pds25.egloos.com - MalwareURL

MalwareURL Listing Report

Entry matching pds25.egloos.com was found in our database.

11 other active domains were found on 15 IP(s) for AS4792 (SKCOMMS-AS-KR)

Show the report for AS4792 (SKCOMMS-AS-KR)

Domain:	pds25.egloos.com
URL(s):	/pds/201211/25/92/update.exe
	/pds/201211/25/92/update.exe
MD5:	54dd755a48f8ab62036a339cae597928
SHA1:	c3bd9906a8696ee95e47fb7307e037b65519ccc1
Category:	Backdoor Blohi.A

ASN:	AS4792 (SKCOMMS-AS-KR SK communications)
IP:	211.234.242.176
Country:	Korea, South
Reverse IP:

Name Servers:	ns2.egloos.com => 125.141.132.143 6 domains listed using this name server ns1.egloos.com => 125.141.132.141 6 domains listed using this name server ASPMX2.GOOGLEMAIL.com => 64.233.190.26 220 domains listed using this name server ASPMX3.GOOGLEMAIL.com => 74.125.200.27 205 domains listed using this name server ASPMX.L.GOOGLE.com => 173.194.76.26 394 domains listed using this name server