Report - heartbleed.com/

Report Overview

Visited public
2023-11-27 20:52:32
Tags
URL
heartbleed.com/
Finishing URL
heartbleed.com/
IP / ASN
54.230.111.111
#16509 AMAZON-02
Title
Heartbleed Bug

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
api.kickfire.com	74002	2000-03-28	2017-02-14 15:43:54	2023-11-19 20:04:08	494 B	1.2 kB	35.83.70.169
heartbleed.css	unknown	unknown	No data	No data	832 B	0 B	0.0.0.0
cdn.cookielaw.org	502	2011-06-20	2013-12-28 14:20:36	2023-11-27 07:32:42	3.4 kB	394 kB	104.18.130.236
assets.adobedtm.com	512	2013-11-22	2014-01-28 05:51:35	2023-11-27 10:28:39	457 B	85 kB	23.38.200.237
heartbleed.com	unknown	2014-04-05	2014-04-07 22:31:11	2023-05-10 22:38:49	2.1 kB	15 kB	54.230.111.112
www.synopsys.com	300321	1989-06-27	2013-01-03 22:16:36	2023-11-22 14:33:34	442 B	1.7 kB	96.6.19.33
fonts.googleapis.com	8877	2005-01-25	2013-06-10 22:14:26	2023-11-27 07:17:39	453 B	2.8 kB	142.250.74.74
geolocation.onetrust.com	802	2004-01-12	2018-02-07 12:23:41	2023-11-27 07:32:42	483 B	78 kB	104.18.32.137
netdna.bootstrapcdn.com	3413	2012-05-25	2012-09-07 17:11:00	2023-11-27 10:29:42	462 B	101 kB	104.18.11.207
ocsp.r2m03.amazontrust.com	unknown	2007-05-11	2023-02-21 01:06:24	2023-11-27 08:01:03	350 B	863 B	143.204.53.97

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2023-11-27	medium	heartbleed.css	Sinkholed
2023-11-27	medium	heartbleed.css	Sinkholed

ThreatFox

No alerts detected

JavaScript (6)

	URL	From	Size	First Seen	Last Seen
	heartbleed.com/	ScriptElement	492 B	2023-06-06	2024-08-20
Pretty URL heartbleed.com/ IP 54.230.111.112 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-06-06 03:51 Last Seen2024-08-20 17:41 Times Seen1 Hash a85438eea440689014822129053ce949 d62568761e7b885f75e58dc42983e8a323ad0fcf c8665234be0909074fb07bd542522241a9f8a5d737364179ef99235d3ae01abe Loading...

	assets.adobedtm.com/79b3942b8dfa/899339f5f966/launch-eae13280a5c3.min.js	ScriptElement	411 kB	2023-06-06	2023-11-27
Pretty URL assets.adobedtm.com/79b3942b8dfa/899339f5f966/launch-eae13280a5c3.min.js IP 23.38.200.237 ASN #16625 AKAMAI-AS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-06-06 03:51 Last Seen2023-11-27 21:52 Times Seen1 Hash 9f0bf2e9480e695eb8052105af572b61 6db919a129be2e30237a5d213dee55c5787cdf4e 2db7466256c942935bd5a2fd68ec9b8e5cf7ef7f28cbd7a02fc500f77d168eca Loading...

	unknown	ScriptElement	203 B	2023-06-06	2024-08-20
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-06-06 03:51 Last Seen2024-08-20 17:41 Times Seen1 Hash b367e4b1efccc3250dcb54f2568096e3 20cd300a7afb6b00df64bf15026ff7ab9602a4ff a0e048136d3af5e77c6be7cf736c28a16fe44cb26afcfc9dc36d2d197b63366e Loading...

	cdn.cookielaw.org/scripttemplates/6.27.0/otBannerSdk.js	ScriptElement	328 kB	2023-04-05	2025-05-11
Pretty URL cdn.cookielaw.org/scripttemplates/6.27.0/otBannerSdk.js IP 104.18.130.236 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-05 16:32 Last Seen2025-05-11 08:39 Times Seen340 Hash 4a388d96f091910dc50c08012ab7ecf3 a99707c8e760f59868a19993045d60a67887a1fe a384d1fc7d84b2fe1b1cb470193838a86a5c72d39268aed7825e2235285b5ef7 Loading...

