Report - cpeople.co.kr/spon/winsearch_license.txt

Report Overview

Visited public
2025-02-11 10:41:51
Tags
URL
cpeople.co.kr/spon/winsearch_license.txt
Finishing URL
cpeople.co.kr/spon/winsearch_license.txt
IP / ASN
112.175.246.82
#4766 Korea Telecom
Title
403 Forbidden

Detections

urlquery

0

Network Intrusion Detection

2

Threat Detection Systems

0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
cpeople.co.kr	unknown	2021-01-17	2012-11-01	2025-02-06	797 B	828 B	112.175.246.82

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2025-02-11 10:41:22	medium	112.175.246.82	Client IP	ET INFO Suspicious Self Signed SSL Certificate to 'My Company Ltd'
2025-02-11 10:41:23	medium	112.175.246.82	Client IP	ET INFO Suspicious Self Signed SSL Certificate to 'My Company Ltd'

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (2)

	URL	IP	Response	Size
	GET cpeople.co.kr/spon/winsearch_license.txt	112.175.246.82	403 Forbidden	200 B
URL User Request GET HTTP/1.1 cpeople.co.kr/spon/winsearch_license.txt IP 112.175.246.82:80 ASN #4766 Korea Telecom File type HTML document, ASCII text Size 200 B (200 bytes) Hash e8d511609a6f4bafe0c7a491c8cd2d17 577d8ea06940092ddec41d14d602f07acd8b7aaf ec807e311647626b7a86782857c76784984181f12c0f49161b9267c453905152 HTTP Headers `GET /spon/winsearch_license.txt HTTP/1.1 Host: cpeople.co.kr User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 403 Forbidden Server: nginx Date: Tue, 11 Feb 2025 10:41:23 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding Content-Encoding: gzip`

	GET cpeople.co.kr/favicon.ico	112.175.246.82	403 Forbidden	188 B
URL GET HTTP/1.1 cpeople.co.kr/favicon.ico IP 112.175.246.82:80 ASN #4766 Korea Telecom Requested by http://cpeople.co.kr/spon/winsearch_license.txt File type HTML document, ASCII text Size 188 B (188 bytes) Hash ef76c85a6c4cafc3b112dc0935037b34 19f2a6ade35376b557a241d3e43a5990c05ed0ad d7e792a78d2a5dbb569b9dd522f07f5718d29094e86e90011ed814e7b7756b81 HTTP Headers `GET /favicon.ico HTTP/1.1 Host: cpeople.co.kr User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://cpeople.co.kr/spon/winsearch_license.txt Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 403 Forbidden Server: nginx Date: Tue, 11 Feb 2025 10:41:23 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding Content-Encoding: gzip`