Report - theme-switcher.now.sh

Report Overview

Submitted URL
theme-switcher.now.sh
IP
76.76.21.22
ASN
#16509 AMAZON-02
Submitted
2024-04-18 11:30:19
Access
public
Website Title
React App
Final URL
theme-switcher.vercel.app/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
1
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
theme-switcher.vercel.app	unknown	unknown	No data	No data	2.8 kB	241 kB	76.76.21.123
theme-switcher.now.sh	unknown	unknown	No data	No data	478 B	2.8 kB	76.76.21.22

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-04-18 11:29:57	medium	Client IP	192.169.69.26	ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (3)

	URL	Size	First Seen	Last Seen
	theme-switcher.vercel.app/static/js/2.9a21a78b.chunk.js	216 kB	2024-04-18	2024-04-18
Pretty URL theme-switcher.vercel.app/static/js/2.9a21a78b.chunk.js IP 76.76.21.123 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-18 13:30:25 Last Seen2024-04-18 13:30:25 Times Seen2 Hash 60c37daea682f7ad8d842101a97a4044 7711395d6fa391358b9034133446fcc36071477d 2c67d6db3fa07282e31143ad8461d13cf92918f617e35df7b099238134e3da92 Loading...

	theme-switcher.vercel.app/static/js/main.8c2e60d0.chunk.js	4.9 kB	2024-04-18	2024-04-18
Pretty URL theme-switcher.vercel.app/static/js/main.8c2e60d0.chunk.js IP 76.76.21.123 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-18 13:30:25 Last Seen2024-04-18 13:30:25 Times Seen1 Hash 321a042015f8995d441d39259575f96f 4845f7e020af75cb36125e6b27edb438a23209f8 e216daf1b1232e24985179160145e3ce3339436baf63c9186d3b65c99a53dc3f Loading...

	theme-switcher.vercel.app/	1.5 kB	2024-04-18	2024-04-18
Pretty URL theme-switcher.vercel.app/ IP 76.76.21.123 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-18 13:30:25 Last Seen2024-04-18 13:30:25 Times Seen1 Hash c91d218d7f0493d529a0bec4b2632743 1e59e9925da172912134cc153686b9340047de95 f6dd4b1c253277792822f5a000b69a9d4c2407f61a8a9e169620592c743ed988 Loading...

HTTP Transactions (7)

	URL	IP	Response	Size
	theme-switcher.vercel.app/static/css/main.7314f4e1.chunk.css	76.76.21.123	200 OK	426 B
URL GET HTTP/2 theme-switcher.vercel.app/static/css/main.7314f4e1.chunk.css IP 76.76.21.123:443 ASN #16509 AMAZON-02 Requested by https://theme-switcher.vercel.app/ Certificate IssuerLet's Encrypt Subject.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT File type ASCII text, with very long lines (374) Size 426 B (426 bytes) Hash e9e1c53acd345997eb0e14167d9dc465 865ffe8e2d3de33c37cccd315791fe943fcdec19 8663f83b7c9644e91dc6ffbdd72a6f5a7bc438549ad0bccc6cc3ab3387dec75c HTTP Headers `GET /static/css/main.7314f4e1.chunk.css HTTP/1.1 Host: theme-switcher.vercel.app User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://theme-switcher.vercel.app/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK accept-ranges: bytes access-control-allow-origin: age: 0 cache-control: s-maxage=31536000, immutable content-disposition: inline; filename="main.7314f4e1.chunk.css" content-type: text/css; charset=utf-8 date: Thu, 18 Apr 2024 11:29:54 GMT etag: W/"8663f83b7c9644e91dc6ffbdd72a6f5a7bc438549ad0bccc6cc3ab3387dec75c" server: Vercel strict-transport-security: max-age=63072000; includeSubDomains; preload x-vercel-cache: MISS x-vercel-id: arn1::xd4rx-1713439794460-733c6fc5fbd0 content-length: 426 X-Firefox-Spdy: h2

	theme-switcher.vercel.app/logo192.png	76.76.21.123	200 OK	5.3 kB
URL GET HTTP/2 theme-switcher.vercel.app/logo192.png IP 76.76.21.123:443 ASN #16509 AMAZON-02 Requested by https://theme-switcher.vercel.app/ Certificate IssuerLet's Encrypt Subject.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT File type PNG image data, 192 x 192, 8-bit colormap, non-interlaced Size 5.3 kB (5347 bytes) Hash 33dbdd0177549353eeeb785d02c294af 7f4f2d68782a7fafceda84554ecab9b489877500 c386396ec70db3608075b5fbfaac4ab1ccaa86ba05a68ab393ec551eb66c3e00 HTTP Headers `GET /logo192.png HTTP/1.1 Host: theme-switcher.vercel.app User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://theme-switcher.vercel.app/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK accept-ranges: bytes access-control-allow-origin: * age: 7322208 cache-control: public, max-age=0, must-revalidate content-disposition: inline; filename="logo192.png" content-type: image/png date: Thu, 18 Apr 2024 11:29:55 GMT etag: W/"c386396ec70db3608075b5fbfaac4ab1ccaa86ba05a68ab393ec551eb66c3e00" server: Vercel strict-transport-security: max-age=63072000; includeSubDomains; preload x-vercel-cache: HIT x-vercel-id: arn1::5j4p8-1713439794957-f521c9361be1 content-length: 5347 X-Firefox-Spdy: h2

	theme-switcher.vercel.app/favicon.ico	76.76.21.123	200 OK	8.5 kB
URL GET HTTP/2 theme-switcher.vercel.app/favicon.ico IP 76.76.21.123:443 ASN #16509 AMAZON-02 Requested by https://theme-switcher.vercel.app/ Certificate IssuerLet's Encrypt Subject.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT File type MS Windows icon resource - 4 icons, 16x16 with PNG image data, 16 x 16, 8-bit colormap, non-interlaced, 24x24 with - PNG image data, 24 x 24, 8-bit colormap, non-interlaced Size 8.5 kB (8526 bytes) Hash 6e1267d9d946b0236cdf6ffd02890894 9867af024c6549908fb72feea145b21b8658d090 ffc65885a2121141440d345ef5927c4c2917d95b5b2913b7fa8467c95e15120b HTTP Headers `GET /favicon.ico HTTP/1.1 Host: theme-switcher.vercel.app User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://theme-switcher.vercel.app/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK access-control-allow-origin: * age: 7321969 cache-control: public, max-age=0, must-revalidate content-disposition: inline; filename="favicon.ico" content-encoding: br content-type: image/vnd.microsoft.icon date: Thu, 18 Apr 2024 11:29:55 GMT etag: W/"ffc65885a2121141440d345ef5927c4c2917d95b5b2913b7fa8467c95e15120b" server: Vercel strict-transport-security: max-age=63072000; includeSubDomains; preload x-vercel-cache: HIT x-vercel-id: arn1::6zvcf-1713439794957-8542315f58a9 X-Firefox-Spdy: h2

	theme-switcher.vercel.app/static/js/2.9a21a78b.chunk.js	76.76.21.123	200 OK	216 kB
URL GET HTTP/2 theme-switcher.vercel.app/static/js/2.9a21a78b.chunk.js IP 76.76.21.123:443 ASN #16509 AMAZON-02 Requested by https://theme-switcher.vercel.app/ Certificate IssuerLet's Encrypt Subject.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT File type JavaScript source, ASCII text, with very long lines (65462) Size 216 kB (216141 bytes) Hash 60c37daea682f7ad8d842101a97a4044 7711395d6fa391358b9034133446fcc36071477d 2c67d6db3fa07282e31143ad8461d13cf92918f617e35df7b099238134e3da92 HTTP Headers `GET /static/js/2.9a21a78b.chunk.js HTTP/1.1 Host: theme-switcher.vercel.app User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://theme-switcher.vercel.app/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK access-control-allow-origin: * age: 0 cache-control: s-maxage=31536000, immutable content-disposition: inline; filename="2.9a21a78b.chunk.js" content-encoding: br content-type: application/javascript; charset=utf-8 date: Thu, 18 Apr 2024 11:29:54 GMT etag: W/"2c67d6db3fa07282e31143ad8461d13cf92918f617e35df7b099238134e3da92" server: Vercel strict-transport-security: max-age=63072000; includeSubDomains; preload x-vercel-cache: MISS x-vercel-id: arn1::v9m9f-1713439794460-007a8d5d6f71 X-Firefox-Spdy: h2

