Report Overview

  1. Visited public
    2023-09-24 23:18:11
    Tags
  2. URL

    sucrityidbusiness2288.duckdns.org/confirm2.html

  3. Finishing URL

    sucrityidbusiness2288.duckdns.org/confirm2.html

  4. IP / ASN
    103.37.124.105

    #0

    Title
    Facebook
  5. Suspicious - DynDNS domain

Detections
urlquery
4
Network Intrusion Detection
12
Threat Detection Systems
12

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
kit.fontawesome.com18682012-10-182019-12-16 20:51:312023-09-24 18:38:14
cdn.jsdelivr.net4392012-05-162012-09-30 02:15:092023-09-24 18:14:53
sucrityidbusiness2288.duckdns.orgunknown2013-04-122023-09-23 12:03:292023-09-24 17:46:14
ocsp.pki.goog1752016-06-132018-07-01 08:43:072023-09-24 18:12:04
code.jquery.com6342005-12-102012-05-21 19:28:022023-09-24 19:47:37
ajax.googleapis.com129052005-01-252013-08-16 11:51:312023-09-24 23:44:58
upload.wikimedia.org22152003-03-162012-05-21 11:39:452023-09-23 19:03:13
ka-f.fontawesome.com35982012-10-182019-12-17 07:36:132023-09-24 19:09:02
ocsp.sectigo.com4872018-08-162019-11-29 12:50:242023-09-24 23:31:12
api.ipify.org32672014-01-052014-10-06 14:38:432023-09-23 18:12:44

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
mediumClient IPInternal IP
lowClient IPInternal IP
mediumClient IPInternal IP
lowClient IPInternal IP
mediumClient IPInternal IP
lowClient IPInternal IP
mediumClient IPInternal IP
lowClient IPInternal IP
lowClient IPInternal IP
lowClient IPInternal IP
lowClient IPInternal IP
lowClient IP 104.237.62.212

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish
SeverityIndicatorAlert
mediumsucrityidbusiness2288.duckdns.org/confirm2.htmlFacebook, Inc.
mediumsucrityidbusiness2288.duckdns.org/Facebook, Inc.
mediumsucrityidbusiness2288.duckdns.org/Facebook, Inc.

PhishTank

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS
SeverityIndicatorAlert
mediumsucrityidbusiness2288.duckdns.orgSinkholed
mediumsucrityidbusiness2288.duckdns.orgSinkholed
mediumsucrityidbusiness2288.duckdns.orgSinkholed

ThreatFox

No alerts detected


JavaScript (7)

HTTP Transactions (19)

URLIPResponseSize
cdn.jsdelivr.net/npm/bootstrap@4.4.1/dist/css/bootstrap.min.css
151.101.129.229200 OK26 kB
sucrityidbusiness2288.duckdns.org/confirm2.html
103.37.124.105200 OK150 kB
ka-f.fontawesome.com/releases/v6.4.2/css/free-v4-shims.min.css?token=83fd8385f7
172.64.131.9200 OK28 kB
cdn.jsdelivr.net/npm/popper.js@1.16.0/dist/umd/popper.min.js
151.101.129.229200 OK7.8 kB
cdn.jsdelivr.net/npm/bootstrap@4.4.1/dist/js/bootstrap.min.js
151.101.129.229200 OK17 kB
ocsp.pki.goog/gts1c3
142.250.74.131 471 B
code.jquery.com/jquery-3.6.0.min.js
151.101.66.137200 OK31 kB
ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js
142.250.74.42200 OK31 kB
ocsp.pki.goog/gts1c3
142.250.74.131 471 B
sucrityidbusiness2288.duckdns.org/Facebook_f_logo.png
103.37.124.105200 OK73 kB
upload.wikimedia.org/wikipedia/commons/5/51/Facebook_f_logo_%282019%29.svg
185.15.59.240200 OK265 B
ocsp.sectigo.com/
104.18.14.101 471 B
api.ipify.org/?format=json
104.237.62.212200 OK21 B
sucrityidbusiness2288.duckdns.org/recovery.png
103.37.124.105200 OK274 kB
ka-f.fontawesome.com/releases/v6.4.2/css/free-v4-font-face.min.css?token=83fd8385f7
172.64.131.9200 OK1.8 kB
kit.fontawesome.com/83fd8385f7.js
104.18.22.52200 OK12 kB
cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js
151.101.129.229200 OK79 kB
ka-f.fontawesome.com/releases/v6.4.2/css/free.min.css?token=83fd8385f7
172.64.131.9200 OK103 kB
ka-f.fontawesome.com/releases/v6.4.2/css/free-v5-font-face.min.css?token=83fd8385f7
172.64.131.9200 OK823 B