Report Overview

  1. Visited public
    2023-11-29 17:00:11
    Tags
  2. URL

    gay6xzy2g6psssdptvkthzfxvr2vm4yitezxamjynzvlqjlmshpyzwqd.onion.ws/ifuseeit/ugay/dikfwy82sl.exe

  3. Finishing URL

    nelly.com/no/?utm_source=Awin&utm_medium=affiliate&utm_content=monetize.admitad.com_922583&GID=0utm_term=Sub+Networks&sv1=affiliate&sv_campaign_id=922583&awc=19563_1701277194_ae95020ff665baf4547aba6c0205b60f&gclid=CI3m3bbX6YIDFedIHgIdypUB2w&gclsrc=ds

  4. IP / ASN
    185.53.178.52

    #19905 NEUSTAR-AS6

    Title
    Klær, Sko, Kjoler & Undertøy | Dame | Kjøp på nett | Nelly.com
Detections
urlquery
0
Network Intrusion Detection
6
Threat Detection Systems
0

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
cdn.ingrid.com7514911996-08-132018-11-30 20:22:212023-11-19 11:53:19
consent.cookiebot.com49722010-01-212014-02-26 15:48:422023-11-29 05:18:00
d81mfvml8p5ml.cloudfront.netunknown2008-04-252021-11-04 14:07:522023-11-25 19:17:32
gay6xzy2g6psssdptvkthzfxvr2vm4yitezxamjynzvlqjlmshpyzwqd.onion.wsunknown2023-10-142022-06-03 18:24:262023-09-06 02:47:05
d38psrni17bvxu.cloudfront.netunknown2008-04-252022-09-22 18:48:382023-11-29 08:55:18
ad.doubleclick.net1861996-01-162012-05-24 22:21:082023-11-29 05:20:17
nelly.com1092241997-06-252015-11-03 03:45:042023-11-25 18:13:40
sc-static.net11832017-03-162017-09-05 20:35:042023-11-28 12:30:28
sst.nelly.comunknown1997-06-252022-07-18 12:48:022023-11-19 11:53:22
fonts.googleapis.com88772005-01-252013-06-10 22:14:262023-11-29 07:57:29
www.googletagmanager.com752011-11-112013-05-22 04:07:372023-11-29 07:23:07
tatrck.comunknown2023-06-152023-06-16 13:24:232023-11-27 21:56:06
clickserve.dartsearch.net35492004-09-082013-06-04 21:55:542023-11-20 20:18:03
content.nelly.com2014391997-06-252017-09-20 08:40:582023-11-08 13:59:38
media.nelly.com2044991997-06-252017-06-28 13:57:222023-11-19 11:53:20
www.awin1.com140492000-05-192012-07-02 21:46:122023-11-28 15:24:30
viraj-drm.comunknown2023-10-112023-11-27 12:27:352023-11-28 05:30:03
consentcdn.cookiebot.com56762010-01-212018-05-23 07:13:432023-11-29 05:18:01
fonts.gstatic.comunknown2008-02-112014-09-09 02:40:212023-11-29 07:17:12
tags.tiqcdn.com9692012-07-112013-01-15 06:04:262023-11-28 18:11:49
plorexdry.comunknownunknownNo dataNo data
static.cloudflareinsights.com12942019-08-302019-09-24 16:34:562023-11-29 07:41:02

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
highClient IPInternal IP
highClient IPInternal IP
highClient IPInternal IP
highClient IPInternal IP
highClient IPInternal IP
highClient IPInternal IP

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


JavaScript (69)

HTTP Transactions (107)

URLIPResponseSize
gay6xzy2g6psssdptvkthzfxvr2vm4yitezxamjynzvlqjlmshpyzwqd.onion.ws/ifuseeit/ugay/dikfwy82sl.exe
185.53.178.52 1.4 kB
d38psrni17bvxu.cloudfront.net/scripts/js3.js
54.230.241.226 1.1 kB
gay6xzy2g6psssdptvkthzfxvr2vm4yitezxamjynzvlqjlmshpyzwqd.onion.ws/track.php?domain=onion.ws&toggle=browserjs&uid=MTcwMTI3NzE5MC41NDI2OmY4YzMyOWNlNWJkNzkyN2Q3Mzc2ZWYwNzUyYzRhY2U1ZGE0YTMwODkwZDg1NmE3MTIyNmYyN2E0MTA5MDI4MzA6NjU2NzZlMDY4NDc4Yg%3D%3D
185.53.178.52 20 B
gay6xzy2g6psssdptvkthzfxvr2vm4yitezxamjynzvlqjlmshpyzwqd.onion.ws/ls.php?t=65676e06&token=cee0eeb372cfddacf82ac0b78a1b1ed044ea1000
185.53.178.52 16 B
gay6xzy2g6psssdptvkthzfxvr2vm4yitezxamjynzvlqjlmshpyzwqd.onion.ws/favicon.ico
185.53.178.52 0 B
gay6xzy2g6psssdptvkthzfxvr2vm4yitezxamjynzvlqjlmshpyzwqd.onion.ws/track.php?click=4da66f0e21539490cb93a4bc4e3d15b9d6bca8eb&domain=onion.ws&uid=MTcwMTI3NzE5MC41NDI2OmY4YzMyOWNlNWJkNzkyN2Q3Mzc2ZWYwNzUyYzRhY2U1ZGE0YTMwODkwZDg1NmE3MTIyNmYyN2E0MTA5MDI4MzA6NjU2NzZlMDY4NDc4Yg%3D%3D&ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQxMDN8fHx8fHw2NTY3NmUwNjg0NzU5fHx8MTcwMTI3NzE5MC44MjY5fDYyYWIzNjM2ODFlZDczYTdiYzc3ZDIwNDdhMWZhMjZmZmU3Mzc4Njd8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfGV5Sm9iQ0k2SW1WdUluMD18fDF8VzEwPXxjZWUwZWViMzcyY2ZkZGFjZjgyYWMwYjc4YTFiMWVkMDQ0ZWExMDAwfDB8fDB8MHw%3D&kw=&search=&pcat=&bucket=&clientID=&adtest=off
185.53.178.52 20 B
viraj-drm.com/zclkvisitor/b5ab0bf2-8ed8-11ee-9398-0afbcffe1f9d/85aefdc2-9ed0-48aa-922d-60f9f9fc0f2d?campaignid=e91fdbc0-8daa-11ee-a9d4-123af5e664ff
3.209.179.36 1.1 kB
viraj-drm.com/zclkredirect?visitid=b5ab0bf2-8ed8-11ee-9398-0afbcffe1f9d&type=js&browserWidth=1280&browserHeight=1024&iframeDetected=false&webdriverDetected=false
3.209.179.36 352 B
plorexdry.com/r/b?s=6219144975&s2=lateritious-falcon&s3=victor-fon-vymgzqgyr9
5.9.85.57 322 B
viraj-drm.com/favicon.ico
3.209.179.36 653 B
tatrck.com/redir/clickGate.php?u=u68EH62H&m=30&p=mm5Jjp0i29&s=am01300d2fe25bedf82e3f9dc77e6c83&url=https%3A%2F%2Fnelly.com
104.21.88.50301 Moved Permanently0 B
clickserve.dartsearch.net/link/click?lid=43700053312867356&ds_s_kwgid=58700005831649785&ds_url_v=2&ds_dest_url=https://nelly.com/no/?utm_source=Awin&utm_medium=affiliate&utm_content=monetize.admitad.com_922583&GID=0utm_term=Sub+Networks&sv1=affiliate&sv_campaign_id=922583&awc=19563_1701277194_ae95020ff665baf4547aba6c0205b60f
216.58.207.238302 Found458 B
ad.doubleclick.net/ddm/clk/466732281;272262583;l;u=ds&sv1=53312867356&sv2=3402554388964891&sv3=7890529632067200115&sa_info=ELLByJIB&gclid=CI3m3bbX6YIDFedIHgIdypUB2w;%3fhttps://nelly.com/no/?utm_source=Awin&utm_medium=affiliate&utm_content=monetize.admitad.com_922583&GID=0utm_term=Sub+Networks&sv1=affiliate&sv_campaign_id=922583&awc=19563_1701277194_ae95020ff665baf4547aba6c0205b60f&gclid=CI3m3bbX6YIDFedIHgIdypUB2w&gclsrc=ds
216.58.211.6302 Found0 B
content.nelly.com/v1/static/UGG_NY_2023_v7_2?fmt=webp&h=120&w=200
104.18.23.58200 OK60 kB
nelly.com/client/cccc145cc7063a28.svg
104.18.23.58200 OK49 kB
nelly.com/fonts/HKGrotesk/HKGrotesk-SemiBold.woff
104.18.23.58200 OK44 kB
nelly.com/fonts/HKGrotesk/HKGrotesk-ExtraBold.woff
104.18.23.58200 OK45 kB
nelly.com/fonts/HKGrotesk/HKGrotesk-Bold.woff
104.18.23.58200 OK45 kB
media.nelly.com/i/nlyscandinavia/Thumbnail-nelly-sweaters_2023_NY_v45?fmt=webp&w=320&h=320&sm=c
23.36.79.11200 OK10 kB
media.nelly.com/i/nlyscandinavia/SECTION_2_2_DT?fmt=webp&w=640&h=710&sm=c
23.36.79.11200 OK91 kB
media.nelly.com/i/nlyscandinavia/Nelly_2023_v44_kategoriingang_4_boots?fmt=webp&w=320&h=320&sm=c
23.36.79.11200 OK9.6 kB
nelly.com/client/dc755f3616fafd8f.svg
104.18.23.58200 OK8.2 kB
nelly.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
104.18.23.58200 OK20 kB
static.cloudflareinsights.com/beacon.min.js/v84a3a4012de94ce1a686ba8c167c359c1696973893317
104.16.57.101200 OK11 kB
media.nelly.com/i/nlyscandinavia/SECTION_1_3_DT?fmt=webp&w=320&h=411&sm=c
23.36.79.11200 OK8.2 kB
media.nelly.com/i/nlyscandinavia/Nelly_2023_winterarrivals_wide_k-topp_v48_DT?fmt=webp&w=1600
23.36.79.11200 OK130 kB
media.nelly.com/i/nlyscandinavia/juicy_couture_logo?fmt=webp&h=120?fmt=webp&h=120&w=200
23.36.79.11200 OK6.2 kB
media.nelly.com/i/nlyscandinavia/nelly_logotype_black_utancom_2?fmt=webp&h=120&w=200
23.36.79.11200 OK3.0 kB
media.nelly.com/i/nlyscandinavia/Nelly_2023_v44_kategoriingang_3_byxor?fmt=webp&w=320&h=320&sm=c
23.36.79.11200 OK5.0 kB
media.nelly.com/i/nlyscandinavia/SECTION_1_1_DT?fmt=webp&w=320&h=411&sm=c
23.36.79.11200 OK12 kB
media.nelly.com/i/nlyscandinavia/SECTION_1_2_DT?fmt=webp&w=320&h=411&sm=c
23.36.79.11200 OK12 kB
media.nelly.com/i/nlyscandinavia/SECTION_2_1-DT?fmt=webp&w=640&h=710&sm=c
23.36.79.11200 OK22 kB
media.nelly.com/i/nlyscandinavia/Nelly_2023_v44_kategoriingang_1_vinterjackor?fmt=webp&w=320&h=320&sm=c
23.36.79.11200 OK8.9 kB
media.nelly.com/i/nlyscandinavia/newbalance_logo_2023_v7?fmt=webp&h=120&w=200
23.36.79.11200 OK6.5 kB
nelly.com/client/SeoTexts-f1374abe.css
104.18.23.58200 OK34 kB
nelly.com/client/index-30f8fff4.css
104.18.23.58200 OK22 kB
cdn.ingrid.com/upsell-widget/bootstrap.js
35.201.103.143200 OK22 kB
nelly.com/cdn-cgi/rum?
104.18.23.58204 No Content0 B
consentcdn.cookiebot.com/sdk/bc-v4.min.html
23.210.160.99200 OK392 B
nelly.com/client/client.08d5a3ec.js
104.18.23.58200 OK192 kB
