Report - xinratmqpj.duckdns.org/de/

Report Overview

Submitted URL
xinratmqpj.duckdns.org/de/
IP
103.80.134.63
ASN
#3786 LG DACOM Corporation
Submitted
2024-04-23 06:16:59
Access
public
Website Title
Dein Account für alles von Apple
Final URL
xinratmqpj.duckdns.org/de/main
Tags
dyndns
urlquery detections
Suspicious - DynDNS domain

Detections

urlquery
16
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
xinratmqpj.duckdns.org	unknown	unknown	No data	No data	5.3 kB	379 kB	103.80.134.63

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

JavaScript (4)

	URL	Size	First Seen	Last Seen
	xinratmqpj.duckdns.org/de/assets/card.js	59 kB	2024-03-27	2024-05-02
Pretty URL xinratmqpj.duckdns.org/de/assets/card.js IP 103.80.134.63 ASN #3786 LG DACOM Corporation Introduced by scriptElement Embedded in HTML false Observations First Seen2024-03-27 17:58:11 Last Seen2024-05-02 08:05:44 Times Seen460 Hash 7aa76d18dd3e3598ac9561adf01f3882 26d9fcdd2b6bee0b3f1b96b015f3703b5fbd49e0 6d5516bbbebba2d51878f1e791b642f3b2944270b8e84770f15a16376b202213 Loading...

	xinratmqpj.duckdns.org/de/runtime.0bcf17706ecd87c93a8f.js	2.3 kB	2024-04-13	2024-05-01
Pretty URL xinratmqpj.duckdns.org/de/runtime.0bcf17706ecd87c93a8f.js IP 103.80.134.63 ASN #3786 LG DACOM Corporation Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-13 17:45:46 Last Seen2024-05-01 19:36:42 Times Seen132 Hash 65ebaf8e5fbe968924256f42f6cdcbd4 1a74d40de7599f09d217a916408321bfc99ce7a5 4b09aeee54d1df783143eacd398e68290bc3f111a02db57d62d372ce012ac8ba Loading...

	xinratmqpj.duckdns.org/de/polyfills.a6f3059b7dc0d7b5e536.js	46 kB	2024-03-27	2024-05-02
Pretty URL xinratmqpj.duckdns.org/de/polyfills.a6f3059b7dc0d7b5e536.js IP 103.80.134.63 ASN #3786 LG DACOM Corporation Introduced by scriptElement Embedded in HTML false Observations First Seen2024-03-27 17:58:12 Last Seen2024-05-02 08:05:44 Times Seen460 Hash 4794c42590c7158a1a334801f7068376 63e0e06b459566123ab988af6258369ba5b181dd 073c634b2120ecfe1b6b98e45f44d807088bd437e757eb3b049867a615e6a49d Loading...

	xinratmqpj.duckdns.org/de/main.dc56290892b05b1ad81b.js	840 kB	2024-04-13	2024-05-01
Pretty URL xinratmqpj.duckdns.org/de/main.dc56290892b05b1ad81b.js IP 103.80.134.63 ASN #3786 LG DACOM Corporation Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-13 17:45:47 Last Seen2024-05-01 19:36:42 Times Seen132 Hash 6155d894eb0c399e78c235b1444844d6 93334b0b7bc2f0880001503a7700ec65de0cbfb7 26b5edd393c32e1817edc64caa9c17c9a63ea6373447d9bc82bf7faf827b5fc4 Loading...

HTTP Transactions (15)

URL IP Response Size

xinratmqpj.duckdns.org/

103.80.134.63

0 B

URL
xinratmqpj.duckdns.org/
IP
103.80.134.63:0
ASN
#3786 LG DACOM Corporation

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - DynDNS domain

HTTP Headers

GET / HTTP/1.1
Host: xinratmqpj.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Content-Length: 0
Date: Tue, 23 Apr 2024 06:16:36 GMT
Server: Kestrel
Location: /en/
X-Rate-Limit-Limit: 24h
X-Rate-Limit-Remaining: 90
X-Rate-Limit-Reset: 2024-04-24T05:07:41.1516910Z

xinratmqpj.duckdns.org/en/

103.80.134.63

520 B

URL
xinratmqpj.duckdns.org/en/
IP
103.80.134.63:0
ASN
#3786 LG DACOM Corporation

File type
HTML document, ASCII text
Size
520 B (520 bytes)
Hash
fb8b9d9bf56c5251a14ad8cf217df902
87852731aa55f66ce221f4d2379712c341f7bf00
3074a00c33a6892ee549ced168872d8ffb9c78fe10f47cea0921aed8ac60d6ee

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - DynDNS domain

HTTP Headers

GET /en/ HTTP/1.1
Host: xinratmqpj.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/html
Date: Tue, 23 Apr 2024 06:16:36 GMT
Server: Kestrel
Accept-Ranges: bytes
Content-Encoding: gzip
ETag: "1d9fe46cfb43625"
Last-Modified: Sat, 14 Oct 2023 02:33:27 GMT
Transfer-Encoding: chunked
Vary: Accept-Encoding
X-Rate-Limit-Limit: 24h
X-Rate-Limit-Remaining: 89
X-Rate-Limit-Reset: 2024-04-24T05:07:41.1516910Z

xinratmqpj.duckdns.org/de/

103.80.134.63

518 B

URL User Request GET
xinratmqpj.duckdns.org/de/
IP
103.80.134.63:0
ASN
#3786 LG DACOM Corporation

File type
HTML document, ASCII text
Size
518 B (518 bytes)
Hash
0e72180968edfb35cd8bf8529e5750e7
3537411f734d79815ee81f26f7e69e9eed85aef1
90b1da309efd8c61eb4c6a560a6d4bbb0006a3d9626403dd0458a014169ba9ac

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - DynDNS domain

HTTP Headers

GET /de/ HTTP/1.1
Host: xinratmqpj.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/html
Date: Tue, 23 Apr 2024 06:16:37 GMT
Server: Kestrel
Accept-Ranges: bytes
Content-Encoding: gzip
ETag: "1da00740c18aaa5"
Last-Modified: Mon, 16 Oct 2023 21:02:18 GMT
Transfer-Encoding: chunked
Vary: Accept-Encoding
X-Rate-Limit-Limit: 24h
X-Rate-Limit-Remaining: 88
X-Rate-Limit-Reset: 2024-04-24T05:07:41.1516910Z

xinratmqpj.duckdns.org/de/assets/card.css

103.80.134.63

200 OK

5.0 kB

URL GET HTTP/1.1
xinratmqpj.duckdns.org/de/assets/card.css
IP
103.80.134.63:80
ASN
#3786 LG DACOM Corporation

Requested by
http://xinratmqpj.duckdns.org/de/

File type
Unicode text, UTF-8 text, with very long lines (27071)
Size
5.0 kB (4977 bytes)
Hash
8c10638062fc10e7800b5f041d66cbe1
94a8f282dc29814af277016d8741fc857b49304d
96712b90b0eb91764af520996a42c0bff93e823e5e825e2544d1ef4723d625d3

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - DynDNS domain

HTTP Headers

GET /de/assets/card.css HTTP/1.1
Host: xinratmqpj.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://xinratmqpj.duckdns.org/de/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/css
Date: Tue, 23 Apr 2024 06:16:37 GMT
Server: Kestrel
Accept-Ranges: bytes
Content-Encoding: gzip
ETag: "1d7d7f36c04bfc4"
Last-Modified: Fri, 12 Nov 2021 18:30:52 GMT
Transfer-Encoding: chunked
Vary: Accept-Encoding

xinratmqpj.duckdns.org/de/runtime.0bcf17706ecd87c93a8f.js

103.80.134.63

200 OK

1.2 kB

URL GET HTTP/1.1
xinratmqpj.duckdns.org/de/runtime.0bcf17706ecd87c93a8f.js
IP
103.80.134.63:80
ASN
#3786 LG DACOM Corporation

Requested by
http://xinratmqpj.duckdns.org/de/

File type
JavaScript source, ASCII text, with very long lines (2278), with no line terminators
Size
1.2 kB (1160 bytes)
Hash
65ebaf8e5fbe968924256f42f6cdcbd4
1a74d40de7599f09d217a916408321bfc99ce7a5
4b09aeee54d1df783143eacd398e68290bc3f111a02db57d62d372ce012ac8ba

