Report - bit.ly/3rPQYlr

Report Overview

Submitted URL
bit.ly/3rPQYlr
IP
67.199.248.11
ASN
#396982 GOOGLE-CLOUD-PLATFORM
Submitted
2024-04-17 18:45:59
Access
public
Website Title
Bitly | Page Not Found | 404
Final URL
bit.ly/3rPQYlr
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
bit.ly	8194	2008-05-17	2012-05-30	2024-03-26	2.3 kB	73 kB	67.199.248.10
normandy.cdn.mozilla.net	3562	1998-01-31	2017-01-30	2024-04-17	329 B	1.2 kB	35.201.103.21
classify-client.services.mozilla.com	3824	1994-10-18	2019-01-09	2024-04-16	357 B	344 B	34.98.75.36
aus5.mozilla.org	2548	1998-01-24	2015-10-27	2024-04-17	512 B	1.2 kB	35.244.181.201

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (3)

	URL	Size	First Seen	Last Seen
	bit.ly/3rPQYlr	0 B	2023-03-07	2024-04-30
Pretty URL bit.ly/3rPQYlr IP 67.199.248.10 ASN #396982 GOOGLE-CLOUD-PLATFORM Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-04-30 19:15:39 Times Seen37223866 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	bit.ly/sandbox%20eval%20code	147 B	2023-04-11	2024-04-30
Pretty URL bit.ly/sandbox%20eval%20code IP 0.0.0.0 ASN #0 Introduced by Embedded in HTML false Observations First Seen2023-04-11 21:07:53 Last Seen2024-04-30 19:13:12 Times Seen343524 Hash 92b651082ce234f66bb544e678befda3 14c21c55ddce43b6f677caadf51d4ab98c6a3df8 25d57d1d97abeb84531d3d3e5754dd5cb19a2c115edfa7cfc7af8247084faded Loading...

	www.google-analytics.com/analytics.js	4.7 kB	2023-04-11	2024-04-30
Pretty URL www.google-analytics.com/analytics.js IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-11 21:07:53 Last Seen2024-04-30 19:13:13 Times Seen343018 Hash f24128d0c9cba7be2916c693427a3483 1b6397d496ea896ebc2018b01b995cee4f166029 58173de4697da1a218f04c3a783a733bab4e769ceabc37cd42da9dc3e036a7e8 Loading...

HTTP Transactions (9)

	URL	IP	Response	Size
	bit.ly/3rPQYlr	67.199.248.10	404 Not Found	5.2 kB
URL User Request GET HTTP/1.1 bit.ly/3rPQYlr IP 67.199.248.10:80 ASN #396982 GOOGLE-CLOUD-PLATFORM File type HTML document, ASCII text Size 5.2 kB (5193 bytes) Hash 1fb24fcf4ec3a06c7a744e981afdfe08 12433dcba0ba2362e8287b7c72e375545e11251f 471d1cf741d364d82e8aac15a6507061666840edb0fe9203e893dcc8fad07e2d HTTP Headers `GET /3rPQYlr HTTP/1.1 Host: bit.ly User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 404 Not Found server: nginx date: Wed, 17 Apr 2024 18:45:34 GMT content-type: text/html content-length: 5193 etag: "64a2ee51-1449" via: 1.1 google alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2`

	bit.ly/3rPQYlr	67.199.248.10	404 Not Found	5.2 kB
URL User Request GET HTTP/1.1 bit.ly/3rPQYlr IP 67.199.248.10:80 ASN #396982 GOOGLE-CLOUD-PLATFORM File type HTML document, ASCII text Size 5.2 kB (5193 bytes) Hash 1fb24fcf4ec3a06c7a744e981afdfe08 12433dcba0ba2362e8287b7c72e375545e11251f 471d1cf741d364d82e8aac15a6507061666840edb0fe9203e893dcc8fad07e2d HTTP Headers `GET /3rPQYlr HTTP/1.1 Host: bit.ly User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 404 Not Found Server: nginx Date: Wed, 17 Apr 2024 18:45:35 GMT Content-Type: text/html Content-Length: 5193 ETag: "618ecca7-1449" Via: 1.1 google`

