Report - optusnet-com.blogspot.de/

Report Overview

Visited public
2023-10-31 23:21:17
Tags
URL
optusnet-com.blogspot.de/
Finishing URL
optusnet-com.blogspot.com/
IP / ASN
142.250.74.129
#15169 GOOGLE
Title
optus

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
www.gstatic.com	unknown	2008-02-11	2016-07-26 11:37:06	2023-10-31 06:18:52	446 B	4.2 kB	142.250.74.67
www.blogger.com	8975	1999-06-22	2012-05-22 09:35:03	2023-10-31 05:13:21	441 B	60 kB	216.58.207.233
pastebin.com	25623	2002-09-04	2012-05-20 20:39:30	2023-10-31 07:02:29	413 B	409 B	104.20.68.143
ocsp.pki.goog	175	2016-06-13	2018-07-01 08:43:07	2023-10-31 05:09:09	999 B	2.1 kB	142.250.74.131
optusnet-com.blogspot.de	unknown	unknown	2023-01-12 11:46:01	2023-10-14 00:26:49	758 B	1.3 kB	142.250.74.129
optusnet-com.blogspot.com	unknown	2000-07-31	2022-06-03 13:46:32	2023-10-26 11:15:14	2.0 kB	12 kB	172.217.21.161

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2023-10-31	medium	optusnet-com.blogspot.de/	Singtel Optus
2023-10-27	medium	optusnet-com.blogspot.com/	Singtel Optus
2023-10-31	medium	optusnet-com.blogspot.de/	Singtel Optus
2023-10-27	medium	optusnet-com.blogspot.com/	Singtel Optus
2023-10-27	medium	optusnet-com.blogspot.com/	Singtel Optus
2023-10-27	medium	optusnet-com.blogspot.com/	Singtel Optus
2023-10-27	medium	optusnet-com.blogspot.com/	Singtel Optus

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (6)

	URL	From	Size	First Seen	Last Seen
	www.blogger.com/static/v1/widgets/3737540651-widgets.js	ScriptElement	163 kB	2023-10-30	2023-11-06
Pretty URL www.blogger.com/static/v1/widgets/3737540651-widgets.js IP 216.58.207.233 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-10-30 18:49 Last Seen2023-11-06 04:25 Times Seen850 Hash 4ea44bac705ed408efd4f1c5409f2c26 56d80408130a9d8e21d988323c92eaa58d7849f1 685ee7526028d355549d5bc576073aa927ea34d48a7512b12c077d88a8d24089 Loading...

	optusnet-com.blogspot.com/	ScriptElement	0 B	0001-01-01	2025-05-11
Pretty URL optusnet-com.blogspot.com/ IP 172.217.21.161 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML true Observations First Seen0001-01-01 00:00 Last Seen2025-05-11 17:14 Times Seen4656115 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	optusnet-com.blogspot.com/js/cookienotice.js	ScriptElement	6.5 kB	2023-03-07	2025-05-11
Pretty URL optusnet-com.blogspot.com/js/cookienotice.js IP 172.217.21.161 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02 Last Seen2025-05-11 16:53 Times Seen43886 Hash a705132a2174f88e196ec3610d68faa8 3bad57a48d973a678fec600d45933010f6edc659 068ffe90977f2b5b2dc2ef18572166e85281bd0ecb31c4902464b23db54d2568 Loading...

	optusnet-com.blogspot.com/	ScriptElement	0 B	0001-01-01	2025-05-11
Pretty URL optusnet-com.blogspot.com/ IP 172.217.21.161 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML true Observations First Seen0001-01-01 00:00 Last Seen2025-05-11 17:14 Times Seen4656115 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	optusnet-com.blogspot.com/	ScriptElement	0 B	0001-01-01	2025-05-11
Pretty URL optusnet-com.blogspot.com/ IP 172.217.21.161 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML true Observations First Seen0001-01-01 00:00 Last Seen2025-05-11 17:14 Times Seen4656115 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	www.gstatic.com/external_hosted/clipboardjs/clipboard.min.js	ScriptElement	12 kB	2023-04-05	2025-05-11
Pretty URL www.gstatic.com/external_hosted/clipboardjs/clipboard.min.js IP 142.250.74.67 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-05 03:08 Last Seen2025-05-11 15:21 Times Seen8103 Hash a1a2e5bd3af1cf7d730f15dd7e308a1b 6ab91a37884d5f70808157c5cb6ed7345d8f537a d5ecc1fcccdbc32c37aa7e46793befad6d98ff1a85d1760d732d710faf49a08e Loading...

HTTP Transactions (13)

URL IP Response Size

ocsp.pki.goog/gts1c3

142.250.74.131

472 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
937a55d13936bb7ab12b10e4030f743c
814e9439c126967af26e2d8b085f54f213f76834
f72ac413339a30c01a0bb2c011f19733915e9a11c8317bed6961a588f82dff2b

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Oct 2023 23:20:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

optusnet-com.blogspot.de/

142.250.74.129

302 Found

180 B

URL User Request GET HTTP/2
optusnet-com.blogspot.de/
IP
142.250.74.129:443
ASN
#15169 GOOGLE

Certificate
IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
FingerprintE5:CE:AD:EC:C9:31:39:C3:55:73:BD:95:08:49:F5:A0:14:78:3C:B9
ValidityMon, 09 Oct 2023 08:09:09 GMT - Mon, 01 Jan 2024 08:09:08 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Size
180 B (180 bytes)
Hash
216ca30fbe2a15f9cf014aa7e5459229
34d036c7d4a06f275f5609709bfda694209dc921
b2a69088cf6ca9de223ce679b64b99e19ad3cf27a88b3b47c69b61d9b94d51fc

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Singtel Optus

HTTP Headers

GET / HTTP/1.1
Host: optusnet-com.blogspot.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
location: https://optusnet-com.blogspot.com/
content-type: text/html; charset=UTF-8
content-encoding: gzip
date: Tue, 31 Oct 2023 23:20:59 GMT
expires: Tue, 31 Oct 2023 23:20:59 GMT
cache-control: private, max-age=0
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 180
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

472 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
937a55d13936bb7ab12b10e4030f743c
814e9439c126967af26e2d8b085f54f213f76834
f72ac413339a30c01a0bb2c011f19733915e9a11c8317bed6961a588f82dff2b

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Oct 2023 23:21:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.131

472 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
937a55d13936bb7ab12b10e4030f743c
814e9439c126967af26e2d8b085f54f213f76834
f72ac413339a30c01a0bb2c011f19733915e9a11c8317bed6961a588f82dff2b

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Oct 2023 23:21:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

optusnet-com.blogspot.com/

172.217.21.161

200 OK

3.2 kB

URL User Request GET HTTP/2
optusnet-com.blogspot.com/
IP
172.217.21.161:443
ASN
#15169 GOOGLE

Certificate
IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
FingerprintE5:CE:AD:EC:C9:31:39:C3:55:73:BD:95:08:49:F5:A0:14:78:3C:B9
ValidityMon, 09 Oct 2023 08:09:09 GMT - Mon, 01 Jan 2024 08:09:08 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (4037)
Size
3.2 kB (3198 bytes)
Hash
cf6109fb4ad4c4d44cfdf6df98d1e178
2b887ad5bd9717a51f2ec8bffee2ddffc3786968
320d29d3837feb0fedfc6b345ea26cbd605c3ca8ff0a2efd4393b2b0ab4bc48d

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Singtel Optus

HTTP Headers

GET / HTTP/1.1
Host: optusnet-com.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/html; charset=UTF-8
expires: Tue, 31 Oct 2023 23:21:02 GMT
date: Tue, 31 Oct 2023 23:21:02 GMT
cache-control: private, max-age=0
last-modified: Wed, 24 Feb 2021 09:00:07 GMT
etag: W/"31ac303adcfa0611cd494225a5801ef5d2b5dfc6a85e589868d9f16e03ad80b1"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 3198
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

optusnet-com.blogspot.de/

172.217.21.161

302 Found

179 B

URL User Request GET HTTP/2
optusnet-com.blogspot.de/
IP
172.217.21.161:443
ASN
#15169 GOOGLE

Certificate
IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
FingerprintE5:CE:AD:EC:C9:31:39:C3:55:73:BD:95:08:49:F5:A0:14:78:3C:B9
ValidityMon, 09 Oct 2023 08:09:09 GMT - Mon, 01 Jan 2024 08:09:08 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Size
179 B (179 bytes)
Hash
d97003564d480a3bb3b0a4a44676de27
c82b1b2bf6363c5b2a12b57b2fa20435668f031a
243e62d4f85348466c8616124407eb53a61dc74aa54c787a517db9a25e7535f5

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Singtel Optus

HTTP Headers

GET / HTTP/1.1
Host: optusnet-com.blogspot.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Moved Temporarily
Location: http://optusnet-com.blogspot.com/
Content-Type: text/html; charset=UTF-8
Content-Encoding: gzip
Date: Tue, 31 Oct 2023 23:21:02 GMT
Expires: Tue, 31 Oct 2023 23:21:02 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
X-XSS-Protection: 1; mode=block
Content-Length: 179
Server: GSE

optusnet-com.blogspot.com/js/cookienotice.js

172.217.21.161

200 OK

2.0 kB

URL GET HTTP/3
optusnet-com.blogspot.com/js/cookienotice.js
IP
172.217.21.161:443
ASN
#15169 GOOGLE

Requested by
https://optusnet-com.blogspot.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
FingerprintE5:CE:AD:EC:C9:31:39:C3:55:73:BD:95:08:49:F5:A0:14:78:3C:B9
ValidityMon, 09 Oct 2023 08:09:09 GMT - Mon, 01 Jan 2024 08:09:08 GMT

File type
ASCII text
Size
2.0 kB (2026 bytes)
Hash
a705132a2174f88e196ec3610d68faa8
3bad57a48d973a678fec600d45933010f6edc659
068ffe90977f2b5b2dc2ef18572166e85281bd0ecb31c4902464b23db54d2568

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Singtel Optus

HTTP Headers

GET /js/cookienotice.js HTTP/1.1
Host: optusnet-com.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://optusnet-com.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 2026
date: Tue, 31 Oct 2023 23:21:03 GMT
expires: Tue, 07 Nov 2023 23:21:03 GMT
cache-control: public, max-age=604800
last-modified: Tue, 31 Oct 2023 16:56:08 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.gstatic.com/external_hosted/clipboardjs/clipboard.min.js

142.250.74.67

200 OK

3.5 kB

URL GET HTTP/2
www.gstatic.com/external_hosted/clipboardjs/clipboard.min.js
IP
142.250.74.67:443
ASN
#15169 GOOGLE

Requested by
https://optusnet-com.blogspot.com/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintBE:D3:D2:0A:C4:57:FB:0B:D7:17:48:C8:AB:52:49:39:3E:E9:3C:60
ValidityMon, 09 Oct 2023 08:10:32 GMT - Mon, 01 Jan 2024 08:10:31 GMT

File type
Unicode text, UTF-8 text, with very long lines (10473)
Size
3.5 kB (3475 bytes)
Hash
158013acb7e269a3dbe18de855656c97
08fa355584fc849539b3f04589ae6f61eb4a7d98
92e40dc4bbb485a182b796c58e6da7974cb8a6a84fdb4548ace3b85c991f0f94

HTTP Headers

GET /external_hosted/clipboardjs/clipboard.min.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://optusnet-com.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 3475
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 31 Oct 2023 23:21:03 GMT
expires: Tue, 31 Oct 2023 23:21:03 GMT
cache-control: public, max-age=0
last-modified: Thu, 20 Jul 2023 22:48:00 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

www.blogger.com/static/v1/widgets/3737540651-widgets.js

216.58.207.233

200 OK

59 kB

URL GET HTTP/2
www.blogger.com/static/v1/widgets/3737540651-widgets.js
IP
216.58.207.233:443
ASN
#15169 GOOGLE

Requested by
https://optusnet-com.blogspot.com/
Certificate
IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint3F:08:9F:49:DB:C6:54:6F:4F:5E:71:19:FC:42:98:33:57:FD:36:44
ValidityMon, 09 Oct 2023 08:03:32 GMT - Mon, 01 Jan 2024 08:03:31 GMT

File type
ASCII text, with very long lines (2215)
Size
59 kB (58997 bytes)
Hash
4ea44bac705ed408efd4f1c5409f2c26
56d80408130a9d8e21d988323c92eaa58d7849f1
685ee7526028d355549d5bc576073aa927ea34d48a7512b12c077d88a8d24089

HTTP Headers

GET /static/v1/widgets/3737540651-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://optusnet-com.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 58997
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 30 Oct 2023 02:17:21 GMT
expires: Tue, 29 Oct 2024 02:17:21 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 30 Oct 2023 01:51:38 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 162222
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

optusnet-com.blogspot.com/

172.217.21.161

200 OK

178 B

URL User Request GET HTTP/2
optusnet-com.blogspot.com/
IP
172.217.21.161:443
ASN
#15169 GOOGLE

Certificate
IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
FingerprintE5:CE:AD:EC:C9:31:39:C3:55:73:BD:95:08:49:F5:A0:14:78:3C:B9
ValidityMon, 09 Oct 2023 08:09:09 GMT - Mon, 01 Jan 2024 08:09:08 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Size
178 B (178 bytes)
Hash
518c57c005c1443577ac1ddf84f9aaa5
72f4fff2e940040dfe4dbfdfc5832f70b2844b0f
dc291b17deac6d2886f6e3d5317fb610cddf5a5c25485ef3a7cf3b0bd395f7c6

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Singtel Optus

HTTP Headers

GET / HTTP/1.1
Host: optusnet-com.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Location: https://optusnet-com.blogspot.com/
Content-Type: text/html; charset=UTF-8
Content-Encoding: gzip
Date: Tue, 31 Oct 2023 23:21:03 GMT
Expires: Tue, 31 Oct 2023 23:21:03 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
X-XSS-Protection: 1; mode=block
Content-Length: 178
Server: GSE

optusnet-com.blogspot.com/

172.217.21.161

200 OK

3.2 kB

URL User Request GET HTTP/2
optusnet-com.blogspot.com/
IP
172.217.21.161:443
ASN
#15169 GOOGLE

Certificate
IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
FingerprintE5:CE:AD:EC:C9:31:39:C3:55:73:BD:95:08:49:F5:A0:14:78:3C:B9
ValidityMon, 09 Oct 2023 08:09:09 GMT - Mon, 01 Jan 2024 08:09:08 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (4037)
Size
3.2 kB (3198 bytes)
Hash
cf6109fb4ad4c4d44cfdf6df98d1e178
2b887ad5bd9717a51f2ec8bffee2ddffc3786968
320d29d3837feb0fedfc6b345ea26cbd605c3ca8ff0a2efd4393b2b0ab4bc48d

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Singtel Optus

HTTP Headers

GET / HTTP/1.1
Host: optusnet-com.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/html; charset=UTF-8
expires: Tue, 31 Oct 2023 23:21:03 GMT
date: Tue, 31 Oct 2023 23:21:03 GMT
cache-control: private, max-age=0
last-modified: Wed, 24 Feb 2021 09:00:07 GMT
etag: W/"31ac303adcfa0611cd494225a5801ef5d2b5dfc6a85e589868d9f16e03ad80b1"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 3198
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

optusnet-com.blogspot.com/favicon.ico

172.217.21.161

200 OK

412 B

URL GET HTTP/3
optusnet-com.blogspot.com/favicon.ico
IP
172.217.21.161:443
ASN
#15169 GOOGLE

Requested by
https://optusnet-com.blogspot.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
FingerprintE5:CE:AD:EC:C9:31:39:C3:55:73:BD:95:08:49:F5:A0:14:78:3C:B9
ValidityMon, 09 Oct 2023 08:09:09 GMT - Mon, 01 Jan 2024 08:09:08 GMT

File type
MS Windows icon resource - 2 icons, 32x32, 8 bits/pixel, 16x16, 8 bits/pixel\012- data
Size
412 B (412 bytes)
Hash
59a0c7b6e4848ccdabcea0636efda02b
30ef5c54b8bbc3487ea2b4c45cd11ea2932e4340
a1495da3cf3db37bf105a12658636ff628fee7b73975b9200049af7747e60b1f

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Singtel Optus

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: optusnet-com.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://optusnet-com.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-type: image/x-icon; charset=UTF-8
expires: Tue, 31 Oct 2023 23:21:03 GMT
date: Tue, 31 Oct 2023 23:21:03 GMT
cache-control: private, max-age=86400
last-modified: Wed, 24 Feb 2021 09:00:07 GMT
etag: W/"31ac303adcfa0611cd494225a5801ef5d2b5dfc6a85e589868d9f16e03ad80b1"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 412
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

pastebin.com/raw/RD9kQSUh

104.20.68.143

200 OK

0 B

URL GET HTTP/2
pastebin.com/raw/RD9kQSUh
IP
104.20.68.143:443
ASN
#13335 CLOUDFLARENET

Requested by
https://optusnet-com.blogspot.com/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint55:C8:82:61:30:05:42:80:DB:47:5E:D0:66:B5:DF:AC:14:5B:19:6F
ValidityWed, 17 May 2023 00:00:00 GMT - Thu, 16 May 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /raw/RD9kQSUh HTTP/1.1
Host: pastebin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://optusnet-com.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 31 Oct 2023 23:21:03 GMT
content-type: text/plain; charset=utf-8
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 1;mode=block
cache-control: public, max-age=1801
cf-cache-status: EXPIRED
last-modified: Mon, 30 Oct 2023 03:28:04 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 81efa1d33b6db51b-OSL
content-encoding: gzip
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (6)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (13)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL