Report - freemobi-box.kome.kr/hsys/shsn/37afdc9e54880a2ed1a02e7791db811b/

Report Overview

Visited public
2025-02-17 15:48:00
Tags
URL
freemobi-box.kome.kr/hsys/shsn/37afdc9e54880a2ed1a02e7791db811b/
Finishing URL
freemobi-box.kome.kr/hsys/shsn/37afdc9e54880a2ed1a02e7791db811b/?ckattempt=1
IP / ASN
210.114.6.216
#4766 Korea Telecom
Title
403 Forbidden

Detections

urlquery

0

Network Intrusion Detection

6

Threat Detection Systems

0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
freemobi-box.kome.kr	unknown	2014-11-25	2015-06-13	2025-02-10	1.9 kB	11 kB	210.114.6.216

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2025-02-17 15:47:31	medium	210.114.6.216	Client IP	ET INFO Suspicious Self Signed SSL Certificate to 'My Company Ltd'
2025-02-17 15:47:31	medium	210.114.6.216	Client IP	ET INFO Suspicious Self Signed SSL Certificate to 'My Company Ltd'
2025-02-17 15:47:32	medium	210.114.6.216	Client IP	ET INFO Suspicious Self Signed SSL Certificate to 'My Company Ltd'
2025-02-17 15:47:32	medium	210.114.6.216	Client IP	ET INFO Suspicious Self Signed SSL Certificate to 'My Company Ltd'
2025-02-17 15:47:33	medium	210.114.6.216	Client IP	ET INFO Suspicious Self Signed SSL Certificate to 'My Company Ltd'
2025-02-17 15:47:33	medium	210.114.6.216	Client IP	ET INFO Suspicious Self Signed SSL Certificate to 'My Company Ltd'

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (4)

	URL	IP	Response	Size
	freemobi-box.kome.kr/hsys/shsn/37afdc9e54880a2ed1a02e7791db811b/	210.114.6.216	200 OK	810 B
URL freemobi-box.kome.kr/hsys/shsn/37afdc9e54880a2ed1a02e7791db811b/ IP 210.114.6.216:0 ASN #4766 Korea Telecom File type HTML document, ASCII text, with very long lines (810), with no line terminators Size 810 B (810 bytes) Hash 5696aa5e618f5e81a8f93ad7f2c5443c ceee3b3d454202617133736d8e092952fb01cc69 36e8a73de63a5b725621bc9f2bd428fe38861e1624fa41f95b732a5e69d36d82 HTTP Headers `GET /hsys/shsn/37afdc9e54880a2ed1a02e7791db811b/ HTTP/1.1 Host: freemobi-box.kome.kr User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Date: Mon, 17 Feb 2025 15:47:31 GMT Content-Type: text/html Content-Length: 810 Connection: keep-alive Expires: Thu, 01 Jan 1970 00:00:01 GMT Cache-Control: no-cache`

	freemobi-box.kome.kr/cupid.js	210.114.6.216	200 OK	8.9 kB
URL freemobi-box.kome.kr/cupid.js IP 210.114.6.216:0 ASN #4766 Korea Telecom File type ASCII text Size 8.9 kB (8913 bytes) Hash 56f841dd82a8c486ad4e69593e9cf517 be98194094e26c06b01bb375cf00ee89998b9b6d 402622f24d30b687bbe409c14f0063bacbbd765fd3e7c22a8facd1be1c67e159 HTTP Headers `GET /cupid.js HTTP/1.1 Host: freemobi-box.kome.kr User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://freemobi-box.kome.kr/hsys/shsn/37afdc9e54880a2ed1a02e7791db811b/ Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Date: Mon, 17 Feb 2025 15:47:31 GMT Content-Type: application/javascript Last-Modified: Tue, 05 Apr 2016 07:24:47 GMT Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding ETag: W/"5703683f-af47" Content-Encoding: gzip`

	freemobi-box.kome.kr/hsys/shsn/37afdc9e54880a2ed1a02e7791db811b/?ckattempt=1	210.114.6.216	403 Forbidden	252 B
URL User Request GET HTTP/1.1 freemobi-box.kome.kr/hsys/shsn/37afdc9e54880a2ed1a02e7791db811b/?ckattempt=1 IP 210.114.6.216:80 ASN #4766 Korea Telecom File type HTML document, ASCII text Size 252 B (252 bytes) Hash 8da5d712ff03eb0981c26ece8a033398 764263569cb104b1b426b6322d881fad2ac6a466 813ac8c88b8586b055de209f72b51dd23d8cf63ca866a672b2b16b72d4a3dae4 HTTP Headers GET /hsys/shsn/37afdc9e54880a2ed1a02e7791db811b/?ckattempt=1 HTTP/1.1 Host: freemobi-box.kome.kr User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://freemobi-box.kome.kr/hsys/shsn/37afdc9e54880a2ed1a02e7791db811b/ DNT: 1 Connection: keep-alive Cookie: CUPID=e50e9ac43ce1d9e5cb3bb2981a6e35df Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 403 Forbidden Server: nginx Date: Mon, 17 Feb 2025 15:47:33 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 252 Connection: keep-alive`

	freemobi-box.kome.kr/favicon.ico	210.114.6.216	403 Forbidden	220 B
URL GET HTTP/1.1 freemobi-box.kome.kr/favicon.ico IP 210.114.6.216:80 ASN #4766 Korea Telecom Requested by http://freemobi-box.kome.kr/hsys/shsn/37afdc9e54880a2ed1a02e7791db811b/?ckattempt=1 File type HTML document, ASCII text Size 220 B (220 bytes) Hash 5042f956e3ef0b2ffc8136cc307e8a36 bcfaf1b60c8b3ac1d4a8f1e5f5d8e570677934e6 fed00c37f011cabe1bbeaaf27c94d1d779e3c0ed3f8e39e858e82439507653c9 HTTP Headers `GET /favicon.ico HTTP/1.1 Host: freemobi-box.kome.kr User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://freemobi-box.kome.kr/hsys/shsn/37afdc9e54880a2ed1a02e7791db811b/?ckattempt=1 Cookie: CUPID=e50e9ac43ce1d9e5cb3bb2981a6e35df Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 403 Forbidden Server: nginx Date: Mon, 17 Feb 2025 15:47:33 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 220 Connection: keep-alive`