Network Analysis
Name | Response | Post-Analysis Lookup |
---|---|---|
www.google.com | 142.250.76.132 |
GET
200
https://www.google.com/
REQUEST
RESPONSE
BODY
GET / HTTP/1.1
Host: www.google.com
Connection: Close
HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 02:48:23 GMT
Expires: -1
Cache-Control: private, max-age=0
Content-Type: text/html; charset=ISO-8859-1
Cross-Origin-Opener-Policy-Report-Only: same-origin-allow-popups; report-to="gws"
Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info."
Server: gws
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: 1P_JAR=2022-11-29-02; expires=Thu, 29-Dec-2022 02:48:23 GMT; path=/; domain=.google.com; Secure
Set-Cookie: AEC=AakniGOwjt-RLzuEPWMn5K43wuPU6nDssoEeiyHj-4tPwUlVo96b_lY-Hg; expires=Sun, 28-May-2023 02:48:23 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
Set-Cookie: NID=511=onYuq9z_2t6G3f5lfinIkz5HcZZ9BhNvac5eBR9BYD_ETc2pghDYNWrkW2kTL0TvDYEPbqBkpuNg1b44lxdFezW6xFshEOb5RzO8BzJ9hhshe_B1bnCvxB_LwkVqF7hi_6vC1lyxnoEcJCsTuyFXHWVC6Q_nh6qtI4fBs_6XbwM; expires=Wed, 31-May-2023 02:48:23 GMT; path=/; domain=.google.com; HttpOnly
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
Accept-Ranges: none
Vary: Accept-Encoding
Connection: close
Transfer-Encoding: chunked
ICMP traffic
No ICMP traffic performed.
IRC traffic
No IRC requests performed.
Suricata Alerts
Flow | SID | Signature | Category |
---|---|---|---|
TCP 192.168.56.103:49162 -> 142.251.220.4:443 | 906200054 | SSLBL: Malicious JA3 SSL-Client Fingerprint detected (Tofsee) | undefined |
Suricata TLS
Flow | Issuer | Subject | Fingerprint |
---|---|---|---|
TLSv1 192.168.56.103:49162 142.251.220.4:443 |
C=US, O=Google Trust Services LLC, CN=GTS CA 1C3 | CN=www.google.com | 78:c8:75:67:11:10:cc:4e:f6:7a:ae:7c:09:54:a1:f7:44:d8:18:e0 |
Snort Alerts
No Snort Alerts