Report - danske.serveirc.com/id/dd/DN/Login.php

Report Overview

Submitted URL
danske.serveirc.com/id/dd/DN/Login.php
IP
159.65.61.149
ASN
#14061 DIGITALOCEAN-ASN
Submitted
2024-04-25 15:33:43
Access
public
Website Title
home-Brand
Final URL
danske.serveirc.com/id/dd/DN/Login.php
Tags
dyndns
urlquery detections
Suspicious - DynDNS domain

Detections

urlquery
12
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
danske.serveirc.com	unknown	unknown	No data	No data	5.2 kB	620 kB	159.65.61.149
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-04-25	461 B	21 kB	142.250.74.74
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-04-25	1.1 kB	42 kB	216.58.207.227

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (14)

URL IP Response Size

danske.serveirc.com/id/dd/DN/Login.php

159.65.61.149

200 OK

1.5 kB

URL User Request GET HTTP/2
danske.serveirc.com/id/dd/DN/Login.php
IP
159.65.61.149:443
ASN
#14061 DIGITALOCEAN-ASN

Certificate
IssuerLet's Encrypt
Subjectdanske.serveirc.com
Fingerprint16:A8:D7:CC:FE:95:F5:5D:8D:16:32:E4:4C:42:56:C0:00:84:DE:54
ValidityThu, 25 Apr 2024 10:50:51 GMT - Wed, 24 Jul 2024 10:50:50 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (303), with CRLF line terminators
Size
1.5 kB (1514 bytes)
Hash
e2d118dbb6a7c8c88961d110ba756149
ed861fd8ef8741e93d898b4f79dcef95011c0a6e
b280c8c7a7ecaa9d798c499d7b6b7d390a250b603b206a9fd9fcf66f2d2c73cc

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - DynDNS domain

HTTP Headers

GET /id/dd/DN/Login.php HTTP/1.1
Host: danske.serveirc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 15:33:17 GMT
content-type: text/html; charset=UTF-8
content-length: 1514
vary: Accept-Encoding
content-encoding: gzip
x-powered-by: PHP/8.2.18, PleskLin
X-Firefox-Spdy: h2

danske.serveirc.com/id/dd/DN/style/ImageRender.jpg

159.65.61.149

200 OK

23 kB

URL GET HTTP/2
danske.serveirc.com/id/dd/DN/style/ImageRender.jpg
IP
159.65.61.149:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://danske.serveirc.com/id/dd/DN/Login.php
Certificate
IssuerLet's Encrypt
Subjectdanske.serveirc.com
Fingerprint16:A8:D7:CC:FE:95:F5:5D:8D:16:32:E4:4C:42:56:C0:00:84:DE:54
ValidityThu, 25 Apr 2024 10:50:51 GMT - Wed, 24 Jul 2024 10:50:50 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 550x58, components 3
Size
23 kB (23150 bytes)
Hash
5a5f0ae228aa00ba2ab821a219a06c16
6deebb20408129b3b577b9dd9b28a7c06884630f
683f5b803aec9e336fa2e847c10b4c52e241e08cf1b39c48f51ad8cf29abc6f4

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - DynDNS domain

HTTP Headers

GET /id/dd/DN/style/ImageRender.jpg HTTP/1.1
Host: danske.serveirc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://danske.serveirc.com/id/dd/DN/Login.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 15:33:18 GMT
content-type: image/jpeg
content-length: 23150
last-modified: Wed, 10 Nov 2021 22:27:58 GMT
etag: "618c476e-5a6e"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2

danske.serveirc.com/id/dd/DN/style/s2.png

159.65.61.149

200 OK

27 kB

URL GET HTTP/2
danske.serveirc.com/id/dd/DN/style/s2.png
IP
159.65.61.149:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://danske.serveirc.com/id/dd/DN/Login.php
Certificate
IssuerLet's Encrypt
Subjectdanske.serveirc.com
Fingerprint16:A8:D7:CC:FE:95:F5:5D:8D:16:32:E4:4C:42:56:C0:00:84:DE:54
ValidityThu, 25 Apr 2024 10:50:51 GMT - Wed, 24 Jul 2024 10:50:50 GMT

File type
PNG image data, 742 x 272, 8-bit/color RGBA, non-interlaced
Size
27 kB (27166 bytes)
Hash
488ae5d5016c01d1b40c51e1ab443fa4
ba2c09e57a879c0e22ec8219021747dd3574808f
d564ebadd34678ed4bbfb820d23fc4518d8e8e7e04253d0019413ff02d963c80

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - DynDNS domain

HTTP Headers

GET /id/dd/DN/style/s2.png HTTP/1.1
Host: danske.serveirc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://danske.serveirc.com/id/dd/DN/Login.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 15:33:18 GMT
content-type: image/png
content-length: 27166
last-modified: Wed, 10 Nov 2021 22:27:58 GMT
etag: "618c476e-6a1e"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2

danske.serveirc.com/id/dd/DN/style/styles.css

159.65.61.149

200 OK

236 B

URL GET HTTP/2
danske.serveirc.com/id/dd/DN/style/styles.css
IP
159.65.61.149:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://danske.serveirc.com/id/dd/DN/Login.php
Certificate
IssuerLet's Encrypt
Subjectdanske.serveirc.com
Fingerprint16:A8:D7:CC:FE:95:F5:5D:8D:16:32:E4:4C:42:56:C0:00:84:DE:54
ValidityThu, 25 Apr 2024 10:50:51 GMT - Wed, 24 Jul 2024 10:50:50 GMT

File type
ASCII text, with very long lines (500), with no line terminators
Size
236 B (236 bytes)
Hash
2528b47b032341ce951bad4eb7bec58f
709ab24d14c76b5213a4827d858c7758529d1061
ea7d0e26556f5b72b0223547446bafc52347ec0b29cd27ea254cb0e37542e962

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - DynDNS domain

HTTP Headers

GET /id/dd/DN/style/styles.css HTTP/1.1
Host: danske.serveirc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://danske.serveirc.com/id/dd/DN/Login.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 15:33:18 GMT
content-type: text/css
content-length: 236
x-accel-version: 0.01
last-modified: Wed, 10 Nov 2021 22:27:58 GMT
etag: "1f4-5d076bcee3780-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-powered-by: PleskLin
X-Firefox-Spdy: h2

danske.serveirc.com/id/dd/DN/style/s1.png

159.65.61.149

200 OK

23 kB

URL GET HTTP/2
danske.serveirc.com/id/dd/DN/style/s1.png
IP
159.65.61.149:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://danske.serveirc.com/id/dd/DN/Login.php
Certificate
IssuerLet's Encrypt
Subjectdanske.serveirc.com
Fingerprint16:A8:D7:CC:FE:95:F5:5D:8D:16:32:E4:4C:42:56:C0:00:84:DE:54
ValidityThu, 25 Apr 2024 10:50:51 GMT - Wed, 24 Jul 2024 10:50:50 GMT

File type
PNG image data, 740 x 198, 8-bit/color RGBA, non-interlaced
Size
23 kB (22811 bytes)
Hash
25b2235dd17780f001d44c0f0d8d26e8
c58046f68a1dbce5cae0aa300bcdba8a0eb5713e
881057bedbfb41fc0d4a695c7cf69363c791f4e4c186807e1579af956a417d34

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - DynDNS domain

HTTP Headers

GET /id/dd/DN/style/s1.png HTTP/1.1
Host: danske.serveirc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://danske.serveirc.com/id/dd/DN/Login.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 15:33:18 GMT
content-type: image/png
content-length: 22811
last-modified: Wed, 10 Nov 2021 22:27:58 GMT
etag: "618c476e-591b"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2

danske.serveirc.com/id/dd/DN/style/logo.png

159.65.61.149

200 OK

8.6 kB

URL GET HTTP/2
danske.serveirc.com/id/dd/DN/style/logo.png
IP
159.65.61.149:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://danske.serveirc.com/id/dd/DN/Login.php
Certificate
IssuerLet's Encrypt
Subjectdanske.serveirc.com
Fingerprint16:A8:D7:CC:FE:95:F5:5D:8D:16:32:E4:4C:42:56:C0:00:84:DE:54
ValidityThu, 25 Apr 2024 10:50:51 GMT - Wed, 24 Jul 2024 10:50:50 GMT

File type
PNG image data, 384 x 76, 8-bit/color RGBA, non-interlaced
Size
8.6 kB (8595 bytes)
Hash
07e60dec9541b839a695a946fbb80ee1
a4645534f37da5264986ce428866f0425987ad5c
660c5b2f29f876267f130d0cf33a26bf2ea85c7bbaa450609b0027ef372c542d

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - DynDNS domain

HTTP Headers

GET /id/dd/DN/style/logo.png HTTP/1.1
Host: danske.serveirc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://danske.serveirc.com/id/dd/DN/Login.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 15:33:18 GMT
content-type: image/png
content-length: 8595
last-modified: Wed, 10 Nov 2021 22:46:26 GMT
etag: "618c4bc2-2193"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2

danske.serveirc.com/id/dd/DN/style/underlog.png

159.65.61.149

200 OK

328 kB

URL GET HTTP/2
danske.serveirc.com/id/dd/DN/style/underlog.png
IP
159.65.61.149:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://danske.serveirc.com/id/dd/DN/Login.php
Certificate
IssuerLet's Encrypt
Subjectdanske.serveirc.com
Fingerprint16:A8:D7:CC:FE:95:F5:5D:8D:16:32:E4:4C:42:56:C0:00:84:DE:54
ValidityThu, 25 Apr 2024 10:50:51 GMT - Wed, 24 Jul 2024 10:50:50 GMT

File type
PNG image data, 1226 x 1134, 8-bit/color RGBA, non-interlaced
Size
328 kB (327986 bytes)
Hash
df478bfc21aa891092196a7accd4ef5b
ccc744055d395950e3bd52c0f1abf6601022ff1e
bcfb8521f8f3a41426b3e075e44391f1d09c3ca8ec33b250da9d2b4593d3e457

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - DynDNS domain

HTTP Headers

GET /id/dd/DN/style/underlog.png HTTP/1.1
Host: danske.serveirc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://danske.serveirc.com/id/dd/DN/Login.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 15:33:18 GMT
content-type: image/png
content-length: 327986
last-modified: Wed, 10 Nov 2021 22:27:58 GMT
etag: "618c476e-50132"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2

fonts.googleapis.com/css?family=Montserrat:400,400i,700,700i,600,600i

142.250.74.74

200 OK

20 kB

URL GET HTTP/2
fonts.googleapis.com/css?family=Montserrat:400,400i,700,700i,600,600i
IP
142.250.74.74:443
ASN
#15169 GOOGLE

Requested by
https://danske.serveirc.com/id/dd/DN/Login.php
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2
ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT

File type
gzip compressed data, max compression
Size
20 kB (20542 bytes)
Hash
ad206999595e9c2107cde03c71f32594
5828ce1ef01011b139a3e0c3f33d60a47e4a682d
1c9f96230c50c6884f2e6e7c2def75abc19fca8406856a87ad9ba95350232888

HTTP Headers

GET /css?family=Montserrat:400,400i,700,700i,600,600i HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://danske.serveirc.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 25 Apr 2024 15:33:18 GMT
date: Thu, 25 Apr 2024 15:33:18 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/montserrat/v18/JTURjIg1_i6t8kCHKm45_dJE3gnD_g.woff2

216.58.207.227

200 OK

20 kB

URL GET HTTP/2
fonts.gstatic.com/s/montserrat/v18/JTURjIg1_i6t8kCHKm45_dJE3gnD_g.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://danske.serveirc.com/id/dd/DN/Login.php
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT

File type
Web Open Font Format (Version 2), TrueType, length 20040, version 1.0
Size
20 kB (20040 bytes)
Hash
7bad4a6005ffca3966b2a099250e0638
5d29f82436d412c5e5665a876a4e30f249fdd887
ec7d69015be507ee6045d259f50b6cf8ccb52ec7b41ec1bf50fee681683bea60

HTTP Headers

GET /s/montserrat/v18/JTURjIg1_i6t8kCHKm45_dJE3gnD_g.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://danske.serveirc.com
DNT: 1
Connection: keep-alive
Referer: https://danske.serveirc.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 20040
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 00:43:05 GMT
expires: Wed, 23 Apr 2025 00:43:05 GMT
cache-control: public, max-age=31536000
age: 226213
last-modified: Tue, 10 Aug 2021 00:20:44 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

danske.serveirc.com/id/dd/DN/style/baguetteBox.css

159.65.61.149

200 OK

9.0 kB

URL GET HTTP/2
danske.serveirc.com/id/dd/DN/style/baguetteBox.css
IP
159.65.61.149:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://danske.serveirc.com/id/dd/DN/Login.php
Certificate
IssuerLet's Encrypt
Subjectdanske.serveirc.com
Fingerprint16:A8:D7:CC:FE:95:F5:5D:8D:16:32:E4:4C:42:56:C0:00:84:DE:54
ValidityThu, 25 Apr 2024 10:50:51 GMT - Wed, 24 Jul 2024 10:50:50 GMT

File type
ASCII text, with very long lines (3498)
Size
9.0 kB (8961 bytes)
Hash
75c429ce0b33bd9b62b94adbb944633d
daa1532efa265f8cfbf0f2c51d7cdaba93c4811f
16a0b33679f25e5e47c4731d6fe450fd157f5fb7ea7cf710632f86da014bdd79

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - DynDNS domain

HTTP Headers

GET /id/dd/DN/style/baguetteBox.css HTTP/1.1
Host: danske.serveirc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://danske.serveirc.com/id/dd/DN/Login.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 15:33:18 GMT
content-type: text/css
last-modified: Wed, 10 Nov 2021 22:27:58 GMT
etag: W/"618c476e-e19"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2

danske.serveirc.com/id/dd/DN/style/bootstrap.css

159.65.61.149

200 OK

187 kB

URL GET HTTP/2
danske.serveirc.com/id/dd/DN/style/bootstrap.css
IP
159.65.61.149:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://danske.serveirc.com/id/dd/DN/Login.php
Certificate
IssuerLet's Encrypt
Subjectdanske.serveirc.com
Fingerprint16:A8:D7:CC:FE:95:F5:5D:8D:16:32:E4:4C:42:56:C0:00:84:DE:54
ValidityThu, 25 Apr 2024 10:50:51 GMT - Wed, 24 Jul 2024 10:50:50 GMT

File type

Size
187 kB (186728 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - DynDNS domain

HTTP Headers

GET /id/dd/DN/style/bootstrap.css HTTP/1.1
Host: danske.serveirc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://danske.serveirc.com/id/dd/DN/Login.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 15:33:18 GMT
content-type: text/css
last-modified: Wed, 10 Nov 2021 22:27:58 GMT
etag: W/"618c476e-2d968"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2

danske.serveirc.com/id/dd/DN/style/css.css

159.65.61.149

200 OK

9.7 kB

URL GET HTTP/2
danske.serveirc.com/id/dd/DN/style/css.css
IP
159.65.61.149:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://danske.serveirc.com/id/dd/DN/Login.php
Certificate
IssuerLet's Encrypt
Subjectdanske.serveirc.com
Fingerprint16:A8:D7:CC:FE:95:F5:5D:8D:16:32:E4:4C:42:56:C0:00:84:DE:54
ValidityThu, 25 Apr 2024 10:50:51 GMT - Wed, 24 Jul 2024 10:50:50 GMT

File type
ASCII text, with very long lines (9986), with no line terminators
Size
9.7 kB (9746 bytes)
Hash
d9b06423e39df5619ecc46c53c8196aa
eb242132000ca0f89cf412de952326cb7400f131
541644dccb972a03285136cb206bf8f41ce7cf6f2f65153f32a47aea63198931

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - DynDNS domain

HTTP Headers

GET /id/dd/DN/style/css.css HTTP/1.1
Host: danske.serveirc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://danske.serveirc.com/id/dd/DN/Login.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 15:33:18 GMT
content-type: text/css
last-modified: Wed, 10 Nov 2021 22:27:58 GMT
etag: W/"618c476e-2612"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2

fonts.gstatic.com/s/montserrat/v18/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2

216.58.207.227

200 OK

20 kB

URL GET HTTP/2
fonts.gstatic.com/s/montserrat/v18/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://danske.serveirc.com/id/dd/DN/Login.php
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT

File type
Web Open Font Format (Version 2), TrueType, length 19844, version 1.0
Size
20 kB (19844 bytes)
Hash
8037e9fc6d8fca40a9eb783c7510b12e
decd8fb49532471ce8e13b6ef2e4923790e08e59
2b26a74f3c0e529bc8fccfa6b1db8e083e738992266359fde1a5bd0aaa81cbc3

HTTP Headers

GET /s/montserrat/v18/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://danske.serveirc.com
DNT: 1
Connection: keep-alive
Referer: https://danske.serveirc.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 19844
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 08:26:43 GMT
expires: Wed, 23 Apr 2025 08:26:43 GMT
cache-control: public, max-age=31536000
age: 198395
last-modified: Tue, 10 Aug 2021 00:20:10 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

danske.serveirc.com/favicon.ico

159.65.61.149

404 Not Found

808 B

URL GET HTTP/2
danske.serveirc.com/favicon.ico
IP
159.65.61.149:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://danske.serveirc.com/id/dd/DN/Login.php
Certificate
IssuerLet's Encrypt
Subjectdanske.serveirc.com
Fingerprint16:A8:D7:CC:FE:95:F5:5D:8D:16:32:E4:4C:42:56:C0:00:84:DE:54
ValidityThu, 25 Apr 2024 10:50:51 GMT - Wed, 24 Jul 2024 10:50:50 GMT

File type
HTML document, ASCII text, with very long lines (866), with no line terminators
Size
808 B (808 bytes)
Hash
b45bdabc5c2538b0c4e5f352bcdfb585
5a97ce87ce8d3d86a043c1a5e68e968e20a1e146
c96189c857253fcdbe13dfcbc7f919050fae21ccb7116c3078ee3c8d8d0f12c7

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - DynDNS domain

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: danske.serveirc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://danske.serveirc.com/id/dd/DN/Login.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
server: nginx
date: Thu, 25 Apr 2024 15:33:18 GMT
content-type: text/html
last-modified: Thu, 25 Apr 2024 11:49:16 GMT
etag: W/"328-616ea606af7dc"
content-encoding: br
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (14)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by