| nocodeform.io/assets/logo.png |  104.21.84.201 | 200 OK | 19 kB |
URL GET HTTP/3nocodeform.io/assets/logo.png IP104.21.84.201:443
Requested byhttps://nocodeform.io/f/66179998f12d66538471e6a1 CertificateIssuerCloudflare, Inc. Subjectnocodeform.io FingerprintC4:D1:4A:DE:AC:14:A1:4A:75:D7:25:0D:05:D2:56:27:1C:64:86:17 ValidityWed, 21 Feb 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typePNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced Hashf2aa8fb62aad88f711e4bde928703e20 f058796691a84ca9c2a8d43fd0c5dfb9fda6958b d4c969e8598b897b8e45b25e7a68beec4a837445c093e3c4c7ad14470176340a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/logo.png HTTP/1.1
Host: nocodeform.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nocodeform.io/f/66179998f12d66538471e6a1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 13:56:49 GMT
content-type: image/png
content-length: 18846
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
content-disposition: inline; filename="logo.png"
etag: W/"d4c969e8598b897b8e45b25e7a68beec4a837445c093e3c4c7ad14470176340a"
strict-transport-security: max-age=63072000
x-matched-path: /assets/logo.png
x-vercel-cache: HIT
x-vercel-id: arn1::chmgv-1713107235689-123ea444fad2
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZCNEKjqRNS4GNgw4xDmQbW6nE%2BOszeWZZ1dVOrmyqCyfZdXAsBNP6Plc8LBwqXeTD78D5IRWejkvOuukB1zK8sEbVEhNrBbA7oBn8bIw7Bbde53v9%2F6qUPB97MUs9ESo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a71410b88156aa-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.googletagmanager.com/gtag/js?id=G-84YNES42L1 |  142.250.74.168 | 200 OK | 93 kB |
URL GET HTTP/2www.googletagmanager.com/gtag/js?id=G-84YNES42L1 IP142.250.74.168:443
Requested byhttps://nocodeform.io/f/66179998f12d66538471e6a1 CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintFC:B1:16:E0:D8:F3:2B:F3:AB:33:E5:E1:23:57:F4:48:66:FD:4D:52 ValidityMon, 08 Apr 2024 06:34:55 GMT - Mon, 01 Jul 2024 06:34:54 GMT
File typeJavaScript source, ASCII text, with very long lines (3034) Hash658e8803dc91eb6a5d10b2b17aed0fb7 47e97e3c53e19e65443551563cda96a44734d723 bbb7a5cca8997fb0b75c56ca243a9b2a11b4e61c834cf3dabe1cbffa7a7563fe
GET /gtag/js?id=G-84YNES42L1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nocodeform.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 13:56:49 GMT
expires: Fri, 26 Apr 2024 13:56:49 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 92854
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| rsms.me/inter/inter.css | 104.21.234.235 | 200 OK | 346 kB |
IP104.21.234.235:443
Requested byhttps://nocodeform.io/f/66179998f12d66538471e6a1 CertificateIssuerLet's Encrypt Subjectrsms.me Fingerprint50:5A:A9:41:05:90:1B:67:37:D9:4D:C6:CC:FC:1B:E5:5A:5E:72:88 ValidityThu, 25 Apr 2024 07:54:14 GMT - Wed, 24 Jul 2024 07:54:13 GMT
Size346 kB (346254 bytes) Hashc64a4ac8b3294c33af995b611a01ea33 80299860a6975cdbc960e183ab2f43fcb3535671 8fedfb7def1421aa9d58d1732be7164e33eec27b9c87193e010b9ddaa67b6a18
GET /inter/inter.css HTTP/1.1
Host: rsms.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nocodeform.io/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 13:56:49 GMT
content-type: text/css; charset=utf-8
x-origin-cache: HIT
last-modified: Mon, 25 Mar 2024 16:53:19 GMT
access-control-allow-origin: *
etag: W/"6601abff-1b8d"
expires: Sat, 06 Apr 2024 00:44:13 GMT
cache-control: max-age=14400
x-proxy-cache: MISS
x-github-request-id: 807C:212527:7F7EDE:814CCD:6601ACC9
via: 1.1 varnish
age: 330
x-served-by: cache-lcy-eglc8600069-LCY
x-cache: HIT
x-cache-hits: 1
x-timer: S1711385973.030006,VS0,VE1
vary: Accept-Encoding
x-fastly-request-id: c5f3636a9897855473809791b4ae05c198d09011
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dH1YFEb9wEpPpxOXW4AjhQZBfn9jCDiEKUC%2BKYFK16%2BSBoC%2BbyPuaHCq0TwSaDHXuqrIN2urlDEYlJvypdH9KJq4jWqi49%2B18bv8su%2FPNjISIFl3KML59hxr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a714121931950e-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| nocodeform.io/api/auth/session | 104.21.84.201 | 200 OK | 2 B |
URL GET HTTP/3nocodeform.io/api/auth/session IP104.21.84.201:443
Requested byhttps://nocodeform.io/f/66179998f12d66538471e6a1 CertificateIssuerCloudflare, Inc. Subjectnocodeform.io FingerprintC4:D1:4A:DE:AC:14:A1:4A:75:D7:25:0D:05:D2:56:27:1C:64:86:17 ValidityWed, 21 Feb 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
Hash99914b932bd37a50b983c5e7c90ae93b bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /api/auth/session HTTP/1.1
Host: nocodeform.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nocodeform.io/f/66179998f12d66538471e6a1
DNT: 1
Connection: keep-alive
Cookie: _ga_84YNES42L1=GS1.1.1714139809.1.0.1714139809.0.0.0; _ga=GA1.1.1967092579.1714139810
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 13:56:49 GMT
content-type: application/json; charset=utf-8
content-length: 2
age: 0
cache-control: public, max-age=0, must-revalidate
etag: "2-vyGp6PvFo4RvsFtPoIWeCReyIC8"
set-cookie: __Host-next-auth.csrf-token=392fa7ced5ef1942aca1b9d659ce87ed1f89fc84d5e6d4ec8772b05bee9e384f%7Caab328e841e97aebf76976b1079830e6f7b108f1bad7cd83e31de1396d23ef63; Path=/; HttpOnly; Secure; SameSite=Lax
__Secure-next-auth.callback-url=https%3A%2F%2Fnocodeform.io; Path=/; Secure; SameSite=Lax
strict-transport-security: max-age=63072000
x-matched-path: /api/auth/[...nextauth]
x-powered-by: nocodeform.io
x-vercel-cache: MISS
x-vercel-id: arn1::iad1::d58lc-1714139809785-93f566474eeb
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wrKUKBMVumN1IhQ5oZUeMkZA4l2yD1pK7UNZrFvw9Jj2bj%2FbEDxtNJA9sHMV7I3kixkcOZdiLN1t6dj9yA8PiWkkIXK020kshQJJDUNF4zBavBESt%2FXP58rhO%2F0AUtEy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a71412eb8156aa-OSL
alt-svc: h3=":443"; ma=86400
|
|
| nocodeform.io/favicon-16x16.png | 104.21.84.201 | 200 OK | 961 B |
URL GET HTTP/3nocodeform.io/favicon-16x16.png IP104.21.84.201:443
Requested byhttps://nocodeform.io/f/66179998f12d66538471e6a1 CertificateIssuerCloudflare, Inc. Subjectnocodeform.io FingerprintC4:D1:4A:DE:AC:14:A1:4A:75:D7:25:0D:05:D2:56:27:1C:64:86:17 ValidityWed, 21 Feb 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typePNG image data, 16 x 16, 8-bit colormap, non-interlaced Hashda1fa045f6dd6db952c543291ac0603c 205b6cbcc448bf4023574f6aede8d1b8ad392d07 36b35ac57b98fd1232f5426deacace17e913a4ca7d8e01a69b7db2e9fde6769e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon-16x16.png HTTP/1.1
Host: nocodeform.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nocodeform.io/f/66179998f12d66538471e6a1
Cookie: _ga_84YNES42L1=GS1.1.1714139809.1.0.1714139809.0.0.0; _ga=GA1.1.1967092579.1714139810; __Host-next-auth.csrf-token=392fa7ced5ef1942aca1b9d659ce87ed1f89fc84d5e6d4ec8772b05bee9e384f%7Caab328e841e97aebf76976b1079830e6f7b108f1bad7cd83e31de1396d23ef63; __Secure-next-auth.callback-url=https%3A%2F%2Fnocodeform.io
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 13:56:49 GMT
content-type: image/png
content-length: 961
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
content-disposition: inline; filename="favicon-16x16.png"
etag: W/"36b35ac57b98fd1232f5426deacace17e913a4ca7d8e01a69b7db2e9fde6769e"
strict-transport-security: max-age=63072000
x-matched-path: /favicon-16x16.png
x-vercel-cache: HIT
x-vercel-id: arn1::js7f7-1712820060597-387c5de6df5c
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2%2FdNhNNexQObwQHp8Tl8bE2TmW09pSPQcYYp%2FU30GEuIigUk8Hs1Qz10bAdzTq5%2By2wt9IyeKjx0bgKQGBvK5ofDq6yI6P%2F6DO%2FG1Otit09k9Hl8y3JiEfS%2B5GeEhD5z"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a714141d8356aa-OSL
alt-svc: h3=":443"; ma=86400
|
|
| nocodeform.io/apple-touch-icon.png | 104.21.84.201 | 200 OK | 6.0 kB |
URL GET HTTP/3nocodeform.io/apple-touch-icon.png IP104.21.84.201:443
Requested byhttps://nocodeform.io/f/66179998f12d66538471e6a1 CertificateIssuerCloudflare, Inc. Subjectnocodeform.io FingerprintC4:D1:4A:DE:AC:14:A1:4A:75:D7:25:0D:05:D2:56:27:1C:64:86:17 ValidityWed, 21 Feb 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typePNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced Hash0bb0f161dbf8508acca71c7a3c5ad98e f75d09f0ceec994406399128ac830cd0681c9375 3641b7cb8d5d19cde3d323e57fe4d89bc6fe176083eeb290f52f30973843106b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /apple-touch-icon.png HTTP/1.1
Host: nocodeform.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nocodeform.io/f/66179998f12d66538471e6a1
Cookie: _ga_84YNES42L1=GS1.1.1714139809.1.0.1714139809.0.0.0; _ga=GA1.1.1967092579.1714139810; __Host-next-auth.csrf-token=392fa7ced5ef1942aca1b9d659ce87ed1f89fc84d5e6d4ec8772b05bee9e384f%7Caab328e841e97aebf76976b1079830e6f7b108f1bad7cd83e31de1396d23ef63; __Secure-next-auth.callback-url=https%3A%2F%2Fnocodeform.io
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 13:56:50 GMT
content-type: image/png
content-length: 6045
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
content-disposition: inline; filename="apple-touch-icon.png"
etag: W/"3641b7cb8d5d19cde3d323e57fe4d89bc6fe176083eeb290f52f30973843106b"
strict-transport-security: max-age=63072000
x-matched-path: /apple-touch-icon.png
x-vercel-cache: HIT
x-vercel-id: arn1::prkzs-1714088498565-a46707e4b5b7
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=d57Vrz6jDN7aEvDtMgzsXPtgEvYBVfwYc7aBhYlSWt4sfzC9Uc0tOgTM1gbJxaCPmH4CRDrbBhorI2dFRnkLyj8%2BlXbnGt%2BURdmG57GDzPbRwFHC8BqqOIrQydD6p1jU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a714141d8056aa-OSL
alt-svc: h3=":443"; ma=86400
|
|
| nocodeform.io/_next/static/chunks/main-f7f8bb0ee4c6c4bf995b.js | 104.21.84.201 | 200 OK | 28 kB |
URL GET HTTP/3nocodeform.io/_next/static/chunks/main-f7f8bb0ee4c6c4bf995b.js IP104.21.84.201:443
Requested byhttps://nocodeform.io/f/66179998f12d66538471e6a1 CertificateIssuerCloudflare, Inc. Subjectnocodeform.io FingerprintC4:D1:4A:DE:AC:14:A1:4A:75:D7:25:0D:05:D2:56:27:1C:64:86:17 ValidityWed, 21 Feb 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hashb38fb31b8e087e24d22d70761f2596d7 b3b4c519c5124651bf4510d483d16e0a24010a0f 718ca910142ba51a5be509a5e66606e423fed768e81270f5603bbdf5c75646a8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/main-f7f8bb0ee4c6c4bf995b.js HTTP/1.1
Host: nocodeform.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nocodeform.io/f/66179998f12d66538471e6a1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 13:56:49 GMT
content-type: application/javascript; charset=utf-8
age: 703788
cache-control: public, max-age=31536000, immutable
cf-bgj: minify
access-control-allow-origin: *
content-disposition: inline; filename="main-f7f8bb0ee4c6c4bf995b.js"
etag: W/"718ca910142ba51a5be509a5e66606e423fed768e81270f5603bbdf5c75646a8"
strict-transport-security: max-age=63072000
x-matched-path: /_next/static/chunks/main-f7f8bb0ee4c6c4bf995b.js
x-vercel-cache: HIT
x-vercel-id: arn1::5zk7b-1713436021708-e1f4b162946a
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aacpPG1TRF0e6KbbFsBa1V1FcJp7%2BIdP0u7CT8RL4l8vJalI991hncbyyeUPdGZsXYlGKFHiaj2uiOnQ2UNo5rO6zHV2ZHREKNgn59hue6NGiGCLbpdDQjuXYFWnQwxB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a71410a87056aa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| nocodeform.io/_next/static/css/529a795814b5ff3305a4.css | 104.21.84.201 | 200 OK | 54 kB |
URL GET HTTP/3nocodeform.io/_next/static/css/529a795814b5ff3305a4.css IP104.21.84.201:443
Requested byhttps://nocodeform.io/f/66179998f12d66538471e6a1 CertificateIssuerCloudflare, Inc. Subjectnocodeform.io FingerprintC4:D1:4A:DE:AC:14:A1:4A:75:D7:25:0D:05:D2:56:27:1C:64:86:17 ValidityWed, 21 Feb 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeASCII text, with very long lines (54131), with no line terminators Hash603dd27a611fb1ca7af23d49737340f5 38515796b5c6e91228c7153bb59997495667858d 672661fd11bb5e546bc7bd815408eb270a658e57adf2a33d50efca825554cacd
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/css/529a795814b5ff3305a4.css HTTP/1.1
Host: nocodeform.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nocodeform.io/f/66179998f12d66538471e6a1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 13:56:49 GMT
content-type: text/css; charset=utf-8
age: 8048296
cache-control: public, max-age=31536000, immutable
cf-bgj: minify
access-control-allow-origin: *
content-disposition: inline; filename="529a795814b5ff3305a4.css"
etag: W/"14e5de32954dd77263f463e87b1efdcd5435fc52bdcd4d555391c160c5a6fe4b"
strict-transport-security: max-age=63072000
x-matched-path: /_next/static/css/529a795814b5ff3305a4.css
x-vercel-cache: HIT
x-vercel-id: arn1::gcr94-1706091512994-233aa9520262
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aNpblHIQyjUMI8dV9tAAIuMvfaBqjv%2FqsNT4inVImVhQe8A2SdXf4tTr8tr7TzpfWL%2Bj48j39R1doxoF%2FDvaDVoZQGA5v82NGgKvoQg7y3AjroJpbRhjKNRFdX6duU20"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a71410a86756aa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| nocodeform.io/_next/static/chunks/519-ca2f19382f10defc38a2.js | 104.21.84.201 | 200 OK | 34 kB |
URL GET HTTP/3nocodeform.io/_next/static/chunks/519-ca2f19382f10defc38a2.js IP104.21.84.201:443
Requested byhttps://nocodeform.io/f/66179998f12d66538471e6a1 CertificateIssuerCloudflare, Inc. Subjectnocodeform.io FingerprintC4:D1:4A:DE:AC:14:A1:4A:75:D7:25:0D:05:D2:56:27:1C:64:86:17 ValidityWed, 21 Feb 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (34328), with no line terminators Hashf5e5308de3a560e3e933e87843395579 b620d9c3503f55fa62af3d7342cfa58e0677a6af 9d4f48192666a86d3997a3990cef6b02b9f0f3d02051e84ac4dc59d148a929cb
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/519-ca2f19382f10defc38a2.js HTTP/1.1
Host: nocodeform.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nocodeform.io/f/66179998f12d66538471e6a1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 13:56:49 GMT
content-type: application/javascript; charset=utf-8
age: 51311
cache-control: public, max-age=31536000, immutable
cf-bgj: minify
access-control-allow-origin: *
content-disposition: inline; filename="519-ca2f19382f10defc38a2.js"
etag: W/"9d4f48192666a86d3997a3990cef6b02b9f0f3d02051e84ac4dc59d148a929cb"
strict-transport-security: max-age=63072000
x-matched-path: /_next/static/chunks/519-ca2f19382f10defc38a2.js
x-vercel-cache: HIT
x-vercel-id: arn1::prkzs-1714088498022-a7efc6f13a32
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=K0InMA1j5XG0nXcBHFMHaetj9NxDKk2jn1h50fa6QHYgpKJ6tvG842oeybVT%2F2bEgcJSn%2B9PmWNO6uiqkLcfXsnMJQx6%2ButPcSzjhEn1%2BDaytLS%2FdOkb7QUCl3DTRJ%2Fc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a71410a87656aa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| nocodeform.io/_next/static/jnUPDMhm7YJHC1jhmw-Rq/_ssgManifest.js | 104.21.84.201 | 200 OK | 244 B |
URL GET HTTP/3nocodeform.io/_next/static/jnUPDMhm7YJHC1jhmw-Rq/_ssgManifest.js IP104.21.84.201:443
Requested byhttps://nocodeform.io/f/66179998f12d66538471e6a1 CertificateIssuerCloudflare, Inc. Subjectnocodeform.io FingerprintC4:D1:4A:DE:AC:14:A1:4A:75:D7:25:0D:05:D2:56:27:1C:64:86:17 ValidityWed, 21 Feb 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hash3a3ca0e4cde34a002fc20d4182c46a7e 8cfec99941624285427a1d2b2c4b57b2299571c4 eaf4b06727861688d1fb67e1f397dc4e2d0cace688d54d6c3c556604bbffa031
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/jnUPDMhm7YJHC1jhmw-Rq/_ssgManifest.js HTTP/1.1
Host: nocodeform.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nocodeform.io/f/66179998f12d66538471e6a1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 13:56:49 GMT
content-type: application/javascript; charset=utf-8
age: 429035
cache-control: public, max-age=31536000, immutable
cf-bgj: minify
access-control-allow-origin: *
content-disposition: inline; filename="_ssgManifest.js"
etag: W/"ffad5b69b4dd1021d82fa9f55baefb311d7e55594a6d25cf447e5663cc31af33"
strict-transport-security: max-age=63072000
x-matched-path: /_next/static/jnUPDMhm7YJHC1jhmw-Rq/_ssgManifest.js
x-vercel-cache: HIT
x-vercel-id: arn1::zhslm-1713710774621-254a348c17b8
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hyNsO1M4vZptQxajJtp9r%2BhIGiVv68P0B3KSUwNB%2BM3mxyII79jZY9wzFr1UZA3mlqtS2bkWrQ%2F1nqsdoSwV0zW9E2NQxdNmZys%2BUO4%2FPDocgoKtDTOrQ%2FIlu1uIyAwa"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a71410b87f56aa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| rsms.me/inter/font-files/InterVariable.woff2?v=4.0 | 104.21.234.235 | 200 OK | 346 kB |
URL GET HTTP/3rsms.me/inter/font-files/InterVariable.woff2?v=4.0 IP104.21.234.235:443
Requested byhttps://nocodeform.io/f/66179998f12d66538471e6a1 CertificateIssuerLet's Encrypt Subjectrsms.me Fingerprint50:5A:A9:41:05:90:1B:67:37:D9:4D:C6:CC:FC:1B:E5:5A:5E:72:88 ValidityThu, 25 Apr 2024 07:54:14 GMT - Wed, 24 Jul 2024 07:54:13 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 345588, version 4.0 Size346 kB (345588 bytes) Hash499fcada6ddb2c38718c2c16a190d639 9ef5d7d28925b9e0213f67b8105870e0afade711 8af7bd5b545567adffb3dfceb5bedb353a522d7bf1b3a2b8af7b6064156babc0
GET /inter/font-files/InterVariable.woff2?v=4.0 HTTP/1.1
Host: rsms.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://nocodeform.io
DNT: 1
Connection: keep-alive
Referer: https://rsms.me/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 13:56:49 GMT
content-type: font/woff2
content-length: 345588
x-origin-cache: HIT
last-modified: Mon, 25 Mar 2024 16:53:19 GMT
access-control-allow-origin: *
etag: "6601abff-545f4"
expires: Wed, 17 Apr 2024 03:10:16 GMT
cache-control: max-age=2678400
x-proxy-cache: HIT
x-github-request-id: 2846:0E80:89CD03F:8C1D422:6601ACBC
via: 1.1 varnish
x-served-by: cache-lcy-eglc8600075-LCY
x-cache: HIT
x-cache-hits: 1
x-timer: S1711393594.654565,VS0,VE2
vary: Accept-Encoding
x-fastly-request-id: efca1e257a0e5ff7b65f68856633bd73c97f8d09
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZXDhZKnFgo2a4%2B6AiCHiZfjlwgSBjUkMFWuylQtOxABMRJQs%2F2pWZGDgPOBnvKhjthxrNc61XrriYNkvZifsJtolGaXSV1KnZLLxBjjq6uU7UkZTm0VuQanU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a714133a0f650f-LHR
alt-svc: h3=":443"; ma=86400
|
|
| nocodeform.io/_next/static/jnUPDMhm7YJHC1jhmw-Rq/_buildManifest.js | 104.21.84.201 | 200 OK | 5.3 kB |
URL GET HTTP/3nocodeform.io/_next/static/jnUPDMhm7YJHC1jhmw-Rq/_buildManifest.js IP104.21.84.201:443
Requested byhttps://nocodeform.io/f/66179998f12d66538471e6a1 CertificateIssuerCloudflare, Inc. Subjectnocodeform.io FingerprintC4:D1:4A:DE:AC:14:A1:4A:75:D7:25:0D:05:D2:56:27:1C:64:86:17 ValidityWed, 21 Feb 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeASCII text, with very long lines (5543), with no line terminators Hashd41cd3bb2743b84e4d510db32ea5f8dc ba354c28bff61230d610940a92b11d8ab413a7b5 863f234268e8451b763b18bd2867776d95d770e2e87ac4807cbff13f346c61ef
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/jnUPDMhm7YJHC1jhmw-Rq/_buildManifest.js HTTP/1.1
Host: nocodeform.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nocodeform.io/f/66179998f12d66538471e6a1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 13:56:49 GMT
content-type: application/javascript; charset=utf-8
age: 703788
cache-control: public, max-age=31536000, immutable
cf-bgj: minify
access-control-allow-origin: *
content-disposition: inline; filename="_buildManifest.js"
etag: W/"2f1c625cd698baeb2293abb1c56083f48a6be4d7bf91c2430841ef62794e0680"
strict-transport-security: max-age=63072000
x-matched-path: /_next/static/jnUPDMhm7YJHC1jhmw-Rq/_buildManifest.js
x-vercel-cache: HIT
x-vercel-id: arn1::qhnz7-1713436021705-7231caa7dfb3
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=v4WOHXVptKG0Q6awyjJ1tGaUSgOgRvBun5tS1RaPjut7gqAslg6RVKkocntss%2BLC3aXJl2EVErnHWp1Hj2kmnIwkeAmojRI5%2BjXEzS8v4TxCvAyBSM870fISOjEBYBpR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a71410b87e56aa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| nocodeform.io/f/66179998f12d66538471e6a1 | 104.21.84.201 | 200 OK | 4.9 kB |
URL User Request GET HTTP/2nocodeform.io/f/66179998f12d66538471e6a1 IP104.21.84.201:443
CertificateIssuerCloudflare, Inc. Subjectnocodeform.io FingerprintC4:D1:4A:DE:AC:14:A1:4A:75:D7:25:0D:05:D2:56:27:1C:64:86:17 ValidityWed, 21 Feb 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (5119), with no line terminators Hashf13cd747b8e5703d36b52c75e93a79ca 154248dca5f328127cc4fde662e34634e0450f8a 5aff45e29281cf24073cac20ae5361b563525895fa3d2ea5f9e908fabb88ece5
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /f/66179998f12d66538471e6a1 HTTP/1.1
Host: nocodeform.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 13:56:49 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
age: 0
cache-control: private, no-cache, no-store, max-age=0, must-revalidate
strict-transport-security: max-age=63072000
x-matched-path: /forms/[id]/submissions
x-powered-by: nocodeform.io
x-vercel-cache: MISS
x-vercel-id: arn1::iad1::s2j7n-1714139808959-fdd3d49d039f
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3%2F9s4haq2unKBKfRQBP3RaF%2FkJ59NCR%2FiGoNrovbWfqnJO0KqseLyPvhHxTFiag%2BC2dEkaGlLZ%2FMHYFZBlgmdfP5jknN1X2LEnfDsBfMMxIXiiTLy29IM5eIrpk%2BvKrh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a7140db8b27131-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| nocodeform.io/_next/static/chunks/framework-4d9b6b782f6ed2974932.js | 104.21.84.201 | 200 OK | 150 kB |
URL GET HTTP/3nocodeform.io/_next/static/chunks/framework-4d9b6b782f6ed2974932.js IP104.21.84.201:443
Requested byhttps://nocodeform.io/f/66179998f12d66538471e6a1 CertificateIssuerCloudflare, Inc. Subjectnocodeform.io FingerprintC4:D1:4A:DE:AC:14:A1:4A:75:D7:25:0D:05:D2:56:27:1C:64:86:17 ValidityWed, 21 Feb 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size150 kB (150468 bytes) Hashe1f92a0b806769078e853826a06cfe31 800f616d4f2cc1b40e5e78bff131e1f8e4b116cf ceb2f8cad22e179db68a6a35ed9230c5b943bd0daffea31ccff7e7769c3312f2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/framework-4d9b6b782f6ed2974932.js HTTP/1.1
Host: nocodeform.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nocodeform.io/f/66179998f12d66538471e6a1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 13:56:49 GMT
content-type: application/javascript; charset=utf-8
age: 8048296
cache-control: public, max-age=31536000, immutable
cf-bgj: minify
access-control-allow-origin: *
content-disposition: inline; filename="framework-4d9b6b782f6ed2974932.js"
etag: W/"ceb2f8cad22e179db68a6a35ed9230c5b943bd0daffea31ccff7e7769c3312f2"
strict-transport-security: max-age=63072000
x-matched-path: /_next/static/chunks/framework-4d9b6b782f6ed2974932.js
x-vercel-cache: HIT
x-vercel-id: arn1::2z9hj-1706091512996-f39ac8a18680
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nGjBDAAE5XrQ9mn5jIU9h3Sskkoad2r2Qn8q6sDweQ3okQEYJNsuxuLGdFKz%2BTBTSVp7hkfI8berrY4kx8KI67mZbOUyZvwwP%2BNvOydrCSXoTYIbjkDuT%2FaOX48Lz%2Fqc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a71410a86f56aa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| nocodeform.io/_next/static/chunks/6442-f80ce695c3db4834b33c.js | 104.21.84.201 | 200 OK | 12 kB |
URL GET HTTP/3nocodeform.io/_next/static/chunks/6442-f80ce695c3db4834b33c.js IP104.21.84.201:443
Requested byhttps://nocodeform.io/f/66179998f12d66538471e6a1 CertificateIssuerCloudflare, Inc. Subjectnocodeform.io FingerprintC4:D1:4A:DE:AC:14:A1:4A:75:D7:25:0D:05:D2:56:27:1C:64:86:17 ValidityWed, 21 Feb 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (11932), with no line terminators Hash9b04b99c1e59e34e335d5928ece7f156 77709d40391d73b11d848e8ab05ce478b69237eb 52ff0ef018f663eb18d865ed7fb4f0f8c28cf3fb3f0502e054d1251370555a78
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/6442-f80ce695c3db4834b33c.js HTTP/1.1
Host: nocodeform.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nocodeform.io/f/66179998f12d66538471e6a1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 13:56:49 GMT
content-type: application/javascript; charset=utf-8
age: 51311
cache-control: public, max-age=31536000, immutable
cf-bgj: minify
access-control-allow-origin: *
content-disposition: inline; filename="6442-f80ce695c3db4834b33c.js"
etag: W/"52ff0ef018f663eb18d865ed7fb4f0f8c28cf3fb3f0502e054d1251370555a78"
strict-transport-security: max-age=63072000
x-matched-path: /_next/static/chunks/6442-f80ce695c3db4834b33c.js
x-vercel-cache: HIT
x-vercel-id: arn1::c4z5h-1714088498026-503825d2613e
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RJmpOwd2xC2QI3suDL1evPTyLa%2F%2FpjKjhL3XSJfQBqkMBWm3ElEuPJilygmqAteHtXKvHU9cNkp4Dvkka2f8RiJM1vyI4yNo6Hb43YkTongBuCDHGI54Z5%2FbG1ZVSbPM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a71410b87c56aa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| nocodeform.io/_next/static/chunks/webpack-99e4e9ea7e1cf4155345.js | 104.21.84.201 | 200 OK | 1.8 kB |
URL GET HTTP/3nocodeform.io/_next/static/chunks/webpack-99e4e9ea7e1cf4155345.js IP104.21.84.201:443
Requested byhttps://nocodeform.io/f/66179998f12d66538471e6a1 CertificateIssuerCloudflare, Inc. Subjectnocodeform.io FingerprintC4:D1:4A:DE:AC:14:A1:4A:75:D7:25:0D:05:D2:56:27:1C:64:86:17 ValidityWed, 21 Feb 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (1772), with no line terminators Hash4da21c0c1c26ab59679e1b642d519531 584230f886a8ad5d87b1e166e91d73ec2f27cd27 42b53154bf70d9edd3e8bd549e5e859f7d769dbd75f9cc75e347e0d3eb0fbb89
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/webpack-99e4e9ea7e1cf4155345.js HTTP/1.1
Host: nocodeform.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nocodeform.io/f/66179998f12d66538471e6a1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 13:56:49 GMT
content-type: application/javascript; charset=utf-8
age: 13070295
cache-control: public, max-age=31536000, immutable
cf-bgj: minify
access-control-allow-origin: *
content-disposition: inline; filename="webpack-99e4e9ea7e1cf4155345.js"
etag: W/"ee2d202f2a4a44c7adb9ce8deb854b71b88a3d4c9694d2bda2081081bd867ddc"
strict-transport-security: max-age=63072000
x-matched-path: /_next/static/chunks/webpack-99e4e9ea7e1cf4155345.js
x-vercel-cache: HIT
x-vercel-id: arn1::24wkr-1701069514192-691f78372b32
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pvTuQ%2FSa8zQEBHF%2B%2BkITYiGaWSnaI5%2F5sPS0SHraQBSjkY8P8qG%2B7rN%2FgV49df5t1XvHSHSYwDtX%2BVC3ViZN1DWnvPhe%2B61B3b%2BVux3XCYRefTxDJGLZMnCBtDFjT3T8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a71410a86856aa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| nocodeform.io/_next/static/chunks/pages/_app-a580055d5182a3fdf0a8.js | 104.21.84.201 | 200 OK | 23 kB |
URL GET HTTP/3nocodeform.io/_next/static/chunks/pages/_app-a580055d5182a3fdf0a8.js IP104.21.84.201:443
Requested byhttps://nocodeform.io/f/66179998f12d66538471e6a1 CertificateIssuerCloudflare, Inc. Subjectnocodeform.io FingerprintC4:D1:4A:DE:AC:14:A1:4A:75:D7:25:0D:05:D2:56:27:1C:64:86:17 ValidityWed, 21 Feb 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (22734), with no line terminators Hash3e2b63b1b2112bb76a2c26df1b08e872 05277dd7da067a01149639a26fbe54e66ddf7293 6b3cd82288c81ce58c46d576430e69816e1e5bf3c42d39d81a32666468bb7e80
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/pages/_app-a580055d5182a3fdf0a8.js HTTP/1.1
Host: nocodeform.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nocodeform.io/f/66179998f12d66538471e6a1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 13:56:49 GMT
content-type: application/javascript; charset=utf-8
age: 8878647
cache-control: public, max-age=31536000, immutable
cf-bgj: minify
access-control-allow-origin: *
content-disposition: inline; filename="_app-a580055d5182a3fdf0a8.js"
etag: W/"6b3cd82288c81ce58c46d576430e69816e1e5bf3c42d39d81a32666468bb7e80"
strict-transport-security: max-age=63072000
x-matched-path: /_next/static/chunks/pages/_app-a580055d5182a3fdf0a8.js
x-vercel-cache: HIT
x-vercel-id: arn1::94q7w-1705261162608-a49a03f2484a
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=p9HamjY65gV9jeogxOtk1%2FouVZHXyWI1ETOnBIegddR1aCR%2BscDxemO3gbTs02VPModNPqEfPDaWDamSC%2BMKrsONK%2FmhNSNyGTa08n7zkPI5eFrZLu3rLf6zByjOoYSA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a71410a87556aa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| nocodeform.io/_next/static/chunks/pages/forms/%5Bid%5D/submissions-0f2a13589288f16f48d7.js | 104.21.84.201 | 200 OK | 12 kB |
URL GET HTTP/3nocodeform.io/_next/static/chunks/pages/forms/%5Bid%5D/submissions-0f2a13589288f16f48d7.js IP104.21.84.201:443
Requested byhttps://nocodeform.io/f/66179998f12d66538471e6a1 CertificateIssuerCloudflare, Inc. Subjectnocodeform.io FingerprintC4:D1:4A:DE:AC:14:A1:4A:75:D7:25:0D:05:D2:56:27:1C:64:86:17 ValidityWed, 21 Feb 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (11831), with no line terminators Hash924092f7bc21c678f8143d586dc6e63d c23180dde373fc184d2ed496d0105837047a1293 f733331a142117611e3b1412fd0ce4e5c99cccf56c95b3c344e0971de6aa16c0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/pages/forms/%5Bid%5D/submissions-0f2a13589288f16f48d7.js HTTP/1.1
Host: nocodeform.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nocodeform.io/f/66179998f12d66538471e6a1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 13:56:49 GMT
content-type: application/javascript; charset=utf-8
age: 10101
cache-control: public, max-age=31536000, immutable
cf-bgj: minify
access-control-allow-origin: *
content-disposition: inline; filename="submissions-0f2a13589288f16f48d7.js"
etag: W/"f733331a142117611e3b1412fd0ce4e5c99cccf56c95b3c344e0971de6aa16c0"
strict-transport-security: max-age=63072000
x-matched-path: /_next/static/chunks/pages/forms/%5Bid%5D/submissions-0f2a13589288f16f48d7.js
x-vercel-cache: HIT
x-vercel-id: arn1::p56x6-1714129708678-bc0f0be5f12f
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bNAKuEQUPtmhoeEVhaJ1fO78bSXpqbVrAl52pBx7R43Qx1AWZFpG72sxFl8eOXnHLPONVZNnqTYEv1incVFNDA9cuaodcZlv%2Fhp529xpAgJn%2BKr%2B92TfIZ4QNR5vxVzJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a71410b87d56aa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|