	bit.ly/static/graphics/bitly_logo_red.svg	67.199.248.10	200 OK	3.5 kB
URL GET HTTP/1.1 bit.ly/static/graphics/bitly_logo_red.svg IP 67.199.248.10:80 ASN #396982 GOOGLE-CLOUD-PLATFORM Requested by http://bit.ly/3rPQYlr File type SVG Scalable Vector Graphics image Size 3.5 kB (3549 bytes) Hash 2eced47f0f8eb035c459a73435cf8ee7 53b03bee40c746e8fc70731ba2b6902c0fa65cea 02c9e3df5fa43bb01b9b702f1f6bda697b946da1d516699a92388bfc6e5cad2e HTTP Headers `GET /static/graphics/bitly_logo_red.svg HTTP/1.1 Host: bit.ly User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://bit.ly/3rPQYlr Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Date: Wed, 17 Apr 2024 18:45:35 GMT Content-Type: image/svg+xml Content-Length: 3549 Last-Modified: Tue, 23 Jul 2019 21:41:53 GMT ETag: "5d377f21-ddd" Expires: Thu, 18 Apr 2024 18:45:35 GMT Cache-Control: max-age=86400 Accept-Ranges: bytes Via: 1.1 google`

	bit.ly/static/graphics/ProximaNova-Regular.woff2	67.199.248.10	200 OK	27 kB
URL GET HTTP/1.1 bit.ly/static/graphics/ProximaNova-Regular.woff2 IP 67.199.248.10:80 ASN #396982 GOOGLE-CLOUD-PLATFORM Requested by http://bit.ly/3rPQYlr File type Web Open Font Format (Version 2), TrueType, length 26756, version 1.0 Size 27 kB (26756 bytes) Hash f596e94e1a35241f13af6a4d407efc20 06161697fcf474da345fa79bb0c5d1c375e6eeae 0a012d613a74ea454407d8591b70cdc80b644949ac95205a14539c082cb781a1 HTTP Headers `GET /static/graphics/ProximaNova-Regular.woff2 HTTP/1.1 Host: bit.ly User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity DNT: 1 Connection: keep-alive Referer: http://bit.ly/3rPQYlr Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Date: Wed, 17 Apr 2024 18:45:35 GMT Content-Type: font/woff2 Content-Length: 26756 Last-Modified: Mon, 20 Apr 2020 16:50:20 GMT ETag: "5e9dd2cc-6884" Expires: Thu, 18 Apr 2024 18:45:35 GMT Cache-Control: max-age=86400 Accept-Ranges: bytes Via: 1.1 google`

	bit.ly/static/graphics/meditation.png	67.199.248.10	200 OK	25 kB
URL GET HTTP/1.1 bit.ly/static/graphics/meditation.png IP 67.199.248.10:80 ASN #396982 GOOGLE-CLOUD-PLATFORM Requested by http://bit.ly/3rPQYlr File type PNG image data, 310 x 321, 8-bit colormap, non-interlaced Size 25 kB (25071 bytes) Hash 07eb21bf55f79f4f55e6cf52fba5049c 9b40ff19fe233e61bf25d17b1243624a13dcaf77 0a516f3e8bce3d29f037d5c1f5861c8a2cc761b90f7d73b8f6d4d07b397c8514 HTTP Headers `GET /static/graphics/meditation.png HTTP/1.1 Host: bit.ly User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://bit.ly/3rPQYlr Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Date: Wed, 17 Apr 2024 18:45:35 GMT Content-Type: image/png Content-Length: 25071 Last-Modified: Mon, 20 Apr 2020 16:51:57 GMT ETag: "5e9dd32d-61ef" Expires: Thu, 18 Apr 2024 18:45:35 GMT Cache-Control: max-age=86400 Accept-Ranges: bytes Via: 1.1 google`

	bit.ly/favicon.ico	67.199.248.10	200 OK	5.4 kB
URL GET HTTP/1.1 bit.ly/favicon.ico IP 67.199.248.10:80 ASN #396982 GOOGLE-CLOUD-PLATFORM Requested by http://bit.ly/3rPQYlr File type MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel Size 5.4 kB (5430 bytes) Hash ce0260c17b7f1dbdb7726ef7e8fd8c7a b0c679def36e3ccbb3c39a3f84ce47f87fe38be8 4260c4ca799132f04bfa7af774c1a5f4ac12b775e21d380884d7d08b35270679 HTTP Headers `GET /favicon.ico HTTP/1.1 Host: bit.ly User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://bit.ly/3rPQYlr Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Date: Wed, 17 Apr 2024 18:45:35 GMT Content-Type: image/x-icon Content-Length: 5430 Last-Modified: Tue, 14 May 2019 16:18:43 GMT ETag: "5cdaea63-1536" Expires: Wed, 24 Apr 2024 18:45:35 GMT Cache-Control: max-age=604800 Accept-Ranges: bytes Via: 1.1 google`

	normandy.cdn.mozilla.net/api/v1/	35.201.103.21		598 B
URL normandy.cdn.mozilla.net/api/v1/ IP 35.201.103.21:0 ASN #396982 GOOGLE-CLOUD-PLATFORM File type JSON text data Size 598 B (598 bytes) Hash 3076f9a5cb273105528b893ff7111e41 b8990c145fe71b9a2410eea41a60a712b43b82bf 69c578fb0c03a28141a975833f660f4571e7991dc28ae7f9cead37672ee2c9b3 HTTP Headers `GET /api/v1/ HTTP/1.1 Host: normandy.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site` HTTP/2 200 OK server: nginx content-length: 598 allow: GET, HEAD, OPTIONS content-security-policy: base-uri 'none'; default-src 'self' https://normandy.cdn.mozilla.net/; worker-src 'none'; frame-src 'none'; object-src 'none'; form-action 'self'; block-all-mixed-content; report-uri /__cspreport__ x-frame-options: DENY x-content-type-options: nosniff x-xss-protection: 1; mode=block strict-transport-security: max-age=31536000 via: 1.1 google date: Tue, 16 Apr 2024 23:22:32 GMT cache-control: public, max-age=86400 content-type: application/json vary: Accept, Origin age: 69799 alt-svc: clear X-Firefox-Spdy: h2

	classify-client.services.mozilla.com/api/v1/classify_client/	34.98.75.36		64 B
URL classify-client.services.mozilla.com/api/v1/classify_client/ IP 34.98.75.36:0 ASN #396982 GOOGLE-CLOUD-PLATFORM File type JSON text data Size 64 B (64 bytes) Hash aa6470073d51ed9e263236846a44d780 6245ec159e6342f098927e75dd44b21d1bdc9c3c 0f3b714270ab072428b494f244df816c6b9b8abf4f04632d445edfddaae2a763 HTTP Headers `GET /api/v1/classify_client/ HTTP/1.1 Host: classify-client.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site` `HTTP/2 200 OK server: nginx date: Wed, 17 Apr 2024 18:45:51 GMT content-type: application/json content-length: 64 cache-control: max-age=0, no-cache, no-store, must-revalidate strict-transport-security: max-age=31536000 via: 1.1 google alt-svc: clear X-Firefox-Spdy: h2`

	aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-101-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml	35.244.181.201		444 B
URL aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-101-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml IP 35.244.181.201:0 ASN #396982 GOOGLE-CLOUD-PLATFORM File type XML 1.0 document, ASCII text, with very long lines (332) Size 444 B (444 bytes) Hash 3b324dec137a87ef7e24a30a65b13dd0 c0faa95b2f1018e264b3a14aaf50d1003e6c27b3 6cd0b591d9239fc8564627e92a804fc261951b1cbaf5fa58a8ada3cc13f51463 HTTP Headers `GET /update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-101-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml HTTP/1.1 Host: aus5.mozilla.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Cache-Control: no-cache Pragma: no-cache Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` HTTP/2 200 OK server: nginx rule-id: unknown rule-data-version: unknown content-signature: x5u=https://content-signature-2.cdn.mozilla.net/chains/aus.content-signature.mozilla.org-2024-05-20-00-15-28.chain; p384ecdsa=Ji279BXSql4LRstlir9BsiL34T4wChjPFKvxa1eaCUWOLN2mHBbiTR_nRADQ710L1239YLsWVwVgr9YuSb3RL9FqGwqbR9rPfHB9jkndPSnreu-5IiGqHTB-__BvaKKe strict-transport-security: max-age=31536000; x-content-type-options: nosniff content-security-policy: default-src 'none'; frame-ancestors 'none' x-proxy-cache-status: EXPIRED content-encoding: gzip via: 1.1 google date: Wed, 17 Apr 2024 18:45:08 GMT content-type: text/xml; charset=utf-8 vary: Accept-Encoding content-length: 444 age: 45 cache-control: public,max-age=90 alt-svc: clear X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (3)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (9)

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP