Report - freemobi-box.kome.kr/hsys/shsn/efdbc76a481fd993d381e53f26ef389f/

Report Overview

Visited public
2025-02-20 19:08:08
Tags
URL
freemobi-box.kome.kr/hsys/shsn/efdbc76a481fd993d381e53f26ef389f/
Finishing URL
freemobi-box.kome.kr/hsys/shsn/efdbc76a481fd993d381e53f26ef389f/?ckattempt=1
IP / ASN
210.114.6.216
#4766 Korea Telecom
Title
403 Forbidden

Detections

urlquery

0

Network Intrusion Detection

6

Threat Detection Systems

0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
freemobi-box.kome.kr	unknown	2014-11-25	2015-06-13	2025-02-17	1.9 kB	11 kB	210.114.6.216

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2025-02-20 19:07:40	medium	210.114.6.216	Client IP	ET INFO Suspicious Self Signed SSL Certificate to 'My Company Ltd'
2025-02-20 19:07:40	medium	210.114.6.216	Client IP	ET INFO Suspicious Self Signed SSL Certificate to 'My Company Ltd'
2025-02-20 19:07:41	medium	210.114.6.216	Client IP	ET INFO Suspicious Self Signed SSL Certificate to 'My Company Ltd'
2025-02-20 19:07:42	medium	210.114.6.216	Client IP	ET INFO Suspicious Self Signed SSL Certificate to 'My Company Ltd'
2025-02-20 19:07:42	medium	210.114.6.216	Client IP	ET INFO Suspicious Self Signed SSL Certificate to 'My Company Ltd'
2025-02-20 19:07:42	medium	210.114.6.216	Client IP	ET INFO Suspicious Self Signed SSL Certificate to 'My Company Ltd'

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (4)

	URL	IP	Response	Size
	freemobi-box.kome.kr/hsys/shsn/efdbc76a481fd993d381e53f26ef389f/	210.114.6.216	200 OK	810 B
URL freemobi-box.kome.kr/hsys/shsn/efdbc76a481fd993d381e53f26ef389f/ IP 210.114.6.216:0 ASN #4766 Korea Telecom File type HTML document, ASCII text, with very long lines (810), with no line terminators Size 810 B (810 bytes) Hash de88a65ebd97bdcf12ef3d4ee531a5da a809978bb2dc6e13f23217935a8d01f92fd04afc 619d4d4e2c78d9ca36e3ce3f9824a3b11137c06934a516029262e86ab4e45951 HTTP Headers `GET /hsys/shsn/efdbc76a481fd993d381e53f26ef389f/ HTTP/1.1 Host: freemobi-box.kome.kr User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Date: Thu, 20 Feb 2025 19:07:40 GMT Content-Type: text/html Content-Length: 810 Connection: keep-alive Expires: Thu, 01 Jan 1970 00:00:01 GMT Cache-Control: no-cache`

	freemobi-box.kome.kr/cupid.js	210.114.6.216	200 OK	8.9 kB
URL freemobi-box.kome.kr/cupid.js IP 210.114.6.216:0 ASN #4766 Korea Telecom File type ASCII text Size 8.9 kB (8913 bytes) Hash 56f841dd82a8c486ad4e69593e9cf517 be98194094e26c06b01bb375cf00ee89998b9b6d 402622f24d30b687bbe409c14f0063bacbbd765fd3e7c22a8facd1be1c67e159 HTTP Headers `GET /cupid.js HTTP/1.1 Host: freemobi-box.kome.kr User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://freemobi-box.kome.kr/hsys/shsn/efdbc76a481fd993d381e53f26ef389f/ Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Date: Thu, 20 Feb 2025 19:07:40 GMT Content-Type: application/javascript Last-Modified: Tue, 05 Apr 2016 07:24:47 GMT Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding ETag: W/"5703683f-af47" Content-Encoding: gzip`

	freemobi-box.kome.kr/hsys/shsn/efdbc76a481fd993d381e53f26ef389f/?ckattempt=1	210.114.6.216	403 Forbidden	252 B
URL User Request GET freemobi-box.kome.kr/hsys/shsn/efdbc76a481fd993d381e53f26ef389f/?ckattempt=1 IP 210.114.6.216:0 ASN #4766 Korea Telecom File type HTML document, ASCII text Size 252 B (252 bytes) Hash 8f91bea4415ddba9f565f43b40056ccd 10a9e599a401cb35d5924d6ea296724ccb1304ac 3b7ffafde9b91fa51ffbe5809a53708be46a800ba999db9860e293d7476fbb01 HTTP Headers GET /hsys/shsn/efdbc76a481fd993d381e53f26ef389f/?ckattempt=1 HTTP/1.1 Host: freemobi-box.kome.kr User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://freemobi-box.kome.kr/hsys/shsn/efdbc76a481fd993d381e53f26ef389f/ DNT: 1 Connection: keep-alive Cookie: CUPID=e50e9ac43ce1d9e5cb3bb2981a6e35df Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 403 Forbidden Server: nginx Date: Thu, 20 Feb 2025 19:07:42 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 252 Connection: keep-alive`

	freemobi-box.kome.kr/favicon.ico	210.114.6.216	403 Forbidden	220 B
URL GET HTTP/1.1 freemobi-box.kome.kr/favicon.ico IP 210.114.6.216:80 ASN #4766 Korea Telecom Requested by http://freemobi-box.kome.kr/hsys/shsn/efdbc76a481fd993d381e53f26ef389f/?ckattempt=1 File type HTML document, ASCII text Size 220 B (220 bytes) Hash 5042f956e3ef0b2ffc8136cc307e8a36 bcfaf1b60c8b3ac1d4a8f1e5f5d8e570677934e6 fed00c37f011cabe1bbeaaf27c94d1d779e3c0ed3f8e39e858e82439507653c9 HTTP Headers `GET /favicon.ico HTTP/1.1 Host: freemobi-box.kome.kr User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://freemobi-box.kome.kr/hsys/shsn/efdbc76a481fd993d381e53f26ef389f/?ckattempt=1 Cookie: CUPID=e50e9ac43ce1d9e5cb3bb2981a6e35df Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 403 Forbidden Server: nginx Date: Thu, 20 Feb 2025 19:07:42 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 220 Connection: keep-alive`