| cinbal.com/kr/genkorea/secured/index.php?ext=jrayor@paran.comchallenge_password.php?register=a4894331304b8dff8c34e92c3073547b&continue=a4894331304b8dff8c34e92c3073547b&ext_user=jrayor@slurpmail.net&ln=paran.comchallenge_password.php?register=2132b35e66857194692c4f507dbac225&continue=2132b35e66857194692c4f507dbac225&ext_user=jrayor@paran.comchallenge_password.php?register=a4894331304b8dff8c34e92c3073547b&ln=paran.comchallenge_password.php?register=a4894331304b8dff8c34e92c3073547bchallenge_password.php?register=9c5f904eb86cd18f924f4919b613a18e&continue=9c5f904eb86cd18f924f4919b613a18e&ext_user=jrayor@paran.comchallenge_password.php?register=a4894331304b8dff8c34e92c3073547b&ln=paran.comchallenge_password.php?register=a4894331304b8dff8c34e92c3073547bchallenge_password.php?register=6f69d27cbb05593db15dde388d0d2f60&continue=6f69d27cbb05593db15dde388d0d2f60&ext_user=jrayor@paran.comchallenge_password.php?register=a4894331304b8dff8c34e92c3073547b&ln=paran.comchallenge_password.php?register=a4894331304b8dff8c34e92c3073547bchallenge_password.php?register=77e8ce95594035436727a5687d50bb43&continue=77e8ce95594035436727a5687d50bb43&ext_user=jrayor@paran.comchallenge_password.php?register=a4894331304b8dff8c34e92c3073547b&ln=paran.comchallenge_password.php?register=a4894331304b8dff8c34e92c3073547b |  185.171.24.6 | 302 Found | 0 B |
URL User Request GET HTTP/1.1cinbal.com/kr/genkorea/secured/index.php?ext=jrayor@paran.comchallenge_password.php?register=a4894331304b8dff8c34e92c3073547b&continue=a4894331304b8dff8c34e92c3073547b&ext_user=jrayor@slurpmail.net&ln=paran.comchallenge_password.php?register=2132b35e66857194692c4f507dbac225&continue=2132b35e66857194692c4f507dbac225&ext_user=jrayor@paran.comchallenge_password.php?register=a4894331304b8dff8c34e92c3073547b&ln=paran.comchallenge_password.php?register=a4894331304b8dff8c34e92c3073547bchallenge_password.php?register=9c5f904eb86cd18f924f4919b613a18e&continue=9c5f904eb86cd18f924f4919b613a18e&ext_user=jrayor@paran.comchallenge_password.php?register=a4894331304b8dff8c34e92c3073547b&ln=paran.comchallenge_password.php?register=a4894331304b8dff8c34e92c3073547bchallenge_password.php?register=6f69d27cbb05593db15dde388d0d2f60&continue=6f69d27cbb05593db15dde388d0d2f60&ext_user=jrayor@paran.comchallenge_password.php?register=a4894331304b8dff8c34e92c3073547b&ln=paran.comchallenge_password.php?register=a4894331304b8dff8c34e92c3073547bchallenge_password.php?register=77e8ce95594035436727a5687d50bb43&continue=77e8ce95594035436727a5687d50bb43&ext_user=jrayor@paran.comchallenge_password.php?register=a4894331304b8dff8c34e92c3073547b&ln=paran.comchallenge_password.php?register=a4894331304b8dff8c34e92c3073547b IP185.171.24.6:443 ASN#60721 Bursabil Teknoloji A.S.
CertificateIssuerLet's Encrypt Subjectwww.cinbal.com FingerprintFD:A5:F0:EC:D4:2F:01:EC:BB:49:56:7D:DF:FA:2E:09:23:F8:C1:EC ValidityThu, 04 Apr 2024 20:53:29 GMT - Wed, 03 Jul 2024 20:53:28 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /kr/genkorea/secured/index.php?ext=jrayor@paran.comchallenge_password.php?register=a4894331304b8dff8c34e92c3073547b&continue=a4894331304b8dff8c34e92c3073547b&ext_user=jrayor@slurpmail.net&ln=paran.comchallenge_password.php?register=2132b35e66857194692c4f507dbac225&continue=2132b35e66857194692c4f507dbac225&ext_user=jrayor@paran.comchallenge_password.php?register=a4894331304b8dff8c34e92c3073547b&ln=paran.comchallenge_password.php?register=a4894331304b8dff8c34e92c3073547bchallenge_password.php?register=9c5f904eb86cd18f924f4919b613a18e&continue=9c5f904eb86cd18f924f4919b613a18e&ext_user=jrayor@paran.comchallenge_password.php?register=a4894331304b8dff8c34e92c3073547b&ln=paran.comchallenge_password.php?register=a4894331304b8dff8c34e92c3073547bchallenge_password.php?register=6f69d27cbb05593db15dde388d0d2f60&continue=6f69d27cbb05593db15dde388d0d2f60&ext_user=jrayor@paran.comchallenge_password.php?register=a4894331304b8dff8c34e92c3073547b&ln=paran.comchallenge_password.php?register=a4894331304b8dff8c34e92c3073547bchallenge_password.php?register=77e8ce95594035436727a5687d50bb43&continue=77e8ce95594035436727a5687d50bb43&ext_user=jrayor@paran.comchallenge_password.php?register=a4894331304b8dff8c34e92c3073547b&ln=paran.comchallenge_password.php?register=a4894331304b8dff8c34e92c3073547b HTTP/1.1
Host: cinbal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx/1.20.2
Date: Tue, 23 Apr 2024 23:37:11 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 0
Connection: keep-alive
Keep-Alive: timeout=60
Location: challenge_password.php?register=1b24b2d9a19e71e615a8e667e13e6bac&continue=1b24b2d9a19e71e615a8e667e13e6bac&ext_user=jrayor@paran.comchallenge_password.php?register=a4894331304b8dff8c34e92c3073547b&ln=paran.comchallenge_password.php?register=a4894331304b8dff8c34e92c3073547b
|
|
| cinbal.com/kr/genkorea/secured/challenge_password.php?register=1b24b2d9a19e71e615a8e667e13e6bac&continue=1b24b2d9a19e71e615a8e667e13e6bac&ext_user=jrayor@paran.comchallenge_password.php?register=a4894331304b8dff8c34e92c3073547b&ln=paran.comchallenge_password.php?register=a4894331304b8dff8c34e92c3073547b | 185.171.24.6 | 200 OK | 2.6 kB |
URL User Request GET HTTP/1.1cinbal.com/kr/genkorea/secured/challenge_password.php?register=1b24b2d9a19e71e615a8e667e13e6bac&continue=1b24b2d9a19e71e615a8e667e13e6bac&ext_user=jrayor@paran.comchallenge_password.php?register=a4894331304b8dff8c34e92c3073547b&ln=paran.comchallenge_password.php?register=a4894331304b8dff8c34e92c3073547b IP185.171.24.6:443 ASN#60721 Bursabil Teknoloji A.S.
CertificateIssuerLet's Encrypt Subjectwww.cinbal.com FingerprintFD:A5:F0:EC:D4:2F:01:EC:BB:49:56:7D:DF:FA:2E:09:23:F8:C1:EC ValidityThu, 04 Apr 2024 20:53:29 GMT - Wed, 03 Jul 2024 20:53:28 GMT
File typeHTML document, Unicode text, UTF-8 text, with CRLF line terminators Hashe3e808dad8d7413e2d30aa3da45c1ed9 a0cb8b9e6b23d23ae16481ff1927d836d9147db4 28eb76d601e2ecb993e8b663bbe53f79c2200ebcc0ad433f99b0cd2afa29e778
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /kr/genkorea/secured/challenge_password.php?register=1b24b2d9a19e71e615a8e667e13e6bac&continue=1b24b2d9a19e71e615a8e667e13e6bac&ext_user=jrayor@paran.comchallenge_password.php?register=a4894331304b8dff8c34e92c3073547b&ln=paran.comchallenge_password.php?register=a4894331304b8dff8c34e92c3073547b HTTP/1.1
Host: cinbal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Tue, 23 Apr 2024 23:37:14 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| cinbal.com/kr/genkorea/secured/resources/login_20171211.css | 185.171.24.6 | 200 OK | 1.1 kB |
URL GET HTTP/1.1cinbal.com/kr/genkorea/secured/resources/login_20171211.css IP185.171.24.6:443 ASN#60721 Bursabil Teknoloji A.S.
Requested byhttps://cinbal.com/kr/genkorea/secured/challenge_password.php?register=1b24b2d9a19e71e615a8e667e13e6bac&continue=1b24b2d9a19e71e615a8e667e13e6bac&ext_user=jrayor@paran.comchallenge_password.php?register=a4894331304b8dff8c34e92c3073547b&ln=paran.comchallenge_password.php?register=a4894331304b8dff8c34e92c3073547b CertificateIssuerLet's Encrypt Subjectwww.cinbal.com FingerprintFD:A5:F0:EC:D4:2F:01:EC:BB:49:56:7D:DF:FA:2E:09:23:F8:C1:EC ValidityThu, 04 Apr 2024 20:53:29 GMT - Wed, 03 Jul 2024 20:53:28 GMT
Hash5c937b80fe054cd4a27fc7a705465fa8 1d7548a7a8f2b3f5abdc269762da060d4a89e8e4 8d19f8b7bf4d7e64a4e68f7dabf11d832d083825ce381cb0170d0cf8f455c394
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /kr/genkorea/secured/resources/login_20171211.css HTTP/1.1
Host: cinbal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cinbal.com/kr/genkorea/secured/challenge_password.php?register=1b24b2d9a19e71e615a8e667e13e6bac&continue=1b24b2d9a19e71e615a8e667e13e6bac&ext_user=jrayor@paran.comchallenge_password.php?register=a4894331304b8dff8c34e92c3073547b&ln=paran.comchallenge_password.php?register=a4894331304b8dff8c34e92c3073547b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Tue, 23 Apr 2024 23:37:14 GMT
Content-Type: text/css
Last-Modified: Sun, 28 Mar 2021 19:56:04 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
ETag: W/"6060df54-d30"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
Strict-Transport-Security: max-age=31536000
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
|
|
| cinbal.com/kr/genkorea/secured/resources/icon_q.gif | 185.171.24.6 | 200 OK | 1.0 kB |
URL GET HTTP/1.1cinbal.com/kr/genkorea/secured/resources/icon_q.gif IP185.171.24.6:443 ASN#60721 Bursabil Teknoloji A.S.
Requested byhttps://cinbal.com/kr/genkorea/secured/challenge_password.php?register=1b24b2d9a19e71e615a8e667e13e6bac&continue=1b24b2d9a19e71e615a8e667e13e6bac&ext_user=jrayor@paran.comchallenge_password.php?register=a4894331304b8dff8c34e92c3073547b&ln=paran.comchallenge_password.php?register=a4894331304b8dff8c34e92c3073547b CertificateIssuerLet's Encrypt Subjectwww.cinbal.com FingerprintFD:A5:F0:EC:D4:2F:01:EC:BB:49:56:7D:DF:FA:2E:09:23:F8:C1:EC ValidityThu, 04 Apr 2024 20:53:29 GMT - Wed, 03 Jul 2024 20:53:28 GMT
File typeGIF image data, version 89a, 14 x 14 Hashf22de32f5d362b1ecd2fcca77d3be706 cd2b57a581ef3092eaed3378587971310de074f1 e82c9190da2464c70704c941ef7178a0e266e2abd641a899270d143cac0c5cf0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /kr/genkorea/secured/resources/icon_q.gif HTTP/1.1
Host: cinbal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cinbal.com/kr/genkorea/secured/challenge_password.php?register=1b24b2d9a19e71e615a8e667e13e6bac&continue=1b24b2d9a19e71e615a8e667e13e6bac&ext_user=jrayor@paran.comchallenge_password.php?register=a4894331304b8dff8c34e92c3073547b&ln=paran.comchallenge_password.php?register=a4894331304b8dff8c34e92c3073547b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Tue, 23 Apr 2024 23:37:14 GMT
Content-Type: image/gif
Last-Modified: Sun, 28 Mar 2021 19:56:00 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
ETag: W/"6060df50-51a"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
Strict-Transport-Security: max-age=31536000
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
|
|
| cinbal.com/kr/genkorea/secured/resources/btn_login.gif | 185.171.24.6 | 200 OK | 14 kB |
URL GET HTTP/1.1cinbal.com/kr/genkorea/secured/resources/btn_login.gif IP185.171.24.6:443 ASN#60721 Bursabil Teknoloji A.S.
Requested byhttps://cinbal.com/kr/genkorea/secured/challenge_password.php?register=1b24b2d9a19e71e615a8e667e13e6bac&continue=1b24b2d9a19e71e615a8e667e13e6bac&ext_user=jrayor@paran.comchallenge_password.php?register=a4894331304b8dff8c34e92c3073547b&ln=paran.comchallenge_password.php?register=a4894331304b8dff8c34e92c3073547b CertificateIssuerLet's Encrypt Subjectwww.cinbal.com FingerprintFD:A5:F0:EC:D4:2F:01:EC:BB:49:56:7D:DF:FA:2E:09:23:F8:C1:EC ValidityThu, 04 Apr 2024 20:53:29 GMT - Wed, 03 Jul 2024 20:53:28 GMT
File typeGIF image data, version 89a, 430 x 51 Hashee298c0a20befaffc13d6576f467e1ef 2c567aa3d97a4c68be4a0b8232c6444c00095c88 f37d860c03e260a217c423a65c5c0632a06b587dd6b22a2b6a7539a04201a0e5
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /kr/genkorea/secured/resources/btn_login.gif HTTP/1.1
Host: cinbal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cinbal.com/kr/genkorea/secured/challenge_password.php?register=1b24b2d9a19e71e615a8e667e13e6bac&continue=1b24b2d9a19e71e615a8e667e13e6bac&ext_user=jrayor@paran.comchallenge_password.php?register=a4894331304b8dff8c34e92c3073547b&ln=paran.comchallenge_password.php?register=a4894331304b8dff8c34e92c3073547b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Tue, 23 Apr 2024 23:37:14 GMT
Content-Type: image/gif
Last-Modified: Sun, 28 Mar 2021 19:56:04 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
ETag: W/"6060df54-35da"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
Strict-Transport-Security: max-age=31536000
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
|
|
| cinbal.com/kr/genkorea/secured/resources/pc_info.gif | 185.171.24.6 | 200 OK | 8.4 kB |
URL GET HTTP/1.1cinbal.com/kr/genkorea/secured/resources/pc_info.gif IP185.171.24.6:443 ASN#60721 Bursabil Teknoloji A.S.
Requested byhttps://cinbal.com/kr/genkorea/secured/challenge_password.php?register=1b24b2d9a19e71e615a8e667e13e6bac&continue=1b24b2d9a19e71e615a8e667e13e6bac&ext_user=jrayor@paran.comchallenge_password.php?register=a4894331304b8dff8c34e92c3073547b&ln=paran.comchallenge_password.php?register=a4894331304b8dff8c34e92c3073547b CertificateIssuerLet's Encrypt Subjectwww.cinbal.com FingerprintFD:A5:F0:EC:D4:2F:01:EC:BB:49:56:7D:DF:FA:2E:09:23:F8:C1:EC ValidityThu, 04 Apr 2024 20:53:29 GMT - Wed, 03 Jul 2024 20:53:28 GMT
File typeGIF image data, version 89a, 350 x 150 Hash25bee8d16ee2bb9bd1bd781038414e8a bd7c892a42f7726fe8aa5be4d0d79b8882a91a8d 01fd108a05b75218626e2847f31f4af80c1228280cac5e367c00c0456f985ea8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /kr/genkorea/secured/resources/pc_info.gif HTTP/1.1
Host: cinbal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cinbal.com/kr/genkorea/secured/challenge_password.php?register=1b24b2d9a19e71e615a8e667e13e6bac&continue=1b24b2d9a19e71e615a8e667e13e6bac&ext_user=jrayor@paran.comchallenge_password.php?register=a4894331304b8dff8c34e92c3073547b&ln=paran.comchallenge_password.php?register=a4894331304b8dff8c34e92c3073547b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Tue, 23 Apr 2024 23:37:14 GMT
Content-Type: image/gif
Last-Modified: Sun, 28 Mar 2021 19:56:00 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
ETag: W/"6060df50-2129"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
Strict-Transport-Security: max-age=31536000
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
|
|
| cinbal.com/kr/genkorea/secured/resources/key_safe_1.gif | 185.171.24.6 | 200 OK | 4.2 kB |
URL GET HTTP/1.1cinbal.com/kr/genkorea/secured/resources/key_safe_1.gif IP185.171.24.6:443 ASN#60721 Bursabil Teknoloji A.S.
Requested byhttps://cinbal.com/kr/genkorea/secured/challenge_password.php?register=1b24b2d9a19e71e615a8e667e13e6bac&continue=1b24b2d9a19e71e615a8e667e13e6bac&ext_user=jrayor@paran.comchallenge_password.php?register=a4894331304b8dff8c34e92c3073547b&ln=paran.comchallenge_password.php?register=a4894331304b8dff8c34e92c3073547b CertificateIssuerLet's Encrypt Subjectwww.cinbal.com FingerprintFD:A5:F0:EC:D4:2F:01:EC:BB:49:56:7D:DF:FA:2E:09:23:F8:C1:EC ValidityThu, 04 Apr 2024 20:53:29 GMT - Wed, 03 Jul 2024 20:53:28 GMT
File typeGIF image data, version 89a, 295 x 88 Hashdc15046d6a2296f67c2f650fe2c196f3 7612cf4fd9f2faa133534b7d86e69649292f7d31 8ee303fb808f4728ac70b20a7988501e2add6b341d5f42d6df3fb5a34926511f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /kr/genkorea/secured/resources/key_safe_1.gif HTTP/1.1
Host: cinbal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cinbal.com/kr/genkorea/secured/challenge_password.php?register=1b24b2d9a19e71e615a8e667e13e6bac&continue=1b24b2d9a19e71e615a8e667e13e6bac&ext_user=jrayor@paran.comchallenge_password.php?register=a4894331304b8dff8c34e92c3073547b&ln=paran.comchallenge_password.php?register=a4894331304b8dff8c34e92c3073547b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Tue, 23 Apr 2024 23:37:14 GMT
Content-Type: image/gif
Last-Modified: Sun, 28 Mar 2021 19:56:04 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
ETag: W/"6060df54-1063"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
Strict-Transport-Security: max-age=31536000
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
|
|
| cinbal.com/kr/genkorea/secured/resources/ico_close.gif | 185.171.24.6 | 200 OK | 52 B |
URL GET HTTP/1.1cinbal.com/kr/genkorea/secured/resources/ico_close.gif IP185.171.24.6:443 ASN#60721 Bursabil Teknoloji A.S.
Requested byhttps://cinbal.com/kr/genkorea/secured/challenge_password.php?register=1b24b2d9a19e71e615a8e667e13e6bac&continue=1b24b2d9a19e71e615a8e667e13e6bac&ext_user=jrayor@paran.comchallenge_password.php?register=a4894331304b8dff8c34e92c3073547b&ln=paran.comchallenge_password.php?register=a4894331304b8dff8c34e92c3073547b CertificateIssuerLet's Encrypt Subjectwww.cinbal.com FingerprintFD:A5:F0:EC:D4:2F:01:EC:BB:49:56:7D:DF:FA:2E:09:23:F8:C1:EC ValidityThu, 04 Apr 2024 20:53:29 GMT - Wed, 03 Jul 2024 20:53:28 GMT
File typeGIF image data, version 89a, 7 x 7 Hashae2dfd775c369a283ba7cb8250c75302 49d6cc85a75a85f6410f8c78005f5a3ef55668f5 5502a938ad55c65d6fd706e44e4fab36034bcdb36d2d86c19908665d8b7f2c7d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /kr/genkorea/secured/resources/ico_close.gif HTTP/1.1
Host: cinbal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cinbal.com/kr/genkorea/secured/challenge_password.php?register=1b24b2d9a19e71e615a8e667e13e6bac&continue=1b24b2d9a19e71e615a8e667e13e6bac&ext_user=jrayor@paran.comchallenge_password.php?register=a4894331304b8dff8c34e92c3073547b&ln=paran.comchallenge_password.php?register=a4894331304b8dff8c34e92c3073547b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Tue, 23 Apr 2024 23:37:14 GMT
Content-Type: image/gif
Content-Length: 52
Last-Modified: Sun, 28 Mar 2021 19:56:00 GMT
Connection: keep-alive
Keep-Alive: timeout=60
ETag: "6060df50-34"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
Strict-Transport-Security: max-age=31536000
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Accept-Ranges: bytes
|
|
| cinbal.com/kr/genkorea/secured/resources/key_safe_2.gif | 185.171.24.6 | 200 OK | 4.8 kB |
URL GET HTTP/1.1cinbal.com/kr/genkorea/secured/resources/key_safe_2.gif IP185.171.24.6:443 ASN#60721 Bursabil Teknoloji A.S.
Requested byhttps://cinbal.com/kr/genkorea/secured/challenge_password.php?register=1b24b2d9a19e71e615a8e667e13e6bac&continue=1b24b2d9a19e71e615a8e667e13e6bac&ext_user=jrayor@paran.comchallenge_password.php?register=a4894331304b8dff8c34e92c3073547b&ln=paran.comchallenge_password.php?register=a4894331304b8dff8c34e92c3073547b CertificateIssuerLet's Encrypt Subjectwww.cinbal.com FingerprintFD:A5:F0:EC:D4:2F:01:EC:BB:49:56:7D:DF:FA:2E:09:23:F8:C1:EC ValidityThu, 04 Apr 2024 20:53:29 GMT - Wed, 03 Jul 2024 20:53:28 GMT
File typeGIF image data, version 89a, 295 x 88 Hasha5eaa7013acd784cca416754355068ec f784a6b88ec4ce2b113715e4e782e88dae614248 e201b1d9ad8c002d58eb52494f836b2da9b8fc0f5764a90fd3180d8cbeb875ae
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /kr/genkorea/secured/resources/key_safe_2.gif HTTP/1.1
Host: cinbal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cinbal.com/kr/genkorea/secured/challenge_password.php?register=1b24b2d9a19e71e615a8e667e13e6bac&continue=1b24b2d9a19e71e615a8e667e13e6bac&ext_user=jrayor@paran.comchallenge_password.php?register=a4894331304b8dff8c34e92c3073547b&ln=paran.comchallenge_password.php?register=a4894331304b8dff8c34e92c3073547b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Tue, 23 Apr 2024 23:37:14 GMT
Content-Type: image/gif
Last-Modified: Sun, 28 Mar 2021 19:56:04 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
ETag: W/"6060df54-127e"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
Strict-Transport-Security: max-age=31536000
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
|
|
| cinbal.com/kr/genkorea/secured/resources/notosanskr.css | 185.171.24.6 | 404 Not Found | 20 kB |
URL GET HTTP/1.1cinbal.com/kr/genkorea/secured/resources/notosanskr.css IP185.171.24.6:443 ASN#60721 Bursabil Teknoloji A.S.
Requested byhttps://cinbal.com/kr/genkorea/secured/challenge_password.php?register=1b24b2d9a19e71e615a8e667e13e6bac&continue=1b24b2d9a19e71e615a8e667e13e6bac&ext_user=jrayor@paran.comchallenge_password.php?register=a4894331304b8dff8c34e92c3073547b&ln=paran.comchallenge_password.php?register=a4894331304b8dff8c34e92c3073547b CertificateIssuerLet's Encrypt Subjectwww.cinbal.com FingerprintFD:A5:F0:EC:D4:2F:01:EC:BB:49:56:7D:DF:FA:2E:09:23:F8:C1:EC ValidityThu, 04 Apr 2024 20:53:29 GMT - Wed, 03 Jul 2024 20:53:28 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (9462), with CRLF, LF line terminators Hashce7b281569a08352aa1095e91c491cef b4884b48f7e4bfef14d9bf51de661bcc80080762 a4e1f72ce82f5e00cf17c9fe27ad02b40a8fd0998bf3bfb8fb92c311abab70b0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /kr/genkorea/secured/resources/notosanskr.css HTTP/1.1
Host: cinbal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cinbal.com/kr/genkorea/secured/resources/login_20171211.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx/1.20.2
Date: Tue, 23 Apr 2024 23:37:18 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <https://cinbal.com/wp-json/>; rel="https://api.w.org/"
Content-Encoding: gzip
|
|
| cinbal.com/kr/genkorea/secured/resources/Mail2.ico | 185.171.24.6 | 200 OK | 26 kB |
URL GET HTTP/1.1cinbal.com/kr/genkorea/secured/resources/Mail2.ico IP185.171.24.6:443 ASN#60721 Bursabil Teknoloji A.S.
Requested byhttps://cinbal.com/kr/genkorea/secured/challenge_password.php?register=1b24b2d9a19e71e615a8e667e13e6bac&continue=1b24b2d9a19e71e615a8e667e13e6bac&ext_user=jrayor@paran.comchallenge_password.php?register=a4894331304b8dff8c34e92c3073547b&ln=paran.comchallenge_password.php?register=a4894331304b8dff8c34e92c3073547b CertificateIssuerLet's Encrypt Subjectwww.cinbal.com FingerprintFD:A5:F0:EC:D4:2F:01:EC:BB:49:56:7D:DF:FA:2E:09:23:F8:C1:EC ValidityThu, 04 Apr 2024 20:53:29 GMT - Wed, 03 Jul 2024 20:53:28 GMT
File typeMS Windows icon resource - 8 icons, -128x-128, 32 bits/pixel, 96x96, 32 bits/pixel Hashb8f12698f14bcc2346a87ca341e0e424 848fc3d4d79e3884f5ad0432d34d02499d004ebe eac5b579587ea935058c5a22808bb64cea4158bcfd9949af6733b55a53fcb32b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /kr/genkorea/secured/resources/Mail2.ico HTTP/1.1
Host: cinbal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cinbal.com/kr/genkorea/secured/challenge_password.php?register=1b24b2d9a19e71e615a8e667e13e6bac&continue=1b24b2d9a19e71e615a8e667e13e6bac&ext_user=jrayor@paran.comchallenge_password.php?register=a4894331304b8dff8c34e92c3073547b&ln=paran.comchallenge_password.php?register=a4894331304b8dff8c34e92c3073547b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Tue, 23 Apr 2024 23:37:18 GMT
Content-Type: image/x-icon
Last-Modified: Sun, 28 Mar 2021 19:56:04 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
ETag: W/"6060df54-27846"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
Strict-Transport-Security: max-age=31536000
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
|
|
| aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml |  35.244.181.201 | | 444 B |
URL aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml IP35.244.181.201:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
File typeXML 1.0 document, ASCII text, with very long lines (332) Hash3b324dec137a87ef7e24a30a65b13dd0 c0faa95b2f1018e264b3a14aaf50d1003e6c27b3 6cd0b591d9239fc8564627e92a804fc261951b1cbaf5fa58a8ada3cc13f51463
GET /update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml HTTP/1.1
Host: aus5.mozilla.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Cache-Control: no-cache
Pragma: no-cache
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
rule-id: unknown
rule-data-version: unknown
content-signature: x5u=https://content-signature-2.cdn.mozilla.net/chains/aus.content-signature.mozilla.org-2024-06-09-11-51-10.chain; p384ecdsa=PKIIiB5n0hXA9n0HdnQDxslLyME5XqaqIqvqtSvcWnR6hkum5tT0XadX4JDRInwbRFRQPvr1EvgMS5Ttee6n_mH9YBKKO1fVhi0pyDAwUTagReIrJXxcTvrwtb2XGf6W
strict-transport-security: max-age=31536000;
x-content-type-options: nosniff
content-security-policy: default-src 'none'; frame-ancestors 'none'
x-proxy-cache-status: MISS
content-encoding: gzip
via: 1.1 google
date: Wed, 24 Apr 2024 00:02:30 GMT
content-type: text/xml; charset=utf-8
vary: Accept-Encoding
content-length: 444
age: 40
cache-control: public,max-age=90
alt-svc: clear
X-Firefox-Spdy: h2
|
|