| lovegbsk.pics/static/market/img/payment.png |  172.67.153.137 | 200 OK | 15 kB |
URL GET HTTP/3lovegbsk.pics/static/market/img/payment.png IP172.67.153.137:443
Requested byhttps://lovegbsk.pics/product_details/87472632.html CertificateIssuerLet's Encrypt Subjectlovegbsk.pics Fingerprint9A:67:84:92:B8:A4:A9:4C:32:CB:C6:16:C1:75:99:69:CF:F5:54:62 ValiditySat, 06 Apr 2024 01:49:11 GMT - Fri, 05 Jul 2024 01:49:10 GMT
File typePNG image data, 342 x 26, 8-bit/color RGBA, non-interlaced Hashd9e27afb8d07e73a5d78c58219db8284 2c8e0b0821ae555b66a6d9ad9d3f3a97d8164f99 1567d764b3ee71f11f52d807789d9a970c60dd195b39f2b295d476308d76aeb3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/market/img/payment.png HTTP/1.1
Host: lovegbsk.pics
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lovegbsk.pics/product_details/87472632.html
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IlVFQlZJdlhIZ3ozTVpmUHo0Um1Vc2c9PSIsInZhbHVlIjoiSitlZHNQL3BHdks0YTNxYmZVajhnWWZtSHhvSllVUElKakNYbVpibUxMbVdkL3BlQU1FbzVRVnlFOGRIS2ZKSDROUC8xV2l6WmloT1JuQURrTytWZGV1SjFFdTJpNDFITXFaRGgrRVNuNG1udmIrY0FzVzlyWEdpalkweWM3ZG8iLCJtYWMiOiJlNzAzMzQ4OTJlOWQzMDIxYWNkNWZmNTQxNmY4NGIzOTI1MTNkM2ViNjIzOTQ0OTVkZTkwNjk0NThjZDdjMzk1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ikc2ajh5M2xKQUxWdEFJam5ZOVpEelE9PSIsInZhbHVlIjoiOU1xR2t1V2Q3OTZ5NktrUWtDRHNQcnBjQkJMZUFiMmZHcWpVdkRFbmxHUjlYRDdLdFE4MWE5cGVKcHJoUWF2QnB3WDMvSU5pTVIrK1JTbXhuREljQW9xcjhFYnlpUnpKdFFrcEt1MkxPTUlrWmprUC85a3M5dmQ5ajhsUVo3RlMiLCJtYWMiOiI5MTYzNzQ0MWRjOTY5MmFhNzUxYmEwZTE3NWIzNTMxOWNlMjA0ZjQxNDllOGViOGFjYWVmMTQwNWE2NjkyNmI4IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 21:36:42 GMT
content-type: image/png
content-length: 14874
last-modified: Fri, 08 Sep 2023 06:31:38 GMT
etag: "3a1a-604d32102fac6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5435
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VHf4o2ksNhTzFZZM4zZ1a%2BpevsXKisy59AUTp%2FVkPVlBJR%2BaxhhiYQXUJZTdC3%2BNc%2BbvIJJyJm2ADOYnpy9nq8aFNKD19kT1bqcPOQUAF%2FsHKGQPRryRvT1wBAneD6HJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87eba0b6a8765691-OSL
alt-svc: h3=":443"; ma=86400
|
|
| cdnjs.cloudflare.com/ajax/libs/vant/2.12.48/index.css |  104.17.24.14 | 200 OK | 38 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/vant/2.12.48/index.css IP104.17.24.14:443
Requested byhttps://lovegbsk.pics/product_details/87472632.html CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hash9a547188fa485f8ca9b2cc7d6d2524ef 7893335159a1f637eb24cd05aaba96ac156c7f65 897e513fc70a4e1759ceb06ed3c9348d036b36b724dc60d815f9f3124de6f433
GET /ajax/libs/vant/2.12.48/index.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 04 May 2024 21:36:42 GMT
content-type: text/css; charset=utf-8
content-length: 38108
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "62b69136-94dc"
last-modified: Sat, 25 Jun 2022 04:38:14 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 263698
expires: Thu, 24 Apr 2025 21:36:42 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5nZ51H1bRXRrbajOpaSpJVfR8MBI%2BTbZUT7cDzkRRFxO6s9WM%2BSp1knEP%2B0PG9liV3jD8Xx77oJUH12sHrNTQczmpNuF7q59Sq%2FW%2BTipv7quI12BkW3q9sl9%2FaZmzxj%2FkIwDBIA%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 87eba0b6af9b7131-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| lovegbsk.pics/static/logo.png | 172.67.153.137 | 200 OK | 7.0 kB |
URL GET HTTP/3lovegbsk.pics/static/logo.png IP172.67.153.137:443
Requested byhttps://lovegbsk.pics/product_details/87472632.html CertificateIssuerLet's Encrypt Subjectlovegbsk.pics Fingerprint9A:67:84:92:B8:A4:A9:4C:32:CB:C6:16:C1:75:99:69:CF:F5:54:62 ValiditySat, 06 Apr 2024 01:49:11 GMT - Fri, 05 Jul 2024 01:49:10 GMT
File typePNG image data, 239 x 80, 8-bit/color RGBA, non-interlaced Hash8703e20ce0ea6d6809ca24d66c98ba8a eb641107c116d3859b6bd43adf9ddea94a6677f5 b4ff179f8ab43094037756d84b780a930b427ca64232cb625727d705b459a359
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/logo.png HTTP/1.1
Host: lovegbsk.pics
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lovegbsk.pics/product_details/87472632.html
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IlVFQlZJdlhIZ3ozTVpmUHo0Um1Vc2c9PSIsInZhbHVlIjoiSitlZHNQL3BHdks0YTNxYmZVajhnWWZtSHhvSllVUElKakNYbVpibUxMbVdkL3BlQU1FbzVRVnlFOGRIS2ZKSDROUC8xV2l6WmloT1JuQURrTytWZGV1SjFFdTJpNDFITXFaRGgrRVNuNG1udmIrY0FzVzlyWEdpalkweWM3ZG8iLCJtYWMiOiJlNzAzMzQ4OTJlOWQzMDIxYWNkNWZmNTQxNmY4NGIzOTI1MTNkM2ViNjIzOTQ0OTVkZTkwNjk0NThjZDdjMzk1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ikc2ajh5M2xKQUxWdEFJam5ZOVpEelE9PSIsInZhbHVlIjoiOU1xR2t1V2Q3OTZ5NktrUWtDRHNQcnBjQkJMZUFiMmZHcWpVdkRFbmxHUjlYRDdLdFE4MWE5cGVKcHJoUWF2QnB3WDMvSU5pTVIrK1JTbXhuREljQW9xcjhFYnlpUnpKdFFrcEt1MkxPTUlrWmprUC85a3M5dmQ5ajhsUVo3RlMiLCJtYWMiOiI5MTYzNzQ0MWRjOTY5MmFhNzUxYmEwZTE3NWIzNTMxOWNlMjA0ZjQxNDllOGViOGFjYWVmMTQwNWE2NjkyNmI4IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 21:36:42 GMT
content-type: image/png
content-length: 7036
last-modified: Fri, 15 Sep 2023 02:46:49 GMT
etag: "1b7c-6055ccde34c0a"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5435
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JMiEKNtARd7gRNDV0d0qv9Wwxri5GypikD2kJ4rSt3K%2BYgTwJzjt%2B9qq5Raen99Z01GWlgxArZI8s8FX5%2BVPX%2BYzAHfiDE%2BpQKI3RwlxZgfMFy7u7iWmn88tHGnVDMPF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87eba0b6a8745691-OSL
alt-svc: h3=":443"; ma=86400
|
|
| cdnjs.cloudflare.com/ajax/libs/Swiper/8.3.2/swiper-bundle.js | 104.17.24.14 | 200 OK | 50 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/Swiper/8.3.2/swiper-bundle.js IP104.17.24.14:443
Requested byhttps://lovegbsk.pics/product_details/87472632.html CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text Hashde581e420bf52d70e353080a13094ea8 7e727d99fea8c31c2f2e3173105d585ee3289d31 4eb89fcf77b0f8b3bb92ffae01f6a2773d836e9b15201337de8fe87e7e5c7fa5
GET /ajax/libs/Swiper/8.3.2/swiper-bundle.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 04 May 2024 21:36:42 GMT
content-type: application/javascript; charset=utf-8
content-length: 49876
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "62dffbc4-c2d4"
last-modified: Tue, 26 Jul 2022 14:35:48 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 263130
expires: Thu, 24 Apr 2025 21:36:42 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ok1%2B94wMngSxeTIPrGZsKfxBQ7IuHm8dFxHLqaIH8IcF8Fy%2FVX0Oos%2B8haD5uNkma3PZkczWee9%2BDZJUWKNf4ZYhP8U3ERLAUj9RevkJpVAsUAldAXiTCkAYq%2F21PAt9Ut0TSgN2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 87eba0b6afb37131-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/Swiper/8.3.2/swiper-bundle.min.css | 104.17.24.14 | 200 OK | 3.9 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/Swiper/8.3.2/swiper-bundle.min.css IP104.17.24.14:443
Requested byhttps://lovegbsk.pics/product_details/87472632.html CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeASCII text, with very long lines (16213) Hash951eae8c8a442c2940c54d180301ed41 771518669a370d915adf0d207f2a22092a768cd1 4359643e1b6350bffd6e16d543603ea7b393855957e792ac7f9178a81ed0b14d
GET /ajax/libs/Swiper/8.3.2/swiper-bundle.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 04 May 2024 21:36:42 GMT
content-type: text/css; charset=utf-8
content-length: 3945
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "62dffbc4-f69"
last-modified: Tue, 26 Jul 2022 14:35:48 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 258471
expires: Thu, 24 Apr 2025 21:36:42 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FCnJjwoyLdr9hnRs9NE4qaCuNaZ8YNLn9pCWqjhESYxnMyL4cmD4BImE4JErYxrqNhUn7Bz8%2BXukZOy88AWL861kH6z6Va10gBKpkkR7v6h3j1bW2l2jZGP4%2FMRlJHvwe%2FjFOKqZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 87eba0b6afa77131-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/vue-resource/1.5.3/vue-resource.min.js | 104.17.24.14 | 200 OK | 4.9 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/vue-resource/1.5.3/vue-resource.min.js IP104.17.24.14:443
Requested byhttps://lovegbsk.pics/product_details/87472632.html CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (14957) Hash5f4a59735ca9517d0478f395439bd517 f820c08cf114da8ec451e8eedc0da51dfcba5e02 ff5c4da48c495fd0e611aec47b2986097c0351d5e1a527ab1ea64085dcdcdbe9
GET /ajax/libs/vue-resource/1.5.3/vue-resource.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 04 May 2024 21:36:42 GMT
content-type: application/javascript; charset=utf-8
content-length: 4866
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "60c785b9-1302"
last-modified: Mon, 14 Jun 2021 16:37:13 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 261708
expires: Thu, 24 Apr 2025 21:36:42 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BSyLGz1g%2FB%2F5sWCqKua8cg0alWEN22YkBGZ136o66%2B6WDupqgyF%2Fg5c5iGHaeiYtrOIGHcCynm4Rermfu00DlBTw3MCgd1rgVcEGwjvC3dPvtmovYEcOiqVBVoJyuwhcGyOftQNG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 87eba0b748507131-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/vant/2.12.48/vant.min.js | 104.17.24.14 | 200 OK | 68 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/vant/2.12.48/vant.min.js IP104.17.24.14:443
Requested byhttps://lovegbsk.pics/product_details/87472632.html CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (57307) Hash0292da744fb4f768ae77370f868a674e 6dbafd633d187d11e2ef0a9a47044fd5646c70fb 068b71488c3a0d9ccf95e76a72a93678f9baf45786e87e0b2dc8f1be25f72468
GET /ajax/libs/vant/2.12.48/vant.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 04 May 2024 21:36:42 GMT
content-type: application/javascript; charset=utf-8
content-length: 67811
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "62b69136-108e3"
last-modified: Sat, 25 Jun 2022 04:38:14 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 261714
expires: Thu, 24 Apr 2025 21:36:42 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XZgW77E1I%2FfbYYvD1HA88bPKxpAWvmq7%2BWB30P%2B2bslmhTH3lG%2F7tAB%2Ftw1grZSwVzCgn6BDI%2Fx%2BCSgEsN1gh9Trvxa3Nu1FOOCbTKr72fU%2BT320bM2CQuXRgUo5Kn4T0gxZ%2F8%2FX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 87eba0b758547131-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| lovegbsk.pics/traffic_statistics?gurl= | 172.67.153.137 | 200 OK | 504 B |
URL GET HTTP/3lovegbsk.pics/traffic_statistics?gurl= IP172.67.153.137:443
Requested byhttps://lovegbsk.pics/product_details/87472632.html CertificateIssuerLet's Encrypt Subjectlovegbsk.pics Fingerprint9A:67:84:92:B8:A4:A9:4C:32:CB:C6:16:C1:75:99:69:CF:F5:54:62 ValiditySat, 06 Apr 2024 01:49:11 GMT - Fri, 05 Jul 2024 01:49:10 GMT
Hash7f34b83917f8d169f0d700e51be3af86 db7fac5705f1e6a970505161e3fad2d8f626dfc1 7632e99377f2da3f12ef5ad052360ba119c014395c20ae0bef79618123950c06
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /traffic_statistics?gurl= HTTP/1.1
Host: lovegbsk.pics
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lovegbsk.pics/product_details/87472632.html
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IlVFQlZJdlhIZ3ozTVpmUHo0Um1Vc2c9PSIsInZhbHVlIjoiSitlZHNQL3BHdks0YTNxYmZVajhnWWZtSHhvSllVUElKakNYbVpibUxMbVdkL3BlQU1FbzVRVnlFOGRIS2ZKSDROUC8xV2l6WmloT1JuQURrTytWZGV1SjFFdTJpNDFITXFaRGgrRVNuNG1udmIrY0FzVzlyWEdpalkweWM3ZG8iLCJtYWMiOiJlNzAzMzQ4OTJlOWQzMDIxYWNkNWZmNTQxNmY4NGIzOTI1MTNkM2ViNjIzOTQ0OTVkZTkwNjk0NThjZDdjMzk1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ikc2ajh5M2xKQUxWdEFJam5ZOVpEelE9PSIsInZhbHVlIjoiOU1xR2t1V2Q3OTZ5NktrUWtDRHNQcnBjQkJMZUFiMmZHcWpVdkRFbmxHUjlYRDdLdFE4MWE5cGVKcHJoUWF2QnB3WDMvSU5pTVIrK1JTbXhuREljQW9xcjhFYnlpUnpKdFFrcEt1MkxPTUlrWmprUC85a3M5dmQ5ajhsUVo3RlMiLCJtYWMiOiI5MTYzNzQ0MWRjOTY5MmFhNzUxYmEwZTE3NWIzNTMxOWNlMjA0ZjQxNDllOGViOGFjYWVmMTQwNWE2NjkyNmI4IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 21:36:43 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache, private
set-cookie: XSRF-TOKEN=eyJpdiI6IlE1dmhhUGpvWFJwN2NqcFdDQ0Zvdnc9PSIsInZhbHVlIjoiYzQ3MUpnY2pIVU5FZ0VJZ3YyQzVwSnhhT3JXdW5ydWNtSDZuckFzODhRZEs1WkRlQTZOYTZzUithWDVESnIyRFhBdFRydmdpT3B6TGE1K2xqcFNFQ0V2MHB0cG9KS01QNGZvaU9jYWdlWjZsL21qM3gvaDBrS2J4UEVTSVFjTWciLCJtYWMiOiIwNjI0MGUzNDY3ZWY5NzNkYWE0NzdkMjY0ZmRmYzNlN2IyZTdhMjhkYTgzOTVjOGFiNmMyNTk0NjBlMjM4MmI3IiwidGFnIjoiIn0%3D; expires=Sat, 04-May-2024 23:36:43 GMT; Max-Age=7200; path=/; samesite=lax
laravel_session=eyJpdiI6ImQ5V2VRMy82bWlFYVE2QUh0R2JrQlE9PSIsInZhbHVlIjoiTkhtRnlMZXhsYzBtZVFpdVJuSFlIT2NKOS9xVE13VE9tL1VQNFl2NmNEL3VqNjlEVDliM3NJVnltcDl2L1ZtL0MyN1ZsZ1ZLU3FUdm8rTW5WWHFRYkVrdDJjYjIwdGU2T3hpemNrWDA4T3I4VktSbVZxeEJTL2l6akdRWXVxMXAiLCJtYWMiOiJkOTEwNGI1MDEwMmU0NDYzNDc2MTdlNmJiNWUzYTM3NzlhZTQwYmRiYWFkMDg3MDg4MmNhNzcxM2MzM2QzNzFhIiwidGFnIjoiIn0%3D; expires=Sat, 04-May-2024 23:36:43 GMT; Max-Age=7200; path=/; httponly; samesite=lax
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eBeS38XKeHEbWR7Ta3rN%2BQrZAz5wvZpP%2Bk7ECsT4%2BTOYHdPuJCs24X0c3id8SojxWK1NCXhDkgfd6Tj0ikc4A0iDnNN3dzkTunut4EzFzqV695SF%2BfsInhCrWYRTKngo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87eba0babdab5691-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lovegbsk.pics/api/cart/index | 172.67.153.137 | 200 OK | 4.9 kB |
URL GET HTTP/3lovegbsk.pics/api/cart/index IP172.67.153.137:443
Requested byhttps://lovegbsk.pics/product_details/87472632.html CertificateIssuerLet's Encrypt Subjectlovegbsk.pics Fingerprint9A:67:84:92:B8:A4:A9:4C:32:CB:C6:16:C1:75:99:69:CF:F5:54:62 ValiditySat, 06 Apr 2024 01:49:11 GMT - Fri, 05 Jul 2024 01:49:10 GMT
Hash5e0f617f8c9758900c9eb72462e10207 269f6f9af785b3f29997b3241d8653a1340b01a4 af9632a94de6f3759c550ed97d55ca1b54ee125dd13863105e8aeb528f2dd1d4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /api/cart/index HTTP/1.1
Host: lovegbsk.pics
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lovegbsk.pics/product_details/87472632.html
Authorization:
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IlVFQlZJdlhIZ3ozTVpmUHo0Um1Vc2c9PSIsInZhbHVlIjoiSitlZHNQL3BHdks0YTNxYmZVajhnWWZtSHhvSllVUElKakNYbVpibUxMbVdkL3BlQU1FbzVRVnlFOGRIS2ZKSDROUC8xV2l6WmloT1JuQURrTytWZGV1SjFFdTJpNDFITXFaRGgrRVNuNG1udmIrY0FzVzlyWEdpalkweWM3ZG8iLCJtYWMiOiJlNzAzMzQ4OTJlOWQzMDIxYWNkNWZmNTQxNmY4NGIzOTI1MTNkM2ViNjIzOTQ0OTVkZTkwNjk0NThjZDdjMzk1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ikc2ajh5M2xKQUxWdEFJam5ZOVpEelE9PSIsInZhbHVlIjoiOU1xR2t1V2Q3OTZ5NktrUWtDRHNQcnBjQkJMZUFiMmZHcWpVdkRFbmxHUjlYRDdLdFE4MWE5cGVKcHJoUWF2QnB3WDMvSU5pTVIrK1JTbXhuREljQW9xcjhFYnlpUnpKdFFrcEt1MkxPTUlrWmprUC85a3M5dmQ5ajhsUVo3RlMiLCJtYWMiOiI5MTYzNzQ0MWRjOTY5MmFhNzUxYmEwZTE3NWIzNTMxOWNlMjA0ZjQxNDllOGViOGFjYWVmMTQwNWE2NjkyNmI4IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 21:36:42 GMT
content-type: application/json
cache-control: no-cache, private
x-ratelimit-limit: 60
x-ratelimit-remaining: 58
access-control-allow-origin: *
set-cookie: laravel_session=eyJpdiI6IkxlVmR3M3crOVJtNS9RVUZCRU9OaHc9PSIsInZhbHVlIjoiQUNhd2R4RUdNVkg5cXpsbGNzenVsVGxFVUJ2RXNUMFZnNUZBbGpYa2dyNVA3NWZlM2VaVjN5OHhhaE9CeDB1cVlqb2E2dmhDWDViZ1pCVVBONm10YVJKMHl6K1RDZnJrVTdScVoyZ0d3bTh3WGpxZ3lXekNkQVNETGc3U3ZoK3giLCJtYWMiOiJmODEyYWE0NmU4MDIxYmJiODgzNDA0ZjNiYzA4NjgzYmMwM2IyZDA5M2E2NzVjY2RlMTcyZTg1NjMwNTY0ZDkyIiwidGFnIjoiIn0%3D; expires=Sat, 04-May-2024 23:36:42 GMT; Max-Age=7200; path=/; httponly; samesite=lax
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IjupL%2Fae9QrWLf6RwKtOYPASZM754mFO0bmDII6ups%2B1knx41N1B4wTPHvA58Jx5YulvIIo4RMgCWUEYzsCPbJtQnEsqCbwl1WqZ4OIm7t0tlOcOpNAeLBkBQ%2BWsMb5w"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87eba0b99c5a5691-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lovegbsk.pics/api/item/info?id=87472632 | 172.67.153.137 | 200 OK | 13 kB |
URL GET HTTP/3lovegbsk.pics/api/item/info?id=87472632 IP172.67.153.137:443
Requested byhttps://lovegbsk.pics/product_details/87472632.html CertificateIssuerLet's Encrypt Subjectlovegbsk.pics Fingerprint9A:67:84:92:B8:A4:A9:4C:32:CB:C6:16:C1:75:99:69:CF:F5:54:62 ValiditySat, 06 Apr 2024 01:49:11 GMT - Fri, 05 Jul 2024 01:49:10 GMT
Hash61b7c755a627942283d1599fc314b651 a9bc422eebc4b017cd82e02c750da662e7b18204 156c9666addfeb011df9975cd97a4fc9f8781e32fb7b9e65ff6d112ebac08ac8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /api/item/info?id=87472632 HTTP/1.1
Host: lovegbsk.pics
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lovegbsk.pics/product_details/87472632.html
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IlVFQlZJdlhIZ3ozTVpmUHo0Um1Vc2c9PSIsInZhbHVlIjoiSitlZHNQL3BHdks0YTNxYmZVajhnWWZtSHhvSllVUElKakNYbVpibUxMbVdkL3BlQU1FbzVRVnlFOGRIS2ZKSDROUC8xV2l6WmloT1JuQURrTytWZGV1SjFFdTJpNDFITXFaRGgrRVNuNG1udmIrY0FzVzlyWEdpalkweWM3ZG8iLCJtYWMiOiJlNzAzMzQ4OTJlOWQzMDIxYWNkNWZmNTQxNmY4NGIzOTI1MTNkM2ViNjIzOTQ0OTVkZTkwNjk0NThjZDdjMzk1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ikc2ajh5M2xKQUxWdEFJam5ZOVpEelE9PSIsInZhbHVlIjoiOU1xR2t1V2Q3OTZ5NktrUWtDRHNQcnBjQkJMZUFiMmZHcWpVdkRFbmxHUjlYRDdLdFE4MWE5cGVKcHJoUWF2QnB3WDMvSU5pTVIrK1JTbXhuREljQW9xcjhFYnlpUnpKdFFrcEt1MkxPTUlrWmprUC85a3M5dmQ5ajhsUVo3RlMiLCJtYWMiOiI5MTYzNzQ0MWRjOTY5MmFhNzUxYmEwZTE3NWIzNTMxOWNlMjA0ZjQxNDllOGViOGFjYWVmMTQwNWE2NjkyNmI4IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 21:36:44 GMT
content-type: application/json
cache-control: no-cache, private
x-ratelimit-limit: 60
x-ratelimit-remaining: 57
access-control-allow-origin: *
set-cookie: laravel_session=eyJpdiI6InI0dG15c1drdlVHL3RYL0w3WTVSMWc9PSIsInZhbHVlIjoid0pVOERXZ3hocGJhS21UQm54cTVUaDdHa2hDTFQ0cVhrMlpjWWJDS2dJeTdNcm1pc0xVOVFiU1ZlQzVxMVlVcUZTWTJxWEdRTGlOc1dnUTBlRUR6VjhiQWpUREUydUZ3dWlZOWI0VEhNbTd4TkorVEJQTDErSnVIN3RZRDlwWi8iLCJtYWMiOiI4YWQ4MWNhNjk5NTUxMmM1NWE5YzQzODcwYzA4NmE3NWMwZmVmZDYwMzA5YmQ2MzZjMWUxMDRlYTlkZjQxOWIyIiwidGFnIjoiIn0%3D; expires=Sat, 04-May-2024 23:36:44 GMT; Max-Age=7200; path=/; httponly; samesite=lax
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2cyB8tE35Hx1IYCrqflhO4sMXm%2BbYP2OZpA2eQNFlbDFCs0us88DYnMHx3I3Yv77JpDque%2FORubgXjb0tp3QPGwrh6%2FtCw1FJrTOVUErvTkHRMBJEJ%2BVdMPfRI8EU0zl"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87eba0ba1ce05691-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| img.yumpu.com/7471835/1/500x640/ssp332-audi-a3-sportback-volkspagenet.jpg | 54.230.111.118 | 200 OK | 23 kB |
URL GET HTTP/2img.yumpu.com/7471835/1/500x640/ssp332-audi-a3-sportback-volkspagenet.jpg IP54.230.111.118:443
Requested byhttps://lovegbsk.pics/product_details/87472632.html CertificateIssuerAmazon Subjectyumpu.com Fingerprint62:14:6A:9A:92:82:DE:F3:00:12:3B:C9:AB:4F:12:1B:FA:1D:9F:6B ValidityThu, 16 Nov 2023 00:00:00 GMT - Sun, 15 Dec 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 54x54, segment length 16, progressive, precision 8, 426x640, components 3 Hashbc46ee6e2b71bee7f3d3815a6c62c9db d39d2c07c04c350f3f6c1ee335bbeca1097ad5d1 e566d9c99439308f04ac517ace7e4d81f4435838d29ecfe498aa67c732e44433
GET /7471835/1/500x640/ssp332-audi-a3-sportback-volkspagenet.jpg HTTP/1.1
Host: img.yumpu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
content-length: 22693
access-control-allow-origin: *
access-control-expose-headers: X-Yumpu-RE-Rendering, X-Yumpu-RE-PDFDownload, X-Yumpu-RE-Server, X-Yumpu-RE-Error
cache-control: max-age=31536000, public
date: Thu, 02 May 2024 10:46:32 GMT
server: Apache
x-yumpu-re-pdfdownload: 0.089763164520264s
x-yumpu-re-rendering: 0.20475506782532
x-yumpu-re-server: 172.30.0.32
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: UIVY37ZEGJCsWwL2JDWvaN_07idli-b6szVtq-aUWRwYTheE34b4JA==
age: 211814
X-Firefox-Spdy: h2
|
|
| cartriple.com/wp-content/uploads/2023/01/audi-a6-2014-black-side-view-1024x601.png | 104.18.37.69 | 200 OK | 602 kB |
URL GET HTTP/2cartriple.com/wp-content/uploads/2023/01/audi-a6-2014-black-side-view-1024x601.png IP104.18.37.69:443
Requested byhttps://lovegbsk.pics/product_details/87472632.html CertificateIssuerLet's Encrypt Subjectcartriple.com Fingerprint26:F9:6B:22:22:2A:DC:9F:90:75:A1:31:21:3F:DC:86:D5:A1:EC:4D ValidityWed, 27 Mar 2024 23:53:03 GMT - Tue, 25 Jun 2024 23:53:02 GMT
File typeRIFF (little-endian) data, Web/P image Size602 kB (602504 bytes) Hash719b956724c934179f68bb5e6c761402 7bf882bc8c8b9d671ea9e8df6f3e0111d80224b9 501ef54e9eb5a71fabc68e1bc2239fdf2bdf424483408276a627203fa42562e2
GET /wp-content/uploads/2023/01/audi-a6-2014-black-side-view-1024x601.png HTTP/1.1
Host: cartriple.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 04 May 2024 21:36:46 GMT
content-type: image/webp
content-length: 602504
cache-control: public, must-revalidate, proxy-revalidate, immutable, max-age=31536000, stale-while-revalidate=86400, stale-if-error=604800
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=1045765
content-disposition: inline; filename="audi-a6-2014-black-side-view-1024x601.webp"
vary: Accept
access-control-allow-origin: *
etag: "63d11a10-ff505"
last-modified: Wed, 25 Jan 2023 12:01:20 GMT
x-hosted-by: BigScoots
cf-cache-status: HIT
accept-ranges: bytes
set-cookie: __cf_bm=mXwkV4h6EtTmndMynlyYP3EL6S7cLReHpD4ittNCPcs-1714858606-1.0.1.1-_veZgxZXE33KsISwXkJ30dsiTnKDCxWSWD8_SP.KvRfPoBTB17QYKhctO2c2h1o.qHdkvqEU2qX_QKQIuTZXXA; path=/; expires=Sat, 04-May-24 22:06:46 GMT; domain=.cartriple.com; HttpOnly; Secure; SameSite=None
strict-transport-security: max-age=15552000; preload
x-content-type-options: nosniff
x-bigscoots-cache-status: HIT
server: cloudflare
cf-ray: 87eba0d2dbfd0b59-OSL
X-Firefox-Spdy: h2
|
|
| lovegbsk.pics/static/default/js/delighters.js | 172.67.153.137 | 200 OK | 205 kB |
URL GET HTTP/3lovegbsk.pics/static/default/js/delighters.js IP172.67.153.137:443
Requested byhttps://lovegbsk.pics/product_details/87472632.html CertificateIssuerLet's Encrypt Subjectlovegbsk.pics Fingerprint9A:67:84:92:B8:A4:A9:4C:32:CB:C6:16:C1:75:99:69:CF:F5:54:62 ValiditySat, 06 Apr 2024 01:49:11 GMT - Fri, 05 Jul 2024 01:49:10 GMT
Size205 kB (205064 bytes) Hashcc31823856831d96acd96628fe1bc12c 4441d2792dc7fb9f54cde379cd6dd5085ae7af33 0636cf1e7380cd58da452b76c4f7d8d902d25c735188b56d005c73a127bae19d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/default/js/delighters.js HTTP/1.1
Host: lovegbsk.pics
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lovegbsk.pics/product_details/87472632.html
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IlVFQlZJdlhIZ3ozTVpmUHo0Um1Vc2c9PSIsInZhbHVlIjoiSitlZHNQL3BHdks0YTNxYmZVajhnWWZtSHhvSllVUElKakNYbVpibUxMbVdkL3BlQU1FbzVRVnlFOGRIS2ZKSDROUC8xV2l6WmloT1JuQURrTytWZGV1SjFFdTJpNDFITXFaRGgrRVNuNG1udmIrY0FzVzlyWEdpalkweWM3ZG8iLCJtYWMiOiJlNzAzMzQ4OTJlOWQzMDIxYWNkNWZmNTQxNmY4NGIzOTI1MTNkM2ViNjIzOTQ0OTVkZTkwNjk0NThjZDdjMzk1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ikc2ajh5M2xKQUxWdEFJam5ZOVpEelE9PSIsInZhbHVlIjoiOU1xR2t1V2Q3OTZ5NktrUWtDRHNQcnBjQkJMZUFiMmZHcWpVdkRFbmxHUjlYRDdLdFE4MWE5cGVKcHJoUWF2QnB3WDMvSU5pTVIrK1JTbXhuREljQW9xcjhFYnlpUnpKdFFrcEt1MkxPTUlrWmprUC85a3M5dmQ5ajhsUVo3RlMiLCJtYWMiOiI5MTYzNzQ0MWRjOTY5MmFhNzUxYmEwZTE3NWIzNTMxOWNlMjA0ZjQxNDllOGViOGFjYWVmMTQwNWE2NjkyNmI4IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 21:36:42 GMT
content-type: application/javascript
last-modified: Fri, 08 Sep 2023 06:31:38 GMT
etag: W/"a4b-604d320ff4d5d-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 5435
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jLXJClERDU5DtHz5CciU3jMN%2BUfKWsZoEhS963MRCidj694yC%2FxWVnw2svDaGVOAL%2Bf81tsIxykgGS0QRrhTGgSy31k6pwH8nSgSWnQqnfleOP8AcDIOSbfgyI3nkMzo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87eba0b95bfc5691-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| cdn11.bigcommerce.com/s-z9vhe3o238/images/stencil/1280x1280/products/74217/5475250/482__27136.1687965616.jpg?c=1 | 192.200.160.253 | 200 OK | 125 kB |
URL GET HTTP/2cdn11.bigcommerce.com/s-z9vhe3o238/images/stencil/1280x1280/products/74217/5475250/482__27136.1687965616.jpg?c=1 IP192.200.160.253:443
Requested byhttps://lovegbsk.pics/product_details/87472632.html CertificateIssuerDigiCert Inc Subject*.bigcommerce.com Fingerprint7A:7A:3E:4F:59:2B:69:A3:DD:BB:77:B3:D2:6D:E7:F8:EA:81:1C:06 ValidityFri, 08 Mar 2024 00:00:00 GMT - Thu, 06 Mar 2025 23:59:59 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 1280x1280, components 3 Size125 kB (124595 bytes) Hash9b2158ef16d950de2c6bc6e08704f9e1 a95b1292e7e80b8bd8cf514e1e75c4229b88f863 17c8dd0736c74b84508289f4868e2b42ea80c5e956f7d015d7c3d741b82b637e
GET /s-z9vhe3o238/images/stencil/1280x1280/products/74217/5475250/482__27136.1687965616.jpg?c=1 HTTP/1.1
Host: cdn11.bigcommerce.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 04 May 2024 21:36:47 GMT
content-type: image/jpeg
content-length: 124595
cache-control: max-age=31556926, public
content-disposition: inline; filename="482__27136.jpg"
expires: Mon, 05 May 2025 03:25:32 GMT
x-request-id: c1aa3395f54fd65418da2ad809362890
access-control-allow-origin: *
access-control-max-age: 604800
x-bc-origin-cache: MISS
x-bc-is-ha: 1
last-modified: Sat, 04 May 2024 21:36:47 GMT
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
bc-ray: 1
server: cloudflare
cf-ray: 87eba0d29c0e568d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| lovegbsk.pics/static/market/js/jquery.min.js | 172.67.153.137 | 200 OK | 639 kB |
URL GET HTTP/3lovegbsk.pics/static/market/js/jquery.min.js IP172.67.153.137:443
Requested byhttps://lovegbsk.pics/product_details/87472632.html CertificateIssuerLet's Encrypt Subjectlovegbsk.pics Fingerprint9A:67:84:92:B8:A4:A9:4C:32:CB:C6:16:C1:75:99:69:CF:F5:54:62 ValiditySat, 06 Apr 2024 01:49:11 GMT - Fri, 05 Jul 2024 01:49:10 GMT
File typeJavaScript source, ASCII text, with very long lines (32061) Size639 kB (639128 bytes) Hashe40ec2161fe7993196f23c8a07346306 afb90752e0a90c24b7f724faca86c5f3d15d1178 874706b2b1311a0719b5267f7d1cf803057e367e94ae1ff7bf78c5450d30f5d4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/market/js/jquery.min.js HTTP/1.1
Host: lovegbsk.pics
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lovegbsk.pics/product_details/87472632.html
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IlVFQlZJdlhIZ3ozTVpmUHo0Um1Vc2c9PSIsInZhbHVlIjoiSitlZHNQL3BHdks0YTNxYmZVajhnWWZtSHhvSllVUElKakNYbVpibUxMbVdkL3BlQU1FbzVRVnlFOGRIS2ZKSDROUC8xV2l6WmloT1JuQURrTytWZGV1SjFFdTJpNDFITXFaRGgrRVNuNG1udmIrY0FzVzlyWEdpalkweWM3ZG8iLCJtYWMiOiJlNzAzMzQ4OTJlOWQzMDIxYWNkNWZmNTQxNmY4NGIzOTI1MTNkM2ViNjIzOTQ0OTVkZTkwNjk0NThjZDdjMzk1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ikc2ajh5M2xKQUxWdEFJam5ZOVpEelE9PSIsInZhbHVlIjoiOU1xR2t1V2Q3OTZ5NktrUWtDRHNQcnBjQkJMZUFiMmZHcWpVdkRFbmxHUjlYRDdLdFE4MWE5cGVKcHJoUWF2QnB3WDMvSU5pTVIrK1JTbXhuREljQW9xcjhFYnlpUnpKdFFrcEt1MkxPTUlrWmprUC85a3M5dmQ5ajhsUVo3RlMiLCJtYWMiOiI5MTYzNzQ0MWRjOTY5MmFhNzUxYmEwZTE3NWIzNTMxOWNlMjA0ZjQxNDllOGViOGFjYWVmMTQwNWE2NjkyNmI4IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 21:36:41 GMT
content-type: application/javascript
last-modified: Fri, 08 Sep 2023 06:31:38 GMT
etag: W/"14915-604d321031a06-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 5434
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xXfXxERGoMMXEERYaA%2BRXU70XrQsNeDijvy78XpK1%2Fzhh%2FlTiRX%2BDKhZxzeO9CPTr68UM5qX5qL590a8JPR7wS5TJR%2FW0kJ3NTgN5hp1vS48G7CSxKKNSuymGlOKAGQ4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87eba0b6683e5691-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| ae01.alicdn.com/kf/HTB1GU3LKb1YBuNjSszeq6yblFXaq.jpg_640x640q90.jpg |  47.246.44.250 | 200 OK | 49 kB |
URL GET HTTP/2ae01.alicdn.com/kf/HTB1GU3LKb1YBuNjSszeq6yblFXaq.jpg_640x640q90.jpg IP47.246.44.250:443 ASN#24429 Zhejiang Taobao Network Co.,Ltd
Requested byhttps://lovegbsk.pics/product_details/87472632.html CertificateIssuerGlobalSign nv-sa Subject*.tbcdn.cn Fingerprint29:04:BE:E6:49:30:F7:DC:C0:BE:56:8F:B4:AC:24:9B:50:1A:F7:E2 ValidityTue, 26 Dec 2023 03:36:04 GMT - Tue, 30 Jul 2024 02:26:11 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 632x640, Scaling: [none]x[none], YUV color, decoders should clamp Hashcc857212d5e54bc750fcec807ce17356 b3530c47979f1b69a599aaebfb12b3912a950f58 6a416f66ef12ccc19f489e429850b635e0a2c5033665f7f0c4971f5b58b11a02
GET /kf/HTB1GU3LKb1YBuNjSszeq6yblFXaq.jpg_640x640q90.jpg HTTP/1.1
Host: ae01.alicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: image/webp
content-length: 49234
date: Sat, 04 May 2024 21:36:47 GMT
traceid: 2ff62ca517148586067643213e
last-modified: Mon, 14 Oct 2019 02:42:03 GMT
cache-control: max-age=86400000
access-control-allow-origin: *
eagleeye-traceid: 2ff62ca517148586067643213e
strict-transport-security: max-age=0
timing-allow-origin: *, *
ali-swift-global-savetime: 1714858607
via: cache1.l2de2[382,381,200-0,M], cache23.l2de2[383,0], ens-cache6.se2[405,405,200-0,M], ens-cache17.se2[407,0]
age: 0
x-cache: MISS TCP_MISS dirn:-2:-2
x-swift-savetime: Sat, 04 May 2024 21:36:47 GMT
x-swift-cachetime: 31104000
cdn-type: alibaba
eagleid: 2ff62ca517148586067643213e
X-Firefox-Spdy: h2
|
|
| assets.cnhindustrial.com/nhag/africa/assets/agriculture-tractors/td5/td5-overview.png | 104.84.152.185 | 200 OK | 25 kB |
URL GET HTTP/2assets.cnhindustrial.com/nhag/africa/assets/agriculture-tractors/td5/td5-overview.png IP104.84.152.185:443 ASN#20940 Akamai International B.V.
Requested byhttps://lovegbsk.pics/product_details/87472632.html CertificateIssuerDigiCert Inc Subjectassets.cnhindustrial.com Fingerprint4A:58:50:12:BA:D5:02:98:49:FA:D1:48:75:88:DA:87:00:D0:82:24 ValidityMon, 11 Sep 2023 00:00:00 GMT - Sun, 22 Sep 2024 23:59:59 GMT
Hashd9d47f6959d009e282d83004577abe51 1c0ca5b3be730e4d0c98c3269bee07dc5396e6bf 3db13913f35a132f9f6635ab906d393fc50171f335e377fcf95b7464e183ca9d
GET /nhag/africa/assets/agriculture-tractors/td5/td5-overview.png HTTP/1.1
Host: assets.cnhindustrial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Fri, 09 Feb 2024 09:31:09 GMT
x-frame-options: SAMEORIGIN
etag: "{2D53AA39-85B7-4D80-B130-BEBC704941A3},4pub"
server: Akamai Image Manager
content-length: 25376
content-type: image/avif
cache-control: private, no-transform, max-age=86400
expires: Sun, 05 May 2024 21:36:47 GMT
date: Sat, 04 May 2024 21:36:47 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=463, origin; dur=0, ak_p; desc="1714858606774_1750374581_500285474_46292_22054_8_32_13";dur=1
X-Firefox-Spdy: h2
|
|
| www.speednik.com/wp-content/blogs.dir/1/files/2018/08/a-guide-to-ford-v8-engine-block-casting-numbers-1952-1996-2018-08-24_23-39-08_148602.jpg | 172.67.73.113 | 200 OK | 301 kB |
URL GET HTTP/2www.speednik.com/wp-content/blogs.dir/1/files/2018/08/a-guide-to-ford-v8-engine-block-casting-numbers-1952-1996-2018-08-24_23-39-08_148602.jpg IP172.67.73.113:443
Requested byhttps://lovegbsk.pics/product_details/87472632.html CertificateIssuerGoogle Trust Services LLC Subjectspeednik.com FingerprintB0:55:B6:62:E0:6C:83:98:C9:2E:8C:B1:1A:0F:B9:71:6C:B0:CB:32 ValiditySat, 16 Mar 2024 00:04:46 GMT - Fri, 14 Jun 2024 00:04:45 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 1024x683, components 3 Size301 kB (301179 bytes) Hashd448023bb62b34f1cf01e048db1b4f71 04fb001cd3008ebe1d7ca5f07eeb81796711b0f1 8958e74b2d1363a9eada136c55ff299a73335051c36b70b8fc248113f51342a6
GET /wp-content/blogs.dir/1/files/2018/08/a-guide-to-ford-v8-engine-block-casting-numbers-1952-1996-2018-08-24_23-39-08_148602.jpg HTTP/1.1
Host: www.speednik.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 04 May 2024 21:36:48 GMT
content-type: image/jpeg
content-length: 301179
last-modified: Wed, 05 Sep 2018 07:16:55 GMT
etag: "d448023bb62b34f1cf01e048db1b4f71"
x-amz-storage-class: STANDARD_IA
x-amz-server-side-encryption: AES256
x-amz-version-id: 5i49kms8YKCOfAPiF1ZJbC_.HPRBal3H
expires: Mon, 03 Jun 2024 21:36:47 GMT
cache-control: max-age=2678400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VXvyifyqCDz1b4uBVWHODcJ2hvPL42bUOMMjXNLd%2FsEXUnz5pxwg775Oa%2BnoJgK%2ByxN%2BwkHiRMN%2FOHR%2B97Ure0pY7ilxk4UbwN8lFPG%2BGZ%2Bwq5h6YmGlR6yNPsDNBME7CUk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87eba0d6882c56b1-OSL
X-Firefox-Spdy: h2
|
|
| lovegbsk.pics/static/mall/css/font/ecicons.woff2?v=4.7.0 | 172.67.153.137 | 200 OK | 77 kB |
URL GET HTTP/3lovegbsk.pics/static/mall/css/font/ecicons.woff2?v=4.7.0 IP172.67.153.137:443
Requested byhttps://lovegbsk.pics/product_details/87472632.html CertificateIssuerLet's Encrypt Subjectlovegbsk.pics Fingerprint9A:67:84:92:B8:A4:A9:4C:32:CB:C6:16:C1:75:99:69:CF:F5:54:62 ValiditySat, 06 Apr 2024 01:49:11 GMT - Fri, 05 Jul 2024 01:49:10 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 77160, version 4.459 Hashaf7ae505a9eed503f8b8e6982036873e d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c 2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/mall/css/font/ecicons.woff2?v=4.7.0 HTTP/1.1
Host: lovegbsk.pics
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://lovegbsk.pics/static/mall/css/ecicons.min.css
Cookie: XSRF-TOKEN=eyJpdiI6IlVFQlZJdlhIZ3ozTVpmUHo0Um1Vc2c9PSIsInZhbHVlIjoiSitlZHNQL3BHdks0YTNxYmZVajhnWWZtSHhvSllVUElKakNYbVpibUxMbVdkL3BlQU1FbzVRVnlFOGRIS2ZKSDROUC8xV2l6WmloT1JuQURrTytWZGV1SjFFdTJpNDFITXFaRGgrRVNuNG1udmIrY0FzVzlyWEdpalkweWM3ZG8iLCJtYWMiOiJlNzAzMzQ4OTJlOWQzMDIxYWNkNWZmNTQxNmY4NGIzOTI1MTNkM2ViNjIzOTQ0OTVkZTkwNjk0NThjZDdjMzk1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ikc2ajh5M2xKQUxWdEFJam5ZOVpEelE9PSIsInZhbHVlIjoiOU1xR2t1V2Q3OTZ5NktrUWtDRHNQcnBjQkJMZUFiMmZHcWpVdkRFbmxHUjlYRDdLdFE4MWE5cGVKcHJoUWF2QnB3WDMvSU5pTVIrK1JTbXhuREljQW9xcjhFYnlpUnpKdFFrcEt1MkxPTUlrWmprUC85a3M5dmQ5ajhsUVo3RlMiLCJtYWMiOiI5MTYzNzQ0MWRjOTY5MmFhNzUxYmEwZTE3NWIzNTMxOWNlMjA0ZjQxNDllOGViOGFjYWVmMTQwNWE2NjkyNmI4IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 21:36:42 GMT
content-type: font/woff2
last-modified: Fri, 08 Sep 2023 06:31:38 GMT
etag: W/"12d68-604d321026656-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 1839
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VFIDOIHtCGi06OhXPZDK09hkuwIo3ov3ikYdqxyGzaDyYlWbCo5TjrNs2NVLKbRYvPmgkzC78O2iEaLlw64J9JsWqatVhXsK4SmG7VPYyrXzB94FHt4cpf0XDu4cucOE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87eba0baddc95691-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.speednik.com/files/2018/08/a-guide-to-ford-v8-engine-block-casting-numbers-1952-1996-2018-08-24_23-39-08_148602.jpg | 172.67.73.113 | 301 Moved Permanently | 301 kB |
URL GET HTTP/2www.speednik.com/files/2018/08/a-guide-to-ford-v8-engine-block-casting-numbers-1952-1996-2018-08-24_23-39-08_148602.jpg IP172.67.73.113:443
Requested byhttps://lovegbsk.pics/product_details/87472632.html CertificateIssuerGoogle Trust Services LLC Subjectspeednik.com FingerprintB0:55:B6:62:E0:6C:83:98:C9:2E:8C:B1:1A:0F:B9:71:6C:B0:CB:32 ValiditySat, 16 Mar 2024 00:04:46 GMT - Fri, 14 Jun 2024 00:04:45 GMT
Size301 kB (301179 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /files/2018/08/a-guide-to-ford-v8-engine-block-casting-numbers-1952-1996-2018-08-24_23-39-08_148602.jpg HTTP/1.1
Host: www.speednik.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Sat, 04 May 2024 21:36:47 GMT
content-type: text/html
location: https://www.speednik.com/wp-content/blogs.dir/1/files/2018/08/a-guide-to-ford-v8-engine-block-casting-numbers-1952-1996-2018-08-24_23-39-08_148602.jpg
cache-control: max-age=2678400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ODtRlzCu4shX67Nym8NZa0%2B04RYg5m4%2FnXuMWDwPBQpneBpCZVVfh5Vmt86sB4%2B%2BcuxWssYmbLKTh3IpQjkSCf1J8N023ma%2FkJWvo9Y9eClzXlvzXJw5gTrWtDvOynMgvgE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87eba0d2dc0656b1-OSL
X-Firefox-Spdy: h2
|
|
| lovegbsk.pics/static/mall/css/font/Poppins-Regular.ttf | 172.67.153.137 | 200 OK | 158 kB |
URL GET HTTP/3lovegbsk.pics/static/mall/css/font/Poppins-Regular.ttf IP172.67.153.137:443
Requested byhttps://lovegbsk.pics/product_details/87472632.html CertificateIssuerLet's Encrypt Subjectlovegbsk.pics Fingerprint9A:67:84:92:B8:A4:A9:4C:32:CB:C6:16:C1:75:99:69:CF:F5:54:62 ValiditySat, 06 Apr 2024 01:49:11 GMT - Fri, 05 Jul 2024 01:49:10 GMT
File typeTrueType Font data, 13 tables, 1st "GDEF", 17 names, Microsoft, language 0x409, Copyright 2020 The Poppins Project Authors (https://github.com/itfoundry/Poppins)PoppinsRegularI Size158 kB (158192 bytes) Hash8b6af8e5e8324edfd77af8b3b35d7f9c 01d319c533f62ea29f03b5df8adfd4d93d2d2a38 78f127277756ae464f4eb665ce214cb6315746f6f4193e95b31f18f4b3e97527
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/mall/css/font/Poppins-Regular.ttf HTTP/1.1
Host: lovegbsk.pics
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lovegbsk.pics/static/mall/css/demo1.css
Cookie: XSRF-TOKEN=eyJpdiI6IlE1dmhhUGpvWFJwN2NqcFdDQ0Zvdnc9PSIsInZhbHVlIjoiYzQ3MUpnY2pIVU5FZ0VJZ3YyQzVwSnhhT3JXdW5ydWNtSDZuckFzODhRZEs1WkRlQTZOYTZzUithWDVESnIyRFhBdFRydmdpT3B6TGE1K2xqcFNFQ0V2MHB0cG9KS01QNGZvaU9jYWdlWjZsL21qM3gvaDBrS2J4UEVTSVFjTWciLCJtYWMiOiIwNjI0MGUzNDY3ZWY5NzNkYWE0NzdkMjY0ZmRmYzNlN2IyZTdhMjhkYTgzOTVjOGFiNmMyNTk0NjBlMjM4MmI3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlBWQjBRZmQ5UkxBc3kveWxnWEhZTnc9PSIsInZhbHVlIjoiSHovOUREWjBXWkhsT0EwRmVDeFkzalZ6OXNBOWVja1F3a2pnZFU4MjZkZ2Zuc2V5YUNkeDNiM0xiMzBhZkViaEl6OGg2L2RUaDRpQm15dFlUT0VKQ3lZVFZQWlRiaHFsSW9ORGFna0FkQkxMTHNHK2gzWGZDRFQ1aGpKemdaQVYiLCJtYWMiOiIyMWZkZDIyZjJlMGQ4NGIwZDU0OWNhOTYyNmY2YWZkNTQzMjI5Y2U5ZDg3YWExM2ZjNDhhMjQ2NzczMjJiNDgxIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 21:36:46 GMT
content-type: font/ttf
last-modified: Fri, 08 Sep 2023 06:31:38 GMT
etag: W/"269f0-604d321024716-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 1831
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZplgqaVfzV3jGbPrma2e9bgVsMMZvgGYHRg8vqkbJ1D2KFce63sPau5AGpIBMr3lbGiIA%2FUaLpYyh5RjnUtcegqebXp65N6kWxSy9iP5YDyyMW89RHsU5na%2BlzvkATG6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87eba0d28ee85691-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lovegbsk.pics/static/mall/css/animate.css | 172.67.153.137 | 200 OK | 72 kB |
URL GET HTTP/3lovegbsk.pics/static/mall/css/animate.css IP172.67.153.137:443
Requested byhttps://lovegbsk.pics/product_details/87472632.html CertificateIssuerLet's Encrypt Subjectlovegbsk.pics Fingerprint9A:67:84:92:B8:A4:A9:4C:32:CB:C6:16:C1:75:99:69:CF:F5:54:62 ValiditySat, 06 Apr 2024 01:49:11 GMT - Fri, 05 Jul 2024 01:49:10 GMT
File typeASCII text, with very long lines (65343) Hasha2debeb6012c56100f1180d3de887927 b49fa74ae3abff550dc4beff7e6e540ec1f37029 fee5e34c63f9527f33c78381943de33789c521a12f8ec151991bc5247d5f7bc0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/mall/css/animate.css HTTP/1.1
Host: lovegbsk.pics
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lovegbsk.pics/product_details/87472632.html
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IlVFQlZJdlhIZ3ozTVpmUHo0Um1Vc2c9PSIsInZhbHVlIjoiSitlZHNQL3BHdks0YTNxYmZVajhnWWZtSHhvSllVUElKakNYbVpibUxMbVdkL3BlQU1FbzVRVnlFOGRIS2ZKSDROUC8xV2l6WmloT1JuQURrTytWZGV1SjFFdTJpNDFITXFaRGgrRVNuNG1udmIrY0FzVzlyWEdpalkweWM3ZG8iLCJtYWMiOiJlNzAzMzQ4OTJlOWQzMDIxYWNkNWZmNTQxNmY4NGIzOTI1MTNkM2ViNjIzOTQ0OTVkZTkwNjk0NThjZDdjMzk1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ikc2ajh5M2xKQUxWdEFJam5ZOVpEelE9PSIsInZhbHVlIjoiOU1xR2t1V2Q3OTZ5NktrUWtDRHNQcnBjQkJMZUFiMmZHcWpVdkRFbmxHUjlYRDdLdFE4MWE5cGVKcHJoUWF2QnB3WDMvSU5pTVIrK1JTbXhuREljQW9xcjhFYnlpUnpKdFFrcEt1MkxPTUlrWmprUC85a3M5dmQ5ajhsUVo3RlMiLCJtYWMiOiI5MTYzNzQ0MWRjOTY5MmFhNzUxYmEwZTE3NWIzNTMxOWNlMjA0ZjQxNDllOGViOGFjYWVmMTQwNWE2NjkyNmI4IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 21:36:41 GMT
content-type: text/css
last-modified: Fri, 08 Sep 2023 06:31:38 GMT
etag: W/"1184b-604d32101e186-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 5434
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FcCk%2BboSDmC4ucGWrYmjkcBiPYOxCX5kyB5N0ovDz1a7tgxjrTbowoHGr37hs%2B1CLy30sONT3Sw%2BwXSOEo45Vn2w1OOrHlDl3YOyjuhpJVLG7xqo5lcRfRO4Yyc7g2cn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87eba0b6480e5691-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lovegbsk.pics/api/item/secondCate | 172.67.153.137 | 200 OK | 66 kB |
URL GET HTTP/3lovegbsk.pics/api/item/secondCate IP172.67.153.137:443
Requested byhttps://lovegbsk.pics/product_details/87472632.html CertificateIssuerLet's Encrypt Subjectlovegbsk.pics Fingerprint9A:67:84:92:B8:A4:A9:4C:32:CB:C6:16:C1:75:99:69:CF:F5:54:62 ValiditySat, 06 Apr 2024 01:49:11 GMT - Fri, 05 Jul 2024 01:49:10 GMT
Hashb0d089777020dae0a9df8e6cc15bb414 8334de79c0ba9e3d63de0d04565125b5b30f771d d19a93615a57509536951b1f3b4e59f74ad2e88070d8d27697ba68d0afd8c8e6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /api/item/secondCate HTTP/1.1
Host: lovegbsk.pics
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lovegbsk.pics/product_details/87472632.html
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IlVFQlZJdlhIZ3ozTVpmUHo0Um1Vc2c9PSIsInZhbHVlIjoiSitlZHNQL3BHdks0YTNxYmZVajhnWWZtSHhvSllVUElKakNYbVpibUxMbVdkL3BlQU1FbzVRVnlFOGRIS2ZKSDROUC8xV2l6WmloT1JuQURrTytWZGV1SjFFdTJpNDFITXFaRGgrRVNuNG1udmIrY0FzVzlyWEdpalkweWM3ZG8iLCJtYWMiOiJlNzAzMzQ4OTJlOWQzMDIxYWNkNWZmNTQxNmY4NGIzOTI1MTNkM2ViNjIzOTQ0OTVkZTkwNjk0NThjZDdjMzk1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ikc2ajh5M2xKQUxWdEFJam5ZOVpEelE9PSIsInZhbHVlIjoiOU1xR2t1V2Q3OTZ5NktrUWtDRHNQcnBjQkJMZUFiMmZHcWpVdkRFbmxHUjlYRDdLdFE4MWE5cGVKcHJoUWF2QnB3WDMvSU5pTVIrK1JTbXhuREljQW9xcjhFYnlpUnpKdFFrcEt1MkxPTUlrWmprUC85a3M5dmQ5ajhsUVo3RlMiLCJtYWMiOiI5MTYzNzQ0MWRjOTY5MmFhNzUxYmEwZTE3NWIzNTMxOWNlMjA0ZjQxNDllOGViOGFjYWVmMTQwNWE2NjkyNmI4IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 21:36:43 GMT
content-type: application/json
cache-control: no-cache, private
x-ratelimit-limit: 60
x-ratelimit-remaining: 57
access-control-allow-origin: *
set-cookie: laravel_session=eyJpdiI6IlI5bmp0MnFiekJHcGRQdjhLMzNYYmc9PSIsInZhbHVlIjoiZ05RNTBxeHozMTNaV3ZqTEhmMkZ1ZVFqZnMrTTIrQUlteEVlQkkvOUxYL2tXR1VNY2wzVDBvODRzSmFKKzc2cEg5TWZFTFQ4KzZqL3F2c25pWk9ra2hWN2loQVprWllpd2YxcllrWXhhbXZnT1VxQnhiQnR0aXBEeGpLWWFjVzciLCJtYWMiOiI0YzM0MWYzMzg0YjMxNjIxZTVmOGFiYWJlNzMzOWM1OGViZjQzYmE3NzhiNDEyNDNlMmYzZGJkM2M0NWM3NjIyIiwidGFnIjoiIn0%3D; expires=Sat, 04-May-2024 23:36:43 GMT; Max-Age=7200; path=/; httponly; samesite=lax
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kc%2FlK9WVXFz0Sebrfi9ROr5CXk8At6oG69XKGWqzmXarWeXI3PsWK9lBF6nkGEyhjxDW1vhZPIr1y4XV3qc1OCV7VMaPz6QtEF%2BstY8tCfqqyTXFQk3K9uT8aLl09uES"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87eba0b99c525691-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lovegbsk.pics/static/mall/css/font/Poppins-SemiBold.ttf | 172.67.153.137 | 200 OK | 155 kB |
URL GET HTTP/3lovegbsk.pics/static/mall/css/font/Poppins-SemiBold.ttf IP172.67.153.137:443
Requested byhttps://lovegbsk.pics/product_details/87472632.html CertificateIssuerLet's Encrypt Subjectlovegbsk.pics Fingerprint9A:67:84:92:B8:A4:A9:4C:32:CB:C6:16:C1:75:99:69:CF:F5:54:62 ValiditySat, 06 Apr 2024 01:49:11 GMT - Fri, 05 Jul 2024 01:49:10 GMT
File typeTrueType Font data, 13 tables, 1st "GDEF", 19 names, Microsoft, language 0x409, Copyright 2020 The Poppins Project Authors (https://github.com/itfoundry/Poppins)Poppins SemiBol Size155 kB (155192 bytes) Hash4cdacb8f89d588d69e8570edcbe49507 20b39c8b480c946b084d6aa09f12bf10b2ec5aa6 bf9c1ff640acc8bb5441a9b564360943f9db90969742aa33a36329b2828d2759
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/mall/css/font/Poppins-SemiBold.ttf HTTP/1.1
Host: lovegbsk.pics
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lovegbsk.pics/static/mall/css/demo1.css
Cookie: XSRF-TOKEN=eyJpdiI6IlVFQlZJdlhIZ3ozTVpmUHo0Um1Vc2c9PSIsInZhbHVlIjoiSitlZHNQL3BHdks0YTNxYmZVajhnWWZtSHhvSllVUElKakNYbVpibUxMbVdkL3BlQU1FbzVRVnlFOGRIS2ZKSDROUC8xV2l6WmloT1JuQURrTytWZGV1SjFFdTJpNDFITXFaRGgrRVNuNG1udmIrY0FzVzlyWEdpalkweWM3ZG8iLCJtYWMiOiJlNzAzMzQ4OTJlOWQzMDIxYWNkNWZmNTQxNmY4NGIzOTI1MTNkM2ViNjIzOTQ0OTVkZTkwNjk0NThjZDdjMzk1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ikc2ajh5M2xKQUxWdEFJam5ZOVpEelE9PSIsInZhbHVlIjoiOU1xR2t1V2Q3OTZ5NktrUWtDRHNQcnBjQkJMZUFiMmZHcWpVdkRFbmxHUjlYRDdLdFE4MWE5cGVKcHJoUWF2QnB3WDMvSU5pTVIrK1JTbXhuREljQW9xcjhFYnlpUnpKdFFrcEt1MkxPTUlrWmprUC85a3M5dmQ5ajhsUVo3RlMiLCJtYWMiOiI5MTYzNzQ0MWRjOTY5MmFhNzUxYmEwZTE3NWIzNTMxOWNlMjA0ZjQxNDllOGViOGFjYWVmMTQwNWE2NjkyNmI4IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 21:36:42 GMT
content-type: font/ttf
last-modified: Fri, 08 Sep 2023 06:31:38 GMT
etag: W/"25e38-604d321024afe-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 1839
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=j3dbDbT5%2FJ8wYFEF3%2B2kFhyt%2Fzo2waUr3EM%2BRZjmPElEODCQBBjJw9lM%2FP9rQJYCnPfAft8KaXwRlhRNOX1eCXMTBejZUBM9of1CX6xFHGdDH6nlC5Ot%2Fpz5I5g7bnrr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87eba0ba0cc45691-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| i.ytimg.com/vi/8-iRKrNVPw4/maxresdefault.jpg | 142.250.74.54 | 200 OK | 192 kB |
URL GET HTTP/2i.ytimg.com/vi/8-iRKrNVPw4/maxresdefault.jpg IP142.250.74.54:443
Requested byhttps://lovegbsk.pics/product_details/87472632.html CertificateIssuerGoogle Trust Services LLC Subjectedgestatic.com FingerprintD2:2C:3D:05:38:12:27:20:C9:64:22:58:3A:99:D5:43:6E:BD:3B:D2 ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3 Size192 kB (192032 bytes) Hash29b3ca7f0585ae8f93f0d665ab527dfd 5c8961b26cbb369c0321800e54c8807f5294e528 78a63dde99e9c06470fdee2e8ddafe263d40cff2f9e897be6b94d107589838f5
GET /vi/8-iRKrNVPw4/maxresdefault.jpg HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/jpeg
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 192032
date: Sat, 04 May 2024 21:36:46 GMT
expires: Sat, 04 May 2024 23:36:46 GMT
cache-control: public, max-age=7200
etag: "0"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| lovegbsk.pics/static/mall/css/bootstrap.css | 172.67.153.137 | 200 OK | 205 kB |
URL GET HTTP/3lovegbsk.pics/static/mall/css/bootstrap.css IP172.67.153.137:443
Requested byhttps://lovegbsk.pics/product_details/87472632.html CertificateIssuerLet's Encrypt Subjectlovegbsk.pics Fingerprint9A:67:84:92:B8:A4:A9:4C:32:CB:C6:16:C1:75:99:69:CF:F5:54:62 ValiditySat, 06 Apr 2024 01:49:11 GMT - Fri, 05 Jul 2024 01:49:10 GMT
Size205 kB (205443 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/mall/css/bootstrap.css HTTP/1.1
Host: lovegbsk.pics
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lovegbsk.pics/product_details/87472632.html
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IlVFQlZJdlhIZ3ozTVpmUHo0Um1Vc2c9PSIsInZhbHVlIjoiSitlZHNQL3BHdks0YTNxYmZVajhnWWZtSHhvSllVUElKakNYbVpibUxMbVdkL3BlQU1FbzVRVnlFOGRIS2ZKSDROUC8xV2l6WmloT1JuQURrTytWZGV1SjFFdTJpNDFITXFaRGgrRVNuNG1udmIrY0FzVzlyWEdpalkweWM3ZG8iLCJtYWMiOiJlNzAzMzQ4OTJlOWQzMDIxYWNkNWZmNTQxNmY4NGIzOTI1MTNkM2ViNjIzOTQ0OTVkZTkwNjk0NThjZDdjMzk1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ikc2ajh5M2xKQUxWdEFJam5ZOVpEelE9PSIsInZhbHVlIjoiOU1xR2t1V2Q3OTZ5NktrUWtDRHNQcnBjQkJMZUFiMmZHcWpVdkRFbmxHUjlYRDdLdFE4MWE5cGVKcHJoUWF2QnB3WDMvSU5pTVIrK1JTbXhuREljQW9xcjhFYnlpUnpKdFFrcEt1MkxPTUlrWmprUC85a3M5dmQ5ajhsUVo3RlMiLCJtYWMiOiI5MTYzNzQ0MWRjOTY5MmFhNzUxYmEwZTE3NWIzNTMxOWNlMjA0ZjQxNDllOGViOGFjYWVmMTQwNWE2NjkyNmI4IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 21:36:41 GMT
content-type: text/css
last-modified: Fri, 08 Sep 2023 06:31:38 GMT
etag: W/"32283-604d32101e56e-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 5434
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OvEb4OVz4tWn8YfN0f7NPhTxs%2FBze%2B66zuuv%2FX7FjQcEmmeWQRVOgRtq8pau1kyfZ%2B6eG81d2WAQKAbvy3ycVro69jwAF9UyztSmPK2sxEWMicR3yWF%2FtK8wONq3P%2BSi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87eba0b6481a5691-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lovegbsk.pics/static/store/css/checkout.css | 172.67.153.137 | 200 OK | 4.8 kB |
URL GET HTTP/3lovegbsk.pics/static/store/css/checkout.css IP172.67.153.137:443
Requested byhttps://lovegbsk.pics/product_details/87472632.html CertificateIssuerLet's Encrypt Subjectlovegbsk.pics Fingerprint9A:67:84:92:B8:A4:A9:4C:32:CB:C6:16:C1:75:99:69:CF:F5:54:62 ValiditySat, 06 Apr 2024 01:49:11 GMT - Fri, 05 Jul 2024 01:49:10 GMT
File typeASCII text, with very long lines (5046), with no line terminators Hash78004bf5e334b836b476f48fcb42d6b2 1b118f3acfd8329b2219397946fbdcdd2eb8a8a1 36ec4ba8f16410525a9046d41eab8c0acb179340bed5d10a795edb52fc899bb0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/store/css/checkout.css HTTP/1.1
Host: lovegbsk.pics
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lovegbsk.pics/product_details/87472632.html
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IlVFQlZJdlhIZ3ozTVpmUHo0Um1Vc2c9PSIsInZhbHVlIjoiSitlZHNQL3BHdks0YTNxYmZVajhnWWZtSHhvSllVUElKakNYbVpibUxMbVdkL3BlQU1FbzVRVnlFOGRIS2ZKSDROUC8xV2l6WmloT1JuQURrTytWZGV1SjFFdTJpNDFITXFaRGgrRVNuNG1udmIrY0FzVzlyWEdpalkweWM3ZG8iLCJtYWMiOiJlNzAzMzQ4OTJlOWQzMDIxYWNkNWZmNTQxNmY4NGIzOTI1MTNkM2ViNjIzOTQ0OTVkZTkwNjk0NThjZDdjMzk1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ikc2ajh5M2xKQUxWdEFJam5ZOVpEelE9PSIsInZhbHVlIjoiOU1xR2t1V2Q3OTZ5NktrUWtDRHNQcnBjQkJMZUFiMmZHcWpVdkRFbmxHUjlYRDdLdFE4MWE5cGVKcHJoUWF2QnB3WDMvSU5pTVIrK1JTbXhuREljQW9xcjhFYnlpUnpKdFFrcEt1MkxPTUlrWmprUC85a3M5dmQ5ajhsUVo3RlMiLCJtYWMiOiI5MTYzNzQ0MWRjOTY5MmFhNzUxYmEwZTE3NWIzNTMxOWNlMjA0ZjQxNDllOGViOGFjYWVmMTQwNWE2NjkyNmI4IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 21:36:41 GMT
content-type: text/css
last-modified: Tue, 21 Nov 2023 09:40:39 GMT
etag: W/"12d8-60aa66541ecee-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 5434
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rA62kIljQUf3oGtgg35tzccjpsjQX4TQnQRDlPXwx8du84QD%2FCzHA3JU68Pf5L1AAe174hJLanAIvicZzEly2TfYl%2BKzJIJvh9pbNYJtwQ63YCEMMf2sizqpHtYBAfnh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87eba0b6683b5691-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lovegbsk.pics/static/default/js/vue.min.js | 172.67.153.137 | 200 OK | 94 kB |
URL GET HTTP/3lovegbsk.pics/static/default/js/vue.min.js IP172.67.153.137:443
Requested byhttps://lovegbsk.pics/product_details/87472632.html CertificateIssuerLet's Encrypt Subjectlovegbsk.pics Fingerprint9A:67:84:92:B8:A4:A9:4C:32:CB:C6:16:C1:75:99:69:CF:F5:54:62 ValiditySat, 06 Apr 2024 01:49:11 GMT - Fri, 05 Jul 2024 01:49:10 GMT
File typeJavaScript source, ASCII text, with very long lines (65449) Hashb21b8531847604ab5f2f5caaef51ba31 da8d7a59f4e6cc55ea58abec33ef9cebb9ba67c1 9174c425c445377df4562ad9165ea08fdf9433a808296d7de5f619791df10e17
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/default/js/vue.min.js HTTP/1.1
Host: lovegbsk.pics
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lovegbsk.pics/product_details/87472632.html
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IlVFQlZJdlhIZ3ozTVpmUHo0Um1Vc2c9PSIsInZhbHVlIjoiSitlZHNQL3BHdks0YTNxYmZVajhnWWZtSHhvSllVUElKakNYbVpibUxMbVdkL3BlQU1FbzVRVnlFOGRIS2ZKSDROUC8xV2l6WmloT1JuQURrTytWZGV1SjFFdTJpNDFITXFaRGgrRVNuNG1udmIrY0FzVzlyWEdpalkweWM3ZG8iLCJtYWMiOiJlNzAzMzQ4OTJlOWQzMDIxYWNkNWZmNTQxNmY4NGIzOTI1MTNkM2ViNjIzOTQ0OTVkZTkwNjk0NThjZDdjMzk1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ikc2ajh5M2xKQUxWdEFJam5ZOVpEelE9PSIsInZhbHVlIjoiOU1xR2t1V2Q3OTZ5NktrUWtDRHNQcnBjQkJMZUFiMmZHcWpVdkRFbmxHUjlYRDdLdFE4MWE5cGVKcHJoUWF2QnB3WDMvSU5pTVIrK1JTbXhuREljQW9xcjhFYnlpUnpKdFFrcEt1MkxPTUlrWmprUC85a3M5dmQ5ajhsUVo3RlMiLCJtYWMiOiI5MTYzNzQ0MWRjOTY5MmFhNzUxYmEwZTE3NWIzNTMxOWNlMjA0ZjQxNDllOGViOGFjYWVmMTQwNWE2NjkyNmI4IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 21:36:42 GMT
content-type: application/javascript
last-modified: Fri, 08 Sep 2023 06:31:38 GMT
etag: W/"16fc7-604d320ff64cd-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 5435
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eN0laEb1KyJjQKtNeBWxJcksDGmE9t5mzRK2WT5UsUzFO%2BIJYSuvr6Jnzg1Wdl3QL3T%2BYz4w6dF4jzaJwWiY6fmMAovHAJUYiw1deeGgvIUcUnZhKL0Wz1TCodjsRAFG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87eba0b678515691-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lovegbsk.pics/static/default/js/public.js | 172.67.153.137 | 200 OK | 1.9 kB |
URL GET HTTP/3lovegbsk.pics/static/default/js/public.js IP172.67.153.137:443
Requested byhttps://lovegbsk.pics/product_details/87472632.html CertificateIssuerLet's Encrypt Subjectlovegbsk.pics Fingerprint9A:67:84:92:B8:A4:A9:4C:32:CB:C6:16:C1:75:99:69:CF:F5:54:62 ValiditySat, 06 Apr 2024 01:49:11 GMT - Fri, 05 Jul 2024 01:49:10 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (1900), with no line terminators Hash51c8cad5196fedebda08621dea5c6405 5edaf17734119cf9985a4c1474bbde7eb801de35 13d077ad8e2e39537edac3359ea189cc9dd414f7a939e19950e22d7f7bcb1d34
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/default/js/public.js HTTP/1.1
Host: lovegbsk.pics
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lovegbsk.pics/product_details/87472632.html
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IlVFQlZJdlhIZ3ozTVpmUHo0Um1Vc2c9PSIsInZhbHVlIjoiSitlZHNQL3BHdks0YTNxYmZVajhnWWZtSHhvSllVUElKakNYbVpibUxMbVdkL3BlQU1FbzVRVnlFOGRIS2ZKSDROUC8xV2l6WmloT1JuQURrTytWZGV1SjFFdTJpNDFITXFaRGgrRVNuNG1udmIrY0FzVzlyWEdpalkweWM3ZG8iLCJtYWMiOiJlNzAzMzQ4OTJlOWQzMDIxYWNkNWZmNTQxNmY4NGIzOTI1MTNkM2ViNjIzOTQ0OTVkZTkwNjk0NThjZDdjMzk1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ikc2ajh5M2xKQUxWdEFJam5ZOVpEelE9PSIsInZhbHVlIjoiOU1xR2t1V2Q3OTZ5NktrUWtDRHNQcnBjQkJMZUFiMmZHcWpVdkRFbmxHUjlYRDdLdFE4MWE5cGVKcHJoUWF2QnB3WDMvSU5pTVIrK1JTbXhuREljQW9xcjhFYnlpUnpKdFFrcEt1MkxPTUlrWmprUC85a3M5dmQ5ajhsUVo3RlMiLCJtYWMiOiI5MTYzNzQ0MWRjOTY5MmFhNzUxYmEwZTE3NWIzNTMxOWNlMjA0ZjQxNDllOGViOGFjYWVmMTQwNWE2NjkyNmI4IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 21:36:42 GMT
content-type: application/javascript
last-modified: Fri, 08 Sep 2023 06:31:38 GMT
etag: W/"76f-604d320ff552d-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 5435
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Kk6ZYJiunE7KKmKUvrhN3yc9AhOEriv8U7dZ84HXqPwAYbvdyc4i9CMPzpcRs%2BGbouuvpUhfDPY2ZnH6zV3KScQ9etTxsLR4zzgIbVKcLJbyDU7Akjph5y6vmUhtwHzE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87eba0b678525691-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lovegbsk.pics/static/mall/css/responsive.css | 172.67.153.137 | 200 OK | 62 kB |
URL GET HTTP/3lovegbsk.pics/static/mall/css/responsive.css IP172.67.153.137:443
Requested byhttps://lovegbsk.pics/product_details/87472632.html CertificateIssuerLet's Encrypt Subjectlovegbsk.pics Fingerprint9A:67:84:92:B8:A4:A9:4C:32:CB:C6:16:C1:75:99:69:CF:F5:54:62 ValiditySat, 06 Apr 2024 01:49:11 GMT - Fri, 05 Jul 2024 01:49:10 GMT
Hash5a0f0223020c05a39623fee1527a2b81 07468c1803b6ec9d1c47b051d099815d98618307 5ced93256785d0fc2aed667d047221aea1e152189227f76c0c5c5dd5b6798d60
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/mall/css/responsive.css HTTP/1.1
Host: lovegbsk.pics
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lovegbsk.pics/product_details/87472632.html
