Report - etracking.nso.go.th/userfiles/file/111/tasklist.exe

Report Overview

Submitted URL
etracking.nso.go.th/userfiles/file/111/tasklist.exe
IP
104.26.3.138
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-25 20:48:40
Access
public
Website Title
etracking.nso.go.th | 520: Web server is returning an unknown error
Final URL
etracking.nso.go.th/userfiles/file/111/tasklist.exe
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
1
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
etracking.nso.go.th	unknown	1999-01-17	2022-11-23	2023-10-13	3.9 kB	33 kB	104.26.2.138

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-04-25 20:48:34	medium	Client IP	192.169.69.26	ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (1)

	URL	Size	First Seen	Last Seen
	etracking.nso.go.th/userfiles/file/111/tasklist.exe	393 B	2023-04-05	2024-05-05
Pretty URL etracking.nso.go.th/userfiles/file/111/tasklist.exe IP 104.26.2.138 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-04-05 04:39:40 Last Seen2024-05-05 21:10:09 Times Seen70156 Hash 34ad0a116707d3b794129a6720af92d7 424de9dbb8bc774e2a2d4ade100d90f5ac0ecbf4 d011a9449a990f2086894be870adc6fbb53595dc593b410a83e45e40bfbc7262 Loading...

HTTP Transactions (10)

	URL	IP	Response	Size
	etracking.nso.go.th/userfiles/file/111/tasklist.exe	104.26.2.138	520	6.9 kB
URL User Request GET HTTP/1.1 etracking.nso.go.th/userfiles/file/111/tasklist.exe IP 104.26.2.138:80 ASN #13335 CLOUDFLARENET File type HTML document, ASCII text, with very long lines (394) Size 6.9 kB (6902 bytes) Hash 3412987b3b838d963066cf5abd28b5dc 5de7224a0791498db927a9005a2104a903a7f31e 37c76fba09db1cf604efb937163a54a7a39a69226e1d7a5b1d6ccc2180356932 HTTP Headers `GET /userfiles/file/111/tasklist.exe HTTP/1.1 Host: etracking.nso.go.th User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 525 No Reason Phrase date: Thu, 25 Apr 2024 20:48:25 GMT content-type: text/html; charset=UTF-8 content-length: 6902 report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fFBFMvOyLWbvf0zN1RbYWbkNLbahNw8UYJ3Nr2YL3PaQc%2ByKIfVovhnaV89r83xqSWMyPZolAl0uafmnXaBgPFGivhfm7gF%2FuVFUucgTRNy8sWDtx5Az7VZlHUy2TJPOBxpSg%2FA%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} vary: Accept-Encoding x-frame-options: SAMEORIGIN referrer-policy: same-origin cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 expires: Thu, 01 Jan 1970 00:00:01 GMT server: cloudflare cf-ray: 87a1315efb98568e-OSL X-Firefox-Spdy: h2

	etracking.nso.go.th/	104.26.3.138		7.2 kB
URL etracking.nso.go.th/ IP 104.26.3.138:0 ASN #13335 CLOUDFLARENET File type HTML document, ASCII text, with very long lines (525) Size 7.2 kB (7203 bytes) Hash b3664c21de17c35b1a5d5b67bb01ed75 f6ee0132cad4757ad836e92341a57336e575ac3c dd4a5a1aa209d5fec3ea571dda1e853531eeaf95cc591f89e4494b268fc36a75 HTTP Headers `GET / HTTP/1.1 Host: etracking.nso.go.th User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 520 Date: Thu, 25 Apr 2024 20:48:28 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 7203 Connection: keep-alive Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dygQi94VtRZEHeptJ8XRdrhOrekcCBoPonksLoTfAR%2FPF0dgMPbqecj6M1KLhW29tqkGrJz16fcG6wmnZr5uKQXtQIfEKNEz1O5Yra%2B%2BKmseU0dBs1e6F0VvHYN4BveqpmyDQSY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} X-Frame-Options: SAMEORIGIN Referrer-Policy: same-origin Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Server: cloudflare CF-RAY: 87a131715e06b517-OSL alt-svc: h2=":443"; ma=60

	etracking.nso.go.th/userfiles/file/111/tasklist.exe	172.67.69.152	520	7.2 kB
URL User Request GET HTTP/1.1 etracking.nso.go.th/userfiles/file/111/tasklist.exe IP 172.67.69.152:80 ASN #13335 CLOUDFLARENET File type HTML document, ASCII text, with very long lines (525) Size 7.2 kB (7203 bytes) Hash 1c6206f24ebeb021f75d3c531d7f7801 953c18be30e568b4cd362855aa9691b4e78b8ead ce55dfc7b0fbc71c4e0e36ad7459a9b97d87dea6902605cef14a41751016c0e5 HTTP Headers `GET /userfiles/file/111/tasklist.exe HTTP/1.1 Host: etracking.nso.go.th User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 520 Date: Thu, 25 Apr 2024 20:48:36 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 7203 Connection: keep-alive Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8Z%2Bg7IWJpS2maHEXMS1Wst%2BgQ%2FnR5ErkO61ENS5f6uNGdV%2BfUwcFUb0WEqMrmvzoBd6eZrxTf1Mnt2I4LwoENplRBMae5Psuhwhtt7mrct7vA2dH%2BlFHHz9ZQ8wf5LOnJaHAK6g%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN Referrer-Policy: same-origin Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Server: cloudflare CF-RAY: 87a131a15b88b527-OSL alt-svc: h2=":443"; ma=60

