Report - mvgtajhptw.duckdns.org/en/

Report Overview

Submitted URL
mvgtajhptw.duckdns.org/en/
IP
103.80.134.63
ASN
#3786 LG DACOM Corporation
Submitted
2024-05-09 18:41:29
Access
public
Website Title
Manage your Apple ID - Apple
Final URL
mvgtajhptw.duckdns.org/en/main
Tags
dyndns
urlquery detections
Suspicious - DynDNS domain

Detections

urlquery
16
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
mvgtajhptw.duckdns.org	unknown	unknown	No data	No data	5.3 kB	379 kB	103.80.134.63

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (4)

	URL	Size	First Seen	Last Seen
	mvgtajhptw.duckdns.org/en/assets/card.js	59 kB	2024-03-27	2024-05-20
Pretty URL mvgtajhptw.duckdns.org/en/assets/card.js IP 103.80.134.63 ASN #3786 LG DACOM Corporation Introduced by scriptElement Embedded in HTML false Observations First Seen2024-03-27 17:58:11 Last Seen2024-05-20 12:41:19 Times Seen578 Hash 7aa76d18dd3e3598ac9561adf01f3882 26d9fcdd2b6bee0b3f1b96b015f3703b5fbd49e0 6d5516bbbebba2d51878f1e791b642f3b2944270b8e84770f15a16376b202213 Loading...

	mvgtajhptw.duckdns.org/en/runtime.9b214d14fa4ea25c94c0.js	2.3 kB	2024-03-27	2024-05-20
Pretty URL mvgtajhptw.duckdns.org/en/runtime.9b214d14fa4ea25c94c0.js IP 103.80.134.63 ASN #3786 LG DACOM Corporation Introduced by scriptElement Embedded in HTML false Observations First Seen2024-03-27 17:58:11 Last Seen2024-05-20 12:41:19 Times Seen398 Hash 4ac3e6290ad24ac46b8a1970a7efb266 6f792827e5974b69c7c9a87e81f33b5ef670bff3 94f516b9d49d3b5ecf42fba742d930a0224275eedb9d19b4c33644dc8c2a3c26 Loading...

	mvgtajhptw.duckdns.org/en/polyfills.649ac95cc0f663eb2ea5.js	46 kB	2024-03-27	2024-05-20
Pretty URL mvgtajhptw.duckdns.org/en/polyfills.649ac95cc0f663eb2ea5.js IP 103.80.134.63 ASN #3786 LG DACOM Corporation Introduced by scriptElement Embedded in HTML false Observations First Seen2024-03-27 17:58:12 Last Seen2024-05-20 12:41:19 Times Seen578 Hash 4794c42590c7158a1a334801f7068376 63e0e06b459566123ab988af6258369ba5b181dd 073c634b2120ecfe1b6b98e45f44d807088bd437e757eb3b049867a615e6a49d Loading...

	mvgtajhptw.duckdns.org/en/main.cb307f485390a6a94066.js	839 kB	2024-03-27	2024-05-20
Pretty URL mvgtajhptw.duckdns.org/en/main.cb307f485390a6a94066.js IP 103.80.134.63 ASN #3786 LG DACOM Corporation Introduced by scriptElement Embedded in HTML false Observations First Seen2024-03-27 17:58:12 Last Seen2024-05-20 12:41:19 Times Seen398 Hash bc44d3824775061c25f8df88d786c3e2 111302049dc6c747ff1c06e4f71b4633c0dec9da 8e89674e3a2a98869f629ec69abaf2dc5f499b53a3ee1016c6e3fbd36ad6a4be Loading...

HTTP Transactions (15)

URL IP Response Size

mvgtajhptw.duckdns.org/

103.80.134.63

0 B

URL
mvgtajhptw.duckdns.org/
IP
103.80.134.63:0
ASN
#3786 LG DACOM Corporation

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - DynDNS domain

HTTP Headers

GET / HTTP/1.1
Host: mvgtajhptw.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Content-Length: 0
Date: Thu, 09 May 2024 18:41:05 GMT
Server: Kestrel
Location: /en/
X-Rate-Limit-Limit: 24h
X-Rate-Limit-Remaining: 96
X-Rate-Limit-Reset: 2024-05-10T07:14:17.9822618Z

mvgtajhptw.duckdns.org/en/

103.80.134.63

520 B

URL User Request GET
mvgtajhptw.duckdns.org/en/
IP
103.80.134.63:0
ASN
#3786 LG DACOM Corporation

File type
HTML document, ASCII text
Size
520 B (520 bytes)
Hash
fb8b9d9bf56c5251a14ad8cf217df902
87852731aa55f66ce221f4d2379712c341f7bf00
3074a00c33a6892ee549ced168872d8ffb9c78fe10f47cea0921aed8ac60d6ee

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - DynDNS domain

HTTP Headers

GET /en/ HTTP/1.1
Host: mvgtajhptw.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/html
Date: Thu, 09 May 2024 18:41:05 GMT
Server: Kestrel
Accept-Ranges: bytes
Content-Encoding: gzip
ETag: "1d9fe46cfb43625"
Last-Modified: Sat, 14 Oct 2023 02:33:27 GMT
Transfer-Encoding: chunked
Vary: Accept-Encoding
X-Rate-Limit-Limit: 24h
X-Rate-Limit-Remaining: 95
X-Rate-Limit-Reset: 2024-05-10T07:14:17.9822618Z

mvgtajhptw.duckdns.org/en/

103.80.134.63

520 B

URL User Request GET
mvgtajhptw.duckdns.org/en/
IP
103.80.134.63:0
ASN
#3786 LG DACOM Corporation

File type
HTML document, ASCII text
Size
520 B (520 bytes)
Hash
fb8b9d9bf56c5251a14ad8cf217df902
87852731aa55f66ce221f4d2379712c341f7bf00
3074a00c33a6892ee549ced168872d8ffb9c78fe10f47cea0921aed8ac60d6ee

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - DynDNS domain

HTTP Headers

GET /en/ HTTP/1.1
Host: mvgtajhptw.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/html
Date: Thu, 09 May 2024 18:41:06 GMT
Server: Kestrel
Accept-Ranges: bytes
Content-Encoding: gzip
ETag: "1d9fe46cfb43625"
Last-Modified: Sat, 14 Oct 2023 02:33:27 GMT
Transfer-Encoding: chunked
Vary: Accept-Encoding
X-Rate-Limit-Limit: 24h
X-Rate-Limit-Remaining: 94
X-Rate-Limit-Reset: 2024-05-10T07:14:17.9822618Z

mvgtajhptw.duckdns.org/en/assets/card.css

103.80.134.63

200 OK

5.0 kB

URL GET HTTP/1.1
mvgtajhptw.duckdns.org/en/assets/card.css
IP
103.80.134.63:80
ASN
#3786 LG DACOM Corporation

Requested by
http://mvgtajhptw.duckdns.org/en/

File type
Unicode text, UTF-8 text, with very long lines (27071)
Size
5.0 kB (4977 bytes)
Hash
8c10638062fc10e7800b5f041d66cbe1
94a8f282dc29814af277016d8741fc857b49304d
96712b90b0eb91764af520996a42c0bff93e823e5e825e2544d1ef4723d625d3

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - DynDNS domain

HTTP Headers

GET /en/assets/card.css HTTP/1.1
Host: mvgtajhptw.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mvgtajhptw.duckdns.org/en/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/css
Date: Thu, 09 May 2024 18:41:07 GMT
Server: Kestrel
Accept-Ranges: bytes
Content-Encoding: gzip
ETag: "1d7d7f36c04bfc4"
Last-Modified: Fri, 12 Nov 2021 18:30:52 GMT
Transfer-Encoding: chunked
Vary: Accept-Encoding

mvgtajhptw.duckdns.org/en/assets/card.js

103.80.134.63

200 OK

16 kB

URL GET HTTP/1.1
mvgtajhptw.duckdns.org/en/assets/card.js
IP
103.80.134.63:80
ASN
#3786 LG DACOM Corporation

Requested by
http://mvgtajhptw.duckdns.org/en/

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (51786)
Size
16 kB (16275 bytes)
Hash
7aa76d18dd3e3598ac9561adf01f3882
26d9fcdd2b6bee0b3f1b96b015f3703b5fbd49e0
6d5516bbbebba2d51878f1e791b642f3b2944270b8e84770f15a16376b202213

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - DynDNS domain

HTTP Headers

GET /en/assets/card.js HTTP/1.1
Host: mvgtajhptw.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mvgtajhptw.duckdns.org/en/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/javascript
Date: Thu, 09 May 2024 18:41:07 GMT
Server: Kestrel
Accept-Ranges: bytes
Content-Encoding: gzip
ETag: "1d7d7f3614aa44b"
Last-Modified: Fri, 12 Nov 2021 18:30:34 GMT
Transfer-Encoding: chunked
Vary: Accept-Encoding

mvgtajhptw.duckdns.org/en/runtime.9b214d14fa4ea25c94c0.js

103.80.134.63

200 OK

1.2 kB

URL GET HTTP/1.1
mvgtajhptw.duckdns.org/en/runtime.9b214d14fa4ea25c94c0.js
IP
103.80.134.63:80
ASN
#3786 LG DACOM Corporation

Requested by
http://mvgtajhptw.duckdns.org/en/

File type
JavaScript source, ASCII text, with very long lines (2278), with no line terminators
Size
1.2 kB (1160 bytes)
Hash
4ac3e6290ad24ac46b8a1970a7efb266
6f792827e5974b69c7c9a87e81f33b5ef670bff3
94f516b9d49d3b5ecf42fba742d930a0224275eedb9d19b4c33644dc8c2a3c26

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - DynDNS domain

HTTP Headers

GET /en/runtime.9b214d14fa4ea25c94c0.js HTTP/1.1
Host: mvgtajhptw.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mvgtajhptw.duckdns.org/en/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/javascript
Date: Thu, 09 May 2024 18:41:07 GMT
Server: Kestrel
Accept-Ranges: bytes
Content-Encoding: gzip
ETag: "1d9fe46cdea7ae6"
Last-Modified: Sat, 14 Oct 2023 02:33:24 GMT
Transfer-Encoding: chunked
Vary: Accept-Encoding

mvgtajhptw.duckdns.org/en/styles.2b2408b28c6b13bb450e.css

103.80.134.63

200 OK

28 kB

URL GET HTTP/1.1
mvgtajhptw.duckdns.org/en/styles.2b2408b28c6b13bb450e.css
IP
103.80.134.63:80
ASN
#3786 LG DACOM Corporation

Requested by
http://mvgtajhptw.duckdns.org/en/

File type
ASCII text, with very long lines (65536), with no line terminators
Size
28 kB (27832 bytes)
Hash
c739cee2deb86082090e380beec5b7a0
f54b118cf0b048e09c70ad1ecf661a21b1a47406
0697729b655b3fadc015ce16eecd8cbd3b48a9e34e3c2a3e8b6ad0f8053887d2

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - DynDNS domain

HTTP Headers

GET /en/styles.2b2408b28c6b13bb450e.css HTTP/1.1
Host: mvgtajhptw.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mvgtajhptw.duckdns.org/en/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/css
Date: Thu, 09 May 2024 18:41:07 GMT
Server: Kestrel
Accept-Ranges: bytes
Content-Encoding: gzip
ETag: "1d9fe46cde87d4f"
Last-Modified: Sat, 14 Oct 2023 02:33:24 GMT
Transfer-Encoding: chunked
Vary: Accept-Encoding

mvgtajhptw.duckdns.org/en/polyfills.649ac95cc0f663eb2ea5.js

103.80.134.63

200 OK

17 kB

URL GET HTTP/1.1
mvgtajhptw.duckdns.org/en/polyfills.649ac95cc0f663eb2ea5.js
IP
103.80.134.63:80
ASN
#3786 LG DACOM Corporation

Requested by
http://mvgtajhptw.duckdns.org/en/

File type
JavaScript source, ASCII text, with very long lines (45945), with no line terminators
Size
17 kB (16801 bytes)
Hash
4794c42590c7158a1a334801f7068376
63e0e06b459566123ab988af6258369ba5b181dd
073c634b2120ecfe1b6b98e45f44d807088bd437e757eb3b049867a615e6a49d

