Domain > tunnelcrack.mathyvanhoef.com

More information on this domain is in AlienVault OTX

Whois

Property	Value
Email	mathyvanhoef.com@protecteddomainservices.com
NameServer	TODD.NS.CLOUDFLARE.COM
Created	2011-05-13 00:00:00
Changed	2014-03-31 00:00:00
Expires	2016-05-13 00:00:00
Registrar	NAME.COM, INC.

DNS Resolutions

Date	IP Address
2025-05-22	185.199.108.153 (ClassC)
2025-06-20	185.199.109.153 (ClassC)
2025-08-09	185.199.111.153 (ClassC)
2026-02-11	185.199.110.153 (ClassC)

HTTP/1.1 200 OKConnection: keep-aliveContent-Length: 10968Server: GitHub.comContent-Type: text/html; charsetutf-8Last-Modified: Fri, 11 Aug 2023 05:49:13 GMTAccess-Control-Allow-Origin: *ETag: 64d5cbd

!DOCTYPE html>html xmlnshttp://www.w3.org/1999/xhtml classno-js>head>	meta http-equivContent-Type contenttext/html; charsetutf-8 />	title>TunnelCrack: Widespread design flaws in VPN clients/title>	meta namekeywords contentTunnelCrack, Bypass, Routing, VPN, WireGuard, OpenVPN, IPsec, Leak, Plaintext, Intercept, Tunnel, PPTP, L2TP, Mathy, Vanhoef />	meta namedescription contentWe present two widespread design flaws in VPN client. These can be abused to make a victim leak traffic in plaintext outside the protected VPN tunnel. />	link hrefcss/default.css relstylesheet typetext/css mediaall />	link relshortcut icon hrefimages/favicon.ico typeimage/x-icon>	link relicon hrefimages/favicon.ico typeimage/x-icon>	meta nameviewport contentwidthdevice-width, initial-scale1.0>	script typetext/javascript srcjs/jquery.min.js>/script>	script typetext/javascript srcjs/modernizr.min.js>/script>	!--if lt IE 9>	script srcjs/respond.src.js>/script>	!endif-->	!-- Global site tag (gtag.js) - Google Analytics -->	script async srchttps://www.googletagmanager.com/gtag/js?idG-VF51RERBYW>/script>	script>	  window.dataLayer  window.dataLayer || ;	  function gtag(){dataLayer.push(arguments);}	  gtag(js, new Date());	  gtag(config, G-5TM4JZ8KCY);	/script>/head>body>div idwrapper>	div idheader-wrapper>		div idheader classcontainer>			div idlogo>				img srcimages/logo.png width100%/>			/div>			div idmadeby>				h3>by a hrefhttps://distrinet.cs.kuleuven.be/>KU Leuven/a>, a hrefhttps://cyber.nyu.edu/>NYU/a>, and a hrefhttps://nyuad.nyu.edu/en/research/faculty-labs-and-projects/nyuad-ccs.html>NYU Abu Dhabi/a>			/h3>			/div>		/div>	/div>	div idmenu-wrapper>		div idmain-nav classcontainer>			span classcustom-mobile-menu-title styledisplay: none;>Navigate page/span>			ul classmenu>				li classpage_item>a href#intro>Intro/a>/li>				li classpage_item>a href#summary>Summary/a>/li>				li classpage_item>a href#paper>Paper/a>/li>				li classpage_item>a href#more>More Info/a>/li>			/ul>		/div>	/div>	div idpage classcontainer>	div idcontent>		!----------------

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > tunnelcrack.mathyvanhoef.com

Is this malicious?

Whois

DNS Resolutions

Port 80

Port 443