Report - googleweblight.com/?lite_url=https://toddtrades.com/f/53362

Report Overview

Submitted URL
googleweblight.com/?lite_url=https://toddtrades.com/f/53362
IP
142.250.74.97
ASN
#15169 GOOGLE
Submitted
2023-05-21 12:33:14
Access
public
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
1
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
toddtrades.com	unknown	unknown	2021-01-05	2023-05-21	908 B	712 B	91.213.50.48
ocsp.pki.goog	175	2016-06-13	2018-07-01	2023-05-21	666 B	1.4 kB	142.250.74.131
googleweblight.com	76814	unknown	2015-05-26	2023-05-21	515 B	2.0 kB	142.250.74.161

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-05-21 12:32:58	medium	91.213.50.48	Client IP	ET DROP Spamhaus DROP Listed Traffic Inbound group 7

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (5)

	URL	IP	Response	Size
	ocsp.pki.goog/gts1c3	142.250.74.131		472 B
URL ocsp.pki.goog/gts1c3 IP 142.250.74.131:0 ASN #15169 GOOGLE File type data Size 472 B (472 bytes) Hash 834d30ac255a2bf6e40206abe1df62f6 79794a460ef16547837ca7a0e2f2cd2f4c239536 5784b258eb8aed35876e541eb1cca1ea5a38b6f4dd9255182ded4a6f35d74436 HTTP Headers `POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Sun, 21 May 2023 12:32:57 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN`

	googleweblight.com/?lite_url=https://toddtrades.com/f/53362	142.250.74.161	301 Moved Permanently	0 B
URL User Request GET HTTP/2 googleweblight.com/?lite_url=https://toddtrades.com/f/53362 IP 142.250.74.161:443 ASN #15169 GOOGLE Certificate IssuerGoogle Trust Services LLC Subject.googleusercontent.com Fingerprint49:A1:78:AA:CC:58:2A:18:8D:75:CC:D3:F4:F7:DD:A5:5D:58:B0:B1 ValidityMon, 24 Apr 2023 12:00:35 GMT - Mon, 17 Jul 2023 12:00:34 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /?lite_url=https://toddtrades.com/f/53362 HTTP/1.1 Host: googleweblight.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 301 Moved Permanently content-type: application/binary vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site cache-control: no-cache, no-store, max-age=0, must-revalidate pragma: no-cache expires: Mon, 01 Jan 1990 00:00:00 GMT date: Sun, 21 May 2023 12:32:58 GMT location: https://toddtrades.com/f/53362 p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info." permissions-policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version= content-security-policy: script-src 'nonce-hVHIrJX8vQMm_eidgxifIg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/WebLightFeaturePhoneHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://pagead2.googlesyndication.com https://adservice.google.com https://partner.googleadservices.com https://tpc.googlesyndication.com;report-uri /_/WebLightFeaturePhoneHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/WebLightFeaturePhoneHttp/cspreport cross-origin-opener-policy: same-origin accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version cross-origin-resource-policy: same-site server: ESF content-length: 0 x-xss-protection: 0 x-frame-options: SAMEORIGIN x-content-type-options: nosniff set-cookie: NID=511=eYx3QodEyHneFKz6GrfHp2ShjaFbU8G1Rm4tiUWZltEUiVe_7bUzbjF8doTOpcHuwglg0vlxBr1EF62OEsfYjR9E_iyaGQTr6tDQZpRINKBh5gAULl847wkuBxcv3KzRexOkd6Cn-s6mheytEcYbzyqeEbrnBaVULvRV0xUVitc; expires=Mon, 20-Nov-2023 12:32:58 GMT; path=/; domain=.googleweblight.com; HttpOnly alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	ocsp.pki.goog/gts1c3	142.250.74.131		472 B
URL ocsp.pki.goog/gts1c3 IP 142.250.74.131:0 ASN #15169 GOOGLE File type data Size 472 B (472 bytes) Hash 834d30ac255a2bf6e40206abe1df62f6 79794a460ef16547837ca7a0e2f2cd2f4c239536 5784b258eb8aed35876e541eb1cca1ea5a38b6f4dd9255182ded4a6f35d74436 HTTP Headers `POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Sun, 21 May 2023 12:32:58 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN`

	toddtrades.com/f/53362	91.213.50.48	200 OK	2 B
URL User Request GET HTTP/1.1 toddtrades.com/f/53362 IP 91.213.50.48:443 ASN #50340 OOO Network of data-centers Selectel Certificate IssuerLet's Encrypt Subjecttoddtrades.com FingerprintAE:F1:92:14:D2:4C:BC:32:16:74:71:CE:2E:7D:4B:11:7D:F9:44:32 ValiditySat, 20 May 2023 19:09:21 GMT - Fri, 18 Aug 2023 19:09:20 GMT File type ASCII text, with no line terminators Size 2 B (2 bytes) Hash c20ad4d76fe97759aa27a0c99bff6710 7b52009b64fd0a2a49e6d8a939753077792b0554 6b51d431df5d7f141cbececcf79edf3dd861c3b4069f0b11661a3eefacbba918 HTTP Headers `GET /f/53362 HTTP/1.1 Host: toddtrades.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Sun, 21 May 2023 12:32:58 GMT Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.4.16 X-Powered-By: PHP/5.4.16 Content-Length: 2 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=utf-8`

	toddtrades.com/favicon.ico	91.213.50.48	404 Not Found	209 B
URL GET HTTP/1.1 toddtrades.com/favicon.ico IP 91.213.50.48:443 ASN #50340 OOO Network of data-centers Selectel Requested by https://toddtrades.com/f/53362 Certificate IssuerLet's Encrypt Subjecttoddtrades.com FingerprintAE:F1:92:14:D2:4C:BC:32:16:74:71:CE:2E:7D:4B:11:7D:F9:44:32 ValiditySat, 20 May 2023 19:09:21 GMT - Fri, 18 Aug 2023 19:09:20 GMT File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text Size 209 B (209 bytes) Hash 18ffb59b61525f781cf9251045be575d bd7318b00b15b7a1c8a48524419fa2e5c27a5b6d b6682cab65d3243b5b75efb7279dbf49491957484780f2ba0a87632cc0e25642 HTTP Headers `GET /favicon.ico HTTP/1.1 Host: toddtrades.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://toddtrades.com/f/53362 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 404 Not Found Date: Sun, 21 May 2023 12:32:58 GMT Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.4.16 Content-Length: 209 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1`