Report - build-something-blue.vercel.app/

Report Overview

Visited public
2024-09-07 13:11:09
Tags
URL
build-something-blue.vercel.app/
Finishing URL
build-something-blue.vercel.app/
IP / ASN
76.76.21.93
#16509 AMAZON-02
Title
Page Help Support Team

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
r10.o.lencr.org	unknown	2020-06-29	2024-06-06 21:45:11	2024-09-06 18:12:06	1.3 kB	3.5 kB	23.33.119.57
cdn.jsdelivr.net	439	2012-05-16	2012-09-30 02:15:09	2024-09-06 18:13:57	997 B	57 kB	104.18.187.31
o.pki.goog	unknown	2016-06-13	2024-04-24 13:44:57	2024-09-06 18:15:10	650 B	1.4 kB	216.58.211.3
ajax.googleapis.com	12905	2005-01-25	2013-08-16 11:51:31	2024-09-07 08:07:19	446 B	32 kB	142.250.74.170
build-something-blue.vercel.app	unknown	unknown	No data	No data	978 B	1.6 MB	76.76.21.93
r11.o.lencr.org	unknown	2020-06-29	2024-06-07 07:43:57	2024-09-06 18:12:12	654 B	1.8 kB	23.33.119.57

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-09-03	medium	build-something-blue.vercel.app/	Facebook, Inc.
2024-09-03	medium	build-something-blue.vercel.app/	Facebook, Inc.

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-09-07	medium	build-something-blue.vercel.app	Sinkholed
2024-09-07	medium	build-something-blue.vercel.app	Sinkholed

ThreatFox

No alerts detected

JavaScript (7)

	URL	From	Size	First Seen	Last Seen
	build-something-blue.vercel.app/	ScriptElement	350 B	2024-08-19	2024-09-19
Pretty URL build-something-blue.vercel.app/ IP 76.76.21.93 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2024-08-19 22:28 Last Seen2024-09-19 22:50 Times Seen3 Hash 276962cbde4e8a66e06d2e143ac4c34b 2d5d127c2cc7d7b44d7d04a3e363322c04a7b5ce 853d6074df25589e9c4b4d3877b608fe0d8fe2790461e147ac4de998298e037d Loading...

	build-something-blue.vercel.app/	ScriptElement	519 B	2023-03-10	2025-06-02
Pretty URL build-something-blue.vercel.app/ IP 76.76.21.93 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-10 02:33 Last Seen2025-06-02 10:31 Times Seen242 Hash 3679e3849ab62d9bf43950ffcc5f4da2 c0c1c50f9a514e4d18fe40471987cbdaa8a0ec14 9edfe588e12b336db25e3eeea2f6cb577dd8c0150e98ded615378fa58077876c Loading...

	build-something-blue.vercel.app/	ScriptElement	107 B	2024-08-19	2024-09-19
Pretty URL build-something-blue.vercel.app/ IP 76.76.21.93 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2024-08-19 22:28 Last Seen2024-09-19 22:50 Times Seen3 Hash 792c1bba33528b66eda5830595299acc e0b57716595bd631dc91771365caf4eb8771d2ad ca316092bf4c1568cd9dabddc7781e9b2863cac7b6a5d14640b50b8217f14e46 Loading...

	cdn.jsdelivr.net/npm/bootstrap@5.2.0-beta1/dist/js/bootstrap.bundle.min.js	ScriptElement	80 kB	2023-03-07	2025-06-12
Pretty URL cdn.jsdelivr.net/npm/bootstrap@5.2.0-beta1/dist/js/bootstrap.bundle.min.js IP 104.18.187.31 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07 Last Seen2025-06-12 05:42 Times Seen890 Hash 6dae88aba81e468737c510cc2e4ec1dd 6b4b985a90abd7ab1c2e35ff3b874d07cf8410ee 2515e37eee31f5ef3d659b21dcc84dc6ea732b06872da51078b5b526de34c0c1 Loading...

	ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js	ScriptElement	90 kB	2023-03-07	2025-06-12
Pretty URL ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js IP 142.250.74.170 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02 Last Seen2025-06-12 10:50 Times Seen213018 Hash 8fb8fee4fcc3cc86ff6c724154c49c42 b82d238d4e31fdf618bae8ac11a6c812c03dd0d4 ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e Loading...

	build-something-blue.vercel.app/	ScriptElement	717 B	2024-08-19	2024-09-19
Pretty URL build-something-blue.vercel.app/ IP 76.76.21.93 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2024-08-19 22:28 Last Seen2024-09-19 22:50 Times Seen3 Hash 69412c1ea0f545e3af80a6d98fbf0706 7b8e4f54047358c70ecbacc69aaff6e17950ac12 01acd30d2dd956911b7da7fe4f03691eb5946e4120919fd5d1498565df57eb24 Loading...

		Size	First Seen	Last Seen
	#1 Write - f096c87af191510da562a2dacda0107e	17 B	2024-09-19 22:04	2024-09-19 22:04
Pretty Observations First Seen2024-09-19 22:04 Last Seen2024-09-19 22:04 Times Seen1 Hash f096c87af191510da562a2dacda0107e 6b5ce5fe83ac684f70461e8341f6cad79647a839 dabaf6229a0524f50d52ae31c987ed0f8d19a272ca896f7fe3b7192f0c717458 Loading...

HTTP Transactions (13)

URL IP Response Size

r10.o.lencr.org/

23.33.119.57

504 B

URL
r10.o.lencr.org/
IP
23.33.119.57:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
dedd67c0946c5577f4afe8ce915d496e
13c7575ca041681cc467ada3cbcc8ac16d02a005
52d626e12edd115d218ff4e43f4fb3e9690effc7caaa9cfb673cd52a8c33728c

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "52D626E12EDD115D218FF4E43F4FB3E9690EFFC7CAAA9CFB673CD52A8C33728C"
Last-Modified: Thu, 05 Sep 2024 21:19:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7802
Expires: Sat, 07 Sep 2024 15:20:42 GMT
Date: Sat, 07 Sep 2024 13:10:40 GMT
Connection: keep-alive

r10.o.lencr.org/

23.33.119.57

504 B

URL
r10.o.lencr.org/
IP
23.33.119.57:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
60ab18bb1e8dadb29ada046753dbc185
3d30d0b2ba9061fbd90500510f6f514476a1413f
50ed93ddadd4c6c89fbf4bfa5bc29814434ab19ed98c11f4b558b68b570d49f2

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "50ED93DDADD4C6C89FBF4BFA5BC29814434AB19ED98C11F4B558B68B570D49F2"
Last-Modified: Thu, 05 Sep 2024 00:20:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16577
Expires: Sat, 07 Sep 2024 17:46:57 GMT
Date: Sat, 07 Sep 2024 13:10:40 GMT
Connection: keep-alive

r10.o.lencr.org/

23.33.119.57

504 B

URL
r10.o.lencr.org/
IP
23.33.119.57:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
12568f27d5a44a225ac0a166b4204675
bf4709d2e68c17dcb226bbfc215394c512e25ee0
cd7f51adecb731d788a61392da99a9e8c228fbf490599b7e415adb501ce42745

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "CD7F51ADECB731D788A61392DA99A9E8C228FBF490599B7E415ADB501CE42745"
Last-Modified: Thu, 05 Sep 2024 02:34:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3401
Expires: Sat, 07 Sep 2024 14:07:22 GMT
Date: Sat, 07 Sep 2024 13:10:41 GMT
Connection: keep-alive

cdn.jsdelivr.net/npm/bootstrap@5.2.0-beta1/dist/css/bootstrap.min.css

104.18.187.31

200 OK

30 kB

URL GET HTTP/2
cdn.jsdelivr.net/npm/bootstrap@5.2.0-beta1/dist/css/bootstrap.min.css
IP
104.18.187.31:443
ASN
#13335 CLOUDFLARENET

Requested by
https://build-something-blue.vercel.app/
Certificate
IssuerSectigo Limited
Subject*.jsdelivr.net
Fingerprint74:7A:63:DF:06:27:1E:52:8C:E8:0D:AD:1F:89:98:B5:EB:2D:49:EE
ValiditySat, 04 May 2024 00:00:00 GMT - Sun, 04 May 2025 23:59:59 GMT

File type
Unicode text, UTF-8 text, with very long lines (65300)
Size
30 kB (30281 bytes)
Hash
6d9c6fda1e7087224431cc8068bb998f
6273ac1a23d79a122f022f6a87c5b75c2cfafc3a
fb1763b59f9f5764294b5af9fa5250835ae608282fe6f2f2213a5952aacf1fbf

HTTP Headers

GET /npm/bootstrap@5.2.0-beta1/dist/css/bootstrap.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://build-something-blue.vercel.app
DNT: 1
Connection: keep-alive
Referer: https://build-something-blue.vercel.app/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 07 Sep 2024 13:10:41 GMT
content-type: text/css; charset=utf-8
content-length: 30281
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: 5.2.0-beta1
x-jsd-version-type: version
etag: W/"2f3f9-YnOsGiPXmhIvAi9qh8W3XCz6/Do"
content-encoding: br
x-served-by: cache-fra-etou8220113-FRA, cache-lga21948-LGA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 7436724
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=orDUXLEhHrM2htpxKl4O8Js%2F96QyoYNVKpwm%2F%2BrWdb7I6LqFnF3bVmZI60kOy8Ei25QRufdTEJeMUFjwYjjsPLkRb5CNa%2Bqa2qR%2BN%2BTwlXz8KEuToX3l24OTwOUGvCBbWDA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8bf6f0be9df656cc-OSL
X-Firefox-Spdy: h2

cdn.jsdelivr.net/npm/bootstrap@5.2.0-beta1/dist/js/bootstrap.bundle.min.js

104.18.187.31

200 OK

24 kB

URL GET HTTP/3
cdn.jsdelivr.net/npm/bootstrap@5.2.0-beta1/dist/js/bootstrap.bundle.min.js
IP
104.18.187.31:443
ASN
#13335 CLOUDFLARENET

Requested by
https://build-something-blue.vercel.app/
Certificate
IssuerSectigo Limited
Subject*.jsdelivr.net
Fingerprint74:7A:63:DF:06:27:1E:52:8C:E8:0D:AD:1F:89:98:B5:EB:2D:49:EE
ValiditySat, 04 May 2024 00:00:00 GMT - Sun, 04 May 2025 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65293)
Size
24 kB (24445 bytes)
Hash
6dae88aba81e468737c510cc2e4ec1dd
6b4b985a90abd7ab1c2e35ff3b874d07cf8410ee
2515e37eee31f5ef3d659b21dcc84dc6ea732b06872da51078b5b526de34c0c1

HTTP Headers

GET /npm/bootstrap@5.2.0-beta1/dist/js/bootstrap.bundle.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://build-something-blue.vercel.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 07 Sep 2024 13:10:41 GMT
content-type: application/javascript; charset=utf-8
content-length: 24445
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: 5.2.0-beta1
x-jsd-version-type: version
etag: W/"1377e-a0uYWpCr16scLjX/O4dNB8+EEO4"
content-encoding: br
x-served-by: cache-fra-eddf8230137-FRA, cache-lga21980-LGA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 7439278
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GxBUqaZDLOE4fHZKKiHmDI3d1ssYQvrZ3VR7M9YB1tH%2F0v%2FWVfWMwtRjxJQg8zQ2G%2B%2BSxhKKH2c%2Bje1qkL02%2BbIIphg3vI0802FIPK8ypQWAbtnoqHaZeyE2RPAhsYDoySs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8bf6f0befeb9b517-OSL

r10.o.lencr.org/

23.33.119.57

504 B

URL
r10.o.lencr.org/
IP
23.33.119.57:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
12ebe14d7f8dbb712eca26d0d794b7ac
ec6540f9ba81fd6d7ef07275f3ccf11255703d91
ea0ce6747c07afac781fc50b52f7e3e38e06e330cc4612e33ee93813c7130942

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "EA0CE6747C07AFAC781FC50B52F7E3E38E06E330CC4612E33EE93813C7130942"
Last-Modified: Thu, 05 Sep 2024 02:38:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3429
Expires: Sat, 07 Sep 2024 14:07:50 GMT
Date: Sat, 07 Sep 2024 13:10:41 GMT
Connection: keep-alive

o.pki.goog/wr2

216.58.211.3

471 B

URL
o.pki.goog/wr2
IP
216.58.211.3:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
6bce4718c11a9d9f9cf7f472a78cf5fe
9f910891396aab4c06ea36478e7ca5a5647f690d
203efce74bbfaba8e8444e8699e283988f9b060a4d344b7dcd7efe68fa5db079

HTTP Headers

POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 07 Sep 2024 13:10:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js

142.250.74.170

200 OK

31 kB

URL GET HTTP/2
ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js
IP
142.250.74.170:443
ASN
#15169 GOOGLE

Requested by
https://build-something-blue.vercel.app/
Certificate
IssuerGoogle Trust Services
Subjectupload.video.google.com
Fingerprint9F:01:79:20:AD:58:33:6E:BF:F2:BF:DA:69:ED:BD:8D:19:F9:2D:D9
ValidityMon, 12 Aug 2024 07:18:03 GMT - Mon, 04 Nov 2024 07:18:02 GMT

File type
JavaScript source, ASCII text, with very long lines (65447)
Size
31 kB (31017 bytes)
Hash
8fb8fee4fcc3cc86ff6c724154c49c42
b82d238d4e31fdf618bae8ac11a6c812c03dd0d4
ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e

HTTP Headers

GET /ajax/libs/jquery/3.6.0/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://build-something-blue.vercel.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 31017
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Sep 2024 13:39:01 GMT
expires: Sat, 06 Sep 2025 13:39:01 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Wed, 10 Mar 2021 14:28:09 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 84700
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

o.pki.goog/wr2

216.58.211.3

471 B

URL
o.pki.goog/wr2
IP
216.58.211.3:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
6bce4718c11a9d9f9cf7f472a78cf5fe
9f910891396aab4c06ea36478e7ca5a5647f690d
203efce74bbfaba8e8444e8699e283988f9b060a4d344b7dcd7efe68fa5db079

HTTP Headers

POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 07 Sep 2024 13:10:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

build-something-blue.vercel.app/assets/XXXX-removebg-preview.png

76.76.21.93

404 Not Found

39 B

URL GET HTTP/2
build-something-blue.vercel.app/assets/XXXX-removebg-preview.png
IP
76.76.21.93:443
ASN
#16509 AMAZON-02

Requested by
https://build-something-blue.vercel.app/
Certificate
IssuerLet's Encrypt
Subject*.vercel.app
Fingerprint76:B4:C8:9C:BD:E1:C8:9C:48:C6:62:70:64:26:2C:6F:D0:69:E7:24
ValidityWed, 14 Aug 2024 08:14:55 GMT - Tue, 12 Nov 2024 08:14:54 GMT

File type
ASCII text
Size
39 B (39 bytes)
Hash
d4ac7f1bba70ba87c56e6d93092b7cca
96492a95a7f9153eed58a3598c4cce56edc6f8d1
91218093a08027e8f69c8051f9deef1fe6c22b278b3f6bdf761e7587cb272774

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Facebook, Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/XXXX-removebg-preview.png HTTP/1.1
Host: build-something-blue.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://build-something-blue.vercel.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
cache-control: public, max-age=0, must-revalidate
content-type: text/plain; charset=utf-8
date: Sat, 07 Sep 2024 13:10:42 GMT
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-vercel-error: NOT_FOUND
x-vercel-id: arn1::wr7zc-1725714642175-26535973b7b1
content-length: 39
X-Firefox-Spdy: h2

r11.o.lencr.org/

23.33.119.57

504 B

URL
r11.o.lencr.org/
IP
23.33.119.57:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
ea403308c300143f98ac3665bb7b6668
563c2e409c0126ebf52562536c4e53a074e00d41
61acd8fbe3789dab363e83e4dc9f618fa076c469a7860716d1116c7613bb6cbb

HTTP Headers

POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "61ACD8FBE3789DAB363E83E4DC9F618FA076C469A7860716D1116C7613BB6CBB"
Last-Modified: Thu, 05 Sep 2024 02:34:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6518
Expires: Sat, 07 Sep 2024 14:59:21 GMT
Date: Sat, 07 Sep 2024 13:10:43 GMT
Connection: keep-alive

r11.o.lencr.org/

23.33.119.57

504 B

URL
r11.o.lencr.org/
IP
23.33.119.57:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
ea403308c300143f98ac3665bb7b6668
563c2e409c0126ebf52562536c4e53a074e00d41
61acd8fbe3789dab363e83e4dc9f618fa076c469a7860716d1116c7613bb6cbb

HTTP Headers

POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "61ACD8FBE3789DAB363E83E4DC9F618FA076C469A7860716D1116C7613BB6CBB"
Last-Modified: Thu, 05 Sep 2024 02:34:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6518
Expires: Sat, 07 Sep 2024 14:59:21 GMT
Date: Sat, 07 Sep 2024 13:10:43 GMT
Connection: keep-alive

build-something-blue.vercel.app/

76.76.21.93

200 OK

1.6 MB

URL User Request GET HTTP/2
build-something-blue.vercel.app/
IP
76.76.21.93:443
ASN
#16509 AMAZON-02

Certificate
IssuerLet's Encrypt
Subject*.vercel.app
Fingerprint76:B4:C8:9C:BD:E1:C8:9C:48:C6:62:70:64:26:2C:6F:D0:69:E7:24
ValidityWed, 14 Aug 2024 08:14:55 GMT - Tue, 12 Nov 2024 08:14:54 GMT

File type

Size
1.6 MB (1643365 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Facebook, Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: build-something-blue.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
access-control-allow-origin: *
age: 303035
cache-control: public, max-age=0, must-revalidate
content-disposition: inline
content-encoding: br
content-type: text/html; charset=utf-8
date: Sat, 07 Sep 2024 13:10:41 GMT
etag: W/"d73f2088b8603cbe077e50c10048aee4"
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-vercel-cache: HIT
x-vercel-id: arn1::m8mgm-1725714641215-2e8a762a79af
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (7)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

HTTP Transactions (13)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL GET HTTP/2