Overview

URL ht.ly/CmAv30oFywb
IP54.67.57.56
ASNAS16509 Amazon.com, Inc.
Location United States
Report completed2019-05-13 17:00:26 CEST
StatusLoading report..
urlquery Alerts DynDNS domain detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro
Timestamp Severity Source IP Destination IP Alert
2019-05-13 16:59:55 CEST 2 Client IP  34.214.102.11 ET INFO HTTP Connection To DDNS Domain Myvnc.com


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter  No alerts detected
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 54.67.57.56

Date UQ / IDS / BL URL IP
2019-06-25 03:02:29 +0200
0 - 0 - 0 ow.ly/9wQc50uLvBL 54.67.57.56
2019-06-10 19:00:25 +0200
0 - 0 - 0 ow.ly/vYKj30oURpA 54.67.57.56
2019-06-10 16:02:51 +0200
0 - 0 - 1 owl.li/QESCE 54.67.57.56
2019-06-09 18:33:31 +0200
0 - 0 - 0 htl.li/cYMM30oUvI3#zhDhMQnvJzlHDFGOef 54.67.57.56
2019-05-31 07:13:00 +0200
0 - 2 - 2 htl.li/TjiP30lZ96a 54.67.57.56
2019-05-30 17:16:13 +0200
0 - 0 - 1 ht.ly/zY4r30oQapB 54.67.57.56
2019-05-30 16:06:22 +0200
0 - 0 - 1 ht.ly/PlBh30oPU1y 54.67.57.56
2019-05-30 15:32:06 +0200
0 - 0 - 1 ht.ly/90Uu30oPU1A 54.67.57.56
2019-05-30 12:18:49 +0200
0 - 0 - 1 ht.ly/nuFL30oPTWs 54.67.57.56
2019-05-13 18:18:56 +0200
0 - 2 - 0 ow.ly/cSDJ30oIANg 54.67.57.56

Last 10 reports on ASN: AS16509 Amazon.com, Inc.

Date UQ / IDS / BL URL IP
2019-07-01 11:19:16 +0200
0 - 0 - 0 https://www.goodreads.com/videos/151825-ginuiae 54.239.26.220
2019-07-01 09:38:28 +0200
0 - 0 - 0 https://www.deviantart.com/streaming201/journ (...) 54.230.231.64
2019-07-01 09:29:28 +0200
0 - 0 - 0 https://www.deviantart.com/streaming201/journ (...) 54.230.231.52
2019-07-01 07:35:45 +0200
0 - 0 - 0 https://www.deviantart.com/uhdmovies/art/VOIR (...) 54.230.231.52
2019-07-01 07:34:48 +0200
0 - 0 - 0 https://www.deviantart.com/uhdmovies/art/Spid (...) 54.230.231.53
2019-07-01 06:51:24 +0200
0 - 0 - 0 t1200.jp 52.69.157.111
2019-07-01 05:48:05 +0200
0 - 0 - 0 https://www.deviantart.com/uhdmovies/art/REGA (...) 54.230.231.64
2019-07-01 04:41:18 +0200
0 - 0 - 0 https://www.deviantart.com/uhdmovies/art/VOIR (...) 54.230.231.64
2019-07-01 04:16:05 +0200
0 - 0 - 0 https://www.deviantart.com/uhdmovies/art/ReGA (...) 54.230.231.59
2019-07-01 03:51:30 +0200
0 - 0 - 0 redmine.gpf-info.com 54.64.158.31

Last 10 reports on domain: ht.ly

Date UQ / IDS / BL URL IP
2019-06-19 20:37:46 +0200
0 - 0 - 0 ht.ly/YGKj30oGRTS#Vj6cKysNbjLq 54.183.131.91
2019-06-19 20:36:09 +0200
0 - 0 - 0 ht.ly/gcz130oRUv1 54.67.120.65
2019-06-05 11:44:33 +0200
0 - 0 - 0 ht.ly/meBQ30oSMIh#VrE7HAmduAGwXMctut62 54.183.132.164
2019-05-30 17:16:13 +0200
0 - 0 - 1 ht.ly/zY4r30oQapB 54.67.57.56
2019-05-30 16:42:50 +0200
0 - 0 - 1 ht.ly/3U1i30oPU1R 54.183.131.91
2019-05-30 16:06:22 +0200
0 - 0 - 1 ht.ly/PlBh30oPU1y 54.67.57.56
2019-05-30 15:36:25 +0200
0 - 0 - 1 ht.ly/sbQh30oPU1E 54.183.132.164
2019-05-30 15:32:06 +0200
0 - 0 - 1 ht.ly/90Uu30oPU1A 54.67.57.56
2019-05-30 14:56:11 +0200
0 - 0 - 1 ht.ly/qeX830oPqnI 54.183.131.91
2019-05-30 12:18:49 +0200
0 - 0 - 1 ht.ly/nuFL30oPTWs 54.67.57.56


JavaScript

Executed Scripts (2)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (12)


Request Response
                                        
                                            GET /CmAv30oFywb HTTP/1.1 
Host: ht.ly
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         54.67.120.65
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Connection: close
Content-Length: 2169


--- Additional Info ---
Magic:  ASCII HTML document text, with very long lines
Size:   2169
Md5:    9573fe87b45e3fe6f65d985c968a19ce
Sha1:   5776bb46ef8141d25e45d1acc03140e7fe1650ed
Sha256: f30053629d94b7e30cfc36ed795da4aac702dd048bcbfd643d40b6900da7e47c
                                        
                                            GET /css?family=Open+Sans:400,700&subset=latin,latin-ext,cyrillic HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ht.ly/CmAv30oFywb

                                         
                                         216.58.211.10
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Expires: Mon, 13 May 2019 14:59:54 GMT
Date: Mon, 13 May 2019 14:59:54 GMT
Cache-Control: private, max-age=86400
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   228
Md5:    f774fb9e9a9d6e65a7c08fd54697d20e
Sha1:   4e01b2fed5ffdd163a4c8328cd68fe3c6a5271e2
Sha256: 9cd4f29b65f86b3878de5e113b25a5e72767f93aa230a9f57da3ec6b066a09ab
                                        
                                            GET /v1/css/htly.245c35bfd1f73b98.gz.css HTTP/1.1 
Host: static.ow.ly
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ht.ly/CmAv30oFywb

                                         
                                         143.204.51.105
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Content-Length: 897
Connection: keep-alive
Date: Sat, 11 May 2019 18:29:58 GMT
Last-Modified: Wed, 01 Oct 2014 18:57:37 GMT
Etag: "798593d97db4fd25adbd7a2a3b920830"
Cache-Control: max-age=252460800,public
Content-Encoding: gzip
Expires: Mon, 22 Jul 2019 05:00:00 GMT
Accept-Ranges: bytes
Server: AmazonS3
Age: 160197
X-Cache: Hit from cloudfront
Via: 1.1 a850dff1d0f5a90907784efc0c02a4fc.cloudfront.net (CloudFront)
X-Amz-Cf-Id: Bj0aehvDIv5ocsWrBAJ8EEtbk5kqx7_Z0XI25OqO-vrE2Ae4p1JGww==


--- Additional Info ---
Magic:  gzip compressed data, from Unix, max speed
Size:   897
Md5:    798593d97db4fd25adbd7a2a3b920830
Sha1:   e7ac8494bfe27ab1dcb46e5356e60469b5061321
Sha256: 2b825cd94e94d36cf7a61a920cf905a5447208a1001ddbed9eef97dcbf1ac872
                                        
                                            GET /v1/images/avatar_icon.faf641be39fba739.jpg HTTP/1.1 
Host: static.ow.ly
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ht.ly/CmAv30oFywb

                                         
                                         143.204.51.105
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Content-Length: 1085
Connection: keep-alive
Date: Mon, 13 May 2019 02:17:01 GMT
Last-Modified: Fri, 03 Oct 2014 16:10:24 GMT
Etag: "6ef6ee8421d282ab14cb034d57718a7d"
Cache-Control: max-age=252460800,public
Expires: Mon, 22 Jul 2019 05:00:00 GMT
Accept-Ranges: bytes
Server: AmazonS3
Age: 45774
X-Cache: Hit from cloudfront
Via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a3.cloudfront.net (CloudFront)
X-Amz-Cf-Id: V_qc0ilW1LcrZhrRqK0MA3stCAbNjB82tRbFhN7BssyxLKiCA8Fcvw==


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   1085
Md5:    6ef6ee8421d282ab14cb034d57718a7d
Sha1:   2c049daf804c488f80a343c22fa56084048ee12e
Sha256: 7f27510028dcabad0ffbcfcf9d664bd59ceba6b381c62acbf49a9c8395d0b48d
                                        
                                            GET /v1/js/app.77f4bf0c1478ca50.gz.js HTTP/1.1 
Host: static.ow.ly
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ht.ly/CmAv30oFywb

                                         
                                         143.204.51.105
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Content-Length: 43774
Connection: keep-alive
Date: Thu, 18 Apr 2019 16:45:06 GMT
Last-Modified: Thu, 18 Apr 2019 16:25:54 GMT
Etag: "50cb2d09a94bff1946c9701860a40341"
Cache-Control: max-age=252460800,public
Content-Encoding: gzip
Expires: Mon, 22 Jul 2019 05:00:00 GMT
Accept-Ranges: bytes
Server: AmazonS3
Age: 2153689
X-Cache: Hit from cloudfront
Via: 1.1 057fdebf738f5915bf38a78949190759.cloudfront.net (CloudFront)
X-Amz-Cf-Id: IhPzq1XxzESXlfOQYs6NGBGwxfE29Bgb_r6QNet-o69MhBsv1s_buQ==


--- Additional Info ---
Magic:  gzip compressed data, from Unix, max speed
Size:   43774
Md5:    50cb2d09a94bff1946c9701860a40341
Sha1:   1626683a779d63a72cb0bd264dfe72ea7fff5e2e
Sha256: 316fa1a63128fa68bea1ddc15c84769d3fe431b15d21a9fe104fac06f17f31e6
                                        
                                            GET /eRM8Y HTTP/1.1 
Host: bit.do
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ht.ly/CmAv30oFywb

                                         
                                         54.83.52.76
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=iso-8859-1
                                        
Server: nginx/1.14.1
Date: Mon, 13 May 2019 14:59:54 GMT
Content-Length: 355
Connection: keep-alive
Location: http://test457fdfe.myvnc.com/opt.php?d=0&l=0&c=0&cr=985&em=


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   355
Md5:    d35fba6ce42485612f3e4213b7c88c8c
Sha1:   b12aee4420834019d31539f6b2b2e59d310c13da
Sha256: 9a2302d5e45032f34d5e3245a1ef30854d981608da384b3c6e7b178a29c5af56
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: bit.do
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         54.83.52.76
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Server: nginx/1.14.1
Date: Mon, 13 May 2019 14:59:54 GMT
Content-Length: 1406
Last-Modified: Thu, 30 Dec 2010 13:31:24 GMT
Connection: keep-alive
Etag: "4d1c89ac-57e"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  MS Windows icon resource - 1 icon
Size:   1406
Md5:    54255e7bcf5074bdd01cffcaf2df34d1
Sha1:   0f4ad8a83f040411d6dd5095355dc4630a906f88
Sha256: ff32a2cfeb11137c65fb67c6b7d982c1f07e8883e30f12625e38abedc07a6b38
                                        
                                            GET /s/opensans/v16/mem8YaGs126MiZpBA-U1UQ.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fonts.googleapis.com/css?family=Open+Sans:400,700&subset=latin,latin-ext,cyrillic
Origin: http://ht.ly

                                         
                                         216.58.207.195
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 55268
Date: Fri, 19 Apr 2019 15:33:03 GMT
Expires: Sat, 18 Apr 2020 15:33:03 GMT
Last-Modified: Mon, 25 Mar 2019 20:12:56 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, max-age=31536000
Age: 2071611


--- Additional Info ---
Magic:  data
Size:   55268
Md5:    e15b8743b41a23082780aee5ee1ee9a9
Sha1:   d91907ad5963dfbccd64426536a981f620e3bf83
Sha256: 2770b375eb18d7a74fbbd60a0f9a14214857770f35dac85ce9c5daf9353faf97
                                        
                                            GET /s/opensans/v16/mem5YaGs126MiZpBA-UN7rg-Vg.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fonts.googleapis.com/css?family=Open+Sans:400,700&subset=latin,latin-ext,cyrillic
Origin: http://ht.ly

                                         
                                         216.58.207.195
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 57908
Date: Fri, 19 Apr 2019 15:13:41 GMT
Expires: Sat, 18 Apr 2020 15:13:41 GMT
Last-Modified: Mon, 25 Mar 2019 20:12:01 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, max-age=31536000
Age: 2072773


--- Additional Info ---
Magic:  data
Size:   57908
Md5:    213e8c892aa1af1d690179b37b53e35a
Sha1:   53846f9b1cd04d28097bc7199faf13cc0a76deff
Sha256: 37d8bced2c9ce5998a53e111927c75b7bffb235ee5769db693ddb9d80eb1b0e2
                                        
                                            GET /js/src/social_connect_button.js HTTP/1.1 
Host: hootsuite.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ht.ly/CmAv30oFywb

                                         
                                         34.231.155.24
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                        
Server: nginx
Date: Mon, 13 May 2019 14:59:54 GMT
Content-Length: 178
Connection: keep-alive
Location: https://hootsuite.com/js/src/social_connect_button.js


--- Additional Info ---
Magic:  HTML document text
Size:   178
Md5:    cd2e0e43980a00fb6a2742d3afd803b8
Sha1:   81ffbd1712afe8cdf138b570c0fc9934742c33c1
Sha256: bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
                                        
                                            GET /opt.php?d=0&l=0&c=0&cr=985&em= HTTP/1.1 
Host: test457fdfe.myvnc.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ht.ly/CmAv30oFywb

                                         
                                         34.214.102.11
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Mon, 13 May 2019 14:59:55 GMT
Server: Apache/2.2.15 (CentOS)
X-Powered-By: PHP/5.5.38
Connection: close
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   10266
Md5:    ba61076f445d4373dca07d89b7583472
Sha1:   a0f8e3d4a05d7117095369f27dfe869c2f2a1054
Sha256: 7a36030d621bd067d09848ea3640394f2652358c48157457c4da6b5a3d6ca11d

Alerts:
  urlquery:
    - DynDNS domain detected
  IDS:
    - ET INFO HTTP Connection To DDNS Domain Myvnc.com
                                        
                                            GET /js/src/social_connect_button.js HTTP/1.1 
Host: hootsuite.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ht.ly/CmAv30oFywb

                                         
                                         0.0.0.0
                                        


--- Additional Info ---