Report Overview

  1. Visited public
    2023-09-28 00:06:50
    Tags
  2. URL

    verifybusinessaccount4852.duckdns.org/confirm.html

  3. Finishing URL

    verifybusinessaccount4852.duckdns.org/confirm.html

  4. IP / ASN
    103.37.124.105

    #0

    Title
    Facebook
  5. Suspicious - DynDNS domain

Detections
urlquery
4
Network Intrusion Detection
13
Threat Detection Systems
6

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
verifybusinessaccount4852.duckdns.orgunknown2013-04-122023-09-27 07:56:222023-09-27 17:59:51
code.jquery.com6342005-12-102012-05-21 19:28:022023-09-27 18:53:45
ka-f.fontawesome.com35982012-10-182019-12-17 07:36:132023-09-27 01:21:03
api.ipify.org32672014-01-052014-10-06 14:38:432023-09-27 05:35:45
upload.wikimedia.org22152003-03-162012-05-21 11:39:452023-09-26 21:31:07
cdn.jsdelivr.net4392012-05-162012-09-30 02:15:092023-09-27 21:08:12
ajax.googleapis.com129052005-01-252013-08-16 11:51:312023-09-28 00:29:01
ocsp.pki.goog1752016-06-132018-07-01 08:43:072023-09-27 18:12:01
kit.fontawesome.com18682012-10-182019-12-16 20:51:312023-09-26 21:21:49
ocsp.sectigo.com4872018-08-162019-11-29 12:50:242023-09-27 23:55:00

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
mediumClient IPInternal IP
mediumClient IPInternal IP
lowClient IPInternal IP
lowClient IPInternal IP
mediumClient IPInternal IP
lowClient IPInternal IP
mediumClient IPInternal IP
lowClient IPInternal IP
mediumClient IPInternal IP
lowClient IPInternal IP
lowClient IPInternal IP
lowClient IPInternal IP
lowClient IP 104.237.62.212

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish
SeverityIndicatorAlert
mediumverifybusinessaccount4852.duckdns.org/confirm.htmlFacebook, Inc.
mediumverifybusinessaccount4852.duckdns.org/Facebook, Inc.
mediumverifybusinessaccount4852.duckdns.org/Facebook, Inc.

PhishTank

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


JavaScript (7)

HTTP Transactions (18)

URLIPResponseSize
cdn.jsdelivr.net/npm/bootstrap@4.4.1/dist/css/bootstrap.min.css
151.101.65.229200 OK26 kB
verifybusinessaccount4852.duckdns.org/confirm.html
103.37.124.105200 OK147 kB
cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js
151.101.65.229200 OK24 kB
cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js
151.101.65.229200 OK7.8 kB
cdn.jsdelivr.net/npm/bootstrap@4.4.1/dist/js/bootstrap.min.js
151.101.65.229200 OK17 kB
code.jquery.com/jquery-3.6.0.min.js
151.101.2.137200 OK31 kB
ka-f.fontawesome.com/releases/v6.4.2/css/free-v4-font-face.min.css?token=83fd8385f7
172.64.130.9200 OK1.1 kB
ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js
142.250.74.74200 OK31 kB
ocsp.pki.goog/gts1c3
142.250.74.35 471 B
kit.fontawesome.com/83fd8385f7.js
104.18.22.52200 OK28 kB
verifybusinessaccount4852.duckdns.org/recovery.png
103.37.124.105200 OK274 kB
ocsp.sectigo.com/
104.18.15.101 471 B
verifybusinessaccount4852.duckdns.org/Facebook_f_logo.png
103.37.124.105200 OK73 kB
api.ipify.org/?format=json
104.237.62.212200 OK21 B
ka-f.fontawesome.com/releases/v6.4.2/css/free.min.css?token=83fd8385f7
172.64.130.9200 OK103 kB
ka-f.fontawesome.com/releases/v6.4.2/css/free-v5-font-face.min.css?token=83fd8385f7
172.64.130.9200 OK823 B
upload.wikimedia.org/wikipedia/commons/5/51/Facebook_f_logo_%282019%29.svg
185.15.59.240200 OK358 B
ka-f.fontawesome.com/releases/v6.4.2/css/free-v4-shims.min.css?token=83fd8385f7
172.64.130.9200 OK28 kB