Report Overview

  1. Submitted URL

    bit.do/fVX3D

  2. IP

    23.21.31.78

    ASN

    #14618 AMAZON-AES

  3. Submitted

    2023-02-01 04:07:16

    Access

  4. Website Title

  5. Final URL

  6. Tags

  7. urlquery detections

    Suspicious - DynDNS domain

Detections

  1. urlquery

    16

  2. Network Intrusion Detection

    2

  3. Threat Detection Systems

    94

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
contile.services.mozilla.com11142021-05-27T20:32:35Z2023-03-13T05:09:13Z
push.services.mozilla.com21402014-10-24T10:27:06Z2023-03-13T05:09:14Z
ocsp.entrust.net12082014-01-10T03:18:45Z2023-03-13T05:09:58Z
asset.mtb.com2463972017-02-13T05:24:51Z2023-03-13T01:40:13Z
bit.do1248882015-03-26T04:32:47Z2023-03-13T05:15:21Z
r3.o.lencr.org3442020-12-02T09:52:13Z2023-03-13T05:09:07Z
firefox.settings.services.mozilla.com8672020-06-04T22:08:41Z2023-03-13T05:09:10Z
content-signature-2.cdn.mozilla.net11522020-11-03T13:26:46Z2023-03-13T05:09:35Z
aslottonownext.line.pmunknown2023-01-31T20:42:53Z2023-03-03T11:12:18Z
img-getpocket.cdn.mozilla.net16312018-06-22T01:36:00Z2023-03-13T05:09:16Z
resources.mtb.com1440112014-11-08T15:57:30Z2023-03-13T01:25:18Z

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
mediumClient IPInternal IP
mediumClient IPInternal IP

Threat Detection Systems

OpenPhish
SeverityIndicatorAlert
mediumbit.do/fVX3DM & T Bank Coporation
mediumaslottonownext.line.pm/M & T Bank Coporation
mediumaslottonownext.line.pm/M & T Bank Coporation
mediumaslottonownext.line.pm/M & T Bank Coporation
mediumaslottonownext.line.pm/M & T Bank Coporation
mediumaslottonownext.line.pm/M & T Bank Coporation
mediumaslottonownext.line.pm/M & T Bank Coporation
mediumaslottonownext.line.pm/M & T Bank Coporation
mediumaslottonownext.line.pm/M & T Bank Coporation
mediumaslottonownext.line.pm/M & T Bank Coporation
mediumaslottonownext.line.pm/M & T Bank Coporation
mediumaslottonownext.line.pm/M & T Bank Coporation
mediumaslottonownext.line.pm/M & T Bank Coporation
mediumaslottonownext.line.pm/M & T Bank Coporation
mediumaslottonownext.line.pm/M & T Bank Coporation
mediumaslottonownext.line.pm/M & T Bank Coporation

PhishTank

No alerts detected


Fortinet's Web Filter
SeverityIndicatorAlert
mediumbit.do/fVX3DPhishing
mediumaslottonownext.line.pm/Phishing
mediumaslottonownext.line.pm/TSPD/0856addebbab2000240df4b85f20ab5ae11296b2f080cbf7c90f0c4887955ec2ea382b5f255479e3?type=9Phishing
mediumaslottonownext.line.pm/TSPD/0856addebbab2000240df4b85f20ab5ae11296b2f080cbf7c90f0c4887955ec2ea382b5f255479e3?type=17Phishing
mediumaslottonownext.line.pm/TSPD/0856addebbab2000240df4b85f20ab5ae11296b2f080cbf7c90f0c4887955ec2ea382b5f255479e3?type=9Phishing
mediumaslottonownext.line.pm/TSPD/0856addebbab2000240df4b85f20ab5ae11296b2f080cbf7c90f0c4887955ec2ea382b5f255479e3?type=17Phishing
mediumaslottonownext.line.pm/Assets/js/tealium_prod.jsPhishing
mediumaslottonownext.line.pm/Assets/js/kessel-client-prod.jsPhishing
mediumaslottonownext.line.pm/Assets/js/mtb_app_wbk.jsPhishing
mediumaslottonownext.line.pm/ruxitagentjs_ICA2NVfghjqrux_10255221104040649.jsPhishing
mediumaslottonownext.line.pm/Assets/scripts/kessel-help.jsPhishing
mediumaslottonownext.line.pm/Assets/scripts/Login/Index.jsPhishing
mediumaslottonownext.line.pm/Assets/js/tealium_prod.jsPhishing
mediumaslottonownext.line.pm/Assets/js/kessel-client-prod.jsPhishing
mediumaslottonownext.line.pm/Assets/scripts/kessel-help.jsPhishing
mediumaslottonownext.line.pm/Assets/scripts/Login/Index.jsPhishing

mnemonic secure dns

No alerts detected


Quad9 DNS
SeverityIndicatorAlert
mediumline.pmSinkholed
mediumline.pmSinkholed
mediumline.pmSinkholed
mediumline.pmSinkholed
mediumline.pmSinkholed
mediumline.pmSinkholed
mediumline.pmSinkholed
mediumline.pmSinkholed
mediumline.pmSinkholed
mediumline.pmSinkholed
mediumline.pmSinkholed
mediumline.pmSinkholed
mediumline.pmSinkholed
mediumline.pmSinkholed
mediumline.pmSinkholed

ThreatFox

No alerts detected


JavaScript (3)

HTTP Transactions (52)

URLIPResponseSize
bit.do/fVX3D
23.21.31.78301 Moved Permanently311 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK939 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
34.160.144.191200 OK5.3 kB
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK12 B
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK329 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
aslottonownext.line.pm/
45.42.203.197200 OK6.1 kB
push.services.mozilla.com/
35.86.11.8101 Switching Protocols0 B
aslottonownext.line.pm/TSPD/0856addebbab2000240df4b85f20ab5ae11296b2f080cbf7c90f0c4887955ec2ea382b5f255479e3?type=9
45.42.203.197404 Not Found726 B
aslottonownext.line.pm/TSPD/0856addebbab2000240df4b85f20ab5ae11296b2f080cbf7c90f0c4887955ec2ea382b5f255479e3?type=17
45.42.203.197404 Not Found726 B
aslottonownext.line.pm/TSPD/0856addebbab2000240df4b85f20ab5ae11296b2f080cbf7c90f0c4887955ec2ea382b5f255479e3?type=9
45.42.203.197404 Not Found726 B
aslottonownext.line.pm/TSPD/0856addebbab2000240df4b85f20ab5ae11296b2f080cbf7c90f0c4887955ec2ea382b5f255479e3?type=17
45.42.203.197404 Not Found726 B
aslottonownext.line.pm/Assets/js/tealium_prod.js
45.42.203.197404 Not Found726 B
aslottonownext.line.pm/Assets/js/kessel-client-prod.js
45.42.203.197404 Not Found726 B
aslottonownext.line.pm/Assets/js/mtb_app_wbk.js
45.42.203.197404 Not Found726 B
aslottonownext.line.pm/ruxitagentjs_ICA2NVfghjqrux_10255221104040649.js
45.42.203.197404 Not Found726 B
aslottonownext.line.pm/Assets/scripts/kessel-help.js
45.42.203.197404 Not Found726 B
aslottonownext.line.pm/Assets/scripts/Login/Index.js
45.42.203.197404 Not Found726 B
aslottonownext.line.pm/Assets/js/tealium_prod.js
45.42.203.197404 Not Found726 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbaa9536b-a4e6-42f5-99dd-75298eecbbb1.jpeg
34.120.237.76200 OK16 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd3e99cd9-0681-47a5-bd03-80ff73a169b8.jpeg
34.120.237.76200 OK15 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F352eebeb-36ab-4e45-818a-3f8bb7f7e41f.jpeg
34.120.237.76200 OK6.2 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffc960001-158a-4a74-b6ce-f28cd110ca9c.jpeg
34.120.237.76200 OK8.7 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe2d02739-590e-4a37-9ca5-c27003f9e416.jpeg
34.120.237.76200 OK16 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb0378a78-c173-4036-ab09-812b1651c606.jpeg
34.120.237.76200 OK8.5 kB
ocsp.entrust.net/
104.110.10.32200 OK1.6 kB
ocsp.entrust.net/
104.110.10.32200 OK1.6 kB
ocsp.entrust.net/
104.110.10.32200 OK1.6 kB
ocsp.entrust.net/
104.110.10.32200 OK1.6 kB
ocsp.entrust.net/
104.110.10.32200 OK1.6 kB
ocsp.entrust.net/
104.110.10.32200 OK1.6 kB
resources.mtb.com/r/simple-layout-responsive/css.mtb?v=12082022125000
24.75.29.77200 OK35 kB
resources.mtb.com/Assets/img/mtb-equalhousinglender.svg
24.75.29.77200 OK230 B
resources.mtb.com/Assets/img/mtb-logo.svg
24.75.29.77200 OK2.0 kB
resources.mtb.com/r/simple-layout-responsive/js.mtb?v=12082022125000
24.75.29.77200 OK104 kB
resources.mtb.com/Assets/img/mtb-entrust.svg
24.75.29.77200 OK1.3 kB
aslottonownext.line.pm/Assets/js/kessel-client-prod.js
45.42.203.197404 Not Found726 B
resources.mtb.com/assets/fonts/mandtpg-iconfont.woff
24.75.29.77200 OK4.8 kB
aslottonownext.line.pm/Assets/scripts/kessel-help.js
45.42.203.197404 Not Found726 B
aslottonownext.line.pm/Assets/scripts/Login/Index.js
45.42.203.197404 Not Found726 B
resources.mtb.com/assets/fonts/mandtbaltoweb-medium.woff
24.75.29.77200 OK64 kB
resources.mtb.com/assets/fonts/mandtbaltoweb-book.woff
24.75.29.77200 OK68 kB
ocsp.entrust.net/
104.110.10.32200 OK1.6 kB
asset.mtb.com/Documents/html/homepage/favicon.ico
54.230.111.59200 OK15 kB