Report - ptrim.biz/nqjddjptk

Report Overview

Visited public
2023-12-09 01:40:46
Tags
URL
ptrim.biz/nqjddjptk
Finishing URL
ptrim.biz/nqjddjptk
IP / ASN
34.128.82.12
#15169 GOOGLE
Title
ptrim.biz/nqjddjptk

Detections

urlquery

0

Network Intrusion Detection

6

Threat Detection Systems

0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
ptrim.biz	unknown	2022-06-12	2022-06-12 11:17:09	2023-12-06 05:12:58	858 B	801 B	34.128.82.12

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-12-09 01:40:35	medium	Client IP	Internal IP	ET INFO Observed DNS Query to .biz TLD
2023-12-09 01:40:35	medium	Client IP	Internal IP	ET INFO Observed DNS Query to .biz TLD
2023-12-09 01:40:35	medium	Client IP	Internal IP	ET INFO Observed DNS Query to .biz TLD
2023-12-09 01:40:37	medium	Client IP	Internal IP	ET INFO Observed DNS Query to .biz TLD
2023-12-09 01:40:37	medium	Client IP	Internal IP	ET INFO Observed DNS Query to .biz TLD
2023-12-09 01:40:38	medium	Client IP	Internal IP	ET INFO Observed DNS Query to .biz TLD

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (2)

	URL	IP	Response	Size
	ptrim.biz/nqjddjptk	34.128.82.12	200 OK	20 B
URL User Request GET HTTP/1.1 ptrim.biz/nqjddjptk IP 34.128.82.12:80 ASN #15169 GOOGLE File type gzip compressed data, from Unix\012- data Size 20 B (20 bytes) Hash 7029066c27ac6f5ef18d660d5741979a 46c6643f07aa7f6bfe7118de926b86defc5087c4 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2 HTTP Headers `GET /nqjddjptk HTTP/1.1 Host: ptrim.biz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Date: Sat, 09 Dec 2023 01:40:31 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Set-Cookie: btst=be713eb4099cb15140a18c9c844e9e03\|91.90.42.154\|1702086031\|1702086031\|0\|1\|0; path=/; domain=.ptrim.biz; Expires=Thu, 15 Apr 2027 00:00:00 GMT; HttpOnly; SameSite=Lax; snkz=91.90.42.154; path=/; Expires=Thu, 15 Apr 2027 00:00:00 GMT Content-Encoding: gzip`

	ptrim.biz/favicon.ico	34.128.82.12	200 OK	20 B
URL GET HTTP/1.1 ptrim.biz/favicon.ico IP 34.128.82.12:80 ASN #15169 GOOGLE Requested by http://ptrim.biz/nqjddjptk File type gzip compressed data, from Unix\012- data Size 20 B (20 bytes) Hash 7029066c27ac6f5ef18d660d5741979a 46c6643f07aa7f6bfe7118de926b86defc5087c4 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2 HTTP Headers `GET /favicon.ico HTTP/1.1 Host: ptrim.biz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://ptrim.biz/nqjddjptk Cookie: btst=be713eb4099cb15140a18c9c844e9e03\|91.90.42.154\|1702086031\|1702086031\|0\|1\|0; snkz=91.90.42.154 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Date: Sat, 09 Dec 2023 01:40:32 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Set-Cookie: btst=be713eb4099cb15140a18c9c844e9e03\|91.90.42.154\|1702086032\|1702086031\|0\|2\|0; path=/; domain=.ptrim.biz; Expires=Thu, 15 Apr 2027 00:00:00 GMT; HttpOnly; SameSite=Lax; Content-Encoding: gzip`