Domain > mainserver.kr

Welcome! Right click nodes and scroll the mouse to navigate the graph.

More information on this domain is in AlienVault OTX

Files that talk to mainserver.kr

MD5	A/V
471ec8cbd8ebec844f899d0d9ed2c403	[ADWARE/Hebogo.D]
34165fe23ef67b62149d219b2ce0f852
a9cfc02550286222aa6b07424e159523
02a3f1f8af0b23acdc67971ca9feb1a4
c7df9b580cbaa38e6de796aab4f5e5d1	[ADWARE/Hebogo.D]
98a9fe994ad2cd3ae0bb8253f1323fc2	[ADWARE/Hebogo.D]
e6d25122bccd26d371575cffb59f24a4	[ADWARE/Hebogo.D]
3c2283a4dd45c4286e3bfd3d16462ab5
1dc3cb8f363bde761d4cff6e874f7609	[ADWARE/Hebogo.D]
457cc25ac529f562f1f75b47d0bc4b01	[ADWARE/Hebogo.D]
7c22e2848cd20bfd47041e289785a6f3	[ADWARE/Hebogo.D]
101fc675f7e76ee1a064e582f0e1966d
b2db9f376424a224cbaff7253a8f5031
229b657b87e872fceb73582c431bde51	[ADWARE/Hebogo.D]
918f0224186fe681162c045b004b20b4
5a338e02fa81eebd769dc44ceacdd8a4	[not-a-virus:HEUR:AdWare.Win32.Hebogo.heur] [ApplicUnwnt] [Trojan.DownLoader8.56501] [Adware/Hebogo.D] [Virus.Win32.Part.i]
c31c79ab9108f863f6c1ddafe868d6b8
547bc2982a3a728b98ada88c51b21185	[ADWARE/Hebogo.D]
37c7a82fd9d93839940b6755084eb844	[ADWARE/Hebogo.D]
4e68c13ec80079b7161ad2bcbbef3603	[ADWARE/Hebogo.D]

Whois

Property	Value
Name	Park Jeung Gyu
Email	gldforce@hanmail.net
NameServer	ns1.gabia.co.kr
Created	2007-04-21 00:00:00
Changed	2010-10-13 00:00:00
Expires	2017-04-21 00:00:00
Registrar	Gabia, Inc.

DNS Resolutions

Date	IP Address
2011-06-11	220.73.162.9 (ClassC)
2013-04-01	220.73.162.3 (ClassC)
2013-10-12	220.73.162.57 (ClassC)
2024-03-22	220.73.162.57 (ClassC)
2025-01-06	220.73.162.61 (ClassC)

Port 80

HTTP/1.1 403 ForbiddenContent-Type: text/htmlServer: Microsoft-IIS/7.0X-Powered-By: ASP.NETDate: Fri, 22 Mar 2024 07:56:33 GMTContent-Length: 1241

!DOCTYPE html PUBLIC -//W3C//DTD XHTML 1.0 Strict//EN http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd>html xmlnshttp://www.w3.org/1999/xhtml>head>meta http-equivContent-Type contenttext/html; charsetks_c_5601-1987/>title>403 - ��� ���� ����: �׼����� �źεǾ����ϴ�./title>style typetext/css>!--body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}fieldset{padding:0 15px 10px 15px;} h1{font-size:2.4em;margin:0;color:#FFF;}h2{font-size:1.7em;margin:0;color:#CC0000;} h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} #header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:trebuchet MS, Verdana, sans-serif;color:#FFF;background-color:#555555;}#content{margin:0 0 0 2%;position:relative;}.content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}-->/style>/head>body>div idheader>h1>���� ����/h1>/div>div idcontent> div classcontent-container>fieldset>  h2>403 - ��� ���� ����: �׼����� �źεǾ����ϴ�./h2>  h3>������ �ڰ� ������ ����Ͽ� �� ���͸� �Ǵ� �������� �� �� �ִ� ������ �����ϴ�./h3> /fieldset>/div>/div>/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > mainserver.kr

Is this malicious?

Files that talk to mainserver.kr

Whois

DNS Resolutions

Port 80