Report - 101.101.170.135/login

Report Overview

Submitted URL
101.101.170.135/login
IP
101.101.170.135
ASN
#135354 NAVER BUSINESS PLATFORM ASIA PACIFIC PTE. LTD.
Submitted
2024-04-26 22:17:57
Access
public
Website Title
사이버한국외국어대학교
Final URL
www.cufs.ac.kr/intro/intro.html
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
lms.cufs.ac.kr	unknown	unknown	No data	No data	2.2 kB	1.2 kB	101.101.171.123
sso.cufs.ac.kr	unknown	unknown	No data	No data	548 B	520 B	121.78.185.75
www.cufs.ac.kr	unknown	unknown	No data	No data	3.0 kB	1.0 MB	108.157.229.24
101.101.170.135	unknown	unknown	2023-06-06	2023-06-06	391 B	879 B	101.101.170.135

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-26	medium	101.101.170.135	Sinkholed

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (12)

URL IP Response Size

101.101.170.135/login

101.101.170.135

302 Found

115 B

URL User Request GET HTTP/1.1
101.101.170.135/login
IP
101.101.170.135:80
ASN
#135354 NAVER BUSINESS PLATFORM ASIA PACIFIC PTE. LTD.

File type
HTML document, ASCII text, with no line terminators
Size
115 B (115 bytes)
Hash
dab8b9305e7dbc7fb84d0df8c16e47bd
3376e6a427a0ef9844b4365f5fd23cb2ba5dc87f
378c8a24998e26cf5ebfeebe7569992766a6e70e267a6364c482ad0937a9e4ea

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /login HTTP/1.1
Host: 101.101.170.135
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Date: Fri, 26 Apr 2024 22:17:31 GMT
Server: Apache
X-Request-Context-Id: f5d48af6-68b6-45f1-bab7-672b41ca39c1
X-Rate-Limit-Remaining: 600.0
X-Canvas-Meta: o=login;n=new;b=1203640;m=1203640;u=0.01;y=0.00;d=0.00;
Pragma: no-cache
X-Frame-Options: SAMEORIGIN
X-Request-Cost: 0.008000000000009777
Cache-Control: no-cache, no-store
Referrer-Policy: no-referrer-when-downgrade
X-Permitted-Cross-Domain-Policies: none
X-XSS-Protection: 1; mode=block
X-Download-Options: noopen
X-Runtime: 0.008311
X-Content-Type-Options: nosniff
X-Powered-By: Phusion Passenger 5.0.27
Location: https://lms.cufs.ac.kr/exsignon/sso/sso_index.php
Status: 302 Found
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=utf-8

lms.cufs.ac.kr/exsignon/sso/sso_index.php

101.101.171.123

302 Found

3 B

URL User Request GET HTTP/1.1
lms.cufs.ac.kr/exsignon/sso/sso_index.php
IP
101.101.171.123:443
ASN
#135354 NAVER BUSINESS PLATFORM ASIA PACIFIC PTE. LTD.

Certificate
IssuerSectigo Limited
Subject*.cufs.ac.kr
FingerprintF2:BF:4B:B0:EB:5C:D3:26:89:E1:09:C9:67:B3:27:B3:A5:EB:05:34
ValidityFri, 08 Mar 2024 00:00:00 GMT - Mon, 07 Apr 2025 23:59:59 GMT

File type
Unicode text, UTF-8 text, with no line terminators
Size
3 B (3 bytes)
Hash
ecaa88f7fa0bf610a5a26cf545dcd3aa
57218c316b6921e2cd61027a2387edc31a2d9471
f1945cd6c19e56b3c1c78943ef5ec18116907a4ca1efc40a57d48ab1db7adfc5

HTTP Headers

GET /exsignon/sso/sso_index.php HTTP/1.1
Host: lms.cufs.ac.kr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Date: Fri, 26 Apr 2024 22:17:34 GMT
Server: Apache
Set-Cookie: PHPSESSID=t0ndn51pfb651sbvh9e93hba2d; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Location: https://sso.cufs.ac.kr/svc/tk/Auth.eps?id=lms&ac=N&ifa=N&RelayState=%2Fexsignon%2Fsso%2Fsso_index.php&
Content-Length: 3
Connection: close
Content-Type: text/html; charset=UTF-8

sso.cufs.ac.kr/svc/tk/Auth.eps?id=lms&ac=N&ifa=N&RelayState=%2Fexsignon%2Fsso%2Fsso_index.php&