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IlVFQlZJdlhIZ3ozTVpmUHo0Um1Vc2c9PSIsInZhbHVlIjoiSitlZHNQL3BHdks0YTNxYmZVajhnWWZtSHhvSllVUElKakNYbVpibUxMbVdkL3BlQU1FbzVRVnlFOGRIS2ZKSDROUC8xV2l6WmloT1JuQURrTytWZGV1SjFFdTJpNDFITXFaRGgrRVNuNG1udmIrY0FzVzlyWEdpalkweWM3ZG8iLCJtYWMiOiJlNzAzMzQ4OTJlOWQzMDIxYWNkNWZmNTQxNmY4NGIzOTI1MTNkM2ViNjIzOTQ0OTVkZTkwNjk0NThjZDdjMzk1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ikc2ajh5M2xKQUxWdEFJam5ZOVpEelE9PSIsInZhbHVlIjoiOU1xR2t1V2Q3OTZ5NktrUWtDRHNQcnBjQkJMZUFiMmZHcWpVdkRFbmxHUjlYRDdLdFE4MWE5cGVKcHJoUWF2QnB3WDMvSU5pTVIrK1JTbXhuREljQW9xcjhFYnlpUnpKdFFrcEt1MkxPTUlrWmprUC85a3M5dmQ5ajhsUVo3RlMiLCJtYWMiOiI5MTYzNzQ0MWRjOTY5MmFhNzUxYmEwZTE3NWIzNTMxOWNlMjA0ZjQxNDllOGViOGFjYWVmMTQwNWE2NjkyNmI4IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 21:36:41 GMT
content-type: text/css
last-modified: Fri, 08 Sep 2023 06:31:38 GMT
etag: W/"f2c8-604d321026a3e-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 5434
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HYE9FDlhVrdlwJRuQmwjr%2BgxLv70alv3kOwx7aqrwTWXGppqWCPLL0thOMEiWfbYbzDlM8mI6h7rhm5kUSPi3BWSc9zkTqJdhyDSPPYSeQOl8XWzt6YrakNWmyJFB9Hg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87eba0b6582f5691-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lovegbsk.pics/api/item/randomByKeyword | 172.67.153.137 | 200 OK | 2.8 kB |
URL POST HTTP/3lovegbsk.pics/api/item/randomByKeyword IP172.67.153.137:443
Requested byhttps://lovegbsk.pics/product_details/87472632.html CertificateIssuerLet's Encrypt Subjectlovegbsk.pics Fingerprint9A:67:84:92:B8:A4:A9:4C:32:CB:C6:16:C1:75:99:69:CF:F5:54:62 ValiditySat, 06 Apr 2024 01:49:11 GMT - Fri, 05 Jul 2024 01:49:10 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (3059), with no line terminators Hashf1e92ed4d4f18217e94a8730c61b2b49 29957760bf9166755a4898a628451b90a68d1fb3 5401f6734990539a509a0204e9c6407cb4244c3b326f8248f18c1cdc24f41eb7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /api/item/randomByKeyword HTTP/1.1
Host: lovegbsk.pics
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lovegbsk.pics/product_details/87472632.html
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
Content-Length: 62
Origin: https://lovegbsk.pics
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IlE1dmhhUGpvWFJwN2NqcFdDQ0Zvdnc9PSIsInZhbHVlIjoiYzQ3MUpnY2pIVU5FZ0VJZ3YyQzVwSnhhT3JXdW5ydWNtSDZuckFzODhRZEs1WkRlQTZOYTZzUithWDVESnIyRFhBdFRydmdpT3B6TGE1K2xqcFNFQ0V2MHB0cG9KS01QNGZvaU9jYWdlWjZsL21qM3gvaDBrS2J4UEVTSVFjTWciLCJtYWMiOiIwNjI0MGUzNDY3ZWY5NzNkYWE0NzdkMjY0ZmRmYzNlN2IyZTdhMjhkYTgzOTVjOGFiNmMyNTk0NjBlMjM4MmI3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InI0dG15c1drdlVHL3RYL0w3WTVSMWc9PSIsInZhbHVlIjoid0pVOERXZ3hocGJhS21UQm54cTVUaDdHa2hDTFQ0cVhrMlpjWWJDS2dJeTdNcm1pc0xVOVFiU1ZlQzVxMVlVcUZTWTJxWEdRTGlOc1dnUTBlRUR6VjhiQWpUREUydUZ3dWlZOWI0VEhNbTd4TkorVEJQTDErSnVIN3RZRDlwWi8iLCJtYWMiOiI4YWQ4MWNhNjk5NTUxMmM1NWE5YzQzODcwYzA4NmE3NWMwZmVmZDYwMzA5YmQ2MzZjMWUxMDRlYTlkZjQxOWIyIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 21:36:46 GMT
content-type: application/json
cache-control: no-cache, private
x-ratelimit-limit: 60
x-ratelimit-remaining: 56
access-control-allow-origin: *
set-cookie: laravel_session=eyJpdiI6IlBWQjBRZmQ5UkxBc3kveWxnWEhZTnc9PSIsInZhbHVlIjoiSHovOUREWjBXWkhsT0EwRmVDeFkzalZ6OXNBOWVja1F3a2pnZFU4MjZkZ2Zuc2V5YUNkeDNiM0xiMzBhZkViaEl6OGg2L2RUaDRpQm15dFlUT0VKQ3lZVFZQWlRiaHFsSW9ORGFna0FkQkxMTHNHK2gzWGZDRFQ1aGpKemdaQVYiLCJtYWMiOiIyMWZkZDIyZjJlMGQ4NGIwZDU0OWNhOTYyNmY2YWZkNTQzMjI5Y2U5ZDg3YWExM2ZjNDhhMjQ2NzczMjJiNDgxIiwidGFnIjoiIn0%3D; expires=Sat, 04-May-2024 23:36:46 GMT; Max-Age=7200; path=/; httponly; samesite=lax
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YY5zAMpXEFD7nNfRS4R%2BsTZUZ9lOn30mGtpqY%2BoLu40Q9iFzijT6hU7eNcjLl3Bo%2FivnCmd5DoJMekdmplQY38sWbT8Bm8BiXuTlGKdz6AtY6hBU9SenDyyM3fWARt38"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87eba0c6899f5691-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lovegbsk.pics/static/mall/css/swiper-bundle.min.css | 172.67.153.137 | 200 OK | 14 kB |
URL GET HTTP/3lovegbsk.pics/static/mall/css/swiper-bundle.min.css IP172.67.153.137:443
Requested byhttps://lovegbsk.pics/product_details/87472632.html CertificateIssuerLet's Encrypt Subjectlovegbsk.pics Fingerprint9A:67:84:92:B8:A4:A9:4C:32:CB:C6:16:C1:75:99:69:CF:F5:54:62 ValiditySat, 06 Apr 2024 01:49:11 GMT - Fri, 05 Jul 2024 01:49:10 GMT
File typeASCII text, with very long lines (13428) Hash91a0424bb56d373b12fa509e49fa86d2 39087ce17748c48a5218767af371e2aabb576a49 665d1995ba3fd0f5caf431866b89bdfaf36debae2f1c07d8187bc559c41fadc7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/mall/css/swiper-bundle.min.css HTTP/1.1
Host: lovegbsk.pics
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lovegbsk.pics/product_details/87472632.html
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IlVFQlZJdlhIZ3ozTVpmUHo0Um1Vc2c9PSIsInZhbHVlIjoiSitlZHNQL3BHdks0YTNxYmZVajhnWWZtSHhvSllVUElKakNYbVpibUxMbVdkL3BlQU1FbzVRVnlFOGRIS2ZKSDROUC8xV2l6WmloT1JuQURrTytWZGV1SjFFdTJpNDFITXFaRGgrRVNuNG1udmIrY0FzVzlyWEdpalkweWM3ZG8iLCJtYWMiOiJlNzAzMzQ4OTJlOWQzMDIxYWNkNWZmNTQxNmY4NGIzOTI1MTNkM2ViNjIzOTQ0OTVkZTkwNjk0NThjZDdjMzk1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ikc2ajh5M2xKQUxWdEFJam5ZOVpEelE9PSIsInZhbHVlIjoiOU1xR2t1V2Q3OTZ5NktrUWtDRHNQcnBjQkJMZUFiMmZHcWpVdkRFbmxHUjlYRDdLdFE4MWE5cGVKcHJoUWF2QnB3WDMvSU5pTVIrK1JTbXhuREljQW9xcjhFYnlpUnpKdFFrcEt1MkxPTUlrWmprUC85a3M5dmQ5ajhsUVo3RlMiLCJtYWMiOiI5MTYzNzQ0MWRjOTY5MmFhNzUxYmEwZTE3NWIzNTMxOWNlMjA0ZjQxNDllOGViOGFjYWVmMTQwNWE2NjkyNmI4IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 21:36:41 GMT
content-type: text/css
last-modified: Fri, 08 Sep 2023 06:31:38 GMT
etag: W/"357e-604d321026a3e-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 5434
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cOHthNDK5GOOQXjBtQqFuoXbpisuKFzzMm8m7Y4SDTu9F%2B2dKXrreuzybtdCu%2BlGwtSitzoUvdnFBbQ6%2FAzxqq6E4lKv4xfaGGlYw2UPgvATL%2BspZshc5foB4rPVA7Y4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87eba0b648105691-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lovegbsk.pics/static/mall/css/jquery-ui.min.css | 172.67.153.137 | 200 OK | 34 kB |
URL GET HTTP/3lovegbsk.pics/static/mall/css/jquery-ui.min.css IP172.67.153.137:443
Requested byhttps://lovegbsk.pics/product_details/87472632.html CertificateIssuerLet's Encrypt Subjectlovegbsk.pics Fingerprint9A:67:84:92:B8:A4:A9:4C:32:CB:C6:16:C1:75:99:69:CF:F5:54:62 ValiditySat, 06 Apr 2024 01:49:11 GMT - Fri, 05 Jul 2024 01:49:10 GMT
File typeASCII text, with very long lines (2363) Hashbd2605faa1a82b81a3499b489ed5fb22 dab30edbfa1758f8a150148675a4758822986c05 541607bcce7ec5803b0dfc7b0565deec6605b5f7e9f464420b530ffd75015db9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/mall/css/jquery-ui.min.css HTTP/1.1
Host: lovegbsk.pics
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lovegbsk.pics/product_details/87472632.html
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IlVFQlZJdlhIZ3ozTVpmUHo0Um1Vc2c9PSIsInZhbHVlIjoiSitlZHNQL3BHdks0YTNxYmZVajhnWWZtSHhvSllVUElKakNYbVpibUxMbVdkL3BlQU1FbzVRVnlFOGRIS2ZKSDROUC8xV2l6WmloT1JuQURrTytWZGV1SjFFdTJpNDFITXFaRGgrRVNuNG1udmIrY0FzVzlyWEdpalkweWM3ZG8iLCJtYWMiOiJlNzAzMzQ4OTJlOWQzMDIxYWNkNWZmNTQxNmY4NGIzOTI1MTNkM2ViNjIzOTQ0OTVkZTkwNjk0NThjZDdjMzk1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ikc2ajh5M2xKQUxWdEFJam5ZOVpEelE9PSIsInZhbHVlIjoiOU1xR2t1V2Q3OTZ5NktrUWtDRHNQcnBjQkJMZUFiMmZHcWpVdkRFbmxHUjlYRDdLdFE4MWE5cGVKcHJoUWF2QnB3WDMvSU5pTVIrK1JTbXhuREljQW9xcjhFYnlpUnpKdFFrcEt1MkxPTUlrWmprUC85a3M5dmQ5ajhsUVo3RlMiLCJtYWMiOiI5MTYzNzQ0MWRjOTY5MmFhNzUxYmEwZTE3NWIzNTMxOWNlMjA0ZjQxNDllOGViOGFjYWVmMTQwNWE2NjkyNmI4IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 21:36:41 GMT
content-type: text/css
last-modified: Fri, 08 Sep 2023 06:31:38 GMT
etag: W/"865d-604d321026a3e-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 5434
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=c4iEnjNnYpVqCZyxMMHnkJgxJwgnOWFRsZv6hdvUMCi8dVrjc3Mv4nLCrcfh%2FfYwKL3yjLawjQkehq5%2FbEOjWR8fcIq0cXELhjMjfKb1V0echrYncLeHb3DEx%2B2RjMAN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87eba0b648135691-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lovegbsk.pics/static/mall/css/countdownTimer.css | 172.67.153.137 | 200 OK | 1.3 kB |
URL GET HTTP/3lovegbsk.pics/static/mall/css/countdownTimer.css IP172.67.153.137:443
Requested byhttps://lovegbsk.pics/product_details/87472632.html CertificateIssuerLet's Encrypt Subjectlovegbsk.pics Fingerprint9A:67:84:92:B8:A4:A9:4C:32:CB:C6:16:C1:75:99:69:CF:F5:54:62 ValiditySat, 06 Apr 2024 01:49:11 GMT - Fri, 05 Jul 2024 01:49:10 GMT
File typeASCII text, with very long lines (1372), with no line terminators Hash36b9ffeb0997351e58582be74a0853fe e66064b1787ba78b5ef95c5897fe8fb2f5ae84af 85faf4717d7ebc4252891062420945090a46763a4891e0706581a19e5fc27ddb
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/mall/css/countdownTimer.css HTTP/1.1
Host: lovegbsk.pics
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lovegbsk.pics/product_details/87472632.html
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IlVFQlZJdlhIZ3ozTVpmUHo0Um1Vc2c9PSIsInZhbHVlIjoiSitlZHNQL3BHdks0YTNxYmZVajhnWWZtSHhvSllVUElKakNYbVpibUxMbVdkL3BlQU1FbzVRVnlFOGRIS2ZKSDROUC8xV2l6WmloT1JuQURrTytWZGV1SjFFdTJpNDFITXFaRGgrRVNuNG1udmIrY0FzVzlyWEdpalkweWM3ZG8iLCJtYWMiOiJlNzAzMzQ4OTJlOWQzMDIxYWNkNWZmNTQxNmY4NGIzOTI1MTNkM2ViNjIzOTQ0OTVkZTkwNjk0NThjZDdjMzk1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ikc2ajh5M2xKQUxWdEFJam5ZOVpEelE9PSIsInZhbHVlIjoiOU1xR2t1V2Q3OTZ5NktrUWtDRHNQcnBjQkJMZUFiMmZHcWpVdkRFbmxHUjlYRDdLdFE4MWE5cGVKcHJoUWF2QnB3WDMvSU5pTVIrK1JTbXhuREljQW9xcjhFYnlpUnpKdFFrcEt1MkxPTUlrWmprUC85a3M5dmQ5ajhsUVo3RlMiLCJtYWMiOiI5MTYzNzQ0MWRjOTY5MmFhNzUxYmEwZTE3NWIzNTMxOWNlMjA0ZjQxNDllOGViOGFjYWVmMTQwNWE2NjkyNmI4IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 21:36:41 GMT
content-type: text/css
last-modified: Fri, 08 Sep 2023 06:31:38 GMT
etag: W/"4fc-604d32101e56e-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 5434
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iiVQcBCbEqo0RL7srro%2BtaJWKDG9schL5rEUH3gl8rJRbaqvmH%2FC12oT9zreh%2BAGV8j0FD1Uq4%2BrJ4SK%2B%2BmMmp1%2FaIjvm1wyvsD9FJYhqZQ1QlhcptReeNBLP0FoGcuR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87eba0b648165691-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| deadjeep.com/cdn/shop/products/s-l1600_1_3c0cf706-4b35-4578-9c87-fe65797cca4f_1024x1024.png?v=1597262758 |  23.227.38.32 | 200 OK | 12 kB |
URL GET HTTP/2deadjeep.com/cdn/shop/products/s-l1600_1_3c0cf706-4b35-4578-9c87-fe65797cca4f_1024x1024.png?v=1597262758 IP23.227.38.32:443
Requested byhttps://lovegbsk.pics/product_details/87472632.html CertificateIssuerLet's Encrypt Subjectdeadjeep.com Fingerprint7D:3F:B4:FA:69:5C:9D:0C:03:B1:2D:B3:F6:16:F5:F1:74:E9:E1:45 ValidityMon, 25 Mar 2024 04:08:09 GMT - Sun, 23 Jun 2024 04:08:08 GMT
File typeRIFF (little-endian) data, Web/P image Hashb8d5b015867425584de5005603a3be3c 21640ca73efdcb89cff31f7d0dca4ac72fc1725d 96852b24793c0d304b5a6848e11d137289043d67d16678e167ee7d01234b3aac
GET /cdn/shop/products/s-l1600_1_3c0cf706-4b35-4578-9c87-fe65797cca4f_1024x1024.png?v=1597262758 HTTP/1.1
Host: deadjeep.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 04 May 2024 21:36:44 GMT
content-type: image/webp
content-length: 11974
x-sorting-hat-podid: 220
x-sorting-hat-shopid: 13777233
access-control-allow-origin: *
access-control-expose-headers: *
cache-control: public, max-age=31557600
content-security-policy: sandbox allow-scripts allow-forms allow-modals allow-popups allow-downloads allow-top-navigation-by-user-activation
source-length: 270797
source-type: image/png
timing-allow-origin: *
vary: Accept, Accept-Encoding
x-content-type-options: nosniff
x-request-id: 3cf11a5e-e153-4378-829d-426f7742c254-1714858599
x-xss-protection: 1; mode=block
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-dc: gcp-us-central1,gcp-us-east1
last-modified: Sat, 04 May 2024 21:36:39 GMT
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=P5P4Od4VaX%2FctbvcRZ7BinJUF49NiOMcsPkVa%2BUHUFjBMudPewKiFBwwkMhZaA7ktYyiAg3lLCTGH8yA5GIuHyowizoxBKmzppdPcHa7Ee6lFYnRcAfvtibdUW%2Bdog%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server-timing: imagery;dur=302.688, imageryFetch;dur=74.974, imageryProcess;dur=225.580;desc="image", cfRequestDuration;dur=180.000067
x-permitted-cross-domain-policies: none
x-download-options: noopen
server: cloudflare
cf-ray: 87eba0c78d7d92d9-CPH
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| lovegbsk.pics/static/mall/css/ecicons.min.css | 172.67.153.137 | 200 OK | 38 kB |
URL GET HTTP/3lovegbsk.pics/static/mall/css/ecicons.min.css IP172.67.153.137:443
Requested byhttps://lovegbsk.pics/product_details/87472632.html CertificateIssuerLet's Encrypt Subjectlovegbsk.pics Fingerprint9A:67:84:92:B8:A4:A9:4C:32:CB:C6:16:C1:75:99:69:CF:F5:54:62 ValiditySat, 06 Apr 2024 01:49:11 GMT - Fri, 05 Jul 2024 01:49:10 GMT
Hashabf739a4f700786a4e2d6abf4c81e3a0 aafb0578ed47df30cc871bc161db5f7d7cd6d444 9eef72c0a2fc38e6190244cfed729e9b9667529b47eabe2f446373d8958a968c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/mall/css/ecicons.min.css HTTP/1.1
Host: lovegbsk.pics
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lovegbsk.pics/product_details/87472632.html
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IlVFQlZJdlhIZ3ozTVpmUHo0Um1Vc2c9PSIsInZhbHVlIjoiSitlZHNQL3BHdks0YTNxYmZVajhnWWZtSHhvSllVUElKakNYbVpibUxMbVdkL3BlQU1FbzVRVnlFOGRIS2ZKSDROUC8xV2l6WmloT1JuQURrTytWZGV1SjFFdTJpNDFITXFaRGgrRVNuNG1udmIrY0FzVzlyWEdpalkweWM3ZG8iLCJtYWMiOiJlNzAzMzQ4OTJlOWQzMDIxYWNkNWZmNTQxNmY4NGIzOTI1MTNkM2ViNjIzOTQ0OTVkZTkwNjk0NThjZDdjMzk1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ikc2ajh5M2xKQUxWdEFJam5ZOVpEelE9PSIsInZhbHVlIjoiOU1xR2t1V2Q3OTZ5NktrUWtDRHNQcnBjQkJMZUFiMmZHcWpVdkRFbmxHUjlYRDdLdFE4MWE5cGVKcHJoUWF2QnB3WDMvSU5pTVIrK1JTbXhuREljQW9xcjhFYnlpUnpKdFFrcEt1MkxPTUlrWmprUC85a3M5dmQ5ajhsUVo3RlMiLCJtYWMiOiI5MTYzNzQ0MWRjOTY5MmFhNzUxYmEwZTE3NWIzNTMxOWNlMjA0ZjQxNDllOGViOGFjYWVmMTQwNWE2NjkyNmI4IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 21:36:41 GMT
content-type: text/css
last-modified: Fri, 08 Sep 2023 06:31:38 GMT
etag: W/"9531-604d32101ed3e-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 5434
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=803Cei5BIeEEAnsvtyyqF3VgvbfChZetetNg1cHNEpYemIyd51OkYXE39pY2e1YQ1l4kfdoAfSAroUxUlKUNyDeJ%2Bcqy2UJpB%2BFGhseXWVvDLDZp0d6yJLaTK6B2WABa"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87eba0b638095691-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lovegbsk.pics/static/mall/css/font/Montserrat-Regular.ttf | 172.67.153.137 | 200 OK | 246 kB |
URL GET HTTP/3lovegbsk.pics/static/mall/css/font/Montserrat-Regular.ttf IP172.67.153.137:443
Requested byhttps://lovegbsk.pics/product_details/87472632.html CertificateIssuerLet's Encrypt Subjectlovegbsk.pics Fingerprint9A:67:84:92:B8:A4:A9:4C:32:CB:C6:16:C1:75:99:69:CF:F5:54:62 ValiditySat, 06 Apr 2024 01:49:11 GMT - Fri, 05 Jul 2024 01:49:10 GMT
File typeTrueType Font data, 17 tables, 1st "GDEF", 13 names, Microsoft, language 0x409, Copyright 2011 The Montserrat Project Authors (https://github.com/JulietaUla/Montserrat)Montserr Size246 kB (245708 bytes) Hashee6539921d713482b8ccd4d0d23961bb d25b35242deb1c6ff888b8162ca2aacc356d3899 077cdab15161232a9ba7124d2ddd7a9425145750788e9a966c156cc66274f525
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/mall/css/font/Montserrat-Regular.ttf HTTP/1.1
Host: lovegbsk.pics
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lovegbsk.pics/static/mall/css/demo1.css
Cookie: XSRF-TOKEN=eyJpdiI6IlVFQlZJdlhIZ3ozTVpmUHo0Um1Vc2c9PSIsInZhbHVlIjoiSitlZHNQL3BHdks0YTNxYmZVajhnWWZtSHhvSllVUElKakNYbVpibUxMbVdkL3BlQU1FbzVRVnlFOGRIS2ZKSDROUC8xV2l6WmloT1JuQURrTytWZGV1SjFFdTJpNDFITXFaRGgrRVNuNG1udmIrY0FzVzlyWEdpalkweWM3ZG8iLCJtYWMiOiJlNzAzMzQ4OTJlOWQzMDIxYWNkNWZmNTQxNmY4NGIzOTI1MTNkM2ViNjIzOTQ0OTVkZTkwNjk0NThjZDdjMzk1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ikc2ajh5M2xKQUxWdEFJam5ZOVpEelE9PSIsInZhbHVlIjoiOU1xR2t1V2Q3OTZ5NktrUWtDRHNQcnBjQkJMZUFiMmZHcWpVdkRFbmxHUjlYRDdLdFE4MWE5cGVKcHJoUWF2QnB3WDMvSU5pTVIrK1JTbXhuREljQW9xcjhFYnlpUnpKdFFrcEt1MkxPTUlrWmprUC85a3M5dmQ5ajhsUVo3RlMiLCJtYWMiOiI5MTYzNzQ0MWRjOTY5MmFhNzUxYmEwZTE3NWIzNTMxOWNlMjA0ZjQxNDllOGViOGFjYWVmMTQwNWE2NjkyNmI4IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 21:36:42 GMT
content-type: font/ttf
last-modified: Fri, 08 Sep 2023 06:31:38 GMT
etag: W/"3bfcc-604d321020896-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 1839
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tDC%2B83i0KHqIOWKGcBABuGUuiLZTXyUBUyRql6wq8elcGv7gwrnPwzfAEwXUGdBzM1nghHIBdI7uTF%2FL5u6L4iyMisJm%2BSS5Dr7zMy8pXCO2FGdlMOGXfE8o7nL3kSIQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87eba0bacdb85691-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lovegbsk.pics/static/mall/css/font/Montserrat-SemiBold.ttf | 172.67.153.137 | 200 OK | 244 kB |
URL GET HTTP/3lovegbsk.pics/static/mall/css/font/Montserrat-SemiBold.ttf IP172.67.153.137:443
Requested byhttps://lovegbsk.pics/product_details/87472632.html CertificateIssuerLet's Encrypt Subjectlovegbsk.pics Fingerprint9A:67:84:92:B8:A4:A9:4C:32:CB:C6:16:C1:75:99:69:CF:F5:54:62 ValiditySat, 06 Apr 2024 01:49:11 GMT - Fri, 05 Jul 2024 01:49:10 GMT
File typeTrueType Font data, 17 tables, 1st "GDEF", 15 names, Microsoft, language 0x409, Copyright 2011 The Montserrat Project Authors (https://github.com/JulietaUla/Montserrat)Montserr Size244 kB (243816 bytes) Hashc641dbee1d75892e4d88bdc31560c91b f829de4c176fb2ccf5e33360920f48de6794434e f227901ef48ac4d1fe4cc6ed0dbce99e6b38969babe5e05da2dfb33521b02944
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/mall/css/font/Montserrat-SemiBold.ttf HTTP/1.1
Host: lovegbsk.pics
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lovegbsk.pics/static/mall/css/demo1.css
Cookie: XSRF-TOKEN=eyJpdiI6IlVFQlZJdlhIZ3ozTVpmUHo0Um1Vc2c9PSIsInZhbHVlIjoiSitlZHNQL3BHdks0YTNxYmZVajhnWWZtSHhvSllVUElKakNYbVpibUxMbVdkL3BlQU1FbzVRVnlFOGRIS2ZKSDROUC8xV2l6WmloT1JuQURrTytWZGV1SjFFdTJpNDFITXFaRGgrRVNuNG1udmIrY0FzVzlyWEdpalkweWM3ZG8iLCJtYWMiOiJlNzAzMzQ4OTJlOWQzMDIxYWNkNWZmNTQxNmY4NGIzOTI1MTNkM2ViNjIzOTQ0OTVkZTkwNjk0NThjZDdjMzk1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ikc2ajh5M2xKQUxWdEFJam5ZOVpEelE9PSIsInZhbHVlIjoiOU1xR2t1V2Q3OTZ5NktrUWtDRHNQcnBjQkJMZUFiMmZHcWpVdkRFbmxHUjlYRDdLdFE4MWE5cGVKcHJoUWF2QnB3WDMvSU5pTVIrK1JTbXhuREljQW9xcjhFYnlpUnpKdFFrcEt1MkxPTUlrWmprUC85a3M5dmQ5ajhsUVo3RlMiLCJtYWMiOiI5MTYzNzQ0MWRjOTY5MmFhNzUxYmEwZTE3NWIzNTMxOWNlMjA0ZjQxNDllOGViOGFjYWVmMTQwNWE2NjkyNmI4IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 21:36:42 GMT
content-type: font/ttf
last-modified: Fri, 08 Sep 2023 06:31:38 GMT
etag: W/"3b868-604d321021066-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 1839
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PB9m3W8bkkpKTk%2Bmm3DRGTGHGhDtjytjCvqRvCrLMsIpNyIr169Z8J8dSADGJ%2FWq4VISt1ZONDruM4LF07dGPVnW4HAluaWSxgp4F9wh0OeB%2Bc09CBATvIumLlNb9x3U"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87eba0baddbe5691-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lovegbsk.pics/product_details/87472632.html | 172.67.153.137 | 200 OK | 75 kB |
URL User Request GET HTTP/2lovegbsk.pics/product_details/87472632.html IP172.67.153.137:443
CertificateIssuerLet's Encrypt Subjectlovegbsk.pics Fingerprint9A:67:84:92:B8:A4:A9:4C:32:CB:C6:16:C1:75:99:69:CF:F5:54:62 ValiditySat, 06 Apr 2024 01:49:11 GMT - Fri, 05 Jul 2024 01:49:10 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /product_details/87472632.html HTTP/1.1
Host: lovegbsk.pics
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 04 May 2024 21:36:41 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache, private
set-cookie: XSRF-TOKEN=eyJpdiI6IlVFQlZJdlhIZ3ozTVpmUHo0Um1Vc2c9PSIsInZhbHVlIjoiSitlZHNQL3BHdks0YTNxYmZVajhnWWZtSHhvSllVUElKakNYbVpibUxMbVdkL3BlQU1FbzVRVnlFOGRIS2ZKSDROUC8xV2l6WmloT1JuQURrTytWZGV1SjFFdTJpNDFITXFaRGgrRVNuNG1udmIrY0FzVzlyWEdpalkweWM3ZG8iLCJtYWMiOiJlNzAzMzQ4OTJlOWQzMDIxYWNkNWZmNTQxNmY4NGIzOTI1MTNkM2ViNjIzOTQ0OTVkZTkwNjk0NThjZDdjMzk1IiwidGFnIjoiIn0%3D; expires=Sat, 04-May-2024 23:36:41 GMT; Max-Age=7200; path=/; samesite=lax
laravel_session=eyJpdiI6Ikc2ajh5M2xKQUxWdEFJam5ZOVpEelE9PSIsInZhbHVlIjoiOU1xR2t1V2Q3OTZ5NktrUWtDRHNQcnBjQkJMZUFiMmZHcWpVdkRFbmxHUjlYRDdLdFE4MWE5cGVKcHJoUWF2QnB3WDMvSU5pTVIrK1JTbXhuREljQW9xcjhFYnlpUnpKdFFrcEt1MkxPTUlrWmprUC85a3M5dmQ5ajhsUVo3RlMiLCJtYWMiOiI5MTYzNzQ0MWRjOTY5MmFhNzUxYmEwZTE3NWIzNTMxOWNlMjA0ZjQxNDllOGViOGFjYWVmMTQwNWE2NjkyNmI4IiwidGFnIjoiIn0%3D; expires=Sat, 04-May-2024 23:36:41 GMT; Max-Age=7200; path=/; httponly; samesite=lax
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ghNmLYFFykjnWSireN2lu%2BUS5hUEX9oED%2FhMfbgIQg8SmbScyK3zoDyRi2jy%2BHMlpiRQ3GJw%2F1gu9DBsLEebMNjJ%2F8pyvwRXqbDJgtq5m3tFT9H%2BUKurgvpB3s%2B%2BTjML"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87eba0b19ea75684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| lovegbsk.pics/static/mall/css/demo1.css | 172.67.153.137 | 200 OK | 439 kB |
URL GET HTTP/3lovegbsk.pics/static/mall/css/demo1.css IP172.67.153.137:443
Requested byhttps://lovegbsk.pics/product_details/87472632.html CertificateIssuerLet's Encrypt Subjectlovegbsk.pics Fingerprint9A:67:84:92:B8:A4:A9:4C:32:CB:C6:16:C1:75:99:69:CF:F5:54:62 ValiditySat, 06 Apr 2024 01:49:11 GMT - Fri, 05 Jul 2024 01:49:10 GMT
Size439 kB (438856 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/mall/css/demo1.css HTTP/1.1
Host: lovegbsk.pics
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lovegbsk.pics/product_details/87472632.html
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IlVFQlZJdlhIZ3ozTVpmUHo0Um1Vc2c9PSIsInZhbHVlIjoiSitlZHNQL3BHdks0YTNxYmZVajhnWWZtSHhvSllVUElKakNYbVpibUxMbVdkL3BlQU1FbzVRVnlFOGRIS2ZKSDROUC8xV2l6WmloT1JuQURrTytWZGV1SjFFdTJpNDFITXFaRGgrRVNuNG1udmIrY0FzVzlyWEdpalkweWM3ZG8iLCJtYWMiOiJlNzAzMzQ4OTJlOWQzMDIxYWNkNWZmNTQxNmY4NGIzOTI1MTNkM2ViNjIzOTQ0OTVkZTkwNjk0NThjZDdjMzk1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ikc2ajh5M2xKQUxWdEFJam5ZOVpEelE9PSIsInZhbHVlIjoiOU1xR2t1V2Q3OTZ5NktrUWtDRHNQcnBjQkJMZUFiMmZHcWpVdkRFbmxHUjlYRDdLdFE4MWE5cGVKcHJoUWF2QnB3WDMvSU5pTVIrK1JTbXhuREljQW9xcjhFYnlpUnpKdFFrcEt1MkxPTUlrWmprUC85a3M5dmQ5ajhsUVo3RlMiLCJtYWMiOiI5MTYzNzQ0MWRjOTY5MmFhNzUxYmEwZTE3NWIzNTMxOWNlMjA0ZjQxNDllOGViOGFjYWVmMTQwNWE2NjkyNmI4IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 21:36:41 GMT
content-type: text/css
last-modified: Fri, 08 Sep 2023 06:31:38 GMT
etag: W/"6b248-604d32101e956-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 5434
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=p9JEGRzREMzXVS%2FM346bg65sAlV52T8b4evYJakLzECT%2BOv25jmuBWPozHllGMkOutcQ8I2sI%2F1%2BHATvXgz8YJXWmOh0Px48vjNczG9Cf8y%2BRYeDTzekpOlfLS5H2stI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87eba0b6582e5691-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lovegbsk.pics/static/default/css/iconfont.css | 172.67.153.137 | 200 OK | 1.4 kB |
URL GET HTTP/3lovegbsk.pics/static/default/css/iconfont.css IP172.67.153.137:443
Requested byhttps://lovegbsk.pics/product_details/87472632.html CertificateIssuerLet's Encrypt Subjectlovegbsk.pics Fingerprint9A:67:84:92:B8:A4:A9:4C:32:CB:C6:16:C1:75:99:69:CF:F5:54:62 ValiditySat, 06 Apr 2024 01:49:11 GMT - Fri, 05 Jul 2024 01:49:10 GMT
File typeASCII text, with very long lines (1543), with no line terminators Hash090f72d902afd1175acf4cad9f14c475 570ba183720b7f40f15601d0d4321a6ad819fcf2 29b84aaf9a3d5b98b8f77db96a21f11fd83bf97cc140f3e7ff41735aba555187
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/default/css/iconfont.css HTTP/1.1
Host: lovegbsk.pics
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lovegbsk.pics/product_details/87472632.html
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IlVFQlZJdlhIZ3ozTVpmUHo0Um1Vc2c9PSIsInZhbHVlIjoiSitlZHNQL3BHdks0YTNxYmZVajhnWWZtSHhvSllVUElKakNYbVpibUxMbVdkL3BlQU1FbzVRVnlFOGRIS2ZKSDROUC8xV2l6WmloT1JuQURrTytWZGV1SjFFdTJpNDFITXFaRGgrRVNuNG1udmIrY0FzVzlyWEdpalkweWM3ZG8iLCJtYWMiOiJlNzAzMzQ4OTJlOWQzMDIxYWNkNWZmNTQxNmY4NGIzOTI1MTNkM2ViNjIzOTQ0OTVkZTkwNjk0NThjZDdjMzk1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ikc2ajh5M2xKQUxWdEFJam5ZOVpEelE9PSIsInZhbHVlIjoiOU1xR2t1V2Q3OTZ5NktrUWtDRHNQcnBjQkJMZUFiMmZHcWpVdkRFbmxHUjlYRDdLdFE4MWE5cGVKcHJoUWF2QnB3WDMvSU5pTVIrK1JTbXhuREljQW9xcjhFYnlpUnpKdFFrcEt1MkxPTUlrWmprUC85a3M5dmQ5ajhsUVo3RlMiLCJtYWMiOiI5MTYzNzQ0MWRjOTY5MmFhNzUxYmEwZTE3NWIzNTMxOWNlMjA0ZjQxNDllOGViOGFjYWVmMTQwNWE2NjkyNmI4IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 21:36:41 GMT
content-type: text/css
last-modified: Fri, 08 Sep 2023 06:31:38 GMT
etag: W/"55c-604d320ff0edd-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 5434
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IQB5GlxEzvfEr2kbquJEUu8GhQTwjLwf1GOdKTtABWqxwhyo85%2BFsu42b7i7Knb5pegh3%2BfW918jhVhPU5mArBWfWtojNzv%2BZTI6Ng1MzxPKwCztAUrQGsx%2FvX3bkkxY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87eba0b6683f5691-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lovegbsk.pics/static/mall/css/slick.min.css | 172.67.153.137 | 200 OK | 1.3 kB |
URL GET HTTP/3lovegbsk.pics/static/mall/css/slick.min.css IP172.67.153.137:443
Requested byhttps://lovegbsk.pics/product_details/87472632.html CertificateIssuerLet's Encrypt Subjectlovegbsk.pics Fingerprint9A:67:84:92:B8:A4:A9:4C:32:CB:C6:16:C1:75:99:69:CF:F5:54:62 ValiditySat, 06 Apr 2024 01:49:11 GMT - Fri, 05 Jul 2024 01:49:10 GMT
File typeASCII text, with very long lines (1327), with no line terminators Hashda4e146913da6966d85a6b8686886edb 03a28dac9dfc6c33e6175c9c185911c56525d31b fb3ed351cd5c0f1f30f88778ee1f9b056598e6d25ac4fdcab1eebcd8be521cd9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/mall/css/slick.min.css HTTP/1.1
Host: lovegbsk.pics
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lovegbsk.pics/product_details/87472632.html
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IlVFQlZJdlhIZ3ozTVpmUHo0Um1Vc2c9PSIsInZhbHVlIjoiSitlZHNQL3BHdks0YTNxYmZVajhnWWZtSHhvSllVUElKakNYbVpibUxMbVdkL3BlQU1FbzVRVnlFOGRIS2ZKSDROUC8xV2l6WmloT1JuQURrTytWZGV1SjFFdTJpNDFITXFaRGgrRVNuNG1udmIrY0FzVzlyWEdpalkweWM3ZG8iLCJtYWMiOiJlNzAzMzQ4OTJlOWQzMDIxYWNkNWZmNTQxNmY4NGIzOTI1MTNkM2ViNjIzOTQ0OTVkZTkwNjk0NThjZDdjMzk1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ikc2ajh5M2xKQUxWdEFJam5ZOVpEelE9PSIsInZhbHVlIjoiOU1xR2t1V2Q3OTZ5NktrUWtDRHNQcnBjQkJMZUFiMmZHcWpVdkRFbmxHUjlYRDdLdFE4MWE5cGVKcHJoUWF2QnB3WDMvSU5pTVIrK1JTbXhuREljQW9xcjhFYnlpUnpKdFFrcEt1MkxPTUlrWmprUC85a3M5dmQ5ajhsUVo3RlMiLCJtYWMiOiI5MTYzNzQ0MWRjOTY5MmFhNzUxYmEwZTE3NWIzNTMxOWNlMjA0ZjQxNDllOGViOGFjYWVmMTQwNWE2NjkyNmI4IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 21:36:41 GMT
content-type: text/css
last-modified: Fri, 08 Sep 2023 06:31:38 GMT
etag: W/"52f-604d321026a3e-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 5434
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=N%2ByVbJLC0Tz27PpbXkaMKSdctBWaiJugXT5%2Fi6c4GQ15g4peFqGGv%2Fm39%2BQO3OMqBZhOclFUqiG4%2Br0JweqBsOzCc8%2FCyjKMl%2B52jCW5fv1OZPM%2FM%2FMv140FtqmTgcOD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87eba0b648185691-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lovegbsk.pics/favicon.ico | 172.67.153.137 | 200 OK | 61 B |
URL GET HTTP/3lovegbsk.pics/favicon.ico IP172.67.153.137:443
Requested byhttps://lovegbsk.pics/product_details/87472632.html CertificateIssuerLet's Encrypt Subjectlovegbsk.pics Fingerprint9A:67:84:92:B8:A4:A9:4C:32:CB:C6:16:C1:75:99:69:CF:F5:54:62 ValiditySat, 06 Apr 2024 01:49:11 GMT - Fri, 05 Jul 2024 01:49:10 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash2d963171282c4de9d6969472b23e47e3 1ea3d4ba9fe4b01b4edf5b7dcd20ac246d2187d8 87ed5a5a37969aa977d6f4fc16ae7a094bc1abc454307e011b65036646b4d3ab
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: lovegbsk.pics
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lovegbsk.pics/product_details/87472632.html
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IlE1dmhhUGpvWFJwN2NqcFdDQ0Zvdnc9PSIsInZhbHVlIjoiYzQ3MUpnY2pIVU5FZ0VJZ3YyQzVwSnhhT3JXdW5ydWNtSDZuckFzODhRZEs1WkRlQTZOYTZzUithWDVESnIyRFhBdFRydmdpT3B6TGE1K2xqcFNFQ0V2MHB0cG9KS01QNGZvaU9jYWdlWjZsL21qM3gvaDBrS2J4UEVTSVFjTWciLCJtYWMiOiIwNjI0MGUzNDY3ZWY5NzNkYWE0NzdkMjY0ZmRmYzNlN2IyZTdhMjhkYTgzOTVjOGFiNmMyNTk0NjBlMjM4MmI3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImQ5V2VRMy82bWlFYVE2QUh0R2JrQlE9PSIsInZhbHVlIjoiTkhtRnlMZXhsYzBtZVFpdVJuSFlIT2NKOS9xVE13VE9tL1VQNFl2NmNEL3VqNjlEVDliM3NJVnltcDl2L1ZtL0MyN1ZsZ1ZLU3FUdm8rTW5WWHFRYkVrdDJjYjIwdGU2T3hpemNrWDA4T3I4VktSbVZxeEJTL2l6akdRWXVxMXAiLCJtYWMiOiJkOTEwNGI1MDEwMmU0NDYzNDc2MTdlNmJiNWUzYTM3NzlhZTQwYmRiYWFkMDg3MDg4MmNhNzcxM2MzM2QzNzFhIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 21:36:43 GMT
content-type: application/json
cache-control: no-cache, private
vary: Accept-Encoding
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=obieB9jK4%2FnYzERbRWbHqI%2B3m2gPZtpXavCMQfYpTGbBqSGj5UGNa4klUoISBX55XXPEAjI9AIgB1JTceJC53wFXeqFCJP%2BIsYz5mDPLBe5zi04s3EvzDt7poWUdb3VW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87eba0be79735691-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| s1.cdn.autoevolution.com/images/gallery/LANDROVERFreelander-3453_2.jpg | 104.22.39.242 | 200 OK | 609 kB |
URL GET HTTP/2s1.cdn.autoevolution.com/images/gallery/LANDROVERFreelander-3453_2.jpg IP104.22.39.242:443
Requested byhttps://lovegbsk.pics/product_details/87472632.html CertificateIssuerSectigo Limited Subjectautoevolution.com FingerprintD5:18:05:B5:90:61:F7:7A:0F:13:94:CF:6B:E8:C2:F7:DB:37:C8:29 ValidityFri, 16 Jun 2023 00:00:00 GMT - Sun, 16 Jun 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=0], baseline, precision 8, 1024x850, components 3 Size609 kB (608572 bytes) Hash0462ffa856acc7f43c67bf514f534f10 0bfa57a34853b8d62c7da747c82e942a010f273f 1bbdaa6c9d1408f33cafda4c0e7bb4da786a554ac9746e479abc1ebd3623ff2e
GET /images/gallery/LANDROVERFreelander-3453_2.jpg HTTP/1.1
Host: s1.cdn.autoevolution.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 04 May 2024 21:36:46 GMT
content-type: image/jpeg
content-length: 608572
x-frame-options: SAMEORIGIN
last-modified: Tue, 09 Dec 2008 09:40:44 GMT
etag: "9493c-45d99eff47f00"
cache-control: max-age=31536000
expires: Sun, 04 May 2025 15:15:58 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains; preload
server: cloudflare
cf-ray: 87eba0d3bc2f9311-CPH
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| lovegbsk.pics/static/mall/css/bg-4.css | 172.67.153.137 | 200 OK | 452 B |
URL GET HTTP/3lovegbsk.pics/static/mall/css/bg-4.css IP172.67.153.137:443
Requested byhttps://lovegbsk.pics/product_details/87472632.html CertificateIssuerLet's Encrypt Subjectlovegbsk.pics Fingerprint9A:67:84:92:B8:A4:A9:4C:32:CB:C6:16:C1:75:99:69:CF:F5:54:62 ValiditySat, 06 Apr 2024 01:49:11 GMT - Fri, 05 Jul 2024 01:49:10 GMT
File typeASCII text, with very long lines (467), with no line terminators Hash75d2e5447a478cdc5d40f2f20a0cad6e 581fd4c4e4313bda85e54dbf23f6147c8203f52a 660bc5a80d75b5e2451246f210c51173dca79a0ed3121fe622294637afaeafe9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/mall/css/bg-4.css HTTP/1.1
Host: lovegbsk.pics
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lovegbsk.pics/product_details/87472632.html
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IlVFQlZJdlhIZ3ozTVpmUHo0Um1Vc2c9PSIsInZhbHVlIjoiSitlZHNQL3BHdks0YTNxYmZVajhnWWZtSHhvSllVUElKakNYbVpibUxMbVdkL3BlQU1FbzVRVnlFOGRIS2ZKSDROUC8xV2l6WmloT1JuQURrTytWZGV1SjFFdTJpNDFITXFaRGgrRVNuNG1udmIrY0FzVzlyWEdpalkweWM3ZG8iLCJtYWMiOiJlNzAzMzQ4OTJlOWQzMDIxYWNkNWZmNTQxNmY4NGIzOTI1MTNkM2ViNjIzOTQ0OTVkZTkwNjk0NThjZDdjMzk1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ikc2ajh5M2xKQUxWdEFJam5ZOVpEelE9PSIsInZhbHVlIjoiOU1xR2t1V2Q3OTZ5NktrUWtDRHNQcnBjQkJMZUFiMmZHcWpVdkRFbmxHUjlYRDdLdFE4MWE5cGVKcHJoUWF2QnB3WDMvSU5pTVIrK1JTbXhuREljQW9xcjhFYnlpUnpKdFFrcEt1MkxPTUlrWmprUC85a3M5dmQ5ajhsUVo3RlMiLCJtYWMiOiI5MTYzNzQ0MWRjOTY5MmFhNzUxYmEwZTE3NWIzNTMxOWNlMjA0ZjQxNDllOGViOGFjYWVmMTQwNWE2NjkyNmI4IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 21:36:41 GMT
content-type: text/css
last-modified: Fri, 08 Sep 2023 06:31:38 GMT
etag: W/"1c4-604d32101e186-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 5434
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Z8h8wxdNGxJQ54LUCDsWTjTwTt7%2FaFB7lEGfob%2B%2Fam2bPx72SIfa9Eag7SsIOJUavuvA5my7E827450lVm2wzbOcYQdE5Zj6QWOnP%2FH8tAZG3B60YS2FiwdII3xtQho6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87eba0b668335691-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|