| cdn.jsdelivr.net/particles.js/2.0.0/ |  104.18.187.31 | 200 OK | 6.4 kB |
URL GET HTTP/2cdn.jsdelivr.net/particles.js/2.0.0/ IP104.18.187.31:443
Requested byhttps://nvd123s-utilities.vercel.app/ CertificateIssuerSectigo Limited Subject*.jsdelivr.net Fingerprint74:7A:63:DF:06:27:1E:52:8C:E8:0D:AD:1F:89:98:B5:EB:2D:49:EE ValiditySat, 04 May 2024 00:00:00 GMT - Sun, 04 May 2025 23:59:59 GMT
File typeASCII text, with very long lines (23002) Hash00debcf6cf0789a19cee2278011afcd4 8017f8b1869077db728573f1ca4684a00af69462 faee7815a5fd27e938d1e01c8392b66332024908eb118048f608eee671371df6
GET /particles.js/2.0.0/ HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 22:12:34 GMT
content-type: application/javascript; charset=utf-8
content-length: 6363
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
etag: W/"5b44-gBf4sYaQd9tyhXPxykaEoAr2lGI"
content-encoding: br
x-served-by: cache-fra-etou8220098-FRA, cache-lga21939-LGA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 328729
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PUx3YCSrFxkQJ6tYEX%2Fxh382yXpc%2F2Cz3%2BL%2FRXepT1A1BjU0OOlXllMvPuaU6p6yRWOJANnvg5knx3KA4AJ5HbdYLHtW5pgHnyeotZndJORDWUyFmnb4CujWN9e8pDkfoEs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881d45811a720b02-OSL
X-Firefox-Spdy: h2
|
|
| nvd123s-utilities.vercel.app/assets/styles/global.css?v=8 |  76.76.21.123 | 200 OK | 667 B |
URL GET HTTP/2nvd123s-utilities.vercel.app/assets/styles/global.css?v=8 IP76.76.21.123:443
Requested byhttps://nvd123s-utilities.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
Hashd3dd0f723ddea471d94fbb0e61c46e76 8e237e1356b131cf05a233baa903404dd7c3d2e1 cb5ae5f97cb63fb3898f27c5f41991803e68ac6f9a2a9b2754328e11a1a713c3
GET /assets/styles/global.css?v=8 HTTP/1.1
Host: nvd123s-utilities.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public, max-age=0
content-type: text/css; charset=UTF-8
date: Fri, 10 May 2024 22:12:34 GMT
etag: W/"29b-1668f272800"
last-modified: Sat, 20 Oct 2018 01:46:40 GMT
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-powered-by: Express
x-vercel-cache: MISS
x-vercel-id: arn1::iad1::8485g-1715379154091-21b103dfad78
content-length: 667
X-Firefox-Spdy: h2
|
|
| nvd123s-utilities.vercel.app/assets/-/config.js?v=5-5-2024 | 76.76.21.123 | 200 OK | 328 B |
URL GET HTTP/2nvd123s-utilities.vercel.app/assets/-/config.js?v=5-5-2024 IP76.76.21.123:443
Requested byhttps://nvd123s-utilities.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
Hashf8b9b72b22e1e9c0c7c52300c61e2592 23beb631454300c60e0ed492dffa675aad7ece42 096643506933d256dd9d40086c08bf3807653d7719472260196ee200c058213f
GET /assets/-/config.js?v=5-5-2024 HTTP/1.1
Host: nvd123s-utilities.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public, max-age=0
content-type: application/javascript; charset=UTF-8
date: Fri, 10 May 2024 22:12:34 GMT
etag: W/"148-1668f272800"
last-modified: Sat, 20 Oct 2018 01:46:40 GMT
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-powered-by: Express
x-vercel-cache: MISS
x-vercel-id: arn1::iad1::8485g-1715379154098-d9f17f603b12
content-length: 328
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=G-WKJQ5QHQTJ | 142.250.74.168 | 200 OK | 102 kB |
URL GET HTTP/2www.googletagmanager.com/gtag/js?id=G-WKJQ5QHQTJ IP142.250.74.168:443
Requested byhttps://nvd123s-utilities.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT
File typeJavaScript source, ASCII text, with very long lines (5955) Size102 kB (102228 bytes) Hashdcaee52243c786462885d695f0da7776 194a702e0e668ef1dbda7cbfdce93d1dbb7b2426 605b2af842959eeaf251312e652f50863c4eba40635a11fbef2b3c8fd134306f
GET /gtag/js?id=G-WKJQ5QHQTJ HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 10 May 2024 22:12:34 GMT
expires: Fri, 10 May 2024 22:12:34 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 102228
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| nvd123s-utilities.vercel.app/assets/scripts/m.js?v=52 | 76.76.21.123 | 200 OK | 3.2 kB |
URL GET HTTP/2nvd123s-utilities.vercel.app/assets/scripts/m.js?v=52 IP76.76.21.123:443
Requested byhttps://nvd123s-utilities.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, Unicode text, UTF-8 text Hash69cc932a921aa73736db8f62eb6f15a9 4bf64ba9e32449dbf39f0d04a922ff0cd2e1b239 3de894c876ee4290458925f0a5f46d0a5cbdbc13ef868b2dbaa26935c6a7b06f
GET /assets/scripts/m.js?v=52 HTTP/1.1
Host: nvd123s-utilities.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
age: 0
cache-control: public, max-age=0
content-encoding: br
content-type: application/javascript; charset=UTF-8
date: Fri, 10 May 2024 22:12:34 GMT
etag: W/"238d-1668f272800"
last-modified: Sat, 20 Oct 2018 01:46:40 GMT
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-powered-by: Express
x-vercel-cache: MISS
x-vercel-id: arn1::iad1::7qggl-1715379154100-ae724e21228a
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css2?family=Poppins&display=swap | 142.250.74.106 | 200 OK | 829 B |
URL GET HTTP/2fonts.googleapis.com/css2?family=Poppins&display=swap IP142.250.74.106:443
Requested byhttps://nvd123s-utilities.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File typegzip compressed data, max compression Hashdfa45f0e10e5a2159d3f208685b5d5f3 b33d3f6c5a9150934e61f81a7ac148de63f6ea81 393efb4de6a22d996dd6967ab549d7e870996f5c62b7e5242f16f3e18d75632b
GET /css2?family=Poppins&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nvd123s-utilities.vercel.app/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 10 May 2024 22:12:34 GMT
date: Fri, 10 May 2024 22:12:34 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| nvd123s-utilities.vercel.app/assets/-/bundle.js?v=5-5-2024 | 76.76.21.123 | 200 OK | 204 kB |
URL GET HTTP/2nvd123s-utilities.vercel.app/assets/-/bundle.js?v=5-5-2024 IP76.76.21.123:443
Requested byhttps://nvd123s-utilities.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size204 kB (203516 bytes) Hash233df411a1e40a6a2d25b57d500048d0 910a058d4c60dbe09a680d327949c7ecebf18525 cfc60af218465fceb32cf93e2dc2fc06827b0f856972a94370748d36e2e6f6b8
GET /assets/-/bundle.js?v=5-5-2024 HTTP/1.1
Host: nvd123s-utilities.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
age: 0
cache-control: public, max-age=0
content-encoding: br
content-type: application/javascript; charset=UTF-8
date: Fri, 10 May 2024 22:12:34 GMT
etag: W/"bf8db-1668f272800"
last-modified: Sat, 20 Oct 2018 01:46:40 GMT
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-powered-by: Express
x-vercel-cache: MISS
x-vercel-id: arn1::iad1::8485g-1715379154098-4ae5dcc36b99
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 | 216.58.207.227 | 200 OK | 47 kB |
URL GET HTTP/2fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 IP216.58.207.227:443
Requested byhttps://nvd123s-utilities.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 46704, version 1.0 Hash30a274cd01b6eeb0b082c918b0697f1e 393311bde26b99a4ad935fa55bad1dce7994388b 88df0b5a7bc397dbc13a26bb8b3742cc62cd1c9b0dded57da7832416d6f52f42
GET /s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://nvd123s-utilities.vercel.app
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 46704
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 06 May 2024 10:54:17 GMT
expires: Tue, 06 May 2025 10:54:17 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 13 Sep 2023 23:49:07 GMT
content-type: font/woff2
age: 386297
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 | 216.58.207.227 | 200 OK | 47 kB |
URL GET HTTP/2fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 IP216.58.207.227:443
Requested byhttps://nvd123s-utilities.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 46704, version 1.0 Hash30a274cd01b6eeb0b082c918b0697f1e 393311bde26b99a4ad935fa55bad1dce7994388b 88df0b5a7bc397dbc13a26bb8b3742cc62cd1c9b0dded57da7832416d6f52f42
GET /s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://nvd123s-utilities.vercel.app
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 46704
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 06 May 2024 10:54:17 GMT
expires: Tue, 06 May 2025 10:54:17 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 13 Sep 2023 23:49:07 GMT
content-type: font/woff2
age: 386297
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css2?family=Inter:wght@400;600;800&display=swap | 142.250.74.106 | 200 OK | 8.6 kB |
URL GET HTTP/2fonts.googleapis.com/css2?family=Inter:wght@400;600;800&display=swap IP142.250.74.106:443
Requested byhttps://nvd123s-utilities.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File typegzip compressed data, max compression Hash3c6f8f5421716c27365a4d63cad6557a 68ba8302d7a88bd1cc41b841b4c5014fd34037ad 69983e6c6d03426db08f9848c7f157013462277fb6f7599c671ff2d83fb7f607
GET /css2?family=Inter:wght@400;600;800&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nvd123s-utilities.vercel.app/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 10 May 2024 22:12:34 GMT
date: Fri, 10 May 2024 22:12:34 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 | 216.58.207.227 | 200 OK | 47 kB |
URL GET HTTP/2fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 IP216.58.207.227:443
Requested byhttps://nvd123s-utilities.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 46704, version 1.0 Hash30a274cd01b6eeb0b082c918b0697f1e 393311bde26b99a4ad935fa55bad1dce7994388b 88df0b5a7bc397dbc13a26bb8b3742cc62cd1c9b0dded57da7832416d6f52f42
GET /s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://nvd123s-utilities.vercel.app
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 46704
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 06 May 2024 10:54:17 GMT
expires: Tue, 06 May 2025 10:54:17 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 13 Sep 2023 23:49:07 GMT
content-type: font/woff2
age: 386298
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ka-f.fontawesome.com/releases/v6.5.2/webfonts/free-fa-solid-900.woff2 | 172.67.139.119 | 200 OK | 156 kB |
URL GET HTTP/2ka-f.fontawesome.com/releases/v6.5.2/webfonts/free-fa-solid-900.woff2 IP172.67.139.119:443
Requested byhttps://nvd123s-utilities.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectka-f.fontawesome.com FingerprintB7:87:04:20:5C:0E:FA:B1:92:D1:3B:91:3F:39:7C:48:5C:CB:01:EA ValidityFri, 03 May 2024 11:08:04 GMT - Thu, 01 Aug 2024 11:08:03 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 156388, version 773.1280 Size156 kB (156388 bytes) Hashae015e3286ef56a0daf8e83838a32a88 7c18577fd6c4e7d9036b244215ace3945372eefe 41dca0965bdfd255f85e7fc8e9a3dc1fe3eb810996c553d4ef2b8872737ee825
GET /releases/v6.5.2/webfonts/free-fa-solid-900.woff2 HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://nvd123s-utilities.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 10 May 2024 22:12:35 GMT
content-type: font/woff2
content-length: 156388
last-modified: Tue, 02 Apr 2024 15:51:14 GMT
etag: "ae015e3286ef56a0daf8e83838a32a88"
x-amz-server-side-encryption: AES256
cache-control: max-age=31556926
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: fa-kit-token
access-control-max-age: 3000
x-cache: Hit from cloudfront
via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 57Fiq2VcOVDO2kUsirSWUqidhzCt4y61dBBg4GiwpHNu5V8tkFA2gA==
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LDiDL8lXoaEG5a2WFqX%2BJwcnOeAKvHm7KUaxDZmdVwoqX8OrB3dqCxnugYlYeXKxk1Uqawt3dswmp1nih7XaJLINdAt61r4HP92GJL31DD9f7JDbPz%2BkClpgdqcY6r5fRgJFLeyfwA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881d458799a17130-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| nvd123s-utilities.vercel.app/assets/media/background/full2.png | 76.76.21.123 | 200 OK | 21 kB |
URL GET HTTP/2nvd123s-utilities.vercel.app/assets/media/background/full2.png IP76.76.21.123:443
Requested byhttps://nvd123s-utilities.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typePNG image data, 2560 x 2384, 8-bit grayscale, non-interlaced Hash7fee209fc0bd3c7b6a89b57e72539242 888eeac4f995fb07f3bdb884bc535a5a1fdaa792 f4534dc93a43aafac708fd499890300cc7c1bb09775b26593d0b220469392716
GET /assets/media/background/full2.png HTTP/1.1
Host: nvd123s-utilities.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nvd123s-utilities.vercel.app/assets/styles/main.css?v=8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public, max-age=0
content-type: image/png
date: Fri, 10 May 2024 22:12:34 GMT
etag: W/"3adc-1668f272800"
last-modified: Sat, 20 Oct 2018 01:46:40 GMT
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-powered-by: Express
x-vercel-cache: MISS
x-vercel-id: arn1::iad1::pxmb4-1715379154633-c9144c5fc466
X-Firefox-Spdy: h2
|
|
| ka-f.fontawesome.com/releases/v6.5.2/css/free-v4-shims.min.css?token=1237c86ba0 | 172.67.139.119 | 200 OK | 9.1 kB |
URL GET HTTP/2ka-f.fontawesome.com/releases/v6.5.2/css/free-v4-shims.min.css?token=1237c86ba0 IP172.67.139.119:443
Requested byhttps://nvd123s-utilities.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectka-f.fontawesome.com FingerprintB7:87:04:20:5C:0E:FA:B1:92:D1:3B:91:3F:39:7C:48:5C:CB:01:EA ValidityFri, 03 May 2024 11:08:04 GMT - Thu, 01 Aug 2024 11:08:03 GMT
File typegzip compressed data, from Unix Hashfa24fe44044a23120c61e15c7648b448 d433712af00412b118e9a5f3f847a34827f8355f 681cf7e6d46fe68fd6dd1f8e9f1427f511d999d4b9a22e921073324ca9c254f3
GET /releases/v6.5.2/css/free-v4-shims.min.css?token=1237c86ba0 HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nvd123s-utilities.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 22:12:34 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Tue, 02 Apr 2024 15:26:25 GMT
etag: W/"940b066040a876fa1dc7b2ee2d222a58"
x-amz-server-side-encryption: AES256
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Gfryu2Hh-Oy6tepcskwO1xoa-N3RUB9EYtVODKk9CCSCfgOPaM7R6Q==
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2TIORL5nJ5bB4yl00kEyPlw%2Bj7uVjivAjBmIepMXd%2FtsQeCdylAU8aInp3BelHmRvb%2Bv2zpWaxgKCi5YWKXS8z1kChusmWq4kEe0SAyKsewykcIFlVJ5GE%2BLy6ldI%2BhJlVe6zvpYwg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881d45853fb67130-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| nvd123s-utilities.vercel.app/favicon.png | 76.76.21.123 | 200 OK | 397 B |
URL GET HTTP/2nvd123s-utilities.vercel.app/favicon.png IP76.76.21.123:443
Requested byhttps://nvd123s-utilities.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typePNG image data, 16 x 16, 8-bit colormap, non-interlaced Hash513d3ba3d5eae6e289be64f939643e34 a489d315db8ce304d43c6e5c909b2bfbcaccbfe1 373408137f0807c48e1173690739e006b26d5a467b04aefa21a5b64cf6015df6
GET /favicon.png HTTP/1.1
Host: nvd123s-utilities.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: _ga_WKJQ5QHQTJ=GS1.1.1715379154.1.0.1715379154.0.0.0; _ga=GA1.1.1297751282.1715379155
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public, max-age=0
content-type: image/png
date: Fri, 10 May 2024 22:12:35 GMT
etag: W/"18d-1668f272800"
last-modified: Sat, 20 Oct 2018 01:46:40 GMT
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-powered-by: Express
x-vercel-cache: MISS
x-vercel-id: arn1::iad1::kb9s4-1715379155265-a77159ad3a8c
content-length: 397
X-Firefox-Spdy: h2
|
|
| nvd123s-utilities.vercel.app/assets/styles/main.css?v=8 | 76.76.21.123 | 200 OK | 18 kB |
URL GET HTTP/2nvd123s-utilities.vercel.app/assets/styles/main.css?v=8 IP76.76.21.123:443
Requested byhttps://nvd123s-utilities.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typetroff or preprocessor input, ASCII text Hash80de3c6e0ab7925bdfa1078b9a8a1040 0d9b78166fd43ab47ee46fdd8c5dd0ad74a9d063 86410ca74ea9c39b425914834295ad2b65062b888040e230686b71d8ade8ed9f
GET /assets/styles/main.css?v=8 HTTP/1.1
Host: nvd123s-utilities.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
age: 0
cache-control: public, max-age=0
content-encoding: br
content-type: text/css; charset=UTF-8
date: Fri, 10 May 2024 22:12:34 GMT
etag: W/"1fba-1668f272800"
last-modified: Sat, 20 Oct 2018 01:46:40 GMT
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-powered-by: Express
x-vercel-cache: MISS
x-vercel-id: arn1::iad1::f9r2d-1715379154090-4c599765e0f2
X-Firefox-Spdy: h2
|
|
| ocsp.r2m03.amazontrust.com/ | 143.204.53.97 | | 471 B |
URL ocsp.r2m03.amazontrust.com/ IP143.204.53.97:0
Hashf7a3aabaedd5c95463e85c2d7682d410 715b2bd7dd959bb3423d71b22c43302b7a18a3a5 55ab8ca84eb2c090ff2a4eb9ebc48ce053c3f38261d66bded94f03719a384335
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Fri, 10 May 2024 22:12:35 GMT
Last-Modified: Fri, 10 May 2024 20:31:09 GMT
Server: ECAcc (ska/F73A)
X-Cache: Miss from cloudfront
Via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 2MHKR2b13i4AClA08yl_PUmBdgdKgY1NXd_w9yulW2KbAYSDLWYlmQ==
Age: 6086
|
|
| proftrafficcounter.com/stats |  18.185.9.67 | 200 OK | 40 B |
URL GET HTTP/2proftrafficcounter.com/stats IP18.185.9.67:443
Requested byhttps://nvd123s-utilities.vercel.app/ CertificateIssuerAmazon Subjectproftrafficcounter.com FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6 ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hash07f99278339dfdde9f00a3f4742b603c dc3cdfe5edf9e545854f68fa1a743cd1e4f27aca 82da932427b3c198e798952db03c20c2b1d3f147b7e4148e684c459b0279704b
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nvd123s-utilities.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 22:12:35 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://nvd123s-utilities.vercel.app
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=074c24cc-9d68-4a35-9369-4180f0e240a9:2:1; expires=Mon, 08 May 2034 22:12:35 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
|
|
| unseenreport.com/pxf.gif?uuid=074c24cc-9d68-4a35-9369-4180f0e240a9&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=1cc38a6899fdf8ba4dfe779bcc54627b&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=22 | 192.243.59.12 | 200 OK | 1 B |
URL GET HTTP/1.1unseenreport.com/pxf.gif?uuid=074c24cc-9d68-4a35-9369-4180f0e240a9&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=1cc38a6899fdf8ba4dfe779bcc54627b&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=22 IP192.243.59.12:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://nvd123s-utilities.vercel.app/ CertificateIssuerLet's Encrypt Subject*.unseenreport.com Fingerprint71:46:15:FD:76:6A:F5:5B:51:06:CC:93:DD:D8:63:E3:8B:10:BF:13 ValidityFri, 22 Mar 2024 07:32:41 GMT - Thu, 20 Jun 2024 07:32:40 GMT
File typevery short file (no magic) Hash93b885adfe0da089cdf634904fd59f71 5ba93c9db0cff93f52b521d7420e43f6eda2784f 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pxf.gif?uuid=074c24cc-9d68-4a35-9369-4180f0e240a9&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=1cc38a6899fdf8ba4dfe779bcc54627b&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=22 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 10 May 2024 22:12:36 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 6b1b896f53c80c8e20484c90a0a136a8
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| abodedistributionpan.com/sbar.json?key=1cc38a6899fdf8ba4dfe779bcc54627b&uuid=074c24cc-9d68-4a35-9369-4180f0e240a9%3A2%3A1 | 172.240.127.234 | 200 OK | 8.3 kB |
URL GET HTTP/1.1abodedistributionpan.com/sbar.json?key=1cc38a6899fdf8ba4dfe779bcc54627b&uuid=074c24cc-9d68-4a35-9369-4180f0e240a9%3A2%3A1 IP172.240.127.234:443
Requested byhttps://nvd123s-utilities.vercel.app/ CertificateIssuerLet's Encrypt Subjectabodedistributionpan.com Fingerprint0A:F0:49:46:E9:89:77:CB:6E:7E:0C:A3:C6:E1:22:CA:19:69:A4:DC ValidityMon, 06 May 2024 08:18:50 GMT - Sun, 04 Aug 2024 08:18:49 GMT
Hashc47e87f7549c1f2a27e7c5732327b468 f9c371060bc3210ab9f31c8972bd568d6f83ef07 991035c7fa45325bc3ad39aa8d1c79c5fc7b8adeb2b77b760919dc7966192959
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sbar.json?key=1cc38a6899fdf8ba4dfe779bcc54627b&uuid=074c24cc-9d68-4a35-9369-4180f0e240a9%3A2%3A1 HTTP/1.1
Host: abodedistributionpan.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nvd123s-utilities.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 10 May 2024 22:12:36 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://nvd123s-utilities.vercel.app
Access-Control-Allow-Origin: https://nvd123s-utilities.vercel.app
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=22492867; expires=Sat, 11 May 2024 22:12:36 GMT; secure; SameSite=None
uid_id2=074c24cc-9d68-4a35-9369-4180f0e240a9:2:1; expires=Fri, 17 May 2024 22:12:36 GMT; secure; SameSite=None
pdhtkv=true; expires=Sat, 11 May 2024 22:12:36 GMT; secure; SameSite=None
uncs=1; expires=Sat, 11 May 2024 22:12:36 GMT; secure; SameSite=None
pdhtkv29=true; expires=Sat, 11 May 2024 22:12:36 GMT; secure; SameSite=None
uncs29=1; expires=Sat, 11 May 2024 22:12:36 GMT; secure; SameSite=None
slec1cc38a6899fdf8ba4dfe779bcc54627b=[5228477,5228472]; expires=Fri, 10 May 2024 22:12:41 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 1a36579e74a114729150fef6caf4a35f
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| abodedistributionpan.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSQYgcRRStHvfmQTS5iTAHDwrZ2e6e3u5pA4bEuBJcsyFRkptWV1VPyq3paqq6p2f3tBiUeBu8erD3zW4WNYhexEuizARyWBAzetmDexOvQiTgTWayOPgP9f%2F77xe8er8%2B2S2PiY%2BSHl18R29LpejKasttvnLD884212VWDpqDTvh%2BGJxtmv5rcdhyX22%2BJdimXvFdz3U912uuSSNSPViZkZD53dhrxW4r8FveaoCB%2BT%2B2pQNLHfD%2BMXkBkk%2BXHjinIdkYWe%2Fbi8JuFjo%2F82avVLTQBn1%2B8F62mekqQ29RpsZBmh2cTEPbR2v3obP9uVzo%2Fn%2BDiZwS5%2BF9JNnBiUgk%2Fb25zkRBZEj4s6j6Ywg1hqRjMH0Lkj8iAOO4vIGsd%2BeyNhXdesrSGTslS08eQ1ZTsvT7aWS9by4oOWhe06ospM4sBmkNORhDdsfIywmK7QZkNQErPoLkP5OVJ%2BvIensbVmlIfvSyGwXMDxhbjnnYWQ5oe3U5bofxcuB13NQVfuDSeG6QlGPIdAwlhqC2gdI6KKWDMnVQ5g56%2FKjJPM%2BLXM6o24kZa%2FNIJCF3PRqlHvXcsIOSzd4wRJEPwdQQzOwgNzvYlEOY8ifYmzUsd2ALgj6vUQmCyhJUlKCSBFVBUPXrfa6sb%2Bs7XNky8U6yf5Lb9UgX3V26r4uuyAioGcLwejc%2FJs%2FPDHSuhxNsiqOmx1i7Q8NOHKc87SQ04KmIojhhbDUI%2FSiBlTWkbYBaB9tySsI%2FI%2BRySk6d%2BQIJncCqCZg8BVq%2BBFrVoDdrbGff92Xe6mqZFcLYQihFTYvmObiukRdLKLacXXVMXpwvc%2BPhPQh2SE4CzNTITY0P5QOCrro9uqorsndVV5Z8t5EXsie36WzR1wpaCOert8VWpQ2%2FdNEOvzzPZsSsvPuusMU6zbjMupZ8fUFyLsyaNkyQe5fsdZFcKe3NC6XJynz9yhtrl3q5EdZKnY1B5ZSQ0WMwOSXP%2FfLP%2FA%2Bf%2BfgGpBnDlDV65UKr1BOwfAc2X%2FSsJjBqgZPcQVXWI%2BMni6aSBEosME1qWHF47u8%2FPjj%2FabSORBz%2B%2BNdTbmTo7DaV9a69ja5pgBa3kPVq9E2NvqpB1RC2fGZU5Obw3K%2FteSBRjVGiTGMvUUZ9Nrd5dvwAK4%2BaUbvt0jBe9aKIiigJ%2FE4aepxSPwj9MKRtFHaavv75b%2F8CAAD%2F%2FwEAAP%2F%2FGclx0J0EAAA%3D | 172.240.127.234 | 200 OK | 7 B |
URL GET HTTP/1.1abodedistributionpan.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSQYgcRRStHvfmQTS5iTAHDwrZ2e6e3u5pA4bEuBJcsyFRkptWV1VPyq3paqq6p2f3tBiUeBu8erD3zW4WNYhexEuizARyWBAzetmDexOvQiTgTWayOPgP9f%2F77xe8er8%2B2S2PiY%2BSHl18R29LpejKasttvnLD884212VWDpqDTvh%2BGJxtmv5rcdhyX22%2BJdimXvFdz3U912uuSSNSPViZkZD53dhrxW4r8FveaoCB%2BT%2B2pQNLHfD%2BMXkBkk%2BXHjinIdkYWe%2Fbi8JuFjo%2F82avVLTQBn1%2B8F62mekqQ29RpsZBmh2cTEPbR2v3obP9uVzo%2Fn%2BDiZwS5%2BF9JNnBiUgk%2Fb25zkRBZEj4s6j6Ywg1hqRjMH0Lkj8iAOO4vIGsd%2BeyNhXdesrSGTslS08eQ1ZTsvT7aWS9by4oOWhe06ospM4sBmkNORhDdsfIywmK7QZkNQErPoLkP5OVJ%2BvIensbVmlIfvSyGwXMDxhbjnnYWQ5oe3U5bofxcuB13NQVfuDSeG6QlGPIdAwlhqC2gdI6KKWDMnVQ5g56%2FKjJPM%2BLXM6o24kZa%2FNIJCF3PRqlHvXcsIOSzd4wRJEPwdQQzOwgNzvYlEOY8ifYmzUsd2ALgj6vUQmCyhJUlKCSBFVBUPXrfa6sb%2Bs7XNky8U6yf5Lb9UgX3V26r4uuyAioGcLwejc%2FJs%2FPDHSuhxNsiqOmx1i7Q8NOHKc87SQ04KmIojhhbDUI%2FSiBlTWkbYBaB9tySsI%2FI%2BRySk6d%2BQIJncCqCZg8BVq%2BBFrVoDdrbGff92Xe6mqZFcLYQihFTYvmObiukRdLKLacXXVMXpwvc%2BPhPQh2SE4CzNTITY0P5QOCrro9uqorsndVV5Z8t5EXsie36WzR1wpaCOert8VWpQ2%2FdNEOvzzPZsSsvPuusMU6zbjMupZ8fUFyLsyaNkyQe5fsdZFcKe3NC6XJynz9yhtrl3q5EdZKnY1B5ZSQ0WMwOSXP%2FfLP%2FA%2Bf%2BfgGpBnDlDV65UKr1BOwfAc2X%2FSsJjBqgZPcQVXWI%2BMni6aSBEosME1qWHF47u8%2FPjj%2FabSORBz%2B%2BNdTbmTo7DaV9a69ja5pgBa3kPVq9E2NvqpB1RC2fGZU5Obw3K%2FteSBRjVGiTGMvUUZ9Nrd5dvwAK4%2BaUbvt0jBe9aKIiigJ%2FE4aepxSPwj9MKRtFHaavv75b%2F8CAAD%2F%2FwEAAP%2F%2FGclx0J0EAAA%3D IP172.240.127.234:443
Requested byhttps://nvd123s-utilities.vercel.app/ CertificateIssuerLet's Encrypt Subjectabodedistributionpan.com Fingerprint0A:F0:49:46:E9:89:77:CB:6E:7E:0C:A3:C6:E1:22:CA:19:69:A4:DC ValidityMon, 06 May 2024 08:18:50 GMT - Sun, 04 Aug 2024 08:18:49 GMT
File typeASCII text, with no line terminators Hash132d6af1b46048b45cf86cdee7991d31 eb7007d03d59b65bc6da7e098c4d38fc6dfb6285 ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSQYgcRRStHvfmQTS5iTAHDwrZ2e6e3u5pA4bEuBJcsyFRkptWV1VPyq3paqq6p2f3tBiUeBu8erD3zW4WNYhexEuizARyWBAzetmDexOvQiTgTWayOPgP9f%2F77xe8er8%2B2S2PiY%2BSHl18R29LpejKasttvnLD884212VWDpqDTvh%2BGJxtmv5rcdhyX22%2BJdimXvFdz3U912uuSSNSPViZkZD53dhrxW4r8FveaoCB%2BT%2B2pQNLHfD%2BMXkBkk%2BXHjinIdkYWe%2Fbi8JuFjo%2F82avVLTQBn1%2B8F62mekqQ29RpsZBmh2cTEPbR2v3obP9uVzo%2Fn%2BDiZwS5%2BF9JNnBiUgk%2Fb25zkRBZEj4s6j6Ywg1hqRjMH0Lkj8iAOO4vIGsd%2BeyNhXdesrSGTslS08eQ1ZTsvT7aWS9by4oOWhe06ospM4sBmkNORhDdsfIywmK7QZkNQErPoLkP5OVJ%2BvIensbVmlIfvSyGwXMDxhbjnnYWQ5oe3U5bofxcuB13NQVfuDSeG6QlGPIdAwlhqC2gdI6KKWDMnVQ5g56%2FKjJPM%2BLXM6o24kZa%2FNIJCF3PRqlHvXcsIOSzd4wRJEPwdQQzOwgNzvYlEOY8ifYmzUsd2ALgj6vUQmCyhJUlKCSBFVBUPXrfa6sb%2Bs7XNky8U6yf5Lb9UgX3V26r4uuyAioGcLwejc%2FJs%2FPDHSuhxNsiqOmx1i7Q8NOHKc87SQ04KmIojhhbDUI%2FSiBlTWkbYBaB9tySsI%2FI%2BRySk6d%2BQIJncCqCZg8BVq%2BBFrVoDdrbGff92Xe6mqZFcLYQihFTYvmObiukRdLKLacXXVMXpwvc%2BPhPQh2SE4CzNTITY0P5QOCrro9uqorsndVV5Z8t5EXsie36WzR1wpaCOert8VWpQ2%2FdNEOvzzPZsSsvPuusMU6zbjMupZ8fUFyLsyaNkyQe5fsdZFcKe3NC6XJynz9yhtrl3q5EdZKnY1B5ZSQ0WMwOSXP%2FfLP%2FA%2Bf%2BfgGpBnDlDV65UKr1BOwfAc2X%2FSsJjBqgZPcQVXWI%2BMni6aSBEosME1qWHF47u8%2FPjj%2FabSORBz%2B%2BNdTbmTo7DaV9a69ja5pgBa3kPVq9E2NvqpB1RC2fGZU5Obw3K%2FteSBRjVGiTGMvUUZ9Nrd5dvwAK4%2BaUbvt0jBe9aKIiigJ%2FE4aepxSPwj9MKRtFHaavv75b%2F8CAAD%2F%2FwEAAP%2F%2FGclx0J0EAAA%3D HTTP/1.1
Host: abodedistributionpan.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: u_pl=22492867; uid_id2=074c24cc-9d68-4a35-9369-4180f0e240a9:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec1cc38a6899fdf8ba4dfe779bcc54627b=[5228477,5228472]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 10 May 2024 22:12:37 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 0a7614a1a9f58414868e35aec433caf7
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| abodedistributionpan.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fau%2F48%2F48%2Feb%2F4848ebd6f7295875a5d388ec2488aba3%2F1648542421.html&l=1538&fd=339 | 172.240.127.234 | 200 OK | 0 B |
URL GET HTTP/1.1abodedistributionpan.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fau%2F48%2F48%2Feb%2F4848ebd6f7295875a5d388ec2488aba3%2F1648542421.html&l=1538&fd=339 IP172.240.127.234:443
Requested byhttps://nvd123s-utilities.vercel.app/ CertificateIssuerLet's Encrypt Subjectabodedistributionpan.com Fingerprint0A:F0:49:46:E9:89:77:CB:6E:7E:0C:A3:C6:E1:22:CA:19:69:A4:DC ValidityMon, 06 May 2024 08:18:50 GMT - Sun, 04 Aug 2024 08:18:49 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fau%2F48%2F48%2Feb%2F4848ebd6f7295875a5d388ec2488aba3%2F1648542421.html&l=1538&fd=339 HTTP/1.1
Host: abodedistributionpan.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: u_pl=22492867; uid_id2=074c24cc-9d68-4a35-9369-4180f0e240a9:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec1cc38a6899fdf8ba4dfe779bcc54627b=[5228477,5228472]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 10 May 2024 22:12:37 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| cdn.creative-bars1.com/sb/ssp/vpn/classic-push/big1/img/close.png | 172.67.141.24 | 200 OK | 591 B |
URL GET HTTP/2cdn.creative-bars1.com/sb/ssp/vpn/classic-push/big1/img/close.png IP172.67.141.24:443
Requested byhttps://nvd123s-utilities.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectcreative-bars1.com Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13 ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT
File typePNG image data, 12 x 12, 8-bit/color RGBA, non-interlaced Hash9fd5bcb6103d86e317bd1eb019bcbe71 6b5a52ea669dcb74946f2bed4bdd7ec985026113 0ddd3be104ac7945fb062096df62034a6a24ecc76ba92493c35c62c3c25982ae
GET /sb/ssp/vpn/classic-push/big1/img/close.png HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 10 May 2024 22:12:37 GMT
content-type: image/png
content-length: 591
last-modified: Fri, 19 Jan 2024 14:19:42 GMT
etag: "65aa84fe-24f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 881158
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8joL87fh%2BqCbuSzxTdjNvVeAqsmhJnEvZVloYFTsmNzrFcRXfWW8jCIzlhXN42TM8YwVce4NjTOWWkCCGqr0qd5zkms4ZMC7YaGFFcvmv3VNRZYjFYEigiJuXFMTv7HIYTy6AK%2FYOr4m"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881d45963aa30afa-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap | 142.250.74.106 | 200 OK | 1.2 kB |
URL GET HTTP/3fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap IP142.250.74.106:443
Requested byhttps://nvd123s-utilities.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File typegzip compressed data, max compression Hashabee5b4158760e1ff8d221a319f824fa d69df14fdd7d1270e1260b99a3abfc65dff4784a e7513b518649ebe3c6f3be178ce006e0ab044e73541752cd874104caf06f189f
GET /css?family=Roboto:300,400,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 10 May 2024 22:12:37 GMT
date: Fri, 10 May 2024 22:12:37 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cdn.creative-bars1.com/sb/ssp/vpn/classic-push/big1/js/jquery.min.js | 172.67.141.24 | 200 OK | 31 kB |
URL GET HTTP/2cdn.creative-bars1.com/sb/ssp/vpn/classic-push/big1/js/jquery.min.js IP172.67.141.24:443
Requested byhttps://nvd123s-utilities.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectcreative-bars1.com Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13 ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT
File typeJavaScript source, ASCII text, with very long lines (32025) Hash4a356126b9573eb7bd1e9a7494737410 8258d046f17dd3c15a5d3984e1868b7b5d1db329 22642f202577f0ba2f22cbe56b6cf291a09374487567cd3563e0d2a29f75c0c5
GET /sb/ssp/vpn/classic-push/big1/js/jquery.min.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 10 May 2024 22:12:37 GMT
content-type: application/javascript
last-modified: Fri, 19 Jan 2024 14:19:42 GMT
etag: W/"65aa84fe-1499c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 871238
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IT5KIcCK1mAiGZR0WJU37lVit%2FmjnAjUyGD1o4UNsyyg4viqSD0viMVdvWEBZz6GMPHG6oFUAquIWQPdhMqTGZs%2FBu1wvOG5MJVohFQTjr7399s0FOR0zStrYD2iw2rI%2FCPIUJuz84oJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881d45964aa70afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdn.cloudimagesb.com/si/a5f7da8098c31678f1e82c23dbf39aeedade906ff1ae8ccc4395ca7a048b3849.png | 45.133.44.9 | 200 OK | 20 kB |
URL GET HTTP/2cdn.cloudimagesb.com/si/a5f7da8098c31678f1e82c23dbf39aeedade906ff1ae8ccc4395ca7a048b3849.png IP45.133.44.9:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://nvd123s-utilities.vercel.app/ CertificateIssuerLet's Encrypt Subjectcdn.cloudimagesb.com FingerprintC6:F3:21:F0:21:7D:7E:96:0F:E8:46:7A:5E:C5:3F:D1:52:B0:67:B0 ValidityFri, 22 Mar 2024 03:01:35 GMT - Thu, 20 Jun 2024 03:01:34 GMT
File typePNG image data, 340 x 180, 8-bit/color RGBA, non-interlaced Hashffd1172aeb074aa709c5e02fc5bc567c 284186f7978b958657c523d26c0779b230116d0e 377ca7d07cedba2448f26e03f9bb836fe3d3db319a37aaa5dd84a482719438b8
GET /si/a5f7da8098c31678f1e82c23dbf39aeedade906ff1ae8ccc4395ca7a048b3849.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 22:12:37 GMT
content-type: image/png
content-length: 19936
server: nginx/1.21.6
last-modified: Thu, 09 May 2024 12:36:28 GMT
etag: "663cc34c-4de0"
expires: Sun, 12 May 2024 22:12:37 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| ka-f.fontawesome.com/releases/v6.5.2/css/free-v4-font-face.min.css?token=1237c86ba0 | 172.67.139.119 | 200 OK | 15 kB |
URL GET HTTP/2ka-f.fontawesome.com/releases/v6.5.2/css/free-v4-font-face.min.css?token=1237c86ba0 IP172.67.139.119:443
Requested byhttps://nvd123s-utilities.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectka-f.fontawesome.com FingerprintB7:87:04:20:5C:0E:FA:B1:92:D1:3B:91:3F:39:7C:48:5C:CB:01:EA ValidityFri, 03 May 2024 11:08:04 GMT - Thu, 01 Aug 2024 11:08:03 GMT
File typegzip compressed data, from Unix Hash75b2c2970c5843e2b34732e1b9b5cf3d 5d4a52405ec55e4b2c2ba1b5b033439dcf4ff9c6 3e5027f98d4044f8ef72a0810af9ecbc4e80baf8ccaa01520e13f040262e0443
GET /releases/v6.5.2/css/free-v4-font-face.min.css?token=1237c86ba0 HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nvd123s-utilities.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 22:12:34 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Tue, 02 Apr 2024 15:26:25 GMT
etag: W/"9c9f596493867f0e7ef5f9fe99103fce"
x-amz-server-side-encryption: AES256
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Qhx6E9cvUxpZKtIZKCbdPtERQVB6-LXgSk9PRBZ0zFxM4A_izIuS2g==
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=u89RB80qHinkRlbWv%2F85T4y6yXKK%2FVQFNOMAzrdodADu%2BKO0sJuMDY%2Bk%2FGoJeNHLdCezwpse4MmO6QMjYsRvIJjLKGFasjgJ3SP%2BN0bUTvMjzBZKc7KOVzQnKTSIn6V8jnOYr%2BFQoQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881d45853fc17130-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| abodedistributionpan.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fbig1%2Fcss%2Fstyle.css&l=4143&fd=322 | 172.240.127.234 | 200 OK | 0 B |
URL GET HTTP/1.1abodedistributionpan.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fbig1%2Fcss%2Fstyle.css&l=4143&fd=322 IP172.240.127.234:443
Requested byhttps://nvd123s-utilities.vercel.app/ CertificateIssuerLet's Encrypt Subjectabodedistributionpan.com Fingerprint0A:F0:49:46:E9:89:77:CB:6E:7E:0C:A3:C6:E1:22:CA:19:69:A4:DC ValidityMon, 06 May 2024 08:18:50 GMT - Sun, 04 Aug 2024 08:18:49 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fbig1%2Fcss%2Fstyle.css&l=4143&fd=322 HTTP/1.1
Host: abodedistributionpan.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: u_pl=22492867; uid_id2=074c24cc-9d68-4a35-9369-4180f0e240a9:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec1cc38a6899fdf8ba4dfe779bcc54627b=[5228477,5228472]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 10 May 2024 22:12:37 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| cdn.barscreative1.com/sb/au/48/48/eb/4848ebd6f7295875a5d388ec2488aba3/1648542421.html | 45.133.44.4 | 200 OK | 478 B |
URL GET HTTP/2cdn.barscreative1.com/sb/au/48/48/eb/4848ebd6f7295875a5d388ec2488aba3/1648542421.html IP45.133.44.4:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://nvd123s-utilities.vercel.app/ CertificateIssuerLet's Encrypt Subjectcdn.barscreative1.com Fingerprint08:55:F0:C8:EA:24:54:0D:3C:B9:2C:95:3E:DC:BF:FB:A8:76:BA:BC ValidityThu, 09 May 2024 03:01:15 GMT - Wed, 07 Aug 2024 03:01:14 GMT
File typeHTML document, ASCII text Hash5a7df8dcac4cde2aeadb9f07a622d3fa 4044f12fce935458c93ef71de58ac6bf97b28bba ccec003eccd7e299f825c7e48ba721d529f1c110bb5b60c60a18dca61cb6b45a
GET /sb/au/48/48/eb/4848ebd6f7295875a5d388ec2488aba3/1648542421.html HTTP/1.1
Host: cdn.barscreative1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nvd123s-utilities.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 22:12:37 GMT
content-type: text/html; charset=utf-8
server: nginx/1.21.6
last-modified: Tue, 29 Mar 2022 08:27:10 GMT
etag: W/"6242c2de-602"
cache-control: max-age=3600
access-control-allow-origin: *
access-control-expose-headers: Date
content-encoding: gzip
expires: Fri, 10 May 2024 23:12:37 GMT
x-proxy-cache: HIT
X-Firefox-Spdy: h2
|
|
| abodedistributionpan.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fbig1%2Fjs%2Fscript.js&l=958&fd=295 | 172.240.127.234 | 200 OK | 0 B |
URL GET HTTP/1.1abodedistributionpan.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fbig1%2Fjs%2Fscript.js&l=958&fd=295 IP172.240.127.234:443
Requested byhttps://nvd123s-utilities.vercel.app/ CertificateIssuerLet's Encrypt Subjectabodedistributionpan.com Fingerprint0A:F0:49:46:E9:89:77:CB:6E:7E:0C:A3:C6:E1:22:CA:19:69:A4:DC ValidityMon, 06 May 2024 08:18:50 GMT - Sun, 04 Aug 2024 08:18:49 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fbig1%2Fjs%2Fscript.js&l=958&fd=295 HTTP/1.1
Host: abodedistributionpan.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: u_pl=22492867; uid_id2=074c24cc-9d68-4a35-9369-4180f0e240a9:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec1cc38a6899fdf8ba4dfe779bcc54627b=[5228477,5228472]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 10 May 2024 22:12:37 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 IP216.58.207.227:443
Requested byhttps://nvd123s-utilities.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15860, version 1.0 Hashe9f5aaf547f165386cd313b995dddd8e acdef5603c2387b0e5bffd744b679a24a8bc1968 f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://nvd123s-utilities.vercel.app
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 09 May 2024 01:55:00 GMT
expires: Fri, 09 May 2025 01:55:00 GMT
cache-control: public, max-age=31536000
age: 159458
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 IP216.58.207.227:443
Requested byhttps://nvd123s-utilities.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15744, version 1.0 Hash15d9f621c3bd1599f0169dcf0bd5e63e 7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52 f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://nvd123s-utilities.vercel.app
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 04 May 2024 09:28:37 GMT
expires: Sun, 04 May 2025 09:28:37 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
age: 564241
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| abodedistributionpan.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSTWhcVRS%2Bb8zOhWi7E2EWLhSayXszb%2F4sWFprJBib0irtTu%2Ffm1xz593Hve9nklWwKHU3uHXhyzdJg1pEN%2BKmVWYKXQTEjm6yMDtxK1QK7mSmwcGzuOd85zsXvvud%2B8ledkLqyOjx5XfMjtKarjRrfvWVm0Fwvrqu4mxQHXRa77fC81Wbv9Zt1fxXq29JvmVW6n7g%2B4EfVFeVlZEZrMxIqORuN6h1%2FVpYrwXNEAP7f%2BwyD456EPkJeQFKTJceeGeh%2BBhx%2F9vL0m2lJjn3Zj%2FTNDUWuTh8L96KTRGjvygj6yGKD0%2BnYdyj1fsw8cFcLkz%2B3yBTU%2BI9vA8WH56KBMv35zqZhozBxLMo8jGkHkPRMbi5BSUeEYALXNlA3L9zxdiCbj9l6YydkqUnj6GKKVn6%2FSzi%2FjeXtBpUrxudpcrEDoOohBqMoXpjJNkE6U4FqpiApx9BiZ%2FJypN1xP39DacNlDh%2B2W%2BHvB5yvtwVrc5ySBvN5W6j1V0Og44f%2BbIe%2BrQ7N0ipMVQ0hpZDUFdB5jxkykMWecgSD31xXOVBELR9wanf6XLeEG3JWsIPaDsKaOC3Osj47A1DpMkQXA%2FB7S4Su4stNYTNfoLbLOGEB5cS5KJEIQkKR1BQgkIRFClBkZcHQru6K%2B8I7TIWnOb6aW6UI5P29uiBSXsyJqB2CCvKveSEPD8z0LvRmmBLHlcDzhsd2up0u5GIOoyGIpLtdpdx3gxb9TaDUyWUq4A6DztqSlp%2FtpGoKTlz7gswOoHTE3B1BjR7CbQoQTdL7MTf5yqp9YyKU2ldKrWmtkaTBMKUSNIlpNvenj4hL86XufHwHiQ%2FIqcBbksktsSH6gFBT98eXTMF2b9mCke%2B20hS1Vc7dLbo6ylNpffV23K7MFasXXbDLy%2FyGTEr774rXbpOY6HiniNfX1JCSLtqLJfk3pq7IdnVzG1eymycJetX31hd6ydWOqdMPAZVU0JGj8HVlDz3yz%2FzP3zu45tQdgyblehnC63KTMCTXbhk0XOGwOoFZomHIitHts4WTa0ItFxgyko4eXTh7z8%2BuPhpex1MHv3411NuZOnsNlXlnruNnq2AprcQ90vktkSuS1A9hMueGaWJPbrwa2MeYLoyYtpW9pm2%2BrO5zbPjBzh1XG34os1kJNtMhs0wklywZpP5POKsITodjtRNo9c%2F%2F%2B1fAAAA%2F%2F8BAAD%2F%2F5kdpDidBAAA | 172.240.127.234 | 200 OK | 7 B |
URL GET HTTP/1.1abodedistributionpan.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSTWhcVRS%2Bb8zOhWi7E2EWLhSayXszb%2F4sWFprJBib0irtTu%2Ffm1xz593Hve9nklWwKHU3uHXhyzdJg1pEN%2BKmVWYKXQTEjm6yMDtxK1QK7mSmwcGzuOd85zsXvvud%2B8ledkLqyOjx5XfMjtKarjRrfvWVm0Fwvrqu4mxQHXRa77fC81Wbv9Zt1fxXq29JvmVW6n7g%2B4EfVFeVlZEZrMxIqORuN6h1%2FVpYrwXNEAP7f%2BwyD456EPkJeQFKTJceeGeh%2BBhx%2F9vL0m2lJjn3Zj%2FTNDUWuTh8L96KTRGjvygj6yGKD0%2BnYdyj1fsw8cFcLkz%2B3yBTU%2BI9vA8WH56KBMv35zqZhozBxLMo8jGkHkPRMbi5BSUeEYALXNlA3L9zxdiCbj9l6YydkqUnj6GKKVn6%2FSzi%2FjeXtBpUrxudpcrEDoOohBqMoXpjJNkE6U4FqpiApx9BiZ%2FJypN1xP39DacNlDh%2B2W%2BHvB5yvtwVrc5ySBvN5W6j1V0Og44f%2BbIe%2BrQ7N0ipMVQ0hpZDUFdB5jxkykMWecgSD31xXOVBELR9wanf6XLeEG3JWsIPaDsKaOC3Osj47A1DpMkQXA%2FB7S4Su4stNYTNfoLbLOGEB5cS5KJEIQkKR1BQgkIRFClBkZcHQru6K%2B8I7TIWnOb6aW6UI5P29uiBSXsyJqB2CCvKveSEPD8z0LvRmmBLHlcDzhsd2up0u5GIOoyGIpLtdpdx3gxb9TaDUyWUq4A6DztqSlp%2FtpGoKTlz7gswOoHTE3B1BjR7CbQoQTdL7MTf5yqp9YyKU2ldKrWmtkaTBMKUSNIlpNvenj4hL86XufHwHiQ%2FIqcBbksktsSH6gFBT98eXTMF2b9mCke%2B20hS1Vc7dLbo6ylNpffV23K7MFasXXbDLy%2FyGTEr774rXbpOY6HiniNfX1JCSLtqLJfk3pq7IdnVzG1eymycJetX31hd6ydWOqdMPAZVU0JGj8HVlDz3yz%2FzP3zu45tQdgyblehnC63KTMCTXbhk0XOGwOoFZomHIitHts4WTa0ItFxgyko4eXTh7z8%2BuPhpex1MHv3411NuZOnsNlXlnruNnq2AprcQ90vktkSuS1A9hMueGaWJPbrwa2MeYLoyYtpW9pm2%2BrO5zbPjBzh1XG34os1kJNtMhs0wklywZpP5POKsITodjtRNo9c%2F%2F%2B1fAAAA%2F%2F8BAAD%2F%2F5kdpDidBAAA IP172.240.127.234:443
Requested byhttps://nvd123s-utilities.vercel.app/ CertificateIssuerLet's Encrypt Subjectabodedistributionpan.com Fingerprint0A:F0:49:46:E9:89:77:CB:6E:7E:0C:A3:C6:E1:22:CA:19:69:A4:DC ValidityMon, 06 May 2024 08:18:50 GMT - Sun, 04 Aug 2024 08:18:49 GMT
File typeASCII text, with no line terminators Hash132d6af1b46048b45cf86cdee7991d31 eb7007d03d59b65bc6da7e098c4d38fc6dfb6285 ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSTWhcVRS%2Bb8zOhWi7E2EWLhSayXszb%2F4sWFprJBib0irtTu%2Ffm1xz593Hve9nklWwKHU3uHXhyzdJg1pEN%2BKmVWYKXQTEjm6yMDtxK1QK7mSmwcGzuOd85zsXvvud%2B8ledkLqyOjx5XfMjtKarjRrfvWVm0Fwvrqu4mxQHXRa77fC81Wbv9Zt1fxXq29JvmVW6n7g%2B4EfVFeVlZEZrMxIqORuN6h1%2FVpYrwXNEAP7f%2BwyD456EPkJeQFKTJceeGeh%2BBhx%2F9vL0m2lJjn3Zj%2FTNDUWuTh8L96KTRGjvygj6yGKD0%2BnYdyj1fsw8cFcLkz%2B3yBTU%2BI9vA8WH56KBMv35zqZhozBxLMo8jGkHkPRMbi5BSUeEYALXNlA3L9zxdiCbj9l6YydkqUnj6GKKVn6%2FSzi%2FjeXtBpUrxudpcrEDoOohBqMoXpjJNkE6U4FqpiApx9BiZ%2FJypN1xP39DacNlDh%2B2W%2BHvB5yvtwVrc5ySBvN5W6j1V0Og44f%2BbIe%2BrQ7N0ipMVQ0hpZDUFdB5jxkykMWecgSD31xXOVBELR9wanf6XLeEG3JWsIPaDsKaOC3Osj47A1DpMkQXA%2FB7S4Su4stNYTNfoLbLOGEB5cS5KJEIQkKR1BQgkIRFClBkZcHQru6K%2B8I7TIWnOb6aW6UI5P29uiBSXsyJqB2CCvKveSEPD8z0LvRmmBLHlcDzhsd2up0u5GIOoyGIpLtdpdx3gxb9TaDUyWUq4A6DztqSlp%2FtpGoKTlz7gswOoHTE3B1BjR7CbQoQTdL7MTf5yqp9YyKU2ldKrWmtkaTBMKUSNIlpNvenj4hL86XufHwHiQ%2FIqcBbksktsSH6gFBT98eXTMF2b9mCke%2B20hS1Vc7dLbo6ylNpffV23K7MFasXXbDLy%2FyGTEr774rXbpOY6HiniNfX1JCSLtqLJfk3pq7IdnVzG1eymycJetX31hd6ydWOqdMPAZVU0JGj8HVlDz3yz%2FzP3zu45tQdgyblehnC63KTMCTXbhk0XOGwOoFZomHIitHts4WTa0ItFxgyko4eXTh7z8%2BuPhpex1MHv3411NuZOnsNlXlnruNnq2AprcQ90vktkSuS1A9hMueGaWJPbrwa2MeYLoyYtpW9pm2%2BrO5zbPjBzh1XG34os1kJNtMhs0wklywZpP5POKsITodjtRNo9c%2F%2F%2B1fAAAA%2F%2F8BAAD%2F%2F5kdpDidBAAA HTTP/1.1
Host: abodedistributionpan.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: u_pl=22492867; uid_id2=074c24cc-9d68-4a35-9369-4180f0e240a9:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec1cc38a6899fdf8ba4dfe779bcc54627b=[5228477,5228472]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 10 May 2024 22:12:38 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: b7df31e341a1749386777ca960a4e809
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| ka-f.fontawesome.com/releases/v6.5.2/css/free.min.css?token=1237c86ba0 | 172.67.139.119 | 200 OK | 22 kB |
URL GET HTTP/2ka-f.fontawesome.com/releases/v6.5.2/css/free.min.css?token=1237c86ba0 IP172.67.139.119:443
Requested byhttps://nvd123s-utilities.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectka-f.fontawesome.com FingerprintB7:87:04:20:5C:0E:FA:B1:92:D1:3B:91:3F:39:7C:48:5C:CB:01:EA ValidityFri, 03 May 2024 11:08:04 GMT - Thu, 01 Aug 2024 11:08:03 GMT
File typeASCII text, with very long lines (65321) Hash7f29cd8c97789aa298af8c61623ca28b af8109e0e5c8bb2c1c3ab44ba7b5d25900ca454a 3e9c73fa687cd4110688668977a7caa87f5a1dee0d11f03687bd4871deedf1c1
GET /releases/v6.5.2/css/free.min.css?token=1237c86ba0 HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nvd123s-utilities.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 22:12:34 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Tue, 02 Apr 2024 15:26:25 GMT
etag: W/"7f29cd8c97789aa298af8c61623ca28b"
x-amz-server-side-encryption: AES256
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: n7S58A-5IrxFHtRXnZg8SI0iJoTM1FvKbg_BdjqU_X47NohdPIgDSg==
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZNAEeCa5lf3KPwOKMxF2NP9qVkpkaKoXsIzpLXiQWoqXkaHorbf5Vb8g%2BZaRImzV9BQHi1UtBscGL2Qv50ZhWEbdaSBpC6RhR%2B1TSOqGGId%2BrOfxvG8fZtkZc57%2FkyMFeNsCb%2Blc5Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881d45852f9c7130-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| abodedistributionpan.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fbig1%2Fcss%2Fanimate.css&l=78693&fd=340 | 172.240.127.234 | 200 OK | 0 B |
URL GET HTTP/1.1abodedistributionpan.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fbig1%2Fcss%2Fanimate.css&l=78693&fd=340 IP172.240.127.234:443
Requested byhttps://nvd123s-utilities.vercel.app/ CertificateIssuerLet's Encrypt Subjectabodedistributionpan.com Fingerprint0A:F0:49:46:E9:89:77:CB:6E:7E:0C:A3:C6:E1:22:CA:19:69:A4:DC ValidityMon, 06 May 2024 08:18:50 GMT - Sun, 04 Aug 2024 08:18:49 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fbig1%2Fcss%2Fanimate.css&l=78693&fd=340 HTTP/1.1
Host: abodedistributionpan.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: u_pl=22492867; uid_id2=074c24cc-9d68-4a35-9369-4180f0e240a9:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec1cc38a6899fdf8ba4dfe779bcc54627b=[5228477,5228472]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 10 May 2024 22:12:37 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| nvd123s-utilities.vercel.app/assets/scripts/i.js?v=38 | 76.76.21.123 | 200 OK | 2.8 kB |
URL GET HTTP/2nvd123s-utilities.vercel.app/assets/scripts/i.js?v=38 IP76.76.21.123:443
Requested byhttps://nvd123s-utilities.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeASCII text, with very long lines (2984), with no line terminators Hash2ce639bf9b935c5bbf1e5ff30b6a8bef 9d1e753ff91aa3c30fe3d5f112bbbbcf1cc469be 0e3b22ed9dc6e486be5e8b10d4f9e010b65310621ac8e7fb9f6a1aefcb6877fe
GET /assets/scripts/i.js?v=38 HTTP/1.1
Host: nvd123s-utilities.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
age: 0
cache-control: public, max-age=0
content-encoding: br
content-type: application/javascript; charset=UTF-8
date: Fri, 10 May 2024 22:12:34 GMT
etag: W/"af0-1668f272800"
last-modified: Sat, 20 Oct 2018 01:46:40 GMT
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-powered-by: Express
x-vercel-cache: MISS
x-vercel-id: arn1::iad1::kw2sn-1715379154098-7423703af7bf
X-Firefox-Spdy: h2
|
|
| oysterscoldtiny.com/1c/c3/8a/1cc38a6899fdf8ba4dfe779bcc54627b.js | 172.240.108.84 | 200 OK | 44 kB |
URL GET HTTP/1.1oysterscoldtiny.com/1c/c3/8a/1cc38a6899fdf8ba4dfe779bcc54627b.js IP172.240.108.84:443
Requested byhttps://nvd123s-utilities.vercel.app/ CertificateIssuerLet's Encrypt Subjectoysterscoldtiny.com FingerprintC2:1B:D7:77:71:C3:7C:16:0D:1A:76:32:15:5F:F7:F7:64:C4:1E:1D ValidityTue, 16 Apr 2024 20:23:08 GMT - Mon, 15 Jul 2024 20:23:07 GMT
File typeJavaScript source, ASCII text, with very long lines (44151), with no line terminators Hash36e1437a4bb7086b9076439777cbd5ea f8106a25d39c8a1896814862716bed14933b554e b93a60233fc82a5f7c2c7b64965341591823978566e52dfa50003f6d63492a97
GET /1c/c3/8a/1cc38a6899fdf8ba4dfe779bcc54627b.js HTTP/1.1
Host: oysterscoldtiny.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 10 May 2024 22:12:35 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 5ca32bbe7c7d24a4b0df8585b08a2675
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| ka-f.fontawesome.com/releases/v6.5.2/css/free-v5-font-face.min.css?token=1237c86ba0 | 172.67.139.119 | 200 OK | 823 B |
URL GET HTTP/2ka-f.fontawesome.com/releases/v6.5.2/css/free-v5-font-face.min.css?token=1237c86ba0 IP172.67.139.119:443
Requested byhttps://nvd123s-utilities.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectka-f.fontawesome.com FingerprintB7:87:04:20:5C:0E:FA:B1:92:D1:3B:91:3F:39:7C:48:5C:CB:01:EA ValidityFri, 03 May 2024 11:08:04 GMT - Thu, 01 Aug 2024 11:08:03 GMT
File typeASCII text, with very long lines (845), with no line terminators Hashd8a0274a5097af25642c9310d6d4bb3e 61512d739400e60d9360863446eaf008395859fb 84f5ae05668bcfe4bd7447d5035e909686423e998d8dfc2c96789875ef78cdd3
GET /releases/v6.5.2/css/free-v5-font-face.min.css?token=1237c86ba0 HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nvd123s-utilities.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 22:12:34 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Tue, 02 Apr 2024 15:26:25 GMT
etag: W/"a3d53e21a02e37af6cbc00ac63b3cc1e"
x-amz-server-side-encryption: AES256
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
x-cache: Hit from cloudfront
via: 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: MOOf7b1ZmTGUYMMQB18D5GYblQNzsqXeDTNdwqtVKhwU4BjV0R-MmA==
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nZw2KN%2B7%2B0%2BM3%2FFMXHH%2B%2Ft90Zo2WHrs%2FfX%2BheoEW%2BUtY9ZRoM%2BjCIo2fAwbs2joSvlvw6SCT3DZaFpcTIT8DuX3IXun5N4EMf0X12VgrL%2Fcms334OLn8YTqNYiVkCygTqKm5bLWvxA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881d45853fa57130-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdn.creative-bars1.com/sb/ssp/vpn/classic-push/big1/css/style.css | 172.67.141.24 | 200 OK | 4.1 kB |
URL GET HTTP/2cdn.creative-bars1.com/sb/ssp/vpn/classic-push/big1/css/style.css IP172.67.141.24:443
Requested byhttps://nvd123s-utilities.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectcreative-bars1.com Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13 ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT
File typeASCII text, with very long lines (4354), with no line terminators Hash7550f9f90420fc2e46e999809b7ee308 d2e5cae2e1b29641b8d6eee15f89e4a15ae47658 88c249f9b5d5aa0c085023f9cf50083ebc5e6c8ab4e1640c76748e0b80eab322
GET /sb/ssp/vpn/classic-push/big1/css/style.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nvd123s-utilities.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 22:12:37 GMT
content-type: text/css
last-modified: Fri, 19 Jan 2024 14:19:42 GMT
etag: W/"65aa84fe-102f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
content-encoding: gzip
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZL2DYQfmST8tnKPTIsO0pIAs8GMaK%2FKiagIAsgXFV%2Bpt6q98lNiJVP9oNgCMZ1itnrCqrvDxtBwhcW%2Bv2C7RTzwW%2BNzqiq9lbGWk6guH2tlfvZA445kjIM%2BYanl0yRyJt39%2FVIRRMM7w"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881d4595aa540afa-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| nvd123s-utilities.vercel.app/assets/media/favicon/main.png | 76.76.21.123 | 200 OK | 2.2 kB |
URL GET HTTP/2nvd123s-utilities.vercel.app/assets/media/favicon/main.png IP76.76.21.123:443
Requested byhttps://nvd123s-utilities.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typePNG image data, 479 x 342, 8-bit colormap, non-interlaced Hash41ecacd4bb7a5e55160aca9ba85e9acd 6f01f056f9b5d228fa8fbce1bc88d4a57f1b2514 a4c5582e99422d180660eabd7eed0cf638e00a40b289693b9914dbc18cf19189
GET /assets/media/favicon/main.png HTTP/1.1
Host: nvd123s-utilities.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public, max-age=0
content-type: image/png
date: Fri, 10 May 2024 22:12:34 GMT
etag: W/"8bc-1668f272800"
last-modified: Sat, 20 Oct 2018 01:46:40 GMT
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-powered-by: Express
x-vercel-cache: MISS
x-vercel-id: arn1::iad1::n8fn7-1715379154722-e19c3f935b61
X-Firefox-Spdy: h2
|
|
| abodedistributionpan.com/pixel/sbs?c=1 | 192.243.59.12 | 200 OK | 0 B |
URL GET HTTP/1.1abodedistributionpan.com/pixel/sbs?c=1 IP192.243.59.12:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://nvd123s-utilities.vercel.app/ CertificateIssuerLet's Encrypt Subjectabodedistributionpan.com Fingerprint0A:F0:49:46:E9:89:77:CB:6E:7E:0C:A3:C6:E1:22:CA:19:69:A4:DC ValidityMon, 06 May 2024 08:18:50 GMT - Sun, 04 Aug 2024 08:18:49 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pixel/sbs?c=1 HTTP/1.1
Host: abodedistributionpan.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: u_pl=22492867; uid_id2=074c24cc-9d68-4a35-9369-4180f0e240a9:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec1cc38a6899fdf8ba4dfe779bcc54627b=[5228477,5228472]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 10 May 2024 22:12:38 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| cdn.creative-bars1.com/sb/ssp/vpn/classic-push/big1/css/animate.css | 172.67.141.24 | 200 OK | 79 kB |
URL GET HTTP/2cdn.creative-bars1.com/sb/ssp/vpn/classic-push/big1/css/animate.css IP172.67.141.24:443
Requested byhttps://nvd123s-utilities.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectcreative-bars1.com Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13 ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT
Hash5982c5377696d20476871062646b253f 8bf2c93fa9ccc908f7df0fb7abb911bbac3e4242 4e23a6449e6ef4614f0107cecf5c9eda75d2041c7c71f4a55d45f2a7e75450f4
GET /sb/ssp/vpn/classic-push/big1/css/animate.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nvd123s-utilities.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 22:12:37 GMT
content-type: text/css
last-modified: Fri, 19 Jan 2024 14:19:42 GMT
etag: W/"65aa84fe-13365"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
content-encoding: gzip
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aVPnC25qbsD8FDTNK07ytU4GFY9iMYIPQIiTE7rS4o9IeRUeGhQs8KwCnEDTlUwQZu0OTMR0jW0NcDJFnFCeIoxTvSD%2BqLyghOfgC2jEy9aX%2BGk0ZjcNpjBaukMOy1ueTIhvatr0WZ9l"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881d4595aa4e0afa-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdn.cloudimagesb.com/si/cb371858c0feee5bfff6064872f7525d18bb9838ba316c9a53f1c48340aa5524.png | 45.133.44.9 | 200 OK | 15 kB |
URL GET HTTP/2cdn.cloudimagesb.com/si/cb371858c0feee5bfff6064872f7525d18bb9838ba316c9a53f1c48340aa5524.png IP45.133.44.9:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://nvd123s-utilities.vercel.app/ CertificateIssuerLet's Encrypt Subjectcdn.cloudimagesb.com FingerprintC6:F3:21:F0:21:7D:7E:96:0F:E8:46:7A:5E:C5:3F:D1:52:B0:67:B0 ValidityFri, 22 Mar 2024 03:01:35 GMT - Thu, 20 Jun 2024 03:01:34 GMT
File typePNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced Hash9ea58d5bd87a3bef7b1c6ec025aa58a5 0541f772d2edcc297c43df66b9d3e609cc73fd4a 8cb3ed89c57f2850eb6b718ec6249ae006615b62075b623a47bab6a2ef377b0f
GET /si/cb371858c0feee5bfff6064872f7525d18bb9838ba316c9a53f1c48340aa5524.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 22:12:37 GMT
content-type: image/png
content-length: 14623
server: nginx/1.21.6
last-modified: Thu, 09 May 2024 12:37:42 GMT
etag: "663cc396-391f"
expires: Sun, 12 May 2024 22:12:37 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2 | 216.58.207.227 | 200 OK | 7.9 kB |
URL GET HTTP/2fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2 IP216.58.207.227:443
Requested byhttps://nvd123s-utilities.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 7884, version 1.0 Hash9212f6f9860f9fc6c69b02fedf6db8c3 ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b 7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f
GET /s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://nvd123s-utilities.vercel.app
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7884
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 09 May 2024 19:57:12 GMT
expires: Fri, 09 May 2025 19:57:12 GMT
cache-control: public, max-age=31536000
age: 94522
last-modified: Fri, 22 Mar 2024 00:00:38 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| nvd123s-utilities.vercel.app/ | 76.76.21.123 | 200 OK | 1.8 kB |
URL User Request GET HTTP/2nvd123s-utilities.vercel.app/ IP76.76.21.123:443
CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeHTML document, ASCII text, with very long lines (1977), with no line terminators Hash0fe979327f7e39692082c9e4b54bd674 fe068fd08f2f2d9935b056596c215fb71816e935 f3d324fc016c60d9fda90d1cec66d12bc6acbf6b5d3c9c6a733b9edc96af1053
GET / HTTP/1.1
Host: nvd123s-utilities.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
age: 0
cache-control: public, max-age=0
content-encoding: br
content-type: text/html; charset=UTF-8
date: Fri, 10 May 2024 22:12:33 GMT
etag: W/"732-1668f272800"
last-modified: Sat, 20 Oct 2018 01:46:40 GMT
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-powered-by: Express
x-vercel-cache: MISS
x-vercel-id: arn1::iad1::8485g-1715379153390-1dd70ead7224
X-Firefox-Spdy: h2
|
|
| nvd123s-utilities.vercel.app/assets/scripts/h.js?v=18 | 76.76.21.123 | 200 OK | 4.5 kB |
URL GET HTTP/2nvd123s-utilities.vercel.app/assets/scripts/h.js?v=18 IP76.76.21.123:443
Requested byhttps://nvd123s-utilities.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeASCII text, with very long lines (4792), with no line terminators Hashec10631143426af4cb08b6afaf357b1a ff2511fcb2f6a1ddaa241d0fbd6e3c9425b01cd0 6ca52e043c38d32b7fc3eb03b605f1980f82dff280630ec89f1d380825a69762
GET /assets/scripts/h.js?v=18 HTTP/1.1
Host: nvd123s-utilities.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
age: 0
cache-control: public, max-age=0
content-encoding: br
content-type: application/javascript; charset=UTF-8
date: Fri, 10 May 2024 22:12:34 GMT
etag: W/"11a2-1668f272800"
last-modified: Sat, 20 Oct 2018 01:46:40 GMT
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-powered-by: Express
x-vercel-cache: MISS
x-vercel-id: arn1::iad1::cb85s-1715379154098-95eacf0091da
X-Firefox-Spdy: h2
|
|
| kit.fontawesome.com/1237c86ba0.js | 104.18.40.68 | 200 OK | 12 kB |
URL GET HTTP/2kit.fontawesome.com/1237c86ba0.js IP104.18.40.68:443
Requested byhttps://nvd123s-utilities.vercel.app/ CertificateIssuerDigiCert Inc Subject*.fontawesome.com Fingerprint93:F9:69:8C:73:B0:08:60:65:F3:39:41:39:66:D3:2B:78:3A:6E:3D ValidityMon, 04 Dec 2023 00:00:00 GMT - Fri, 03 Jan 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (11461) Hash196b8ee2b1b3bfe6ce4cf580ee57bd6c 3a425fac5f5b805cfb2c119dfa82bef94c9c5d43 36058a321569fffeed23aebe57714b2ece06042e62f5c815b860cd2f8acd3622
GET /1237c86ba0.js HTTP/1.1
Host: kit.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nvd123s-utilities.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 22:12:34 GMT
content-type: text/javascript
access-control-allow-headers: accept, accept-langauge, content-language, content-type, fa-kit-token
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 3000
cache-control: max-age=60, public, stale-while-revalidate=30
vary: origin, accept-encoding, access-control-request-headers, access-control-request-method
x-request-id: F85AQJc8P7v8jEL9cJAi
cf-cache-status: MISS
server: cloudflare
cf-ray: 881d45813cedb503-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| cdn.creative-bars1.com/sb/ssp/vpn/classic-push/big1/js/script.js | 172.67.141.24 | 200 OK | 958 B |
URL GET HTTP/2cdn.creative-bars1.com/sb/ssp/vpn/classic-push/big1/js/script.js IP172.67.141.24:443
Requested byhttps://nvd123s-utilities.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectcreative-bars1.com Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13 ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT
File typeASCII text, with very long lines (1009), with no line terminators Hash04835fd7dd7f8cfbad901bee8cff2170 38e9ed1e93f8f0beba9447a99afe3995e63b6f3e be63bbd38c66ca9a9ee1c8abfed042fd5fc090c40b91ad561e922744ece47c41
GET /sb/ssp/vpn/classic-push/big1/js/script.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nvd123s-utilities.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 22:12:37 GMT
content-type: application/javascript
last-modified: Fri, 19 Jan 2024 14:19:42 GMT
etag: W/"65aa84fe-3be"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RHhJpgvjpaqsp82fC8XQzL%2FLSsazOvCRZFzJVW7OlKwCL9PVu4Eh%2B6fO2GlY1OfdqLgmC9Z71OPoNawJXSZn5VDJT%2FCzP31qIvLIH%2FYy8HVHtfVVqFCgShbj5i4MqXgepppK81uVa3Kf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881d4596dae90afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| downstairsnegotiatebarren.com/sfp.js | 172.67.180.87 | 200 OK | 86 kB |
URL GET HTTP/2downstairsnegotiatebarren.com/sfp.js IP172.67.180.87:443
Requested byhttps://nvd123s-utilities.vercel.app/ CertificateIssuerLet's Encrypt Subjectdownstairsnegotiatebarren.com Fingerprint5D:DB:CB:C6:CE:2A:8B:34:7D:BC:43:74:33:1D:5F:77:48:F7:BC:1B ValidityThu, 02 May 2024 21:26:34 GMT - Wed, 31 Jul 2024 21:26:33 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sfp.js HTTP/1.1
Host: downstairsnegotiatebarren.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 22:12:35 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: fdc31292d7ec672a1e74225de5eee85e
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Fri, 10 May 2024 22:12:35 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8I%2Bbqi%2BjVZhxsFJKVyO7yLOhQzudwm189vhM%2BTh3kzvr8BXLLPIOP5U7NIAgUEHeKnfb3UYxfuc2WMUjwIr8JO4Aj7pPet%2Bp%2BMaBIuv5dDD9ESbbYN4Aec5rZ8AM%2BB8F8KPHh21TPB7Lo%2FL7fSseVQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881d458bb8505688-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|