| mwusonbxkm.duckdns.org/ |  103.80.134.63 | | 0 B |
IP103.80.134.63:0 ASN#3786 LG DACOM Corporation
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| urlquery | suspicious | Suspicious - DynDNS domain |
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain | | suricata | medium | ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain |
GET / HTTP/1.1
Host: mwusonbxkm.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Content-Length: 0
Date: Fri, 10 May 2024 04:41:03 GMT
Server: Kestrel
Location: /en/
X-Rate-Limit-Limit: 24h
X-Rate-Limit-Remaining: 93
X-Rate-Limit-Reset: 2024-05-10T07:14:17.9822618Z
|
|
| mwusonbxkm.duckdns.org/en/ | 103.80.134.63 | | 520 B |
URL User Request GET mwusonbxkm.duckdns.org/en/ IP103.80.134.63:0 ASN#3786 LG DACOM Corporation
File typeHTML document, ASCII text Hashfb8b9d9bf56c5251a14ad8cf217df902 87852731aa55f66ce221f4d2379712c341f7bf00 3074a00c33a6892ee549ced168872d8ffb9c78fe10f47cea0921aed8ac60d6ee
| Analyzer | Verdict | Alert |
|---|
| urlquery | suspicious | Suspicious - DynDNS domain |
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain | | suricata | medium | ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain | | suricata | medium | ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain | | suricata | medium | ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain |
GET /en/ HTTP/1.1
Host: mwusonbxkm.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/html
Date: Fri, 10 May 2024 04:41:03 GMT
Server: Kestrel
Accept-Ranges: bytes
Content-Encoding: gzip
ETag: "1d9fe46cfb43625"
Last-Modified: Sat, 14 Oct 2023 02:33:27 GMT
Transfer-Encoding: chunked
Vary: Accept-Encoding
X-Rate-Limit-Limit: 24h
X-Rate-Limit-Remaining: 92
X-Rate-Limit-Reset: 2024-05-10T07:14:17.9822618Z
|
|
| mwusonbxkm.duckdns.org/en/ | 103.80.134.63 | | 520 B |
URL User Request GET mwusonbxkm.duckdns.org/en/ IP103.80.134.63:0 ASN#3786 LG DACOM Corporation
File typeHTML document, ASCII text Hashfb8b9d9bf56c5251a14ad8cf217df902 87852731aa55f66ce221f4d2379712c341f7bf00 3074a00c33a6892ee549ced168872d8ffb9c78fe10f47cea0921aed8ac60d6ee
| Analyzer | Verdict | Alert |
|---|
| urlquery | suspicious | Suspicious - DynDNS domain |
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain | | suricata | medium | ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain | | suricata | medium | ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain | | suricata | medium | ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain |
GET /en/ HTTP/1.1
Host: mwusonbxkm.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/html
Date: Fri, 10 May 2024 04:41:04 GMT
Server: Kestrel
Accept-Ranges: bytes
Content-Encoding: gzip
ETag: "1d9fe46cfb43625"
Last-Modified: Sat, 14 Oct 2023 02:33:27 GMT
Transfer-Encoding: chunked
Vary: Accept-Encoding
X-Rate-Limit-Limit: 24h
X-Rate-Limit-Remaining: 91
X-Rate-Limit-Reset: 2024-05-10T07:14:17.9822618Z
|
|
| mwusonbxkm.duckdns.org/en/assets/card.css | 103.80.134.63 | 200 OK | 5.0 kB |
URL GET HTTP/1.1mwusonbxkm.duckdns.org/en/assets/card.css IP103.80.134.63:80 ASN#3786 LG DACOM Corporation
Requested byhttp://mwusonbxkm.duckdns.org/en/
File typeUnicode text, UTF-8 text, with very long lines (27071) Hash8c10638062fc10e7800b5f041d66cbe1 94a8f282dc29814af277016d8741fc857b49304d 96712b90b0eb91764af520996a42c0bff93e823e5e825e2544d1ef4723d625d3
| Analyzer | Verdict | Alert |
|---|
| urlquery | suspicious | Suspicious - DynDNS domain |
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain | | suricata | medium | ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain |
GET /en/assets/card.css HTTP/1.1
Host: mwusonbxkm.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mwusonbxkm.duckdns.org/en/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/css
Date: Fri, 10 May 2024 04:41:04 GMT
Server: Kestrel
Accept-Ranges: bytes
Content-Encoding: gzip
ETag: "1d7d7f36c04bfc4"
Last-Modified: Fri, 12 Nov 2021 18:30:52 GMT
Transfer-Encoding: chunked
Vary: Accept-Encoding
|
|
| mwusonbxkm.duckdns.org/en/runtime.9b214d14fa4ea25c94c0.js | 103.80.134.63 | 200 OK | 1.2 kB |
URL GET HTTP/1.1mwusonbxkm.duckdns.org/en/runtime.9b214d14fa4ea25c94c0.js IP103.80.134.63:80 ASN#3786 LG DACOM Corporation
Requested byhttp://mwusonbxkm.duckdns.org/en/
File typeJavaScript source, ASCII text, with very long lines (2278), with no line terminators Hash4ac3e6290ad24ac46b8a1970a7efb266 6f792827e5974b69c7c9a87e81f33b5ef670bff3 94f516b9d49d3b5ecf42fba742d930a0224275eedb9d19b4c33644dc8c2a3c26
| Analyzer | Verdict | Alert |
|---|
| urlquery | suspicious | Suspicious - DynDNS domain |
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain | | suricata | medium | ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain |
GET /en/runtime.9b214d14fa4ea25c94c0.js HTTP/1.1
Host: mwusonbxkm.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mwusonbxkm.duckdns.org/en/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/javascript
Date: Fri, 10 May 2024 04:41:04 GMT
Server: Kestrel
Accept-Ranges: bytes
Content-Encoding: gzip
ETag: "1d9fe46cdea7ae6"
Last-Modified: Sat, 14 Oct 2023 02:33:24 GMT
Transfer-Encoding: chunked
Vary: Accept-Encoding
|
|
| mwusonbxkm.duckdns.org/en/assets/card.js | 103.80.134.63 | 200 OK | 16 kB |
URL GET HTTP/1.1mwusonbxkm.duckdns.org/en/assets/card.js IP103.80.134.63:80 ASN#3786 LG DACOM Corporation
Requested byhttp://mwusonbxkm.duckdns.org/en/
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (51786) Hash7aa76d18dd3e3598ac9561adf01f3882 26d9fcdd2b6bee0b3f1b96b015f3703b5fbd49e0 6d5516bbbebba2d51878f1e791b642f3b2944270b8e84770f15a16376b202213
| Analyzer | Verdict | Alert |
|---|
| urlquery | suspicious | Suspicious - DynDNS domain |
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain | | suricata | medium | ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain |
GET /en/assets/card.js HTTP/1.1
Host: mwusonbxkm.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mwusonbxkm.duckdns.org/en/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/javascript
Date: Fri, 10 May 2024 04:41:04 GMT
Server: Kestrel
Accept-Ranges: bytes
Content-Encoding: gzip
ETag: "1d7d7f3614aa44b"
Last-Modified: Fri, 12 Nov 2021 18:30:34 GMT
Transfer-Encoding: chunked
Vary: Accept-Encoding
|
|
| mwusonbxkm.duckdns.org/en/styles.2b2408b28c6b13bb450e.css | 103.80.134.63 | 200 OK | 28 kB |
URL GET HTTP/1.1mwusonbxkm.duckdns.org/en/styles.2b2408b28c6b13bb450e.css IP103.80.134.63:80 ASN#3786 LG DACOM Corporation
Requested byhttp://mwusonbxkm.duckdns.org/en/
File typeASCII text, with very long lines (65536), with no line terminators Hashc739cee2deb86082090e380beec5b7a0 f54b118cf0b048e09c70ad1ecf661a21b1a47406 0697729b655b3fadc015ce16eecd8cbd3b48a9e34e3c2a3e8b6ad0f8053887d2
| Analyzer | Verdict | Alert |
|---|
| urlquery | suspicious | Suspicious - DynDNS domain |
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain | | suricata | medium | ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain |
GET /en/styles.2b2408b28c6b13bb450e.css HTTP/1.1
Host: mwusonbxkm.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mwusonbxkm.duckdns.org/en/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/css
Date: Fri, 10 May 2024 04:41:04 GMT
Server: Kestrel
Accept-Ranges: bytes
Content-Encoding: gzip
ETag: "1d9fe46cde87d4f"
Last-Modified: Sat, 14 Oct 2023 02:33:24 GMT
Transfer-Encoding: chunked
Vary: Accept-Encoding
|
|
| mwusonbxkm.duckdns.org/en/polyfills.649ac95cc0f663eb2ea5.js | 103.80.134.63 | 200 OK | 17 kB |
URL GET HTTP/1.1mwusonbxkm.duckdns.org/en/polyfills.649ac95cc0f663eb2ea5.js IP103.80.134.63:80 ASN#3786 LG DACOM Corporation
Requested byhttp://mwusonbxkm.duckdns.org/en/
File typeJavaScript source, ASCII text, with very long lines (45945), with no line terminators Hash4794c42590c7158a1a334801f7068376 63e0e06b459566123ab988af6258369ba5b181dd 073c634b2120ecfe1b6b98e45f44d807088bd437e757eb3b049867a615e6a49d
| Analyzer | Verdict | Alert |
|---|
| urlquery | suspicious | Suspicious - DynDNS domain |
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain | | suricata | medium | ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain |
GET /en/polyfills.649ac95cc0f663eb2ea5.js HTTP/1.1
Host: mwusonbxkm.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mwusonbxkm.duckdns.org/en/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/javascript
Date: Fri, 10 May 2024 04:41:04 GMT
Server: Kestrel
Accept-Ranges: bytes
Content-Encoding: gzip
ETag: "1d9fe46cdeac179"
Last-Modified: Sat, 14 Oct 2023 02:33:24 GMT
Transfer-Encoding: chunked
Vary: Accept-Encoding
|
|
| mwusonbxkm.duckdns.org/en/main.cb307f485390a6a94066.js | 103.80.134.63 | 200 OK | 243 kB |
URL GET HTTP/1.1mwusonbxkm.duckdns.org/en/main.cb307f485390a6a94066.js IP103.80.134.63:80 ASN#3786 LG DACOM Corporation
Requested byhttp://mwusonbxkm.duckdns.org/en/
File typeJavaScript source, ASCII text, with very long lines (63865) Size243 kB (242917 bytes) Hashbc44d3824775061c25f8df88d786c3e2 111302049dc6c747ff1c06e4f71b4633c0dec9da 8e89674e3a2a98869f629ec69abaf2dc5f499b53a3ee1016c6e3fbd36ad6a4be
| Analyzer | Verdict | Alert |
|---|
| urlquery | suspicious | Suspicious - DynDNS domain |
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain | | suricata | medium | ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain |
GET /en/main.cb307f485390a6a94066.js HTTP/1.1
Host: mwusonbxkm.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mwusonbxkm.duckdns.org/en/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/javascript
Date: Fri, 10 May 2024 04:41:04 GMT
Server: Kestrel
Accept-Ranges: bytes
Content-Encoding: gzip
ETag: "1d9fe46cf17512f"
Last-Modified: Sat, 14 Oct 2023 02:33:26 GMT
Transfer-Encoding: chunked
Vary: Accept-Encoding
|
|
| mwusonbxkm.duckdns.org/en/assets/logo.png | 103.80.134.63 | 200 OK | 34 kB |
URL GET HTTP/1.1mwusonbxkm.duckdns.org/en/assets/logo.png IP103.80.134.63:80 ASN#3786 LG DACOM Corporation
Requested byhttp://mwusonbxkm.duckdns.org/en/
File typePNG image data, 720 x 721, 8-bit colormap, non-interlaced Hash4852c60ddb8653928e43fa9d24b911b3 e037ce421215511dbce720d6f6503e8fa9b8ea9d 07126b04b6559c56df43d120f4c5487f1ca9e335428b3d82c2d2d24459990561
| Analyzer | Verdict | Alert |
|---|
| urlquery | suspicious | Suspicious - DynDNS domain |
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain | | suricata | medium | ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain |
GET /en/assets/logo.png HTTP/1.1
Host: mwusonbxkm.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mwusonbxkm.duckdns.org/en/main
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 34355
Content-Type: image/png
Date: Fri, 10 May 2024 04:41:06 GMT
Server: Kestrel
Accept-Ranges: bytes
ETag: "1d9ab83779dc633"
Last-Modified: Fri, 30 Jun 2023 18:48:32 GMT
|
|
| mwusonbxkm.duckdns.org/en/assets/menu.png | 103.80.134.63 | 200 OK | 687 B |
URL GET HTTP/1.1mwusonbxkm.duckdns.org/en/assets/menu.png IP103.80.134.63:80 ASN#3786 LG DACOM Corporation
Requested byhttp://mwusonbxkm.duckdns.org/en/
File typePNG image data, 49 x 48, 8-bit/color RGBA, non-interlaced Hashda0b0fdd44746082b7f978a5f70f0e78 69a6755ecad7defee0b3de296d1352dae7cae626 00543da96852706a4d679197d06a00385869a5ce868c2687e7ab23a5f83fe4e4
| Analyzer | Verdict | Alert |
|---|
| urlquery | suspicious | Suspicious - DynDNS domain |
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain | | suricata | medium | ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain |
GET /en/assets/menu.png HTTP/1.1
Host: mwusonbxkm.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mwusonbxkm.duckdns.org/en/main
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 687
Content-Type: image/png
Date: Fri, 10 May 2024 04:41:06 GMT
Server: Kestrel
Accept-Ranges: bytes
ETag: "1d9ab7df8593f2f"
Last-Modified: Fri, 30 Jun 2023 18:09:11 GMT
|
|
| mwusonbxkm.duckdns.org/en/assets/jt.png | 103.80.134.63 | 200 OK | 4.1 kB |
URL GET HTTP/1.1mwusonbxkm.duckdns.org/en/assets/jt.png IP103.80.134.63:80 ASN#3786 LG DACOM Corporation
Requested byhttp://mwusonbxkm.duckdns.org/en/
File typePNG image data, 126 x 126, 8-bit/color RGBA, non-interlaced Hasha64f3508282fa585f502c7283cfc853a c266d5102a4fd1d5d9980799a51a345390b5d533 ff3323d9098ef10b0d36ef5c9219481d03afb2d307a5144a6ff3f509b31110f4
| Analyzer | Verdict | Alert |
|---|
| urlquery | suspicious | Suspicious - DynDNS domain |
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain | | suricata | medium | ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain |
GET /en/assets/jt.png HTTP/1.1
Host: mwusonbxkm.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mwusonbxkm.duckdns.org/en/main
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 4129
Content-Type: image/png
Date: Fri, 10 May 2024 04:41:06 GMT
Server: Kestrel
Accept-Ranges: bytes
ETag: "1d5318f817f9521"
Last-Modified: Wed, 03 Jul 2019 11:07:30 GMT
|
|
| mwusonbxkm.duckdns.org/en/image_small.1771014580291c90faaa.svg | 103.80.134.63 | 200 OK | 898 B |
URL GET HTTP/1.1mwusonbxkm.duckdns.org/en/image_small.1771014580291c90faaa.svg IP103.80.134.63:80 ASN#3786 LG DACOM Corporation
Requested byhttp://mwusonbxkm.duckdns.org/en/
File typeSVG Scalable Vector Graphics image Hash4dc220ff2f9395c2cd7c34de8776a6e7 9dfcb00873e24be99f2965c6447e393b71cd6fc1 c18d99c87523f8ef73e5dc2e86aa5917da37e5564a7f591cb43bc32049f76d88
| Analyzer | Verdict | Alert |
|---|
| urlquery | suspicious | Suspicious - DynDNS domain |
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain | | suricata | medium | ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain |
GET /en/image_small.1771014580291c90faaa.svg HTTP/1.1
Host: mwusonbxkm.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mwusonbxkm.duckdns.org/en/main
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 898
Content-Type: image/svg+xml
Date: Fri, 10 May 2024 04:41:06 GMT
Server: Kestrel
Accept-Ranges: bytes
ETag: "1d9fe46cdea7182"
Last-Modified: Sat, 14 Oct 2023 02:33:24 GMT
|
|
| mwusonbxkm.duckdns.org/en/apple.f843c50675ae358ea181.svg | 103.80.134.63 | 200 OK | 1.5 kB |
URL GET HTTP/1.1mwusonbxkm.duckdns.org/en/apple.f843c50675ae358ea181.svg IP103.80.134.63:80 ASN#3786 LG DACOM Corporation
Requested byhttp://mwusonbxkm.duckdns.org/en/
File typeSVG Scalable Vector Graphics image Hash26cbb4bfb27dd56b0ed09a961f28145b b8e84ed32f81f41251c815e0132fed0fba3489f1 c21d714e92269a3dcf05c24db9aec96171671d0dcd59b867c2acb953d3cb551a
| Analyzer | Verdict | Alert |
|---|
| urlquery | suspicious | Suspicious - DynDNS domain |
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain | | suricata | medium | ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain |
GET /en/apple.f843c50675ae358ea181.svg HTTP/1.1
Host: mwusonbxkm.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mwusonbxkm.duckdns.org/en/main
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 1484
Content-Type: image/svg+xml
Date: Fri, 10 May 2024 04:41:06 GMT
Server: Kestrel
Accept-Ranges: bytes
ETag: "1d9fe46cdea77cc"
Last-Modified: Sat, 14 Oct 2023 02:33:24 GMT
|
|
| mwusonbxkm.duckdns.org/en/favicon.ico | 103.80.134.63 | 200 OK | 22 kB |
URL GET HTTP/1.1mwusonbxkm.duckdns.org/en/favicon.ico IP103.80.134.63:80 ASN#3786 LG DACOM Corporation
Requested byhttp://mwusonbxkm.duckdns.org/en/
File typeMS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel Hash891e510219786f543ca998282ed99f45 19fe2ff6a2418bcb44b02308b998cef84199ee08 e4bdf72e2f803f7e19907c12f407ac7f7cd5f1f94bfd730b9be24b0d49191b48
| Analyzer | Verdict | Alert |
|---|
| urlquery | suspicious | Suspicious - DynDNS domain |
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain | | suricata | medium | ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain |
GET /en/favicon.ico HTTP/1.1
Host: mwusonbxkm.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mwusonbxkm.duckdns.org/en/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 22382
Content-Type: image/x-icon
Date: Fri, 10 May 2024 04:41:06 GMT
Server: Kestrel
Accept-Ranges: bytes
ETag: "1d71ee1f8b7af6e"
Last-Modified: Mon, 22 Mar 2021 06:09:52 GMT
|
|