{"report_id":"d53ed5b6-e2d9-44ac-b955-434053fe98db","version":6,"status":"done","tags":[],"date":"2025-05-20T10:29:07Z","url":{"schema":"http","addr":"Tr.snapchat.com","fqdn":"tr.snapchat.com","domain":"snapchat.com","tld":"com"},"ip":{"addr":"35.190.43.134","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"tr.snapchat.com/","fqdn":"tr.snapchat.com","domain":"snapchat.com","tld":"com"},"title":"(PNG Image, 1 × 1 pixels)"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-29T10:29:07Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"tr.snapchat.com","ip":{"addr":"35.190.43.134","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2012-02-28","domain_rank":978,"first_seen":"2017-04-26T06:25:03Z","last_seen":"2025-04-20T14:41:48.134061Z","alert_count":0,"request_count":2,"received_data":850,"sent_data":921,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":null,"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"tr.snapchat.com/","fqdn":"tr.snapchat.com","domain":"snapchat.com","tld":"com"},"ip":{"addr":"35.190.43.134","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-05-20T10:28:46.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.snap.com","organization":"Snap Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 23 Jul 2024 00:00:00 GMT","end":"Tue, 22 Jul 2025 23:59:59 GMT"},"fingerprint":{"sha1":"69:38:6B:37:87:1E:18:09:23:F6:0A:2F:28:11:F2:7D:79:B8:AA:8C","sha256":"C0:23:A3:B8:54:33:DB:6A:09:FA:7E:ED:EE:D2:91:33:88:A8:0E:06:3B:76:EF:5A:29:62:6B:9B:28:DF:A0:16"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: tr.snapchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 20 May 2025 10:28:46 GMT\r\naccess-control-allow-origin: *\r\ncache-control: no-cache, no-transform\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-length: 68\r\nx-envoy-upstream-service-time: 0\r\nserver: API Gateway\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":68,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced","md5":"c4a2b870062c2bb98c500bc1526c0498","sha1":"528666ccdb12997358077bc8fcdbfb6b825c7788","sha256":"2aa4fa20701cdd6d8d56046069001186b5267e3ee7d0ef618ad2f4a683723e11","sha512":"2f1a3abcd12125f7ef18d61a960901c0fd6f82dd02ea2b8041859e6d5f0a7f08db17cc110dc6d8a3f7d0d1ba790c4bcca2506d3c60edfeb5cb29433e9f4f762e","ssdeep":"","tlshash":"baa022c32300ac3cca8e8033c0008330f8b8800200332f2c080fb03e0c00a0008882a3","first_seen":"2023-04-05T03:29:14Z","last_seen":"2026-04-03T22:46:59.256726Z","times_seen":1467,"resource_available":true,"data":null}},"time_used":268,"timings":{"blocked":104,"dns":25,"connect":25,"send":0,"wait":58,"receive":1,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tr.snapchat.com/favicon.ico","fqdn":"tr.snapchat.com","domain":"snapchat.com","tld":"com"},"ip":{"addr":"35.190.43.134","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://tr.snapchat.com/","date":"2025-05-20T10:28:47.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.snap.com","organization":"Snap Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 23 Jul 2024 00:00:00 GMT","end":"Tue, 22 Jul 2025 23:59:59 GMT"},"fingerprint":{"sha1":"69:38:6B:37:87:1E:18:09:23:F6:0A:2F:28:11:F2:7D:79:B8:AA:8C","sha256":"C0:23:A3:B8:54:33:DB:6A:09:FA:7E:ED:EE:D2:91:33:88:A8:0E:06:3B:76:EF:5A:29:62:6B:9B:28:DF:A0:16"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: tr.snapchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tr.snapchat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":2053,"data":"{\"signature\":\"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\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 20 May 2025 10:28:47 GMT\r\naccess-control-allow-origin: *\r\ncache-control: no-cache, no-transform\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-length: 68\r\nx-envoy-upstream-service-time: 0\r\nserver: API Gateway\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":68,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced","md5":"c4a2b870062c2bb98c500bc1526c0498","sha1":"528666ccdb12997358077bc8fcdbfb6b825c7788","sha256":"2aa4fa20701cdd6d8d56046069001186b5267e3ee7d0ef618ad2f4a683723e11","sha512":"2f1a3abcd12125f7ef18d61a960901c0fd6f82dd02ea2b8041859e6d5f0a7f08db17cc110dc6d8a3f7d0d1ba790c4bcca2506d3c60edfeb5cb29433e9f4f762e","ssdeep":"","tlshash":"baa022c32300ac3cca8e8033c0008330f8b8800200332f2c080fb03e0c00a0008882a3","first_seen":"2023-04-05T03:29:14Z","last_seen":"2026-04-03T22:46:59.256726Z","times_seen":1467,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}