AS9341 – North Korea Government
Looks like within the last month AS9341 is now reporting as North Korea Government Other than the fact that it’s a tremendous amount of IP’s I’m curious to see what happens with this. Poking around...
View Articlecapitalsloan.com Follow Up
It’s gone offline since posted last week so that’s fun # ping capitalsloan.comPING capitalsloan.com (206.119.65.51): 56 data bytesRequest timeout for icmp_seq 0Request timeout for icmp_seq 1^C---...
View ArticleApril Spring Friendship Art Festival
Found some application forms and the rules for the 32nd April Spring Friendship Art Festival. “The April Spring Friendship Art Festival is an international event that is held in Pyongyang to mark the...
View ArticleExploring the North Korean Email Client: Features and Functionality
Now that it’s been leaked, lets take a look at the North Korean email client that was part of the leak. It’s made up of a main executable, a couple of dll files, and a config file. Before even diving...
View ArticleInvestigating korfilm.com.kp DNS Errors
There’s an interesting DNS misconfiguration for korfilm.com.kp, the website for the Korea Film Export & Import Corporation. It appears that someone made a typo when configuring the DNS records...
View ArticleInspecting North Korea’s Digital Map App: Licensing & API Insights
I’ve been meaning to write this for a while but it turned into a much longer write up than I was expecting so it’s being broken into multiple parts. Martyn at 38 North did a great write up on the app...
View ArticleHangro: Investigating North Korean VPN Infrastructure Part 1
In a post from a now-deleted user on the webdev subreddit, someone asked about how to acquire a .kp TLD. While there were a few decent responses, the original poster shared an update: they...
View ArticleManbang Set Top Box Manual
A short post since 38North has a much longer write up about the Manbang set top box here: https://www.38north.org/2019/02/mwilliams022219/ But I recently came across the manual to the Manbang set top...
View ArticleNorth Korea Offline With Invalid Routes for AS131279
On March 18, 2025, at around 9:38 AM UTC, connectivity to AS131279 dropped. Shortly after, at 9:50 AM UTC, a change in the Start of Authority (SOA) record and an update to the Route Origin...
View Article