The scan of arerp.kr on 13 Aug 2026 reached no verdict either way (score -12). Too little was captured to judge it, which is an unknown rather than a pass.

What malware is associated with arerp.kr?

1 analysed samples communicate with this URL, including Phishing.

How was arerp.kr checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

arerp.kr - URL scan, 13 Aug 2026

MalwareAnalyzer by Cyble scanned arerp.kr and returned a unknown verdict (score -12). The page resolved to 110.45.135.162 on IP Manager in KR. 2 domains and 1 IP were contacted. 1 malware sample communicates with this URL (Phishing). This is a point-in-time observation from 13 Aug 2026; the page may have changed since.

Scan result

Verdict: unknown (score -12) · Confidence 15%
Scanned URL: https://arerp.kr/data/file///2791899129.pdf
Domain: arerp.kr · IP: 110.45.135.162 · AS3786 · KR
Server: Microsoft-IIS/10.0
Page title: IIS 10.0 자세한 오류 - 404.0 - Not Found
HTTP status: 404 · text/html; charset=utf-8
TLS issuer: C=CH, O=TuringSign Global SA, CN=TuringSign RSA Secure CA 2 · valid to Nov 14 04: · subject CN=www.arerp.kr
Scan tier: standard · observed 2026-08-13 01:53:48 UTC

Malware communicating with this URL (1)

These samples were observed contacting or being served from arerp.kr. Each links to its full analysis.

Phishing - referenced · b7cbb0fbc649f68c031a780933fad9c5 · first seen 2026-08-12

Antivirus & YARA (0 of 44 engines)

No engine flagged this page's content.

Why this verdict

Valid TLS, no impersonation or off-origin credential post

Detected technologies

Microsoft IIS
ASP.NET

Contacted infrastructure

110.45.135.162 - AS3786 IP Manager (KR)

Observed indicators

arerp.kr
go.microsoft.com
110.45.135.162
https://arerp.kr/data/file///2791899129.pdf
http://go.microsoft.com/fwlink/?LinkID=66439
https://go.microsoft.com/fwlink/?LinkID=62293&IIS70Error=404,0,0x80070002,20348

Other scans of arerp.kr (8)

This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.

20 Aug 2026 - unknown · https://arerp.kr/data/file///60698676063.pdf
20 Aug 2026 - unknown · https://arerp.kr/data/file///60698676063.pdf
19 Aug 2026 - unknown · https://arerp.kr/data/file///39491001308.pdf
19 Aug 2026 - unknown · https://arerp.kr/data/file///39491001308.pdf
16 Aug 2026 - unknown · https://arerp.kr/data/file///titokolopibamelapawaw.pdf
13 Aug 2026 - unknown
13 Aug 2026 - unknown
13 Aug 2026 - unknown

Questions about arerp.kr

Is arerp.kr safe?: The scan of arerp.kr on 13 Aug 2026 reached no verdict either way (score -12). Too little was captured to judge it, which is an unknown rather than a pass.
What malware is associated with arerp.kr?: 1 analysed samples communicate with this URL, including Phishing.
How was arerp.kr checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the standard tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of arerp.kr

Scanned on MalwareAnalyzer by Cyble · Open interactive scan