| ocsp.gtlsca.nat.gov.tw/OCSP |  210.241.69.242 | | 1.8 kB |
URL ocsp.gtlsca.nat.gov.tw/OCSP IP210.241.69.242:0 ASN#4782 Data Communication Business Group
Hash72d5e0ca5de6598d814fd7fbb56250d5 b48135c9017e67ead80e530debb83dd100c798d2 ab33db850c3a7f8c3e670b49bec81394758ce896507d72da8baeecda8af19fde
POST /OCSP HTTP/1.1
Host: ocsp.gtlsca.nat.gov.tw
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 07:21:20 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000;includeSubdomains; preload
expires: Tue, 07 May 2024 15:12:45 GMT
cache-control: max-age=7000,public,no-transform,must-revalidate
last-modified: Tue, 07 May 2024 07:12:45 GMT
Content-Type: application/ocsp-response
Content-Length: 1815
Connection: close
|
| ocsp.gtlsca.nat.gov.tw/OCSP | 210.241.69.242 | | 1.8 kB |
URL ocsp.gtlsca.nat.gov.tw/OCSP IP210.241.69.242:0 ASN#4782 Data Communication Business Group
Hash72d5e0ca5de6598d814fd7fbb56250d5 b48135c9017e67ead80e530debb83dd100c798d2 ab33db850c3a7f8c3e670b49bec81394758ce896507d72da8baeecda8af19fde
POST /OCSP HTTP/1.1
Host: ocsp.gtlsca.nat.gov.tw
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 07:21:20 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000;includeSubdomains; preload
expires: Tue, 07 May 2024 15:12:45 GMT
cache-control: max-age=7000,public,no-transform,must-revalidate
last-modified: Tue, 07 May 2024 07:12:45 GMT
Content-Type: application/ocsp-response
Content-Length: 1815
Connection: close
|
| 210.241.69.226/cgi-bin/OCSP2/ocsp_server.exe | 210.241.69.226 | 200 OK | 5 B |
URL User Request GET HTTP/1.1210.241.69.226/cgi-bin/OCSP2/ocsp_server.exe IP210.241.69.226:80 ASN#4782 Data Communication Business Group
Hash4842e206e4cfff2954901467ad54169e 80c9820ff2efe8aa3d361df7011ae6eee35ec4f0 2acab1228e8935d5dfdd1756b8a19698b6c8b786c90f87993ce9799a67a96e4e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /cgi-bin/OCSP2/ocsp_server.exe HTTP/1.1
Host: 210.241.69.226
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 07:21:09 GMT
Server: Apache
Cookie: httpOnly;Secure;SameSite=strict
X-Frame-Options: SAMEORIGIN
STRICT-TRANSPORT-SECURITY: max-age=31536000; includeSubDomains; preload
X-XSS-Protection: 1;mode=block
X-Content-Type-Options: nosniff
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/ocsp-response
Set-Cookie: sto-id-20480-repsrv_TCP_80=AMABBAKMFAAA; Path=/; Secure; HttpOnly; SameSite=Strict
|