://www.korea.kr/policy/societyView.do?newsId=148839509&  -> Offline?
    [script] http://www.korea.kr/policyplus/cardnewsView.do?newsId=148839604&  -> Offline?
    [script] http://www.korea.kr/policy/economyView.do?newsId=148839557&  -> Offline?
    [script] http://photo.korea.kr/photoWeb/photoMbbs/View.do?themekey=dept_activity&  -> Offline?
    [script] http://www.korea.kr/policy/economyView.do?newsId=148839490&  -> Offline?
    [script] http://korea.kr/policyplus/mediaSympathyView.do?newsId=148839516&  -> Offline?
    [script] http://korea.kr/policyplus/weekendView.do?newsId=148839427&  -> Offline?
    [script] http://reporter.korea.kr/newsView.do?nid=148839536&  -> Offline?
    [script] http://www.korea.kr/celebrity/contributePolicyView.do?newsId=148839551&  -> Offline?
    [script] http://www.korea.kr/policy/diplomacyView.do?newsId=148839417&  -> Offline?
    [script] http://www.korea.kr/policy/societyView.do?newsId=148839098&  -> Offline?
    [script] http://www.korea.kr/policy/societyView.do?newsId=148839549&  -> Offline?
    [script] http://www.korea.kr/briefing/actuallyView.do?newsId=148839222&  -> Offline?
    [script] http://www.korea.kr/briefing/actuallyView.do?newsId=148839529&  -> Offline?
    [script] http://www.korea.kr?pWiseMail=mailHL50  -> Offline?

*Country

172.217.31.174 (, United States)

*Whois
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

%ERROR:101: no entries found
%
% No entries found in source RIPE.

% This query was served by the RIPE Database Query Service version 1.118.1 (BUSA)

Website Check

Report