121.78.185.75

302 302

0 B

URL User Request GET HTTP/1.1
sso.cufs.ac.kr/svc/tk/Auth.eps?id=lms&ac=N&ifa=N&RelayState=%2Fexsignon%2Fsso%2Fsso_index.php&
IP
121.78.185.75:443
ASN
#9286 KINX

Certificate
IssuerSectigo Limited
Subject*.cufs.ac.kr
FingerprintF2:BF:4B:B0:EB:5C:D3:26:89:E1:09:C9:67:B3:27:B3:A5:EB:05:34
ValidityFri, 08 Mar 2024 00:00:00 GMT - Mon, 07 Apr 2025 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /svc/tk/Auth.eps?id=lms&ac=N&ifa=N&RelayState=%2Fexsignon%2Fsso%2Fsso_index.php& HTTP/1.1
Host: sso.cufs.ac.kr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 302
Date: Fri, 26 Apr 2024 22:17:35 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_jk/1.2.48
P3P: CP="IDC DSP COR ADMi DEVi TAIi PSAi PSDi IVAi IVDi CON OUR OTR IND CNT COM INT"
Access-Control-Allow-Origin: https://idp.net:8443
Location: https://lms.cufs.ac.kr/exsignon/sso/sso_identify.php?status=failure&failureCause=unauthorized&RelayState=%2Fexsignon%2Fsso%2Fsso_index.php
Content-Length: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/postscript

lms.cufs.ac.kr/exsignon/sso/sso_identify.php?status=failure&failureCause=unauthorized&RelayState=%2Fexsignon%2Fsso%2Fsso_index.php

101.101.170.135

302 Found

3 B

URL User Request GET HTTP/1.1
lms.cufs.ac.kr/exsignon/sso/sso_identify.php?status=failure&failureCause=unauthorized&RelayState=%2Fexsignon%2Fsso%2Fsso_index.php
IP
101.101.170.135:443
ASN
#135354 NAVER BUSINESS PLATFORM ASIA PACIFIC PTE. LTD.

Certificate
IssuerSectigo Limited
Subject*.cufs.ac.kr
FingerprintF2:BF:4B:B0:EB:5C:D3:26:89:E1:09:C9:67:B3:27:B3:A5:EB:05:34
ValidityFri, 08 Mar 2024 00:00:00 GMT - Mon, 07 Apr 2025 23:59:59 GMT

File type
Unicode text, UTF-8 text, with no line terminators
Size
3 B (3 bytes)
Hash
ecaa88f7fa0bf610a5a26cf545dcd3aa
57218c316b6921e2cd61027a2387edc31a2d9471
f1945cd6c19e56b3c1c78943ef5ec18116907a4ca1efc40a57d48ab1db7adfc5

HTTP Headers

GET /exsignon/sso/sso_identify.php?status=failure&failureCause=unauthorized&RelayState=%2Fexsignon%2Fsso%2Fsso_index.php HTTP/1.1
Host: lms.cufs.ac.kr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=t0ndn51pfb651sbvh9e93hba2d
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Date: Fri, 26 Apr 2024 22:17:36 GMT
Server: Apache
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Location: /exsignon/sso/sso_index.php
Content-Length: 3
Connection: close
Content-Type: text/html; charset=UTF-8

lms.cufs.ac.kr/exsignon/sso/sso_index.php

101.101.170.135

302 Found

3 B

URL User Request GET HTTP/1.1
lms.cufs.ac.kr/exsignon/sso/sso_index.php
IP
101.101.170.135:443
ASN
#135354 NAVER BUSINESS PLATFORM ASIA PACIFIC PTE. LTD.

Certificate
IssuerSectigo Limited
Subject*.cufs.ac.kr
FingerprintF2:BF:4B:B0:EB:5C:D3:26:89:E1:09:C9:67:B3:27:B3:A5:EB:05:34
ValidityFri, 08 Mar 2024 00:00:00 GMT - Mon, 07 Apr 2025 23:59:59 GMT

File type
Unicode text, UTF-8 text, with no line terminators
Size
3 B (3 bytes)
Hash
ecaa88f7fa0bf610a5a26cf545dcd3aa
57218c316b6921e2cd61027a2387edc31a2d9471
f1945cd6c19e56b3c1c78943ef5ec18116907a4ca1efc40a57d48ab1db7adfc5

HTTP Headers

GET /exsignon/sso/sso_index.php HTTP/1.1
Host: lms.cufs.ac.kr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=t0ndn51pfb651sbvh9e93hba2d
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Date: Fri, 26 Apr 2024 22:17:37 GMT
Server: Apache
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Location: /exsignon/sso/sso_anonymous.php
Content-Length: 3
Connection: close
Content-Type: text/html; charset=UTF-8

lms.cufs.ac.kr/exsignon/sso/sso_anonymous.php

101.101.170.135

302 Found

0 B

URL User Request GET HTTP/1.1
lms.cufs.ac.kr/exsignon/sso/sso_anonymous.php
IP
101.101.170.135:443
ASN
#135354 NAVER BUSINESS PLATFORM ASIA PACIFIC PTE. LTD.

Certificate
IssuerSectigo Limited
Subject*.cufs.ac.kr
FingerprintF2:BF:4B:B0:EB:5C:D3:26:89:E1:09:C9:67:B3:27:B3:A5:EB:05:34
ValidityFri, 08 Mar 2024 00:00:00 GMT - Mon, 07 Apr 2025 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /exsignon/sso/sso_anonymous.php HTTP/1.1
Host: lms.cufs.ac.kr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=t0ndn51pfb651sbvh9e93hba2d
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Date: Fri, 26 Apr 2024 22:17:37 GMT
Server: Apache
Location: https://www.cufs.ac.kr/intro/intro.html
Content-Length: 0
Connection: close
Content-Type: text/html; charset=UTF-8

www.cufs.ac.kr/intro/intro.html

108.157.229.24

200 OK

889 B

URL User Request GET HTTP/2
www.cufs.ac.kr/intro/intro.html
IP
108.157.229.24:443
ASN
#16509 AMAZON-02

Certificate
IssuerSectigo Limited
Subject*.cufs.ac.kr
FingerprintF2:BF:4B:B0:EB:5C:D3:26:89:E1:09:C9:67:B3:27:B3:A5:EB:05:34
ValidityFri, 08 Mar 2024 00:00:00 GMT - Mon, 07 Apr 2025 23:59:59 GMT

File type
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Size
889 B (889 bytes)
Hash
e87e3e6b5f032f8f874d9375e46bc1e8
035f8b3cdfdb7999259bfd8c2bf9fc8be48c51e9
2482f1004826c3cfe3f2f2f0e98450e77232bcdab590358c533c06c6047d75ac

HTTP Headers

GET /intro/intro.html HTTP/1.1
Host: www.cufs.ac.kr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/html
content-length: 889
date: Fri, 26 Apr 2024 22:17:40 GMT
server: Apache/2.4.18 (Ubuntu)
accept-ranges: bytes
etag: W/"1965-1634892567000-gzip"
last-modified: Fri, 22 Oct 2021 08:49:27 GMT
content-encoding: gzip
set-cookie: SCOUTER=zv2k4b8n8itg3; Expires=Thu, 15-May-2092 01:31:47 GMT; Path=/
SERVERID=www-web01; path=/
cache-control: private
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 a7b25290e9400fd200644534ae04f210.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: rQxt9a23ZyA9bcMJGW3_WT-3yQjQ5A3ugKl3E0DjCkk89f-NriO43A==
X-Firefox-Spdy: h2

www.cufs.ac.kr/intro/img/logo.png

108.157.229.24

200 OK

18 kB

URL GET HTTP/2
www.cufs.ac.kr/intro/img/logo.png
IP
108.157.229.24:443
ASN
#16509 AMAZON-02

Requested by
https://www.cufs.ac.kr/intro/intro.html
Certificate
IssuerSectigo Limited
Subject*.cufs.ac.kr
FingerprintF2:BF:4B:B0:EB:5C:D3:26:89:E1:09:C9:67:B3:27:B3:A5:EB:05:34
ValidityFri, 08 Mar 2024 00:00:00 GMT - Mon, 07 Apr 2025 23:59:59 GMT