	etracking.nso.go.th/cdn-cgi/styles/main.css	172.67.69.152	200 OK	2.2 kB
URL GET HTTP/1.1 etracking.nso.go.th/cdn-cgi/styles/main.css IP 172.67.69.152:80 ASN #13335 CLOUDFLARENET Requested by http://etracking.nso.go.th/userfiles/file/111/tasklist.exe File type ASCII text, with very long lines (8012) Size 2.2 kB (2176 bytes) Hash ff26f59e28a5fe6ea4ab23586415696b 4182675484d175e363cd34b43041b7b1af93d0cd d30b4ea6f68456672f5abb35e9dcf7d54226372b66e9d60a7ee26b7a52568e74 HTTP Headers `GET /cdn-cgi/styles/main.css HTTP/1.1 Host: etracking.nso.go.th User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://etracking.nso.go.th/userfiles/file/111/tasklist.exe DNT: 1 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 20:48:36 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: keep-alive Last-Modified: Fri, 19 Apr 2024 20:54:07 GMT ETag: W/"6622d9ef-1f4d" Server: cloudflare CF-RAY: 87a131e48fe0b527-OSL X-Frame-Options: DENY X-Content-Type-Options: nosniff Vary: Accept-Encoding Expires: Thu, 25 Apr 2024 22:48:36 GMT Cache-Control: max-age=7200, public Content-Encoding: gzip`

	etracking.nso.go.th/cdn-cgi/images/cf-icon-browser.png	172.67.69.152	200 OK	484 B
URL GET HTTP/1.1 etracking.nso.go.th/cdn-cgi/images/cf-icon-browser.png IP 172.67.69.152:80 ASN #13335 CLOUDFLARENET Requested by http://etracking.nso.go.th/userfiles/file/111/tasklist.exe File type PNG image data, 100 x 80, 8-bit colormap, non-interlaced Size 484 B (484 bytes) Hash 59caf3c7eb63af78f12db37f41433779 8024e688e78e910ae1ea3bc25be7a7ab65444b02 78a7d8b29cabf16831417dba1b9bbe36fae0d060a35a495e8f10e9663b3c9e65 HTTP Headers `GET /cdn-cgi/images/cf-icon-browser.png HTTP/1.1 Host: etracking.nso.go.th User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://etracking.nso.go.th/cdn-cgi/styles/main.css Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 20:48:36 GMT Content-Type: image/png Content-Length: 484 Connection: keep-alive Last-Modified: Fri, 19 Apr 2024 20:54:07 GMT ETag: "6622d9ef-1e4" Server: cloudflare CF-RAY: 87a131e4a801b527-OSL X-Frame-Options: DENY X-Content-Type-Options: nosniff Vary: Accept-Encoding Expires: Thu, 25 Apr 2024 22:48:36 GMT Cache-Control: max-age=7200, public Accept-Ranges: bytes`

	etracking.nso.go.th/cdn-cgi/images/cf-icon-cloud.png	172.67.69.152	200 OK	1.5 kB
URL GET HTTP/1.1 etracking.nso.go.th/cdn-cgi/images/cf-icon-cloud.png IP 172.67.69.152:80 ASN #13335 CLOUDFLARENET Requested by http://etracking.nso.go.th/userfiles/file/111/tasklist.exe File type PNG image data, 152 x 77, 8-bit colormap, non-interlaced Size 1.5 kB (1484 bytes) Hash 3ec81e5e3a4de9fec46ce9e6999b9e27 8f03b6857ab8d31feb65f97b1ae6b678efdc2ddd 3a223426c67a0a33ff57af68a57fb589fea36af2a6e8f9dae7798c77471e0e58 HTTP Headers `GET /cdn-cgi/images/cf-icon-cloud.png HTTP/1.1 Host: etracking.nso.go.th User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://etracking.nso.go.th/cdn-cgi/styles/main.css Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 20:48:36 GMT Content-Type: image/png Content-Length: 1484 Connection: keep-alive Last-Modified: Fri, 19 Apr 2024 20:54:07 GMT ETag: "6622d9ef-5cc" Server: cloudflare CF-RAY: 87a131e4b80ab527-OSL X-Frame-Options: DENY X-Content-Type-Options: nosniff Vary: Accept-Encoding Expires: Thu, 25 Apr 2024 22:48:36 GMT Cache-Control: max-age=7200, public Accept-Ranges: bytes`

	etracking.nso.go.th/cdn-cgi/images/cf-icon-ok.png	172.67.69.152	200 OK	946 B
URL GET HTTP/1.1 etracking.nso.go.th/cdn-cgi/images/cf-icon-ok.png IP 172.67.69.152:80 ASN #13335 CLOUDFLARENET Requested by http://etracking.nso.go.th/userfiles/file/111/tasklist.exe File type PNG image data, 48 x 48, 8-bit colormap, non-interlaced Size 946 B (946 bytes) Hash dfaf0fbb758c874be231335db178381d 8f2597eb7ba4c89892aac0559816db3f5280b23e ed732380ee3ff0f2d841784da213c8c05d2b5ae187a5217b419d21cae5cedb1b HTTP Headers `GET /cdn-cgi/images/cf-icon-ok.png HTTP/1.1 Host: etracking.nso.go.th User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://etracking.nso.go.th/cdn-cgi/styles/main.css Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 20:48:36 GMT Content-Type: image/png Content-Length: 946 Connection: keep-alive Last-Modified: Fri, 19 Apr 2024 20:54:07 GMT ETag: "6622d9ef-3b2" Server: cloudflare CF-RAY: 87a131e4b80456bf-OSL X-Frame-Options: DENY X-Content-Type-Options: nosniff Vary: Accept-Encoding Expires: Thu, 25 Apr 2024 22:48:36 GMT Cache-Control: max-age=7200, public Accept-Ranges: bytes`

	etracking.nso.go.th/cdn-cgi/images/cf-icon-server.png	172.67.69.152	200 OK	1.4 kB
URL GET HTTP/1.1 etracking.nso.go.th/cdn-cgi/images/cf-icon-server.png IP 172.67.69.152:80 ASN #13335 CLOUDFLARENET Requested by http://etracking.nso.go.th/userfiles/file/111/tasklist.exe File type PNG image data, 95 x 75, 8-bit colormap, non-interlaced Size 1.4 kB (1384 bytes) Hash 2c11e67182601007f577f8bf2c72fee8 01dc915d4745f00632021c05d3eef634747a9c3d 41553a537f85839927155af093b7bfa1987215f474ed038714609cc48812ea3b HTTP Headers `GET /cdn-cgi/images/cf-icon-server.png HTTP/1.1 Host: etracking.nso.go.th User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://etracking.nso.go.th/cdn-cgi/styles/main.css Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 20:48:36 GMT Content-Type: image/png Content-Length: 1384 Connection: keep-alive Last-Modified: Fri, 19 Apr 2024 20:54:07 GMT ETag: "6622d9ef-568" Server: cloudflare CF-RAY: 87a131e4b9265684-OSL X-Frame-Options: DENY X-Content-Type-Options: nosniff Vary: Accept-Encoding Expires: Thu, 25 Apr 2024 22:48:36 GMT Cache-Control: max-age=7200, public Accept-Ranges: bytes`

	etracking.nso.go.th/cdn-cgi/images/cf-icon-error.png	172.67.69.152	200 OK	854 B
URL GET HTTP/1.1 etracking.nso.go.th/cdn-cgi/images/cf-icon-error.png IP 172.67.69.152:80 ASN #13335 CLOUDFLARENET Requested by http://etracking.nso.go.th/userfiles/file/111/tasklist.exe File type PNG image data, 48 x 48, 8-bit colormap, non-interlaced Size 854 B (854 bytes) Hash e5577f04b6d92590410e26bd2292933b 16946b2c99d98a57f83eac170ce94b012b7d1a7b 67f70597a183fbca7fac55d609fbaac5c34bb4d4d32a0530bbbbb42591f2de2f HTTP Headers `GET /cdn-cgi/images/cf-icon-error.png HTTP/1.1 Host: etracking.nso.go.th User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://etracking.nso.go.th/cdn-cgi/styles/main.css Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 20:48:36 GMT Content-Type: image/png Content-Length: 854 Connection: keep-alive Last-Modified: Fri, 19 Apr 2024 20:54:07 GMT ETag: "6622d9ef-356" Server: cloudflare CF-RAY: 87a131e4b80f56bf-OSL X-Frame-Options: DENY X-Content-Type-Options: nosniff Vary: Accept-Encoding Expires: Thu, 25 Apr 2024 22:48:36 GMT Cache-Control: max-age=7200, public Accept-Ranges: bytes`

	etracking.nso.go.th/favicon.ico	0.0.0.0		0 B
URL GET etracking.nso.go.th/favicon.ico IP 0.0.0.0:0 ASN #0 Requested by http://etracking.nso.go.th/userfiles/file/111/tasklist.exe File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /favicon.ico HTTP/1.1 Host: etracking.nso.go.th User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://etracking.nso.go.th/userfiles/file/111/tasklist.exe DNT: 1 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache`

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (1)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (10)

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1