Report - nanannaduas.com/

Report Overview

URL

nanannaduas.com/
IP

188.114.96.1

ASN

#13335 CLOUDFLARENET
Submitted

2023-06-02T03:06:07Z

Access

public
Tags

None
urlquery detections

No alerts detected

Detections

urlquery

0
Network Intrusion Detection

0
Threat Detection Systems

11

Domain Summary

Domain	Rank	First Seen	Last Seen	Sent	Received	IP
unpkg.com (8)	11693	2016-01-08 00:26:01	2023-06-01 20:09:33	3436	3503676	104.16.122.175
fonts.gstatic.com (2)	unknown	2014-09-09 02:40:21	2023-06-02 00:54:29	1042	40626	216.58.207.227
cdn.ethers.io (1)	459220	2017-08-30 09:27:23	2023-05-30 10:45:58	417	733612	54.230.111.106
fonts.googleapis.com (1)	8877	2013-06-10 22:14:26	2023-06-01 22:30:51	561	26445	142.250.74.106
code.jquery.com (3)	634	2012-05-21 19:28:02	2023-06-01 19:21:19	1329	201677	69.16.175.42
github.com (1)	1423	2016-07-13 12:28:22	2023-05-29 05:12:40	468	3199	140.82.121.4
objects.githubusercontent.com (1)	134060	2021-11-01 22:34:29	2023-06-01 18:16:44	921	747976	185.199.109.133
cdn.jsdelivr.net (4)	439	2012-09-30 02:15:09	2023-06-01 18:12:30	1781	404808	151.101.1.229
ocsp.r2m02.amazontrust.com (1)	unknown	2022-10-12 16:01:39	2023-06-01 23:12:13	340	863	54.230.80.227
ocsp.globalsign.com (1)	2075	2012-07-20 19:46:16	2023-06-01 18:13:01	358	1920	104.18.20.226
nanannaduas.com (11)	unknown	2023-05-05 01:39:13	2023-05-22 16:53:07	4720	2969484	188.114.96.1
ocsp.pki.goog (5)	175	2018-07-01 08:43:07	2023-06-01 18:12:02	1665	3500	142.250.74.131
cdnjs.cloudflare.com (2)	235	2015-04-17 22:46:33	2023-06-01 22:03:35	874	9120	104.17.25.14

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

Scan Date	Severity	Indicator
2023-05-23	medium	nanannaduas.com/
2023-05-23	medium	nanannaduas.com/
2023-05-23	medium	nanannaduas.com/
2023-05-23	medium	nanannaduas.com/
2023-05-23	medium	nanannaduas.com/
2023-05-23	medium	nanannaduas.com/
2023-05-23	medium	nanannaduas.com/
2023-05-23	medium	nanannaduas.com/
2023-05-23	medium	nanannaduas.com/
2023-05-23	medium	nanannaduas.com/
2023-05-23	medium	nanannaduas.com/

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

HTTP Transactions (41)

URL IP Response Size

nanannaduas.com/img/lottery-pc.webp

188.114.96.1

200 OK

54710

URL GET HTTP/3

nanannaduas.com/img/lottery-pc.webp
IP

188.114.96.1:443
ASN

#13335 CLOUDFLARENET

Requested by

https://nanannaduas.com/
Certificate

IssuerLet's Encrypt

Subjectnanannaduas.com

Fingerprint78:11:2E:88:64:7B:A1:0A:0F:4D:5D:60:6D:CD:2C:2A:73:8A:42:89

ValidityThu, 04 May 2023 12:48:33 GMT - Wed, 02 Aug 2023 12:48:32 GMT

Magic

RIFF (little-endian) data, Web/P image\012- data

Size

54710
Hash

b8ee7e526fc77d54ce3b901d922ecbf6

5ebc8a6505c69f41e621aa1f639708d342604b66

6f8efe43353ecca945ee5f3cd9783e5886d322317a1d0961cc1a950a2b6bef52

Detections

Analyzer	Verdict	Alert
openphish	Crypto/Wallet

HTTP Headers

                                        GET /img/lottery-pc.webp HTTP/1.1
Host: nanannaduas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nanannaduas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/3 200 OK
date: Fri, 02 Jun 2023 03:05:46 GMT
content-type: image/webp
content-length: 54710
last-modified: Fri, 05 May 2023 15:31:33 GMT
etag: "64552155-d5b6"
expires: Sat, 03 Jun 2023 03:05:46 GMT
cache-control: max-age=86400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uJP9aaurLyTEpnNkrR48Ij0CF8Pi6gWdePHVJYHxXJMJNNjJy%2F0tUo%2FKDBbFwSgBiRTOG%2F76Sd3cQb%2By63yuWh73br7Tct9TqlVaweovJdbg%2Ba22okN75B0a5mhAxIIvZkE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d0c7a01480f0b4d-OSL
alt-svc: h3=":443"; ma=86400

ocsp.pki.goog/gts1c3

142.250.74.131

472

URL

ocsp.pki.goog/gts1c3
IP

142.250.74.131:0
ASN

#15169 GOOGLE

Magic

data

Size

472
Hash

02593b51cd737e1085e5837a9a47c755

aab410449655b9fddf070f3e25a1a8e5aee59530

0ea607d017e63bf06a742560b582d99802dc477bba715d9890e1d51663e50d99

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Jun 2023 03:05:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

nanannaduas.com/img/lottery-mob.webp

188.114.96.1

200 OK

34432

URL GET HTTP/3

nanannaduas.com/img/lottery-mob.webp
IP

188.114.96.1:443
ASN

#13335 CLOUDFLARENET

Requested by

https://nanannaduas.com/
Certificate

IssuerLet's Encrypt

Subjectnanannaduas.com

Fingerprint78:11:2E:88:64:7B:A1:0A:0F:4D:5D:60:6D:CD:2C:2A:73:8A:42:89

ValidityThu, 04 May 2023 12:48:33 GMT - Wed, 02 Aug 2023 12:48:32 GMT

Magic

RIFF (little-endian) data, Web/P image\012- data

Size

34432
Hash

1a0ba0a944fe5002dae36487d0334cee

3765bccce7217bc6c8df19080ac75ab40caf124a

e5220425b716f9b82045dbb84726828ed01fc0a2a00d21fb6af15ff3022f1c00

Detections

Analyzer	Verdict	Alert
openphish	Crypto/Wallet

HTTP Headers

                                        GET /img/lottery-mob.webp HTTP/1.1
Host: nanannaduas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nanannaduas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/3 200 OK
date: Fri, 02 Jun 2023 03:05:46 GMT
content-type: image/webp
content-length: 34432
last-modified: Fri, 05 May 2023 15:31:33 GMT
etag: "64552155-8680"
expires: Sat, 03 Jun 2023 03:05:46 GMT
cache-control: max-age=86400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bUpTsXzrCbBaz1s7afoDbxUFqOuIpBwJxI%2B5gYR7bk4cxyYoNbx6jrX3DGsp3c5LGb7nLxPi6GXhJyNFdaSQ%2FO6vJrbv9UgFYU0TmjiigdQZAD69XqeSINCZloUbgmLWRF8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d0c7a01480e0b4d-OSL
alt-svc: h3=":443"; ma=86400

cdnjs.cloudflare.com/ajax/libs/axios/0.27.2/axios.min.js

104.17.25.14

200 OK

6498

URL GET HTTP/2

cdnjs.cloudflare.com/ajax/libs/axios/0.27.2/axios.min.js
IP

104.17.25.14:443
ASN

#13335 CLOUDFLARENET

Requested by

https://nanannaduas.com/
Certificate

IssuerCloudflare, Inc.

Subjectsni.cloudflaressl.com

FingerprintA9:11:71:07:07:92:48:7E:A9:3C:E8:32:25:3F:EB:AC:7D:51:7E:8F

ValidityWed, 03 Aug 2022 00:00:00 GMT - Wed, 02 Aug 2023 23:59:59 GMT

Magic

ASCII text, with very long lines (20679)

Size

6498
Hash

b73d3171d52de3b38a570bc2748bcf96

1423712131ca1c1471097aae1bf41332aaccb491

e373b70a5167485c73a265421bcfcd1fdddbae49c9c51605e6d2918a3de4ae0d

HTTP Headers

                                        GET /ajax/libs/axios/0.27.2/axios.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nanannaduas.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/2 200 OK
date: Fri, 02 Jun 2023 03:05:46 GMT
content-type: application/javascript; charset=utf-8
content-length: 6498
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "626914f1-1962"
last-modified: Wed, 27 Apr 2022 10:03:29 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 16503624
expires: Wed, 22 May 2024 03:05:46 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8qmCASjqvc3ZrcBJPQzV%2B1jYrqybSNw3yC3JbUsdGwkfPWy65u6NL5nhrgbuWQ10F0qNdycgCa%2BhbIYOD2k8A5ZqiMKBAxFNFSLpywYPmgq9YwjXJ%2FVGfIpCruvwS5grWGCjghS5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7d0c7a028e1bb523-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

cdnjs.cloudflare.com/ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js

104.17.25.14

200 OK

591

URL GET HTTP/2

cdnjs.cloudflare.com/ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js
IP

104.17.25.14:443
ASN

#13335 CLOUDFLARENET

Requested by

https://nanannaduas.com/
Certificate

IssuerCloudflare, Inc.

Subjectsni.cloudflaressl.com

FingerprintA9:11:71:07:07:92:48:7E:A9:3C:E8:32:25:3F:EB:AC:7D:51:7E:8F

ValidityWed, 03 Aug 2022 00:00:00 GMT - Wed, 02 Aug 2023 23:59:59 GMT

Magic

ASCII text, with very long lines (1266)

Size

591
Hash

4412bf8023109ee9eb1f1f226d391329

c273960aa874a87dd022b5e597887142f1b8e34f

d40efcac911d8964f3728eaa767de281306ff55ba9377435a3364d4d1e1613f6

HTTP Headers

                                        GET /ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nanannaduas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/2 200 OK
date: Fri, 02 Jun 2023 03:05:46 GMT
content-type: application/javascript; charset=utf-8
content-length: 591
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec1-514"
last-modified: Mon, 04 May 2020 16:11:45 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 3057130
expires: Wed, 22 May 2024 03:05:46 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wCYwJSkvjWBhs202BWRWFXEyNkwYxuotuwpOixxXKTw4w2utRamDlnL2nuI%2Fb71bTkn8x4bRrYyw%2BksKhgdPdKLiRpb9Gz7jccqXGaSG%2FBgbdCbVokd%2Fjz4tgV4saJVVthWB8BZT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7d0c7a028d520b3d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

code.jquery.com/jquery-3.6.0.min.js

69.16.175.42

200 OK

30875

URL GET HTTP/2

code.jquery.com/jquery-3.6.0.min.js
IP

69.16.175.42:443
ASN

#20446 STACKPATH-CDN

Requested by

https://nanannaduas.com/
Certificate

IssuerSectigo Limited

Subject*.jquery.com

Fingerprint64:50:4C:BB:DF:F3:1D:70:CC:5D:9E:B7:BE:80:91:84:03:C1:D1:83

ValidityWed, 03 Aug 2022 00:00:00 GMT - Fri, 14 Jul 2023 23:59:59 GMT

Magic

ASCII text, with very long lines (65447)

Size

30875
Hash

8fb8fee4fcc3cc86ff6c724154c49c42

b82d238d4e31fdf618bae8ac11a6c812c03dd0d4

ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e

HTTP Headers

                                        GET /jquery-3.6.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nanannaduas.com
DNT: 1
Connection: keep-alive
Referer: https://nanannaduas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/2 200 OK
date: Fri, 02 Jun 2023 03:05:46 GMT
content-encoding: gzip
content-length: 30875
content-type: application/javascript; charset=utf-8
last-modified: Fri, 20 Aug 2021 17:47:53 GMT
accept-ranges: bytes
server: nginx
etag: W/"611feac9-15d9d"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1685675146.dop216.sk1.t,1685675146.cds015.sk1.hn,1685675146.cds210.sk1.c
X-Firefox-Spdy: h2

cdn.jsdelivr.net/gh/ethereumjs/browser-builds/dist/ethereumjs-tx/ethereumjs-tx-1.3.3.min.js

151.101.1.229

200 OK

96826

URL GET HTTP/2

cdn.jsdelivr.net/gh/ethereumjs/browser-builds/dist/ethereumjs-tx/ethereumjs-tx-1.3.3.min.js
IP

151.101.1.229:443
ASN

#54113 FASTLY

Requested by

https://nanannaduas.com/
Certificate

IssuerGlobalSign nv-sa

Subjectjsdelivr.net

Fingerprint88:D1:D3:FA:BE:69:45:71:5A:74:78:14:1A:E8:F3:5A:88:69:9C:7F

ValidityFri, 23 Dec 2022 10:55:14 GMT - Wed, 24 Jan 2024 10:55:13 GMT

Magic

ASCII text, with very long lines (43040)

Size

96826
Hash

ca1104de538caea2d54265fbe90916b4

d6c416e5d153f500f7ac66d25a2b73db45867ad4

10d78c0a5e8664889dc8eb47c72bfa46ad0ed02c70a234be9acdefa27dbb24b0

HTTP Headers

                                        GET /gh/ethereumjs/browser-builds/dist/ethereumjs-tx/ethereumjs-tx-1.3.3.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nanannaduas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: master
x-jsd-version-type: branch
etag: W/"4edeb-1sQW5dFT9QD3rGbSWitz20WGetQ"
content-encoding: br
accept-ranges: bytes
date: Fri, 02 Jun 2023 03:05:46 GMT
age: 3071
x-served-by: cache-fra-eddf8230135-FRA, cache-bma1668-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 96826
X-Firefox-Spdy: h2

code.jquery.com/jquery-3.6.0.js

69.16.175.42

200 OK

84714

URL GET HTTP/2

code.jquery.com/jquery-3.6.0.js
IP

69.16.175.42:443
ASN

#20446 STACKPATH-CDN

Requested by

https://nanannaduas.com/
Certificate

IssuerSectigo Limited

Subject*.jquery.com

Fingerprint64:50:4C:BB:DF:F3:1D:70:CC:5D:9E:B7:BE:80:91:84:03:C1:D1:83

ValidityWed, 03 Aug 2022 00:00:00 GMT - Fri, 14 Jul 2023 23:59:59 GMT

Magic

ASCII text

Size

84714
Hash

2849239b95f5a9a2aea3f6ed9420bb88

af32f706407ab08f800c5e697cce92466e735847

1fe2bb5390a75e5d61e72c107cab528fc3c29a837d69aab7d200e1dbb5dcd239

HTTP Headers

                                        GET /jquery-3.6.0.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nanannaduas.com
DNT: 1
Connection: keep-alive
Referer: https://nanannaduas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/2 200 OK
date: Fri, 02 Jun 2023 03:05:46 GMT
content-encoding: gzip
content-length: 84714
content-type: application/javascript; charset=utf-8
last-modified: Wed, 16 Feb 2022 10:50:39 GMT
accept-ranges: bytes
server: nginx
etag: W/"620cd6ff-46744"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1685675146.dop216.sk1.t,1685675146.cds015.sk1.hn,1685675146.cds214.sk1.c
X-Firefox-Spdy: h2

cdn.jsdelivr.net/npm/@sweetalert2/theme-dark@4/dark.css

151.101.1.229

200 OK

5294

URL GET HTTP/2

cdn.jsdelivr.net/npm/@sweetalert2/theme-dark@4/dark.css
IP

151.101.1.229:443
ASN

#54113 FASTLY

Requested by

https://nanannaduas.com/
Certificate

IssuerGlobalSign nv-sa

Subjectjsdelivr.net

Fingerprint88:D1:D3:FA:BE:69:45:71:5A:74:78:14:1A:E8:F3:5A:88:69:9C:7F

ValidityFri, 23 Dec 2022 10:55:14 GMT - Wed, 24 Jan 2024 10:55:13 GMT

Magic

ASCII text, with very long lines (377)

Size

5294
Hash

17ff432f3da96bf2925984367105dbf4

180ba45579783a2e384e98f8c3c54e11f8111c0b

df20b91814f65993000ef1b2faa0558bd8253754765ebdb5eb822667d44fb14d

HTTP Headers

                                        GET /npm/@sweetalert2/theme-dark@4/dark.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nanannaduas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 4.0.5
x-jsd-version-type: version
etag: W/"7a08-GAukVXl4Oi44Tpj4w8VOEfgRHAs"
content-encoding: br
accept-ranges: bytes
date: Fri, 02 Jun 2023 03:05:46 GMT
age: 42597
x-served-by: cache-fra-eddf8230126-FRA, cache-bma1668-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 5294
X-Firefox-Spdy: h2

cdn.jsdelivr.net/npm/sweetalert2@7.28.11/dist/sweetalert2.all.js

151.101.1.229

200 OK

24917

URL GET HTTP/2

cdn.jsdelivr.net/npm/sweetalert2@7.28.11/dist/sweetalert2.all.js
IP

151.101.1.229:443
ASN

#54113 FASTLY

Requested by

https://nanannaduas.com/
Certificate

IssuerGlobalSign nv-sa

Subjectjsdelivr.net

Fingerprint88:D1:D3:FA:BE:69:45:71:5A:74:78:14:1A:E8:F3:5A:88:69:9C:7F

ValidityFri, 23 Dec 2022 10:55:14 GMT - Wed, 24 Jan 2024 10:55:13 GMT

Magic

Unicode text, UTF-8 text, with very long lines (2952)

Size

24917
Hash

7bf8fa3b4fdb94ef060bac6e63e21c2c

f4b63645fa12e3275fc2c90bf88f89da893cc4c5

f7f1dc8eb1942cb019264b7463666e572d78a2717eb14cd5657d10f45ff31c12

HTTP Headers

                                        GET /npm/sweetalert2@7.28.11/dist/sweetalert2.all.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nanannaduas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 7.28.11
x-jsd-version-type: version
etag: W/"1a839-9LY2RfoS4ydfwskL+I+J2ok8xMU"
content-encoding: br
accept-ranges: bytes
date: Fri, 02 Jun 2023 03:05:46 GMT
age: 852802
x-served-by: cache-fra-eddf8230130-FRA, cache-bma1668-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 24917
X-Firefox-Spdy: h2

cdn.jsdelivr.net/gh/ethereum/web3.js/dist/web3.min.js

151.101.1.229

200 OK

274691

URL GET HTTP/2

cdn.jsdelivr.net/gh/ethereum/web3.js/dist/web3.min.js
IP

151.101.1.229:443
ASN

#54113 FASTLY

Requested by

https://nanannaduas.com/
Certificate

IssuerGlobalSign nv-sa

Subjectjsdelivr.net

Fingerprint88:D1:D3:FA:BE:69:45:71:5A:74:78:14:1A:E8:F3:5A:88:69:9C:7F

ValidityFri, 23 Dec 2022 10:55:14 GMT - Wed, 24 Jan 2024 10:55:13 GMT

Magic

ASCII text, with very long lines (64135)

Size

274691
Hash

c59fd23e1662678b915668389f565f35

5f04ae7af69772f478f11598db2b0e4be28b3527

88f50abc79c7870087b6adcd4ad8384377f023f9359045383b21c842717fac90

HTTP Headers

                                        GET /gh/ethereum/web3.js/dist/web3.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nanannaduas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 3.0.0
x-jsd-version-type: version
etag: W/"13b809-XwSuevaXcvR48RWY2ysOS+KLNSc"
content-encoding: br
accept-ranges: bytes
date: Fri, 02 Jun 2023 03:05:46 GMT
age: 13035
x-served-by: cache-fra-eddf8230048-FRA, cache-bma1668-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 274691
X-Firefox-Spdy: h2

nanannaduas.com/img/big-bunny.webp

188.114.96.1

200 OK

41502

URL GET HTTP/3

nanannaduas.com/img/big-bunny.webp
IP

188.114.96.1:443
ASN

#13335 CLOUDFLARENET

Requested by

https://nanannaduas.com/
Certificate

IssuerLet's Encrypt

Subjectnanannaduas.com

Fingerprint78:11:2E:88:64:7B:A1:0A:0F:4D:5D:60:6D:CD:2C:2A:73:8A:42:89

ValidityThu, 04 May 2023 12:48:33 GMT - Wed, 02 Aug 2023 12:48:32 GMT

Magic

RIFF (little-endian) data, Web/P image\012- data

Size

41502
Hash

6681c1ff21f8220c9e3d5a93329682ca

bc6fc59af4ecd525c321f4f6754c15a4c8ef7562

c9ced44fb962c3cc3e88030c153c339dcb9c174d8c5891b65b753d9e744e592e

Detections

Analyzer	Verdict	Alert
openphish	Crypto/Wallet

HTTP Headers

                                        GET /img/big-bunny.webp HTTP/1.1
Host: nanannaduas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nanannaduas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/3 200 OK
date: Fri, 02 Jun 2023 03:05:46 GMT
content-type: image/webp
content-length: 41502
last-modified: Fri, 05 May 2023 15:31:33 GMT
etag: "64552155-a21e"
expires: Sat, 03 Jun 2023 03:05:46 GMT
cache-control: max-age=86400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eB0YxJSnY5Tp7eDyds8LqhHFxULsVML9cHxjiLtjiLm%2B6SmvXTqXD3f4fOi9enUlmGX5fiO2jCahQ9%2FTuW4qCB34Eq7JbgAK%2FvVUnp%2BA1MiivzJs32Tj7M2Jo%2F7thELc3Mw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d0c7a0168220b4d-OSL
alt-svc: h3=":443"; ma=86400

ocsp.r2m02.amazontrust.com/

54.230.80.227

471

URL

ocsp.r2m02.amazontrust.com/
IP

54.230.80.227:0
ASN

#16509 AMAZON-02

Magic

data

Size

471
Hash

5213d96604bc63e5f5093cff41e338e2

5e3326d1c98c29f96852178a52649ceccbb79f9b

9d28f3f04b027a9695fcde1d91c6bdd359adbdf97402d20ba8c230c2baec450b

HTTP Headers

                                        POST / HTTP/1.1
Host: ocsp.r2m02.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: max-age=7200
Date: Fri, 02 Jun 2023 03:05:46 GMT
Server: ECAcc (dcb/7E9A)
X-Cache: Miss from cloudfront
Via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: tWco8uqRpaqMVFQYfGTUs6HqZfg8AnUbPD-07jC0SwXbb40w5YdO9A==

ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4

104.18.20.226

1462

URL

ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
IP

104.18.20.226:0
ASN

#13335 CLOUDFLARENET

Magic

data

Size

1462
Hash

cb6fa45613c9d1f83a777604ecc366c5

ae62618f8fa0f0d8e3d5fff89168b4ad96ce4110

0454bc1ade908a27e5dea78c50c2c3a67919ddeafb84a50dd2e4640355105b78

HTTP Headers

                                        POST /ca/gsatlasr3dvtlsca2022q4 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Date: Fri, 02 Jun 2023 03:05:47 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "2A81CF317650748F11D8DE2EA7AC31E3B318C04D"
Expires: Fri, 02 Jun 2023 13:00:00 GMT
Last-Modified: Fri, 02 Jun 2023 01:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 3503
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7d0c7a05a8dfb4eb-OSL

github.com/WalletConnect/walletconnect-monorepo/releases/download/1.7.8/web3-provider.min.js

140.82.121.4

302 Found

URL GET HTTP/2

github.com/WalletConnect/walletconnect-monorepo/releases/download/1.7.8/web3-provider.min.js
IP

140.82.121.4:443
ASN

#36459 GITHUB

Requested by

https://nanannaduas.com/
Certificate

IssuerDigiCert Inc

Subjectgithub.com

FingerprintA3:B5:9E:5F:E8:84:EE:1F:34:D9:8E:EF:85:8E:3F:B6:62:AC:10:4A

ValidityTue, 14 Feb 2023 00:00:00 GMT - Thu, 14 Mar 2024 23:59:59 GMT

Magic

Size

0
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

                                        GET /WalletConnect/walletconnect-monorepo/releases/download/1.7.8/web3-provider.min.js HTTP/1.1
Host: github.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nanannaduas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/2 302 Found
server: GitHub.com
date: Fri, 02 Jun 2023 03:04:32 GMT
content-type: text/html; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With
location: https://objects.githubusercontent.com/github-production-release-asset-2e65be/146185516/095e5946-fd7e-4702-9421-c3966c4c6efd?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAIWNJYAX4CSVEH53A%2F20230602%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20230602T030432Z&X-Amz-Expires=300&X-Amz-Signature=c7e3c16fc1737dfcb0968cb6849897b7e8e1fcb53ffdf016c18b8191b52128ce&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=146185516&response-content-disposition=attachment%3B%20filename%3Dweb3-provider.min.js&response-content-type=application%2Foctet-stream
cache-control: no-cache
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: no-referrer-when-downgrade
content-security-policy: default-src 'none'; base-uri 'self'; block-all-mixed-content; child-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com objects-origin.githubusercontent.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com cdn.optimizely.com logx.optimizely.com/v1/events *.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ wss://*.actions.githubusercontent.com github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com objects-origin.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; worker-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/
content-length: 0
x-github-request-id: FB01:28A2:F49254D:F7E6EBB:64795C8A
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

472

URL

ocsp.pki.goog/gts1c3
IP

142.250.74.131:0
ASN

#15169 GOOGLE

Magic

data

Size

472
Hash

02593b51cd737e1085e5837a9a47c755

aab410449655b9fddf070f3e25a1a8e5aee59530

0ea607d017e63bf06a742560b582d99802dc477bba715d9890e1d51663e50d99

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Jun 2023 03:05:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

objects.githubusercontent.com/github-production-release-asset-2e65be/146185516/095e5946-fd7e-4702-9421-c3966c4c6efd?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAIWNJYAX4CSVEH53A%2F20230602%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20230602T030432Z&X-Amz-Expires=300&X-Amz-Signature=c7e3c16fc1737dfcb0968cb6849897b7e8e1fcb53ffdf016c18b8191b52128ce&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=146185516&response-content-disposition=attachment%3B%20filename%3Dweb3-provider.min.js&response-content-type=application%2Foctet-stream

185.199.109.133

200 OK

747143

URL GET HTTP/2

objects.githubusercontent.com/github-production-release-asset-2e65be/146185516/095e5946-fd7e-4702-9421-c3966c4c6efd?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAIWNJYAX4CSVEH53A%2F20230602%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20230602T030432Z&X-Amz-Expires=300&X-Amz-Signature=c7e3c16fc1737dfcb0968cb6849897b7e8e1fcb53ffdf016c18b8191b52128ce&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=146185516&response-content-disposition=attachment%3B%20filename%3Dweb3-provider.min.js&response-content-type=application%2Foctet-stream
IP

185.199.109.133:443
ASN

#54113 FASTLY

Requested by

https://nanannaduas.com/
Certificate

IssuerDigiCert Inc

Subject*.github.io

FingerprintA1:46:14:C7:2A:1D:52:79:F6:AA:2B:B2:C5:0A:3B:D3:F5:02:06:75

ValidityTue, 21 Feb 2023 00:00:00 GMT - Wed, 20 Mar 2024 23:59:59 GMT

Magic

ASCII text, with very long lines (50859)

Size

747143
Hash

29fb92b3430a91e0f677a5f852800627

2c0d22ddc0bb82f5b7cd3085650e8457f9aa229e

968d103baade1160c2e2d096bcdeb0ad70400b2b2e92df06bd6e6e0c7b5f4dba

HTTP Headers

                                        GET /github-production-release-asset-2e65be/146185516/095e5946-fd7e-4702-9421-c3966c4c6efd?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAIWNJYAX4CSVEH53A%2F20230602%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20230602T030432Z&X-Amz-Expires=300&X-Amz-Signature=c7e3c16fc1737dfcb0968cb6849897b7e8e1fcb53ffdf016c18b8191b52128ce&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=146185516&response-content-disposition=attachment%3B%20filename%3Dweb3-provider.min.js&response-content-type=application%2Foctet-stream HTTP/1.1
Host: objects.githubusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nanannaduas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/2 200 OK
content-type: application/octet-stream
content-md5: KfuSs0MKkeD2d6X4UoAGJw==
last-modified: Tue, 26 Apr 2022 10:12:16 GMT
etag: "0x8DA276D3DC9A6B7"
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: e921381b-701e-0042-21fe-9458d5000000
x-ms-version: 2020-04-08
x-ms-creation-time: Tue, 26 Apr 2022 10:12:16 GMT
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
content-disposition: attachment; filename=web3-provider.min.js
x-ms-server-encrypted: true
via: 1.1 varnish, 1.1 varnish
fastly-restarts: 1
accept-ranges: bytes
date: Fri, 02 Jun 2023 03:05:47 GMT
age: 226
x-served-by: cache-iad-kiad7000054-IAD, cache-bma1678-BMA
x-cache: HIT, HIT
x-cache-hits: 23, 1
x-timer: S1685675147.343124,VS0,VE105
content-length: 747143
X-Firefox-Spdy: h2

code.jquery.com/jquery-3.6.0.js

69.16.175.42

200 OK

84714

URL GET HTTP/2

code.jquery.com/jquery-3.6.0.js
IP

69.16.175.42:443
ASN

#20446 STACKPATH-CDN

Requested by

https://nanannaduas.com/
Certificate

IssuerSectigo Limited

Subject*.jquery.com

Fingerprint64:50:4C:BB:DF:F3:1D:70:CC:5D:9E:B7:BE:80:91:84:03:C1:D1:83

ValidityWed, 03 Aug 2022 00:00:00 GMT - Fri, 14 Jul 2023 23:59:59 GMT

Magic

ASCII text

Size

84714
Hash

2849239b95f5a9a2aea3f6ed9420bb88

af32f706407ab08f800c5e697cce92466e735847

1fe2bb5390a75e5d61e72c107cab528fc3c29a837d69aab7d200e1dbb5dcd239

HTTP Headers

                                        GET /jquery-3.6.0.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nanannaduas.com
DNT: 1
Connection: keep-alive
Referer: https://nanannaduas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/2 200 OK
date: Fri, 02 Jun 2023 03:05:47 GMT
content-encoding: gzip
content-length: 84714
content-type: application/javascript; charset=utf-8
last-modified: Wed, 16 Feb 2022 10:50:39 GMT
accept-ranges: bytes
server: nginx
etag: W/"620cd6ff-46744"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1685675147.dop216.sk1.t,1685675147.cds015.sk1.hn,1685675147.cds214.sk1.c
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

472

URL

ocsp.pki.goog/gts1c3
IP

142.250.74.131:0
ASN

#15169 GOOGLE

Magic

data

Size

472
Hash

de06f6fcbc144014f20c63dd5fe236b4

7f10e556cc7c7786c031a226d3efc006f8511c28

ae157c3fec7620409ce8cf7d841a47c30b487c02bbc82df9127345b7b1149f3e

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Jun 2023 03:05:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

unpkg.com/@metamask/legacy-web3@2.0.0/dist/metamask.web3.min.js

104.16.122.175

200 OK

94142

URL GET HTTP/2

unpkg.com/@metamask/legacy-web3@2.0.0/dist/metamask.web3.min.js
IP

104.16.122.175:443
ASN

#13335 CLOUDFLARENET

Requested by

https://nanannaduas.com/
Certificate

IssuerCloudflare, Inc.

Subjectsni.cloudflaressl.com

FingerprintF7:B6:41:CA:15:FD:D1:0C:27:39:55:5D:C5:CE:3F:1C:A6:BB:9D:6F

ValidityTue, 02 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT

Magic

ASCII text, with very long lines (44596)

Size

94142
Hash

3dfa1bd9b895e124fced8027a2200b81

f3ba0505ecc793a0a3bfa6029e9686902e2dc137

50b5e9fc66be298b843d41b7505b709ef6f484048b29d068730d435f0e21d8e5

HTTP Headers

                                        GET /@metamask/legacy-web3@2.0.0/dist/metamask.web3.min.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nanannaduas.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/2 200 OK
date: Fri, 02 Jun 2023 03:05:47 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: W/"3c8eb-87oFBezHk6Cjv6YCnpaGkC4twTc"
via: 1.1 fly.io
fly-request-id: 01H132DKS55Z55W9PAF4HK4T49-fra
cf-cache-status: HIT
age: 871016
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7d0c7a071d7afab4-OSL
content-encoding: br
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

472

URL

ocsp.pki.goog/gts1c3
IP

142.250.74.131:0
ASN

#15169 GOOGLE

Magic

data

Size

472
Hash

de06f6fcbc144014f20c63dd5fe236b4

7f10e556cc7c7786c031a226d3efc006f8511c28

ae157c3fec7620409ce8cf7d841a47c30b487c02bbc82df9127345b7b1149f3e

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Jun 2023 03:05:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

fonts.gstatic.com/s/kanit/v13/nKKZ-Go6G5tXcraVGwA.woff2

216.58.207.227

200 OK

19388

URL GET HTTP/2

fonts.gstatic.com/s/kanit/v13/nKKZ-Go6G5tXcraVGwA.woff2
IP

216.58.207.227:443
ASN

#15169 GOOGLE

Requested by

https://nanannaduas.com/
Certificate

IssuerGoogle Trust Services LLC

Subject*.gstatic.com

FingerprintA3:09:CB:6C:64:76:4B:58:32:D1:21:3E:F4:65:1F:DE:58:22:8F:D6

ValidityMon, 08 May 2023 08:24:48 GMT - Mon, 31 Jul 2023 08:24:47 GMT

Magic

Web Open Font Format (Version 2), TrueType, length 19388, version 1.0\012- data

Size

19388
Hash

f816f16f297c801aaf01ff43c9fcd563

2e9e2c80bc5aa5f01f75cd486baa1769f53dea5e

ae7b918efe7cd287651e014ed269c923e1a925c8eee1a474ad11184f04659d3e

HTTP Headers

                                        GET /s/kanit/v13/nKKZ-Go6G5tXcraVGwA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://nanannaduas.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 19388
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Jun 2023 00:49:45 GMT
expires: Fri, 31 May 2024 00:49:45 GMT
cache-control: public, max-age=31536000
age: 94562
last-modified: Tue, 02 May 2023 14:57:25 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

472

URL

ocsp.pki.goog/gts1c3
IP

142.250.74.131:0
ASN

#15169 GOOGLE

Magic

data

Size

472
Hash

de06f6fcbc144014f20c63dd5fe236b4

7f10e556cc7c7786c031a226d3efc006f8511c28

ae157c3fec7620409ce8cf7d841a47c30b487c02bbc82df9127345b7b1149f3e

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Jun 2023 03:05:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

nanannaduas.com/styles/css/main.css

188.114.96.1

200 OK

41270

URL GET HTTP/3

nanannaduas.com/styles/css/main.css
IP

188.114.96.1:443
ASN

#13335 CLOUDFLARENET

Requested by

https://nanannaduas.com/
Certificate

IssuerLet's Encrypt

Subjectnanannaduas.com

Fingerprint78:11:2E:88:64:7B:A1:0A:0F:4D:5D:60:6D:CD:2C:2A:73:8A:42:89

ValidityThu, 04 May 2023 12:48:33 GMT - Wed, 02 Aug 2023 12:48:32 GMT

Magic

ASCII text

Size

41270
Hash

284a6721f9be7e049abd3a7637a31267

07bdd17477244aa2efeae2fc8d0966349cd6a76d

2762664212f44c720884213d01a27e36150a530885b3feee7d290a11cb9214af

Detections

Analyzer	Verdict	Alert
openphish	Crypto/Wallet

HTTP Headers

                                        GET /styles/css/main.css HTTP/1.1
Host: nanannaduas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nanannaduas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/3 200 OK
date: Fri, 02 Jun 2023 03:05:46 GMT
content-type: text/css
last-modified: Fri, 05 May 2023 15:31:33 GMT
etag: W/"64552155-a136"
expires: Sat, 03 Jun 2023 03:05:46 GMT
cache-control: max-age=86400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QJuq34JEAH8w8mKsdqwkyq%2FdArgGpJR2JOpbInPD2Fd4udfqB7qdAO0k58zPwUR4IFpT96PjAbGmaPkK5o1%2F0ScE64YPvtjLbzHwU%2Fon6KWpIAAk4SC56PF7ZatdiqweAWc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d0c7a0138080b4d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

unpkg.com/@walletconnect/web3-provider@1.2.1/dist/umd/index.min.js

104.16.122.175

200 OK

1062220

URL GET HTTP/2

unpkg.com/@walletconnect/web3-provider@1.2.1/dist/umd/index.min.js
IP

104.16.122.175:443
ASN

#13335 CLOUDFLARENET

Requested by

https://nanannaduas.com/
Certificate

IssuerCloudflare, Inc.

Subjectsni.cloudflaressl.com

FingerprintF7:B6:41:CA:15:FD:D1:0C:27:39:55:5D:C5:CE:3F:1C:A6:BB:9D:6F

ValidityTue, 02 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT

Magic

Size

1062220
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

                                        GET /@walletconnect/web3-provider@1.2.1/dist/umd/index.min.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nanannaduas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/2 200 OK
date: Fri, 02 Jun 2023 03:05:46 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: W/"10354c-SQkpH4nf0Fs213c6eRJ65TZA0Lo"
via: 1.1 fly.io
fly-request-id: 01G4XHM24VE4HAJ63YXW3TXFEY-fra
cf-cache-status: HIT
age: 31121276
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7d0c7a023ca2fab4-OSL
content-encoding: br
X-Firefox-Spdy: h2

nanannaduas.com/favicon.ico

188.114.96.1

404 Not Found

209

URL GET HTTP/3

nanannaduas.com/favicon.ico
IP

188.114.96.1:443
ASN

#13335 CLOUDFLARENET

Requested by

https://nanannaduas.com/
Certificate

IssuerLet's Encrypt

Subjectnanannaduas.com

Fingerprint78:11:2E:88:64:7B:A1:0A:0F:4D:5D:60:6D:CD:2C:2A:73:8A:42:89

ValidityThu, 04 May 2023 12:48:33 GMT - Wed, 02 Aug 2023 12:48:32 GMT

Magic

HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with no line terminators

Size

209
Hash

8ace35f18ab1832bacfde13597767517

22e4ee51bbdba11b19a2d6879bc60126dc89eecd

f87134d32dc903f27ed9c905bfd824f31192dac9e05887b2dedbb1ca416d1280

Detections

Analyzer	Verdict	Alert
openphish	Crypto/Wallet

HTTP Headers

                                        GET /favicon.ico HTTP/1.1
Host: nanannaduas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nanannaduas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/3 404 Not Found
date: Fri, 02 Jun 2023 03:05:48 GMT
content-type: text/html; charset=iso-8859-1
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=biHG%2FhlSBjEXi0HG0SIE%2Fd1MKbGsBEEnTUXvsK4gEf3v%2Br4E59gv6syPf93oZfFMJg4iN%2FAVIa3OJiw5wXydAulXfqdlMoj307wDthwNMmemgB2FLJKRlpF6aJJ3%2FIxUM28%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d0c7a0dab640b4d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

nanannaduas.com/styles/css/modal.css

188.114.96.1

200 OK

1330

URL GET HTTP/3

nanannaduas.com/styles/css/modal.css
IP

188.114.96.1:443
ASN

#13335 CLOUDFLARENET

Requested by

https://nanannaduas.com/
Certificate

IssuerLet's Encrypt

Subjectnanannaduas.com

Fingerprint78:11:2E:88:64:7B:A1:0A:0F:4D:5D:60:6D:CD:2C:2A:73:8A:42:89

ValidityThu, 04 May 2023 12:48:33 GMT - Wed, 02 Aug 2023 12:48:32 GMT

Magic

ASCII text, with very long lines (1486), with no line terminators

Size

1330
Hash

f7480a29de1ec92f422889a4f30bf9e4

45d15640c9fe5549fd605cf5177978a1e79a0f2f

abfbdea83f656a39e46ea9e36e1bb491cd98cb79fb9eccbc34954c9cdf429d95

Detections

Analyzer	Verdict	Alert
openphish	Crypto/Wallet

HTTP Headers

                                        GET /styles/css/modal.css HTTP/1.1
Host: nanannaduas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nanannaduas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/3 200 OK
date: Fri, 02 Jun 2023 03:05:46 GMT
content-type: text/css
last-modified: Fri, 05 May 2023 15:31:33 GMT
etag: W/"64552155-532"
expires: Sat, 03 Jun 2023 03:05:46 GMT
cache-control: max-age=86400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dLFrvnnl8fl%2FeGPyrbAsp9J9%2FA8ridDHEGRVlme0sCna2B%2F2QM6WceSkkw8M%2BqS3ybEWlzASPXscj5X2p%2FkKAQzeph1UeWWmQ%2FeZu8eenG3SmAaq7EQUl3%2F%2Fc5M%2Fvs4YMvI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d0c7a01380a0b4d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

nanannaduas.com/ABI.js

188.114.96.1

200 OK

34257

URL GET HTTP/3

nanannaduas.com/ABI.js
IP

188.114.96.1:443
ASN

#13335 CLOUDFLARENET

Requested by

https://nanannaduas.com/
Certificate

IssuerLet's Encrypt

Subjectnanannaduas.com

Fingerprint78:11:2E:88:64:7B:A1:0A:0F:4D:5D:60:6D:CD:2C:2A:73:8A:42:89

ValidityThu, 04 May 2023 12:48:33 GMT - Wed, 02 Aug 2023 12:48:32 GMT

Magic

ASCII text, with very long lines (15353), with CRLF line terminators

Size

34257
Hash

f3c57b3d8609b5fb4fb24685db3447ee

6e64f133c54dcc9411dbbb0270325f38f6aac2d7

8357ad9a297473cbac5118506b7df37bc4b335040d22774cf70c5d15a19d1897

Detections

Analyzer	Verdict	Alert
openphish	Crypto/Wallet

HTTP Headers

                                        GET /ABI.js HTTP/1.1
Host: nanannaduas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nanannaduas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/3 200 OK
date: Fri, 02 Jun 2023 03:05:46 GMT
content-type: application/javascript
last-modified: Fri, 05 May 2023 15:31:33 GMT
etag: W/"64552155-85d1"
expires: Sat, 03 Jun 2023 03:05:46 GMT
cache-control: max-age=86400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8C4djNlbt7aHenGjeAG9%2BeJI4UrHBXw5akdHsAzHCxUOcXcW1RSP4fEGCJF3a%2Fnf0jgzbMnSfsrqZCwABOeYP0ocT1kwYhIMDsoL1lB%2Fn90PkTxEW%2B2CNTtAdmzdISDxvhY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d0c7a01681e0b4d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

unpkg.com/web3modal@1.9.0/dist/index.js

104.16.122.175

200 OK

428153

URL GET HTTP/2

unpkg.com/web3modal@1.9.0/dist/index.js
IP

104.16.122.175:443
ASN

#13335 CLOUDFLARENET

Requested by

https://nanannaduas.com/
Certificate

IssuerCloudflare, Inc.

Subjectsni.cloudflaressl.com

FingerprintF7:B6:41:CA:15:FD:D1:0C:27:39:55:5D:C5:CE:3F:1C:A6:BB:9D:6F

ValidityTue, 02 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT

Magic

ASCII text, with very long lines (42390)

Size

428153
Hash

e0c60891548d18f595484a212aac9bd7

b66eefc0f6f622aac0da81034d8ca596d3b4339e

67ad2454feca6eb213f4a70cc588137e6bd21ad95c0eda2709faa2317ff90359

HTTP Headers

                                        GET /web3modal@1.9.0/dist/index.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nanannaduas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/2 200 OK
date: Fri, 02 Jun 2023 03:05:46 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: W/"68879-tm7vwPb2IqrA2oEDTYylltO0M54"
via: 1.1 fly.io
fly-request-id: 01GQ4JECARFY4085G41QARNATK-fra
cf-cache-status: HIT
age: 11558077
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7d0c7a022ca0fab4-OSL
content-encoding: br
X-Firefox-Spdy: h2

unpkg.com/fortmatic@2.0.6/dist/fortmatic.js

104.16.122.175

200 OK

35960

URL GET HTTP/2

unpkg.com/fortmatic@2.0.6/dist/fortmatic.js
IP

104.16.122.175:443
ASN

#13335 CLOUDFLARENET

Requested by

https://nanannaduas.com/
Certificate

IssuerCloudflare, Inc.

Subjectsni.cloudflaressl.com

FingerprintF7:B6:41:CA:15:FD:D1:0C:27:39:55:5D:C5:CE:3F:1C:A6:BB:9D:6F

ValidityTue, 02 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT

Magic

ASCII text, with very long lines (35960), with no line terminators

Size

35960
Hash

56496a1b18bfee511bccc196538443c1

f1a8881c0b7a0d35e2c981c1b42dfbe76e0d8ef2

0b8822c2c385fdd4f64b5a815e662439aaba14f79aef4a5813e12ba122dd317c

HTTP Headers

                                        GET /fortmatic@2.0.6/dist/fortmatic.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nanannaduas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/2 200 OK
date: Fri, 02 Jun 2023 03:05:46 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: W/"8c78-8aiIHAt6DTXiyYHBtC37524NjvI"
via: 1.1 fly.io
fly-request-id: 01G4XQFMW3SH2W49E12D3VMPRX-fra
cf-cache-status: HIT
age: 31115129
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7d0c7a025caefab4-OSL
content-encoding: br
X-Firefox-Spdy: h2

unpkg.com/web3modal@1.9.7/dist/index.js

104.16.122.175

200 OK

444061

URL GET HTTP/2

unpkg.com/web3modal@1.9.7/dist/index.js
IP

104.16.122.175:443
ASN

#13335 CLOUDFLARENET

Requested by

https://nanannaduas.com/
Certificate

IssuerCloudflare, Inc.

Subjectsni.cloudflaressl.com

FingerprintF7:B6:41:CA:15:FD:D1:0C:27:39:55:5D:C5:CE:3F:1C:A6:BB:9D:6F

ValidityTue, 02 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT

Magic

ASCII text, with very long lines (49679)

Size

444061
Hash

134d37ce51545a0f2cc2e5e88605bae6

cde070db619d86dd685255d0c43e5cd5cc969cab

df08c11cdf5e3a5c169e08f83f4a4b4dd92c00332c70b3fda6c617c0bbd07ebc

HTTP Headers

                                        GET /web3modal@1.9.7/dist/index.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nanannaduas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/2 200 OK
date: Fri, 02 Jun 2023 03:05:46 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: W/"6c69d-zeBw22Gdht1oUlXQxD5c1cyWnKs"
via: 1.1 fly.io
fly-request-id: 01GV68EMWYX7KT0VGYREZRCHE1-ams
cf-cache-status: HIT
age: 7206479
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7d0c7a01cc8afab4-OSL
content-encoding: br
X-Firefox-Spdy: h2

nanannaduas.com/slider.js

188.114.96.1

200 OK

96822

URL GET HTTP/3

nanannaduas.com/slider.js
IP

188.114.96.1:443
ASN

#13335 CLOUDFLARENET

Requested by

https://nanannaduas.com/
Certificate

IssuerLet's Encrypt

Subjectnanannaduas.com

Fingerprint78:11:2E:88:64:7B:A1:0A:0F:4D:5D:60:6D:CD:2C:2A:73:8A:42:89

ValidityThu, 04 May 2023 12:48:33 GMT - Wed, 02 Aug 2023 12:48:32 GMT

Magic

Size

96822
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
openphish	Crypto/Wallet

HTTP Headers

                                        GET /slider.js HTTP/1.1
Host: nanannaduas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nanannaduas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/3 200 OK
date: Fri, 02 Jun 2023 03:05:46 GMT
content-type: application/javascript
last-modified: Fri, 05 May 2023 15:31:33 GMT
etag: W/"64552155-17a36"
expires: Sat, 03 Jun 2023 03:05:46 GMT
cache-control: max-age=86400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CjfibwYrtN6fAj0Pgsi7tsL84o0k431YGQCv1iFhJGGQnf3bXOKnR6pSkiB%2Bucg9YxzN2sDlJ3cmo47dq1XqB392fgmi8Jx%2B6n4arf6zkDYvZLlNZY1AXC9egyZd2ePKQvM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d0c7a01681d0b4d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

nanannaduas.com/jqueryjs.js

188.114.96.1

200 OK

2054464

URL GET HTTP/3

nanannaduas.com/jqueryjs.js
IP

188.114.96.1:443
ASN

#13335 CLOUDFLARENET

Requested by

https://nanannaduas.com/
Certificate

IssuerLet's Encrypt

Subjectnanannaduas.com

Fingerprint78:11:2E:88:64:7B:A1:0A:0F:4D:5D:60:6D:CD:2C:2A:73:8A:42:89

ValidityThu, 04 May 2023 12:48:33 GMT - Wed, 02 Aug 2023 12:48:32 GMT

Magic

Size

2054464
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
openphish	Crypto/Wallet

HTTP Headers

                                        GET /jqueryjs.js HTTP/1.1
Host: nanannaduas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nanannaduas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/3 200 OK
date: Fri, 02 Jun 2023 03:05:46 GMT
content-type: application/javascript
last-modified: Fri, 05 May 2023 15:31:33 GMT
etag: W/"64552155-1f5940"
expires: Sat, 03 Jun 2023 03:05:46 GMT
cache-control: max-age=86400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cv8yputWa8GOnJNx9nRrXl1iMIYwwxnRTwSVqXU%2B8A6GFEWt3Enck6mOMKiib4pcRn9MmpJY3nRkSXZ8lF7oUOPadr2zM1FkZBfJLL%2BlRXRQf4GNkLOpI8uZbjIpOajqcAk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d0c7a01681f0b4d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

fonts.gstatic.com/s/kanit/v13/nKKU-Go6G5tXcr5KPxWnVaE.woff2

216.58.207.227

200 OK

19572

URL GET HTTP/2

fonts.gstatic.com/s/kanit/v13/nKKU-Go6G5tXcr5KPxWnVaE.woff2
IP

216.58.207.227:443
ASN

#15169 GOOGLE

Requested by

https://nanannaduas.com/
Certificate

IssuerGoogle Trust Services LLC

Subject*.gstatic.com

FingerprintA3:09:CB:6C:64:76:4B:58:32:D1:21:3E:F4:65:1F:DE:58:22:8F:D6

ValidityMon, 08 May 2023 08:24:48 GMT - Mon, 31 Jul 2023 08:24:47 GMT

Magic

Web Open Font Format (Version 2), TrueType, length 19572, version 1.0\012- data

Size

19572
Hash

24ad3fea714cb5e100aa16f832531bf3

a5475cd37afb39fc2472ef8391a4a3fd900122eb

7196c3002f08704f9f99de95b6357969a512eaa9a766eee693921dce72927cea

HTTP Headers

                                        GET /s/kanit/v13/nKKU-Go6G5tXcr5KPxWnVaE.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://nanannaduas.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 19572
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Jun 2023 07:50:03 GMT
expires: Fri, 31 May 2024 07:50:03 GMT
cache-control: public, max-age=31536000
age: 69344
last-modified: Tue, 02 May 2023 14:57:34 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

unpkg.com/evm-chains@0.2.0/dist/umd/index.min.js

104.16.122.175

200 OK

22657

URL GET HTTP/2

unpkg.com/evm-chains@0.2.0/dist/umd/index.min.js
IP

104.16.122.175:443
ASN

#13335 CLOUDFLARENET

Requested by

https://nanannaduas.com/
Certificate

IssuerCloudflare, Inc.

Subjectsni.cloudflaressl.com

FingerprintF7:B6:41:CA:15:FD:D1:0C:27:39:55:5D:C5:CE:3F:1C:A6:BB:9D:6F

ValidityTue, 02 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT

Magic

Size

22657
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

                                        GET /evm-chains@0.2.0/dist/umd/index.min.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nanannaduas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/2 200 OK
date: Fri, 02 Jun 2023 03:05:46 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Mon, 02 Nov 2020 20:31:28 GMT
etag: W/"5881-yk4n8EqlvpHDLglCWD85vKUneh8"
via: 1.1 fly.io
fly-request-id: 01G3YDPBXRA18B04P0CD7HWFWJ-fra
cf-cache-status: HIT
age: 629290
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7d0c7a023ca3fab4-OSL
content-encoding: br
X-Firefox-Spdy: h2

cdn.ethers.io/lib/ethers-5.2.umd.min.js

54.230.111.106

200 OK

733070

URL GET HTTP/2

cdn.ethers.io/lib/ethers-5.2.umd.min.js
IP

54.230.111.106:443
ASN

#16509 AMAZON-02

Requested by

https://nanannaduas.com/
Certificate

IssuerAmazon

Subjectethers.io

FingerprintBA:83:2B:DB:29:97:63:0C:2E:D9:2E:94:14:18:BE:51:F1:4B:32:EC

ValidityTue, 21 Feb 2023 00:00:00 GMT - Tue, 28 Nov 2023 23:59:59 GMT

Magic

Size

733070
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

                                        GET /lib/ethers-5.2.umd.min.js HTTP/1.1
Host: cdn.ethers.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nanannaduas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
last-modified: Thu, 20 May 2021 21:33:05 GMT
x-amz-version-id: 3StspTE73ijjMFvXMjx4rHtfrweE9frC
server: AmazonS3
content-encoding: gzip
date: Thu, 01 Jun 2023 06:37:11 GMT
etag: W/"50ed955cf32ac8e4e1daa0fac8fcde98"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: QgG4YkWrsC4oWBZzCb57ApDZM3iEoyGVNtoju9xV6DDoTifc8yfvuQ==
age: 73717
X-Firefox-Spdy: h2

unpkg.com/web3@1.2.11/dist/web3.min.js

104.16.122.175

200 OK

1163746

URL GET HTTP/2

unpkg.com/web3@1.2.11/dist/web3.min.js
IP

104.16.122.175:443
ASN

#13335 CLOUDFLARENET

Requested by

https://nanannaduas.com/
Certificate

IssuerCloudflare, Inc.

Subjectsni.cloudflaressl.com

FingerprintF7:B6:41:CA:15:FD:D1:0C:27:39:55:5D:C5:CE:3F:1C:A6:BB:9D:6F

ValidityTue, 02 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT

Magic

Size

1163746
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

                                        GET /web3@1.2.11/dist/web3.min.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nanannaduas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/2 200 OK
date: Fri, 02 Jun 2023 03:05:46 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: W/"11c1e2-CBKBj3aedzOyuXE1C535ub1XCzM"
via: 1.1 fly.io
fly-request-id: 01G4XHM42X0JVS1XGA34G5AG9K-fra
cf-cache-status: HIT
age: 31121276
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7d0c7a01fc97fab4-OSL
content-encoding: br
X-Firefox-Spdy: h2

nanannaduas.com/walletbundle.js

188.114.96.1

200 OK

498655

URL GET HTTP/3

nanannaduas.com/walletbundle.js
IP

188.114.96.1:443
ASN

#13335 CLOUDFLARENET

Requested by

https://nanannaduas.com/
Certificate

IssuerLet's Encrypt

Subjectnanannaduas.com

Fingerprint78:11:2E:88:64:7B:A1:0A:0F:4D:5D:60:6D:CD:2C:2A:73:8A:42:89

ValidityThu, 04 May 2023 12:48:33 GMT - Wed, 02 Aug 2023 12:48:32 GMT

Magic

<

Report Overview

URL

IP

ASN

Submitted

Access

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (22)

#1 JS:Script (size: 733070)

#2 JS:Script (size: 108601)

#3 JS:Script (size: 288580)

#4 JS:Script (size: 37)

#5 JS:Script (size: 428153)

#6 JS:Script (size: 1062220)

#7 JS:Script (size: 35960)

#8 JS:Script (size: 34)

#9 JS:Script (size: 22657)

#10 JS:Script (size: 1292297)

#11 JS:Script (size: 34257)

#12 JS:Script (size: 96822)

#13 JS:Script (size: 323051)

#14 JS:Script (size: 498655)

#15 JS:Script (size: 1163746)

#16 JS:Script (size: 49)

#17 JS:Script (size: 89501)

#18 JS:Script (size: 444061)

#19 JS:Script (size: 20763)

#20 JS:Script (size: 248043)

#21 JS:Script (size: 1300)

#22 JS:Script (size: 747143)

HTTP Transactions (41)

URL GET HTTP/3

IP

ASN

Requested by

Certificate

Magic

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

Magic

Size

Hash

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

Magic

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

Magic