File type
PNG image data, 336 x 60, 8-bit/color RGBA, non-interlaced
Size
18 kB (17758 bytes)
Hash
fdbb6436fe5f76f66485877f98e3cabb
856c49d8e7b1d6e3405f35d8a83a89ce929fdcdb
844ac8fa8618295178cedc50d0cae7fd02808b12cbabed99047439f9fafb891b

HTTP Headers

GET /intro/img/logo.png HTTP/1.1
Host: www.cufs.ac.kr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cufs.ac.kr/intro/intro.html
Cookie: SCOUTER=zv2k4b8n8itg3; SERVERID=www-web01
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: image/png
content-length: 17758
accept-ranges: bytes
last-modified: Mon, 22 Mar 2021 10:25:26 GMT
server: Apache/2.4.18 (Ubuntu)
date: Fri, 26 Apr 2024 07:27:23 GMT
cache-control: private
etag: "60587096:455e"
x-cache: Hit from cloudfront
via: 1.1 a7b25290e9400fd200644534ae04f210.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: 4BzjireS-QWmn5CxDITwDvwuGx2RSY-lrCMMc_vDl1DVtnoOyNJJgA==
age: 53417
X-Firefox-Spdy: h2

www.cufs.ac.kr/intro/css/intro.css

108.157.229.24

200 OK

1.2 kB

URL GET HTTP/2
www.cufs.ac.kr/intro/css/intro.css
IP
108.157.229.24:443
ASN
#16509 AMAZON-02

Requested by
https://www.cufs.ac.kr/intro/intro.html
Certificate
IssuerSectigo Limited
Subject*.cufs.ac.kr
FingerprintF2:BF:4B:B0:EB:5C:D3:26:89:E1:09:C9:67:B3:27:B3:A5:EB:05:34
ValidityFri, 08 Mar 2024 00:00:00 GMT - Mon, 07 Apr 2025 23:59:59 GMT

File type
Unicode text, UTF-8 text, with CRLF line terminators
Size
1.2 kB (1228 bytes)
Hash
aecc3f0cf54a30bc5e2e9abe4dd08e27
95dfe9362449c93adc923d65d6500ad3105695ce
ae54e358d1d8649856f17e1527772466c7cecf8ad2ac7892b1bf1f80d1f3242c

HTTP Headers

GET /intro/css/intro.css HTTP/1.1
Host: www.cufs.ac.kr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cufs.ac.kr/intro/intro.html
Cookie: SCOUTER=zv2k4b8n8itg3; SERVERID=www-web01
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: text/css
content-length: 1228
date: Fri, 26 Apr 2024 22:17:41 GMT
server: Apache/2.4.18 (Ubuntu)
accept-ranges: bytes
etag: W/"3196-1624925934000-gzip"
last-modified: Tue, 29 Jun 2021 00:18:54 GMT
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 a7b25290e9400fd200644534ae04f210.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: LKQwRu35p8tWzhK3BUtMUZEivsWWBJV_Wuhd3LZPqWRHOVF-KXP1rA==
X-Firefox-Spdy: h2

www.cufs.ac.kr/intro/img/background.jpg

108.157.229.24

200 OK

858 kB

URL GET HTTP/2
www.cufs.ac.kr/intro/img/background.jpg
IP
108.157.229.24:443
ASN
#16509 AMAZON-02

Requested by
https://www.cufs.ac.kr/intro/intro.html
Certificate
IssuerSectigo Limited
Subject*.cufs.ac.kr
FingerprintF2:BF:4B:B0:EB:5C:D3:26:89:E1:09:C9:67:B3:27:B3:A5:EB:05:34
ValidityFri, 08 Mar 2024 00:00:00 GMT - Mon, 07 Apr 2025 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS3 Windows, datetime=2019:11:11 15:37:58], progressive, precision 8, 1920x850, components 3
Size
858 kB (857475 bytes)
Hash
56e8c1c207939224c3c2bcfc4d4accf3
a208b548b572c8fae070fe84b2eb94d86af4ffa3
1624eff1a051efa9fa600eeca73daf6f07788785e1a85755c32d86d1dece10ba

HTTP Headers

GET /intro/img/background.jpg HTTP/1.1
Host: www.cufs.ac.kr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cufs.ac.kr/intro/css/intro.css
Cookie: SCOUTER=zv2k4b8n8itg3; SERVERID=www-web01
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: image/jpeg
content-length: 857475
accept-ranges: bytes
last-modified: Mon, 22 Mar 2021 10:25:26 GMT
server: Apache/2.4.18 (Ubuntu)
date: Fri, 26 Apr 2024 07:27:24 GMT
cache-control: private
etag: "60587096:d1583"
x-cache: Hit from cloudfront
via: 1.1 a7b25290e9400fd200644534ae04f210.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: KbupfpHraLRwERx-L2EI562q8Ix6sEK9IqibM8g9kR4DSfGEPAbpjw==
age: 53417
X-Firefox-Spdy: h2

www.cufs.ac.kr/intro/img/favicon.ico

108.157.229.24

200 OK

68 kB

URL GET HTTP/2
www.cufs.ac.kr/intro/img/favicon.ico
IP
108.157.229.24:443
ASN
#16509 AMAZON-02

Requested by
https://www.cufs.ac.kr/intro/intro.html
Certificate
IssuerSectigo Limited
Subject*.cufs.ac.kr
FingerprintF2:BF:4B:B0:EB:5C:D3:26:89:E1:09:C9:67:B3:27:B3:A5:EB:05:34
ValidityFri, 08 Mar 2024 00:00:00 GMT - Mon, 07 Apr 2025 23:59:59 GMT

File type
MS Windows icon resource - 1 icon, -128x-128, 32 bits/pixel
Size
68 kB (67646 bytes)
Hash
9b86324b3cba98d65e770dfc1092350c
32a6aeee720227bc331abb72a6e4af1e649a3b89
1884d42e056ded180c9da9e0a3ebbaa5968d481534e46a60ddb3215242ace47f

HTTP Headers

GET /intro/img/favicon.ico HTTP/1.1
Host: www.cufs.ac.kr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cufs.ac.kr/intro/intro.html
Cookie: SCOUTER=zv2k4b8n8itg3; SERVERID=www-web01
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: image/x-icon
content-length: 67646
date: Fri, 26 Apr 2024 22:17:41 GMT
server: Apache/2.4.18 (Ubuntu)
accept-ranges: bytes
etag: W/"67646-1616408726000"
last-modified: Mon, 22 Mar 2021 10:25:26 GMT
x-cache: Miss from cloudfront
via: 1.1 a7b25290e9400fd200644534ae04f210.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: at9XuvtFavOUCTq0mzyulViu3ZOe1Kv_2CG9cwNudbbCqAA_oNOHiA==
X-Firefox-Spdy: h2

www.cufs.ac.kr/intro/img/apple-touch-icon.png

108.157.229.24

200 OK

84 kB

URL GET HTTP/2
www.cufs.ac.kr/intro/img/apple-touch-icon.png
IP
108.157.229.24:443
ASN
#16509 AMAZON-02

Requested by
https://www.cufs.ac.kr/intro/intro.html
Certificate
IssuerSectigo Limited
Subject*.cufs.ac.kr
FingerprintF2:BF:4B:B0:EB:5C:D3:26:89:E1:09:C9:67:B3:27:B3:A5:EB:05:34
ValidityFri, 08 Mar 2024 00:00:00 GMT - Mon, 07 Apr 2025 23:59:59 GMT

File type
PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced
Size
84 kB (84281 bytes)
Hash
92cc12e9a95ec893bd8e26fd13a5623d
32d2bdebcbec16ff1b107fd32dc402bef54dd7ec
5390118c793c59ce88377eef0516b728303699a80c3b09fee0f82b75a937f3b0

HTTP Headers

GET /intro/img/apple-touch-icon.png HTTP/1.1
Host: www.cufs.ac.kr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cufs.ac.kr/intro/intro.html
Cookie: SCOUTER=zv2k4b8n8itg3; SERVERID=www-web01
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: image/png
content-length: 84281
date: Fri, 26 Apr 2024 22:17:41 GMT
accept-ranges: bytes
etag: "60587096:14939"
last-modified: Mon, 22 Mar 2021 10:25:26 GMT
cache-control: private
server: Apache/2.4.18 (Ubuntu)
x-cache: Miss from cloudfront
via: 1.1 a7b25290e9400fd200644534ae04f210.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: fB_glO3tkockqiKb7-rlOHrkhrSZ7djm91mCs6tdukiuoejLcF7LAQ==
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (12)

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type