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - DynDNS domain

HTTP Headers

GET /de/runtime.0bcf17706ecd87c93a8f.js HTTP/1.1
Host: xinratmqpj.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://xinratmqpj.duckdns.org/de/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/javascript
Date: Tue, 23 Apr 2024 06:16:37 GMT
Server: Kestrel
Accept-Ranges: bytes
Content-Encoding: gzip
ETag: "1da00740ae774e6"
Last-Modified: Mon, 16 Oct 2023 21:02:16 GMT
Transfer-Encoding: chunked
Vary: Accept-Encoding

xinratmqpj.duckdns.org/de/assets/card.js

103.80.134.63

200 OK

16 kB

URL GET HTTP/1.1
xinratmqpj.duckdns.org/de/assets/card.js
IP
103.80.134.63:80
ASN
#3786 LG DACOM Corporation

Requested by
http://xinratmqpj.duckdns.org/de/

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (51786)
Size
16 kB (16275 bytes)
Hash
7aa76d18dd3e3598ac9561adf01f3882
26d9fcdd2b6bee0b3f1b96b015f3703b5fbd49e0
6d5516bbbebba2d51878f1e791b642f3b2944270b8e84770f15a16376b202213

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - DynDNS domain

HTTP Headers

GET /de/assets/card.js HTTP/1.1
Host: xinratmqpj.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://xinratmqpj.duckdns.org/de/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/javascript
Date: Tue, 23 Apr 2024 06:16:37 GMT
Server: Kestrel
Accept-Ranges: bytes
Content-Encoding: gzip
ETag: "1d7d7f3614aa44b"
Last-Modified: Fri, 12 Nov 2021 18:30:34 GMT
Transfer-Encoding: chunked
Vary: Accept-Encoding

xinratmqpj.duckdns.org/de/styles.2b2408b28c6b13bb450e.css

103.80.134.63

200 OK

28 kB

URL GET HTTP/1.1
xinratmqpj.duckdns.org/de/styles.2b2408b28c6b13bb450e.css
IP
103.80.134.63:80
ASN
#3786 LG DACOM Corporation

Requested by
http://xinratmqpj.duckdns.org/de/

File type
ASCII text, with very long lines (65536), with no line terminators
Size
28 kB (27832 bytes)
Hash
c739cee2deb86082090e380beec5b7a0
f54b118cf0b048e09c70ad1ecf661a21b1a47406
0697729b655b3fadc015ce16eecd8cbd3b48a9e34e3c2a3e8b6ad0f8053887d2

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - DynDNS domain

HTTP Headers

GET /de/styles.2b2408b28c6b13bb450e.css HTTP/1.1
Host: xinratmqpj.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://xinratmqpj.duckdns.org/de/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/css
Date: Tue, 23 Apr 2024 06:16:37 GMT
Server: Kestrel
Accept-Ranges: bytes
Content-Encoding: gzip
ETag: "1da00740a4ceacf"
Last-Modified: Mon, 16 Oct 2023 21:02:15 GMT
Transfer-Encoding: chunked
Vary: Accept-Encoding

xinratmqpj.duckdns.org/de/polyfills.a6f3059b7dc0d7b5e536.js

103.80.134.63

200 OK

17 kB

URL GET HTTP/1.1
xinratmqpj.duckdns.org/de/polyfills.a6f3059b7dc0d7b5e536.js
IP
103.80.134.63:80
ASN
#3786 LG DACOM Corporation

Requested by
http://xinratmqpj.duckdns.org/de/

File type
JavaScript source, ASCII text, with very long lines (45945), with no line terminators
Size
17 kB (16801 bytes)
Hash
4794c42590c7158a1a334801f7068376
63e0e06b459566123ab988af6258369ba5b181dd
073c634b2120ecfe1b6b98e45f44d807088bd437e757eb3b049867a615e6a49d

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - DynDNS domain

HTTP Headers

GET /de/polyfills.a6f3059b7dc0d7b5e536.js HTTP/1.1
Host: xinratmqpj.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://xinratmqpj.duckdns.org/de/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/javascript
Date: Tue, 23 Apr 2024 06:16:37 GMT
Server: Kestrel
Accept-Ranges: bytes
Content-Encoding: gzip
ETag: "1da00740ae7cf79"
Last-Modified: Mon, 16 Oct 2023 21:02:16 GMT
Transfer-Encoding: chunked
Vary: Accept-Encoding

xinratmqpj.duckdns.org/de/main.dc56290892b05b1ad81b.js

103.80.134.63

200 OK

243 kB

URL GET HTTP/1.1
xinratmqpj.duckdns.org/de/main.dc56290892b05b1ad81b.js
IP
103.80.134.63:80
ASN
#3786 LG DACOM Corporation

Requested by
http://xinratmqpj.duckdns.org/de/

File type
JavaScript source, ASCII text, with very long lines (63124)
Size
243 kB (243342 bytes)
Hash
6155d894eb0c399e78c235b1444844d6
93334b0b7bc2f0880001503a7700ec65de0cbfb7
26b5edd393c32e1817edc64caa9c17c9a63ea6373447d9bc82bf7faf827b5fc4

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - DynDNS domain

HTTP Headers

GET /de/main.dc56290892b05b1ad81b.js HTTP/1.1
Host: xinratmqpj.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://xinratmqpj.duckdns.org/de/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/javascript
Date: Tue, 23 Apr 2024 06:16:37 GMT
Server: Kestrel
Accept-Ranges: bytes
Content-Encoding: gzip
ETag: "1da00740b8cc313"
Last-Modified: Mon, 16 Oct 2023 21:02:17 GMT
Transfer-Encoding: chunked
Vary: Accept-Encoding

xinratmqpj.duckdns.org/de/assets/logo.png

103.80.134.63

200 OK

34 kB

URL GET HTTP/1.1
xinratmqpj.duckdns.org/de/assets/logo.png
IP
103.80.134.63:80
ASN
#3786 LG DACOM Corporation

Requested by
http://xinratmqpj.duckdns.org/de/

File type
PNG image data, 720 x 721, 8-bit colormap, non-interlaced
Size
34 kB (34355 bytes)
Hash
4852c60ddb8653928e43fa9d24b911b3
e037ce421215511dbce720d6f6503e8fa9b8ea9d
07126b04b6559c56df43d120f4c5487f1ca9e335428b3d82c2d2d24459990561

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - DynDNS domain

HTTP Headers

GET /de/assets/logo.png HTTP/1.1
Host: xinratmqpj.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://xinratmqpj.duckdns.org/de/main
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Length: 34355
Content-Type: image/png
Date: Tue, 23 Apr 2024 06:16:39 GMT
Server: Kestrel
Accept-Ranges: bytes
ETag: "1d9ab83779dc633"
Last-Modified: Fri, 30 Jun 2023 18:48:32 GMT

xinratmqpj.duckdns.org/de/assets/menu.png

103.80.134.63

200 OK

687 B

URL GET HTTP/1.1
xinratmqpj.duckdns.org/de/assets/menu.png
IP
103.80.134.63:80
ASN
#3786 LG DACOM Corporation

Requested by
http://xinratmqpj.duckdns.org/de/

File type
PNG image data, 49 x 48, 8-bit/color RGBA, non-interlaced
Size
687 B (687 bytes)
Hash
da0b0fdd44746082b7f978a5f70f0e78
69a6755ecad7defee0b3de296d1352dae7cae626
00543da96852706a4d679197d06a00385869a5ce868c2687e7ab23a5f83fe4e4

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - DynDNS domain

HTTP Headers

GET /de/assets/menu.png HTTP/1.1
Host: xinratmqpj.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://xinratmqpj.duckdns.org/de/main
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Length: 687
Content-Type: image/png
Date: Tue, 23 Apr 2024 06:16:39 GMT
Server: Kestrel
Accept-Ranges: bytes
ETag: "1d9ab7df8593f2f"
Last-Modified: Fri, 30 Jun 2023 18:09:11 GMT

xinratmqpj.duckdns.org/de/assets/jt.png

103.80.134.63

200 OK

4.1 kB

URL GET HTTP/1.1
xinratmqpj.duckdns.org/de/assets/jt.png
IP
103.80.134.63:80
ASN
#3786 LG DACOM Corporation

Requested by
http://xinratmqpj.duckdns.org/de/

File type
PNG image data, 126 x 126, 8-bit/color RGBA, non-interlaced
Size
4.1 kB (4129 bytes)
Hash
a64f3508282fa585f502c7283cfc853a
c266d5102a4fd1d5d9980799a51a345390b5d533
ff3323d9098ef10b0d36ef5c9219481d03afb2d307a5144a6ff3f509b31110f4

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - DynDNS domain

HTTP Headers

GET /de/assets/jt.png HTTP/1.1
Host: xinratmqpj.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://xinratmqpj.duckdns.org/de/main
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Length: 4129
Content-Type: image/png
Date: Tue, 23 Apr 2024 06:16:39 GMT
Server: Kestrel
Accept-Ranges: bytes
ETag: "1d5318f817f9521"
Last-Modified: Wed, 03 Jul 2019 11:07:30 GMT

xinratmqpj.duckdns.org/de/image_small.1771014580291c90faaa.svg

103.80.134.63

200 OK

898 B

URL GET HTTP/1.1
xinratmqpj.duckdns.org/de/image_small.1771014580291c90faaa.svg
IP
103.80.134.63:80
ASN
#3786 LG DACOM Corporation

Requested by
http://xinratmqpj.duckdns.org/de/

File type
SVG Scalable Vector Graphics image
Size
898 B (898 bytes)
Hash
4dc220ff2f9395c2cd7c34de8776a6e7
9dfcb00873e24be99f2965c6447e393b71cd6fc1
c18d99c87523f8ef73e5dc2e86aa5917da37e5564a7f591cb43bc32049f76d88

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - DynDNS domain

HTTP Headers

GET /de/image_small.1771014580291c90faaa.svg HTTP/1.1
Host: xinratmqpj.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://xinratmqpj.duckdns.org/de/main
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Length: 898
Content-Type: image/svg+xml
Date: Tue, 23 Apr 2024 06:16:39 GMT
Server: Kestrel
Accept-Ranges: bytes
ETag: "1da00740a4ee602"
Last-Modified: Mon, 16 Oct 2023 21:02:15 GMT

xinratmqpj.duckdns.org/de/apple.f843c50675ae358ea181.svg

103.80.134.63

200 OK

1.5 kB

URL GET HTTP/1.1
xinratmqpj.duckdns.org/de/apple.f843c50675ae358ea181.svg
IP
103.80.134.63:80
ASN
#3786 LG DACOM Corporation

Requested by
http://xinratmqpj.duckdns.org/de/

File type
SVG Scalable Vector Graphics image
Size
1.5 kB (1484 bytes)
Hash
26cbb4bfb27dd56b0ed09a961f28145b
b8e84ed32f81f41251c815e0132fed0fba3489f1
c21d714e92269a3dcf05c24db9aec96171671d0dcd59b867c2acb953d3cb551a

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - DynDNS domain

HTTP Headers

GET /de/apple.f843c50675ae358ea181.svg HTTP/1.1
Host: xinratmqpj.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://xinratmqpj.duckdns.org/de/main
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Length: 1484
Content-Type: image/svg+xml
Date: Tue, 23 Apr 2024 06:16:39 GMT
Server: Kestrel
Accept-Ranges: bytes
ETag: "1da00740a4ee04c"
Last-Modified: Mon, 16 Oct 2023 21:02:15 GMT

xinratmqpj.duckdns.org/de/favicon.ico

103.80.134.63

200 OK

22 kB

URL GET HTTP/1.1
xinratmqpj.duckdns.org/de/favicon.ico
IP
103.80.134.63:80
ASN
#3786 LG DACOM Corporation

Requested by
http://xinratmqpj.duckdns.org/de/

File type
MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Size
22 kB (22382 bytes)
Hash
891e510219786f543ca998282ed99f45
19fe2ff6a2418bcb44b02308b998cef84199ee08
e4bdf72e2f803f7e19907c12f407ac7f7cd5f1f94bfd730b9be24b0d49191b48

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - DynDNS domain

HTTP Headers

GET /de/favicon.ico HTTP/1.1
Host: xinratmqpj.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://xinratmqpj.duckdns.org/de/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Length: 22382
Content-Type: image/x-icon
Date: Tue, 23 Apr 2024 06:16:39 GMT
Server: Kestrel
Accept-Ranges: bytes
ETag: "1d71ee1f8b7af6e"
Last-Modified: Mon, 22 Mar 2021 06:09:52 GMT

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

JavaScript (4)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (15)

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size