whois.handle: KORNET-KR
whois.name: Korea Telecom
whois.cidrs: 183.96.0.0/11
whois.updated: 2017-02-06T00:00:00.000000
services.protocol: UNKNOWN
services.transport_protocol: TCP
services.scan_time: 2025-07-26T14:45:33.455159
services.version_selected: TLSv1_2
services.cipher_selected: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
services.ja4s: t120200_c02f_344b4dce5a52
services.version: TLSv1_2
services.ja4s: t120200_c02f_344b4dce5a52
services.version: TLSv1_1
services.ja4s: t110200_c013_344b4dce5a52
services.version: TLSv1_0
services.ja4s: t100200_c013_344b4dce5a52
services.names: 127.0.0.1 pfs.nprotect.com
services.issuer_dn: C=KR, O=INCA Internet Co.\, Ltd., OU=INCA Internet Co.\, Ltd. - For Authorized use only, CN=INCA Internet Co.\, Ltd. G2
services.common_name: INCA Internet Co., Ltd. G2
services.country: KR
services.organization: INCA Internet Co., Ltd.
services.organizational_unit: INCA Internet Co., Ltd. - For Authorized use only
services.subject_dn: CN=pfs.nprotect.com, OU=nProtect Online Security\, Plugin Free Service, O=INCA Internet Co.\, Ltd., C=KR
services.common_name: pfs.nprotect.com
services.country: KR
services.organization: INCA Internet Co., Ltd.
services.organizational_unit: nProtect Online Security, Plugin Free Service
services.protocol: UNKNOWN
services.transport_protocol: TCP
services.scan_time: 2025-07-26T17:12:35.989796
services.version_selected: TLSv1_2
services.cipher_selected: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
services.ja4s: t120200_c02f_344b4dce5a52
services.version: TLSv1_2
services.ja4s: t120200_c02f_344b4dce5a52
services.version: TLSv1_1
services.ja4s: t110200_c013_344b4dce5a52
services.version: TLSv1_0
services.ja4s: t100200_c013_344b4dce5a52
services.names: 127.0.0.1 pfs.nprotect.com
services.issuer_dn: C=KR, O=INCA Internet Co.\, Ltd., OU=INCA Internet Co.\, Ltd. - For Authorized use only, CN=INCA Internet Co.\, Ltd. G2
services.common_name: INCA Internet Co., Ltd. G2
services.country: KR
services.organization: INCA Internet Co., Ltd.
services.organizational_unit: INCA Internet Co., Ltd. - For Authorized use only
services.subject_dn: CN=pfs.nprotect.com, OU=nProtect Online Security\, Plugin Free Service, O=INCA Internet Co.\, Ltd., C=KR
services.common_name: pfs.nprotect.com
services.country: KR
services.organization: INCA Internet Co., Ltd.
services.organizational_unit: nProtect Online Security, Plugin Free Service
services.protocol: HTTP
services.transport_protocol: TCP
services.scan_time: 2025-07-26T15:15:44.095255
services.banner: HTTP/1.1 200 OK
  Connection: close
  Content-Type: text/html; charset=utf-8
  
services.version_selected: TLSv1_2
services.cipher_selected: TLS_RSA_WITH_AES_128_GCM_SHA256
services.ja4s: t120200_009c_2412b79bd618
services.version: TLSv1_2
services.ja4s: t120200_009c_2412b79bd618
services.version: TLSv1_1
services.ja4s: t110100_002f_bc98f8e001b5
services.version: TLSv1_0
services.ja4s: t100100_002f_bc98f8e001b5
services.version: SSLv3
services.names: 127.0.0.1
services.issuer_dn: C=KR, O=CrossCert, OU=AccreditedCA, CN=Crosscert_Trust_Root_CA
services.common_name: Crosscert_Trust_Root_CA
services.country: KR
services.organization: CrossCert
services.organizational_unit: AccreditedCA
services.subject_dn: C=KR, O=CrossCert, OU=AccreditedCA, CN=127.0.0.1
services.common_name: 127.0.0.1
services.country: KR
services.organization: CrossCert
services.organizational_unit: AccreditedCA
services.path: /
services.endpoint_type: HTTP
services.scan_time: 2025-07-26T15:15:44.095255
services.uri: https://183.100.1.32:15018/
services.protocol: HTTP/1.1
services.status_reason: OK
services.key: Connection
services.headers: close
services.key: Content-Type
services.headers: text/html; charset=utf-8
services.html_tags: <meta http-equiv="Content-Type" content="text/html;charset=utf-8"/>
services.body: <!DOCTYPE HTML>
  <html>
  <head>
   <meta http-equiv="Content-Type" content="text/html;charset=utf-8"/>
  </head>
  <body>
  <script type="text/javascript" src="json2.js"></script>
  <script type="text/javascript">
   var messageFunction = function (e) {
  
     var originalReq = JSON.parse(e.data);
     var origin = e.origin;
     var req = e.data;
  
     function sendRequest( req, rvCallBack ) {
       var xhr;
       var target;
       var msgRep = {};
       target = 'https://' + location.host;
  		if ( typeof originalReq.manager != 'undefined') {
  			if ( originalReq.manager == 'ccsign') 
  				target += '/ccsign'; 
  			else if ( originalReq.manager == 'ccmanager') 
  				target += '/ccmanager'; 
  			else if ( originalReq.manager == 'ccmanager_exp') 
  				target += '/ccmanager_exp'; 
  		}
  
       if (window.XMLHttpRequest) {
  			xhr = new XMLHttpRequest();
  		} else {
  			xhr = new ActiveXObject('Microsoft.XMLHTTP');
  		}
  		xhr.open('POST', target, true);
  		xhr.setRequestHeader('CCReferer', document.referrer); 
  		xhr.onreadystatechange = action;	
       xhr.send(req);
  		function action(e) {   
  		if ( xhr.readyState == 4 ) {
  			if ( xhr.status != 200 ) {
  				msgRep.operation = originalReq.operation;
  				msgRep.messageNumber = originalReq.messageNumber;
  				msgRep.resultCode = 268500992;
  				msgRep.resultMessage = 'unexpected answer from UniCRS Server :' + xhr.status;
  				rvCallBack( JSON.stringify(msgRep) );
  			} else {
  				rvCallBack( xhr.responseText );
  			}
  		}
     }
   }
  
    sendRequest( req, function (rep) {
       window.parent.postMessage(rep, origin);
    });
  }
  
  if (window.addEventListener) {
       window.addEventListener('message', messageFunction, false);
  } else if (window.attachEvent) {
       window.attachEvent('onmessage', messageFunction);
  } else {
       window.onmessage = messageFunction;
  }
  
  </script>
  
  
  page for unisign
  
  
  </body>
  </html>
  
services.body_hash_sha1: sha1:d872af2af92f2ca89efbdb48986d6cdfae97c060
services.supported_versions: HTTP/1.1
services.protocol: HTTP
services.transport_protocol: TCP
services.scan_time: 2025-07-26T14:24:13.847144
services.banner: HTTP/1.1 404 OK
  Server: Apache
  Connection: close
  Content-Length: 14
  Content-Type: text/html; charset=UTF-8
  
services.version_selected: TLSv1_3
services.cipher_selected: TLS_AES_128_GCM_SHA256
services.ja4s: t130300_1301_77d1c59fcfe0
services.version: TLSv1_3
services.ja4s: t130300_1301_77d1c59fcfe0
services.version: TLSv1_2
services.ja4s: t120100_c02f_bc98f8e001b5
services.names: *.neocdn.co.kr neocdn.co.kr
services.issuer_dn: C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Domain Validation Secure Server CA
services.common_name: COMODO RSA Domain Validation Secure Server CA
services.country: GB
services.locality: Salford
services.province: Greater Manchester
services.organization: COMODO CA Limited
services.subject_dn: OU=Domain Control Validated, OU=Hosted by Korea Information Certificate Authority\, Inc., OU=PositiveSSL Wildcard, CN=*.neocdn.co.kr
services.common_name: *.neocdn.co.kr
services.organizational_unit: Domain Control Validated Hosted by Korea Information Certificate Authority, Inc. PositiveSSL Wildcard
services.scan_time: 2025-07-24T15:59:26.550327
services.source: OSI_APPLICATION_LAYER
services.part: a
services.vendor: Apache
services.product: HTTPD
services.cpe: cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*
services.path: /
services.endpoint_type: HTTP
services.scan_time: 2025-07-26T14:24:13.847144
services.uri: https://183.100.1.32:65004/
services.protocol: HTTP/1.1
services.status_reason: OK
services.key: Server
services.headers: Apache
services.key: Connection
services.headers: close
services.key: Content-Length
services.headers: 14
services.key: Content-Type
services.headers: text/html; charset=UTF-8
services.body: Not found page
services.body_hash_sha1: sha1:086da60857b12b1e8a21a282030aa22b0eb851c0
services.supported_versions: HTTP/1.1
[binary data, 32 values, 750 bytes]