consent.cookiebot.com/6a226be2-5272-4612-8b8e-be313e1ca40e/cc.js?renew=false&referer=nelly.com&dnt=true&init=false
2.19.183.7200 OK77 kB
nelly.com/favicon.ico
104.18.23.58200 OK15 kB
nelly.com/client/_layout.f94f897a.js
104.18.23.58200 OK87 kB
nelly.com/client/Flowbox.bb36e856.js
104.18.23.58200 OK1.3 kB
nelly.com/client/FrontpageContent.c0fe9bd9.js
104.18.23.58200 OK18 kB
nelly.com/client/QliroAlternative.161101c0.js
104.18.23.58200 OK2.6 kB
consent.cookiebot.com/uc.js
2.19.183.7200 OK34 kB
cdn.ingrid.com/upsell-widget/bootstrap.js
35.201.103.143200 OK22 kB
nelly.com/client/PaperPlane.e23a0d55.js
104.18.23.58200 OK23 kB
media.nelly.com/i/nlyscandinavia/NO_Nelly_2023_v48_NY_cover_main_full_DT?w=1280&fmt=webp&qlt=default
23.36.79.11200 OK32 kB
nelly.com/client/Panel-cbb55088.css
104.18.23.58200 OK553 B
nelly.com/client/SmartBanner.2109ecab.js
104.18.23.58200 OK38 kB
fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
142.250.74.131200 OK33 kB
nelly.com/client/BackgroundLayer.eef4e79f.js
104.18.23.58200 OK2.7 kB
sc-static.net/scevent.min.js
54.230.82.240200 OK17 kB
nelly.com/no/resources/catalog/search/default-suggestions
104.18.23.58200 OK206 kB
tags.tiqcdn.com/utag/tiqapp/utag.v.js?a=nelly/main/202211181336&cb=1701277203972
143.204.55.12200 OK2 B
nelly.com/cdn-cgi/rum?
104.18.23.58204 No Content0 B
nelly.com/client/nelly.99ce9084.js
104.18.23.58200 OK0 B
nelly.com/no/resources/siteconfig/IngridActiveOnMarket
104.18.23.58200 OK7 B
nelly.com/client/client-89a1d712.css
104.18.23.58200 OK130 kB
nelly.com/client/456dfb6fcef86be5.svg
104.18.23.58200 OK773 B
nelly.com/client/inject_styles.5607aec6.js
104.18.23.58200 OK562 B
nelly.com/client/PanelHeader.cff228a5.js
104.18.23.58200 OK2.2 kB
nelly.com/no/resources/chrome
104.18.23.58200 OK91 kB
nelly.com/no/?utm_source=Awin&utm_medium=affiliate&utm_content=monetize.admitad.com_922583&GID=0utm_term=Sub+Networks&sv1=affiliate&sv_campaign_id=922583&awc=19563_1701277194_ae95020ff665baf4547aba6c0205b60f&gclid=CI3m3bbX6YIDFedIHgIdypUB2w&gclsrc=ds
104.18.23.58200 OK268 kB
media.nelly.com/i/nlyscandinavia/Nelly_2023_v44_kategoriingang_5_klanning?fmt=webp&w=320&h=320&sm=c
23.36.79.11200 OK7.2 kB
nelly.com/client/cookies.f75962fd.js
104.18.23.58200 OK95 B
nelly.com/client/cross-site-sync-iframe.6a81bb39.js
104.18.23.58200 OK1.5 kB
nelly.com/client/index.40a82b17.js
104.18.23.58200 OK2.2 kB
www.awin1.com/cread.php?awinmid=19563&awinaffid=922583&clickref=3Cek6MhoPzQNyNtOqxCs19FAnvmpAeddr3i6lqibxrbV73&clickref3=mt132948_a110746_p237526_cNO&clickref2=https%3A%2F%2Fwww.searchfor.org%2F
104.110.20.69302 Moved Temporarily268 kB
tags.tiqcdn.com/utag/nelly/main/prod/utag.js
143.204.55.12200 OK22 kB
nelly.com/no/resources/favorites/
104.18.23.58200 OK90 B
nelly.com/client/FrontpageContent-a475780b.css
104.18.23.58200 OK24 kB
nelly.com/client/StructuredData.dc1ff920.js
104.18.23.58200 OK2.3 kB
nelly.com/client/NewsletterSignUpForm.2c6d4c2a.js
104.18.23.58200 OK6.0 kB
nelly.com/client/ebbot.9524d064.js
104.18.23.58200 OK66 B
nelly.com/no/resources/frontpage
104.18.23.58200 OK22 kB
nelly.com/no/resources/siteconfig/SHOW_NEW_CUSTOMER_POPUP
104.18.23.58200 OK6 B
nelly.com/client/HtmlContent-ad499269.css
104.18.23.58200 OK959 B
nelly.com/client/NewsletterSignUpForm-0166598a.css
104.18.23.58200 OK1.9 kB
nelly.com/client/HtmlContent.7e3f2394.js
104.18.23.58200 OK526 B
sst.nelly.com/gtm.js?id=GTM-P2LS
104.18.23.58200 OK417 kB
nelly.com/no/resources/siteconfig/EbbotId
104.18.23.58200 OK32 B
nelly.com/no/resources/customer/login?optional=true
104.18.23.58200 OK2 B
tags.tiqcdn.com/utag/nelly/main/prod/utag.2.js?utv=ut4.46.202211181336
143.204.55.12200 OK15 kB
nelly.com/client/SeoTexts.2d4c90b7.js
104.18.23.58200 OK2.3 kB
media.nelly.com/i/nlyscandinavia/Nelly_2023_v44_kategoriingang_6_topp?fmt=webp&w=320&h=320&sm=c
23.36.79.11200 OK16 kB
nelly.com/client/Panel.b13efb4a.js
104.18.23.58200 OK9.1 kB
nelly.com/client/SmartBanner-d4d457fb.css
104.18.23.58200 OK2.9 kB
media.nelly.com/i/nlyscandinavia/Nelly_2023_v44_kategoriingang_7_jeans?fmt=webp&w=320&h=320&sm=c
23.36.79.11200 OK4.6 kB
nelly.com/client/_layout-026cfada.css
104.18.23.58200 OK10 kB
nelly.com/no/resources/alias/appbanner_configuration
104.18.23.58200 OK249 B
nelly.com/fonts/HKGrotesk/HKGrotesk-Regular.woff
104.18.23.58200 OK43 kB
nelly.com/no/resources/page/%2Fno%2F
104.18.23.58200 OK2.7 kB
nelly.com/no/resources/cart/
104.18.23.58200 OK137 B
nelly.com/client/Flowbox-475ee83b.css
104.18.23.58200 OK654 B
fonts.googleapis.com/css2?family=Montserrat:wght@400;600&display=swap
142.250.74.106200 OK3.7 kB
www.googletagmanager.com/gtag/js?id=G-V4C5LNHG8Y&l=dataLayer&cx=c&sign=110d1c85e0e0c3b2eb0f12060dea89eab0001bed570e970a283b3f359e9b2782_20231129
142.250.74.104200 OK249 kB
nelly.com/client/bf353c0f55745e7a.svg
104.18.23.58200 OK53 kB
nelly.com/fonts/HKGrotesk/HKGrotesk-Italic.woff
104.18.23.58200 OK44 kB
nelly.com/client/nelly-b6e8f29a.css
104.18.23.58200 OK627 B
nelly.com/no/resources/siteconfig/SHOW_INSPIRATIONLIST
104.18.23.58200 OK6 B
nelly.com/client/BackgroundLayer-0e2cbde1.css
104.18.23.58200 OK763 B
nelly.com/client/PanelHeader-4567e6e4.css
104.18.23.58200 OK531 B
nelly.com/client/76bb79c02077bfba.svg
104.18.23.58200 OK254 B
d81mfvml8p5ml.cloudfront.net/o1ro3vaz.js
143.204.42.122200 OK0 B