	cdn.cookielaw.org/scripttemplates/otSDKStub.js	ScriptElement	21 kB	2023-11-21	2024-08-20
Pretty URL cdn.cookielaw.org/scripttemplates/otSDKStub.js IP 104.18.130.236 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-21 03:18 Last Seen2024-08-20 18:33 Times Seen2340 Hash 653dc5af4212698688db76a143fdd61a 393fada41c29c4d6c85a7857def729bc4d2cecce 9ea1823078c462969eaa59d6ef62623c19d77b72e25a103105b043aefaa0769a Loading...

	www.synopsys.com/content/dam/synopsys/util/gdpr/geo_v3.js	ScriptElement	2.6 kB	2023-09-20	2023-11-27
Pretty URL www.synopsys.com/content/dam/synopsys/util/gdpr/geo_v3.js IP 96.6.19.33 ASN #16625 AKAMAI-AS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-09-20 03:47 Last Seen2023-11-27 21:52 Times Seen3 Hash 93732d6d43301e7d917ec3174c68012d 06d96b3f91c636a6b143a6c0007b69e4e11a2d5c af368f18c76818855ce5cff03bcd45ca135d2aa0de5cf2aa2e7f22df85a36313 Loading...

HTTP Transactions (20)

URL IP Response Size

ocsp.r2m03.amazontrust.com/

143.204.53.97

471 B

URL
ocsp.r2m03.amazontrust.com/
IP
143.204.53.97:0
ASN
#16509 AMAZON-02

File type
data
Size
471 B (471 bytes)
Hash
76a21c39cdfa3572c53bcc4f5d4fa79a
74adfe6d83bdaf9d5b339dc9e563680e786d5036
5861771967679949029dc53a147af93f963ea3a6d666949b696360f6c7cfa84b

HTTP Headers

POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: max-age=7200
Date: Mon, 27 Nov 2023 20:52:14 GMT
Server: ECAcc (amb/6BDA)
X-Cache: Miss from cloudfront
Via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 2rZm-Q3y3svDi4bDJD4N2kU55OTrp_zpmT11y_iCpcM4mWU1Nu2xKg==

cdn.cookielaw.org/scripttemplates/otSDKStub.js

104.18.130.236

200 OK

6.8 kB

URL GET HTTP/2
cdn.cookielaw.org/scripttemplates/otSDKStub.js
IP
104.18.130.236:443
ASN
#13335 CLOUDFLARENET

Requested by
https://heartbleed.com/
Certificate
IssuerCloudflare, Inc.
Subjectcookielaw.org
Fingerprint72:BB:48:60:EB:F2:A2:EB:51:29:51:1A:B9:2A:85:30:97:3D:9A:2E
ValiditySat, 01 Apr 2023 00:00:00 GMT - Sun, 31 Mar 2024 23:59:59 GMT

File type
ASCII text, with very long lines (21099)
Size
6.8 kB (6841 bytes)
Hash
653dc5af4212698688db76a143fdd61a
393fada41c29c4d6c85a7857def729bc4d2cecce
9ea1823078c462969eaa59d6ef62623c19d77b72e25a103105b043aefaa0769a

HTTP Headers

GET /scripttemplates/otSDKStub.js HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://heartbleed.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 27 Nov 2023 20:52:15 GMT
content-type: application/javascript
content-length: 6841
content-encoding: gzip
content-md5: /EzX6ku1+i8ak28m1WuIrw==
last-modified: Wed, 22 Nov 2023 17:38:25 GMT
etag: 0x8DBEB81D4AA9473
x-ms-request-id: 7f5edf5c-201e-004a-17b1-1d9a0c000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 49190
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82cd40fc782b5684-OSL
X-Firefox-Spdy: h2

assets.adobedtm.com/79b3942b8dfa/899339f5f966/launch-eae13280a5c3.min.js

23.38.200.237

200 OK

85 kB

URL GET HTTP/2
assets.adobedtm.com/79b3942b8dfa/899339f5f966/launch-eae13280a5c3.min.js
IP
23.38.200.237:443
ASN
#16625 AKAMAI-AS

Requested by
https://heartbleed.com/
Certificate
IssuerDigiCert Inc
Subjectassets.adobedtm.com
Fingerprint8E:2F:9F:94:55:93:C2:B5:58:37:E8:D3:02:3C:23:AF:BA:E7:1D:EA
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT

File type
ASCII text, with very long lines (32725)
Size
85 kB (84968 bytes)
Hash
9f0bf2e9480e695eb8052105af572b61
6db919a129be2e30237a5d213dee55c5787cdf4e
2db7466256c942935bd5a2fd68ec9b8e5cf7ef7f28cbd7a02fc500f77d168eca

HTTP Headers

GET /79b3942b8dfa/899339f5f966/launch-eae13280a5c3.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://heartbleed.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "9f0bf2e9480e695eb8052105af572b61:1676286209.74552"
last-modified: Mon, 13 Feb 2023 11:03:29 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 84968
cache-control: max-age=3600
expires: Mon, 27 Nov 2023 21:52:15 GMT
date: Mon, 27 Nov 2023 20:52:15 GMT
access-control-allow-origin: https://heartbleed.com
timing-allow-origin: *
X-Firefox-Spdy: h2

heartbleed.com/

54.230.111.112

200 OK

9.2 kB

URL User Request GET HTTP/2
heartbleed.com/
IP
54.230.111.112:443
ASN
#16509 AMAZON-02

Certificate
IssuerAmazon
Subjectheartbleed.com
Fingerprint65:DE:A9:53:CB:55:2C:C5:78:49:3C:C2:17:35:A1:96:8F:06:FA:27
ValidityThu, 19 Oct 2023 00:00:00 GMT - Fri, 15 Nov 2024 23:59:59 GMT

File type
gzip compressed data, from Unix\012- data
Size
9.2 kB (9230 bytes)
Hash
997fbe6254fd588e3d234b199375dc6a
08ccd462e8f2f25e446f05d3b413b80bfd062134
94cd7e6bc06661b7afe19f74620b94d1bf5dfd05766c0741d78f622b8a888239

HTTP Headers

GET / HTTP/1.1
Host: heartbleed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/html
last-modified: Tue, 19 Jul 2022 15:30:47 GMT
server: AmazonS3
content-encoding: gzip
date: Mon, 27 Nov 2023 20:52:15 GMT
etag: W/"93d2c2cf305bcc899e01ae4bc3b643be"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 0poPUfwwIclHSARfwYIiVTbDn3EZ3O0m4cgEfFlduuMs545eYFZqtw==
age: 1069
X-Firefox-Spdy: h2

www.synopsys.com/content/dam/synopsys/util/gdpr/geo_v3.js

96.6.19.33

200 OK

1.1 kB

URL GET HTTP/2
www.synopsys.com/content/dam/synopsys/util/gdpr/geo_v3.js
IP
96.6.19.33:443
ASN
#16625 AKAMAI-AS

Requested by
https://heartbleed.com/
Certificate
IssuerDigiCert Inc
Subject*.synopsys.com
FingerprintFD:72:16:DE:FC:63:3E:A1:DA:3B:46:EC:86:2B:B7:26:87:6C:03:01
ValidityWed, 18 Oct 2023 00:00:00 GMT - Fri, 18 Oct 2024 23:59:59 GMT

File type
ASCII text
Size
1.1 kB (1094 bytes)
Hash
93732d6d43301e7d917ec3174c68012d
06d96b3f91c636a6b143a6c0007b69e4e11a2d5c
af368f18c76818855ce5cff03bcd45ca135d2aa0de5cf2aa2e7f22df85a36313

HTTP Headers

GET /content/dam/synopsys/util/gdpr/geo_v3.js HTTP/1.1
Host: www.synopsys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://heartbleed.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript
x-dispatcher: dispatcher3uswest1
x-vhost: publish-synopsys
content-disposition: attachment
x-content-type-options: nosniff
last-modified: Mon, 10 Jul 2023 22:38:25 GMT
accept-ranges: bytes
x-frame-options: SAMEORIGIN
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=3600
expires: Mon, 27 Nov 2023 21:52:15 GMT
date: Mon, 27 Nov 2023 20:52:15 GMT
content-length: 1094
server-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc="1701118335737_388255623_211102687_81_909_1_13_21";dur=1
strict-transport-security: max-age=86400
X-Firefox-Spdy: h2

fonts.googleapis.com/css?family=Lato:300,400,400italic

142.250.74.74

200 OK

2.1 kB

URL GET HTTP/2
fonts.googleapis.com/css?family=Lato:300,400,400italic
IP
142.250.74.74:443
ASN
#15169 GOOGLE

Requested by
https://heartbleed.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT

File type
ASCII text, with very long lines (4695)
Size
2.1 kB (2120 bytes)
Hash
1f648c3ad6b17ac69f8aadf49e0521ed
fdde2b8f5449922dc4fc0b63f3054d65ffa0a4b2
e9b1b8d82a8053f0987042f1f324cae28856c47cf75ad3dd8ed48b8cef343c10

HTTP Headers

GET /css?family=Lato:300,400,400italic HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://heartbleed.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 27 Nov 2023 20:52:15 GMT
date: Mon, 27 Nov 2023 20:52:15 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

geolocation.onetrust.com/cookieconsentpub/v1/geo/location

104.18.32.137

200 OK

78 kB

URL GET HTTP/2
geolocation.onetrust.com/cookieconsentpub/v1/geo/location
IP
104.18.32.137:443
ASN
#13335 CLOUDFLARENET

Requested by
https://heartbleed.com/
Certificate
IssuerCloudflare, Inc.
Subjectonetrust.com
Fingerprint9B:BC:B4:A8:C7:6C:6C:02:0F:FD:9F:06:F2:67:FB:DD:A1:E0:3F:47
ValidityMon, 13 Nov 2023 00:00:00 GMT - Tue, 12 Nov 2024 23:59:59 GMT

File type
JSON data\012- , ASCII text, with very long lines (65383)
Size
78 kB (78144 bytes)
Hash
7cf3dc44b3dcbc18cb81e433b5cd9657
1e1bfcef3568f9ea33732011ee658efa676ac9e3
484cd60bbc66e734ad165c462b7fd60949ebb3fb8c7e4d5a2b1559b7610a2806

HTTP Headers

GET /cookieconsentpub/v1/geo/location HTTP/1.1
Host: geolocation.onetrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://heartbleed.com
DNT: 1
Connection: keep-alive
Referer: https://heartbleed.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 27 Nov 2023 20:52:16 GMT
content-type: application/json
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, OPTIONS
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 82cd41003e6c569d-OSL
content-encoding: gzip
X-Firefox-Spdy: h2

cdn.cookielaw.org/consent/6032b10f-6053-4491-94e2-1925919e317d/05053a52-fd2e-4264-a02c-b3cba3dd0767/en.json

104.18.130.236

200 OK

12 kB

URL GET HTTP/2
cdn.cookielaw.org/consent/6032b10f-6053-4491-94e2-1925919e317d/05053a52-fd2e-4264-a02c-b3cba3dd0767/en.json
IP
104.18.130.236:443
ASN
#13335 CLOUDFLARENET

Requested by
https://heartbleed.com/
Certificate
IssuerCloudflare, Inc.
Subjectcookielaw.org
Fingerprint72:BB:48:60:EB:F2:A2:EB:51:29:51:1A:B9:2A:85:30:97:3D:9A:2E
ValiditySat, 01 Apr 2023 00:00:00 GMT - Sun, 31 Mar 2024 23:59:59 GMT

File type
JSON data\012- HTML document, Unicode text, UTF-8 text, with very long lines (43314), with no line terminators
Size
12 kB (11759 bytes)
Hash
cff23cf70bebfb96c098f5b8f8d0fbb4
4b34751b1a5e46cc6923a5290ae458913a6b01db
199762fcbf0d193c39f7a14bdec3defc92a54d62c1392137569201fc2cb16c88

HTTP Headers

GET /consent/6032b10f-6053-4491-94e2-1925919e317d/05053a52-fd2e-4264-a02c-b3cba3dd0767/en.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://heartbleed.com/
Origin: https://heartbleed.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Mon, 27 Nov 2023 20:52:16 GMT
content-type: application/x-javascript
content-length: 11759
cf-ray: 82cd410158001c16-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: *
cache-control: public, max-age=86400
content-encoding: gzip
etag: 0x8DBEF58031BC37B
expires: Tue, 28 Nov 2023 20:52:16 GMT
last-modified: Mon, 27 Nov 2023 14:49:09 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
content-md5: yH5cBs7KsbfL6t493S6kuQ==
x-content-type-options: nosniff
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 9da58bbd-a01e-0026-5a42-21719b000000
x-ms-version: 2009-09-19
server: cloudflare
X-Firefox-Spdy: h2

cdn.cookielaw.org/scripttemplates/6.27.0/assets/v2/otPcTab.json

104.18.130.236

200 OK

12 kB

URL GET HTTP/2
cdn.cookielaw.org/scripttemplates/6.27.0/assets/v2/otPcTab.json
IP
104.18.130.236:443
ASN
#13335 CLOUDFLARENET

Requested by
https://heartbleed.com/
Certificate
IssuerCloudflare, Inc.
Subjectcookielaw.org
Fingerprint72:BB:48:60:EB:F2:A2:EB:51:29:51:1A:B9:2A:85:30:97:3D:9A:2E
ValiditySat, 01 Apr 2023 00:00:00 GMT - Sun, 31 Mar 2024 23:59:59 GMT

File type
JSON data\012- , ASCII text, with very long lines (36108)
Size
12 kB (11984 bytes)
Hash
bcf5aa413e583a849de06e283ed94180
85bd7c0bb47fc1ea56e77b3ce6a370363724fa00
3dd135c77cfd213efdc4aecbdbae73547950e4583ff6a2abd18d8bd107c4c435

HTTP Headers

GET /scripttemplates/6.27.0/assets/v2/otPcTab.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://heartbleed.com/
Origin: https://heartbleed.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Mon, 27 Nov 2023 20:52:16 GMT
content-type: application/json
content-length: 11984
content-encoding: gzip
content-md5: Zo+3rPYNxsKsGYmd1h44hQ==
last-modified: Mon, 29 Nov 2021 20:30:53 GMT
etag: 0x8D9B37723CF6961
x-ms-request-id: 02f6c218-f01e-003b-77d3-0b7c27000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82cd4101d86d1c16-OSL
X-Firefox-Spdy: h2

cdn.cookielaw.org/scripttemplates/6.27.0/assets/otFlat.json

104.18.130.236

200 OK

3.0 kB

URL GET HTTP/2
cdn.cookielaw.org/scripttemplates/6.27.0/assets/otFlat.json
IP
104.18.130.236:443
ASN
#13335 CLOUDFLARENET

Requested by
https://heartbleed.com/
Certificate
IssuerCloudflare, Inc.
Subjectcookielaw.org
Fingerprint72:BB:48:60:EB:F2:A2:EB:51:29:51:1A:B9:2A:85:30:97:3D:9A:2E
ValiditySat, 01 Apr 2023 00:00:00 GMT - Sun, 31 Mar 2024 23:59:59 GMT

File type
JSON data\012- , ASCII text, with very long lines (10843)
Size
3.0 kB (2950 bytes)
Hash
743a07d5915f230808d4a95deb077d0a
2e6ceae1f01d7c480d951859100faf795ce34e50
72562f00bd821b6edc0368065bf009468955ba01f8ead742d8bbc2470c4358c4

HTTP Headers

GET /scripttemplates/6.27.0/assets/otFlat.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://heartbleed.com/
Origin: https://heartbleed.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Mon, 27 Nov 2023 20:52:16 GMT
content-type: application/json
content-length: 2950
content-encoding: gzip
content-md5: VSHBUrwe+huqkxKbuHF+GQ==
last-modified: Mon, 29 Nov 2021 20:30:50 GMT
etag: 0x8D9B3772216FA2F
x-ms-request-id: e3de4740-901e-005f-5440-218dbf000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82cd4101d86b1c16-OSL
X-Firefox-Spdy: h2

cdn.cookielaw.org/scripttemplates/6.27.0/assets/otCommonStyles.css

104.18.130.236

200 OK

21 kB

URL GET HTTP/2
cdn.cookielaw.org/scripttemplates/6.27.0/assets/otCommonStyles.css
IP
104.18.130.236:443
ASN
#13335 CLOUDFLARENET

Requested by
https://heartbleed.com/
Certificate
IssuerCloudflare, Inc.
Subjectcookielaw.org
Fingerprint72:BB:48:60:EB:F2:A2:EB:51:29:51:1A:B9:2A:85:30:97:3D:9A:2E
ValiditySat, 01 Apr 2023 00:00:00 GMT - Sun, 31 Mar 2024 23:59:59 GMT

File type
ASCII text, with very long lines (11123)
Size
21 kB (20950 bytes)
Hash
61ee8e79970dcae1685a883b098b34d0
a60f2d80264ea27b06714d371350fa9707ae68f3
2ee6fdf3d0f4d826380054030e5a9fd6fc8c451d9fe28123f1d76e632332e659

HTTP Headers

GET /scripttemplates/6.27.0/assets/otCommonStyles.css HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://heartbleed.com/
Origin: https://heartbleed.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 27 Nov 2023 20:52:16 GMT
content-type: text/css
content-md5: Ye6OeZcNyuFoWog7CYs00A==
last-modified: Mon, 29 Nov 2021 20:31:07 GMT
x-ms-request-id: 9049898d-e01e-00a1-690f-15e2fe000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82cd4101d86e1c16-OSL
content-encoding: gzip
X-Firefox-Spdy: h2

heartbleed.css/

0.0.0.0

0 B

URL GET
heartbleed.css/
IP
0.0.0.0:0
ASN
#0

Requested by
https://heartbleed.com/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: heartbleed.css
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://heartbleed.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

heartbleed.com/heartbleed.png

54.230.111.112

403 Forbidden

1.2 kB

URL GET HTTP/2
heartbleed.com/heartbleed.png
IP
54.230.111.112:443
ASN
#16509 AMAZON-02

Requested by
https://heartbleed.com/
Certificate
IssuerAmazon
Subjectheartbleed.com
Fingerprint65:DE:A9:53:CB:55:2C:C5:78:49:3C:C2:17:35:A1:96:8F:06:FA:27
ValidityThu, 19 Oct 2023 00:00:00 GMT - Fri, 15 Nov 2024 23:59:59 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (1258), with no line terminators
Size
1.2 kB (1175 bytes)
Hash
85ec9e8e69f4b6c063d704eb847f99a2
ab5c4d3a1614f55bb60ca8b1311c240e1a354a2f
0db6e1bd106346abfc36ec030aa96afd141b03df0cebebe6472da5fb680570ed

HTTP Headers

GET /heartbleed.png HTTP/1.1
Host: heartbleed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://heartbleed.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 403 Forbidden
content-type: text/html
last-modified: Tue, 19 Jul 2022 15:30:47 GMT
etag: W/"9e74316ba797a1a168dc0f6a01f1ecaf"
x-amz-error-code: AccessDenied
x-amz-error-message: Access Denied
date: Mon, 27 Nov 2023 20:52:15 GMT
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Error from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: d-_X8jOOcVYaMAzbCKJdEnNclhIxgzKnB8IWe6bJu1JFnFdMiQDYFw==
X-Firefox-Spdy: h2

api.kickfire.com/v3/company:(all)?key=0f4406209bd48327&vlocKey=33e1cf7s3b87c2b9

35.83.70.169

200 OK

940 B

URL GET HTTP/2
api.kickfire.com/v3/company:(all)?key=0f4406209bd48327&vlocKey=33e1cf7s3b87c2b9
IP
35.83.70.169:443
ASN
#16509 AMAZON-02

Requested by
https://heartbleed.com/
Certificate
IssuerAmazon
Subjectapi.kickfire.com
FingerprintCD:D5:C8:EC:65:06:92:EC:DA:78:11:29:DF:8D:67:8B:46:30:63:05
ValidityWed, 15 Feb 2023 00:00:00 GMT - Fri, 15 Mar 2024 23:59:59 GMT

File type
troff or preprocessor input, ASCII text, with very long lines (1062), with no line terminators
Size
940 B (940 bytes)
Hash
edef405b8b5d5ba9736eded5d0507937
1aece8a759a5dad55914b645dee2360ccbb91bc6
1fcde8a39ab2a3ad7d4c16520b1b94c0cf617aa6ff1efea77deab59208fd7044

HTTP Headers

GET /v3/company:(all)?key=0f4406209bd48327&vlocKey=33e1cf7s3b87c2b9 HTTP/1.1
Host: api.kickfire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://heartbleed.com
DNT: 1
Connection: keep-alive
Referer: https://heartbleed.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 27 Nov 2023 20:52:16 GMT
content-type: application/json; charset=utf-8
server: Apache
x-powered-by: PHP/7.2.34
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
access-control-allow-origin: *
access-control-allow-methods: *
X-Firefox-Spdy: h2

heartbleed.css/

0.0.0.0

0 B

URL GET
heartbleed.css/
IP
0.0.0.0:0
ASN
#0

Requested by
https://heartbleed.com/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: heartbleed.css
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://heartbleed.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

netdna.bootstrapcdn.com/bootstrap/3.1.1/css/bootstrap.min.css

104.18.11.207

200 OK

100 kB

URL GET HTTP/2
netdna.bootstrapcdn.com/bootstrap/3.1.1/css/bootstrap.min.css
IP
104.18.11.207:443
ASN
#13335 CLOUDFLARENET

Requested by
https://heartbleed.com/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint5B:F7:8F:50:AD:E5:5B:5E:8C:4A:39:3D:0C:98:E8:8C:18:4B:3D:8A
ValidityFri, 30 Dec 2022 00:00:00 GMT - Sat, 30 Dec 2023 23:59:59 GMT

File type
ASCII text, with very long lines (65366)
Size
100 kB (99961 bytes)
Hash
8a7442ca6bedd62cec4881040b9a9e83
e2d2b846e9ea72a1985458a3748aab4e01a8fb3a
e9503448692b738dd260fbd7f7cabf2e11f09b600fa97e6eb3a56eba5b1a7e9b

HTTP Headers

GET /bootstrap/3.1.1/css/bootstrap.min.css HTTP/1.1
Host: netdna.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://heartbleed.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 27 Nov 2023 20:52:15 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"8a7442ca6bedd62cec4881040b9a9e83"
last-modified: Mon, 25 Jan 2021 22:03:57 GMT
cdn-cachedat: 08/25/2022 04:46:14
cdn-proxyver: 1.02
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 860
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: efdba13fe8cede053694f0f7cb4f2ca7
cdn-cache: HIT
cf-cache-status: HIT
age: 2726730
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 82cd40fd2ecab4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

heartbleed.com/heartbleed.png

54.230.111.112

403 Forbidden

1.2 kB

URL GET HTTP/2
heartbleed.com/heartbleed.png
IP
54.230.111.112:443
ASN
#16509 AMAZON-02

Requested by
https://heartbleed.com/
Certificate
IssuerAmazon
Subjectheartbleed.com
Fingerprint65:DE:A9:53:CB:55:2C:C5:78:49:3C:C2:17:35:A1:96:8F:06:FA:27
ValidityThu, 19 Oct 2023 00:00:00 GMT - Fri, 15 Nov 2024 23:59:59 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (1258), with no line terminators
Size
1.2 kB (1175 bytes)
Hash
85ec9e8e69f4b6c063d704eb847f99a2
ab5c4d3a1614f55bb60ca8b1311c240e1a354a2f
0db6e1bd106346abfc36ec030aa96afd141b03df0cebebe6472da5fb680570ed

HTTP Headers

GET /heartbleed.png HTTP/1.1
Host: heartbleed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://heartbleed.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 403 Forbidden
content-type: text/html
last-modified: Tue, 19 Jul 2022 15:30:47 GMT
etag: W/"9e74316ba797a1a168dc0f6a01f1ecaf"
x-amz-error-code: AccessDenied
x-amz-error-message: Access Denied
date: Mon, 27 Nov 2023 20:52:14 GMT
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Error from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: QspceL0k1YfKfd_nKvjWhG6DdVC0k3G5lHUkfqonc53YQvj2NzHzjA==
X-Firefox-Spdy: h2

cdn.cookielaw.org/consent/6032b10f-6053-4491-94e2-1925919e317d/6032b10f-6053-4491-94e2-1925919e317d.json

104.18.130.236

200 OK

4.7 kB

URL GET HTTP/2
cdn.cookielaw.org/consent/6032b10f-6053-4491-94e2-1925919e317d/6032b10f-6053-4491-94e2-1925919e317d.json
IP
104.18.130.236:443
ASN
#13335 CLOUDFLARENET

Requested by
https://heartbleed.com/
Certificate
IssuerCloudflare, Inc.
Subjectcookielaw.org
Fingerprint72:BB:48:60:EB:F2:A2:EB:51:29:51:1A:B9:2A:85:30:97:3D:9A:2E
ValiditySat, 01 Apr 2023 00:00:00 GMT - Sun, 31 Mar 2024 23:59:59 GMT

File type
troff or preprocessor input, ASCII text, with very long lines (5591), with no line terminators
Size
4.7 kB (4695 bytes)
Hash
317d2128a368f1d5abf5fbe08ba21ca7
ec0bf94784c827c2dd7b6797c6047e232b5cecee
8c9ae69789134035893fa067b53bf37a731c408645b0f257f352316634b46cde

HTTP Headers

GET /consent/6032b10f-6053-4491-94e2-1925919e317d/6032b10f-6053-4491-94e2-1925919e317d.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://heartbleed.com
DNT: 1
Connection: keep-alive
Referer: https://heartbleed.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 27 Nov 2023 20:52:15 GMT
content-type: application/x-javascript
content-length: 1701
cf-ray: 82cd40fe9d531c16-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: *
cache-control: public, max-age=86400
content-encoding: gzip
etag: 0x8DBEF57FF10E2A1
expires: Tue, 28 Nov 2023 20:52:15 GMT
last-modified: Mon, 27 Nov 2023 14:49:02 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
content-md5: jjWp0KylcDqRqMzVPHElww==
x-content-type-options: nosniff
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: e41c8bfe-101e-006e-3b41-216cac000000
x-ms-version: 2009-09-19
server: cloudflare
X-Firefox-Spdy: h2

heartbleed.com/favicon.png

54.230.111.112

403 Forbidden

1.2 kB

URL GET HTTP/2
heartbleed.com/favicon.png
IP
54.230.111.112:443
ASN
#16509 AMAZON-02

Requested by
https://heartbleed.com/
Certificate
IssuerAmazon
Subjectheartbleed.com
Fingerprint65:DE:A9:53:CB:55:2C:C5:78:49:3C:C2:17:35:A1:96:8F:06:FA:27
ValidityThu, 19 Oct 2023 00:00:00 GMT - Fri, 15 Nov 2024 23:59:59 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (1258), with no line terminators
Size
1.2 kB (1175 bytes)
Hash
85ec9e8e69f4b6c063d704eb847f99a2
ab5c4d3a1614f55bb60ca8b1311c240e1a354a2f
0db6e1bd106346abfc36ec030aa96afd141b03df0cebebe6472da5fb680570ed

HTTP Headers

GET /favicon.png HTTP/1.1
Host: heartbleed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://heartbleed.com/
Cookie: OptanonConsent=isGpcEnabled=0&datestamp=Mon+Nov+27+2023+20%3A52%3A20+GMT%2B0000+(Coordinated+Universal+Time)&version=6.27.0&isIABGlobal=false&hosts=&consentId=eddd0bdd-a5f5-4c0d-a4ea-dcf77c89a8d4&interactionCount=0&landingPath=https%3A%2F%2Fheartbleed.com%2F&groups=C0001%3A1%2CC0002%3A0%2CC0004%3A0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 403 Forbidden
content-type: text/html
last-modified: Tue, 19 Jul 2022 15:30:47 GMT
etag: W/"9e74316ba797a1a168dc0f6a01f1ecaf"
x-amz-error-code: AccessDenied
x-amz-error-message: Access Denied
date: Mon, 27 Nov 2023 20:52:15 GMT
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Error from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: fm_kndBqeT-IDEbYp2t1Jx-fVoGJGI1o0iUJb4sJ8ASZwZemx2BJCA==
X-Firefox-Spdy: h2

cdn.cookielaw.org/scripttemplates/6.27.0/otBannerSdk.js

104.18.130.236

200 OK

328 kB

URL GET HTTP/2
cdn.cookielaw.org/scripttemplates/6.27.0/otBannerSdk.js
IP
104.18.130.236:443
ASN
#13335 CLOUDFLARENET

Requested by
https://heartbleed.com/
Certificate
IssuerCloudflare, Inc.
Subjectcookielaw.org
Fingerprint72:BB:48:60:EB:F2:A2:EB:51:29:51:1A:B9:2A:85:30:97:3D:9A:2E
ValiditySat, 01 Apr 2023 00:00:00 GMT - Sun, 31 Mar 2024 23:59:59 GMT

File type

Size
328 kB (328270 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /scripttemplates/6.27.0/otBannerSdk.js HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://heartbleed.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 27 Nov 2023 20:52:16 GMT
content-type: application/javascript
content-length: 78056
content-encoding: gzip
content-md5: 8eaHtBigP1U3b42ruIgxsQ==
last-modified: Mon, 29 Nov 2021 20:31:00 GMT
etag: 0x8D9B37727F240FD
x-ms-request-id: 0a1f265e-201e-004a-2ab2-129a0c000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 54837
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82cd4100ef705684-OSL
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (6)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (20)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP