35.231.84.236📋 Copy

# INTELLIGENCE BRIEFING: IP 35.231.84.236

## Executive Summary

IP 35.231.84.236 is a Google Cloud infrastructure endpoint with low-risk characteristics. The address belongs to the GOOGLE-CLOUD organization (ASN 396982, CIDR 35.208.0.0/12) and operates as a web server hosting panel.capicraftt.lat. No malicious threat indicators, campaign associations, or blacklist entries were detected. The subnet maintains clean classification with zero abuse density.

## Technical Profile

• Risk Score: 30 (Low Risk)
• Provider: Google Cloud
• Location: Moncks Corner, SC, US
• Infrastructure Type: Cloud/Web Server
• Open Services: HTTP (80, 8080), HTTPS (443), SSH (22)
• TLS Certificate: Let's Encrypt issued for panel.capicraftt.lat (CN=YE1, O=Let's Encrypt, C=US)

## Threat Assessment

• Abuse Confidence: None detected
• Blacklist Status: Clean (0 entries)
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Campaign Associations: None

## Historical Observations

The IP has accumulated 23 historical observations. Recent signals (August 13, 2026) indicate:

• HTTP/2 responses with nginx server banner
• Standard security headers including X-Frame-Options: DENY and Referrer-Policy
• No Content-Security-Policy headers present
• Geolocation signals from Comcast network hops (New York, US)
• Network classification consistently reported as "clean" with 0 abuse density in the /24 subnet

## Network Relationships

• DNS Associations: 236.84.231.35.bc.googleusercontent.com (repeated associations)
• Network Affiliation: Multiple links to GOOGLE-CLOUD network
• Subnet Environment: 35.231.84.0/24 — 1 active sibling, 0 threat siblings

## Control Plane

• Route Stability: Not stable (0 route changes in 30d)
• DNSSEC: Valid
• CAAA Records: Present
• DNSBL Listings: 0

## Operational Notes

• Reverse DNS resolves to bc.googleusercontent.com hostname
• Forward DNS confirmation: Valid
• SPF and DMARC records configured for domain
• Geolocation validation flagged as implausible (distance anomalies noted)
• RTT measurements show 42-45ms average with validation concerns

## SOC Recommendations

No immediate defensive actions are required based on current risk profile. The IP operates within legitimate cloud infrastructure. However, SOC analysts should:

• Monitor for changes in certificate domains or TLS configurations
• Verify that panel.capicraftt.lat resolves to expected endpoints
• Review SSH access patterns if port 22 traffic is observed

Classification: LOW RISK — Routine monitoring recommended

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.