Report - plazapiroka.blogspot.com/

Report Overview

Submitted URL
plazapiroka.blogspot.com/
IP
172.217.21.161
ASN
#15169 GOOGLE
Submitted
2023-06-07 02:44:20
Access
public
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
3
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
plazapiroka.blogspot.com	unknown	unknown	No data	No data	481 B	16 kB	172.217.21.161
s.id	134714	2013-08-14	2014-12-04	2023-06-06	510 B	678 B	104.21.54.41
www.kimc.ac.ke	unknown	unknown	2019-04-07	2023-02-05	546 B	0 B	0.0.0.0
ocsp.pki.goog	175	2016-06-13	2018-07-01	2023-06-06	666 B	1.4 kB	142.250.74.131

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-06-07 02:44:03	low	Client IP	Internal IP	ET INFO URL Shortener Service Domain in DNS Lookup (s .id)
2023-06-07 02:44:03	low	Client IP	Internal IP	ET INFO URL Shortener Service Domain in DNS Lookup (s .id)
2023-06-07 02:44:03	low	Client IP	104.21.54.41	ET INFO Observed URL Shortening Service Domain (s .id in TLS SNI)

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (5)

	URL	IP	Response	Size
	ocsp.pki.goog/gts1c3	142.250.74.131		471 B
URL ocsp.pki.goog/gts1c3 IP 142.250.74.131:0 ASN #15169 GOOGLE File type data Size 471 B (471 bytes) Hash aad93a7484c589d44eb6c6c2698e33f4 e1caa8484e2ebd7313045f44dbb952dc330dfcc1 ab73357250e26b1104ed495aebdd7008aec930058f13ff9927ee104f9298a20c HTTP Headers `POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Wed, 07 Jun 2023 02:44:03 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN`

	plazapiroka.blogspot.com/	172.217.21.161		15 kB
URL plazapiroka.blogspot.com/ IP 172.217.21.161:0 ASN #15169 GOOGLE File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (6974) Size 15 kB (14964 bytes) Hash 7aaf78009201d9219fdca17de422bba8 88492fa5e30cec3ff595fe0e13024bfbf452132e c8e73c7e32758068fc9f5fbc8af906b504b0e3a92f5bb8f8519c42ec6862e8c1 HTTP Headers `GET / HTTP/1.1 Host: plazapiroka.blogspot.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK content-type: text/html; charset=UTF-8 expires: Wed, 07 Jun 2023 02:44:03 GMT date: Wed, 07 Jun 2023 02:44:03 GMT cache-control: private, max-age=0 last-modified: Thu, 23 Mar 2023 01:34:28 GMT etag: W/"44cfe47704dde34df34e6aceed04d8e4b539024ec6273a91c0b347eebbfbe2fb" content-encoding: gzip x-content-type-options: nosniff x-xss-protection: 1; mode=block content-length: 14964 server: GSE alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2`

	ocsp.pki.goog/gts1c3	142.250.74.131		471 B
URL ocsp.pki.goog/gts1c3 IP 142.250.74.131:0 ASN #15169 GOOGLE File type data Size 471 B (471 bytes) Hash aad93a7484c589d44eb6c6c2698e33f4 e1caa8484e2ebd7313045f44dbb952dc330dfcc1 ab73357250e26b1104ed495aebdd7008aec930058f13ff9927ee104f9298a20c HTTP Headers `POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Wed, 07 Jun 2023 02:44:04 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN`

	s.id/1BXwQ	104.21.54.41		0 B
URL User Request GET s.id/1BXwQ IP 104.21.54.41:0 ASN #13335 CLOUDFLARENET File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /1BXwQ HTTP/1.1 Host: s.id User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://plazapiroka.blogspot.com/ Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 302 Found date: Wed, 07 Jun 2023 02:44:17 GMT content-length: 0 location: https://www.kimc.ac.ke/layka/kimo/kantano/ome/index/ cache-control: private, max-age=30 strict-transport-security: max-age=15724800; includeSubDomains cf-cache-status: DYNAMIC report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NMB%2F9B5stncZ7iIvhs4brF3vlTgWm1PO8NeTJA%2BMk%2FKd7oxUPuI1B1mD8fHCXFN29e22reSGZ8WC8UluCtsgNc84D%2BbiRdsyK%2FSGq5TadrQOuF67A1nj"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} x-content-type-options: nosniff server: cloudflare cf-ray: 7d358d16099bb52d-OSL X-Firefox-Spdy: h2

	www.kimc.ac.ke/layka/kimo/kantano/ome/index/	0.0.0.0		0 B
URL User Request GET www.kimc.ac.ke/layka/kimo/kantano/ome/index/ IP 0.0.0.0:0 ASN #0 File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /layka/kimo/kantano/ome/index/ HTTP/1.1 Host: www.kimc.ac.ke User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://plazapiroka.blogspot.com/ DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache