Report - ins-tech.co.kr/details.zip

Report Overview

Submitted URL
ins-tech.co.kr/details.zip
IP
183.111.182.214
ASN
#4766 Korea Telecom
Submitted
2023-06-04 00:49:34
Access
public
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
6
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
ins-tech.co.kr	unknown	2010-02-22	2016-08-16	2023-06-04	1.6 kB	11 kB	183.111.182.214

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-06-04 00:49:16	medium	183.111.182.214	Client IP	ET INFO Suspicious Self Signed SSL Certificate to 'My Company Ltd'
2023-06-04 00:49:17	medium	183.111.182.214	Client IP	ET INFO Suspicious Self Signed SSL Certificate to 'My Company Ltd'
2023-06-04 00:49:18	medium	183.111.182.214	Client IP	ET INFO Suspicious Self Signed SSL Certificate to 'My Company Ltd'
2023-06-04 00:49:18	medium	183.111.182.214	Client IP	ET INFO Suspicious Self Signed SSL Certificate to 'My Company Ltd'
2023-06-04 00:49:19	medium	183.111.182.214	Client IP	ET INFO Suspicious Self Signed SSL Certificate to 'My Company Ltd'
2023-06-04 00:49:19	medium	183.111.182.214	Client IP	ET INFO Suspicious Self Signed SSL Certificate to 'My Company Ltd'

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (4)

	URL	IP	Response	Size
	ins-tech.co.kr/details.zip	183.111.182.214		1.0 kB
URL ins-tech.co.kr/details.zip IP 183.111.182.214:0 ASN #4766 Korea Telecom File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (1547), with no line terminators Size 1.0 kB (1038 bytes) Hash b16e2388550c3b123fcf3f11416698d5 9e2d9ee00c940eb2439cd322fe591f5ceb939cd5 64a2d3445fb187adef55fd93b2e51b6027bfd34533b706ddf61aeea63ac96cfc HTTP Headers `GET /details.zip HTTP/1.1 Host: ins-tech.co.kr User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Date: Sun, 04 Jun 2023 00:49:17 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding Expires: Thu, 01 Jan 1970 00:00:01 GMT Cache-Control: no-cache Content-Encoding: gzip`

	ins-tech.co.kr/cupid.js	183.111.182.214		8.4 kB
URL ins-tech.co.kr/cupid.js IP 183.111.182.214:0 ASN #4766 Korea Telecom File type ASCII text, with CRLF line terminators Size 8.4 kB (8372 bytes) Hash 8f45388d05600ea154384bf6a308a15b c8d0a29cc906b09b4ed7253a27e7ac8e7c4eb670 abde06ab5b40e44bbd6dc2842d61420e0e54b2d24705760402b7675d2668d1e8 HTTP Headers `GET /cupid.js HTTP/1.1 Host: ins-tech.co.kr User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://ins-tech.co.kr/details.zip Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Date: Sun, 04 Jun 2023 00:49:17 GMT Content-Type: application/x-javascript Last-Modified: Fri, 06 Jun 2014 08:06:00 GMT Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding ETag: W/"53917668-79c6" Content-Encoding: gzip`

	ins-tech.co.kr/details.zip?ckattempt=1	183.111.182.214	404 Not Found	185 B
URL User Request GET HTTP/1.1 ins-tech.co.kr/details.zip?ckattempt=1 IP 183.111.182.214:80 ASN #4766 Korea Telecom File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text Size 185 B (185 bytes) Hash 3d10dbea44e42a009a5e87aaabce6e5e 3e06e1431499eb14fb056112413a193f11d28ebf 484f54a6bd772fa0a08a4dd44a968318dc7d357abef1e66d290b10877030771a HTTP Headers `GET /details.zip?ckattempt=1 HTTP/1.1 Host: ins-tech.co.kr User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://ins-tech.co.kr/details.zip DNT: 1 Connection: keep-alive Cookie: CUPID=e50e9ac43ce1d9e5cb3bb2981a6e35df Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 404 Not Found Server: nginx Date: Sun, 04 Jun 2023 00:49:19 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding Content-Encoding: gzip`

	ins-tech.co.kr/favicon.ico	183.111.182.214	404 Not Found	183 B
URL GET HTTP/1.1 ins-tech.co.kr/favicon.ico IP 183.111.182.214:80 ASN #4766 Korea Telecom Requested by http://ins-tech.co.kr/details.zip?ckattempt=1 File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text Size 183 B (183 bytes) Hash 826b61be51a29e882493a70576715fe8 1ee5148ce78bb708684adce707a5176423dd4983 e4e866612068e7d36f56e00a85f99d750509224d7161db8218c17427f8be7640 HTTP Headers `GET /favicon.ico HTTP/1.1 Host: ins-tech.co.kr User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://ins-tech.co.kr/details.zip?ckattempt=1 Cookie: CUPID=e50e9ac43ce1d9e5cb3bb2981a6e35df Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 404 Not Found Server: nginx Date: Sun, 04 Jun 2023 00:49:19 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding Content-Encoding: gzip`