Suricata IDS ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain
VerdictVerdict not recorded
Severitymedium
WEBSITE ANALYSIS REPORT
http://phenom-networks.net/
public
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- http://phenom-networks.net/
- Submitted IP / ASN
104.21.13.65 AS13335 · CLOUDFLARENET
- Final URL
- https://auth.phenom-networks.net/if/flow/default-authentication-flow/?next=%2Fapplication%2Fo%2Fauthorize%2F%3Fclient_id%3D9I6cYqf9anPQuyGbAiMIZzAuOtH2NyOZA7t9yPvm%26redirect_uri%3Dhttps%253A%252F%252Fphenom-networks.net%252Foutpost.goauthentik.io%252Fcallback%253FX-authentik-auth-callback%253Dtrue%26response_type%3Dcode%26scope%3Dak_proxy%2Bopenid%2Bentitlements%2Bemail%2Bprofile%26state%3DeyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJnb2F1dGhlbnRpay5pby9vdXRwb3N0LzlJNmNZcWY5YW5QUXV5R2JBaU1JWnpBdU90SDJOeU9aQTd0OXlQdm0iLCJzaWQiOiJZU0NOSDZGNEQyVjdSNlpGNUJBRDJMTlhHWVpTWEFYMk5OVkdXVlJORktGV0pMUzRKV0tRIiwic3RhdGUiOiJ6ZlZodExES2ltSXVZXzMxTHpJQTBzeHNoLUZ3aUt1N1JoNUFMaklPTEdrIiwicmVkaXJlY3QiOiJodHRwczovL3BoZW5vbS1uZXR3b3Jrcy5uZXQvIn0.cz8ZRJXlhMUXfW3KpTYW0r1Y29ROa2knLLMoBu_8-Zg
- Final IP / ASN
- 172.67.198.150 AS13335 · CLOUDFLARENET
Final page
- Page title
- Welcome to authentik! - authentik
- Final DOM MIME
- Not recorded
- Final DOM size
- Not recorded
Detections
Activity
- HTTP requests
- 56
- Observed hosts
- 4
- Script records
- 38
Estimated HTTP data
- Sent
- ~57.6 KB
- Received
- ~3.39 MB
Page capture
Final browser state
auth.phenom-networks.net
Screenshot unavailableNo screenshot pixels areavailable for this report.
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
IDS
1Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| phenom-networks.net | N/A | N/A | N/A | N/A | 488 B | 5.7 KB | 172.67.198.150 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| auth.phenom-networks.net | N/A | N/A | N/A | N/A | 56.0 KB | 3.37 MB | 172.67.198.150 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Cloudflare Browser Insights Analytics, RUM Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users. |
| static.cloudflareinsights.com | 4073 | 2019-08-30 | 2019-09-24 | 2025-10-19 | 482 B | 19.9 KB | 104.16.80.73 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| authentik.error-reporting.a7k.io | 1540575 | 2023-05-02 | 2023-05-05 | 2025-10-21 | 670 B | 1.1 KB | 172.67.186.116 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |