| risetabis2ansampejadi.duckdns.org/home/login.php?MTcxNDExMDE5MzY4NmEwZmMwNDVmN2E5NWUwMmM1MDVkMTI0YjcwOTdkNDFkNDQ0YTk1N2ZmZGZjYTkzNzc0M2FhN2E1Mzc2NzQ5OTU5MTUwMg== |  158.220.122.114 | 200 OK | 19 kB |
URL User Request GET HTTP/1.1risetabis2ansampejadi.duckdns.org/home/login.php?MTcxNDExMDE5MzY4NmEwZmMwNDVmN2E5NWUwMmM1MDVkMTI0YjcwOTdkNDFkNDQ0YTk1N2ZmZGZjYTkzNzc0M2FhN2E1Mzc2NzQ5OTU5MTUwMg== IP158.220.122.114:443
CertificateIssuerLet's Encrypt Subjectrisetabis2ansampejadi.duckdns.org FingerprintF3:12:BF:91:CD:C2:A3:1A:B6:FB:79:F4:1F:55:D9:EB:CC:84:75:9B ValidityFri, 26 Apr 2024 00:15:59 GMT - Thu, 25 Jul 2024 00:15:58 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (3396) Hash3741d6e8b8e58836facc3cbb6644bf55 9cb989d649dea93cef1757c1579707aa28bffe2f e7072b0790a34436090a9001399e1a5aac42973a8d9ac518d486499e6d32b390
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Amazon | | urlquery | suspicious | Suspicious - DynDNS domain | | OpenPhish | phishing | Amazon.com Inc. |
GET /home/login.php?MTcxNDExMDE5MzY4NmEwZmMwNDVmN2E5NWUwMmM1MDVkMTI0YjcwOTdkNDFkNDQ0YTk1N2ZmZGZjYTkzNzc0M2FhN2E1Mzc2NzQ5OTU5MTUwMg== HTTP/1.1
Host: risetabis2ansampejadi.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 26 Apr 2024 16:00:39 GMT
Server: Apache
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
|
|
| risetabis2ansampejadi.duckdns.org/home/files/sign-dekstop.css | 158.220.122.114 | 200 OK | 136 kB |
URL GET HTTP/1.1risetabis2ansampejadi.duckdns.org/home/files/sign-dekstop.css IP158.220.122.114:443
Requested byhttps://risetabis2ansampejadi.duckdns.org/home/login.php?MTcxNDExMDE5MzY4NmEwZmMwNDVmN2E5NWUwMmM1MDVkMTI0YjcwOTdkNDFkNDQ0YTk1N2ZmZGZjYTkzNzc0M2FhN2E1Mzc2NzQ5OTU5MTUwMg== CertificateIssuerLet's Encrypt Subjectrisetabis2ansampejadi.duckdns.org FingerprintF3:12:BF:91:CD:C2:A3:1A:B6:FB:79:F4:1F:55:D9:EB:CC:84:75:9B ValidityFri, 26 Apr 2024 00:15:59 GMT - Thu, 25 Jul 2024 00:15:58 GMT
File typeASCII text, with very long lines (65536), with no line terminators Size136 kB (135690 bytes) Hashfb2c0ba2162ab6a1583244242cf11bc0 6dde5b85e46425f3f88fb32a2042a466a0c8ccbd c37acb6ff8f11e1404570abccea987789690d886f070dc6ab19945b99d9105e4
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Amazon | | urlquery | suspicious | Suspicious - DynDNS domain |
GET /home/files/sign-dekstop.css HTTP/1.1
Host: risetabis2ansampejadi.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://risetabis2ansampejadi.duckdns.org/home/login.php?MTcxNDExMDE5MzY4NmEwZmMwNDVmN2E5NWUwMmM1MDVkMTI0YjcwOTdkNDFkNDQ0YTk1N2ZmZGZjYTkzNzc0M2FhN2E1Mzc2NzQ5OTU5MTUwMg==
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 26 Apr 2024 16:00:39 GMT
Server: Apache
Last-Modified: Mon, 02 Oct 2023 18:33:44 GMT
Accept-Ranges: bytes
Content-Length: 135690
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
|
|
| risetabis2ansampejadi.duckdns.org/home/files/style.sign-desktop.css | 158.220.122.114 | 200 OK | 36 kB |
URL GET HTTP/1.1risetabis2ansampejadi.duckdns.org/home/files/style.sign-desktop.css IP158.220.122.114:443
Requested byhttps://risetabis2ansampejadi.duckdns.org/home/login.php?MTcxNDExMDE5MzY4NmEwZmMwNDVmN2E5NWUwMmM1MDVkMTI0YjcwOTdkNDFkNDQ0YTk1N2ZmZGZjYTkzNzc0M2FhN2E1Mzc2NzQ5OTU5MTUwMg== CertificateIssuerLet's Encrypt Subjectrisetabis2ansampejadi.duckdns.org FingerprintF3:12:BF:91:CD:C2:A3:1A:B6:FB:79:F4:1F:55:D9:EB:CC:84:75:9B ValidityFri, 26 Apr 2024 00:15:59 GMT - Thu, 25 Jul 2024 00:15:58 GMT
File typeASCII text, with very long lines (20048), with CRLF line terminators Hashce03668bf4cba84e446d39b1e5430fa2 a1e1d2f4e14d20921a9b13ed4ea14ce0c407e64f 0c56d79edb4b4187f79ddcecd68fae587c56402c3ed737ed954b3eda3d250967
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Amazon | | urlquery | suspicious | Suspicious - DynDNS domain |
GET /home/files/style.sign-desktop.css HTTP/1.1
Host: risetabis2ansampejadi.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://risetabis2ansampejadi.duckdns.org/home/login.php?MTcxNDExMDE5MzY4NmEwZmMwNDVmN2E5NWUwMmM1MDVkMTI0YjcwOTdkNDFkNDQ0YTk1N2ZmZGZjYTkzNzc0M2FhN2E1Mzc2NzQ5OTU5MTUwMg==
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 26 Apr 2024 16:00:39 GMT
Server: Apache
Last-Modified: Mon, 02 Oct 2023 11:06:00 GMT
Accept-Ranges: bytes
Content-Length: 36441
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
|
|
| risetabis2ansampejadi.duckdns.org/home/files/jquery.validate.min.js | 158.220.122.114 | 200 OK | 37 kB |
URL GET HTTP/1.1risetabis2ansampejadi.duckdns.org/home/files/jquery.validate.min.js IP158.220.122.114:443
Requested byhttps://risetabis2ansampejadi.duckdns.org/home/login.php?MTcxNDExMDE5MzY4NmEwZmMwNDVmN2E5NWUwMmM1MDVkMTI0YjcwOTdkNDFkNDQ0YTk1N2ZmZGZjYTkzNzc0M2FhN2E1Mzc2NzQ5OTU5MTUwMg== CertificateIssuerLet's Encrypt Subjectrisetabis2ansampejadi.duckdns.org FingerprintF3:12:BF:91:CD:C2:A3:1A:B6:FB:79:F4:1F:55:D9:EB:CC:84:75:9B ValidityFri, 26 Apr 2024 00:15:59 GMT - Thu, 25 Jul 2024 00:15:58 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (829), with CRLF line terminators Hash1cdeeb8eaca2a1357de0a82bd5e5526f f0474ee246d33979152b20bfbea49045581792f3 1327e703fcf1311de11818f1fedcef1ec0ba4f60734962c6955fdffc408d5287
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Amazon | | urlquery | suspicious | Suspicious - DynDNS domain |
GET /home/files/jquery.validate.min.js HTTP/1.1
Host: risetabis2ansampejadi.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://risetabis2ansampejadi.duckdns.org/home/login.php?MTcxNDExMDE5MzY4NmEwZmMwNDVmN2E5NWUwMmM1MDVkMTI0YjcwOTdkNDFkNDQ0YTk1N2ZmZGZjYTkzNzc0M2FhN2E1Mzc2NzQ5OTU5MTUwMg==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 26 Apr 2024 16:00:39 GMT
Server: Apache
Last-Modified: Mon, 02 Oct 2023 11:06:02 GMT
Accept-Ranges: bytes
Content-Length: 36756
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/javascript
|
|
| risetabis2ansampejadi.duckdns.org/home/files/jquery-3.3.1.min.js | 158.220.122.114 | 200 OK | 88 kB |
URL GET HTTP/1.1risetabis2ansampejadi.duckdns.org/home/files/jquery-3.3.1.min.js IP158.220.122.114:443
Requested byhttps://risetabis2ansampejadi.duckdns.org/home/login.php?MTcxNDExMDE5MzY4NmEwZmMwNDVmN2E5NWUwMmM1MDVkMTI0YjcwOTdkNDFkNDQ0YTk1N2ZmZGZjYTkzNzc0M2FhN2E1Mzc2NzQ5OTU5MTUwMg== CertificateIssuerLet's Encrypt Subjectrisetabis2ansampejadi.duckdns.org FingerprintF3:12:BF:91:CD:C2:A3:1A:B6:FB:79:F4:1F:55:D9:EB:CC:84:75:9B ValidityFri, 26 Apr 2024 00:15:59 GMT - Thu, 25 Jul 2024 00:15:58 GMT
File typeJavaScript source, ASCII text, with very long lines (65447) Hash2c872dbe60f4ba70fb85356113d8b35e ee48592d1fff952fcf06ce0b666ed4785493afdc fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Amazon | | urlquery | suspicious | Suspicious - DynDNS domain |
GET /home/files/jquery-3.3.1.min.js HTTP/1.1
Host: risetabis2ansampejadi.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://risetabis2ansampejadi.duckdns.org/home/login.php?MTcxNDExMDE5MzY4NmEwZmMwNDVmN2E5NWUwMmM1MDVkMTI0YjcwOTdkNDFkNDQ0YTk1N2ZmZGZjYTkzNzc0M2FhN2E1Mzc2NzQ5OTU5MTUwMg==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 26 Apr 2024 16:00:39 GMT
Server: Apache
Last-Modified: Wed, 04 Oct 2023 11:54:52 GMT
Accept-Ranges: bytes
Content-Length: 87533
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/javascript
|
|
| m.media-amazon.com/images/S/sash/mPGmT0r6IeTyIee.png |  2.17.251.113 | 200 OK | 28 kB |
URL GET HTTP/2m.media-amazon.com/images/S/sash/mPGmT0r6IeTyIee.png IP2.17.251.113:443 ASN#20940 Akamai International B.V.
Requested byhttps://risetabis2ansampejadi.duckdns.org/home/login.php?MTcxNDExMDE5MzY4NmEwZmMwNDVmN2E5NWUwMmM1MDVkMTI0YjcwOTdkNDFkNDQ0YTk1N2ZmZGZjYTkzNzc0M2FhN2E1Mzc2NzQ5OTU5MTUwMg== CertificateIssuerDigiCert Inc Subjectm.media-amazon.com Fingerprint7A:BD:EF:1F:61:5F:08:1B:79:13:35:FC:04:B8:3F:8E:D5:69:31:C3 ValidityTue, 29 Aug 2023 00:00:00 GMT - Wed, 28 Aug 2024 23:59:59 GMT
File typePNG image data, 400 x 750, 8-bit colormap, non-interlaced Hash1b5a1fb097715b1604b21aba92ef6a3e c4a765aedd886dc04d89e7e93b6a02c59ecb7013 437e95a363a4291060e34ba170e043274e0155821e9be374f35de3c4f13cbaa5
GET /images/S/sash/mPGmT0r6IeTyIee.png HTTP/1.1
Host: m.media-amazon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://risetabis2ansampejadi.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Server
content-type: image/png
content-length: 27972
x-amz-ir-id: 60c5c3cb-0e05-45df-9336-9135292f45b8
last-modified: Tue, 17 Nov 2020 23:31:33 GMT
surrogate-key: x-cache-108 /images/S/sash/mPGmT0r6IeTyIee
x-nginx-cache-status: HIT
accept-ranges: bytes
peer-cache: Hit
cache-control: public, max-age=630595554
expires: Wed, 20 Apr 2044 05:26:34 GMT
date: Fri, 26 Apr 2024 16:00:40 GMT
alt-svc: h3=":443"; ma=93600,h3-29=":443"; ma=93600,h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
x-cache: Hit from akamai
strict-transport-security: max-age=86400
akamai-grn: 0.72867b5c.1714147240.4141489
server-timing: provider;desc="ak"
timing-allow-origin: https://risetabis2ansampejadi.duckdns.org/
akamai-cache-status: Hit from child
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| risetabis2ansampejadi.duckdns.org/home/files/favicon.ico | 158.220.122.114 | 200 OK | 18 kB |
URL GET HTTP/1.1risetabis2ansampejadi.duckdns.org/home/files/favicon.ico IP158.220.122.114:443
Requested byhttps://risetabis2ansampejadi.duckdns.org/home/login.php?MTcxNDExMDE5MzY4NmEwZmMwNDVmN2E5NWUwMmM1MDVkMTI0YjcwOTdkNDFkNDQ0YTk1N2ZmZGZjYTkzNzc0M2FhN2E1Mzc2NzQ5OTU5MTUwMg== CertificateIssuerLet's Encrypt Subjectrisetabis2ansampejadi.duckdns.org FingerprintF3:12:BF:91:CD:C2:A3:1A:B6:FB:79:F4:1F:55:D9:EB:CC:84:75:9B ValidityFri, 26 Apr 2024 00:15:59 GMT - Thu, 25 Jul 2024 00:15:58 GMT
File typeMS Windows icon resource - 4 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel Hashca6619b86c2f6e6068b69ba3aaddb7e4 c44a1bb9d14385334eb851fbb0afb19d961c1ee7 17d02e2db6dbedb95dd449d06868c147ac2c3b5371497bcb9407e75336a99e09
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Amazon | | urlquery | suspicious | Suspicious - DynDNS domain |
GET /home/files/favicon.ico HTTP/1.1
Host: risetabis2ansampejadi.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://risetabis2ansampejadi.duckdns.org/home/login.php?MTcxNDExMDE5MzY4NmEwZmMwNDVmN2E5NWUwMmM1MDVkMTI0YjcwOTdkNDFkNDQ0YTk1N2ZmZGZjYTkzNzc0M2FhN2E1Mzc2NzQ5OTU5MTUwMg==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 26 Apr 2024 16:00:40 GMT
Server: Apache
Last-Modified: Mon, 02 Oct 2023 11:06:34 GMT
Accept-Ranges: bytes
Content-Length: 17542
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/x-icon
|
|