| mhxuqmhcbt.duckdns.org/ |  103.80.134.63 | | 0 B |
IP103.80.134.63:0 ASN#3786 LG DACOM Corporation
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| urlquery | suspicious | Suspicious - DynDNS domain | | Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: mhxuqmhcbt.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Content-Length: 0
Date: Sat, 27 Apr 2024 04:22:25 GMT
Server: Kestrel
Location: /en/
X-Rate-Limit-Limit: 24h
X-Rate-Limit-Remaining: 90
X-Rate-Limit-Reset: 2024-04-27T05:27:40.6248357Z
|
|
| mhxuqmhcbt.duckdns.org/en/ | 103.80.134.63 | | 520 B |
URL mhxuqmhcbt.duckdns.org/en/ IP103.80.134.63:0 ASN#3786 LG DACOM Corporation
File typeHTML document, ASCII text Hashfb8b9d9bf56c5251a14ad8cf217df902 87852731aa55f66ce221f4d2379712c341f7bf00 3074a00c33a6892ee549ced168872d8ffb9c78fe10f47cea0921aed8ac60d6ee
| Analyzer | Verdict | Alert |
|---|
| urlquery | suspicious | Suspicious - DynDNS domain | | Quad9 DNS | malicious | Sinkholed |
GET /en/ HTTP/1.1
Host: mhxuqmhcbt.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/html
Date: Sat, 27 Apr 2024 04:22:25 GMT
Server: Kestrel
Accept-Ranges: bytes
Content-Encoding: gzip
ETag: "1d9fe46cfb43625"
Last-Modified: Sat, 14 Oct 2023 02:33:27 GMT
Transfer-Encoding: chunked
Vary: Accept-Encoding
X-Rate-Limit-Limit: 24h
X-Rate-Limit-Remaining: 89
X-Rate-Limit-Reset: 2024-04-27T05:27:40.6248357Z
|
|
| mhxuqmhcbt.duckdns.org/ja/ | 103.80.134.63 | | 520 B |
URL User Request GET mhxuqmhcbt.duckdns.org/ja/ IP103.80.134.63:0 ASN#3786 LG DACOM Corporation
File typeHTML document, ASCII text Hashb2984bb3d8f94426f4c6c6824f8a1928 2bceeda031a1d79155e584482d84ae260710739f 2f8fade3314267e26eaa7c716451d489c411b01dcbb38c7fa8e12b80fd776111
| Analyzer | Verdict | Alert |
|---|
| urlquery | suspicious | Suspicious - DynDNS domain | | OpenPhish | phishing | Apple Inc. | | Quad9 DNS | malicious | Sinkholed |
GET /ja/ HTTP/1.1
Host: mhxuqmhcbt.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/html
Date: Sat, 27 Apr 2024 04:22:26 GMT
Server: Kestrel
Accept-Ranges: bytes
Content-Encoding: gzip
ETag: "1d9fe46b9a676a5"
Last-Modified: Sat, 14 Oct 2023 02:32:50 GMT
Transfer-Encoding: chunked
Vary: Accept-Encoding
X-Rate-Limit-Limit: 24h
X-Rate-Limit-Remaining: 88
X-Rate-Limit-Reset: 2024-04-27T05:27:40.6248357Z
|
|
| mhxuqmhcbt.duckdns.org/ja/assets/card.css | 103.80.134.63 | 200 OK | 5.0 kB |
URL GET HTTP/1.1mhxuqmhcbt.duckdns.org/ja/assets/card.css IP103.80.134.63:80 ASN#3786 LG DACOM Corporation
Requested byhttp://mhxuqmhcbt.duckdns.org/ja/
File typeUnicode text, UTF-8 text, with very long lines (27071) Hash8c10638062fc10e7800b5f041d66cbe1 94a8f282dc29814af277016d8741fc857b49304d 96712b90b0eb91764af520996a42c0bff93e823e5e825e2544d1ef4723d625d3
| Analyzer | Verdict | Alert |
|---|
| urlquery | suspicious | Suspicious - DynDNS domain | | Quad9 DNS | malicious | Sinkholed |
GET /ja/assets/card.css HTTP/1.1
Host: mhxuqmhcbt.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mhxuqmhcbt.duckdns.org/ja/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/css
Date: Sat, 27 Apr 2024 04:22:27 GMT
Server: Kestrel
Accept-Ranges: bytes
Content-Encoding: gzip
ETag: "1d7d7f36c04bfc4"
Last-Modified: Fri, 12 Nov 2021 18:30:52 GMT
Transfer-Encoding: chunked
Vary: Accept-Encoding
|
|
| mhxuqmhcbt.duckdns.org/ja/assets/card.js | 103.80.134.63 | 200 OK | 16 kB |
URL GET HTTP/1.1mhxuqmhcbt.duckdns.org/ja/assets/card.js IP103.80.134.63:80 ASN#3786 LG DACOM Corporation
Requested byhttp://mhxuqmhcbt.duckdns.org/ja/
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (51786) Hash7aa76d18dd3e3598ac9561adf01f3882 26d9fcdd2b6bee0b3f1b96b015f3703b5fbd49e0 6d5516bbbebba2d51878f1e791b642f3b2944270b8e84770f15a16376b202213
| Analyzer | Verdict | Alert |
|---|
| urlquery | suspicious | Suspicious - DynDNS domain | | Quad9 DNS | malicious | Sinkholed |
GET /ja/assets/card.js HTTP/1.1
Host: mhxuqmhcbt.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mhxuqmhcbt.duckdns.org/ja/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/javascript
Date: Sat, 27 Apr 2024 04:22:27 GMT
Server: Kestrel
Accept-Ranges: bytes
Content-Encoding: gzip
ETag: "1d7d7f3614aa44b"
Last-Modified: Fri, 12 Nov 2021 18:30:34 GMT
Transfer-Encoding: chunked
Vary: Accept-Encoding
|
|
| mhxuqmhcbt.duckdns.org/ja/runtime.156de516a7ba9208026b.js | 103.80.134.63 | 200 OK | 1.2 kB |
URL GET HTTP/1.1mhxuqmhcbt.duckdns.org/ja/runtime.156de516a7ba9208026b.js IP103.80.134.63:80 ASN#3786 LG DACOM Corporation
Requested byhttp://mhxuqmhcbt.duckdns.org/ja/
File typeJavaScript source, ASCII text, with very long lines (2278), with no line terminators Hash5a7226fe34bbd2f4bc8e3efd61b1514d 1dac8efbc10708fa3f85c9197872ef306e94614e dd2081b259070d03d9e00286802dae0a8f1585152dda71b52213d64a99a04f52
| Analyzer | Verdict | Alert |
|---|
| urlquery | suspicious | Suspicious - DynDNS domain | | Quad9 DNS | malicious | Sinkholed |
GET /ja/runtime.156de516a7ba9208026b.js HTTP/1.1
Host: mhxuqmhcbt.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mhxuqmhcbt.duckdns.org/ja/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/javascript
Date: Sat, 27 Apr 2024 04:22:27 GMT
Server: Kestrel
Accept-Ranges: bytes
Content-Encoding: gzip
ETag: "1d9fe46b7dcb966"
Last-Modified: Sat, 14 Oct 2023 02:32:47 GMT
Transfer-Encoding: chunked
Vary: Accept-Encoding
|
|
| mhxuqmhcbt.duckdns.org/ja/styles.2b2408b28c6b13bb450e.css | 103.80.134.63 | 200 OK | 28 kB |
URL GET HTTP/1.1mhxuqmhcbt.duckdns.org/ja/styles.2b2408b28c6b13bb450e.css IP103.80.134.63:80 ASN#3786 LG DACOM Corporation
Requested byhttp://mhxuqmhcbt.duckdns.org/ja/
File typeASCII text, with very long lines (65536), with no line terminators Hashc739cee2deb86082090e380beec5b7a0 f54b118cf0b048e09c70ad1ecf661a21b1a47406 0697729b655b3fadc015ce16eecd8cbd3b48a9e34e3c2a3e8b6ad0f8053887d2
| Analyzer | Verdict | Alert |
|---|
| urlquery | suspicious | Suspicious - DynDNS domain | | Quad9 DNS | malicious | Sinkholed |
GET /ja/styles.2b2408b28c6b13bb450e.css HTTP/1.1
Host: mhxuqmhcbt.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mhxuqmhcbt.duckdns.org/ja/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/css
Date: Sat, 27 Apr 2024 04:22:27 GMT
Server: Kestrel
Accept-Ranges: bytes
Content-Encoding: gzip
ETag: "1d9fe46b7debecf"
Last-Modified: Sat, 14 Oct 2023 02:32:47 GMT
Transfer-Encoding: chunked
Vary: Accept-Encoding
|
|
| mhxuqmhcbt.duckdns.org/ja/polyfills.a4a2a7ca07c738452bb4.js | 103.80.134.63 | 200 OK | 17 kB |
URL GET HTTP/1.1mhxuqmhcbt.duckdns.org/ja/polyfills.a4a2a7ca07c738452bb4.js IP103.80.134.63:80 ASN#3786 LG DACOM Corporation
Requested byhttp://mhxuqmhcbt.duckdns.org/ja/
File typeJavaScript source, ASCII text, with very long lines (45945), with no line terminators Hash4794c42590c7158a1a334801f7068376 63e0e06b459566123ab988af6258369ba5b181dd 073c634b2120ecfe1b6b98e45f44d807088bd437e757eb3b049867a615e6a49d
| Analyzer | Verdict | Alert |
|---|
| urlquery | suspicious | Suspicious - DynDNS domain | | Quad9 DNS | malicious | Sinkholed |
GET /ja/polyfills.a4a2a7ca07c738452bb4.js HTTP/1.1
Host: mhxuqmhcbt.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mhxuqmhcbt.duckdns.org/ja/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/javascript
Date: Sat, 27 Apr 2024 04:22:27 GMT
Server: Kestrel
Accept-Ranges: bytes
Content-Encoding: gzip
ETag: "1d9fe46b7dc02f9"
Last-Modified: Sat, 14 Oct 2023 02:32:47 GMT
Transfer-Encoding: chunked
Vary: Accept-Encoding
|
|
| mhxuqmhcbt.duckdns.org/ja/main.6d85a567c47ccf2a9ce3.js | 103.80.134.63 | 200 OK | 243 kB |
URL GET HTTP/1.1mhxuqmhcbt.duckdns.org/ja/main.6d85a567c47ccf2a9ce3.js IP103.80.134.63:80 ASN#3786 LG DACOM Corporation
Requested byhttp://mhxuqmhcbt.duckdns.org/ja/
File typeJavaScript source, ASCII text, with very long lines (63941) Size243 kB (243286 bytes) Hashafe125c938dc31b1cdc707fd5d63832f 3134dd4435e4c4034bdcd780065550174fa4350d 048dfe433680e8f34bc3156767b771fc74f83bd33afd7ce5ee019aae06073ce7
| Analyzer | Verdict | Alert |
|---|
| urlquery | suspicious | Suspicious - DynDNS domain | | Quad9 DNS | malicious | Sinkholed |
GET /ja/main.6d85a567c47ccf2a9ce3.js HTTP/1.1
Host: mhxuqmhcbt.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mhxuqmhcbt.duckdns.org/ja/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/javascript
Date: Sat, 27 Apr 2024 04:22:27 GMT
Server: Kestrel
Accept-Ranges: bytes
Content-Encoding: gzip
ETag: "1d9fe46b9010f31"
Last-Modified: Sat, 14 Oct 2023 02:32:49 GMT
Transfer-Encoding: chunked
Vary: Accept-Encoding
|
|
| mhxuqmhcbt.duckdns.org/ja/assets/logo.png | 103.80.134.63 | 200 OK | 34 kB |
URL GET HTTP/1.1mhxuqmhcbt.duckdns.org/ja/assets/logo.png IP103.80.134.63:80 ASN#3786 LG DACOM Corporation
Requested byhttp://mhxuqmhcbt.duckdns.org/ja/
File typePNG image data, 720 x 721, 8-bit colormap, non-interlaced Hash4852c60ddb8653928e43fa9d24b911b3 e037ce421215511dbce720d6f6503e8fa9b8ea9d 07126b04b6559c56df43d120f4c5487f1ca9e335428b3d82c2d2d24459990561
| Analyzer | Verdict | Alert |
|---|
| urlquery | suspicious | Suspicious - DynDNS domain | | Quad9 DNS | malicious | Sinkholed |
GET /ja/assets/logo.png HTTP/1.1
Host: mhxuqmhcbt.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mhxuqmhcbt.duckdns.org/ja/main
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 34355
Content-Type: image/png
Date: Sat, 27 Apr 2024 04:22:29 GMT
Server: Kestrel
Accept-Ranges: bytes
ETag: "1d9ab83779dc633"
Last-Modified: Fri, 30 Jun 2023 18:48:32 GMT
|
|
| mhxuqmhcbt.duckdns.org/ja/assets/menu.png | 103.80.134.63 | 200 OK | 687 B |
URL GET HTTP/1.1mhxuqmhcbt.duckdns.org/ja/assets/menu.png IP103.80.134.63:80 ASN#3786 LG DACOM Corporation
Requested byhttp://mhxuqmhcbt.duckdns.org/ja/
File typePNG image data, 49 x 48, 8-bit/color RGBA, non-interlaced Hashda0b0fdd44746082b7f978a5f70f0e78 69a6755ecad7defee0b3de296d1352dae7cae626 00543da96852706a4d679197d06a00385869a5ce868c2687e7ab23a5f83fe4e4
| Analyzer | Verdict | Alert |
|---|
| urlquery | suspicious | Suspicious - DynDNS domain | | Quad9 DNS | malicious | Sinkholed |
GET /ja/assets/menu.png HTTP/1.1
Host: mhxuqmhcbt.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mhxuqmhcbt.duckdns.org/ja/main
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 687
Content-Type: image/png
Date: Sat, 27 Apr 2024 04:22:29 GMT
Server: Kestrel
Accept-Ranges: bytes
ETag: "1d9ab7df8593f2f"
Last-Modified: Fri, 30 Jun 2023 18:09:11 GMT
|
|
| mhxuqmhcbt.duckdns.org/ja/assets/jt.png | 103.80.134.63 | 200 OK | 4.1 kB |
URL GET HTTP/1.1mhxuqmhcbt.duckdns.org/ja/assets/jt.png IP103.80.134.63:80 ASN#3786 LG DACOM Corporation
Requested byhttp://mhxuqmhcbt.duckdns.org/ja/
File typePNG image data, 126 x 126, 8-bit/color RGBA, non-interlaced Hasha64f3508282fa585f502c7283cfc853a c266d5102a4fd1d5d9980799a51a345390b5d533 ff3323d9098ef10b0d36ef5c9219481d03afb2d307a5144a6ff3f509b31110f4
| Analyzer | Verdict | Alert |
|---|
| urlquery | suspicious | Suspicious - DynDNS domain | | Quad9 DNS | malicious | Sinkholed |
GET /ja/assets/jt.png HTTP/1.1
Host: mhxuqmhcbt.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mhxuqmhcbt.duckdns.org/ja/main
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 4129
Content-Type: image/png
Date: Sat, 27 Apr 2024 04:22:29 GMT
Server: Kestrel
Accept-Ranges: bytes
ETag: "1d5318f817f9521"
Last-Modified: Wed, 03 Jul 2019 11:07:30 GMT
|
|
| mhxuqmhcbt.duckdns.org/ja/apple.f843c50675ae358ea181.svg | 103.80.134.63 | 200 OK | 1.5 kB |
URL GET HTTP/1.1mhxuqmhcbt.duckdns.org/ja/apple.f843c50675ae358ea181.svg IP103.80.134.63:80 ASN#3786 LG DACOM Corporation
Requested byhttp://mhxuqmhcbt.duckdns.org/ja/
File typeSVG Scalable Vector Graphics image Hash26cbb4bfb27dd56b0ed09a961f28145b b8e84ed32f81f41251c815e0132fed0fba3489f1 c21d714e92269a3dcf05c24db9aec96171671d0dcd59b867c2acb953d3cb551a
| Analyzer | Verdict | Alert |
|---|
| urlquery | suspicious | Suspicious - DynDNS domain | | Quad9 DNS | malicious | Sinkholed |
GET /ja/apple.f843c50675ae358ea181.svg HTTP/1.1
Host: mhxuqmhcbt.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mhxuqmhcbt.duckdns.org/ja/main
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 1484
Content-Type: image/svg+xml
Date: Sat, 27 Apr 2024 04:22:29 GMT
Server: Kestrel
Accept-Ranges: bytes
ETag: "1d9fe46b7dcb44c"
Last-Modified: Sat, 14 Oct 2023 02:32:47 GMT
|
|
| mhxuqmhcbt.duckdns.org/ja/image_small.1771014580291c90faaa.svg | 103.80.134.63 | 200 OK | 898 B |
URL GET HTTP/1.1mhxuqmhcbt.duckdns.org/ja/image_small.1771014580291c90faaa.svg IP103.80.134.63:80 ASN#3786 LG DACOM Corporation
Requested byhttp://mhxuqmhcbt.duckdns.org/ja/
File typeSVG Scalable Vector Graphics image Hash4dc220ff2f9395c2cd7c34de8776a6e7 9dfcb00873e24be99f2965c6447e393b71cd6fc1 c18d99c87523f8ef73e5dc2e86aa5917da37e5564a7f591cb43bc32049f76d88
| Analyzer | Verdict | Alert |
|---|
| urlquery | suspicious | Suspicious - DynDNS domain | | Quad9 DNS | malicious | Sinkholed |
GET /ja/image_small.1771014580291c90faaa.svg HTTP/1.1
Host: mhxuqmhcbt.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mhxuqmhcbt.duckdns.org/ja/main
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 898
Content-Type: image/svg+xml
Date: Sat, 27 Apr 2024 04:22:29 GMT
Server: Kestrel
Accept-Ranges: bytes
ETag: "1d9fe46b7dcb202"
Last-Modified: Sat, 14 Oct 2023 02:32:47 GMT
|
|
| mhxuqmhcbt.duckdns.org/ja/favicon.ico | 103.80.134.63 | 200 OK | 22 kB |
URL GET HTTP/1.1mhxuqmhcbt.duckdns.org/ja/favicon.ico IP103.80.134.63:80 ASN#3786 LG DACOM Corporation
Requested byhttp://mhxuqmhcbt.duckdns.org/ja/
File typeMS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel Hash891e510219786f543ca998282ed99f45 19fe2ff6a2418bcb44b02308b998cef84199ee08 e4bdf72e2f803f7e19907c12f407ac7f7cd5f1f94bfd730b9be24b0d49191b48
| Analyzer | Verdict | Alert |
|---|
| urlquery | suspicious | Suspicious - DynDNS domain | | Quad9 DNS | malicious | Sinkholed |
GET /ja/favicon.ico HTTP/1.1
Host: mhxuqmhcbt.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mhxuqmhcbt.duckdns.org/ja/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 22382
Content-Type: image/x-icon
Date: Sat, 27 Apr 2024 04:22:29 GMT
Server: Kestrel
Accept-Ranges: bytes
ETag: "1d71ee1f8b7af6e"
Last-Modified: Mon, 22 Mar 2021 06:09:52 GMT
|
|