| sc-static.net/scevent.min.js |  54.230.82.240 | 200 OK | 19 kB |
URL GET HTTP/2sc-static.net/scevent.min.js IP54.230.82.240:443
CertificateIssuerAmazon Subjectsc-static.net FingerprintE4:8A:DF:2D:95:33:E5:93:D4:43:8A:14:06:EA:EA:E8:AD:29:20:0F ValidityThu, 21 Dec 2023 00:00:00 GMT - Sat, 18 Jan 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (28360) Hashb63285518f1bc28f01cfe8bfb4e6ca47 850cf5957261d3d7bc5484797f5ea6f32630f52f dac99c71e943d58b4fac29e7bed45da2fc55ceec4d6627ecce863dec95a520aa
GET /scevent.min.js HTTP/1.1
Host: sc-static.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4fsale.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
content-length: 19396
server: CloudFront
date: Thu, 25 Apr 2024 06:57:37 GMT
access-control-allow-headers: Content-Type
access-control-allow-origin: *
content-encoding: gzip
cache-control: private, s-maxage=0, max-age=600
set-cookie: X-AB=24b5be485c2747719f2dadcc8288a94b;max-age=86400;expires=Fri, 26 Apr 2024 06:57:37 GMT;Path=/scevent.min.js;Secure;SameSite=None
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: l1sXTyGo0rL3VM44k9Ci66-hvkIDtCt45o-7k2KW2DwdXL2QShfgKA==
X-Firefox-Spdy: h2
|
|
| cdn.staticsoe.com/uploads/0/theme/default/assets/banner_loading.png?v=7fe39bdcdcabdc30d14d1f99c308db2b |  104.18.169.76 | 200 OK | 23 kB |
URL GET HTTP/2cdn.staticsoe.com/uploads/0/theme/default/assets/banner_loading.png?v=7fe39bdcdcabdc30d14d1f99c308db2b IP104.18.169.76:443
CertificateIssuerCloudflare, Inc. Subjectcdn.staticsoe.com Fingerprint81:12:7B:A0:28:A4:6D:E5:44:00:F3:A3:14:8C:B8:2C:42:34:DA:CD ValidityWed, 14 Feb 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typePNG image data, 3840 x 1600, 8-bit/color RGB, non-interlaced Hash7fe39bdcdcabdc30d14d1f99c308db2b 1d355213e4346ff9d06274c93523fc4d98b583c0 a290c6c3053dc46eb4c6632cebcea32eea7da4274d3931d4c703f2ba6c916af7
GET /uploads/0/theme/default/assets/banner_loading.png?v=7fe39bdcdcabdc30d14d1f99c308db2b HTTP/1.1
Host: cdn.staticsoe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4fsale.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:57:37 GMT
content-type: image/png
content-length: 23352
x-oss-request-id: 654CD917F488A53136B93DF7
vary: Origin, Accept-Encoding
etag: "7FE39BDCDCABDC30D14D1F99C308DB2B"
last-modified: Thu, 09 Nov 2023 06:27:19 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 7125506954030682244
x-oss-storage-class: Standard
content-md5: f+Ob3Nyr3DDRTR+ZwwjbKw==
x-oss-server-time: 1
cf-cache-status: HIT
age: 31402
expires: Fri, 03 May 2024 06:57:37 GMT
cache-control: public, max-age=691200
accept-ranges: bytes
server: cloudflare
cf-ray: 879c70a14f4b5694-OSL
X-Firefox-Spdy: h2
|
|
| cdn.staticsoe.com/uploads/0/theme/default/assets/empty_loading.png?v=51ba92483a4282450a82bd1e58a7b541 | 104.18.169.76 | 200 OK | 6.9 kB |
URL GET HTTP/2cdn.staticsoe.com/uploads/0/theme/default/assets/empty_loading.png?v=51ba92483a4282450a82bd1e58a7b541 IP104.18.169.76:443
CertificateIssuerCloudflare, Inc. Subjectcdn.staticsoe.com Fingerprint81:12:7B:A0:28:A4:6D:E5:44:00:F3:A3:14:8C:B8:2C:42:34:DA:CD ValidityWed, 14 Feb 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typePNG image data, 1020 x 1020, 8-bit/color RGB, non-interlaced Hash51ba92483a4282450a82bd1e58a7b541 0a9c0f2bdd7f801733f8c07e7f8d41e172701263 900803e3916a6a75d3c2e39f033ec970387de83a5b91385030e620fe7623d6ff
GET /uploads/0/theme/default/assets/empty_loading.png?v=51ba92483a4282450a82bd1e58a7b541 HTTP/1.1
Host: cdn.staticsoe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4fsale.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:57:37 GMT
content-type: image/png
content-length: 6857
x-oss-request-id: 656825957484AD32327E925F
vary: Origin, Accept-Encoding
etag: "51BA92483A4282450A82BD1E58A7B541"
last-modified: Thu, 30 Nov 2023 06:02:58 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 12169997832694763196
x-oss-storage-class: Standard
content-md5: UbqSSDpCgkUKgr0eWKe1QQ==
x-oss-server-time: 3
cf-cache-status: HIT
age: 44771
expires: Fri, 03 May 2024 06:57:37 GMT
cache-control: public, max-age=691200
accept-ranges: bytes
server: cloudflare
cf-ray: 879c70a15f535694-OSL
X-Firefox-Spdy: h2
|
|
| cdn.staticsoe.com/uploads/61353/cart/resources/20231027/d824ccda1f5d2aabdeaf4008c56e2762.png | 104.18.169.76 | 200 OK | 3.8 kB |
URL GET HTTP/2cdn.staticsoe.com/uploads/61353/cart/resources/20231027/d824ccda1f5d2aabdeaf4008c56e2762.png IP104.18.169.76:443
CertificateIssuerCloudflare, Inc. Subjectcdn.staticsoe.com Fingerprint81:12:7B:A0:28:A4:6D:E5:44:00:F3:A3:14:8C:B8:2C:42:34:DA:CD ValidityWed, 14 Feb 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typePNG image data, 200 x 97, 8-bit/color RGBA, non-interlaced Hashd358c2728d38b73d0785b2193560965f bfc392fb46731b82d1a961244772e84a731a099c 0acf18507c12cc96723558cd9705ad40af5d328cb9365d097682ba2b8a550643
GET /uploads/61353/cart/resources/20231027/d824ccda1f5d2aabdeaf4008c56e2762.png HTTP/1.1
Host: cdn.staticsoe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4fsale.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:57:37 GMT
content-type: image/png
content-length: 3821
x-oss-request-id: 660B3079D5610430357AF518
vary: Origin, Accept-Encoding
etag: "D358C2728D38B73D0785B2193560965F"
last-modified: Fri, 27 Oct 2023 03:26:25 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 572407742235419303
x-oss-storage-class: Standard
content-md5: 01jCco04tz0HhbIZNWCWXw==
x-oss-server-time: 19
cf-cache-status: MISS
expires: Fri, 03 May 2024 06:57:37 GMT
cache-control: public, max-age=691200
accept-ranges: bytes
server: cloudflare
cf-ray: 879c70a14f495694-OSL
X-Firefox-Spdy: h2
|
|
| cdn.staticsoe.com/uploads/0/theme/default/assets/collect.js?v=96afd8ae933a668f3daf26bd95bc95a6 | 104.18.169.76 | 200 OK | 7.8 kB |
URL GET HTTP/2cdn.staticsoe.com/uploads/0/theme/default/assets/collect.js?v=96afd8ae933a668f3daf26bd95bc95a6 IP104.18.169.76:443
CertificateIssuerCloudflare, Inc. Subjectcdn.staticsoe.com Fingerprint81:12:7B:A0:28:A4:6D:E5:44:00:F3:A3:14:8C:B8:2C:42:34:DA:CD ValidityWed, 14 Feb 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeJavaScript source, Unicode text, UTF-8 text Hash96afd8ae933a668f3daf26bd95bc95a6 4285b6fe54816e3e60f8effc0b396ce1b9848868 5f2c27fd8ce921c5c8663ea491139714306effb9f081505dc5bd09b1de7ce568
GET /uploads/0/theme/default/assets/collect.js?v=96afd8ae933a668f3daf26bd95bc95a6 HTTP/1.1
Host: cdn.staticsoe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4fsale.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:57:37 GMT
content-type: application/javascript
vary: Accept-Encoding, Origin
x-oss-request-id: 662639BD5EDFF63338082D9C
last-modified: Mon, 22 Apr 2024 09:21:07 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 16609357670485251830
x-oss-storage-class: Standard
content-md5: lq/YrpM6Zo89rya9lbyVpg==
x-oss-server-time: 1
cf-cache-status: HIT
age: 44771
expires: Fri, 03 May 2024 06:57:37 GMT
cache-control: public, max-age=691200
server: cloudflare
cf-ray: 879c70a00e2b5694-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/frankruhllibre/v6/j8_w6_fAw7jrcalD7oKYNX0QfAnPW7Dl4Q.woff2 | 216.58.207.227 | 200 OK | 20 kB |
URL GET HTTP/2fonts.gstatic.com/s/frankruhllibre/v6/j8_w6_fAw7jrcalD7oKYNX0QfAnPW7Dl4Q.woff2 IP216.58.207.227:443
CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 19900, version 1.0 Hash3f3feedf5b4b90abf094f63ea6d87710 2ba4349e31c137dbe75ad327de9eb04a87e26165 e845309bca1ba7946299dc5ea01a12f66784e7220003ff3c438714decfa8c413
GET /s/frankruhllibre/v6/j8_w6_fAw7jrcalD7oKYNX0QfAnPW7Dl4Q.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://4fsale.top
DNT: 1
Connection: keep-alive
Referer: https://4fsale.top/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 19900
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:57:32 GMT
expires: Fri, 25 Apr 2025 02:57:32 GMT
cache-control: public, max-age=31536000
age: 14405
last-modified: Tue, 01 Sep 2020 03:50:38 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| cdn.staticsoe.com/uploads/61353/cart/resources/20240105/77287b03262c5f36972b4d772a5d4858.jpg | 104.18.169.76 | 200 OK | 112 kB |
URL GET HTTP/2cdn.staticsoe.com/uploads/61353/cart/resources/20240105/77287b03262c5f36972b4d772a5d4858.jpg IP104.18.169.76:443
CertificateIssuerCloudflare, Inc. Subjectcdn.staticsoe.com Fingerprint81:12:7B:A0:28:A4:6D:E5:44:00:F3:A3:14:8C:B8:2C:42:34:DA:CD ValidityWed, 14 Feb 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1000x200, components 3 Size112 kB (112549 bytes) Hashc8c820a4c0b08f5ac19513b8fd2e0c75 61406cef065021393ffcaeef79b44b6495b8e8d8 863014270e470fda452a889b82b82447b47eab1615190d8c9197bc15d01bf87c
GET /uploads/61353/cart/resources/20240105/77287b03262c5f36972b4d772a5d4858.jpg HTTP/1.1
Host: cdn.staticsoe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4fsale.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:57:37 GMT
content-type: image/jpeg
content-length: 112549
x-oss-request-id: 6629FEE1D561043631CA5FD8
vary: Origin, Accept-Encoding
etag: "C8C820A4C0B08F5AC19513B8FD2E0C75"
last-modified: Fri, 05 Jan 2024 08:29:53 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 3546909521613634464
x-oss-storage-class: Standard
content-md5: yMggpMCwj1rBlRO4/S4MdQ==
x-oss-server-time: 11
cf-cache-status: MISS
expires: Fri, 03 May 2024 06:57:37 GMT
cache-control: public, max-age=691200
accept-ranges: bytes
server: cloudflare
cf-ray: 879c70a14f485694-OSL
X-Firefox-Spdy: h2
|
|
| cdn.staticsoe.com/uploads/0/theme/default/assets/account.css?v=6e42f66bb2c79e42cb37829c9e93d71c | 104.18.169.76 | 200 OK | 47 kB |
URL GET HTTP/2cdn.staticsoe.com/uploads/0/theme/default/assets/account.css?v=6e42f66bb2c79e42cb37829c9e93d71c IP104.18.169.76:443
CertificateIssuerCloudflare, Inc. Subjectcdn.staticsoe.com Fingerprint81:12:7B:A0:28:A4:6D:E5:44:00:F3:A3:14:8C:B8:2C:42:34:DA:CD ValidityWed, 14 Feb 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
Hash6e42f66bb2c79e42cb37829c9e93d71c da066bb1e891ab9225c10efa121c04a2c8d4adc3 fd8d393b0d70a302d6621feeca6c0d0c4773574c4cb92e83c21f9da6c2692be2
GET /uploads/0/theme/default/assets/account.css?v=6e42f66bb2c79e42cb37829c9e93d71c HTTP/1.1
Host: cdn.staticsoe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4fsale.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:57:37 GMT
content-type: text/css
vary: Accept-Encoding, Origin
x-oss-request-id: 66264855E90119363452D44A
last-modified: Mon, 22 Apr 2024 09:21:07 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 2072138067842434010
x-oss-storage-class: Standard
content-md5: bkL2a7LHnkLLN4KcnpPXHA==
x-oss-server-time: 1
cf-cache-status: HIT
age: 44771
expires: Fri, 03 May 2024 06:57:37 GMT
cache-control: public, max-age=691200
server: cloudflare
cf-ray: 879c70a14f405694-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| 4fsale.top/app-assets/popups/61353/index.js?var=1709719087 | 104.16.198.133 | 200 OK | 62 kB |
URL GET HTTP/24fsale.top/app-assets/popups/61353/index.js?var=1709719087 IP104.16.198.133:443
CertificateIssuerGoogle Trust Services LLC Subject4fsale.top Fingerprint99:95:AC:81:EC:C1:17:72:BF:F9:BF:5B:C3:50:FD:76:8A:8F:A5:71 ValidityWed, 20 Mar 2024 14:14:16 GMT - Tue, 18 Jun 2024 14:14:15 GMT
File typegzip compressed data, from Unix Hashcd1620cc2d57f7d68f1e8b6a7572da02 cf58ad8e8a141be85ee356d108ab69f90b0038a3 c5b307a564d764e784ea10b93d12706d6fdb6464c299a41b0af49105f123cf47
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /app-assets/popups/61353/index.js?var=1709719087 HTTP/1.1
Host: 4fsale.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4fsale.top/
DNT: 1
Connection: keep-alive
Cookie: _fbs_fbp=fb.1.1714028256885.7492626102; oemsaas_global_visit_id=2FC2EA48-442D-A853-75AE-7AEC70BDC452; oemsaas_checkout_visit_id=7A2C1302-D993-CF82-BD75-6F9F0608D4DE; oemsaas_global_visit_session=FBCCCF8D-13DA-72A5-9475-DB84BC2A688A; utm_source=direct; utm_medium=default; order_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1714028256%2C%22expire_time%22%3A1716620256%7D%5D; landing_page=aHR0cHM6Ly80ZnNhbGUudG9wLw%3D%3D; oemsaas_keep_alive=026BD2C8-A5B3-EBCE-69AF-01AC38C87BC5; first_http_referer=null; PHPSESSID=c9a1c87d15d6b8c07cdeaaf4e522fbb7; oemcart_client_user_agent=Mozilla%252F5.0%2520(X11%253B%2520Linux%2520x86_64%253B%2520rv%253A96.0)%2520Gecko%252F20100101%2520Firefox%252F96.0; oemcart_client_pre_url=; oemcart_client_timezone=Etc%252FUTC; oemcart_client_screen_size=1280X1024; oemcart_client_broswer_language=en-US; oemcart_client_viewport_size=1280X1024; oemcart_client_broswer_date_time=2024-04-25%2006%3A57%3A37; _scid=f792f994-aade-4eed-978d-af1934e53545; _scid_r=f792f994-aade-4eed-978d-af1934e53545
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:57:38 GMT
content-type: application/javascript
vary: Accept-Encoding, Origin
x-oss-request-id: 6629FEE12738513137BCE675
last-modified: Thu, 25 Apr 2024 01:38:39 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 7661601618260768784
x-oss-storage-class: Standard
cache-control: public, max-age=14400
x-oss-ec: 0048-00000113
content-disposition: attachment
x-oss-force-download: true
content-md5: O4h+Zw37/qRlDVmJfJuAfA==
x-oss-server-time: 2
content-encoding: gzip
cf-cache-status: MISS
expires: Thu, 25 Apr 2024 10:57:38 GMT
server: cloudflare
cf-ray: 879c70a24ba2b515-OSL
X-Firefox-Spdy: h2
|
|
| cdn.staticsoe.com/uploads/61353/cart/resources/20231025/60A6D948-8375-A133-8E87-BF6996967418.webp | 104.18.169.76 | 200 OK | 94 kB |
URL GET HTTP/2cdn.staticsoe.com/uploads/61353/cart/resources/20231025/60A6D948-8375-A133-8E87-BF6996967418.webp IP104.18.169.76:443
CertificateIssuerCloudflare, Inc. Subjectcdn.staticsoe.com Fingerprint81:12:7B:A0:28:A4:6D:E5:44:00:F3:A3:14:8C:B8:2C:42:34:DA:CD ValidityWed, 14 Feb 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 1200x1600, Scaling: [none]x[none], YUV color, decoders should clamp Hashff15f7fcfd6b2ae71e6cc1d9177a02f5 4898b23739186e4c86f01f4c486d006e15b5440d 14d40adc28c68e0c5125748d1a1382929e4a71e39e18be0dc2736308a85db502
GET /uploads/61353/cart/resources/20231025/60A6D948-8375-A133-8E87-BF6996967418.webp HTTP/1.1
Host: cdn.staticsoe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4fsale.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:57:39 GMT
content-type: image/webp
content-length: 93920
x-oss-request-id: 6629FEE35EDFF63830E57760
vary: Origin, Accept-Encoding
etag: "FF15F7FCFD6B2AE71E6CC1D9177A02F5"
last-modified: Wed, 25 Oct 2023 10:17:17 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 12927719686473964969
x-oss-storage-class: Standard
content-md5: /xX3/P1rKucebMHZF3oC9Q==
x-oss-server-time: 13
cf-cache-status: MISS
expires: Fri, 03 May 2024 06:57:39 GMT
cache-control: public, max-age=691200
accept-ranges: bytes
server: cloudflare
cf-ray: 879c70aa8ee05694-OSL
X-Firefox-Spdy: h2
|
|
| cdn.staticsoe.com/uploads/61353/cart/resources/20231025/D19D7256-6CAE-C90C-F623-F6C0B5F60DB9.webp | 104.18.169.76 | 200 OK | 100 kB |
URL GET HTTP/2cdn.staticsoe.com/uploads/61353/cart/resources/20231025/D19D7256-6CAE-C90C-F623-F6C0B5F60DB9.webp IP104.18.169.76:443
CertificateIssuerCloudflare, Inc. Subjectcdn.staticsoe.com Fingerprint81:12:7B:A0:28:A4:6D:E5:44:00:F3:A3:14:8C:B8:2C:42:34:DA:CD ValidityWed, 14 Feb 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 1200x1600, Scaling: [none]x[none], YUV color, decoders should clamp Size100 kB (100028 bytes) Hashab7d517716db634e038ea85489b65eed c2a1deae6afc32f811b40e92df7ca86ac31f9532 38d3bbc96c68e2e34f5eedb57614d8fbe25da3f2f3f88dbabb93b16b993f8dbb
GET /uploads/61353/cart/resources/20231025/D19D7256-6CAE-C90C-F623-F6C0B5F60DB9.webp HTTP/1.1
Host: cdn.staticsoe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4fsale.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:57:39 GMT
content-type: image/webp
content-length: 100028
x-oss-request-id: 662709CBE2741F3831025750
vary: Origin, Accept-Encoding
etag: "AB7D517716DB634E038EA85489B65EED"
last-modified: Wed, 25 Oct 2023 10:17:23 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 12250360979182194297
x-oss-storage-class: Standard
content-md5: q31RdxbbY04DjqhUibZe7Q==
x-oss-server-time: 21
cf-cache-status: REVALIDATED
expires: Fri, 03 May 2024 06:57:39 GMT
cache-control: public, max-age=691200
accept-ranges: bytes
server: cloudflare
cf-ray: 879c70aa7ecd5694-OSL
X-Firefox-Spdy: h2
|
|
| cdn.staticsoe.com/uploads/61353/cart/resources/20231025/3076DE5A-9D41-26FA-D522-2AAE07A6C6CC.webp | 104.18.169.76 | 200 OK | 59 kB |
URL GET HTTP/2cdn.staticsoe.com/uploads/61353/cart/resources/20231025/3076DE5A-9D41-26FA-D522-2AAE07A6C6CC.webp IP104.18.169.76:443
CertificateIssuerCloudflare, Inc. Subjectcdn.staticsoe.com Fingerprint81:12:7B:A0:28:A4:6D:E5:44:00:F3:A3:14:8C:B8:2C:42:34:DA:CD ValidityWed, 14 Feb 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 1200x1600, Scaling: [none]x[none], YUV color, decoders should clamp Hashce01a02635dba880fcf88d387b332310 84ba4603f41949f732395faf207c338031d6cfe2 df96d78981c6a82a9927b641909920097b3610c9290de1a960659ce75f840d34
GET /uploads/61353/cart/resources/20231025/3076DE5A-9D41-26FA-D522-2AAE07A6C6CC.webp HTTP/1.1
Host: cdn.staticsoe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4fsale.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:57:39 GMT
content-type: image/webp
content-length: 59110
x-oss-request-id: 6629FEE3CB42C431395480C6
vary: Origin, Accept-Encoding
etag: "CE01A02635DBA880FCF88D387B332310"
last-modified: Wed, 25 Oct 2023 10:17:11 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 7015334483528113473
x-oss-storage-class: Standard
content-md5: zgGgJjXbqID8+I04ezMjEA==
x-oss-server-time: 49
cf-cache-status: MISS
expires: Fri, 03 May 2024 06:57:39 GMT
cache-control: public, max-age=691200
accept-ranges: bytes
server: cloudflare
cf-ray: 879c70aa7ede5694-OSL
X-Firefox-Spdy: h2
|
|
| cdn.staticsoe.com/uploads/61353/cart/resources/20240105/172da11f95475d6b1c20c807c330cf55.jpg?x-oss-process=image/resize,m_lfit,w_1920 | 104.18.169.76 | 200 OK | 292 kB |
URL GET HTTP/2cdn.staticsoe.com/uploads/61353/cart/resources/20240105/172da11f95475d6b1c20c807c330cf55.jpg?x-oss-process=image/resize,m_lfit,w_1920 IP104.18.169.76:443
CertificateIssuerCloudflare, Inc. Subjectcdn.staticsoe.com Fingerprint81:12:7B:A0:28:A4:6D:E5:44:00:F3:A3:14:8C:B8:2C:42:34:DA:CD ValidityWed, 14 Feb 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1920x630, components 3 Size292 kB (291450 bytes) Hashd9c38c9f654a2b8a5b52b820e9b319a1 a88aea433da2fc243dcf3c8eb5b3bb96578ac562 96b20062f1ed094bb9cefbefd30f8739b10d1123fd84bbf29ce787ca26cf1a1e
GET /uploads/61353/cart/resources/20240105/172da11f95475d6b1c20c807c330cf55.jpg?x-oss-process=image/resize,m_lfit,w_1920 HTTP/1.1
Host: cdn.staticsoe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4fsale.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:57:39 GMT
content-type: image/jpeg
content-length: 291450
x-oss-request-id: 6629FEE3E2741F3733D7D24D
vary: Origin, Accept-Encoding
etag: "2B1DC3FC9003FFE5D4AB59BAB019E765"
last-modified: Fri, 05 Jan 2024 08:09:12 GMT
x-oss-object-type: Normal
x-oss-storage-class: Standard
x-oss-server-time: 93
x-oss-hash-crc64ecma: 17771640114148012585
cf-cache-status: MISS
expires: Fri, 03 May 2024 06:57:39 GMT
cache-control: public, max-age=691200
accept-ranges: bytes
server: cloudflare
cf-ray: 879c70aa7ed95694-OSL
X-Firefox-Spdy: h2
|
|
| 4fsale.top/dist/front/assets/415a6fb983d3d506283c.woff2?t=1686211178958 | 104.16.198.133 | 200 OK | 2.2 kB |
URL GET HTTP/24fsale.top/dist/front/assets/415a6fb983d3d506283c.woff2?t=1686211178958 IP104.16.198.133:443
CertificateIssuerGoogle Trust Services LLC Subject4fsale.top Fingerprint99:95:AC:81:EC:C1:17:72:BF:F9:BF:5B:C3:50:FD:76:8A:8F:A5:71 ValidityWed, 20 Mar 2024 14:14:16 GMT - Tue, 18 Jun 2024 14:14:15 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 2212, version 1.0 Hash5e845ac75e407a38e30312f7c7bdc2be 7f40b07e06ca50a33930316dc3052b7f1887b353 58ae705f6c18280bbb0fbde724a38dfdab1d80f83e4cadc5eb3a9f728a8fb495
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /dist/front/assets/415a6fb983d3d506283c.woff2?t=1686211178958 HTTP/1.1
Host: 4fsale.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://4fsale.top/
DNT: 1
Connection: keep-alive
Cookie: _fbs_fbp=fb.1.1714028256885.7492626102; oemsaas_global_visit_id=2FC2EA48-442D-A853-75AE-7AEC70BDC452; oemsaas_checkout_visit_id=7A2C1302-D993-CF82-BD75-6F9F0608D4DE; oemsaas_global_visit_session=FBCCCF8D-13DA-72A5-9475-DB84BC2A688A; utm_source=direct; utm_medium=default; order_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1714028256%2C%22expire_time%22%3A1716620256%7D%5D; landing_page=aHR0cHM6Ly80ZnNhbGUudG9wLw%3D%3D; oemsaas_keep_alive=026BD2C8-A5B3-EBCE-69AF-01AC38C87BC5; first_http_referer=null; PHPSESSID=c9a1c87d15d6b8c07cdeaaf4e522fbb7; oemcart_client_user_agent=Mozilla%252F5.0%2520(X11%253B%2520Linux%2520x86_64%253B%2520rv%253A96.0)%2520Gecko%252F20100101%2520Firefox%252F96.0; oemcart_client_pre_url=; oemcart_client_timezone=Etc%252FUTC; oemcart_client_screen_size=1280X1024; oemcart_client_broswer_language=en-US; oemcart_client_viewport_size=1280X1024; oemcart_client_broswer_date_time=2024-04-25%2006%3A57%3A37; _scid=f792f994-aade-4eed-978d-af1934e53545; _scid_r=f792f994-aade-4eed-978d-af1934e53545
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:57:39 GMT
content-type: application/octet-stream
content-length: 2212
x-oss-request-id: 6629FEE3DCA49D31313F3728
vary: Origin, Accept-Encoding
etag: "5E845AC75E407A38E30312F7C7BDC2BE"
last-modified: Thu, 25 Apr 2024 01:38:29 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 6742069295934362351
x-oss-storage-class: Standard
x-oss-ec: 0048-00000113
content-disposition: attachment
x-oss-force-download: true
content-md5: XoRax15AejjjAxL3x73Cvg==
x-oss-server-time: 5
cache-control: public, max-age=86400
cf-cache-status: MISS
expires: Fri, 26 Apr 2024 06:57:39 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 879c70aa0a91b515-OSL
X-Firefox-Spdy: h2
|
|
| cdn.staticsoe.com/uploads/61353/cart/resources/20231027/d824ccda1f5d2aabdeaf4008c56e2762.png?x-oss-process=image/resize,m_lfit,w_130 | 104.18.169.76 | 200 OK | 2.0 kB |
URL GET HTTP/2cdn.staticsoe.com/uploads/61353/cart/resources/20231027/d824ccda1f5d2aabdeaf4008c56e2762.png?x-oss-process=image/resize,m_lfit,w_130 IP104.18.169.76:443
CertificateIssuerCloudflare, Inc. Subjectcdn.staticsoe.com Fingerprint81:12:7B:A0:28:A4:6D:E5:44:00:F3:A3:14:8C:B8:2C:42:34:DA:CD ValidityWed, 14 Feb 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typePNG image data, 130 x 63, 8-bit/color RGBA, non-interlaced Hash202449ad6d22b988be03ac1e51076b99 4de889ab5a68933bac9da936150a182ef8630ead c25d61559506af3229815df770a769a854b50129e35e28a029050b060367eb62
GET /uploads/61353/cart/resources/20231027/d824ccda1f5d2aabdeaf4008c56e2762.png?x-oss-process=image/resize,m_lfit,w_130 HTTP/1.1
Host: cdn.staticsoe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4fsale.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:57:39 GMT
content-type: image/png
content-length: 2010
x-oss-request-id: 661E06585EDFF633314B74F2
vary: Origin, Accept-Encoding
etag: "D358C2728D38B73D0785B2193560965F"
last-modified: Fri, 27 Oct 2023 03:26:25 GMT
x-oss-object-type: Normal
x-oss-storage-class: Standard
x-oss-server-time: 7
x-oss-hash-crc64ecma: 10212587430769639730
cf-cache-status: REVALIDATED
expires: Fri, 03 May 2024 06:57:39 GMT
cache-control: public, max-age=691200
accept-ranges: bytes
server: cloudflare
cf-ray: 879c70aa8ee55694-OSL
X-Firefox-Spdy: h2
|
|
| cdn.staticsoe.com/uploads/61353/cart/resources/20231025/EE75E9C6-4CFC-31E2-BBCB-6CAB24E66860.webp | 104.18.169.76 | 200 OK | 155 kB |
URL GET HTTP/2cdn.staticsoe.com/uploads/61353/cart/resources/20231025/EE75E9C6-4CFC-31E2-BBCB-6CAB24E66860.webp IP104.18.169.76:443
CertificateIssuerCloudflare, Inc. Subjectcdn.staticsoe.com Fingerprint81:12:7B:A0:28:A4:6D:E5:44:00:F3:A3:14:8C:B8:2C:42:34:DA:CD ValidityWed, 14 Feb 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 1600x2133, Scaling: [none]x[none], YUV color, decoders should clamp Size155 kB (155200 bytes) Hash9c40a93789e79e13832037eff3e67403 c0141d9b2f281418d1e5f887c107bc6eb783ab46 13505485319deee78332921a978a93ff3f59db7da52666d4199f0380bbd324be
GET /uploads/61353/cart/resources/20231025/EE75E9C6-4CFC-31E2-BBCB-6CAB24E66860.webp HTTP/1.1
Host: cdn.staticsoe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4fsale.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:57:39 GMT
content-type: image/webp
content-length: 155200
x-oss-request-id: 6629FEE31F52473635F2A4F2
vary: Origin, Accept-Encoding
etag: "9C40A93789E79E13832037EFF3E67403"
last-modified: Wed, 25 Oct 2023 10:16:54 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 3151570706438223117
x-oss-storage-class: Standard
content-md5: nECpN4nnnhODIDfv8+Z0Aw==
x-oss-server-time: 30
cf-cache-status: MISS
expires: Fri, 03 May 2024 06:57:39 GMT
cache-control: public, max-age=691200
accept-ranges: bytes
server: cloudflare
cf-ray: 879c70aa7ecf5694-OSL
X-Firefox-Spdy: h2
|
|
| cdn.staticsoe.com/uploads/61353/cart/resources/20231206/61353_4647d06ee552dde6979165c97fab5d74.jpg | 104.18.169.76 | 200 OK | 74 kB |
URL GET HTTP/2cdn.staticsoe.com/uploads/61353/cart/resources/20231206/61353_4647d06ee552dde6979165c97fab5d74.jpg IP104.18.169.76:443
CertificateIssuerCloudflare, Inc. Subjectcdn.staticsoe.com Fingerprint81:12:7B:A0:28:A4:6D:E5:44:00:F3:A3:14:8C:B8:2C:42:34:DA:CD ValidityWed, 14 Feb 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 688x448, components 3 Hashfaeb0375cbf723d696836d34ab6b7cc5 e877824578c0709d19878ea3c515b06d266b13d6 a3c43de3a5a48d15f73eac0bc7b64ac5b170183d6c826e9e4fe0cc19991ec5e8
GET /uploads/61353/cart/resources/20231206/61353_4647d06ee552dde6979165c97fab5d74.jpg HTTP/1.1
Host: cdn.staticsoe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4fsale.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:57:39 GMT
content-type: image/jpeg
content-length: 73531
x-oss-request-id: 6629FEE3D5610435300267D8
vary: Origin, Accept-Encoding
etag: "FAEB0375CBF723D696836D34AB6B7CC5"
last-modified: Wed, 06 Dec 2023 02:59:20 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 475658653454908626
x-oss-storage-class: Standard
content-md5: +usDdcv3I9aWg200q2t8xQ==
x-oss-server-time: 16
cf-cache-status: MISS
expires: Fri, 03 May 2024 06:57:39 GMT
cache-control: public, max-age=691200
accept-ranges: bytes
server: cloudflare
cf-ray: 879c70ac08275694-OSL
X-Firefox-Spdy: h2
|
|
| 4fsale.top/app-assets/recentproductbrowsetool/61353/index.js?var=1702031713 | 104.16.198.133 | 200 OK | 43 kB |
URL GET HTTP/24fsale.top/app-assets/recentproductbrowsetool/61353/index.js?var=1702031713 IP104.16.198.133:443
CertificateIssuerGoogle Trust Services LLC Subject4fsale.top Fingerprint99:95:AC:81:EC:C1:17:72:BF:F9:BF:5B:C3:50:FD:76:8A:8F:A5:71 ValidityWed, 20 Mar 2024 14:14:16 GMT - Tue, 18 Jun 2024 14:14:15 GMT
File typegzip compressed data, from Unix Hash3b98adfac6f735d2d43c8628f6618991 c9b1db0fd7e7931ee440225e29312a10f89df0a4 bb8079e992bf5595f3cc29751e358e32d2a594ccfff4e4dce3b0ff28d5570d80
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /app-assets/recentproductbrowsetool/61353/index.js?var=1702031713 HTTP/1.1
Host: 4fsale.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4fsale.top/
DNT: 1
Connection: keep-alive
Cookie: _fbs_fbp=fb.1.1714028256885.7492626102; oemsaas_global_visit_id=2FC2EA48-442D-A853-75AE-7AEC70BDC452; oemsaas_checkout_visit_id=7A2C1302-D993-CF82-BD75-6F9F0608D4DE; oemsaas_global_visit_session=FBCCCF8D-13DA-72A5-9475-DB84BC2A688A; utm_source=direct; utm_medium=default; order_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1714028256%2C%22expire_time%22%3A1716620256%7D%5D; landing_page=aHR0cHM6Ly80ZnNhbGUudG9wLw%3D%3D; oemsaas_keep_alive=026BD2C8-A5B3-EBCE-69AF-01AC38C87BC5; first_http_referer=null; PHPSESSID=c9a1c87d15d6b8c07cdeaaf4e522fbb7; oemcart_client_user_agent=Mozilla%252F5.0%2520(X11%253B%2520Linux%2520x86_64%253B%2520rv%253A96.0)%2520Gecko%252F20100101%2520Firefox%252F96.0; oemcart_client_pre_url=; oemcart_client_timezone=Etc%252FUTC; oemcart_client_screen_size=1280X1024; oemcart_client_broswer_language=en-US; oemcart_client_viewport_size=1280X1024; oemcart_client_broswer_date_time=2024-04-25%2006%3A57%3A37; _scid=f792f994-aade-4eed-978d-af1934e53545; _scid_r=f792f994-aade-4eed-978d-af1934e53545
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:57:38 GMT
content-type: application/javascript
vary: Accept-Encoding, Origin
x-oss-request-id: 6629FEE118A4D334368ED5EE
last-modified: Thu, 25 Apr 2024 01:38:40 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 17129252221536811924
x-oss-storage-class: Standard
cache-control: public, max-age=14400
x-oss-ec: 0048-00000113
content-disposition: attachment
x-oss-force-download: true
content-md5: pB85SzGASEgb1nR1stZlVg==
x-oss-server-time: 1
content-encoding: gzip
cf-cache-status: MISS
expires: Thu, 25 Apr 2024 10:57:38 GMT
server: cloudflare
cf-ray: 879c70a23b97b515-OSL
X-Firefox-Spdy: h2
|
|
| cdn.staticsoe.com/uploads/61353/cart/resources/20231025/A58A3D93-8854-30E6-8D09-869F264120DA.webp | 104.18.169.76 | 200 OK | 72 kB |
URL GET HTTP/2cdn.staticsoe.com/uploads/61353/cart/resources/20231025/A58A3D93-8854-30E6-8D09-869F264120DA.webp IP104.18.169.76:443
CertificateIssuerCloudflare, Inc. Subjectcdn.staticsoe.com Fingerprint81:12:7B:A0:28:A4:6D:E5:44:00:F3:A3:14:8C:B8:2C:42:34:DA:CD ValidityWed, 14 Feb 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 1200x1600, Scaling: [none]x[none], YUV color, decoders should clamp Hash29781ea5e42860012d5d595305e4c66c b09d852e0fac45dbb7a346eeda486d93c4a8003c 5e1dcd6c3fd7f32f2e6067402ac47c969f737bef8cbcc6f0a4b0062e1cd1b298
GET /uploads/61353/cart/resources/20231025/A58A3D93-8854-30E6-8D09-869F264120DA.webp HTTP/1.1
Host: cdn.staticsoe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4fsale.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:57:39 GMT
content-type: image/webp
content-length: 71684
x-oss-request-id: 6629FEE391795F3733C77EA0
vary: Origin, Accept-Encoding
etag: "29781EA5E42860012D5D595305E4C66C"
last-modified: Wed, 25 Oct 2023 10:17:10 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 9520531100170390138
x-oss-storage-class: Standard
content-md5: KXgepeQoYAEtXVlTBeTGbA==
x-oss-server-time: 24
cf-cache-status: MISS
expires: Fri, 03 May 2024 06:57:39 GMT
cache-control: public, max-age=691200
accept-ranges: bytes
server: cloudflare
cf-ray: 879c70aa8ee35694-OSL
X-Firefox-Spdy: h2
|
|
| 4fsale.top/app-assets/googletranslate/61353/index.js?var=1698305836 | 104.16.198.133 | 200 OK | 33 kB |
URL GET HTTP/24fsale.top/app-assets/googletranslate/61353/index.js?var=1698305836 IP104.16.198.133:443
CertificateIssuerGoogle Trust Services LLC Subject4fsale.top Fingerprint99:95:AC:81:EC:C1:17:72:BF:F9:BF:5B:C3:50:FD:76:8A:8F:A5:71 ValidityWed, 20 Mar 2024 14:14:16 GMT - Tue, 18 Jun 2024 14:14:15 GMT
File typegzip compressed data, from Unix Hash8307deb7106966caaeb4edf83f17051a 3230edaf6f03927b276484b039a349fc6b854ede cd32844d4f3cb0bd550782e63eccbe4c88a94da9b4e46924508228392df295a8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /app-assets/googletranslate/61353/index.js?var=1698305836 HTTP/1.1
Host: 4fsale.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4fsale.top/
DNT: 1
Connection: keep-alive
Cookie: _fbs_fbp=fb.1.1714028256885.7492626102; oemsaas_global_visit_id=2FC2EA48-442D-A853-75AE-7AEC70BDC452; oemsaas_checkout_visit_id=7A2C1302-D993-CF82-BD75-6F9F0608D4DE; oemsaas_global_visit_session=FBCCCF8D-13DA-72A5-9475-DB84BC2A688A; utm_source=direct; utm_medium=default; order_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1714028256%2C%22expire_time%22%3A1716620256%7D%5D; landing_page=aHR0cHM6Ly80ZnNhbGUudG9wLw%3D%3D; oemsaas_keep_alive=026BD2C8-A5B3-EBCE-69AF-01AC38C87BC5; first_http_referer=null; PHPSESSID=c9a1c87d15d6b8c07cdeaaf4e522fbb7; oemcart_client_user_agent=Mozilla%252F5.0%2520(X11%253B%2520Linux%2520x86_64%253B%2520rv%253A96.0)%2520Gecko%252F20100101%2520Firefox%252F96.0; oemcart_client_pre_url=; oemcart_client_timezone=Etc%252FUTC; oemcart_client_screen_size=1280X1024; oemcart_client_broswer_language=en-US; oemcart_client_viewport_size=1280X1024; oemcart_client_broswer_date_time=2024-04-25%2006%3A57%3A37; _scid=f792f994-aade-4eed-978d-af1934e53545; _scid_r=f792f994-aade-4eed-978d-af1934e53545
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:57:37 GMT
content-type: application/javascript
vary: Accept-Encoding, Origin
x-oss-request-id: 6629FEE148ADFD39358765A5
last-modified: Thu, 25 Apr 2024 01:38:38 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 5480370437985418128
x-oss-storage-class: Standard
cache-control: public, max-age=14400
x-oss-ec: 0048-00000113
content-disposition: attachment
x-oss-force-download: true
content-md5: 0z521Rf93npk1JST3GVviA==
x-oss-server-time: 2
content-encoding: gzip
cf-cache-status: MISS
expires: Thu, 25 Apr 2024 10:57:37 GMT
server: cloudflare
cf-ray: 879c70a23b8eb515-OSL
X-Firefox-Spdy: h2
|
|
| translate.google.com/translate_a/element.js?cb=googleTranslateElementInit | 216.58.211.14 | 200 OK | 31 kB |
URL GET HTTP/2translate.google.com/translate_a/element.js?cb=googleTranslateElementInit IP216.58.211.14:443
CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
File typegzip compressed data, max compression Hashd617caa0d836e06739cc1501981652d2 bd75f1dcbecebfbfdb9fb90fc99356670b1ef5cf e838bb9f63b257301720fcc0c7d0dcb59f3fbea2e56bcc71d9555a89eb341594
GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1
Host: translate.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4fsale.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 25 Apr 2024 06:57:39 GMT
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.TpYxICw8iG4.L.F4.O/am=wA/d=0/rs=AN8SPfpVjmduEbJeaKDPJmqpx8swJVpW8A/m=el_main_css | 142.250.74.35 | 200 OK | 4.0 kB |
URL GET HTTP/2www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.TpYxICw8iG4.L.F4.O/am=wA/d=0/rs=AN8SPfpVjmduEbJeaKDPJmqpx8swJVpW8A/m=el_main_css IP142.250.74.35:443
CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeASCII text, with very long lines (20367), with no line terminators Hash72d3a735ccca1027f6b3afba2c93e3a7 67f8eff8d17334c59c28fc1753bf451527c7490d c8c845f55e2346b89894ce0df8185ee182359e096bf29987d5cf1f8a7391bef1
GET /_/translate_http/_/ss/k=translate_http.tr.TpYxICw8iG4.L.F4.O/am=wA/d=0/rs=AN8SPfpVjmduEbJeaKDPJmqpx8swJVpW8A/m=el_main_css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4fsale.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 3960
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:44:31 GMT
expires: Fri, 25 Apr 2025 02:44:31 GMT
cache-control: public, max-age=31536000
age: 15188
last-modified: Sat, 15 Jul 2023 01:09:03 GMT
content-type: text/css; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| cdn.staticsoe.com/uploads/61353/cart/resources/20231027/61353_03bca9f8ed4e264769167decfa93cff2.png | 104.18.169.76 | 200 OK | 2.8 kB |
URL GET HTTP/2cdn.staticsoe.com/uploads/61353/cart/resources/20231027/61353_03bca9f8ed4e264769167decfa93cff2.png IP104.18.169.76:443
CertificateIssuerCloudflare, Inc. Subjectcdn.staticsoe.com Fingerprint81:12:7B:A0:28:A4:6D:E5:44:00:F3:A3:14:8C:B8:2C:42:34:DA:CD ValidityWed, 14 Feb 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typePNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced Hash0fc5a56b308fed7bbfe73c6cbf4b9af5 08d3cc02c5f2b773ff921f1c53cd2ee672082f72 65eba46b9e65d70840938828dd2871058f1cb31cfc1cf73e2b7ffe8eacd7886b
GET /uploads/61353/cart/resources/20231027/61353_03bca9f8ed4e264769167decfa93cff2.png HTTP/1.1
Host: cdn.staticsoe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4fsale.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:57:39 GMT
content-type: image/png
content-length: 2786
x-oss-request-id: 6557739B8083E737353E4066
vary: Origin, Accept-Encoding
etag: "0FC5A56B308FED7BBFE73C6CBF4B9AF5"
last-modified: Fri, 27 Oct 2023 06:10:04 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 952959149060134187
x-oss-storage-class: Standard
content-md5: D8WlazCP7Xu/5zxsv0ua9Q==
x-oss-server-time: 37
cf-cache-status: REVALIDATED
expires: Fri, 03 May 2024 06:57:39 GMT
cache-control: public, max-age=691200
accept-ranges: bytes
server: cloudflare
cf-ray: 879c70ae9a6f5694-OSL
X-Firefox-Spdy: h2
|
|
| translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.qSFe8Zd40bk.O/am=AAQ/d=1/exm=el_conf/ed=1/rs=AN8SPfq92X1o0HH0hndEbECGlbI-dOTnmg/m=el_main | 142.250.74.170 | 200 OK | 73 kB |
URL GET HTTP/2translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.qSFe8Zd40bk.O/am=AAQ/d=1/exm=el_conf/ed=1/rs=AN8SPfq92X1o0HH0hndEbECGlbI-dOTnmg/m=el_main IP142.250.74.170:443
CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2 ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT
File typeJavaScript source, ASCII text, with very long lines (2297) Hash12487a9b7a04b957648956d8e195e2fa db8c446b1516d76be812ba7bc1ebf455c090ef01 b005774fd9d7ddf333c0c90b728c59db1a08be979a9d64a267e00c5fc37686c2
GET /_/translate_http/_/js/k=translate_http.tr.no.qSFe8Zd40bk.O/am=AAQ/d=1/exm=el_conf/ed=1/rs=AN8SPfq92X1o0HH0hndEbECGlbI-dOTnmg/m=el_main HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4fsale.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 72714
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 24 Apr 2024 18:45:59 GMT
expires: Thu, 24 Apr 2025 18:45:59 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 23 Apr 2024 17:10:37 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 43900
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| | 104.16.198.133 | 200 OK | 87 kB |
URL User Request GET HTTP/2IP104.16.198.133:443
CertificateIssuerGoogle Trust Services LLC Subject4fsale.top Fingerprint99:95:AC:81:EC:C1:17:72:BF:F9:BF:5B:C3:50:FD:76:8A:8F:A5:71 ValidityWed, 20 Mar 2024 14:14:16 GMT - Tue, 18 Jun 2024 14:14:15 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (59643) Hashd328b35ddf07ed8e0c9a37cc85ff00eb 4f20184bb65de7cdb49fd98919b5d5bfa00323c4 a56ed5650d006ae9499fcda99e29fa9a8b4141d6d23491eb404b7dcc720f292f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: 4fsale.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:57:37 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
set-cookie: _fbs_fbp=fb.1.1714028256885.7492626102; expires=Wed, 24-Jul-2024 06:57:36 GMT; Max-Age=7776000; path=/
oemsaas_global_visit_id=2FC2EA48-442D-A853-75AE-7AEC70BDC452; expires=Sun, 23-Apr-2034 06:57:36 GMT; Max-Age=315360000; path=/
oemsaas_checkout_visit_id=7A2C1302-D993-CF82-BD75-6F9F0608D4DE; expires=Sun, 23-Apr-2034 06:57:36 GMT; Max-Age=315360000; path=/
oemsaas_global_visit_session=FBCCCF8D-13DA-72A5-9475-DB84BC2A688A; expires=Fri, 26-Apr-2024 06:57:36 GMT; Max-Age=86400; path=/
utm_source=direct; expires=Sat, 25-May-2024 06:57:36 GMT; Max-Age=2592000; path=/
utm_medium=default; expires=Sat, 25-May-2024 06:57:36 GMT; Max-Age=2592000; path=/
utm_term=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
utm_campaign=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
utm_content=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
order_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1714028256%2C%22expire_time%22%3A1716620256%7D%5D; path=/
landing_page=aHR0cHM6Ly80ZnNhbGUudG9wLw%3D%3D; expires=Fri, 25-Apr-2025 06:57:36 GMT; Max-Age=31536000; path=/
oemsaas_keep_alive=026BD2C8-A5B3-EBCE-69AF-01AC38C87BC5; expires=Thu, 25-Apr-2024 07:27:36 GMT; Max-Age=1800; path=/
first_http_referer=null; expires=Sat, 25-May-2024 06:57:36 GMT; Max-Age=2592000; path=/
PHPSESSID=c9a1c87d15d6b8c07cdeaaf4e522fbb7; path=/
execution-time: 0.0900299549
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 879c709bae17b515-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_42x16dp.png | 142.250.74.35 | 200 OK | 910 B |
URL GET HTTP/3www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_42x16dp.png IP142.250.74.35:443
CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typePNG image data, 42 x 16, 8-bit/color RGBA, non-interlaced Hashefa6bb2bfe459bc6f4bdafa3db0383f6 52d15ce52fe50643e542c17812de43f4ed1b6ee0 6318394f737c66f0e2ccfcd88e3935c6667633a1b95fa29fba2b75431d55eef2
GET /images/branding/googlelogo/1x/googlelogo_color_42x16dp.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4fsale.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 910
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 14:17:57 GMT
expires: Wed, 23 Apr 2025 14:17:57 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 02 Nov 2023 22:48:00 GMT
content-type: image/png
vary: Origin
age: 146383
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| translate-pa.googleapis.com/v1/supportedLanguages?client=te&display_language=no&key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4&callback=callback | 142.250.74.170 | | 1.4 kB |
URL translate-pa.googleapis.com/v1/supportedLanguages?client=te&display_language=no&key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4&callback=callback IP142.250.74.170:0
Hasha3eefe14b1b4698460d992bd1673a26b a2fca6ebb00b8bdcca3eda88654d02d2c165b9c4 87514750a90cd70dd22c8673cfa80d804ef55840bd0755950af2118d8d218067
GET /v1/supportedLanguages?client=te&display_language=no&key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4&callback=callback HTTP/1.1
Host: translate-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4fsale.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
cross-origin-resource-policy: cross-origin
content-type: text/javascript; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Thu, 25 Apr 2024 06:57:40 GMT
server: ESF
cache-control: private
content-length: 1392
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: NID=513=kGa4lsPm-CYwO9Xrw6yOTBBaD-5UCXoZnnYelJrRgKiAL89sVU8w0rNpFOcvXx4zDwYOMGjK0BekSWEX3pS-8LQJs2dyvaOgEfopNO-lPX5P0iXqUKjvyh9bFWzWbRG_af_KwGGVUjjyS62DYpvlFqmdHvnIjFOPoqfrxJ0rgdQ; expires=Fri, 25-Oct-2024 06:57:40 GMT; path=/; domain=.translate-pa.googleapis.com; HttpOnly
expires: Thu, 25 Apr 2024 06:57:40 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cdn.staticsoe.com/statics/country/flag/pl.png | 104.18.169.76 | 200 OK | 319 B |
URL GET HTTP/2cdn.staticsoe.com/statics/country/flag/pl.png IP104.18.169.76:443
CertificateIssuerCloudflare, Inc. Subjectcdn.staticsoe.com Fingerprint81:12:7B:A0:28:A4:6D:E5:44:00:F3:A3:14:8C:B8:2C:42:34:DA:CD ValidityWed, 14 Feb 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typePNG image data, 128 x 128, 4-bit colormap, non-interlaced Hashcfd9291e629876037557722530ae6148 9a42c0cc5a94992dea0aa1a7584fd9b403702c1c 22706276ce07b6ade0d9c2c9765ee274d36ea2ea822eb8810b43c9e3d449a001
GET /statics/country/flag/pl.png HTTP/1.1
Host: cdn.staticsoe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4fsale.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:57:41 GMT
content-type: image/png
content-length: 319
x-oss-request-id: 654EE24D269C5632385B1EED
vary: Origin, Accept-Encoding
etag: "CFD9291E629876037557722530AE6148"
last-modified: Mon, 14 Feb 2022 07:59:45 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 15484148905490677633
x-oss-storage-class: Standard
content-md5: z9kpHmKYdgN1V3IlMK5hSA==
x-oss-server-time: 2
cf-cache-status: HIT
age: 59978
expires: Fri, 03 May 2024 06:57:41 GMT
cache-control: public, max-age=691200
accept-ranges: bytes
server: cloudflare
cf-ray: 879c70ba2cd45694-OSL
X-Firefox-Spdy: h2
|
|
| at.alicdn.com/t/font_2997681_8jbkqwwojx3.woff2?t=1638950246505 |  47.246.44.251 | 200 OK | 684 B |
URL GET HTTP/2at.alicdn.com/t/font_2997681_8jbkqwwojx3.woff2?t=1638950246505 IP47.246.44.251:443 ASN#24429 Zhejiang Taobao Network Co.,Ltd
CertificateIssuerGlobalSign nv-sa Subject*.tbcdn.cn Fingerprint29:04:BE:E6:49:30:F7:DC:C0:BE:56:8F:B4:AC:24:9B:50:1A:F7:E2 ValidityTue, 26 Dec 2023 03:36:04 GMT - Tue, 30 Jul 2024 02:26:11 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 684, version 1.0 Hasha44567d08fff8b33f8de681e451a27cc ba48c72327db04232dc2d6a6e47772711fed68fd b9b719d1e524dddce10fc7c43e45114936dc1f30c5fcc11c309b9ca26acea3e3
GET /t/font_2997681_8jbkqwwojx3.woff2?t=1638950246505 HTTP/1.1
Host: at.alicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://4fsale.top
DNT: 1
Connection: keep-alive
Referer: https://4fsale.top/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: Tengine
content-type: font/woff2
content-length: 684
date: Thu, 25 Apr 2024 06:57:41 GMT
x-oss-request-id: 6629FEE56AD0C435326988F2
vary: Origin
accept-ranges: bytes
etag: "A44567D08FFF8B33F8DE681E451A27CC"
last-modified: Wed, 08 Dec 2021 07:57:26 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 15427969927471343633
x-oss-storage-class: Standard
cache-control: max-age=63072000
content-md5: pEVn0I//izP43mgeRRonzA==
x-oss-server-time: 1
ali-swift-global-savetime: 1714028261
via: cache16.l2de2[201,201,200-0,M], cache12.l2de2[203,0], ens-cache16.se2[232,231,200-0,M], ens-cache4.se2[234,0]
x-cache: MISS TCP_MISS dirn:-2:-2
x-swift-savetime: Thu, 25 Apr 2024 06:57:41 GMT
x-swift-cachetime: 31104000
access-control-allow-origin: *
timing-allow-origin: *
eagleid: 2ff62c9817140282614726888e
X-Firefox-Spdy: h2
|
|
| cdn.staticsoe.com/statics/apps/static/recentsale-front/holiday_newyear_top.png | 104.18.169.76 | 200 OK | 3.1 kB |
URL GET HTTP/2cdn.staticsoe.com/statics/apps/static/recentsale-front/holiday_newyear_top.png IP104.18.169.76:443
CertificateIssuerCloudflare, Inc. Subjectcdn.staticsoe.com Fingerprint81:12:7B:A0:28:A4:6D:E5:44:00:F3:A3:14:8C:B8:2C:42:34:DA:CD ValidityWed, 14 Feb 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typePNG image data, 90 x 77, 8-bit/color RGBA, non-interlaced Hash7286a7d99640c7a1cbdb478cc819d434 ad40ccd3335dd149f936835cf56d02fe26253a82 0f96fe680793ca5c6825a92b5f7de30b1c8a5d35afc92f0379285f4b92a67c4c
GET /statics/apps/static/recentsale-front/holiday_newyear_top.png HTTP/1.1
Host: cdn.staticsoe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4fsale.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:57:41 GMT
content-type: image/png
content-length: 3086
x-oss-request-id: 65FBDE059191FB3531D4ABDC
vary: Origin, Accept-Encoding
etag: "7286A7D99640C7A1CBDB478CC819D434"
last-modified: Mon, 14 Feb 2022 07:59:32 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 4901823410734665154
x-oss-storage-class: Standard
content-md5: coan2ZZAx6HL20eMyBnUNA==
x-oss-server-time: 13
cf-cache-status: REVALIDATED
expires: Fri, 03 May 2024 06:57:41 GMT
cache-control: public, max-age=691200
accept-ranges: bytes
server: cloudflare
cf-ray: 879c70ba5d1a5694-OSL
X-Firefox-Spdy: h2
|
|
| 4fsale.top/theme/default/assets/empty.png | 104.16.198.133 | 200 OK | 33 kB |
URL GET HTTP/24fsale.top/theme/default/assets/empty.png IP104.16.198.133:443
CertificateIssuerGoogle Trust Services LLC Subject4fsale.top Fingerprint99:95:AC:81:EC:C1:17:72:BF:F9:BF:5B:C3:50:FD:76:8A:8F:A5:71 ValidityWed, 20 Mar 2024 14:14:16 GMT - Tue, 18 Jun 2024 14:14:15 GMT
File typePNG image data, 1020 x 1020, 8-bit/color RGBA, non-interlaced Hash8c5a3ab01981c42df5e31daee2e8b7b0 bbd4399a810d583f3446587692c556859149b98d f3de53bb61298cfd17f183f97dacd2c672b34665cbbe778070232ced85386e1c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /theme/default/assets/empty.png HTTP/1.1
Host: 4fsale.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4fsale.top/
DNT: 1
Connection: keep-alive
Cookie: _fbs_fbp=fb.1.1714028256885.7492626102; oemsaas_global_visit_id=2FC2EA48-442D-A853-75AE-7AEC70BDC452; oemsaas_checkout_visit_id=7A2C1302-D993-CF82-BD75-6F9F0608D4DE; oemsaas_global_visit_session=FBCCCF8D-13DA-72A5-9475-DB84BC2A688A; utm_source=direct; utm_medium=default; order_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1714028256%2C%22expire_time%22%3A1716620256%7D%5D; landing_page=aHR0cHM6Ly80ZnNhbGUudG9wLw%3D%3D; oemsaas_keep_alive=026BD2C8-A5B3-EBCE-69AF-01AC38C87BC5; first_http_referer=null; PHPSESSID=c9a1c87d15d6b8c07cdeaaf4e522fbb7; oemcart_client_user_agent=Mozilla%252F5.0%2520(X11%253B%2520Linux%2520x86_64%253B%2520rv%253A96.0)%2520Gecko%252F20100101%2520Firefox%252F96.0; oemcart_client_pre_url=; oemcart_client_timezone=Etc%252FUTC; oemcart_client_screen_size=1280X1024; oemcart_client_broswer_language=en-US; oemcart_client_viewport_size=1280X1024; oemcart_client_broswer_date_time=2024-04-25%2006%3A57%3A37; _scid=f792f994-aade-4eed-978d-af1934e53545; _scid_r=f792f994-aade-4eed-978d-af1934e53545; googtrans=%2Fauto%2Fen; app_popups_time_type_diy_1860=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:57:41 GMT
content-type: image/png
content-length: 32646
last-modified: Wed, 16 Mar 2022 03:25:53 GMT
etag: "623158c1-7f86"
cf-cache-status: MISS
expires: Thu, 25 Apr 2024 10:57:41 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 879c70ba2966b515-OSL
X-Firefox-Spdy: h2
|
|
| cdn.staticsoe.com/statics/apps/static/recentsale-front/holiday_newyear.png?x-oss-process=image/resize,m_lfit,w_504 | 104.18.169.76 | 200 OK | 64 kB |
URL GET HTTP/2cdn.staticsoe.com/statics/apps/static/recentsale-front/holiday_newyear.png?x-oss-process=image/resize,m_lfit,w_504 IP104.18.169.76:443
CertificateIssuerCloudflare, Inc. Subjectcdn.staticsoe.com Fingerprint81:12:7B:A0:28:A4:6D:E5:44:00:F3:A3:14:8C:B8:2C:42:34:DA:CD ValidityWed, 14 Feb 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typePNG image data, 504 x 152, 8-bit/color RGBA, non-interlaced Hashe6946d9873c2839213d19186612b8b88 0ce6bb5b3edeca3f17bd29bf0493c1f57526d046 a781c8cca6c1112f4c5fcd0d4618c11666c6b4807f33c8a0ecfb379c16785665
GET /statics/apps/static/recentsale-front/holiday_newyear.png?x-oss-process=image/resize,m_lfit,w_504 HTTP/1.1
Host: cdn.staticsoe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4fsale.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:57:42 GMT
content-type: image/png
content-length: 63723
x-oss-request-id: 65B5616D90AF51353611305C
vary: Origin, Accept-Encoding
etag: "BD97868B842F91AEC77E2B6DCA9FDC0B"
last-modified: Mon, 14 Feb 2022 07:59:33 GMT
x-oss-object-type: Normal
x-oss-storage-class: Standard
x-oss-hash-crc64ecma: 493897066906043259
x-oss-server-time: 4
cf-cache-status: REVALIDATED
expires: Fri, 03 May 2024 06:57:42 GMT
cache-control: public, max-age=691200
accept-ranges: bytes
server: cloudflare
cf-ray: 879c70bc2ea45694-OSL
X-Firefox-Spdy: h2
|
|
| cdn.staticsoe.com/uploads/61353/cart/resources/20231213/41a36559b2eda3838897d211d1caf208.jpg?x-oss-process=image/resize,m_lfit,w_1920 | 104.18.169.76 | 200 OK | 378 kB |
URL GET HTTP/2cdn.staticsoe.com/uploads/61353/cart/resources/20231213/41a36559b2eda3838897d211d1caf208.jpg?x-oss-process=image/resize,m_lfit,w_1920 IP104.18.169.76:443
CertificateIssuerCloudflare, Inc. Subjectcdn.staticsoe.com Fingerprint81:12:7B:A0:28:A4:6D:E5:44:00:F3:A3:14:8C:B8:2C:42:34:DA:CD ValidityWed, 14 Feb 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1920x630, components 3 Size378 kB (378251 bytes) Hash6a0a965ef1db1f7ea62451d3210402c5 1acabd6f40aaf77e1aee0f52903284c9d88471ee fb1fb65cb29b892e63e75eb53887bdb425c1b90d9489e3c5a53d6c45eb88c0c0
GET /uploads/61353/cart/resources/20231213/41a36559b2eda3838897d211d1caf208.jpg?x-oss-process=image/resize,m_lfit,w_1920 HTTP/1.1
Host: cdn.staticsoe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4fsale.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:57:42 GMT
content-type: image/jpeg
content-length: 378251
x-oss-request-id: 6629FEE59191FB3631F77781
vary: Origin, Accept-Encoding
etag: "03E7951CA0662D4E79D528B95750EB96"
last-modified: Wed, 13 Dec 2023 10:28:31 GMT
x-oss-object-type: Normal
x-oss-storage-class: Standard
x-oss-server-time: 83
x-oss-hash-crc64ecma: 4566405124103480816
cf-cache-status: MISS
expires: Fri, 03 May 2024 06:57:42 GMT
cache-control: public, max-age=691200
accept-ranges: bytes
server: cloudflare
cf-ray: 879c70bc6eda5694-OSL
X-Firefox-Spdy: h2
|
|
| cdn.staticsoe.com/uploads/61353/cart/resources/20231025/A71F20BD-AED9-0674-3403-9947CD612530.webp | 104.18.169.76 | 200 OK | 132 kB |
URL GET HTTP/2cdn.staticsoe.com/uploads/61353/cart/resources/20231025/A71F20BD-AED9-0674-3403-9947CD612530.webp IP104.18.169.76:443
CertificateIssuerCloudflare, Inc. Subjectcdn.staticsoe.com Fingerprint81:12:7B:A0:28:A4:6D:E5:44:00:F3:A3:14:8C:B8:2C:42:34:DA:CD ValidityWed, 14 Feb 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 1200x1600, Scaling: [none]x[none], YUV color, decoders should clamp Size132 kB (132376 bytes) Hash08f0b9e3744609d1d782389fd52da660 80455c066225f8b0ea763e7345ebd83a4238bc54 16a1d455d9f90c20aa691cf38685ccc6534380123bffe83467b01adb4e95ca20
GET /uploads/61353/cart/resources/20231025/A71F20BD-AED9-0674-3403-9947CD612530.webp HTTP/1.1
Host: cdn.staticsoe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4fsale.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:57:42 GMT
content-type: image/webp
content-length: 132376
x-oss-request-id: 6629FEE6C3F2453236FDE08C
vary: Origin, Accept-Encoding
etag: "08F0B9E3744609D1D782389FD52DA660"
last-modified: Wed, 25 Oct 2023 10:17:24 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 18433192504778825983
x-oss-storage-class: Standard
content-md5: CPC543RGCdHXgjif1S2mYA==
x-oss-server-time: 25
cf-cache-status: MISS
expires: Fri, 03 May 2024 06:57:42 GMT
cache-control: public, max-age=691200
accept-ranges: bytes
server: cloudflare
cf-ray: 879c70bdf8d85694-OSL
X-Firefox-Spdy: h2
|
|
| cdn.staticsoe.com/uploads/61353/cart/resources/20231025/40F538B3-6B9D-8FE5-6F33-5C83F0BF343D.webp | 104.18.169.76 | 200 OK | 187 kB |
URL GET HTTP/2cdn.staticsoe.com/uploads/61353/cart/resources/20231025/40F538B3-6B9D-8FE5-6F33-5C83F0BF343D.webp IP104.18.169.76:443
CertificateIssuerCloudflare, Inc. Subjectcdn.staticsoe.com Fingerprint81:12:7B:A0:28:A4:6D:E5:44:00:F3:A3:14:8C:B8:2C:42:34:DA:CD ValidityWed, 14 Feb 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 1200x1600, Scaling: [none]x[none], YUV color, decoders should clamp Size187 kB (186924 bytes) Hash9172424d1c2dcebe5cf20ae3877d2b0f d059e52458cda0db3f09dddf3ff554523449dcdb d3ed181038889752671e7c3a0a00b952b6fddb039f0eabf73546bc916cd486c9
GET /uploads/61353/cart/resources/20231025/40F538B3-6B9D-8FE5-6F33-5C83F0BF343D.webp HTTP/1.1
Host: cdn.staticsoe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4fsale.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:57:49 GMT
content-type: image/webp
content-length: 186924
x-oss-request-id: 6629FEEC9979C73330DD92E6
vary: Origin, Accept-Encoding
etag: "9172424D1C2DCEBE5CF20AE3877D2B0F"
last-modified: Wed, 25 Oct 2023 10:19:46 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 7150653693612398423
x-oss-storage-class: Standard
content-md5: kXJCTRwtzr5c8grjh30rDw==
x-oss-server-time: 60
cf-cache-status: MISS
expires: Fri, 03 May 2024 06:57:48 GMT
cache-control: public, max-age=691200
accept-ranges: bytes
server: cloudflare
cf-ray: 879c70e398bb5694-OSL
X-Firefox-Spdy: h2
|
|
| translate.googleapis.com/element/log?format=json&hasfast=true&authuser=0 | 142.250.74.170 | 200 OK | 0 B |
URL POST HTTP/3translate.googleapis.com/element/log?format=json&hasfast=true&authuser=0 IP142.250.74.170:443
CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2 ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /element/log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-goog-authuser
Referer: https://4fsale.top/
Origin: https://4fsale.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: https://4fsale.top
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser
content-type: text/plain; charset=UTF-8
date: Thu, 25 Apr 2024 06:57:50 GMT
server: Playlog
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| translate.googleapis.com/element/log?format=json&hasfast=true&authuser=0 | 142.250.74.170 | 200 OK | 131 B |
URL POST HTTP/3translate.googleapis.com/element/log?format=json&hasfast=true&authuser=0 IP142.250.74.170:443
CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2 ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT
Hashca0b7e866005f6774d284b9f438ebfd2 53644f5ee3640189bdb223473ba6a2d46606c556 502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358
POST /element/log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-AuthUser: 0
Content-Type: text/plain;charset=UTF-8
Content-Length: 1192
Origin: https://4fsale.top
DNT: 1
Connection: keep-alive
Referer: https://4fsale.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: https://4fsale.top
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-type: text/plain; charset=UTF-8
content-encoding: gzip
date: Thu, 25 Apr 2024 06:57:50 GMT
server: Playlog
cache-control: private
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cdn.staticsoe.com/uploads/61353/cart/resources/20231025/72CE85FA-367E-DAC2-640C-9FCC690F0ACD.webp | 104.18.169.76 | 200 OK | 98 kB |
URL GET HTTP/2cdn.staticsoe.com/uploads/61353/cart/resources/20231025/72CE85FA-367E-DAC2-640C-9FCC690F0ACD.webp IP104.18.169.76:443
CertificateIssuerCloudflare, Inc. Subjectcdn.staticsoe.com Fingerprint81:12:7B:A0:28:A4:6D:E5:44:00:F3:A3:14:8C:B8:2C:42:34:DA:CD ValidityWed, 14 Feb 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 1200x1600, Scaling: [none]x[none], YUV color, decoders should clamp Hash3a73bb4caa15e3180176cdc5bb525d56 86dd7dcb83b9f1a7da50b8a67e08c952f36946ca 8f12a1f41524d96c8a35426797ccecf5639f2eeda2c727b5dc53baf88fb7c352
GET /uploads/61353/cart/resources/20231025/72CE85FA-367E-DAC2-640C-9FCC690F0ACD.webp HTTP/1.1
Host: cdn.staticsoe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4fsale.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:57:54 GMT
content-type: image/webp
content-length: 98516
x-oss-request-id: 6629FEF276EC4B30337D1993
vary: Origin, Accept-Encoding
etag: "3A73BB4CAA15E3180176CDC5BB525D56"
last-modified: Wed, 25 Oct 2023 10:19:56 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 13542608200541311082
x-oss-storage-class: Standard
content-md5: OnO7TKoV4xgBds3Fu1JdVg==
x-oss-server-time: 17
cf-cache-status: MISS
expires: Fri, 03 May 2024 06:57:54 GMT
cache-control: public, max-age=691200
accept-ranges: bytes
server: cloudflare
cf-ray: 879c71091b655694-OSL
X-Firefox-Spdy: h2
|
|
| cdn.staticsoe.com/uploads/61353/cart/resources/20231025/A9899E73-0A76-CD73-CA2E-DE15CB0F91B8.webp | 104.18.169.76 | | 82 kB |
URL cdn.staticsoe.com/uploads/61353/cart/resources/20231025/A9899E73-0A76-CD73-CA2E-DE15CB0F91B8.webp IP104.18.169.76:0
CertificateIssuerCloudflare, Inc. Subjectcdn.staticsoe.com Fingerprint81:12:7B:A0:28:A4:6D:E5:44:00:F3:A3:14:8C:B8:2C:42:34:DA:CD ValidityWed, 14 Feb 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 1200x1600, Scaling: [none]x[none], YUV color, decoders should clamp Hash3a3bfc9a12d586e6afc2bc59521eb642 23eb22c09ac24baa0b6914b1bb7d4370cdf61b16 159348b823ee0fe3b5e8a0f11916fdb56bdde4b12a82dd2bc0c7f1a6e1b6b56d
GET /uploads/61353/cart/resources/20231025/A9899E73-0A76-CD73-CA2E-DE15CB0F91B8.webp HTTP/1.1
Host: cdn.staticsoe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4fsale.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:58:00 GMT
content-type: image/webp
content-length: 81692
x-oss-request-id: 6629FEF8E2741F393033304E
vary: Origin, Accept-Encoding
etag: "3A3BFC9A12D586E6AFC2BC59521EB642"
last-modified: Wed, 25 Oct 2023 10:19:57 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 10107512397573369056
x-oss-storage-class: Standard
content-md5: Ojv8mhLVhuavwrxZUh62Qg==
x-oss-server-time: 20
cf-cache-status: MISS
expires: Fri, 03 May 2024 06:58:00 GMT
cache-control: public, max-age=691200
accept-ranges: bytes
server: cloudflare
cf-ray: 879c712eaed65694-OSL
X-Firefox-Spdy: h2
|
|
| 4fsale.top/app-api/popups/61353/front/config | 104.16.198.133 | 200 OK | 1.8 kB |
URL GET HTTP/24fsale.top/app-api/popups/61353/front/config IP104.16.198.133:443
CertificateIssuerGoogle Trust Services LLC Subject4fsale.top Fingerprint99:95:AC:81:EC:C1:17:72:BF:F9:BF:5B:C3:50:FD:76:8A:8F:A5:71 ValidityWed, 20 Mar 2024 14:14:16 GMT - Tue, 18 Jun 2024 14:14:15 GMT
File typetroff or preprocessor input, Unicode text, UTF-8 text, with very long lines (1973), with no line terminators Hashc612154e9f77342d294e6bdfed636de6 3d00a2e3be09ce45a68c48c9d1e5421cff978833 e84c954b708f882289f1749222b5f3c985ee2114f8d1fb40244b5f7ecd834839
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /app-api/popups/61353/front/config HTTP/1.1
Host: 4fsale.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4fsale.top/
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: _fbs_fbp=fb.1.1714028256885.7492626102; oemsaas_global_visit_id=2FC2EA48-442D-A853-75AE-7AEC70BDC452; oemsaas_checkout_visit_id=7A2C1302-D993-CF82-BD75-6F9F0608D4DE; oemsaas_global_visit_session=FBCCCF8D-13DA-72A5-9475-DB84BC2A688A; utm_source=direct; utm_medium=default; order_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1714028256%2C%22expire_time%22%3A1716620256%7D%5D; landing_page=aHR0cHM6Ly80ZnNhbGUudG9wLw%3D%3D; oemsaas_keep_alive=026BD2C8-A5B3-EBCE-69AF-01AC38C87BC5; first_http_referer=null; PHPSESSID=c9a1c87d15d6b8c07cdeaaf4e522fbb7; oemcart_client_user_agent=Mozilla%252F5.0%2520(X11%253B%2520Linux%2520x86_64%253B%2520rv%253A96.0)%2520Gecko%252F20100101%2520Firefox%252F96.0; oemcart_client_pre_url=; oemcart_client_timezone=Etc%252FUTC; oemcart_client_screen_size=1280X1024; oemcart_client_broswer_language=en-US; oemcart_client_viewport_size=1280X1024; oemcart_client_broswer_date_time=2024-04-25%2006%3A57%3A37; _scid=f792f994-aade-4eed-978d-af1934e53545; _scid_r=f792f994-aade-4eed-978d-af1934e53545
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:57:39 GMT
content-type: application/json; charset=utf-8
x-trace-id: 40338878-36D7-8F9A-CEBB-764A055764F3
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-max-age: 1800
access-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS
access-control-allow-headers: *
access-control-request-headers: *
access-control-expose-headers: *
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 879c70aa8b03b515-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| 4fsale.top/app-assets/sizechart/61353/index.js?var=1698391181 | 104.16.198.133 | 200 OK | 124 kB |
URL GET HTTP/24fsale.top/app-assets/sizechart/61353/index.js?var=1698391181 IP104.16.198.133:443
CertificateIssuerGoogle Trust Services LLC Subject4fsale.top Fingerprint99:95:AC:81:EC:C1:17:72:BF:F9:BF:5B:C3:50:FD:76:8A:8F:A5:71 ValidityWed, 20 Mar 2024 14:14:16 GMT - Tue, 18 Jun 2024 14:14:15 GMT
Size124 kB (124180 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /app-assets/sizechart/61353/index.js?var=1698391181 HTTP/1.1
Host: 4fsale.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4fsale.top/
DNT: 1
Connection: keep-alive
Cookie: _fbs_fbp=fb.1.1714028256885.7492626102; oemsaas_global_visit_id=2FC2EA48-442D-A853-75AE-7AEC70BDC452; oemsaas_checkout_visit_id=7A2C1302-D993-CF82-BD75-6F9F0608D4DE; oemsaas_global_visit_session=FBCCCF8D-13DA-72A5-9475-DB84BC2A688A; utm_source=direct; utm_medium=default; order_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1714028256%2C%22expire_time%22%3A1716620256%7D%5D; landing_page=aHR0cHM6Ly80ZnNhbGUudG9wLw%3D%3D; oemsaas_keep_alive=026BD2C8-A5B3-EBCE-69AF-01AC38C87BC5; first_http_referer=null; PHPSESSID=c9a1c87d15d6b8c07cdeaaf4e522fbb7; oemcart_client_user_agent=Mozilla%252F5.0%2520(X11%253B%2520Linux%2520x86_64%253B%2520rv%253A96.0)%2520Gecko%252F20100101%2520Firefox%252F96.0; oemcart_client_pre_url=; oemcart_client_timezone=Etc%252FUTC; oemcart_client_screen_size=1280X1024; oemcart_client_broswer_language=en-US; oemcart_client_viewport_size=1280X1024; oemcart_client_broswer_date_time=2024-04-25%2006%3A57%3A37; _scid=f792f994-aade-4eed-978d-af1934e53545; _scid_r=f792f994-aade-4eed-978d-af1934e53545
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:57:38 GMT
content-type: application/javascript
vary: Accept-Encoding, Origin
x-oss-request-id: 6629FEE10C59D4323997FBCD
last-modified: Thu, 25 Apr 2024 01:38:41 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 846760532220788933
x-oss-storage-class: Standard
cache-control: public, max-age=14400
x-oss-ec: 0048-00000113
content-disposition: attachment
x-oss-force-download: true
content-md5: 534petjOetYaGvZ7SAThjA==
x-oss-server-time: 2
content-encoding: gzip
cf-cache-status: MISS
expires: Thu, 25 Apr 2024 10:57:38 GMT
server: cloudflare
cf-ray: 879c70a23b94b515-OSL
X-Firefox-Spdy: h2
|
|
| cdn.staticsoe.com/uploads/0/theme/default/public_assets/public.js?v=71c0438239751db436225f769d15d2bd | 104.18.169.76 | 200 OK | 484 kB |
URL GET HTTP/2cdn.staticsoe.com/uploads/0/theme/default/public_assets/public.js?v=71c0438239751db436225f769d15d2bd IP104.18.169.76:443
CertificateIssuerCloudflare, Inc. Subjectcdn.staticsoe.com Fingerprint81:12:7B:A0:28:A4:6D:E5:44:00:F3:A3:14:8C:B8:2C:42:34:DA:CD ValidityWed, 14 Feb 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
Size484 kB (483790 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/0/theme/default/public_assets/public.js?v=71c0438239751db436225f769d15d2bd HTTP/1.1
Host: cdn.staticsoe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4fsale.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:57:37 GMT
content-type: application/javascript
vary: Accept-Encoding, Origin
x-oss-request-id: 66262C0A1F52473632177FE9
last-modified: Mon, 22 Apr 2024 09:21:07 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 13733871732335455998
x-oss-storage-class: Standard
content-md5: O4yy0ajs8AvErbR17Mypfw==
x-oss-server-time: 1
cf-cache-status: HIT
age: 77425
expires: Fri, 03 May 2024 06:57:37 GMT
cache-control: public, max-age=691200
server: cloudflare
cf-ray: 879c70a13f385694-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg | 216.58.207.227 | 200 OK | 6.2 kB |
URL GET HTTP/3fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg IP216.58.207.227:443
CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeSVG Scalable Vector Graphics image Hasha1a4ffbc52fa4bd18e2f9f7c45ba71fc 0df81f908c859204ae9748c21ad2a4219381b2e4 151e69c94e1f500a46c405df3a0c60043651b22aec7b4ae33d5df3bc9fd82737
GET /s/i/productlogos/translate/v14/24px.svg HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4fsale.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
content-length: 3340
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 21 Apr 2024 18:58:28 GMT
expires: Mon, 21 Apr 2025 18:58:28 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 20 Apr 2022 14:24:23 GMT
content-type: image/svg+xml
vary: Accept-Encoding
age: 302352
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 4fsale.top/app-assets/trusttool/61353/index.js?var=1709621308 | 104.16.198.133 | 200 OK | 823 kB |
URL GET HTTP/24fsale.top/app-assets/trusttool/61353/index.js?var=1709621308 IP104.16.198.133:443
CertificateIssuerGoogle Trust Services LLC Subject4fsale.top Fingerprint99:95:AC:81:EC:C1:17:72:BF:F9:BF:5B:C3:50:FD:76:8A:8F:A5:71 ValidityWed, 20 Mar 2024 14:14:16 GMT - Tue, 18 Jun 2024 14:14:15 GMT
Size823 kB (822736 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /app-assets/trusttool/61353/index.js?var=1709621308 HTTP/1.1
Host: 4fsale.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4fsale.top/
DNT: 1
Connection: keep-alive
Cookie: _fbs_fbp=fb.1.1714028256885.7492626102; oemsaas_global_visit_id=2FC2EA48-442D-A853-75AE-7AEC70BDC452; oemsaas_checkout_visit_id=7A2C1302-D993-CF82-BD75-6F9F0608D4DE; oemsaas_global_visit_session=FBCCCF8D-13DA-72A5-9475-DB84BC2A688A; utm_source=direct; utm_medium=default; order_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1714028256%2C%22expire_time%22%3A1716620256%7D%5D; landing_page=aHR0cHM6Ly80ZnNhbGUudG9wLw%3D%3D; oemsaas_keep_alive=026BD2C8-A5B3-EBCE-69AF-01AC38C87BC5; first_http_referer=null; PHPSESSID=c9a1c87d15d6b8c07cdeaaf4e522fbb7; oemcart_client_user_agent=Mozilla%252F5.0%2520(X11%253B%2520Linux%2520x86_64%253B%2520rv%253A96.0)%2520Gecko%252F20100101%2520Firefox%252F96.0; oemcart_client_pre_url=; oemcart_client_timezone=Etc%252FUTC; oemcart_client_screen_size=1280X1024; oemcart_client_broswer_language=en-US; oemcart_client_viewport_size=1280X1024; oemcart_client_broswer_date_time=2024-04-25%2006%3A57%3A37; _scid=f792f994-aade-4eed-978d-af1934e53545; _scid_r=f792f994-aade-4eed-978d-af1934e53545
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:57:38 GMT
content-type: application/javascript
vary: Accept-Encoding, Origin
x-oss-request-id: 6629FEE17B21233937AD6786
last-modified: Thu, 25 Apr 2024 01:38:41 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 17672541328683194621
x-oss-storage-class: Standard
cache-control: public, max-age=14400
x-oss-ec: 0048-00000113
content-disposition: attachment
x-oss-force-download: true
content-md5: SMna2O0KE0aYe+dtqEhGBA==
x-oss-server-time: 2
content-encoding: gzip
cf-cache-status: MISS
expires: Thu, 25 Apr 2024 10:57:38 GMT
server: cloudflare
cf-ray: 879c70a24ba1b515-OSL
X-Firefox-Spdy: h2
|
|
| 4fsale.top/homeapi/collect | 104.16.198.133 | 200 OK | 9 B |
URL POST HTTP/24fsale.top/homeapi/collect IP104.16.198.133:443
CertificateIssuerGoogle Trust Services LLC Subject4fsale.top Fingerprint99:95:AC:81:EC:C1:17:72:BF:F9:BF:5B:C3:50:FD:76:8A:8F:A5:71 ValidityWed, 20 Mar 2024 14:14:16 GMT - Tue, 18 Jun 2024 14:14:15 GMT
File typeASCII text, with no line terminators Hash311486df619d42e069bcdc41e73f335d b3f9153ae3eef9847a707e36b7f54f989d4a4235 587b05cd8d59f9820d2cf168b07d46b1519d12ee7a2f7062a2490da0a99ccb50
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /homeapi/collect HTTP/1.1
Host: 4fsale.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4fsale.top/
Content-Type: application/json
Content-Length: 910
Origin: https://4fsale.top
DNT: 1
Connection: keep-alive
Cookie: _fbs_fbp=fb.1.1714028256885.7492626102; oemsaas_global_visit_id=2FC2EA48-442D-A853-75AE-7AEC70BDC452; oemsaas_checkout_visit_id=7A2C1302-D993-CF82-BD75-6F9F0608D4DE; oemsaas_global_visit_session=FBCCCF8D-13DA-72A5-9475-DB84BC2A688A; utm_source=direct; utm_medium=default; order_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1714028256%2C%22expire_time%22%3A1716620256%7D%5D; landing_page=aHR0cHM6Ly80ZnNhbGUudG9wLw%3D%3D; oemsaas_keep_alive=026BD2C8-A5B3-EBCE-69AF-01AC38C87BC5; first_http_referer=null; PHPSESSID=c9a1c87d15d6b8c07cdeaaf4e522fbb7; oemcart_client_user_agent=Mozilla%252F5.0%2520(X11%253B%2520Linux%2520x86_64%253B%2520rv%253A96.0)%2520Gecko%252F20100101%2520Firefox%252F96.0; oemcart_client_pre_url=; oemcart_client_timezone=Etc%252FUTC; oemcart_client_screen_size=1280X1024; oemcart_client_broswer_language=en-US; oemcart_client_viewport_size=1280X1024; oemcart_client_broswer_date_time=2024-04-25%2006%3A57%3A37; _scid=f792f994-aade-4eed-978d-af1934e53545; _scid_r=f792f994-aade-4eed-978d-af1934e53545
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:57:39 GMT
content-type: text/html;charset=utf-8
trace_id: 87B0CA63-A008-FB33-37AA-8CEE7DB9B6B2
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 879c70ab0b74b515-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| 4fsale.top/app-assets/countdown/61353/index.js?var=1698305618 | 104.16.198.133 | 200 OK | 125 kB |
URL GET HTTP/24fsale.top/app-assets/countdown/61353/index.js?var=1698305618 IP104.16.198.133:443
CertificateIssuerGoogle Trust Services LLC Subject4fsale.top Fingerprint99:95:AC:81:EC:C1:17:72:BF:F9:BF:5B:C3:50:FD:76:8A:8F:A5:71 ValidityWed, 20 Mar 2024 14:14:16 GMT - Tue, 18 Jun 2024 14:14:15 GMT
Size125 kB (125212 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /app-assets/countdown/61353/index.js?var=1698305618 HTTP/1.1
Host: 4fsale.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4fsale.top/
DNT: 1
Connection: keep-alive
Cookie: _fbs_fbp=fb.1.1714028256885.7492626102; oemsaas_global_visit_id=2FC2EA48-442D-A853-75AE-7AEC70BDC452; oemsaas_checkout_visit_id=7A2C1302-D993-CF82-BD75-6F9F0608D4DE; oemsaas_global_visit_session=FBCCCF8D-13DA-72A5-9475-DB84BC2A688A; utm_source=direct; utm_medium=default; order_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1714028256%2C%22expire_time%22%3A1716620256%7D%5D; landing_page=aHR0cHM6Ly80ZnNhbGUudG9wLw%3D%3D; oemsaas_keep_alive=026BD2C8-A5B3-EBCE-69AF-01AC38C87BC5; first_http_referer=null; PHPSESSID=c9a1c87d15d6b8c07cdeaaf4e522fbb7; oemcart_client_user_agent=Mozilla%252F5.0%2520(X11%253B%2520Linux%2520x86_64%253B%2520rv%253A96.0)%2520Gecko%252F20100101%2520Firefox%252F96.0; oemcart_client_pre_url=; oemcart_client_timezone=Etc%252FUTC; oemcart_client_screen_size=1280X1024; oemcart_client_broswer_language=en-US; oemcart_client_viewport_size=1280X1024; oemcart_client_broswer_date_time=2024-04-25%2006%3A57%3A37; _scid=f792f994-aade-4eed-978d-af1934e53545; _scid_r=f792f994-aade-4eed-978d-af1934e53545
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:57:38 GMT
content-type: application/javascript
vary: Accept-Encoding, Origin
x-oss-request-id: 6629FEE16E30D334357327DF
last-modified: Thu, 25 Apr 2024 01:38:35 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 444046100647807038
x-oss-storage-class: Standard
cache-control: public, max-age=14400
x-oss-ec: 0048-00000113
content-disposition: attachment
x-oss-force-download: true
content-md5: 2UbWmteHZlW2Hy5tu8MYeg==
x-oss-server-time: 1
content-encoding: gzip
cf-cache-status: MISS
expires: Thu, 25 Apr 2024 10:57:38 GMT
server: cloudflare
cf-ray: 879c70a22b88b515-OSL
X-Firefox-Spdy: h2
|
|
| 4fsale.top/app-api/recentproductbrowsetool/61353/config | 104.16.198.133 | 200 OK | 685 B |
URL GET HTTP/24fsale.top/app-api/recentproductbrowsetool/61353/config IP104.16.198.133:443
CertificateIssuerGoogle Trust Services LLC Subject4fsale.top Fingerprint99:95:AC:81:EC:C1:17:72:BF:F9:BF:5B:C3:50:FD:76:8A:8F:A5:71 ValidityWed, 20 Mar 2024 14:14:16 GMT - Tue, 18 Jun 2024 14:14:15 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (771), with no line terminators Hashcaeb239da438db8e0a19a90d52de09b4 10225fef7b7e84222c9bf2d4d81dc792ffdaa845 788575d5f9ef027b5cf508b015d2b6364476baf4e7d7b5497ba68a220c5dc17e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /app-api/recentproductbrowsetool/61353/config HTTP/1.1
Host: 4fsale.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4fsale.top/
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: _fbs_fbp=fb.1.1714028256885.7492626102; oemsaas_global_visit_id=2FC2EA48-442D-A853-75AE-7AEC70BDC452; oemsaas_checkout_visit_id=7A2C1302-D993-CF82-BD75-6F9F0608D4DE; oemsaas_global_visit_session=FBCCCF8D-13DA-72A5-9475-DB84BC2A688A; utm_source=direct; utm_medium=default; order_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1714028256%2C%22expire_time%22%3A1716620256%7D%5D; landing_page=aHR0cHM6Ly80ZnNhbGUudG9wLw%3D%3D; oemsaas_keep_alive=026BD2C8-A5B3-EBCE-69AF-01AC38C87BC5; first_http_referer=null; PHPSESSID=c9a1c87d15d6b8c07cdeaaf4e522fbb7; oemcart_client_user_agent=Mozilla%252F5.0%2520(X11%253B%2520Linux%2520x86_64%253B%2520rv%253A96.0)%2520Gecko%252F20100101%2520Firefox%252F96.0; oemcart_client_pre_url=; oemcart_client_timezone=Etc%252FUTC; oemcart_client_screen_size=1280X1024; oemcart_client_broswer_language=en-US; oemcart_client_viewport_size=1280X1024; oemcart_client_broswer_date_time=2024-04-25%2006%3A57%3A37; _scid=f792f994-aade-4eed-978d-af1934e53545; _scid_r=f792f994-aade-4eed-978d-af1934e53545
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:57:38 GMT
content-type: application/json; charset=utf-8
x-trace-id: 143BFDB8-62DB-E922-B548-4FDCBD17751F
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-max-age: 1800
access-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS
access-control-allow-headers: *
access-control-request-headers: *
access-control-expose-headers: *
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 879c70a6df44b515-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| 4fsale.top/app-assets/recentsale/61353/index.js?var=1698305700 | 104.16.198.133 | 200 OK | 88 kB |
URL GET HTTP/24fsale.top/app-assets/recentsale/61353/index.js?var=1698305700 IP104.16.198.133:443
CertificateIssuerGoogle Trust Services LLC Subject4fsale.top Fingerprint99:95:AC:81:EC:C1:17:72:BF:F9:BF:5B:C3:50:FD:76:8A:8F:A5:71 ValidityWed, 20 Mar 2024 14:14:16 GMT - Tue, 18 Jun 2024 14:14:15 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /app-assets/recentsale/61353/index.js?var=1698305700 HTTP/1.1
Host: 4fsale.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4fsale.top/
DNT: 1
Connection: keep-alive
Cookie: _fbs_fbp=fb.1.1714028256885.7492626102; oemsaas_global_visit_id=2FC2EA48-442D-A853-75AE-7AEC70BDC452; oemsaas_checkout_visit_id=7A2C1302-D993-CF82-BD75-6F9F0608D4DE; oemsaas_global_visit_session=FBCCCF8D-13DA-72A5-9475-DB84BC2A688A; utm_source=direct; utm_medium=default; order_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1714028256%2C%22expire_time%22%3A1716620256%7D%5D; landing_page=aHR0cHM6Ly80ZnNhbGUudG9wLw%3D%3D; oemsaas_keep_alive=026BD2C8-A5B3-EBCE-69AF-01AC38C87BC5; first_http_referer=null; PHPSESSID=c9a1c87d15d6b8c07cdeaaf4e522fbb7; oemcart_client_user_agent=Mozilla%252F5.0%2520(X11%253B%2520Linux%2520x86_64%253B%2520rv%253A96.0)%2520Gecko%252F20100101%2520Firefox%252F96.0; oemcart_client_pre_url=; oemcart_client_timezone=Etc%252FUTC; oemcart_client_screen_size=1280X1024; oemcart_client_broswer_language=en-US; oemcart_client_viewport_size=1280X1024; oemcart_client_broswer_date_time=2024-04-25%2006%3A57%3A37; _scid=f792f994-aade-4eed-978d-af1934e53545; _scid_r=f792f994-aade-4eed-978d-af1934e53545
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:57:38 GMT
content-type: application/javascript
vary: Accept-Encoding, Origin
x-oss-request-id: 6629FEE11E19E93435F2A392
last-modified: Thu, 25 Apr 2024 01:38:40 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 11569477866631844379
x-oss-storage-class: Standard
cache-control: public, max-age=14400
x-oss-ec: 0048-00000113
content-disposition: attachment
x-oss-force-download: true
content-md5: b6TI3BtE5HFCj+GsWzJIjg==
x-oss-server-time: 1
content-encoding: gzip
cf-cache-status: MISS
expires: Thu, 25 Apr 2024 10:57:38 GMT
server: cloudflare
cf-ray: 879c70a23b8cb515-OSL
X-Firefox-Spdy: h2
|
|
| 4fsale.top/homeapi/collect | 104.16.198.133 | 200 OK | 9 B |
URL POST HTTP/24fsale.top/homeapi/collect IP104.16.198.133:443
CertificateIssuerGoogle Trust Services LLC Subject4fsale.top Fingerprint99:95:AC:81:EC:C1:17:72:BF:F9:BF:5B:C3:50:FD:76:8A:8F:A5:71 ValidityWed, 20 Mar 2024 14:14:16 GMT - Tue, 18 Jun 2024 14:14:15 GMT
File typeASCII text, with no line terminators Hash311486df619d42e069bcdc41e73f335d b3f9153ae3eef9847a707e36b7f54f989d4a4235 587b05cd8d59f9820d2cf168b07d46b1519d12ee7a2f7062a2490da0a99ccb50
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /homeapi/collect HTTP/1.1
Host: 4fsale.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4fsale.top/
Content-Type: application/json
Content-Length: 587
Origin: https://4fsale.top
DNT: 1
Connection: keep-alive
Cookie: _fbs_fbp=fb.1.1714028256885.7492626102; oemsaas_global_visit_id=2FC2EA48-442D-A853-75AE-7AEC70BDC452; oemsaas_checkout_visit_id=7A2C1302-D993-CF82-BD75-6F9F0608D4DE; oemsaas_global_visit_session=FBCCCF8D-13DA-72A5-9475-DB84BC2A688A; utm_source=direct; utm_medium=default; order_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1714028256%2C%22expire_time%22%3A1716620256%7D%5D; landing_page=aHR0cHM6Ly80ZnNhbGUudG9wLw%3D%3D; oemsaas_keep_alive=026BD2C8-A5B3-EBCE-69AF-01AC38C87BC5; first_http_referer=null; PHPSESSID=c9a1c87d15d6b8c07cdeaaf4e522fbb7; oemcart_client_user_agent=Mozilla%252F5.0%2520(X11%253B%2520Linux%2520x86_64%253B%2520rv%253A96.0)%2520Gecko%252F20100101%2520Firefox%252F96.0; oemcart_client_pre_url=; oemcart_client_timezone=Etc%252FUTC; oemcart_client_screen_size=1280X1024; oemcart_client_broswer_language=en-US; oemcart_client_viewport_size=1280X1024; oemcart_client_broswer_date_time=2024-04-25%2006%3A57%3A37; _scid=f792f994-aade-4eed-978d-af1934e53545; _scid_r=f792f994-aade-4eed-978d-af1934e53545; googtrans=%2Fauto%2Fen; app_popups_time_type_diy_1860=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:57:40 GMT
content-type: text/html;charset=utf-8
trace_id: A01B7239-7094-CE88-D79A-254AC6043BBB
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 879c70b23a96b515-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| cdn.staticsoe.com/uploads/0/theme/default/assets/theme.css?v=66eda0dd6672bd051feb0d39b9f9197e | 104.18.169.76 | 200 OK | 110 kB |
URL GET HTTP/2cdn.staticsoe.com/uploads/0/theme/default/assets/theme.css?v=66eda0dd6672bd051feb0d39b9f9197e IP104.18.169.76:443
CertificateIssuerCloudflare, Inc. Subjectcdn.staticsoe.com Fingerprint81:12:7B:A0:28:A4:6D:E5:44:00:F3:A3:14:8C:B8:2C:42:34:DA:CD ValidityWed, 14 Feb 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
Size110 kB (110217 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/0/theme/default/assets/theme.css?v=66eda0dd6672bd051feb0d39b9f9197e HTTP/1.1
Host: cdn.staticsoe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4fsale.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:57:37 GMT
content-type: text/css
vary: Accept-Encoding, Origin
x-oss-request-id: 6627664C9979C736368EA5D8
last-modified: Mon, 22 Apr 2024 09:21:07 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 3603105492076268374
x-oss-storage-class: Standard
content-md5: Zu2g3WZyvQUf6w05ufkZfg==
x-oss-server-time: 4
cf-cache-status: HIT
age: 44771
expires: Fri, 03 May 2024 06:57:37 GMT
cache-control: public, max-age=691200
server: cloudflare
cf-ray: 879c70a13f3b5694-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| 4fsale.top/app-api/gift/61353/front/config | 104.16.198.133 | 200 OK | 826 B |
URL GET HTTP/24fsale.top/app-api/gift/61353/front/config IP104.16.198.133:443
CertificateIssuerGoogle Trust Services LLC Subject4fsale.top Fingerprint99:95:AC:81:EC:C1:17:72:BF:F9:BF:5B:C3:50:FD:76:8A:8F:A5:71 ValidityWed, 20 Mar 2024 14:14:16 GMT - Tue, 18 Jun 2024 14:14:15 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (906), with no line terminators Hash9578f082fc310c0452158611f8ec4d93 13fe68999e126c6a8728820b0d507a82e06fbe79 f87b42eba3badf09d34ecb25e4813972918e1d558d3705eb6e4b0e5193971a80
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /app-api/gift/61353/front/config HTTP/1.1
Host: 4fsale.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4fsale.top/
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: _fbs_fbp=fb.1.1714028256885.7492626102; oemsaas_global_visit_id=2FC2EA48-442D-A853-75AE-7AEC70BDC452; oemsaas_checkout_visit_id=7A2C1302-D993-CF82-BD75-6F9F0608D4DE; oemsaas_global_visit_session=FBCCCF8D-13DA-72A5-9475-DB84BC2A688A; utm_source=direct; utm_medium=default; order_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1714028256%2C%22expire_time%22%3A1716620256%7D%5D; landing_page=aHR0cHM6Ly80ZnNhbGUudG9wLw%3D%3D; oemsaas_keep_alive=026BD2C8-A5B3-EBCE-69AF-01AC38C87BC5; first_http_referer=null; PHPSESSID=c9a1c87d15d6b8c07cdeaaf4e522fbb7; oemcart_client_user_agent=Mozilla%252F5.0%2520(X11%253B%2520Linux%2520x86_64%253B%2520rv%253A96.0)%2520Gecko%252F20100101%2520Firefox%252F96.0; oemcart_client_pre_url=; oemcart_client_timezone=Etc%252FUTC; oemcart_client_screen_size=1280X1024; oemcart_client_broswer_language=en-US; oemcart_client_viewport_size=1280X1024; oemcart_client_broswer_date_time=2024-04-25%2006%3A57%3A37; _scid=f792f994-aade-4eed-978d-af1934e53545; _scid_r=f792f994-aade-4eed-978d-af1934e53545; googtrans=%2Fauto%2Fen; app_popups_time_type_diy_1860=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:57:39 GMT
content-type: application/json; charset=utf-8
x-trace-id: E98BD46E-2C5F-CA7A-7C96-D41BB09D1C75
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-max-age: 1800
access-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS
access-control-allow-headers: *
access-control-request-headers: *
access-control-expose-headers: *
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 879c70abec6bb515-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| 4fsale.top/app-api/popups/61353/front/count/1860?&type=exposure_times | 104.16.198.133 | 200 OK | 145 B |
URL GET HTTP/24fsale.top/app-api/popups/61353/front/count/1860?&type=exposure_times IP104.16.198.133:443
CertificateIssuerGoogle Trust Services LLC Subject4fsale.top Fingerprint99:95:AC:81:EC:C1:17:72:BF:F9:BF:5B:C3:50:FD:76:8A:8F:A5:71 ValidityWed, 20 Mar 2024 14:14:16 GMT - Tue, 18 Jun 2024 14:14:15 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hashb47c1227968cfc006c6661b53deef86a b6aa3cc27a5dd5254e9b043345abfe461960f982 7efe926474bff7940c24a1b26546f7789d27309936ffeeb72c59b80ba1ab89d6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /app-api/popups/61353/front/count/1860?&type=exposure_times HTTP/1.1
Host: 4fsale.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4fsale.top/
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: _fbs_fbp=fb.1.1714028256885.7492626102; oemsaas_global_visit_id=2FC2EA48-442D-A853-75AE-7AEC70BDC452; oemsaas_checkout_visit_id=7A2C1302-D993-CF82-BD75-6F9F0608D4DE; oemsaas_global_visit_session=FBCCCF8D-13DA-72A5-9475-DB84BC2A688A; utm_source=direct; utm_medium=default; order_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1714028256%2C%22expire_time%22%3A1716620256%7D%5D; landing_page=aHR0cHM6Ly80ZnNhbGUudG9wLw%3D%3D; oemsaas_keep_alive=026BD2C8-A5B3-EBCE-69AF-01AC38C87BC5; first_http_referer=null; PHPSESSID=c9a1c87d15d6b8c07cdeaaf4e522fbb7; oemcart_client_user_agent=Mozilla%252F5.0%2520(X11%253B%2520Linux%2520x86_64%253B%2520rv%253A96.0)%2520Gecko%252F20100101%2520Firefox%252F96.0; oemcart_client_pre_url=; oemcart_client_timezone=Etc%252FUTC; oemcart_client_screen_size=1280X1024; oemcart_client_broswer_language=en-US; oemcart_client_viewport_size=1280X1024; oemcart_client_broswer_date_time=2024-04-25%2006%3A57%3A37; _scid=f792f994-aade-4eed-978d-af1934e53545; _scid_r=f792f994-aade-4eed-978d-af1934e53545; googtrans=%2Fauto%2Fen; app_popups_time_type_diy_1860=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:57:39 GMT
content-type: application/json; charset=utf-8
x-trace-id: 3D6D865D-E747-7628-2F51-F1AA7D7EA31E
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-max-age: 1800
access-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS
access-control-allow-headers: *
access-control-request-headers: *
access-control-expose-headers: *
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 879c70abfc70b515-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| 4fsale.top/app-assets/searchbox/61353/index.js?var=1703576531 | 104.16.198.133 | 200 OK | 40 kB |
URL GET HTTP/24fsale.top/app-assets/searchbox/61353/index.js?var=1703576531 IP104.16.198.133:443
CertificateIssuerGoogle Trust Services LLC Subject4fsale.top Fingerprint99:95:AC:81:EC:C1:17:72:BF:F9:BF:5B:C3:50:FD:76:8A:8F:A5:71 ValidityWed, 20 Mar 2024 14:14:16 GMT - Tue, 18 Jun 2024 14:14:15 GMT
File typeJavaScript source, ASCII text, with very long lines (40301), with no line terminators Hashae222bfdd9b78e6e568bf0dde60725ec e4c9ba390c97efbab18af907e17f2671e55a638c 6bac07d5fedb0465bd545b1b039c08aacdac4a0b53521793ba33b6aaead0744c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /app-assets/searchbox/61353/index.js?var=1703576531 HTTP/1.1
Host: 4fsale.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4fsale.top/
DNT: 1
Connection: keep-alive
Cookie: _fbs_fbp=fb.1.1714028256885.7492626102; oemsaas_global_visit_id=2FC2EA48-442D-A853-75AE-7AEC70BDC452; oemsaas_checkout_visit_id=7A2C1302-D993-CF82-BD75-6F9F0608D4DE; oemsaas_global_visit_session=FBCCCF8D-13DA-72A5-9475-DB84BC2A688A; utm_source=direct; utm_medium=default; order_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1714028256%2C%22expire_time%22%3A1716620256%7D%5D; landing_page=aHR0cHM6Ly80ZnNhbGUudG9wLw%3D%3D; oemsaas_keep_alive=026BD2C8-A5B3-EBCE-69AF-01AC38C87BC5; first_http_referer=null; PHPSESSID=c9a1c87d15d6b8c07cdeaaf4e522fbb7; oemcart_client_user_agent=Mozilla%252F5.0%2520(X11%253B%2520Linux%2520x86_64%253B%2520rv%253A96.0)%2520Gecko%252F20100101%2520Firefox%252F96.0; oemcart_client_pre_url=; oemcart_client_timezone=Etc%252FUTC; oemcart_client_screen_size=1280X1024; oemcart_client_broswer_language=en-US; oemcart_client_viewport_size=1280X1024; oemcart_client_broswer_date_time=2024-04-25%2006%3A57%3A37; _scid=f792f994-aade-4eed-978d-af1934e53545; _scid_r=f792f994-aade-4eed-978d-af1934e53545
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:57:38 GMT
content-type: application/javascript
vary: Accept-Encoding, Origin
x-oss-request-id: 6629FEE1882AAA303213A454
last-modified: Thu, 25 Apr 2024 01:38:40 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 12146041782393094799
x-oss-storage-class: Standard
cache-control: public, max-age=14400
x-oss-ec: 0048-00000113
content-disposition: attachment
x-oss-force-download: true
content-md5: riIr/dm3jm5Wi/Dd5gcl7A==
x-oss-server-time: 3
content-encoding: gzip
cf-cache-status: MISS
expires: Thu, 25 Apr 2024 10:57:38 GMT
server: cloudflare
cf-ray: 879c70a24b9bb515-OSL
X-Firefox-Spdy: h2
|
|
| 4fsale.top/app-api/recentproductbrowsetool/61353/products?visit_id=4331d51e1fd66b1b163ac8eb52bc65f1 | 104.16.198.133 | 200 OK | 86 B |
URL GET HTTP/24fsale.top/app-api/recentproductbrowsetool/61353/products?visit_id=4331d51e1fd66b1b163ac8eb52bc65f1 IP104.16.198.133:443
CertificateIssuerGoogle Trust Services LLC Subject4fsale.top Fingerprint99:95:AC:81:EC:C1:17:72:BF:F9:BF:5B:C3:50:FD:76:8A:8F:A5:71 ValidityWed, 20 Mar 2024 14:14:16 GMT - Tue, 18 Jun 2024 14:14:15 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash0591fd73caa00f023c022b909c82d477 59ec2862b6e403b3883b2616eafcf34b0931dd3a f769917e785223822e86412579e64c97a9c3e0b8e03d717a2306b4d1f35dad6a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /app-api/recentproductbrowsetool/61353/products?visit_id=4331d51e1fd66b1b163ac8eb52bc65f1 HTTP/1.1
Host: 4fsale.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4fsale.top/
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: _fbs_fbp=fb.1.1714028256885.7492626102; oemsaas_global_visit_id=2FC2EA48-442D-A853-75AE-7AEC70BDC452; oemsaas_checkout_visit_id=7A2C1302-D993-CF82-BD75-6F9F0608D4DE; oemsaas_global_visit_session=FBCCCF8D-13DA-72A5-9475-DB84BC2A688A; utm_source=direct; utm_medium=default; order_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1714028256%2C%22expire_time%22%3A1716620256%7D%5D; landing_page=aHR0cHM6Ly80ZnNhbGUudG9wLw%3D%3D; oemsaas_keep_alive=026BD2C8-A5B3-EBCE-69AF-01AC38C87BC5; first_http_referer=null; PHPSESSID=c9a1c87d15d6b8c07cdeaaf4e522fbb7; oemcart_client_user_agent=Mozilla%252F5.0%2520(X11%253B%2520Linux%2520x86_64%253B%2520rv%253A96.0)%2520Gecko%252F20100101%2520Firefox%252F96.0; oemcart_client_pre_url=; oemcart_client_timezone=Etc%252FUTC; oemcart_client_screen_size=1280X1024; oemcart_client_broswer_language=en-US; oemcart_client_viewport_size=1280X1024; oemcart_client_broswer_date_time=2024-04-25%2006%3A57%3A37; _scid=f792f994-aade-4eed-978d-af1934e53545; _scid_r=f792f994-aade-4eed-978d-af1934e53545
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:57:38 GMT
content-type: application/json; charset=utf-8
x-trace-id: 6F62EBB2-D3D7-48D6-A468-F5371C6D75FB
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-max-age: 1800
access-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS
access-control-allow-headers: *
access-control-request-headers: *
access-control-expose-headers: *
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 879c70a848b8b515-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| at.alicdn.com/t/font_3322510_mbcsazk8hbh.woff2?t=1649751168305 | 47.246.44.251 | 200 OK | 2.2 kB |
URL GET HTTP/2at.alicdn.com/t/font_3322510_mbcsazk8hbh.woff2?t=1649751168305 IP47.246.44.251:443 ASN#24429 Zhejiang Taobao Network Co.,Ltd
CertificateIssuerGlobalSign nv-sa Subject*.tbcdn.cn Fingerprint29:04:BE:E6:49:30:F7:DC:C0:BE:56:8F:B4:AC:24:9B:50:1A:F7:E2 ValidityTue, 26 Dec 2023 03:36:04 GMT - Tue, 30 Jul 2024 02:26:11 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 2156, version 1.0 Hasha36453e7c0949c8d34e3cdbf3839c58d d618c2eb83361a5b3d899728ef1c353f23588852 c7607c52d51b6aba39419b7783ad7f2c8f82024a3718f3dd953bf68efaa88af9
GET /t/font_3322510_mbcsazk8hbh.woff2?t=1649751168305 HTTP/1.1
Host: at.alicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://4fsale.top
DNT: 1
Connection: keep-alive
Referer: https://4fsale.top/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: font/woff2
content-length: 2156
date: Thu, 25 Apr 2024 06:57:39 GMT
x-oss-request-id: 6629FEE3FC091B3133CADC6E
vary: Origin
accept-ranges: bytes
etag: "A36453E7C0949C8D34E3CDBF3839C58D"
last-modified: Tue, 12 Apr 2022 08:12:48 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 8986299596544116107
x-oss-storage-class: Standard
cache-control: max-age=63072000
content-md5: o2RT58CUnI00482/ODnFjQ==
x-oss-server-time: 1
ali-swift-global-savetime: 1714028259
via: cache23.l2de2[411,411,200-0,M], cache26.l2de2[422,0], ens-cache6.se2[451,451,200-0,M], ens-cache4.se2[453,0]
x-cache: MISS TCP_MISS dirn:-2:-2
x-swift-savetime: Thu, 25 Apr 2024 06:57:39 GMT
x-swift-cachetime: 31104000
access-control-allow-origin: *
timing-allow-origin: *
eagleid: 2ff62c9817140282590175797e
X-Firefox-Spdy: h2
|
|
| 4fsale.top/homeapi/diyoffers/gift/products | 104.16.198.133 | 200 OK | 14 kB |
URL GET HTTP/24fsale.top/homeapi/diyoffers/gift/products IP104.16.198.133:443
CertificateIssuerGoogle Trust Services LLC Subject4fsale.top Fingerprint99:95:AC:81:EC:C1:17:72:BF:F9:BF:5B:C3:50:FD:76:8A:8F:A5:71 ValidityWed, 20 Mar 2024 14:14:16 GMT - Tue, 18 Jun 2024 14:14:15 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /homeapi/diyoffers/gift/products HTTP/1.1
Host: 4fsale.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4fsale.top/
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: _fbs_fbp=fb.1.1714028256885.7492626102; oemsaas_global_visit_id=2FC2EA48-442D-A853-75AE-7AEC70BDC452; oemsaas_checkout_visit_id=7A2C1302-D993-CF82-BD75-6F9F0608D4DE; oemsaas_global_visit_session=FBCCCF8D-13DA-72A5-9475-DB84BC2A688A; utm_source=direct; utm_medium=default; order_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1714028256%2C%22expire_time%22%3A1716620256%7D%5D; landing_page=aHR0cHM6Ly80ZnNhbGUudG9wLw%3D%3D; oemsaas_keep_alive=026BD2C8-A5B3-EBCE-69AF-01AC38C87BC5; first_http_referer=null; PHPSESSID=c9a1c87d15d6b8c07cdeaaf4e522fbb7; oemcart_client_user_agent=Mozilla%252F5.0%2520(X11%253B%2520Linux%2520x86_64%253B%2520rv%253A96.0)%2520Gecko%252F20100101%2520Firefox%252F96.0; oemcart_client_pre_url=; oemcart_client_timezone=Etc%252FUTC; oemcart_client_screen_size=1280X1024; oemcart_client_broswer_language=en-US; oemcart_client_viewport_size=1280X1024; oemcart_client_broswer_date_time=2024-04-25%2006%3A57%3A37; _scid=f792f994-aade-4eed-978d-af1934e53545; _scid_r=f792f994-aade-4eed-978d-af1934e53545
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:57:39 GMT
content-type: application/json; charset=utf-8
x-trace-id: C6184EAF-3ECE-F6E8-E34E-28DD20521061
execution-time: 0.0263710022
set-cookie: PHPSESSID=c9a1c87d15d6b8c07cdeaaf4e522fbb7; path=/
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 879c70aa7ae3b515-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| 4fsale.top/app-assets/virtualtrack/61353/index.js?var=1698305978 | 104.16.198.133 | 200 OK | 121 kB |
URL GET HTTP/24fsale.top/app-assets/virtualtrack/61353/index.js?var=1698305978 IP104.16.198.133:443
CertificateIssuerGoogle Trust Services LLC Subject4fsale.top Fingerprint99:95:AC:81:EC:C1:17:72:BF:F9:BF:5B:C3:50:FD:76:8A:8F:A5:71 ValidityWed, 20 Mar 2024 14:14:16 GMT - Tue, 18 Jun 2024 14:14:15 GMT
Size121 kB (121006 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /app-assets/virtualtrack/61353/index.js?var=1698305978 HTTP/1.1
Host: 4fsale.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4fsale.top/
DNT: 1
Connection: keep-alive
Cookie: _fbs_fbp=fb.1.1714028256885.7492626102; oemsaas_global_visit_id=2FC2EA48-442D-A853-75AE-7AEC70BDC452; oemsaas_checkout_visit_id=7A2C1302-D993-CF82-BD75-6F9F0608D4DE; oemsaas_global_visit_session=FBCCCF8D-13DA-72A5-9475-DB84BC2A688A; utm_source=direct; utm_medium=default; order_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1714028256%2C%22expire_time%22%3A1716620256%7D%5D; landing_page=aHR0cHM6Ly80ZnNhbGUudG9wLw%3D%3D; oemsaas_keep_alive=026BD2C8-A5B3-EBCE-69AF-01AC38C87BC5; first_http_referer=null; PHPSESSID=c9a1c87d15d6b8c07cdeaaf4e522fbb7; oemcart_client_user_agent=Mozilla%252F5.0%2520(X11%253B%2520Linux%2520x86_64%253B%2520rv%253A96.0)%2520Gecko%252F20100101%2520Firefox%252F96.0; oemcart_client_pre_url=; oemcart_client_timezone=Etc%252FUTC; oemcart_client_screen_size=1280X1024; oemcart_client_broswer_language=en-US; oemcart_client_viewport_size=1280X1024; oemcart_client_broswer_date_time=2024-04-25%2006%3A57%3A37; _scid=f792f994-aade-4eed-978d-af1934e53545; _scid_r=f792f994-aade-4eed-978d-af1934e53545
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:57:38 GMT
content-type: application/javascript
vary: Accept-Encoding, Origin
x-oss-request-id: 6629FEE122CBEE35359F5283
last-modified: Thu, 25 Apr 2024 01:38:41 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 8293871840685103027
x-oss-storage-class: Standard
cache-control: public, max-age=14400
x-oss-ec: 0048-00000113
content-disposition: attachment
x-oss-force-download: true
content-md5: PupCRLEcHbMjolBnpIbmnw==
x-oss-server-time: 1
content-encoding: gzip
cf-cache-status: MISS
expires: Thu, 25 Apr 2024 10:57:38 GMT
server: cloudflare
cf-ray: 879c70a23b91b515-OSL
X-Firefox-Spdy: h2
|
|
| 4fsale.top/app-assets/gift/61353/index.js?var=1702029258 | 104.16.198.133 | 200 OK | 149 kB |
URL GET HTTP/24fsale.top/app-assets/gift/61353/index.js?var=1702029258 IP104.16.198.133:443
CertificateIssuerGoogle Trust Services LLC Subject4fsale.top Fingerprint99:95:AC:81:EC:C1:17:72:BF:F9:BF:5B:C3:50:FD:76:8A:8F:A5:71 ValidityWed, 20 Mar 2024 14:14:16 GMT - Tue, 18 Jun 2024 14:14:15 GMT
Size149 kB (148884 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /app-assets/gift/61353/index.js?var=1702029258 HTTP/1.1
Host: 4fsale.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4fsale.top/
DNT: 1
Connection: keep-alive
Cookie: _fbs_fbp=fb.1.1714028256885.7492626102; oemsaas_global_visit_id=2FC2EA48-442D-A853-75AE-7AEC70BDC452; oemsaas_checkout_visit_id=7A2C1302-D993-CF82-BD75-6F9F0608D4DE; oemsaas_global_visit_session=FBCCCF8D-13DA-72A5-9475-DB84BC2A688A; utm_source=direct; utm_medium=default; order_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1714028256%2C%22expire_time%22%3A1716620256%7D%5D; landing_page=aHR0cHM6Ly80ZnNhbGUudG9wLw%3D%3D; oemsaas_keep_alive=026BD2C8-A5B3-EBCE-69AF-01AC38C87BC5; first_http_referer=null; PHPSESSID=c9a1c87d15d6b8c07cdeaaf4e522fbb7; oemcart_client_user_agent=Mozilla%252F5.0%2520(X11%253B%2520Linux%2520x86_64%253B%2520rv%253A96.0)%2520Gecko%252F20100101%2520Firefox%252F96.0; oemcart_client_pre_url=; oemcart_client_timezone=Etc%252FUTC; oemcart_client_screen_size=1280X1024; oemcart_client_broswer_language=en-US; oemcart_client_viewport_size=1280X1024; oemcart_client_broswer_date_time=2024-04-25%2006%3A57%3A37; _scid=f792f994-aade-4eed-978d-af1934e53545; _scid_r=f792f994-aade-4eed-978d-af1934e53545
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:57:38 GMT
content-type: application/javascript
vary: Accept-Encoding, Origin
x-oss-request-id: 6629FEE15D3AB2313807ADAC
last-modified: Thu, 25 Apr 2024 01:38:37 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 3167851874788054397
x-oss-storage-class: Standard
cache-control: public, max-age=14400
x-oss-ec: 0048-00000113
content-disposition: attachment
x-oss-force-download: true
content-md5: SiB6lfH19piSiGu9hn1Bvg==
x-oss-server-time: 1
content-encoding: gzip
cf-cache-status: MISS
expires: Thu, 25 Apr 2024 10:57:38 GMT
server: cloudflare
cf-ray: 879c70a23b95b515-OSL
X-Firefox-Spdy: h2
|
|
| 4fsale.top/app-api/recentsale/61353/info | 104.16.198.133 | 200 OK | 6.6 kB |
URL GET HTTP/24fsale.top/app-api/recentsale/61353/info IP104.16.198.133:443
CertificateIssuerGoogle Trust Services LLC Subject4fsale.top Fingerprint99:95:AC:81:EC:C1:17:72:BF:F9:BF:5B:C3:50:FD:76:8A:8F:A5:71 ValidityWed, 20 Mar 2024 14:14:16 GMT - Tue, 18 Jun 2024 14:14:15 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (6744), with no line terminators Hash62ac8563be52a325a9b15d1ac4ece5eb 2e0310c7d6c7d52e933b1cace4a5cf37ef49af11 b607257eea1b3fc463b363c4c5d48d9b55fc57d1229fd9d47c4535d3e69d2c81
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /app-api/recentsale/61353/info HTTP/1.1
Host: 4fsale.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4fsale.top/
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: _fbs_fbp=fb.1.1714028256885.7492626102; oemsaas_global_visit_id=2FC2EA48-442D-A853-75AE-7AEC70BDC452; oemsaas_checkout_visit_id=7A2C1302-D993-CF82-BD75-6F9F0608D4DE; oemsaas_global_visit_session=FBCCCF8D-13DA-72A5-9475-DB84BC2A688A; utm_source=direct; utm_medium=default; order_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1714028256%2C%22expire_time%22%3A1716620256%7D%5D; landing_page=aHR0cHM6Ly80ZnNhbGUudG9wLw%3D%3D; oemsaas_keep_alive=026BD2C8-A5B3-EBCE-69AF-01AC38C87BC5; first_http_referer=null; PHPSESSID=c9a1c87d15d6b8c07cdeaaf4e522fbb7; oemcart_client_user_agent=Mozilla%252F5.0%2520(X11%253B%2520Linux%2520x86_64%253B%2520rv%253A96.0)%2520Gecko%252F20100101%2520Firefox%252F96.0; oemcart_client_pre_url=; oemcart_client_timezone=Etc%252FUTC; oemcart_client_screen_size=1280X1024; oemcart_client_broswer_language=en-US; oemcart_client_viewport_size=1280X1024; oemcart_client_broswer_date_time=2024-04-25%2006%3A57%3A37; _scid=f792f994-aade-4eed-978d-af1934e53545; _scid_r=f792f994-aade-4eed-978d-af1934e53545
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:57:38 GMT
content-type: application/json; charset=utf-8
x-trace-id: 0E9B52FE-AD23-460E-AABA-07DB50132690
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-max-age: 1800
access-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS
access-control-allow-headers: *
access-control-request-headers: *
access-control-expose-headers: *
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 879c70a5fe92b515-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| 4fsale.top/app-api/trusttool/61353/config?&route=index/index | 104.16.198.133 | 200 OK | 3.3 kB |
URL GET HTTP/24fsale.top/app-api/trusttool/61353/config?&route=index/index IP104.16.198.133:443
CertificateIssuerGoogle Trust Services LLC Subject4fsale.top Fingerprint99:95:AC:81:EC:C1:17:72:BF:F9:BF:5B:C3:50:FD:76:8A:8F:A5:71 ValidityWed, 20 Mar 2024 14:14:16 GMT - Tue, 18 Jun 2024 14:14:15 GMT
File typetroff or preprocessor input, Unicode text, UTF-8 text, with very long lines (3718), with no line terminators Hash3a8d2b50dd7a65366047bd1a85b88ba8 27a9c2edf3ba38b821c57debfbd83b6b23e722a6 ac66c6a92a42e85ae7900e00bda9fb1b2d72349a19525c35ddebeabbe1ff6e2e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /app-api/trusttool/61353/config?&route=index/index HTTP/1.1
Host: 4fsale.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4fsale.top/
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: _fbs_fbp=fb.1.1714028256885.7492626102; oemsaas_global_visit_id=2FC2EA48-442D-A853-75AE-7AEC70BDC452; oemsaas_checkout_visit_id=7A2C1302-D993-CF82-BD75-6F9F0608D4DE; oemsaas_global_visit_session=FBCCCF8D-13DA-72A5-9475-DB84BC2A688A; utm_source=direct; utm_medium=default; order_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1714028256%2C%22expire_time%22%3A1716620256%7D%5D; landing_page=aHR0cHM6Ly80ZnNhbGUudG9wLw%3D%3D; oemsaas_keep_alive=026BD2C8-A5B3-EBCE-69AF-01AC38C87BC5; first_http_referer=null; PHPSESSID=c9a1c87d15d6b8c07cdeaaf4e522fbb7; oemcart_client_user_agent=Mozilla%252F5.0%2520(X11%253B%2520Linux%2520x86_64%253B%2520rv%253A96.0)%2520Gecko%252F20100101%2520Firefox%252F96.0; oemcart_client_pre_url=; oemcart_client_timezone=Etc%252FUTC; oemcart_client_screen_size=1280X1024; oemcart_client_broswer_language=en-US; oemcart_client_viewport_size=1280X1024; oemcart_client_broswer_date_time=2024-04-25%2006%3A57%3A37; _scid=f792f994-aade-4eed-978d-af1934e53545; _scid_r=f792f994-aade-4eed-978d-af1934e53545
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:57:38 GMT
content-type: application/json; charset=utf-8
x-trace-id: 93C0B9B1-F6E4-1FB0-97EE-5D11DA4E0067
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-max-age: 1800
access-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS
access-control-allow-headers: *
access-control-request-headers: *
access-control-expose-headers: *
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 879c70a8f953b515-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| 4fsale.top/homeapi/collect | 104.16.198.133 | 200 OK | 9 B |
URL POST HTTP/24fsale.top/homeapi/collect IP104.16.198.133:443
CertificateIssuerGoogle Trust Services LLC Subject4fsale.top Fingerprint99:95:AC:81:EC:C1:17:72:BF:F9:BF:5B:C3:50:FD:76:8A:8F:A5:71 ValidityWed, 20 Mar 2024 14:14:16 GMT - Tue, 18 Jun 2024 14:14:15 GMT
File typeASCII text, with no line terminators Hash311486df619d42e069bcdc41e73f335d b3f9153ae3eef9847a707e36b7f54f989d4a4235 587b05cd8d59f9820d2cf168b07d46b1519d12ee7a2f7062a2490da0a99ccb50
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /homeapi/collect HTTP/1.1
Host: 4fsale.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4fsale.top/
Content-Type: application/json
Content-Length: 411
Origin: https://4fsale.top
DNT: 1
Connection: keep-alive
Cookie: _fbs_fbp=fb.1.1714028256885.7492626102; oemsaas_global_visit_id=2FC2EA48-442D-A853-75AE-7AEC70BDC452; oemsaas_checkout_visit_id=7A2C1302-D993-CF82-BD75-6F9F0608D4DE; oemsaas_global_visit_session=FBCCCF8D-13DA-72A5-9475-DB84BC2A688A; utm_source=direct; utm_medium=default; order_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1714028256%2C%22expire_time%22%3A1716620256%7D%5D; landing_page=aHR0cHM6Ly80ZnNhbGUudG9wLw%3D%3D; oemsaas_keep_alive=026BD2C8-A5B3-EBCE-69AF-01AC38C87BC5; first_http_referer=null; PHPSESSID=c9a1c87d15d6b8c07cdeaaf4e522fbb7; oemcart_client_user_agent=Mozilla%252F5.0%2520(X11%253B%2520Linux%2520x86_64%253B%2520rv%253A96.0)%2520Gecko%252F20100101%2520Firefox%252F96.0; oemcart_client_pre_url=; oemcart_client_timezone=Etc%252FUTC; oemcart_client_screen_size=1280X1024; oemcart_client_broswer_language=en-US; oemcart_client_viewport_size=1280X1024; oemcart_client_broswer_date_time=2024-04-25%2006%3A57%3A37
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:57:37 GMT
content-type: text/html;charset=utf-8
trace_id: D68A699E-43CD-86A3-3600-3F54D2299315
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 879c70a07a37b515-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| 4fsale.top/app-api/googletranslate/61353/front/config | 104.16.198.133 | 200 OK | 724 B |
URL GET HTTP/24fsale.top/app-api/googletranslate/61353/front/config IP104.16.198.133:443
CertificateIssuerGoogle Trust Services LLC Subject4fsale.top Fingerprint99:95:AC:81:EC:C1:17:72:BF:F9:BF:5B:C3:50:FD:76:8A:8F:A5:71 ValidityWed, 20 Mar 2024 14:14:16 GMT - Tue, 18 Jun 2024 14:14:15 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (968), with no line terminators Hashca00f738643d5a128f9ccec6d532ba5a 19ddd6476db21d3e1e3e826e635d3764382d8483 ccaf3698cf06f4480b49e81b1de4626c248f7841d4dfb20f4afa43354dcf6a56
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /app-api/googletranslate/61353/front/config HTTP/1.1
Host: 4fsale.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4fsale.top/
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: _fbs_fbp=fb.1.1714028256885.7492626102; oemsaas_global_visit_id=2FC2EA48-442D-A853-75AE-7AEC70BDC452; oemsaas_checkout_visit_id=7A2C1302-D993-CF82-BD75-6F9F0608D4DE; oemsaas_global_visit_session=FBCCCF8D-13DA-72A5-9475-DB84BC2A688A; utm_source=direct; utm_medium=default; order_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1714028256%2C%22expire_time%22%3A1716620256%7D%5D; landing_page=aHR0cHM6Ly80ZnNhbGUudG9wLw%3D%3D; oemsaas_keep_alive=026BD2C8-A5B3-EBCE-69AF-01AC38C87BC5; first_http_referer=null; PHPSESSID=c9a1c87d15d6b8c07cdeaaf4e522fbb7; oemcart_client_user_agent=Mozilla%252F5.0%2520(X11%253B%2520Linux%2520x86_64%253B%2520rv%253A96.0)%2520Gecko%252F20100101%2520Firefox%252F96.0; oemcart_client_pre_url=; oemcart_client_timezone=Etc%252FUTC; oemcart_client_screen_size=1280X1024; oemcart_client_broswer_language=en-US; oemcart_client_viewport_size=1280X1024; oemcart_client_broswer_date_time=2024-04-25%2006%3A57%3A37; _scid=f792f994-aade-4eed-978d-af1934e53545; _scid_r=f792f994-aade-4eed-978d-af1934e53545
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:57:39 GMT
content-type: application/json; charset=utf-8
x-trace-id: B1B562D7-0FC6-3515-B2BA-48828C399682
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-max-age: 1800
access-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS
access-control-allow-headers: *
access-control-request-headers: *
access-control-expose-headers: *
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 879c70aa7ae1b515-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| cdn.staticsoe.com/uploads/0/theme/default/assets/vendor.css?v=8bf6ee9d0cb37ac6af2ef2619c479347 | 104.18.169.76 | 200 OK | 74 kB |
URL GET HTTP/2cdn.staticsoe.com/uploads/0/theme/default/assets/vendor.css?v=8bf6ee9d0cb37ac6af2ef2619c479347 IP104.18.169.76:443
CertificateIssuerCloudflare, Inc. Subjectcdn.staticsoe.com Fingerprint81:12:7B:A0:28:A4:6D:E5:44:00:F3:A3:14:8C:B8:2C:42:34:DA:CD ValidityWed, 14 Feb 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeASCII text, with very long lines (35771) Hash8bf6ee9d0cb37ac6af2ef2619c479347 69bc61bbd878435fcb91abbc97908573ff7f631d b40b0219d705f3ef33e5b2bea78e988251e4c00dfa9fa63e58c85cfa1fc8ff8d
GET /uploads/0/theme/default/assets/vendor.css?v=8bf6ee9d0cb37ac6af2ef2619c479347 HTTP/1.1
Host: cdn.staticsoe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4fsale.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:57:37 GMT
content-type: text/css
vary: Accept-Encoding, Origin
x-oss-request-id: 66265255D31A233139524B4C
last-modified: Mon, 22 Apr 2024 09:21:07 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 18289564630321224492
x-oss-storage-class: Standard
content-md5: i/bunQyzesavLvJhnEeTRw==
x-oss-server-time: 1
cf-cache-status: HIT
age: 44771
expires: Fri, 03 May 2024 06:57:37 GMT
cache-control: public, max-age=691200
server: cloudflare
cf-ray: 879c70a14f475694-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| 4fsale.top/app-api/searchbox/61353/front/config | 104.16.198.133 | 200 OK | 112 B |
URL GET HTTP/24fsale.top/app-api/searchbox/61353/front/config IP104.16.198.133:443
CertificateIssuerGoogle Trust Services LLC Subject4fsale.top Fingerprint99:95:AC:81:EC:C1:17:72:BF:F9:BF:5B:C3:50:FD:76:8A:8F:A5:71 ValidityWed, 20 Mar 2024 14:14:16 GMT - Tue, 18 Jun 2024 14:14:15 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash6971156bec7a4c031da6ae3f65f20ed3 13046a58994a0318f976683884d88bad0e9996a8 194e31f5edd7a36762f6393e288fc4e274b92d02ecbba9c4ec0f29a4875d2de4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /app-api/searchbox/61353/front/config HTTP/1.1
Host: 4fsale.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4fsale.top/
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: _fbs_fbp=fb.1.1714028256885.7492626102; oemsaas_global_visit_id=2FC2EA48-442D-A853-75AE-7AEC70BDC452; oemsaas_checkout_visit_id=7A2C1302-D993-CF82-BD75-6F9F0608D4DE; oemsaas_global_visit_session=FBCCCF8D-13DA-72A5-9475-DB84BC2A688A; utm_source=direct; utm_medium=default; order_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1714028256%2C%22expire_time%22%3A1716620256%7D%5D; landing_page=aHR0cHM6Ly80ZnNhbGUudG9wLw%3D%3D; oemsaas_keep_alive=026BD2C8-A5B3-EBCE-69AF-01AC38C87BC5; first_http_referer=null; PHPSESSID=c9a1c87d15d6b8c07cdeaaf4e522fbb7; oemcart_client_user_agent=Mozilla%252F5.0%2520(X11%253B%2520Linux%2520x86_64%253B%2520rv%253A96.0)%2520Gecko%252F20100101%2520Firefox%252F96.0; oemcart_client_pre_url=; oemcart_client_timezone=Etc%252FUTC; oemcart_client_screen_size=1280X1024; oemcart_client_broswer_language=en-US; oemcart_client_viewport_size=1280X1024; oemcart_client_broswer_date_time=2024-04-25%2006%3A57%3A37; _scid=f792f994-aade-4eed-978d-af1934e53545; _scid_r=f792f994-aade-4eed-978d-af1934e53545
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:57:38 GMT
content-type: application/json; charset=utf-8
x-trace-id: 93F28492-B4DA-7367-FD0A-D1D1E168F735
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-max-age: 1800
access-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS
access-control-allow-headers: *
access-control-request-headers: *
access-control-expose-headers: *
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 879c70a6ef4ab515-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
0.0.0.0