Overview

URL htl.li/obzm30nptPz
IP54.67.120.65
ASNAS16509 Amazon.com, Inc.
Location United States
Report completed2019-05-31 09:32:02 CEST
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro
Timestamp Severity Source IP Destination IP Alert
2019-05-31 09:31:29 CEST 2 Client IP  Internal IP ET INFO DNS Query for Suspicious .cf Domain


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2019-05-31 2 htl.li/obzm30nptPz Phishing
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 54.67.120.65

Date UQ / IDS / BL URL IP
2019-06-20 05:46:55 +0200
0 - 0 - 1 owl.li/C5pb30oYdaZ 54.67.120.65
2019-06-19 20:36:09 +0200
0 - 0 - 0 ht.ly/gcz130oRUv1 54.67.120.65
2019-06-19 20:35:51 +0200
0 - 0 - 0 54.67.120.65 54.67.120.65
2019-06-14 17:42:26 +0200
0 - 0 - 0 ow.ly/pe9a30oTbcW 54.67.120.65
2019-06-10 19:12:24 +0200
0 - 0 - 0 ow.ly/vYKj30oURpA 54.67.120.65
2019-05-22 23:21:31 +0200
0 - 0 - 0 owl.li/eCfo30oNLYF#iE76HDuEnutE52ntxPlIfKaDVo (...) 54.67.120.65
2019-05-22 22:21:37 +0200
0 - 1 - 0 ht.ly/KDxp30oM3BQ 54.67.120.65
2019-05-08 15:16:55 +0200
0 - 0 - 0 ht.ly/rZhC30oDk7f#uHUkuUiVkHbL 54.67.120.65
2019-04-16 16:22:23 +0200
0 - 0 - 1 owl.li/8Kkt30orIxa 54.67.120.65
2019-04-12 21:12:01 +0200
0 - 0 - 2 ht.ly/V5KP30opDiA 54.67.120.65

Last 10 reports on ASN: AS16509 Amazon.com, Inc.

Date UQ / IDS / BL URL IP
2019-07-01 11:19:16 +0200
0 - 0 - 0 https://www.goodreads.com/videos/151825-ginuiae 54.239.26.220
2019-07-01 09:38:28 +0200
0 - 0 - 0 https://www.deviantart.com/streaming201/journ (...) 54.230.231.64
2019-07-01 09:29:28 +0200
0 - 0 - 0 https://www.deviantart.com/streaming201/journ (...) 54.230.231.52
2019-07-01 07:35:45 +0200
0 - 0 - 0 https://www.deviantart.com/uhdmovies/art/VOIR (...) 54.230.231.52
2019-07-01 07:34:48 +0200
0 - 0 - 0 https://www.deviantart.com/uhdmovies/art/Spid (...) 54.230.231.53
2019-07-01 06:51:24 +0200
0 - 0 - 0 t1200.jp 52.69.157.111
2019-07-01 05:48:05 +0200
0 - 0 - 0 https://www.deviantart.com/uhdmovies/art/REGA (...) 54.230.231.64
2019-07-01 04:41:18 +0200
0 - 0 - 0 https://www.deviantart.com/uhdmovies/art/VOIR (...) 54.230.231.64
2019-07-01 04:16:05 +0200
0 - 0 - 0 https://www.deviantart.com/uhdmovies/art/ReGA (...) 54.230.231.59
2019-07-01 03:51:30 +0200
0 - 0 - 0 redmine.gpf-info.com 54.64.158.31

Last 10 reports on domain: htl.li

Date UQ / IDS / BL URL IP
2019-06-09 18:33:31 +0200
0 - 0 - 0 htl.li/cYMM30oUvI3#zhDhMQnvJzlHDFGOef 54.67.57.56
2019-05-31 07:13:00 +0200
0 - 2 - 2 htl.li/TjiP30lZ96a 54.67.57.56
2019-05-05 14:44:23 +0200
0 - 0 - 2 htl.li/YoMr30nxY0Q 54.183.132.164
2019-05-02 21:20:23 +0200
2 - 0 - 2 htl.li/kJ7q30oC64R 54.183.132.164
2019-04-29 13:32:47 +0200
0 - 0 - 0 htl.li/czgl30oh9gl?fbclid=IwAR0Dn9B2PPXyMY-i4 (...) 54.183.131.91
2019-04-19 22:43:06 +0200
0 - 0 - 0 htl.li/yB3430otXna 54.67.62.204
2019-04-18 20:39:38 +0200
0 - 0 - 2 htl.li/51VF30nb1Nl 54.183.131.91
2019-04-18 20:38:36 +0200
0 - 0 - 2 htl.li/IYAt30nv9qs 54.67.62.204
2019-04-18 20:00:51 +0200
0 - 0 - 3 htl.li/GsO630ntcP6 54.183.131.91
2019-04-15 17:36:20 +0200
0 - 0 - 0 htl.li/YYvS30oqlZ3 54.183.132.164


JavaScript

Executed Scripts (2)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (11)


Request Response
                                        
                                            GET /obzm30nptPz HTTP/1.1 
Host: htl.li
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         54.183.130.144
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Connection: close
Content-Length: 2267


--- Additional Info ---
Magic:  ASCII HTML document text, with very long lines
Size:   2267
Md5:    4ef3f39bf6edaa00c2e4f8fe5c4744ea
Sha1:   00f321aa2a9a3062cd0c10762f7760e64eb2e034
Sha256: 3240db16976409e0245ec131ddaa74ba9849177983510595732d0c16b977a9b9

Alerts:
  Blacklists:
    - fortinet: Phishing
                                        
                                            GET /css?family=Open+Sans:400,700&subset=latin,latin-ext,cyrillic HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://htl.li/obzm30nptPz

                                         
                                         216.58.207.234
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Expires: Fri, 31 May 2019 07:31:29 GMT
Date: Fri, 31 May 2019 07:31:29 GMT
Cache-Control: private, max-age=86400
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   228
Md5:    f774fb9e9a9d6e65a7c08fd54697d20e
Sha1:   4e01b2fed5ffdd163a4c8328cd68fe3c6a5271e2
Sha256: 9cd4f29b65f86b3878de5e113b25a5e72767f93aa230a9f57da3ec6b066a09ab
                                        
                                            GET /v1/css/htly.245c35bfd1f73b98.gz.css HTTP/1.1 
Host: static.ow.ly
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://htl.li/obzm30nptPz

                                         
                                         54.192.98.26
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Content-Length: 897
Connection: keep-alive
Date: Thu, 30 May 2019 04:33:23 GMT
Last-Modified: Wed, 01 Oct 2014 18:57:37 GMT
Etag: "798593d97db4fd25adbd7a2a3b920830"
Cache-Control: max-age=252460800,public
Content-Encoding: gzip
Expires: Mon, 22 Jul 2019 05:00:00 GMT
Accept-Ranges: bytes
Server: AmazonS3
Age: 97088
X-Cache: Hit from cloudfront
Via: 1.1 f46b6835a58763129c9d1db5dc3ef62f.cloudfront.net (CloudFront)
X-Amz-Cf-Id: b5xeJFASyRd7yNudo56Qvf9HEy8OYtGbPa4gLNsCZEzLquZkQ-NvvQ==


--- Additional Info ---
Magic:  gzip compressed data, from Unix, max speed
Size:   897
Md5:    798593d97db4fd25adbd7a2a3b920830
Sha1:   e7ac8494bfe27ab1dcb46e5356e60469b5061321
Sha256: 2b825cd94e94d36cf7a61a920cf905a5447208a1001ddbed9eef97dcbf1ac872
                                        
                                            GET /v1/images/avatar_icon.faf641be39fba739.jpg HTTP/1.1 
Host: static.ow.ly
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://htl.li/obzm30nptPz

                                         
                                         54.192.98.26
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Content-Length: 1085
Connection: keep-alive
Date: Fri, 31 May 2019 05:14:54 GMT
Last-Modified: Fri, 03 Oct 2014 16:10:24 GMT
Etag: "6ef6ee8421d282ab14cb034d57718a7d"
Cache-Control: max-age=252460800,public
Expires: Mon, 22 Jul 2019 05:00:00 GMT
Accept-Ranges: bytes
Server: AmazonS3
Age: 8197
X-Cache: Hit from cloudfront
Via: 1.1 fc6bcc0c05113295fc38d1c274344ae4.cloudfront.net (CloudFront)
X-Amz-Cf-Id: i9GyzEAQPNNJyhI5qldcCwKxcLEMDuCwN9f4PgkZeM6jP_Cb0hOwzw==


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   1085
Md5:    6ef6ee8421d282ab14cb034d57718a7d
Sha1:   2c049daf804c488f80a343c22fa56084048ee12e
Sha256: 7f27510028dcabad0ffbcfcf9d664bd59ceba6b381c62acbf49a9c8395d0b48d
                                        
                                            GET /v1/js/app.77f4bf0c1478ca50.gz.js HTTP/1.1 
Host: static.ow.ly
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://htl.li/obzm30nptPz

                                         
                                         54.192.98.26
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Content-Length: 43774
Connection: keep-alive
Date: Thu, 18 Apr 2019 18:32:01 GMT
Last-Modified: Thu, 18 Apr 2019 16:25:54 GMT
Etag: "50cb2d09a94bff1946c9701860a40341"
Cache-Control: max-age=252460800,public
Content-Encoding: gzip
Expires: Mon, 22 Jul 2019 05:00:00 GMT
Accept-Ranges: bytes
Server: AmazonS3
Age: 3675570
X-Cache: Hit from cloudfront
Via: 1.1 a370d34019720f60dd35cbe89cb3994b.cloudfront.net (CloudFront)
X-Amz-Cf-Id: UNBtuhVH15MFObJrR-YAKPD7EBhoMX_gun0_1R-pYfDVGu_XmwxHWQ==


--- Additional Info ---
Magic:  gzip compressed data, from Unix, max speed
Size:   43774
Md5:    50cb2d09a94bff1946c9701860a40341
Sha1:   1626683a779d63a72cb0bd264dfe72ea7fff5e2e
Sha256: 316fa1a63128fa68bea1ddc15c84769d3fe431b15d21a9fe104fac06f17f31e6
                                        
                                            GET /s/opensans/v16/mem8YaGs126MiZpBA-U1UQ.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fonts.googleapis.com/css?family=Open+Sans:400,700&subset=latin,latin-ext,cyrillic
Origin: http://htl.li

                                         
                                         216.58.207.227
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 55268
Date: Fri, 19 Apr 2019 15:28:11 GMT
Expires: Sat, 18 Apr 2020 15:28:11 GMT
Last-Modified: Mon, 25 Mar 2019 20:12:56 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, max-age=31536000
Age: 3600199


--- Additional Info ---
Magic:  data
Size:   55268
Md5:    e15b8743b41a23082780aee5ee1ee9a9
Sha1:   d91907ad5963dfbccd64426536a981f620e3bf83
Sha256: 2770b375eb18d7a74fbbd60a0f9a14214857770f35dac85ce9c5daf9353faf97
                                        
                                            GET /s/opensans/v16/mem5YaGs126MiZpBA-UN7rg-Vg.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fonts.googleapis.com/css?family=Open+Sans:400,700&subset=latin,latin-ext,cyrillic
Origin: http://htl.li

                                         
                                         216.58.207.227
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 57908
Date: Fri, 19 Apr 2019 15:20:23 GMT
Expires: Sat, 18 Apr 2020 15:20:23 GMT
Last-Modified: Mon, 25 Mar 2019 20:12:01 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, max-age=31536000
Age: 3600667


--- Additional Info ---
Magic:  data
Size:   57908
Md5:    213e8c892aa1af1d690179b37b53e35a
Sha1:   53846f9b1cd04d28097bc7199faf13cc0a76deff
Sha256: 37d8bced2c9ce5998a53e111927c75b7bffb235ee5769db693ddb9d80eb1b0e2
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: longviesp.cf
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         195.20.49.109
HTTP/1.1 200
Content-Type: image/x-icon
                                        
Server: nginx
Date: Fri, 31 May 2019 07:31:30 GMT
Content-Length: 2048
Connection: keep-alive
X-Server: ip-172-31-13-129
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache


--- Additional Info ---
Magic:  MS Windows icon resource - 1 icon
Size:   2048
Md5:    9d88adf1b48d0395e690bd17e5625851
Sha1:   1874190d30c93ca117b3b1d65f150be38ec55a56
Sha256: 817d5d40f1addc3a4247e62aaf58400a7a81830addc9692b2ba65dd5068f02c8
                                        
                                            GET /js/src/social_connect_button.js HTTP/1.1 
Host: hootsuite.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://htl.li/obzm30nptPz

                                         
                                         34.231.155.24
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                        
Server: nginx
Date: Fri, 31 May 2019 07:31:30 GMT
Content-Length: 178
Connection: keep-alive
Location: https://hootsuite.com/js/src/social_connect_button.js


--- Additional Info ---
Magic:  HTML document text
Size:   178
Md5:    cd2e0e43980a00fb6a2742d3afd803b8
Sha1:   81ffbd1712afe8cdf138b570c0fc9934742c33c1
Sha256: bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: longviesp.cf
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         195.20.49.109
HTTP/1.1 200
Content-Type: image/x-icon
                                        
Server: nginx
Date: Fri, 31 May 2019 07:31:33 GMT
Content-Length: 2048
Connection: keep-alive
X-Server: ip-172-31-14-193
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache


--- Additional Info ---
Magic:  MS Windows icon resource - 1 icon
Size:   2048
Md5:    9d88adf1b48d0395e690bd17e5625851
Sha1:   1874190d30c93ca117b3b1d65f150be38ec55a56
Sha256: 817d5d40f1addc3a4247e62aaf58400a7a81830addc9692b2ba65dd5068f02c8
                                        
                                            GET /vixen/docd?platform=hootsuite HTTP/1.1 
Host: longviesp.cf
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://htl.li/obzm30nptPz

                                         
                                         195.20.49.109
HTTP/1.1 429 Too Many Requests
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Fri, 31 May 2019 07:31:33 GMT
Content-Length: 162
Connection: keep-alive


--- Additional Info ---
Magic:  HTML document text
Size:   162
Md5:    7f44c7691673d77d8557d4d5699ef23a
Sha1:   f30daebcb81f94af5e6dfd9e70585b8904d72ac1
Sha256: 413d294fad14524bf94e764b33ff0f327682549408545171fcf9240189c154ae