home

img.hyundaicard.com

HYUNDAI CARD CO.LTD

Domain Information

The domain img.hyundaicard.com registered by HYUNDAI CARD CO.LTD was initially registered in May of 2000 through GABIA, INC.. The hosted servers are located in Seoul, Seoul within Korea which resides on the Asia Pacific Network Information Centre network.
Registrar:
GABIA, INC.

Server location:
Seoul, Korea (KR)

Create date:
Sunday, May 7, 2000

Expires date:
Sunday, May 7, 2017

Updated date:
Tuesday, April 5, 2016

ASN:
AS38107 CDNETWORKS-AS-KR CDNetworks, KR

Root domain:
hyundaicard.com

Whois:
3 hyundaicard.com records

The domain img.hyundaicard.com has been seen to resolve to the following 8 IP addresses.

14.0.70.201
i0-h0-s349.p59-icn.cdngp.net
August 24, 2016

14.0.67.50
May 24, 2016

14.0.102.235
April 21, 2016

14.0.102.239
April 21, 2016

14.0.100.158
December 25, 2015

14.0.67.51
December 25, 2015

61.110.213.39
April 25, 2014

61.110.213.40
April 25, 2014

File downloads found at URLs served by img.hyundaicard.com.

2 / 68
https://img.hyundaicard.com/wizvera/veraport/.../veraport-g3s.exe  (veraport-g3.exe)

1 / 68      (inconclusive)
https://img.hyundaicard.com/wizvera/delfino/.../delfino-g3.exe  (dd2532c32943a1daaae89d4fa4a0d091)

1 / 68      (inconclusive)
https://img.hyundaicard.com/wizvera/veraportg3/.../veraport-g3s-x64.exe  (810e3b8b6778ce2c40751aed78ba84c2)

1 / 68      (inconclusive)
https://img.hyundaicard.com/wizvera/veraportg3/.../veraport-g3s.exe  (2872e833d8245875d63d9cf261245b12)

0 / 68
http://img.hyundaicard.com/wizvera/verain/.../veraportpack.exe  (de6160284a927ec3e8b3f23b67db1a8f)

The following 6 files have been seen to comunicate with img.hyundaicard.com in live environments.

TCP » 14.0.67.51:80
mbtipv32.exe

TCP » 14.0.67.51:80
topsadon1c.exe

TCP » 14.0.67.50:80
topsadon1c.exe

TCP » 14.0.67.50:80
mbtipv32.exe

TCP » 14.0.67.51:80
mbtipv32.exe

TCP » 14.0.67.50:80
mbtipv32.exe

TCP » 14.0.67.50:80
wsjcorekg.exe

TCP » 14.0.67.50:80
wsifvelkg.exe

TCP » 14.0.67.50:443
mbtipv32.exe

TCP » 14.0.67.50:80
topsadon1c.exe

URL:
http://img.hyundaicard.com/

Title:
“Index”

SSL certificate subject:
CN=krssl.cdngc.net, O=CDNetworks Inc., L=San Jose, S=California, C=US

SSL certificate issuer:
CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US

Web server:
PWS/8.1.36

vpay.co.kr

ahnlab.com

raonsecure.com

boho.or.kr

samsungcard.com

softforum.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.