www.yonginmh.co.kr
Classification: Malicious
www.yonginmh.co.kr is a malicious hostname. 144 sightings from Threat Observatory (ARL), last seen 2026-10-18. Seen in CO, MX. Resolves to 211.46.97.3.
Current activity
- Offline — no longer resolving. Last online 2026-10-18 09:30:02.
- Command & Control server — Used by cybercriminals to control victim computers.
Where it has been seen
Observed by Maltiverse Threat Observatory sensors in CO and MX, across education and retail networks.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| ARL | Maltiverse Threat Observatory | 2026-09-06 08:47:11 | 2026-10-18 08:49:44 | botnet compromised country_code:co country_code:mx industry:education-and-nonprofits industry:retail-and-hospitality malicious-activity |
Tags
port:5003IP addresses resolved by this hostname
- 211.46.97.3 (2026-10-09 18:06:40)
Whois information
- Domain
- yonginmh.co.kr
- TLD
- co.kr
- Nameservers
- ns1.uhost.co.kr, ns2.uhost.co.kr, ns.yonginmh.co.kr, ns.gabia.co.kr, ns1.gabia.co.kr, ns.gabia.net
- Registrant
- Inames Co., Ltd.(http://www.inames.co.kr)
- Address
- , 940 Jungbu-daero Giheung-gu Yongin-si, Gyeonggi-do, KR
- Contact email
- [email protected]
- Domain created
- 1998-09-01 00:00:00
- Domain expires
- 2028-10-15 00:00:00
- First indexed
- 2026-09-07 13:59:45
- Last updated
- 2026-10-18 09:30:02