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - DynDNS domain

HTTP Headers

GET /en/polyfills.649ac95cc0f663eb2ea5.js HTTP/1.1
Host: mvgtajhptw.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mvgtajhptw.duckdns.org/en/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/javascript
Date: Thu, 09 May 2024 18:41:07 GMT
Server: Kestrel
Accept-Ranges: bytes
Content-Encoding: gzip
ETag: "1d9fe46cdeac179"
Last-Modified: Sat, 14 Oct 2023 02:33:24 GMT
Transfer-Encoding: chunked
Vary: Accept-Encoding

mvgtajhptw.duckdns.org/en/main.cb307f485390a6a94066.js

103.80.134.63

200 OK

243 kB

URL GET HTTP/1.1
mvgtajhptw.duckdns.org/en/main.cb307f485390a6a94066.js
IP
103.80.134.63:80
ASN
#3786 LG DACOM Corporation

Requested by
http://mvgtajhptw.duckdns.org/en/

File type
JavaScript source, ASCII text, with very long lines (63865)
Size
243 kB (242917 bytes)
Hash
bc44d3824775061c25f8df88d786c3e2
111302049dc6c747ff1c06e4f71b4633c0dec9da
8e89674e3a2a98869f629ec69abaf2dc5f499b53a3ee1016c6e3fbd36ad6a4be

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - DynDNS domain

HTTP Headers

GET /en/main.cb307f485390a6a94066.js HTTP/1.1
Host: mvgtajhptw.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mvgtajhptw.duckdns.org/en/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/javascript
Date: Thu, 09 May 2024 18:41:07 GMT
Server: Kestrel
Accept-Ranges: bytes
Content-Encoding: gzip
ETag: "1d9fe46cf17512f"
Last-Modified: Sat, 14 Oct 2023 02:33:26 GMT
Transfer-Encoding: chunked
Vary: Accept-Encoding

mvgtajhptw.duckdns.org/en/assets/logo.png

103.80.134.63

200 OK

34 kB

URL GET HTTP/1.1
mvgtajhptw.duckdns.org/en/assets/logo.png
IP
103.80.134.63:80
ASN
#3786 LG DACOM Corporation

Requested by
http://mvgtajhptw.duckdns.org/en/

File type
PNG image data, 720 x 721, 8-bit colormap, non-interlaced
Size
34 kB (34355 bytes)
Hash
4852c60ddb8653928e43fa9d24b911b3
e037ce421215511dbce720d6f6503e8fa9b8ea9d
07126b04b6559c56df43d120f4c5487f1ca9e335428b3d82c2d2d24459990561

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - DynDNS domain

HTTP Headers

GET /en/assets/logo.png HTTP/1.1
Host: mvgtajhptw.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mvgtajhptw.duckdns.org/en/main
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Length: 34355
Content-Type: image/png
Date: Thu, 09 May 2024 18:41:09 GMT
Server: Kestrel
Accept-Ranges: bytes
ETag: "1d9ab83779dc633"
Last-Modified: Fri, 30 Jun 2023 18:48:32 GMT

mvgtajhptw.duckdns.org/en/assets/menu.png

103.80.134.63

200 OK

687 B

URL GET HTTP/1.1
mvgtajhptw.duckdns.org/en/assets/menu.png
IP
103.80.134.63:80
ASN
#3786 LG DACOM Corporation

Requested by
http://mvgtajhptw.duckdns.org/en/

File type
PNG image data, 49 x 48, 8-bit/color RGBA, non-interlaced
Size
687 B (687 bytes)
Hash
da0b0fdd44746082b7f978a5f70f0e78
69a6755ecad7defee0b3de296d1352dae7cae626
00543da96852706a4d679197d06a00385869a5ce868c2687e7ab23a5f83fe4e4

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - DynDNS domain

HTTP Headers

GET /en/assets/menu.png HTTP/1.1
Host: mvgtajhptw.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mvgtajhptw.duckdns.org/en/main
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Length: 687
Content-Type: image/png
Date: Thu, 09 May 2024 18:41:09 GMT
Server: Kestrel
Accept-Ranges: bytes
ETag: "1d9ab7df8593f2f"
Last-Modified: Fri, 30 Jun 2023 18:09:11 GMT

mvgtajhptw.duckdns.org/en/assets/jt.png

103.80.134.63

200 OK

4.1 kB

URL GET HTTP/1.1
mvgtajhptw.duckdns.org/en/assets/jt.png
IP
103.80.134.63:80
ASN
#3786 LG DACOM Corporation

Requested by
http://mvgtajhptw.duckdns.org/en/

File type
PNG image data, 126 x 126, 8-bit/color RGBA, non-interlaced
Size
4.1 kB (4129 bytes)
Hash
a64f3508282fa585f502c7283cfc853a
c266d5102a4fd1d5d9980799a51a345390b5d533
ff3323d9098ef10b0d36ef5c9219481d03afb2d307a5144a6ff3f509b31110f4

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - DynDNS domain

HTTP Headers

GET /en/assets/jt.png HTTP/1.1
Host: mvgtajhptw.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mvgtajhptw.duckdns.org/en/main
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Length: 4129
Content-Type: image/png
Date: Thu, 09 May 2024 18:41:09 GMT
Server: Kestrel
Accept-Ranges: bytes
ETag: "1d5318f817f9521"
Last-Modified: Wed, 03 Jul 2019 11:07:30 GMT

mvgtajhptw.duckdns.org/en/image_small.1771014580291c90faaa.svg

103.80.134.63

200 OK

898 B

URL GET HTTP/1.1
mvgtajhptw.duckdns.org/en/image_small.1771014580291c90faaa.svg
IP
103.80.134.63:80
ASN
#3786 LG DACOM Corporation

Requested by
http://mvgtajhptw.duckdns.org/en/

File type
SVG Scalable Vector Graphics image
Size
898 B (898 bytes)
Hash
4dc220ff2f9395c2cd7c34de8776a6e7
9dfcb00873e24be99f2965c6447e393b71cd6fc1
c18d99c87523f8ef73e5dc2e86aa5917da37e5564a7f591cb43bc32049f76d88

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - DynDNS domain

HTTP Headers

GET /en/image_small.1771014580291c90faaa.svg HTTP/1.1
Host: mvgtajhptw.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mvgtajhptw.duckdns.org/en/main
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Length: 898
Content-Type: image/svg+xml
Date: Thu, 09 May 2024 18:41:09 GMT
Server: Kestrel
Accept-Ranges: bytes
ETag: "1d9fe46cdea7182"
Last-Modified: Sat, 14 Oct 2023 02:33:24 GMT

mvgtajhptw.duckdns.org/en/apple.f843c50675ae358ea181.svg

103.80.134.63

200 OK

1.5 kB

URL GET HTTP/1.1
mvgtajhptw.duckdns.org/en/apple.f843c50675ae358ea181.svg
IP
103.80.134.63:80
ASN
#3786 LG DACOM Corporation

Requested by
http://mvgtajhptw.duckdns.org/en/

File type
SVG Scalable Vector Graphics image
Size
1.5 kB (1484 bytes)
Hash
26cbb4bfb27dd56b0ed09a961f28145b
b8e84ed32f81f41251c815e0132fed0fba3489f1
c21d714e92269a3dcf05c24db9aec96171671d0dcd59b867c2acb953d3cb551a

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - DynDNS domain

HTTP Headers

GET /en/apple.f843c50675ae358ea181.svg HTTP/1.1
Host: mvgtajhptw.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mvgtajhptw.duckdns.org/en/main
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Length: 1484
Content-Type: image/svg+xml
Date: Thu, 09 May 2024 18:41:09 GMT
Server: Kestrel
Accept-Ranges: bytes
ETag: "1d9fe46cdea77cc"
Last-Modified: Sat, 14 Oct 2023 02:33:24 GMT

mvgtajhptw.duckdns.org/en/favicon.ico

103.80.134.63

200 OK

22 kB

URL GET HTTP/1.1
mvgtajhptw.duckdns.org/en/favicon.ico
IP
103.80.134.63:80
ASN
#3786 LG DACOM Corporation

Requested by
http://mvgtajhptw.duckdns.org/en/

File type
MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Size
22 kB (22382 bytes)
Hash
891e510219786f543ca998282ed99f45
19fe2ff6a2418bcb44b02308b998cef84199ee08
e4bdf72e2f803f7e19907c12f407ac7f7cd5f1f94bfd730b9be24b0d49191b48

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - DynDNS domain

HTTP Headers

GET /en/favicon.ico HTTP/1.1
Host: mvgtajhptw.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mvgtajhptw.duckdns.org/en/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Length: 22382
Content-Type: image/x-icon
Date: Thu, 09 May 2024 18:41:09 GMT
Server: Kestrel
Accept-Ranges: bytes
ETag: "1d71ee1f8b7af6e"
Last-Modified: Mon, 22 Mar 2021 06:09:52 GMT

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (4)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (15)

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1