Report - www.zetalube.co.kr/

Report Overview

Submitted URL
www.zetalube.co.kr/
IP
111.92.189.34
ASN
#9952 Hostway IDC
Submitted
2024-04-24 23:31:11
Access
public
Website Title
선업무역
Final URL
www.zetalube.co.kr/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
28

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
www.zetalube.co.kr	unknown	2007-03-12	2015-04-30	2024-04-09	5.0 kB	226 kB	111.92.189.34
error.uhost.co.kr	unknown	2002-09-26	2012-05-29	2024-03-16	360 B	2.6 kB	111.92.189.8

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-24	medium	zetalube.co.kr	Sinkholed
2024-04-24	medium	zetalube.co.kr	Sinkholed
2024-04-24	medium	zetalube.co.kr	Sinkholed
2024-04-24	medium	zetalube.co.kr	Sinkholed
2024-04-24	medium	zetalube.co.kr	Sinkholed
2024-04-24	medium	zetalube.co.kr	Sinkholed
2024-04-24	medium	zetalube.co.kr	Sinkholed
2024-04-24	medium	zetalube.co.kr	Sinkholed
2024-04-24	medium	zetalube.co.kr	Sinkholed
2024-04-24	medium	zetalube.co.kr	Sinkholed
2024-04-24	medium	zetalube.co.kr	Sinkholed
2024-04-24	medium	zetalube.co.kr	Sinkholed
2024-04-24	medium	zetalube.co.kr	Sinkholed
2024-04-24	medium	zetalube.co.kr	Sinkholed

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (15)

URL IP Response Size

www.zetalube.co.kr/

111.92.189.34

2.4 kB

URL User Request GET
www.zetalube.co.kr/
IP
111.92.189.34:0
ASN
#9952 Hostway IDC

File type
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Size
2.4 kB (2427 bytes)
Hash
7101710ac816ccb75d5ee25cb1399798
4879cb6f7cfcc9d075a9fc5b9271974420ea616f
c599d548319254b8f6f21093c10fa61bff0a8df38b9f0b752dbafd4c8adc4e25

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: www.zetalube.co.kr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 23:30:46 GMT
Server: Apache
X-Powered-By: PHP/5.2.17
Content-Length: 2427
Connection: close
Content-Type: text/html

www.zetalube.co.kr/design1.css

111.92.189.34

200 OK

4.8 kB

URL GET HTTP/1.1
www.zetalube.co.kr/design1.css
IP
111.92.189.34:80
ASN
#9952 Hostway IDC

Requested by
http://www.zetalube.co.kr/

File type
Unicode text, UTF-8 text, with CRLF line terminators
Size
4.8 kB (4801 bytes)
Hash
1e7f19f9e75e19c8f048cf960069e006
6e432cba6caeebfb96d0cb3e87456bfca6f0f2e2
16d3d405ea34c4330694dcea8c464592044106cd2479fe82cfd3263250e4ab46

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /design1.css HTTP/1.1
Host: www.zetalube.co.kr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.zetalube.co.kr/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 23:30:47 GMT
Server: Apache
Last-Modified: Thu, 14 Jan 2021 08:44:09 GMT
ETag: "6cb9b2-12c1-5b8d842570840"
Accept-Ranges: bytes
Content-Length: 4801
Connection: close
Content-Type: text/css

www.zetalube.co.kr/images/topmenu1.jpg

111.92.189.34

200 OK

14 kB

URL GET HTTP/1.1
www.zetalube.co.kr/images/topmenu1.jpg
IP
111.92.189.34:80
ASN
#9952 Hostway IDC

Requested by
http://www.zetalube.co.kr/

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=29, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=140], baseline, precision 8, 140x29, components 3
Size
14 kB (13781 bytes)
Hash
aee617cd6c894b81873d48bb18cb81ba
28b203c1750c1ec779710a16a97fccd85972109c
88d6ef662fda135a541efa4c8d3472d927f1705a6c861942bb589fb8943eb098

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/topmenu1.jpg HTTP/1.1
Host: www.zetalube.co.kr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.zetalube.co.kr/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 23:30:47 GMT
Server: Apache
Last-Modified: Thu, 14 Jan 2021 07:20:00 GMT
ETag: "82860c-35d5-5b8d715656800"
Accept-Ranges: bytes
Content-Length: 13781
Connection: close
Content-Type: image/jpeg

www.zetalube.co.kr/images/mainbigban3.jpg

111.92.189.34

200 OK

21 kB

URL GET HTTP/1.1
www.zetalube.co.kr/images/mainbigban3.jpg
IP
111.92.189.34:80
ASN
#9952 Hostway IDC

Requested by
http://www.zetalube.co.kr/

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=133, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=329], baseline, precision 8, 329x133, components 3
Size
21 kB (21427 bytes)
Hash
800fd0f3592cf1a973e796a0cda53d47
770cba89d556797b25fa8859c3dbcd873b1ebb07
e63bff413ca62440342d80054ec84ae4349414ad747a3451cfde281b0decaf51

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/mainbigban3.jpg HTTP/1.1
Host: www.zetalube.co.kr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.zetalube.co.kr/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 23:30:47 GMT
Server: Apache
Last-Modified: Thu, 14 Jan 2021 07:19:53 GMT
ETag: "8285ce-53b3-5b8d714fa9840"
Accept-Ranges: bytes
Content-Length: 21427
Connection: close
Content-Type: image/jpeg

www.zetalube.co.kr/images/topbg.jpg

111.92.189.34

200 OK

1.8 kB

URL GET HTTP/1.1
www.zetalube.co.kr/images/topbg.jpg
IP
111.92.189.34:80
ASN
#9952 Hostway IDC

Requested by
http://www.zetalube.co.kr/

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 30x85, components 3
Size
1.8 kB (1772 bytes)
Hash
e7a5d3faeba45ea2b5adc6e8929dafc3
4ac16e18e4f991cb15d34303c130bc6a87dd951c
e791e9660795f491f32659464a4a5821c6aa9f5ccc3a9e7c28f8eeff5cc330a8

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/topbg.jpg HTTP/1.1
Host: www.zetalube.co.kr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.zetalube.co.kr/design1.css
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 23:30:47 GMT
Server: Apache
Last-Modified: Thu, 14 Jan 2021 07:19:59 GMT
ETag: "828608-6ec-5b8d7155625c0"
Accept-Ranges: bytes
Content-Length: 1772
Connection: close
Content-Type: image/jpeg

www.zetalube.co.kr/images/toplogo.jpg

111.92.189.34

200 OK

20 kB

URL GET HTTP/1.1
www.zetalube.co.kr/images/toplogo.jpg
IP
111.92.189.34:80
ASN
#9952 Hostway IDC

Requested by
http://www.zetalube.co.kr/

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=85, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=227], baseline, precision 8, 227x85, components 3
Size
20 kB (19593 bytes)
Hash
359167518b683934c12d70b8ed868143
b6bc3571daa1edca1d505e3503640aa5342bf93f
a1a9f08bf8bd41dc110058bce4b379d997cde5e85a3639ab3da0f60f9d0b806d

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/toplogo.jpg HTTP/1.1
Host: www.zetalube.co.kr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.zetalube.co.kr/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 23:30:47 GMT
Server: Apache
Last-Modified: Thu, 14 Jan 2021 07:20:00 GMT
ETag: "828609-4c89-5b8d715656800"
Accept-Ranges: bytes
Content-Length: 19593
Connection: close
Content-Type: image/jpeg

www.zetalube.co.kr/images/mainbigban1_1.jpg

111.92.189.34

200 OK

24 kB

URL GET HTTP/1.1
www.zetalube.co.kr/images/mainbigban1_1.jpg
IP
111.92.189.34:80
ASN
#9952 Hostway IDC

Requested by
http://www.zetalube.co.kr/

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=133, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=329], baseline, precision 8, 329x133, components 3
Size
24 kB (24489 bytes)
Hash
2bf30ec2280285d847bf57b73306878d
dc6fd0cf219b3f45122688638715674f3858497c
1648f3f5d0d3b1a2189b88d72a6cb68d79e39a5c6633fdb684252a9c46b5bab2

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/mainbigban1_1.jpg HTTP/1.1
Host: www.zetalube.co.kr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.zetalube.co.kr/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 23:30:47 GMT
Server: Apache
Last-Modified: Sun, 12 Feb 2023 23:47:32 GMT
ETag: "8285cc-5fa9-5f4895aa4cd00"
Accept-Ranges: bytes
Content-Length: 24489
Connection: close
Content-Type: image/jpeg

www.zetalube.co.kr/images/mainimg_.jpg

111.92.189.34

200 OK

53 kB

URL GET HTTP/1.1
www.zetalube.co.kr/images/mainimg_.jpg
IP
111.92.189.34:80
ASN
#9952 Hostway IDC

Requested by
http://www.zetalube.co.kr/

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=376, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=989], baseline, precision 8, 989x376, components 3
Size
53 kB (52800 bytes)
Hash
e7457911085e4110ce4ba3d0858d1a04
be7d7cf454b2f5a905a0aaaaa0d69652546cf517
5b89b11fbe8beaa1aed9ee6c2af3cd3d1979dc67191e8e29bf94f29a89c146c2

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/mainimg_.jpg HTTP/1.1
Host: www.zetalube.co.kr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.zetalube.co.kr/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 23:30:47 GMT
Server: Apache
Last-Modified: Thu, 14 Jan 2021 07:19:54 GMT
ETag: "8285d3-ce40-5b8d71509da80"
Accept-Ranges: bytes
Content-Length: 52800
Connection: close
Content-Type: image/jpeg

www.zetalube.co.kr/images/topmenu2.jpg

111.92.189.34

200 OK

14 kB

URL GET HTTP/1.1
www.zetalube.co.kr/images/topmenu2.jpg
IP
111.92.189.34:80
ASN
#9952 Hostway IDC

Requested by
http://www.zetalube.co.kr/

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=29, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=140], baseline, precision 8, 140x29, components 3
Size
14 kB (14326 bytes)
Hash
ad348b208d4907946781128c362ca5f7
c914b890fb1f2fd5a7913ced3ca941dac26c8ecf
09cd4a8e518f4adce67afe3c30dcefbea8d32ff5e3251be17ef0954a0f11cb69

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/topmenu2.jpg HTTP/1.1
Host: www.zetalube.co.kr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.zetalube.co.kr/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 23:30:47 GMT
Server: Apache
Last-Modified: Thu, 14 Jan 2021 07:20:00 GMT
ETag: "82860f-37f6-5b8d715656800"
Accept-Ranges: bytes
Content-Length: 14326
Connection: close
Content-Type: image/jpeg

www.zetalube.co.kr/images/topmenu4.jpg

111.92.189.34

200 OK

16 kB

URL GET HTTP/1.1
www.zetalube.co.kr/images/topmenu4.jpg
IP
111.92.189.34:80
ASN
#9952 Hostway IDC

Requested by
http://www.zetalube.co.kr/

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=29, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=140], baseline, precision 8, 140x29, components 3
Size
16 kB (15742 bytes)
Hash
0cacb8a864557d3e84455f27033a675d
59833914e00dd5bc3d8b7b32678c6d5942f9376e
794af3b01749a8bb44c0ac30bda563ce2d391d9a9e5a5b8e66a1c8f76bf81e9a

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/topmenu4.jpg HTTP/1.1
Host: www.zetalube.co.kr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.zetalube.co.kr/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 23:30:48 GMT
Server: Apache
Last-Modified: Thu, 14 Jan 2021 07:20:00 GMT
ETag: "828613-3d7e-5b8d715656800"
Accept-Ranges: bytes
Content-Length: 15742
Connection: close
Content-Type: image/jpeg

www.zetalube.co.kr/images/mainbigban2.jpg

111.92.189.34

200 OK

23 kB

URL GET HTTP/1.1
www.zetalube.co.kr/images/mainbigban2.jpg
IP
111.92.189.34:80
ASN
#9952 Hostway IDC

Requested by
http://www.zetalube.co.kr/

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=133, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=329], baseline, precision 8, 329x133, components 3
Size
23 kB (22667 bytes)
Hash
45b3b76a684967831392d7324cad19e5
a0c9db4fa944d6365583a2bd0e6929e903e670da
4a8f55a771974bab471273350e88a9674feda4066c3e66acb60f99cf6396a165

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/mainbigban2.jpg HTTP/1.1
Host: www.zetalube.co.kr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.zetalube.co.kr/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 23:30:48 GMT
Server: Apache
Last-Modified: Thu, 14 Jan 2021 07:19:53 GMT
ETag: "8285cd-588b-5b8d714fa9840"
Accept-Ranges: bytes
Content-Length: 22667
Connection: close
Content-Type: image/jpeg

www.zetalube.co.kr/images/topmenu5.jpg

111.92.189.34

200 OK

15 kB

URL GET HTTP/1.1
www.zetalube.co.kr/images/topmenu5.jpg
IP
111.92.189.34:80
ASN
#9952 Hostway IDC

Requested by
http://www.zetalube.co.kr/

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=29, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=140], baseline, precision 8, 140x29, components 3
Size
15 kB (14990 bytes)
Hash
ecbec76ff5b5bd743978c7e2f0b1cbdd
b86de363b0ec6ad25c12e7fb42cb1ffbbdac1eeb
139390df443537c14807436b00c656b18f7ecbd4fbe4189ca028d7204b696e0f

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/topmenu5.jpg HTTP/1.1
Host: www.zetalube.co.kr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.zetalube.co.kr/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 23:30:48 GMT
Server: Apache
Last-Modified: Thu, 14 Jan 2021 07:20:00 GMT
ETag: "828615-3a8e-5b8d715656800"
Accept-Ranges: bytes
Content-Length: 14990
Connection: close
Content-Type: image/jpeg

www.zetalube.co.kr/favicon.ico

111.92.189.34

302 Found

302 B

URL GET HTTP/1.1
www.zetalube.co.kr/favicon.ico
IP
111.92.189.34:80
ASN
#9952 Hostway IDC

Requested by
http://www.zetalube.co.kr/

File type
HTML document, ASCII text
Size
302 B (302 bytes)
Hash
bd4be26a05ab81e40da2c17f6d46d156
f9e4d005ea49ed3ec293676666383aebcc54ac76
9cd2e4ce71c3d7e94e3e85c51049efeb5f061e181c2041bbcc87eb4c94f4270a

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: www.zetalube.co.kr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.zetalube.co.kr/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Date: Wed, 24 Apr 2024 23:30:49 GMT
Server: Apache
Location: http://error.uhost.co.kr/stop/4044_Error_Page.html
Content-Length: 302
Connection: close
Content-Type: text/html; charset=iso-8859-1

www.zetalube.co.kr/images/topmenu3.jpg

111.92.189.34

200 OK

14 kB

URL GET HTTP/1.1
www.zetalube.co.kr/images/topmenu3.jpg
IP
111.92.189.34:80
ASN
#9952 Hostway IDC

Requested by
http://www.zetalube.co.kr/

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=29, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=140], baseline, precision 8, 140x29, components 3
Size
14 kB (13972 bytes)
Hash
90bd06bf2e3fc35f3c0dd249399e83bd
bbfece36c5e98a25e69a2978b95c5ad33bf0fcf1
1468acdef60cec3cc37862f95c9b13836b3d9447f987ceeda5bdd34e884fdc40

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/topmenu3.jpg HTTP/1.1
Host: www.zetalube.co.kr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.zetalube.co.kr/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 23:30:48 GMT
Server: Apache
Last-Modified: Thu, 14 Jan 2021 07:20:00 GMT
ETag: "828611-3694-5b8d715656800"
Accept-Ranges: bytes
Content-Length: 13972
Connection: close
Content-Type: image/jpeg

error.uhost.co.kr/stop/4044_Error_Page.html

111.92.189.8

200 OK

2.4 kB

URL GET HTTP/1.1
error.uhost.co.kr/stop/4044_Error_Page.html
IP
111.92.189.8:80
ASN
#9952 Hostway IDC

Requested by
http://www.zetalube.co.kr/

File type
HTML document, ISO-8859 text, with very long lines (359)
Size
2.4 kB (2394 bytes)
Hash
4b4782776c21c4fa95ade455891a5810
c936943c91051df4f2f80c0d7a0b77384f58a702
831491258681d092241cce964e369c0558f04beea1a8bb026e2f21781cd19c0a

HTTP Headers

GET /stop/4044_Error_Page.html HTTP/1.1
Host: error.uhost.co.kr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.zetalube.co.kr/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 23:30:49 GMT
Server: Apache/1.3.41 (Unix) mod_throttle/3.1.2 PHP/4.4.9
X-Powered-By: PHP/4.4.9
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (15)

URL User Request GET

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers