English

Domain 'customdesigntool.com' uses the commercial generic top-level domain (.com) while skipping any subdomain. Its registrable label 'customdesigntool' stretches across 16 characters holding 6 vowels versus ten consonants. Splitting it apart reveals 3 words: custom, design, tool. Average segment length settles at 6 characters. No strong language cues emerged from the frequency lists.

html/bb/39/bb3962a3-a5c9-4bf3-8e22-cb49f7b16e4b.html.gz

frame-ancestors 'self' https://uat.circleone.in https://www.circleone.in http://localhost:3000/ http://dev.bannerbuzz.com:3000 https://*.signsigma.com https://www.bannerbuzz.com https://www.bannerbuzz.co.uk https://www.bannerbuzz.com.au https://www.bannerbuzz.ca https://www.bannerbuzz.co.nz https://www.bestofsigns.com https://www.neonearth.com/

d59d14c6aabc43cbba0ded65d101fffc73018037ec36d75a1d28b314a802e18a

098033f3a6d578392a767dee501ec0bae79dcd385605835be4275cb5112766c1

9b2a3bcfe96841f31c21fa68a202f4fedb680f7748786ec9e192920c49c1eda9

06b56a9c1164fd2be3e7af950747a515910502511ff1f12121ea482ff6e566c8

6f5b4aa00d2f8d6aed9935b471806bf7acef464d0c1d390260e5fe27f800c67e

5e2a7c080b79fe712c181a2a4e85d56f9ce51b73f208f7b176552a0d33acfaad

0ce38c60023965cfb37d068c55bd7f369f3cb9091a1c5ec2820d2680a8da8ed7

0e02d079e0002ea4031105e7894f1ea05c72ffcaac7b12d2268ca523538211ea

e40e817952775d74cce55a1786e74d0f89c7c3358397a17db60f913bd95dc4c3

b7dbc3b6de1925123c0ef80f181cb85539a31467ed927325ebd21fc808cafc8f

324a3c4229a5ae0b04c714e49c46ce3327dada4fc1853995dd9738bb2daa995f

f64a618a0699f7c1b8c71a7ca4b7cb0d21c6dcfc7da13429ed38e5b0500ec5e5

Denial of Service condition in Next.js image optimization

Next.js authorization bypass vulnerability

Next.js Allows a Denial of Service (DoS) with Server Actions

Next.js Race Condition to Cache Poisoning

Authorization Bypass in Next.js Middleware

Information exposure in Next.js dev server due to lack of origin verification

A vulnerability in Next.js Image Optimization has been fixed in v15.4.5 and v14.2.31. When images returned from API routes vary based on request headers (such as `Cookie` or `Authorization`), these responses could be incorrectly cached and served to unauthorized users due to a cache key confusion bug.

All users are encouraged to upgrade if they use API routes to serve images that depend on request headers and have image optimization enabled.

More details at [Vercel Changelog](https://vercel.com/changelog/cve-2025-57752)

A vulnerability in **Next.js Image Optimization** has been fixed in **v15.4.5** and **v14.2.31**. The issue allowed attacker-controlled external image sources to trigger file downloads with arbitrary content and filenames under specific configurations. This behavior could be abused for phishing or malicious file delivery.

All users relying on `images.domains` or `images.remotePatterns` are encouraged to upgrade and verify that external image sources are strictly validated.

More details at [Vercel Changelog](https://vercel.com/changelog/cve-2025-55173)

A vulnerability in **Next.js Middleware** has been fixed in **v14.2.32** and **v15.4.7**. The issue occurred when request headers were directly passed into `NextResponse.next()`. In self-hosted applications, this could allow Server-Side Request Forgery (SSRF) if certain sensitive headers from the incoming request were reflected back into the response.

All users implementing custom middleware logic in self-hosted environments are strongly encouraged to upgrade and verify correct usage of the `next()` function.

More details at [Vercel Changelog](https://vercel.com/changelog/cve-2025-57822)

A vulnerability affects certain React packages for versions 19.0.0, 19.0.1, 19.1.0, 19.1.1, 19.1.2, 19.2.0, and 19.2.1 and frameworks that use the affected packages, including Next.js 15.x and 16.x using the App Router. The issue is tracked upstream as [CVE-2025-55184](https://www.cve.org/CVERecord?id=CVE-2025-55184).

A malicious HTTP request can be crafted and sent to any App Router endpoint that, when deserialized, can cause the server process to hang and consume CPU. This can result in denial of service in unpatched environments.

It was found that the fix addressing [CVE-2025-55184](https://github.com/advisories/GHSA-2m3v-v2m8-q956) in React Server Components was incomplete and did not fully prevent denial-of-service attacks in all payload types. This affects React package versions 19.0.2, 19.1.3, and 19.2.2 and frameworks that use the affected packages, including Next.js 13.x, 14.x, 15.x and 16.x using the App Router. The issue is tracked upstream as [CVE-2025-67779](https://www.cve.org/CVERecord?id=CVE-2025-67779).

A malicious HTTP request can be crafted and sent to any Server Function endpoint that, when deserialized, can enter an infinite loop within the React Server Components runtime. This can cause the server process to hang and consume CPU, resulting in denial of service in unpatched environments.

34f65262d9deea5cfc6ee0bdf54d55359dac1c5783c9138514daa83fa1c3e774

e903cec1d59e0157bcc7e4ac883ae6f866babb60e4aa01b9485aa096b9722200

e77f8d5e77d2bf17164df502009fbf2fe9d5bcf828502ac9cec6a2b806ff5026

990b32cf5559fef0f29fdc8c495b2133989df6133ca3b8ccc7f915197adca309

width=device-width, initial-scale=1, maximum-scale=1, user-scalable=0

viewport

next-head-count

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

html/bb/39/bb3962a3-a5c9-4bf3-8e22-cb49f7b16e4b_nodriver.html.gz

GoDaddy.com, LLC

CUSTOMDESIGNTOOL.COM

Amazon EC2 Abuse

IP Management

Amazon AWS Network Operations

Amazon.com, Inc.

AWS RPKI Management POC

IP Routing

Amazon EC2 Network Operations

AMAZO-ZPDX

window.NEXT_PUBLIC_CDN_URL = "https://static.customdesigntool.com";

HSTS

✅ Low Risk - https://customdesigntool.com

Requests	IP Address	Location	AS Autonomous System
7	142.251.127.94	United States	AS15169
4	44.232.86.220	Boardman, Oregon, United States	AS16509Amazon.com, Inc.
4	52.222.236.106	United States	Unknown
4	142.251.127.147	United States	Unknown
19	4	-	-

Security Scan Report: customdesigntool.com

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History