	theme-switcher.vercel.app/static/js/main.8c2e60d0.chunk.js	76.76.21.123	200 OK	4.9 kB
URL GET HTTP/2 theme-switcher.vercel.app/static/js/main.8c2e60d0.chunk.js IP 76.76.21.123:443 ASN #16509 AMAZON-02 Requested by https://theme-switcher.vercel.app/ Certificate IssuerLet's Encrypt Subject.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT File type JavaScript source, ASCII text, with very long lines (5056), with no line terminators Size 4.9 kB (4931 bytes) Hash 17d7a218de37b6adfe51bdfc3f3fed8a a96e5a785a4c5c7a9329059584a47ccbfe6c33b9 f7831518f80e67088edfa9343c1b29293011568a87083e001df64d0775250047 HTTP Headers `GET /static/js/main.8c2e60d0.chunk.js HTTP/1.1 Host: theme-switcher.vercel.app User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://theme-switcher.vercel.app/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK access-control-allow-origin: * age: 0 cache-control: s-maxage=31536000, immutable content-disposition: inline; filename="main.8c2e60d0.chunk.js" content-encoding: br content-type: application/javascript; charset=utf-8 date: Thu, 18 Apr 2024 11:29:54 GMT etag: W/"e216daf1b1232e24985179160145e3ce3339436baf63c9186d3b65c99a53dc3f" server: Vercel strict-transport-security: max-age=63072000; includeSubDomains; preload x-vercel-cache: MISS x-vercel-id: arn1::dhspl-1713439794461-c3ac317bb23d X-Firefox-Spdy: h2

	theme-switcher.now.sh/	76.76.21.22	308 Permanent Redirect	2.2 kB
URL User Request GET HTTP/2 theme-switcher.now.sh/ IP 76.76.21.22:443 ASN #16509 AMAZON-02 Certificate IssuerLet's Encrypt Subject.now.sh Fingerprint0E:C8:07:B0:6C:83:A9:4C:CF:98:74:1B:85:A7:D8:EB:50:EA:5A:4D ValidityMon, 19 Feb 2024 08:48:19 GMT - Sun, 19 May 2024 08:48:18 GMT File type HTML document, ASCII text, with very long lines (2293), with no line terminators Size 2.2 kB (2235 bytes) Hash 36018be35e294e5e906c377e7c240b90 e320a951c09daac538897740e346e1c29be6c57d 2f9560618198a29d1ed60e30cabb372c917ad42400944dacef29ddd404bd043d HTTP Headers `GET / HTTP/1.1 Host: theme-switcher.now.sh User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 308 Permanent Redirect access-control-allow-credentials: true access-control-allow-headers: access-control-allow-methods: * access-control-allow-origin: * access-control-expose-headers: Location cache-control: public, max-age=0, must-revalidate content-type: text/html date: Thu, 18 Apr 2024 11:29:53 GMT location: https://theme-switcher.vercel.app/ refresh: 0;url=https://theme-switcher.vercel.app/ server: Vercel strict-transport-security: max-age=63072000; includeSubDomains; preload x-vercel-id: arn1::zd47j-1713439793982-f35ba18e9a53 X-Firefox-Spdy: h2

	theme-switcher.vercel.app/	76.76.21.123	200 OK	2.2 kB
URL User Request GET HTTP/2 theme-switcher.vercel.app/ IP 76.76.21.123:443 ASN #16509 AMAZON-02 Certificate IssuerLet's Encrypt Subject.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT File type HTML document, ASCII text, with very long lines (2293), with no line terminators Size 2.2 kB (2235 bytes) Hash 36018be35e294e5e906c377e7c240b90 e320a951c09daac538897740e346e1c29be6c57d 2f9560618198a29d1ed60e30cabb372c917ad42400944dacef29ddd404bd043d HTTP Headers `GET / HTTP/1.1 Host: theme-switcher.vercel.app User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK access-control-allow-origin: age: 635558 cache-control: public, max-age=0, must-revalidate content-disposition: inline; filename="index.html" content-encoding: br content-type: text/html; charset=utf-8 date: Thu, 18 Apr 2024 11:29:54 GMT etag: W/"6341dea213f3fad7c4c935ea34be9cd35f0a23aec014c718d68b7529d26cf169" server: Vercel strict-transport-security: max-age=63072000; includeSubDomains; preload x-vercel-cache: HIT x-vercel-id: arn1::wjbrx-1713439794069-bd6467286dc1 X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (3)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (7)

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate