Report - yt4.ggpht.com/ytc/APkrFKa1C6pAvPOO97flkmByPXF19uU6LsWufbj4ZgI4HA=s64-c-k-c0x00ffffff-no-rj

Report Overview

Visitedpublic

2023-09-27 09:35:01

Tags

Submit Tags

URL

yt4.ggpht.com/ytc/APkrFKa1C6pAvPOO97flkmByPXF19uU6LsWufbj4ZgI4HA=s64-c-k-c0x00ffffff-no-rj

Finishing URL

yt4.ggpht.com/ytc/APkrFKa1C6pAvPOO97flkmByPXF19uU6LsWufbj4ZgI4HA=s64-c-k-c0x00ffffff-no-rj

IP / ASN

United States

142.250.74.97

#15169 GOOGLE

Title

unnamed.jpg (JPEG Image, 64 × 64 pixels)

Detections

urlquery

0

Network Intrusion Detection

1

Threat Detection Systems

0

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
yt4.ggpht.com	4746	2008-01-16	2014-01-15 11:02:32	2023-09-25 19:03:26	1.1 kB	3.4 kB	142.250.74.97
ocsp.pki.goog	175	2016-06-13	2018-07-01 08:43:07	2023-09-26 18:12:02	666 B	1.4 kB	142.250.74.131

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-09-27 09:34:49	high	54.37.238.86	Client IP	ET POLICY PE EXE or DLL Windows file download HTTP

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (4)

	URL	IP	Response	Size
	ocsp.pki.goog/gts1c3	142.250.74.131		471 B
URL ocsp.pki.goog/gts1c3 IP / ASN 142.250.74.131 #15169 GOOGLE Requested byN/A Resource Info File typedata First Seen2023-09-26 Last Seen2023-09-27 Times Seen159 Size471 B (471 bytes) MD5c0253495b9450234d02a692781f7d467 SHA1d2d244ab2c8669c0d0739c694d304fcc9c8a7b46 SHA2561875ff3c73d0060fa7d88bbd791a1999e25b8379de7624b507a017c1c7861820 HTTP Headers `POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Wed, 27 Sep 2023 09:34:44 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN`

	GET yt4.ggpht.com/ytc/APkrFKa1C6pAvPOO97flkmByPXF19uU6LsWufbj4ZgI4HA=s64-c-k-c0x00ffffff-no-rj	142.250.74.97	200 OK	2.2 kB
URL yt4.ggpht.com/ytc/APkrFKa1C6pAvPOO97flkmByPXF19uU6LsWufbj4ZgI4HA=s64-c-k-c0x00ffffff-no-rj IP / ASN 142.250.74.97 #15169 GOOGLE Requested byN/A Resource Info File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 64x64, components 3\012- data First Seen2023-09-27 Last Seen2023-09-27 Times Seen1 Size2.2 kB (2189 bytes) MD5e64d1220c5d754be372f0927c00366b0 SHA1015dd7e62f717030ab6a127318f4b5b169e4f966 SHA256f20ece013accdb31b4d8e9c63e48955e9e227260320492b93658986af4b0c46d Certificate Info IssuerGoogle Trust Services LLC Subject.googleusercontent.com Fingerprint25:24:05:0B:D2:5F:DF:ED:3B:BE:B8:47:80:C5:AE:2B:51:94:69:F5 ValidityMon, 04 Sep 2023 08:23:19 GMT - Mon, 27 Nov 2023 08:23:18 GMT HTTP Headers GET /ytc/APkrFKa1C6pAvPOO97flkmByPXF19uU6LsWufbj4ZgI4HA=s64-c-k-c0x00ffffff-no-rj HTTP/1.1 Host: yt4.ggpht.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK access-control-allow-origin: timing-allow-origin: * access-control-expose-headers: Content-Length content-disposition: inline;filename="unnamed.jpg" x-content-type-options: nosniff server: fife content-length: 2189 x-xss-protection: 0 date: Wed, 27 Sep 2023 09:34:44 GMT expires: Thu, 28 Sep 2023 09:34:44 GMT cache-control: public, max-age=86400, no-transform etag: "v964" content-type: image/jpeg vary: Origin age: 0 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	ocsp.pki.goog/gts1c3	142.250.74.131		471 B
URL ocsp.pki.goog/gts1c3 IP / ASN 142.250.74.131 #15169 GOOGLE Requested byN/A Resource Info File typedata First Seen2023-09-26 Last Seen2023-09-27 Times Seen159 Size471 B (471 bytes) MD5c0253495b9450234d02a692781f7d467 SHA1d2d244ab2c8669c0d0739c694d304fcc9c8a7b46 SHA2561875ff3c73d0060fa7d88bbd791a1999e25b8379de7624b507a017c1c7861820 HTTP Headers `POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Wed, 27 Sep 2023 09:34:44 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN`

	GET yt4.ggpht.com/favicon.ico	142.250.74.97	200 OK	307 B
URL yt4.ggpht.com/favicon.ico IP / ASN 142.250.74.97 #15169 GOOGLE Requested byhttps://yt4.ggpht.com/ytc/APkrFKa1C6pAvPOO97flkmByPXF19uU6LsWufbj4ZgI4HA=s64-c-k-c0x00ffffff-no-rj Resource Info File typeMS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data First Seen2023-05-17 Last Seen2025-07-30 Times Seen379 Size307 B (307 bytes) MD572a9e7b9d3b81de2ff9287e4fb279f9a SHA1a86f154180cf216c2032a52b8363eca723d71646 SHA25630c6a3a424fbf02550260997dbb38f543f13637ee5be6a3686d5d50ca4ac59c9 Certificate Info IssuerGoogle Trust Services LLC Subject.googleusercontent.com Fingerprint25:24:05:0B:D2:5F:DF:ED:3B:BE:B8:47:80:C5:AE:2B:51:94:69:F5 ValidityMon, 04 Sep 2023 08:23:19 GMT - Mon, 27 Nov 2023 08:23:18 GMT HTTP Headers `GET /favicon.ico HTTP/1.1 Host: yt4.ggpht.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://yt4.ggpht.com/ytc/APkrFKa1C6pAvPOO97flkmByPXF19uU6LsWufbj4ZgI4HA=s64-c-k-c0x00ffffff-no-rj Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/3 200 OK x-content-type-options: nosniff content-encoding: gzip server: fife content-length: 307 x-xss-protection: 0 date: Tue, 26 Sep 2023 12:15:51 GMT expires: Wed, 27 Sep 2023 12:15:51 GMT cache-control: public, max-age=86400, no-transform last-modified: Tue, 26 Sep 2023 12:15:51 GMT content-type: image/x-icon age: 76734 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000`