Report - u.to/qYS3Hw

Report Overview

Submitted URL
u.to/qYS3Hw
IP
195.216.243.155
ASN
#57724 Ddos-guard Ltd
Submitted
2023-06-09 03:53:27
Access
public
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
8
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
u.to	155534	unknown	2012-05-21	2023-06-08	467 B	525 B	195.216.243.155
nowlinks.net	unknown	2012-05-15	2012-10-24	2023-06-09	2.4 kB	23 kB	5.44.220.121

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-06-09 03:53:09	medium	Client IP	Internal IP	ET DNS Query for .to TLD
2023-06-09 03:53:09	low	Client IP	Internal IP	ET INFO URL Shortener Service Domain in DNS Lookup (u .to)
2023-06-09 03:53:09	medium	Client IP	Internal IP	ET DNS Query for .to TLD
2023-06-09 03:53:09	low	Client IP	Internal IP	ET INFO URL Shortener Service Domain in DNS Lookup (u .to)
2023-06-09 03:53:09	medium	Client IP	Internal IP	ET DNS Query for .to TLD
2023-06-09 03:53:09	low	Client IP	Internal IP	ET INFO URL Shortener Service Domain in DNS Lookup (u .to)
2023-06-09 03:53:10	medium	Client IP	Internal IP	ET DNS Query for .to TLD
2023-06-09 03:53:10	low	Client IP	Internal IP	ET INFO URL Shortener Service Domain in DNS Lookup (u .to)

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (2)

	URL	Size	First Seen	Last Seen
	nowlinks.net/WtNYYv	0 B	2023-03-07	2024-04-27
Pretty URL nowlinks.net/WtNYYv IP 5.44.220.121 ASN #43513 Sia Nano IT Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-04-27 02:34:16 Times Seen37109100 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

		Size	First Seen	Last Seen
	#1 Write - 9420315a4e5cbad9aa7088433a062829	73 B	2023-06-09	2023-06-09
Pretty Observations First Seen2023-06-09 05:53:27 Last Seen2023-06-09 05:53:27 Times Seen1 Hash 9420315a4e5cbad9aa7088433a062829 b5a6ba0df971f0b5a10f4996e48aa54dbc2239b9 e747a7e7d5149a5255d6eb7f57971e83738ed6d40a92208649883f5367ffd77e Loading...

HTTP Transactions (7)

	URL	IP	Response	Size
	u.to/qYS3Hw	195.216.243.155	302 Found	206 B
URL User Request GET HTTP/1.1 u.to/qYS3Hw IP 195.216.243.155:443 ASN #57724 Ddos-guard Ltd Certificate IssuerGoGetSSL Subjectu.to FingerprintAE:B3:A4:D5:8B:EF:73:5A:18:AF:3D:0A:F0:C2:AF:8A:E6:E0:7C:D6 ValidityThu, 29 Sep 2022 00:00:00 GMT - Sun, 29 Oct 2023 23:59:59 GMT File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text Size 206 B (206 bytes) Hash c3a91dd0186f73bd8af421e554d1d1df caa2a60c0869577024f382b027608feb7f3a49dd 0bd53ce1b867d75e60b59b666bdf05417ce54f63838a84cef7b430232c838b97 HTTP Headers `GET /qYS3Hw HTTP/1.1 Host: u.to User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 302 Found Server: nginx/1.8.0 Date: Fri, 09 Jun 2023 03:45:52 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=15 Set-Cookie: lng=en; path=/; expires=Sat, 08-Jun-2024 03:45:52 GMT; domain=.u.to; Location: http://nowlinks.net/WtNYYv`

	nowlinks.net/WtNYYv	5.44.220.121	200 OK	1.2 kB
URL User Request GET HTTP/1.1 nowlinks.net/WtNYYv IP 5.44.220.121:80 ASN #43513 Sia Nano IT File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (403), with CRLF line terminators Size 1.2 kB (1150 bytes) Hash 63b6d0e956ef6fcfcaefa373ff844628 153d0f0ca91ae06dde38c2d570c5025811e35940 285bea61d3496aec6e7fa6c435294dea49271c7c4398d626fc831e63a9768034 HTTP Headers `GET /WtNYYv HTTP/1.1 Host: nowlinks.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Date: Fri, 09 Jun 2023 03:53:10 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive X-Powered-By: PHP/5.4.45 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Set-Cookie: PHPSESSID=bp1kv62g7j7egmqh4h4rici9e1; path=/ Content-Encoding: gzip`

	nowlinks.net/assets/css/reset.css	5.44.220.121	200 OK	296 B
URL GET HTTP/1.1 nowlinks.net/assets/css/reset.css IP 5.44.220.121:80 ASN #43513 Sia Nano IT Requested by http://nowlinks.net/WtNYYv File type ASCII text, with CRLF line terminators Size 296 B (296 bytes) Hash f091e782c4e3eb913d1c6785e83e4a00 d21fc646d182ade42b0da578eede8fbf1dcdef38 2ec573e0c25d5a80d1bf9e9027013b868bd3840f2ddcf1dd7d86c3912d89f455 HTTP Headers `GET /assets/css/reset.css HTTP/1.1 Host: nowlinks.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://nowlinks.net/WtNYYv Cookie: PHPSESSID=bp1kv62g7j7egmqh4h4rici9e1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Date: Fri, 09 Jun 2023 03:53:10 GMT Content-Type: text/css Last-Modified: Tue, 15 May 2012 14:16:07 GMT Transfer-Encoding: chunked Connection: keep-alive ETag: W/"4fb26527-200" Expires: Sun, 09 Jul 2023 03:53:10 GMT Cache-Control: max-age=2592000 Content-Encoding: gzip`

	nowlinks.net/assets/css/main.css	5.44.220.121	200 OK	1.9 kB
URL GET HTTP/1.1 nowlinks.net/assets/css/main.css IP 5.44.220.121:80 ASN #43513 Sia Nano IT Requested by http://nowlinks.net/WtNYYv File type ASCII text, with CRLF line terminators Size 1.9 kB (1947 bytes) Hash 74d306516dbbf967a466492d6d76ad3c 8f5fe920e3f24b23652951d77c5be21b251480e8 93a1234c257e9456a33c2a63b0cf7fc3d53ea9a0e1de3e3edad3b2c3acf6d8c6 HTTP Headers `GET /assets/css/main.css HTTP/1.1 Host: nowlinks.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://nowlinks.net/WtNYYv Cookie: PHPSESSID=bp1kv62g7j7egmqh4h4rici9e1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Date: Fri, 09 Jun 2023 03:53:10 GMT Content-Type: text/css Last-Modified: Tue, 15 May 2012 14:16:07 GMT Transfer-Encoding: chunked Connection: keep-alive ETag: W/"4fb26527-2102" Expires: Sun, 09 Jul 2023 03:53:10 GMT Cache-Control: max-age=2592000 Content-Encoding: gzip`

	nowlinks.net/assets/images/bg.jpg	5.44.220.121	200 OK	2.7 kB
URL GET HTTP/1.1 nowlinks.net/assets/images/bg.jpg IP 5.44.220.121:80 ASN #43513 Sia Nano IT Requested by http://nowlinks.net/WtNYYv File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, progressive, precision 8, 100x388, components 3\012- data Size 2.7 kB (2692 bytes) Hash 2ccb8ae78d92f63c7a5542a2c068bbf4 c9cee23ad49eefb01641ea29d09fea8a5fb75cbb cf11f591209d7b67c1690b7f6ca68469f2a0b13ee86b9613667207c4ae1cd44b HTTP Headers `GET /assets/images/bg.jpg HTTP/1.1 Host: nowlinks.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://nowlinks.net/assets/css/main.css Cookie: PHPSESSID=bp1kv62g7j7egmqh4h4rici9e1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Date: Fri, 09 Jun 2023 03:53:10 GMT Content-Type: image/jpeg Content-Length: 2692 Last-Modified: Tue, 15 May 2012 14:16:08 GMT Connection: keep-alive ETag: "4fb26528-a84" Expires: Sun, 09 Jul 2023 03:53:10 GMT Cache-Control: max-age=2592000 Accept-Ranges: bytes`

	nowlinks.net/assets/images/logo.png	5.44.220.121	200 OK	13 kB
URL GET HTTP/1.1 nowlinks.net/assets/images/logo.png IP 5.44.220.121:80 ASN #43513 Sia Nano IT Requested by http://nowlinks.net/WtNYYv File type PNG image data, 201 x 134, 8-bit/color RGBA, non-interlaced\012- data Size 13 kB (12721 bytes) Hash 3e284e74e1a9153762845b21872c1cc2 6b50c9e3c2dcb54436789511e3d48bc5be3d1c06 3c9440a388887f05afcbd219167511be777087031d50c9ffa3c8be26b53cecc1 HTTP Headers `GET /assets/images/logo.png HTTP/1.1 Host: nowlinks.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://nowlinks.net/assets/css/main.css Cookie: PHPSESSID=bp1kv62g7j7egmqh4h4rici9e1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Date: Fri, 09 Jun 2023 03:53:10 GMT Content-Type: image/png Content-Length: 12721 Last-Modified: Mon, 13 Sep 2021 14:50:00 GMT Connection: keep-alive ETag: "613f6518-31b1" Expires: Sun, 09 Jul 2023 03:53:10 GMT Cache-Control: max-age=2592000 Accept-Ranges: bytes`

	nowlinks.net/assets/images/favicon.ico	5.44.220.121	200 OK	2.4 kB
URL GET HTTP/1.1 nowlinks.net/assets/images/favicon.ico IP 5.44.220.121:80 ASN #43513 Sia Nano IT Requested by http://nowlinks.net/WtNYYv File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 32x32, components 3\012- data Size 2.4 kB (2360 bytes) Hash 01046cf5c9ed5f9cda18ea456043bdee b9a6040956662bb523f014aedd956b060015a64d 7e8b0d8f6302fa777ddf177c4df9af9d0417f139008d844932909ecf4e1f9f1f HTTP Headers `GET /assets/images/favicon.ico HTTP/1.1 Host: nowlinks.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://nowlinks.net/WtNYYv Cookie: PHPSESSID=bp1kv62g7j7egmqh4h4rici9e1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Date: Fri, 09 Jun 2023 03:53:10 GMT Content-Type: image/x-icon Content-Length: 2360 Last-Modified: Tue, 15 May 2012 14:16:08 GMT Connection: keep-alive ETag: "4fb26528-938" Expires: Sun, 09 Jul 2023 03:53:10 GMT Cache-Control: max-age=2592000 Accept-Ranges: bytes`

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (2)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

HTTP Transactions (7)

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type