Domain > gangseo.seoul.kr

Welcome! Right click nodes and scroll the mouse to navigate the graph.

More information on this domain is in AlienVault OTX

Files that talk to gangseo.seoul.kr

Whois

Property	Value
Name	Gangseo-gu Office
Email	jungjiwon@gangseo.seoul.kr
Address	Gangseo-gu Office Hw, Gangseo-gu Seoul
Zip Code	157701
NameServer	ns.klid.or.kr
Created	2000-03-07 00:00:00
Changed	2013-11-29 00:00:00
Expires	2016-03-07 00:00:00
Registrar	Megazone

DNS Resolutions

Date	IP Address
2014-07-05	220.76.177.36 (ClassC)
2024-11-13	220.76.177.103 (ClassC)

Port 80

HTTP/1.1 400 Bad RequestDate: Wed, 13 Nov 2024 16:03:12 GMTConnection: closeContent-Length: 1414Content-Type: text/html; charsetUTF-8

!DOCTYPE html>html>head>	meta charsetutf-8>	meta nameviewport contentwidthdevice-width>	title>400 Bad Request/title>	style typetext/css>		body {			font-family: Calibri, Verdana, Geneva, sans-serif;		}		.layer {			position: absolute;			top: 0;			left: 0;			width: 100%;			height: 100%;			text-align: center		}		.layer .content{			display: inline-block;			margin: auto;			margin-top: 100px;			height: 185px;			background: #fff;			text-align: left;			vertical-align: middle;		}		.t_level1 {			font-size: 70px;			font-weight: bold;		}		.t_level2 {			font-size: 25px;			font-weight: normal;			color: #787878;		}		.t_level3 {			font-size: 14px;			color: #C30;		}		.t_level4 {			font-size: 14px;			color: #0000FF;		}	/style>/head>body>	div classlayer>		br>		div classcontent>			div classtextbox>				span classt_level1>400/span>   				span classt_level2>Bad Request/span>				br>				span classt_level3>The server cannot or will not process the request due to an apparent client error (e.g., malformed request syntax, invalid request message framing, or deceptive request routing)./span>				br>				span classt_level4>If you have any questions, please contact the administrator with the following code. AA9BC68206119D69746E37994D70B043/span>				br>			/div>		/div>	/div>/body>/html>

Port 443

HTTP/1.1 400 Bad RequestDate: Wed, 13 Nov 2024 16:03:12 GMTConnection: closeContent-Length: 1414Content-Type: text/html; charsetUTF-8

!DOCTYPE html>html>head>	meta charsetutf-8>	meta nameviewport contentwidthdevice-width>	title>400 Bad Request/title>	style typetext/css>		body {			font-family: Calibri, Verdana, Geneva, sans-serif;		}		.layer {			position: absolute;			top: 0;			left: 0;			width: 100%;			height: 100%;			text-align: center		}		.layer .content{			display: inline-block;			margin: auto;			margin-top: 100px;			height: 185px;			background: #fff;			text-align: left;			vertical-align: middle;		}		.t_level1 {			font-size: 70px;			font-weight: bold;		}		.t_level2 {			font-size: 25px;			font-weight: normal;			color: #787878;		}		.t_level3 {			font-size: 14px;			color: #C30;		}		.t_level4 {			font-size: 14px;			color: #0000FF;		}	/style>/head>body>	div classlayer>		br>		div classcontent>			div classtextbox>				span classt_level1>400/span>   				span classt_level2>Bad Request/span>				br>				span classt_level3>The server cannot or will not process the request due to an apparent client error (e.g., malformed request syntax, invalid request message framing, or deceptive request routing)./span>				br>				span classt_level4>If you have any questions, please contact the administrator with the following code. 8B0BB1CA7B7C7ACFF04FD7CCEFE2A98F/span>				br>			/div>		/div>	/div>/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

MD5	A/V
3220ab9b63a767c299000ea9d9e3a056	[HW32.CDB.1b0b] [Packed.Win32.Katusha.1!O] [Backdoor.Hlux!u8SUOkHyYnA] [Trojan.FakeAV] [Kryptik.CCFN] [Win32/Kelihos.RbUfAWB] [Backdoor.Win32.Hlux.dpoo] [Trojan.Win32.Hlux.cxxuzn] [TrojWare.Win32.Kryptik.CAUP] [BackDoor.Slym.12819] [Trojan[Backdoor]/Win32.Hlux] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [Backdoor.Hlux] [Win32/Kryptik.CAXO] [Win32.Backdoor.Hlux.Lgjg] [Trojan.Crypt_s] [W32/Kryptik.CAXO!tr] [Crypt_s.GNC] [Trojan.Win32.Kryptik.CAXO]

Domain > gangseo.seoul.kr

Is this malicious?

Files that talk to gangseo.seoul.kr

Whois

DNS Resolutions

Port 80

Port 443