Report - yt4.ggpht.com/ytc/APkrFKa1C6pAvPOO97flkmByPXF19uU6LsWufbj4ZgI4HA=s64-c-k-c0x00ffffff-no-rj

Report Overview

Visited public
2023-09-27 09:35:01
Tags
URL
yt4.ggpht.com/ytc/APkrFKa1C6pAvPOO97flkmByPXF19uU6LsWufbj4ZgI4HA=s64-c-k-c0x00ffffff-no-rj
Finishing URL
yt4.ggpht.com/ytc/APkrFKa1C6pAvPOO97flkmByPXF19uU6LsWufbj4ZgI4HA=s64-c-k-c0x00ffffff-no-rj
IP / ASN
142.250.74.97
#15169 GOOGLE
Title
unnamed.jpg (JPEG Image, 64 × 64 pixels)

Detections

urlquery

0

Network Intrusion Detection

1

Threat Detection Systems

0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
yt4.ggpht.com	4746	2008-01-16	2014-01-15 11:02:32	2023-09-25 19:03:26	1.1 kB	3.4 kB	142.250.74.97
ocsp.pki.goog	175	2016-06-13	2018-07-01 08:43:07	2023-09-26 18:12:02	666 B	1.4 kB	142.250.74.131

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-09-27 09:34:49	high	54.37.238.86	Client IP	ET POLICY PE EXE or DLL Windows file download HTTP

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (4)

	URL	IP	Response	Size
	ocsp.pki.goog/gts1c3	142.250.74.131		471 B
URL ocsp.pki.goog/gts1c3 IP 142.250.74.131:0 ASN #15169 GOOGLE File type data Size 471 B (471 bytes) Hash c0253495b9450234d02a692781f7d467 d2d244ab2c8669c0d0739c694d304fcc9c8a7b46 1875ff3c73d0060fa7d88bbd791a1999e25b8379de7624b507a017c1c7861820 HTTP Headers `POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Wed, 27 Sep 2023 09:34:44 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN`

	yt4.ggpht.com/ytc/APkrFKa1C6pAvPOO97flkmByPXF19uU6LsWufbj4ZgI4HA=s64-c-k-c0x00ffffff-no-rj	142.250.74.97	200 OK	2.2 kB
URL User Request GET HTTP/2 yt4.ggpht.com/ytc/APkrFKa1C6pAvPOO97flkmByPXF19uU6LsWufbj4ZgI4HA=s64-c-k-c0x00ffffff-no-rj IP 142.250.74.97:443 ASN #15169 GOOGLE Certificate IssuerGoogle Trust Services LLC Subject.googleusercontent.com Fingerprint25:24:05:0B:D2:5F:DF:ED:3B:BE:B8:47:80:C5:AE:2B:51:94:69:F5 ValidityMon, 04 Sep 2023 08:23:19 GMT - Mon, 27 Nov 2023 08:23:18 GMT File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 64x64, components 3\012- data Size 2.2 kB (2189 bytes) Hash e64d1220c5d754be372f0927c00366b0 015dd7e62f717030ab6a127318f4b5b169e4f966 f20ece013accdb31b4d8e9c63e48955e9e227260320492b93658986af4b0c46d HTTP Headers GET /ytc/APkrFKa1C6pAvPOO97flkmByPXF19uU6LsWufbj4ZgI4HA=s64-c-k-c0x00ffffff-no-rj HTTP/1.1 Host: yt4.ggpht.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK access-control-allow-origin: timing-allow-origin: * access-control-expose-headers: Content-Length content-disposition: inline;filename="unnamed.jpg" x-content-type-options: nosniff server: fife content-length: 2189 x-xss-protection: 0 date: Wed, 27 Sep 2023 09:34:44 GMT expires: Thu, 28 Sep 2023 09:34:44 GMT cache-control: public, max-age=86400, no-transform etag: "v964" content-type: image/jpeg vary: Origin age: 0 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	ocsp.pki.goog/gts1c3	142.250.74.131		471 B
URL ocsp.pki.goog/gts1c3 IP 142.250.74.131:0 ASN #15169 GOOGLE File type data Size 471 B (471 bytes) Hash c0253495b9450234d02a692781f7d467 d2d244ab2c8669c0d0739c694d304fcc9c8a7b46 1875ff3c73d0060fa7d88bbd791a1999e25b8379de7624b507a017c1c7861820 HTTP Headers `POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Wed, 27 Sep 2023 09:34:44 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN`

	yt4.ggpht.com/favicon.ico	142.250.74.97	200 OK	307 B
URL GET HTTP/3 yt4.ggpht.com/favicon.ico IP 142.250.74.97:443 ASN #15169 GOOGLE Requested by https://yt4.ggpht.com/ytc/APkrFKa1C6pAvPOO97flkmByPXF19uU6LsWufbj4ZgI4HA=s64-c-k-c0x00ffffff-no-rj Certificate IssuerGoogle Trust Services LLC Subject.googleusercontent.com Fingerprint25:24:05:0B:D2:5F:DF:ED:3B:BE:B8:47:80:C5:AE:2B:51:94:69:F5 ValidityMon, 04 Sep 2023 08:23:19 GMT - Mon, 27 Nov 2023 08:23:18 GMT File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data Size 307 B (307 bytes) Hash 72a9e7b9d3b81de2ff9287e4fb279f9a a86f154180cf216c2032a52b8363eca723d71646 30c6a3a424fbf02550260997dbb38f543f13637ee5be6a3686d5d50ca4ac59c9 HTTP Headers `GET /favicon.ico HTTP/1.1 Host: yt4.ggpht.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://yt4.ggpht.com/ytc/APkrFKa1C6pAvPOO97flkmByPXF19uU6LsWufbj4ZgI4HA=s64-c-k-c0x00ffffff-no-rj Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/3 200 OK x-content-type-options: nosniff content-encoding: gzip server: fife content-length: 307 x-xss-protection: 0 date: Tue, 26 Sep 2023 12:15:51 GMT expires: Wed, 27 Sep 2023 12:15:51 GMT cache-control: public, max-age=86400, no-transform last-modified: Tue, 26 Sep 2023 12:15:51 GMT content-type: image/x-icon age: 76734 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000`