fe01[.]co[.]kr

PhishDestroy first observed fe01.co.kr on Jun 22, 2026. The captured page title is “재생복합 문화공간 Fe01 | 메인”. Stored page analysis classifies the content as generic phishing. Current evidence score: 100/100 (critical).

Positive findings are stored from 2 sources: VirusTotal and Cloudflare Radar. VirusTotal recorded 18 detections among 91 engines: ADMINUSLabs, alphaMountain.ai, ArcSight Threat Intelligence, BitDefender, Certego, Chong Lua Dao, CRDF, CyRadar, ESTsecurity, Forcepoint ThreatSeeker, Fortinet, G-Data, Gridinsoft, Lionic, SOCRadar, Sophos, Viettel Threat Intelligence, VIPRE on Jul 28, 2026 at 02:53 UTC. Cloudflare Radar classified the hostname as malicious and assigned the categories malware and command and control & botnet; its verdict timestamp was not retained. Non-positive and contextual checks: On Jun 22, 2026 at 21:10 UTC, AlienVault OTX listed 14 community pulse references (not vendor detections); Google Safe Browsing returned no flag. The separate external-blocklist snapshot contained no matches on Aug 8, 2026 at 06:20 UTC. URLScan completed without a malicious verdict on Jul 29, 2026 at 02:33 UTC.

HTTP 200 was recorded on Aug 7, 2026 at 22:14 UTC. Registration records for the domain list Gabia, Inc.(http://www.gabia.co.kr) as the registrar and Sep 3, 2023 as the creation date. At collection time, the hostname resolved to 211.239.157.126 on AS9952 (HOSTWAY-AS-KR-KR - Hostway IDC, KR). The recorded endpoint location is Seoul, KR. The stored server header is Apache. DOM analysis on Jul 2, 2026 at 06:20 UTC returned 98/100. The evidence archive retains 2 visual captures from PhishDestroy and URLScan. TLS metadata lists Sectigo Limited / Sectigo Public Server Authentication CA DV R36 as the certificate issuer with validity through Feb 12, 2027; checked Jun 22, 2026 at 22:00 UTC.

The content indicators and 2 positive source findings support the current generic phishing classification.