IP192.229.221.95:0
Hash79dc64ca94c80c9de9895ce1b7687bc4 e13da03f522cc34e9001b3e27d13a703dfa788e9 61a71915b333c87d14ced13aae978c79c5bba0e43975a9f34cde4e9219c163a5
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: max-age=7200
Content-Type: application/ocsp-response
Date: Wed, 08 May 2024 22:51:00 GMT
Server: ECAcc (amb/6B53)
Content-Length: 471
|
| nip.kdca.go.kr/m_nip/login.jsp | 152.99.102.15 | 302 Found | 0 B |
URL User Request GET HTTP/1.1nip.kdca.go.kr/m_nip/login.jsp IP152.99.102.15:443 ASN#17841 NATIONAL INFORMATION RESOURCES SERVICE
CertificateIssuerDigiCert Inc Subject*.kdca.go.kr Fingerprint07:90:3C:14:FB:B8:DC:5F:10:11:C4:14:99:6E:90:E3:BD:3C:4B:C2 ValidityThu, 09 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /m_nip/login.jsp HTTP/1.1
Host: nip.kdca.go.kr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Date: Wed, 08 May 2024 22:51:00 GMT
Content-Length: 0
Location: http://152.99.73.154/error.html
Connection: Keep-alive
Via: 1.1 ID-1716635721754044 uproxy-6
|
URL User Request GET HTTP/1.1IP152.99.73.154:80 ASN#17841 NATIONAL INFORMATION RESOURCES SERVICE
File typeHTML document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators Hash67223da0201bcb749c9ed71741408350 7559f41ccfeecf7c7f0d4a992f5b1a7853e4448b 53655bbf0e74a9723e3a70d00d1dbece8984a7c05fe3cede81df27c7b9da1c44
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /error.html HTTP/1.1
Host: 152.99.73.154
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 22:51:01 GMT
Server: Apache/2.4.39 (Unix)
Last-Modified: Thu, 04 Feb 2021 05:00:07 GMT
ETag: "2f8-5ba7b93d16a40"
Accept-Ranges: bytes
Content-Length: 760
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html
|
| 152.99.73.154/favicon.ico | 152.99.73.154 | 404 Not Found | 209 B |
URL GET HTTP/1.1152.99.73.154/favicon.ico IP152.99.73.154:80 ASN#17841 NATIONAL INFORMATION RESOURCES SERVICE
Requested byhttp://152.99.73.154/error.html
File typeHTML document, ASCII text Hash18ffb59b61525f781cf9251045be575d bd7318b00b15b7a1c8a48524419fa2e5c27a5b6d b6682cab65d3243b5b75efb7279dbf49491957484780f2ba0a87632cc0e25642
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: 152.99.73.154
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://152.99.73.154/error.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Wed, 08 May 2024 22:51:01 GMT
Server: Apache/2.4.39 (Unix)
Content-Length: 209
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|