Report - mgecyuhdhi.duckdns.org/ja/main

Report Overview

Submitted URL
mgecyuhdhi.duckdns.org/ja/main
IP
103.80.134.63
ASN
#3786 LG DACOM Corporation
Submitted
2024-05-08 17:09:21
Access
public
Website Title
お客様のApple ID - Appleを管理
Final URL
mgecyuhdhi.duckdns.org/ja/main
Tags
dyndns
urlquery detections
Suspicious - DynDNS domain

Detections

urlquery
16
Network Intrusion Detection
0
Threat Detection Systems
32

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
mgecyuhdhi.duckdns.org	unknown	unknown	No data	No data	5.4 kB	379 kB	103.80.134.63

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-05-08	medium	mgecyuhdhi.duckdns.org/ja/main	Apple Inc.

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-05-08	medium	mgecyuhdhi.duckdns.org	Sinkholed
2024-05-08	medium	mgecyuhdhi.duckdns.org	Sinkholed
2024-05-08	medium	mgecyuhdhi.duckdns.org	Sinkholed
2024-05-08	medium	mgecyuhdhi.duckdns.org	Sinkholed
2024-05-08	medium	mgecyuhdhi.duckdns.org	Sinkholed
2024-05-08	medium	mgecyuhdhi.duckdns.org	Sinkholed
2024-05-08	medium	mgecyuhdhi.duckdns.org	Sinkholed
2024-05-08	medium	mgecyuhdhi.duckdns.org	Sinkholed
2024-05-08	medium	mgecyuhdhi.duckdns.org	Sinkholed
2024-05-08	medium	mgecyuhdhi.duckdns.org	Sinkholed
2024-05-08	medium	mgecyuhdhi.duckdns.org	Sinkholed
2024-05-08	medium	mgecyuhdhi.duckdns.org	Sinkholed
2024-05-08	medium	mgecyuhdhi.duckdns.org	Sinkholed
2024-05-08	medium	mgecyuhdhi.duckdns.org	Sinkholed
2024-05-08	medium	mgecyuhdhi.duckdns.org	Sinkholed

ThreatFox

No alerts detected

JavaScript (4)

	URL	Size	First Seen	Last Seen
	mgecyuhdhi.duckdns.org/ja/assets/card.js	59 kB	2024-03-27	2024-05-19
Pretty URL mgecyuhdhi.duckdns.org/ja/assets/card.js IP 103.80.134.63 ASN #3786 LG DACOM Corporation Introduced by scriptElement Embedded in HTML false Observations First Seen2024-03-27 17:58:11 Last Seen2024-05-19 21:22:24 Times Seen568 Hash 7aa76d18dd3e3598ac9561adf01f3882 26d9fcdd2b6bee0b3f1b96b015f3703b5fbd49e0 6d5516bbbebba2d51878f1e791b642f3b2944270b8e84770f15a16376b202213 Loading...

	mgecyuhdhi.duckdns.org/ja/runtime.156de516a7ba9208026b.js	2.3 kB	2024-04-22	2024-05-16
Pretty URL mgecyuhdhi.duckdns.org/ja/runtime.156de516a7ba9208026b.js IP 103.80.134.63 ASN #3786 LG DACOM Corporation Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-22 06:32:24 Last Seen2024-05-16 06:55:51 Times Seen12 Hash 5a7226fe34bbd2f4bc8e3efd61b1514d 1dac8efbc10708fa3f85c9197872ef306e94614e dd2081b259070d03d9e00286802dae0a8f1585152dda71b52213d64a99a04f52 Loading...

	mgecyuhdhi.duckdns.org/ja/polyfills.a4a2a7ca07c738452bb4.js	46 kB	2024-03-27	2024-05-19
Pretty URL mgecyuhdhi.duckdns.org/ja/polyfills.a4a2a7ca07c738452bb4.js IP 103.80.134.63 ASN #3786 LG DACOM Corporation Introduced by scriptElement Embedded in HTML false Observations First Seen2024-03-27 17:58:12 Last Seen2024-05-19 21:22:24 Times Seen568 Hash 4794c42590c7158a1a334801f7068376 63e0e06b459566123ab988af6258369ba5b181dd 073c634b2120ecfe1b6b98e45f44d807088bd437e757eb3b049867a615e6a49d Loading...

	mgecyuhdhi.duckdns.org/ja/main.6d85a567c47ccf2a9ce3.js	840 kB	2024-04-22	2024-05-16
Pretty URL mgecyuhdhi.duckdns.org/ja/main.6d85a567c47ccf2a9ce3.js IP 103.80.134.63 ASN #3786 LG DACOM Corporation Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-22 06:32:24 Last Seen2024-05-16 06:55:51 Times Seen12 Hash afe125c938dc31b1cdc707fd5d63832f 3134dd4435e4c4034bdcd780065550174fa4350d 048dfe433680e8f34bc3156767b771fc74f83bd33afd7ce5ee019aae06073ce7 Loading...

HTTP Transactions (15)

URL IP Response Size

mgecyuhdhi.duckdns.org/

103.80.134.63

0 B

URL
mgecyuhdhi.duckdns.org/
IP
103.80.134.63:0
ASN
#3786 LG DACOM Corporation

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - DynDNS domain
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: mgecyuhdhi.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Content-Length: 0
Date: Wed, 08 May 2024 17:08:58 GMT
Server: Kestrel
Location: /en/
X-Rate-Limit-Limit: 24h
X-Rate-Limit-Remaining: 89
X-Rate-Limit-Reset: 2024-05-09T06:24:27.1700526Z

mgecyuhdhi.duckdns.org/en/

103.80.134.63

520 B

URL
mgecyuhdhi.duckdns.org/en/
IP
103.80.134.63:0
ASN
#3786 LG DACOM Corporation

File type
HTML document, ASCII text
Size
520 B (520 bytes)
Hash
fb8b9d9bf56c5251a14ad8cf217df902
87852731aa55f66ce221f4d2379712c341f7bf00
3074a00c33a6892ee549ced168872d8ffb9c78fe10f47cea0921aed8ac60d6ee

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - DynDNS domain
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /en/ HTTP/1.1
Host: mgecyuhdhi.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/html
Date: Wed, 08 May 2024 17:08:58 GMT
Server: Kestrel
Accept-Ranges: bytes
Content-Encoding: gzip
ETag: "1d9fe46cfb43625"
Last-Modified: Sat, 14 Oct 2023 02:33:27 GMT
Transfer-Encoding: chunked
Vary: Accept-Encoding
X-Rate-Limit-Limit: 24h
X-Rate-Limit-Remaining: 88
X-Rate-Limit-Reset: 2024-05-09T06:24:27.1700526Z

mgecyuhdhi.duckdns.org/ja/main

103.80.134.63

200 OK

520 B

URL User Request GET HTTP/1.1
mgecyuhdhi.duckdns.org/ja/main
IP
103.80.134.63:80
ASN
#3786 LG DACOM Corporation

File type
HTML document, ASCII text
Size
520 B (520 bytes)
Hash
b2984bb3d8f94426f4c6c6824f8a1928
2bceeda031a1d79155e584482d84ae260710739f
2f8fade3314267e26eaa7c716451d489c411b01dcbb38c7fa8e12b80fd776111

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - DynDNS domain
OpenPhish	phishing	Apple Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /ja/main HTTP/1.1
Host: mgecyuhdhi.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/html
Date: Wed, 08 May 2024 17:08:59 GMT
Server: Kestrel
Accept-Ranges: bytes
Content-Encoding: gzip
ETag: "1d9fe46b9a676a5"
Last-Modified: Sat, 14 Oct 2023 02:32:50 GMT
Transfer-Encoding: chunked
Vary: Accept-Encoding
X-Rate-Limit-Limit: 24h
X-Rate-Limit-Remaining: 87
X-Rate-Limit-Reset: 2024-05-09T06:24:27.1700526Z

mgecyuhdhi.duckdns.org/ja/assets/card.css

103.80.134.63

200 OK

5.0 kB

URL GET HTTP/1.1
mgecyuhdhi.duckdns.org/ja/assets/card.css
IP
103.80.134.63:80
ASN
#3786 LG DACOM Corporation

Requested by
http://mgecyuhdhi.duckdns.org/ja/main

File type
Unicode text, UTF-8 text, with very long lines (27071)
Size
5.0 kB (4977 bytes)
Hash
8c10638062fc10e7800b5f041d66cbe1
94a8f282dc29814af277016d8741fc857b49304d
96712b90b0eb91764af520996a42c0bff93e823e5e825e2544d1ef4723d625d3

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - DynDNS domain
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /ja/assets/card.css HTTP/1.1
Host: mgecyuhdhi.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mgecyuhdhi.duckdns.org/ja/main
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/css
Date: Wed, 08 May 2024 17:08:59 GMT
Server: Kestrel
Accept-Ranges: bytes
Content-Encoding: gzip
ETag: "1d7d7f36c04bfc4"
Last-Modified: Fri, 12 Nov 2021 18:30:52 GMT
Transfer-Encoding: chunked
Vary: Accept-Encoding

mgecyuhdhi.duckdns.org/ja/assets/card.js

103.80.134.63

200 OK

16 kB

URL GET HTTP/1.1
mgecyuhdhi.duckdns.org/ja/assets/card.js
IP
103.80.134.63:80
ASN
#3786 LG DACOM Corporation

Requested by
http://mgecyuhdhi.duckdns.org/ja/main

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (51786)
Size
16 kB (16275 bytes)
Hash
7aa76d18dd3e3598ac9561adf01f3882
26d9fcdd2b6bee0b3f1b96b015f3703b5fbd49e0
6d5516bbbebba2d51878f1e791b642f3b2944270b8e84770f15a16376b202213

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - DynDNS domain
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /ja/assets/card.js HTTP/1.1
Host: mgecyuhdhi.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mgecyuhdhi.duckdns.org/ja/main
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/javascript
Date: Wed, 08 May 2024 17:08:59 GMT
Server: Kestrel
Accept-Ranges: bytes
Content-Encoding: gzip
ETag: "1d7d7f3614aa44b"
Last-Modified: Fri, 12 Nov 2021 18:30:34 GMT
Transfer-Encoding: chunked
Vary: Accept-Encoding

mgecyuhdhi.duckdns.org/ja/runtime.156de516a7ba9208026b.js

103.80.134.63

200 OK

1.2 kB

URL GET HTTP/1.1
mgecyuhdhi.duckdns.org/ja/runtime.156de516a7ba9208026b.js
IP
103.80.134.63:80
ASN
#3786 LG DACOM Corporation

Requested by
http://mgecyuhdhi.duckdns.org/ja/main

File type
JavaScript source, ASCII text, with very long lines (2278), with no line terminators
Size
1.2 kB (1159 bytes)
Hash
5a7226fe34bbd2f4bc8e3efd61b1514d
1dac8efbc10708fa3f85c9197872ef306e94614e
dd2081b259070d03d9e00286802dae0a8f1585152dda71b52213d64a99a04f52

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - DynDNS domain
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /ja/runtime.156de516a7ba9208026b.js HTTP/1.1
Host: mgecyuhdhi.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mgecyuhdhi.duckdns.org/ja/main
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/javascript
Date: Wed, 08 May 2024 17:09:00 GMT
Server: Kestrel
Accept-Ranges: bytes
Content-Encoding: gzip
ETag: "1d9fe46b7dcb966"
Last-Modified: Sat, 14 Oct 2023 02:32:47 GMT
Transfer-Encoding: chunked
Vary: Accept-Encoding

mgecyuhdhi.duckdns.org/ja/styles.2b2408b28c6b13bb450e.css

103.80.134.63

200 OK

28 kB

URL GET HTTP/1.1
mgecyuhdhi.duckdns.org/ja/styles.2b2408b28c6b13bb450e.css
IP
103.80.134.63:80
ASN
#3786 LG DACOM Corporation

Requested by
http://mgecyuhdhi.duckdns.org/ja/main

File type
ASCII text, with very long lines (65536), with no line terminators
Size
28 kB (27832 bytes)
Hash
c739cee2deb86082090e380beec5b7a0
f54b118cf0b048e09c70ad1ecf661a21b1a47406
0697729b655b3fadc015ce16eecd8cbd3b48a9e34e3c2a3e8b6ad0f8053887d2

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - DynDNS domain
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /ja/styles.2b2408b28c6b13bb450e.css HTTP/1.1
Host: mgecyuhdhi.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mgecyuhdhi.duckdns.org/ja/main
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/css
Date: Wed, 08 May 2024 17:09:00 GMT
Server: Kestrel
Accept-Ranges: bytes
Content-Encoding: gzip
ETag: "1d9fe46b7debecf"
Last-Modified: Sat, 14 Oct 2023 02:32:47 GMT
Transfer-Encoding: chunked
Vary: Accept-Encoding

mgecyuhdhi.duckdns.org/ja/polyfills.a4a2a7ca07c738452bb4.js

103.80.134.63

200 OK

17 kB

URL GET HTTP/1.1
mgecyuhdhi.duckdns.org/ja/polyfills.a4a2a7ca07c738452bb4.js
IP
103.80.134.63:80
ASN
#3786 LG DACOM Corporation

Requested by
http://mgecyuhdhi.duckdns.org/ja/main

File type
JavaScript source, ASCII text, with very long lines (45945), with no line terminators
Size
17 kB (16801 bytes)
Hash
4794c42590c7158a1a334801f7068376
63e0e06b459566123ab988af6258369ba5b181dd
073c634b2120ecfe1b6b98e45f44d807088bd437e757eb3b049867a615e6a49d

