Report - lupo.jp/gl7.php?g_url=http://jonthorn.com/__media__/js/netsoltrademark.php?d=bit.ly/2kJke5p

Report Overview

Submitted URL
lupo.jp/gl7.php?g_url=http://jonthorn.com/__media__/js/netsoltrademark.php?d=bit.ly/2kJke5p
IP
114.160.74.109
ASN
#4713 NTT Communications Corporation
Submitted
2023-05-30 01:15:35
Access
public
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
4
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
lupo.jp	unknown	2005-04-16	2013-05-14	2023-05-25	1.4 kB	1.8 kB	114.160.74.109

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-05-30 01:15:18	high	114.160.74.109	Client IP	ET POLICY Self Signed SSL Certificate (SomeOrganizationalUnit)
2023-05-30 01:15:18	high	114.160.74.109	Client IP	ET POLICY Self Signed SSL Certificate (SomeOrganizationalUnit)
2023-05-30 01:15:18	high	114.160.74.109	Client IP	ET POLICY Self Signed SSL Certificate (SomeOrganizationalUnit)
2023-05-30 01:15:19	high	114.160.74.109	Client IP	ET POLICY Self Signed SSL Certificate (SomeOrganizationalUnit)

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (3)

	URL	IP	Response	Size
	lupo.jp/gl7.php?g_url=http://jonthorn.com/__media__/js/netsoltrademark.php?d=bit.ly/2kJke5p	114.160.74.109	200 OK	13 B
URL User Request GET HTTP/1.1 lupo.jp/gl7.php?g_url=http://jonthorn.com/__media__/js/netsoltrademark.php?d=bit.ly/2kJke5p IP 114.160.74.109:80 ASN #4713 NTT Communications Corporation File type ASCII text, with no line terminators Size 13 B (13 bytes) Hash b3382a25d7b1e91b519990aee2786509 dbb53d2abd255de70aaf634c6524b264d5c8f306 49fdb41b6a99a758970387619a25f5be6a7cd5edab90fb30cb52a4dca0045fa3 HTTP Headers `GET /gl7.php?g_url=http://jonthorn.com/__media__/js/netsoltrademark.php?d=bit.ly/2kJke5p HTTP/1.1 Host: lupo.jp User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Tue, 30 May 2023 01:15:19 GMT Server: Apache Content-Length: 13 Connection: close Content-Type: text/html`

	lupo.jp/favicon.ico	114.160.74.109	200 OK	1.4 kB
URL GET HTTP/1.1 lupo.jp/favicon.ico IP 114.160.74.109:80 ASN #4713 NTT Communications Corporation Requested by http://lupo.jp/gl7.php?g_url=http://jonthorn.com/__media__/js/netsoltrademark.php?d=bit.ly/2kJke5p File type MS Windows icon resource - 1 icon, 16x16, 8 bits/pixel\012- data Size 1.4 kB (1406 bytes) Hash 01db90f75aa0f133464a2d9c351ab00e d860d3f75cfcd9b19c78285bfbafad2afac7630e a3057b86fbffb51b7c013ebf995491fa82649c973b990801687294bdbb7de63d HTTP Headers `GET /favicon.ico HTTP/1.1 Host: lupo.jp User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://lupo.jp/gl7.php?g_url=http://jonthorn.com/__media__/js/netsoltrademark.php?d=bit.ly/2kJke5p Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Tue, 30 May 2023 01:15:19 GMT Server: Apache Last-Modified: Mon, 27 Apr 2009 13:28:21 GMT ETag: "11421ce-57e-4688951eae740" Accept-Ranges: bytes Content-Length: 1406 Connection: close Content-Type: image/vnd.microsoft.icon`

	lupo.jp/gl7.php?g_url=http://jonthorn.com/__media__/js/netsoltrademark.php?d=bit.ly/2kJke5p	0.0.0.0		0 B
URL User Request GET lupo.jp/gl7.php?g_url=http://jonthorn.com/__media__/js/netsoltrademark.php?d=bit.ly/2kJke5p IP 0.0.0.0:0 ASN #0 File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /gl7.php?g_url=http://jonthorn.com/__media__/js/netsoltrademark.php?d=bit.ly/2kJke5p HTTP/1.1 Host: lupo.jp User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache