Report Overview

  1. Submitted URL

    pocsezubgj.duckdns.org/

  2. IP

    64.15.75.85

    ASN

    #10929 ESTRUXTURE

  3. Submitted

    2023-04-01 17:37:55

    Access

    public

  4. Website Title

  5. Final URL

  6. urlquery detections

    Phishing - Japan's Tax Agency

    Suspicious - DynDNS domain

Detections

  1. urlquery

    29

  2. Network Intrusion Detection

    7

  3. Threat Detection Systems

    10

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
r3.o.lencr.org3442020-12-02T09:52:13Z2023-04-01T18:12:25Z
firefox.settings.services.mozilla.com8672020-06-04T22:08:41Z2023-04-01T18:13:29Z
content-signature-2.cdn.mozilla.net11522020-11-03T13:26:46Z2023-04-01T17:56:08Z
pocsezubgj.duckdns.orgunknown2023-03-11T08:05:22Z2023-03-17T19:38:24Z
contile.services.mozilla.com11142021-05-27T20:32:35Z2023-04-01T18:12:11Z
push.services.mozilla.com21402014-10-24T10:27:06Z2023-04-01T18:14:35Z
ocsp.globalsign.com20752012-07-20T19:46:16Z2023-04-01T18:13:33Z
img-getpocket.cdn.mozilla.net16312018-06-22T01:36:00Z2023-04-01T05:09:04Z
www.nta.go.jpunknown2022-06-02T17:52:52Z2023-04-01T19:37:45Z
ia.51.la596072017-10-31T09:01:51Z2023-04-02T01:45:59Z

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
mediumClient IPInternal IP
lowClient IPInternal IP
mediumClient IPInternal IP
lowClient IPInternal IP
mediumClient IP 64.15.75.85
mediumClient IPInternal IP
lowClient IPInternal IP

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter
SeverityIndicatorAlert
mediumpocsezubgj.duckdns.org/Phishing
mediumpocsezubgj.duckdns.org/Phishing
mediumpocsezubgj.duckdns.org/static/js/1.jsPhishing
mediumpocsezubgj.duckdns.org/static/hau/jquery-1.9.1.min.jsPhishing
mediumpocsezubgj.duckdns.org/static/js/jquery.cookie.jsPhishing

mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


JavaScript (6)

HTTP Transactions (36)

URLIPResponseSize
r3.o.lencr.org/
23.36.76.226200 OK503 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK939 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
34.160.144.191200 OK5.3 kB
pocsezubgj.duckdns.org/
64.15.75.85301 Moved Permanently162 B
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK12 B
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK329 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
push.services.mozilla.com/
54.200.156.146101 Switching Protocols0 B
pocsezubgj.duckdns.org/static/gs_vk/reset.css
64.15.75.85200 OK884 B
pocsezubgj.duckdns.org/static/gs_vk/index.css
64.15.75.85200 OK748 B
pocsezubgj.duckdns.org/static/gs_vk/banner.png
64.15.75.85200 OK221 kB
pocsezubgj.duckdns.org/static/gs_vk/logo.png
64.15.75.85200 OK3.0 kB
pocsezubgj.duckdns.org/static/gs_vk/index.png
64.15.75.85200 OK104 kB
pocsezubgj.duckdns.org/static/gs_vk/syozai_icon.png
64.15.75.85200 OK1.3 kB
ocsp.globalsign.com/gsrsaovsslca2018
104.18.21.226200 OK1.4 kB
ocsp.globalsign.com/gsgccr3dvtlsca2020
104.18.21.226200 OK1.4 kB
r3.o.lencr.org/
23.36.76.226200 OK503 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5c8939ac-5249-469a-92a8-f7d39e16fd0c.jpeg
34.120.237.76200 OK10 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff94a70cc-7556-4fae-8603-14d3b253f74c.jpeg
34.120.237.76200 OK9.9 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F808d12ec-c97a-4c49-976e-6025ea897112.jpeg
34.120.237.76200 OK6.0 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6fb8174c-0fbe-4857-bc0b-3e50751be490.jpeg
34.120.237.76200 OK3.8 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F24171d10-56ac-40e7-9d10-77b9e948da6e.jpeg
34.120.237.76200 OK10 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfa5d643-243c-4157-97e2-d929d9b82514.jpeg
34.120.237.76200 OK4.7 kB
ia.51.la/go1?id=21567201&rt=1680370662909&rl=1280*1024&lang=en-US&ct=unknow&pf=1&ins=1&vd=1&ce=1&cd=24&ds=&ing=1&ekc=&sid=1680370662909&tt=&kw=&cu=https%253A%252F%252Fpocsezubgj.duckdns.org%252F&pu=
103.143.19.103200 0 B
www.nta.go.jp/template/img/template/headerbackground.jpg
54.230.111.22200 OK36 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe5464d27-4a65-4ce5-81dc-c2d73690f9ea.jpeg
34.120.237.76200 OK9.2 kB
pocsezubgj.duckdns.org/
64.15.75.85200 OK0 B
pocsezubgj.duckdns.org/static/js/1.js
64.15.75.85200 OK0 B
pocsezubgj.duckdns.org/static/hau/jquery-1.9.1.min.js
64.15.75.85200 OK0 B
pocsezubgj.duckdns.org/favicon.ico
64.15.75.85404 Not Found0 B
pocsezubgj.duckdns.org/static/gs_vk/public.css
64.15.75.85200 OK0 B
pocsezubgj.duckdns.org/static/js/jquery.cookie.js
64.15.75.85200 OK0 B