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - DynDNS domain
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /ja/polyfills.a4a2a7ca07c738452bb4.js HTTP/1.1
Host: mgecyuhdhi.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mgecyuhdhi.duckdns.org/ja/main
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/javascript
Date: Wed, 08 May 2024 17:09:00 GMT
Server: Kestrel
Accept-Ranges: bytes
Content-Encoding: gzip
ETag: "1d9fe46b7dc02f9"
Last-Modified: Sat, 14 Oct 2023 02:32:47 GMT
Transfer-Encoding: chunked
Vary: Accept-Encoding

mgecyuhdhi.duckdns.org/ja/main.6d85a567c47ccf2a9ce3.js

103.80.134.63

200 OK

243 kB

URL GET HTTP/1.1
mgecyuhdhi.duckdns.org/ja/main.6d85a567c47ccf2a9ce3.js
IP
103.80.134.63:80
ASN
#3786 LG DACOM Corporation

Requested by
http://mgecyuhdhi.duckdns.org/ja/main

File type
JavaScript source, ASCII text, with very long lines (63941)
Size
243 kB (243286 bytes)
Hash
afe125c938dc31b1cdc707fd5d63832f
3134dd4435e4c4034bdcd780065550174fa4350d
048dfe433680e8f34bc3156767b771fc74f83bd33afd7ce5ee019aae06073ce7

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - DynDNS domain
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /ja/main.6d85a567c47ccf2a9ce3.js HTTP/1.1
Host: mgecyuhdhi.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mgecyuhdhi.duckdns.org/ja/main
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/javascript
Date: Wed, 08 May 2024 17:09:00 GMT
Server: Kestrel
Accept-Ranges: bytes
Content-Encoding: gzip
ETag: "1d9fe46b9010f31"
Last-Modified: Sat, 14 Oct 2023 02:32:49 GMT
Transfer-Encoding: chunked
Vary: Accept-Encoding

mgecyuhdhi.duckdns.org/ja/assets/logo.png

103.80.134.63

200 OK

34 kB

URL GET HTTP/1.1
mgecyuhdhi.duckdns.org/ja/assets/logo.png
IP
103.80.134.63:80
ASN
#3786 LG DACOM Corporation

Requested by
http://mgecyuhdhi.duckdns.org/ja/main

File type
PNG image data, 720 x 721, 8-bit colormap, non-interlaced
Size
34 kB (34355 bytes)
Hash
4852c60ddb8653928e43fa9d24b911b3
e037ce421215511dbce720d6f6503e8fa9b8ea9d
07126b04b6559c56df43d120f4c5487f1ca9e335428b3d82c2d2d24459990561

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - DynDNS domain
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /ja/assets/logo.png HTTP/1.1
Host: mgecyuhdhi.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mgecyuhdhi.duckdns.org/ja/main
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Length: 34355
Content-Type: image/png
Date: Wed, 08 May 2024 17:09:01 GMT
Server: Kestrel
Accept-Ranges: bytes
ETag: "1d9ab83779dc633"
Last-Modified: Fri, 30 Jun 2023 18:48:32 GMT

mgecyuhdhi.duckdns.org/ja/assets/menu.png

103.80.134.63

200 OK

687 B

URL GET HTTP/1.1
mgecyuhdhi.duckdns.org/ja/assets/menu.png
IP
103.80.134.63:80
ASN
#3786 LG DACOM Corporation

Requested by
http://mgecyuhdhi.duckdns.org/ja/main

File type
PNG image data, 49 x 48, 8-bit/color RGBA, non-interlaced
Size
687 B (687 bytes)
Hash
da0b0fdd44746082b7f978a5f70f0e78
69a6755ecad7defee0b3de296d1352dae7cae626
00543da96852706a4d679197d06a00385869a5ce868c2687e7ab23a5f83fe4e4

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - DynDNS domain
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /ja/assets/menu.png HTTP/1.1
Host: mgecyuhdhi.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mgecyuhdhi.duckdns.org/ja/main
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Length: 687
Content-Type: image/png
Date: Wed, 08 May 2024 17:09:01 GMT
Server: Kestrel
Accept-Ranges: bytes
ETag: "1d9ab7df8593f2f"
Last-Modified: Fri, 30 Jun 2023 18:09:11 GMT

mgecyuhdhi.duckdns.org/ja/assets/jt.png

103.80.134.63

200 OK

4.1 kB

URL GET HTTP/1.1
mgecyuhdhi.duckdns.org/ja/assets/jt.png
IP
103.80.134.63:80
ASN
#3786 LG DACOM Corporation

Requested by
http://mgecyuhdhi.duckdns.org/ja/main

File type
PNG image data, 126 x 126, 8-bit/color RGBA, non-interlaced
Size
4.1 kB (4129 bytes)
Hash
a64f3508282fa585f502c7283cfc853a
c266d5102a4fd1d5d9980799a51a345390b5d533
ff3323d9098ef10b0d36ef5c9219481d03afb2d307a5144a6ff3f509b31110f4

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - DynDNS domain
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /ja/assets/jt.png HTTP/1.1
Host: mgecyuhdhi.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mgecyuhdhi.duckdns.org/ja/main
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Length: 4129
Content-Type: image/png
Date: Wed, 08 May 2024 17:09:01 GMT
Server: Kestrel
Accept-Ranges: bytes
ETag: "1d5318f817f9521"
Last-Modified: Wed, 03 Jul 2019 11:07:30 GMT

mgecyuhdhi.duckdns.org/ja/apple.f843c50675ae358ea181.svg

103.80.134.63

200 OK

1.5 kB

URL GET HTTP/1.1
mgecyuhdhi.duckdns.org/ja/apple.f843c50675ae358ea181.svg
IP
103.80.134.63:80
ASN
#3786 LG DACOM Corporation

Requested by
http://mgecyuhdhi.duckdns.org/ja/main

File type
SVG Scalable Vector Graphics image
Size
1.5 kB (1484 bytes)
Hash
26cbb4bfb27dd56b0ed09a961f28145b
b8e84ed32f81f41251c815e0132fed0fba3489f1
c21d714e92269a3dcf05c24db9aec96171671d0dcd59b867c2acb953d3cb551a

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - DynDNS domain
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /ja/apple.f843c50675ae358ea181.svg HTTP/1.1
Host: mgecyuhdhi.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mgecyuhdhi.duckdns.org/ja/main
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Length: 1484
Content-Type: image/svg+xml
Date: Wed, 08 May 2024 17:09:01 GMT
Server: Kestrel
Accept-Ranges: bytes
ETag: "1d9fe46b7dcb44c"
Last-Modified: Sat, 14 Oct 2023 02:32:47 GMT

mgecyuhdhi.duckdns.org/ja/image_small.1771014580291c90faaa.svg

103.80.134.63

200 OK

898 B

URL GET HTTP/1.1
mgecyuhdhi.duckdns.org/ja/image_small.1771014580291c90faaa.svg
IP
103.80.134.63:80
ASN
#3786 LG DACOM Corporation

Requested by
http://mgecyuhdhi.duckdns.org/ja/main

File type
SVG Scalable Vector Graphics image
Size
898 B (898 bytes)
Hash
4dc220ff2f9395c2cd7c34de8776a6e7
9dfcb00873e24be99f2965c6447e393b71cd6fc1
c18d99c87523f8ef73e5dc2e86aa5917da37e5564a7f591cb43bc32049f76d88

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - DynDNS domain
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /ja/image_small.1771014580291c90faaa.svg HTTP/1.1
Host: mgecyuhdhi.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mgecyuhdhi.duckdns.org/ja/main
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Length: 898
Content-Type: image/svg+xml
Date: Wed, 08 May 2024 17:09:01 GMT
Server: Kestrel
Accept-Ranges: bytes
ETag: "1d9fe46b7dcb202"
Last-Modified: Sat, 14 Oct 2023 02:32:47 GMT

mgecyuhdhi.duckdns.org/ja/favicon.ico

103.80.134.63

200 OK

22 kB

URL GET HTTP/1.1
mgecyuhdhi.duckdns.org/ja/favicon.ico
IP
103.80.134.63:80
ASN
#3786 LG DACOM Corporation

Requested by
http://mgecyuhdhi.duckdns.org/ja/main

File type
MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Size
22 kB (22382 bytes)
Hash
891e510219786f543ca998282ed99f45
19fe2ff6a2418bcb44b02308b998cef84199ee08
e4bdf72e2f803f7e19907c12f407ac7f7cd5f1f94bfd730b9be24b0d49191b48

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - DynDNS domain
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /ja/favicon.ico HTTP/1.1
Host: mgecyuhdhi.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mgecyuhdhi.duckdns.org/ja/main
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Length: 22382
Content-Type: image/x-icon
Date: Wed, 08 May 2024 17:09:02 GMT
Server: Kestrel
Accept-Ranges: bytes
ETag: "1d71ee1f8b7af6e"
Last-Modified: Mon, 22 Mar 2021 06:09:52 GMT

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (4)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (15)

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1