| salenzvs.live/static/market/img/payment.png |  188.114.96.1 | 200 OK | 15 kB |
URL GET HTTP/3salenzvs.live/static/market/img/payment.png IP188.114.96.1:443
Requested byhttps://salenzvs.live/product_details/85585263.html CertificateIssuerLet's Encrypt Subjectsalenzvs.live FingerprintC4:93:74:89:D7:54:43:B0:B2:39:98:89:7A:4C:0B:29:5E:EE:B7:66 ValidityTue, 02 Apr 2024 03:14:40 GMT - Mon, 01 Jul 2024 03:14:39 GMT
File typePNG image data, 342 x 26, 8-bit/color RGBA, non-interlaced Hashd9e27afb8d07e73a5d78c58219db8284 2c8e0b0821ae555b66a6d9ad9d3f3a97d8164f99 1567d764b3ee71f11f52d807789d9a970c60dd195b39f2b295d476308d76aeb3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/market/img/payment.png HTTP/1.1
Host: salenzvs.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://salenzvs.live/product_details/85585263.html
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6Ilh4WDBRUUxVV1RVc0cyRmVmaTQ3TWc9PSIsInZhbHVlIjoiRk9UTm5aSXFJR0R5L1ZXMzNkM3FiWDVoVEl3UzdHZ0tjTnM5QytMbDI0YklwU0pEbjdGSEVkQ1E2OFk0WmJyTGt3RzFtakdYQzVjTWY3a1c5cStiSGVzclVQc2tXV29ZZ0lpZndqUWJnRFlkUHpyUjlCbmFxNWV0R3NSckF5bXoiLCJtYWMiOiJhMDdhMjA3ZGRiNDcwOTQ3NTE2NDNmNWEwZTkzMzVjOGY5NTY4ZTdhOTNkNjA5Zjg0NGZjZDA0ZTI2NDA5NzQzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjdVVjlxZXVYU2hzekRJQ2ViQTJrRFE9PSIsInZhbHVlIjoiV3ZLQXJLcXFVQjBnaXIrTWZmVytVcGRpcHM0Z2t6T0RhUWJNck1BbGtBeUd6NGl1SkxUZUZiMy9URmRUOWRRM2M2dHd0Sm45RDQzbmg1NTYxZlRZanBUV0R1N0krMmZGVjdnenlTTlg1YWxzbEVLZGF0LzVUdHRLUXBHMXJHTW0iLCJtYWMiOiI5MDk2OTVkM2VhZThjYTcwMzkzOTMzYzViNDI2NDNiNTcwNDdiM2ZjZDA3OTdmZWMwZDk5NTFlMDY5MjVmMDU5IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 23 Apr 2024 20:49:42 GMT
content-type: image/png
content-length: 14874
last-modified: Thu, 14 Mar 2024 02:59:07 GMT
etag: "3a1a-613961329bc31"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5539
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mdoXt8DcobpS6Ss2KGN%2BCXFdUPaLXSI737elGccnk550aAUC8s5n9IUCTaImUmCAVc4z6y%2BI8PJ1SirM%2Bo807JWbdZzzwD66fJpPuzcpLmp4XBNKFb0wmXEJ2deMxPTv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8790b8c18ff9569b-OSL
alt-svc: h3=":443"; ma=86400
|
|
| salenzvs.live/static/logo.png | 188.114.96.1 | 200 OK | 5.9 kB |
URL GET HTTP/3salenzvs.live/static/logo.png IP188.114.96.1:443
Requested byhttps://salenzvs.live/product_details/85585263.html CertificateIssuerLet's Encrypt Subjectsalenzvs.live FingerprintC4:93:74:89:D7:54:43:B0:B2:39:98:89:7A:4C:0B:29:5E:EE:B7:66 ValidityTue, 02 Apr 2024 03:14:40 GMT - Mon, 01 Jul 2024 03:14:39 GMT
File typePNG image data, 115 x 41, 8-bit/color RGBA, non-interlaced Hash9740baf71f9fd51a3dc86430f5f49ea2 4617137861adc2341b3377817bf728c4c87e8b37 9e7bdb3c28f7bdd912a7b3f96918bac061ed5f64216c59fc265a83d023f66952
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/logo.png HTTP/1.1
Host: salenzvs.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://salenzvs.live/product_details/85585263.html
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6Ilh4WDBRUUxVV1RVc0cyRmVmaTQ3TWc9PSIsInZhbHVlIjoiRk9UTm5aSXFJR0R5L1ZXMzNkM3FiWDVoVEl3UzdHZ0tjTnM5QytMbDI0YklwU0pEbjdGSEVkQ1E2OFk0WmJyTGt3RzFtakdYQzVjTWY3a1c5cStiSGVzclVQc2tXV29ZZ0lpZndqUWJnRFlkUHpyUjlCbmFxNWV0R3NSckF5bXoiLCJtYWMiOiJhMDdhMjA3ZGRiNDcwOTQ3NTE2NDNmNWEwZTkzMzVjOGY5NTY4ZTdhOTNkNjA5Zjg0NGZjZDA0ZTI2NDA5NzQzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjdVVjlxZXVYU2hzekRJQ2ViQTJrRFE9PSIsInZhbHVlIjoiV3ZLQXJLcXFVQjBnaXIrTWZmVytVcGRpcHM0Z2t6T0RhUWJNck1BbGtBeUd6NGl1SkxUZUZiMy9URmRUOWRRM2M2dHd0Sm45RDQzbmg1NTYxZlRZanBUV0R1N0krMmZGVjdnenlTTlg1YWxzbEVLZGF0LzVUdHRLUXBHMXJHTW0iLCJtYWMiOiI5MDk2OTVkM2VhZThjYTcwMzkzOTMzYzViNDI2NDNiNTcwNDdiM2ZjZDA3OTdmZWMwZDk5NTFlMDY5MjVmMDU5IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 23 Apr 2024 20:49:42 GMT
content-type: image/png
content-length: 5946
last-modified: Thu, 14 Mar 2024 02:59:07 GMT
etag: "173a-613961327d7d0"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5539
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BY15nhhhMes7fDTmYHxZA5Pi0NokIMUNlJD7teQe8QwUQ2kI2A9pIQ4ouNXzQNk72wAATm5rilhQmPh9qRc0xAlfSFL53jIUgZcTtYxSwvRaxK9zptoipyV7dSs5G3fW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8790b8c18ff6569b-OSL
alt-svc: h3=":443"; ma=86400
|
|
| cdnjs.cloudflare.com/ajax/libs/vant/2.12.48/index.css |  104.17.24.14 | 200 OK | 38 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/vant/2.12.48/index.css IP104.17.24.14:443
Requested byhttps://salenzvs.live/product_details/85585263.html CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hash9a547188fa485f8ca9b2cc7d6d2524ef 7893335159a1f637eb24cd05aaba96ac156c7f65 897e513fc70a4e1759ceb06ed3c9348d036b36b724dc60d815f9f3124de6f433
GET /ajax/libs/vant/2.12.48/index.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 23 Apr 2024 20:49:42 GMT
content-type: text/css; charset=utf-8
content-length: 38108
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "62b69136-94dc"
last-modified: Sat, 25 Jun 2022 04:38:14 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1191140
expires: Sun, 13 Apr 2025 20:49:42 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CV5yEZ0llMEJzNgUkwVhvncfo7K2aU5unJcx7eaJv7Y%2BCAl%2FaxphKHOftIqIGr0I0xElLjyzqEbAgnf6KBhT0UazHfjv6EE%2B2PQEiq64BdxrGMOfmhdx5ELksD20OOgSiI5fTTan"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8790b8c1bcf7712b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/vue-resource/1.5.3/vue-resource.min.js | 104.17.24.14 | 200 OK | 4.9 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/vue-resource/1.5.3/vue-resource.min.js IP104.17.24.14:443
Requested byhttps://salenzvs.live/product_details/85585263.html CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (14957) Hash5f4a59735ca9517d0478f395439bd517 f820c08cf114da8ec451e8eedc0da51dfcba5e02 ff5c4da48c495fd0e611aec47b2986097c0351d5e1a527ab1ea64085dcdcdbe9
GET /ajax/libs/vue-resource/1.5.3/vue-resource.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 23 Apr 2024 20:49:42 GMT
content-type: application/javascript; charset=utf-8
content-length: 4866
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "60c785b9-1302"
last-modified: Mon, 14 Jun 2021 16:37:13 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 702065
expires: Sun, 13 Apr 2025 20:49:42 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AelRSU5E654Tx6SmdXiSVuPRKd2xp%2F%2F1pbwovSA%2FrhbuDapV8eQUu%2FWw0qIOEC%2BNhYNMpi%2BrZbwTNz9OUlQA8KUtL%2BQbQezk1yETGbLEzLSPx00UQ%2BWqzPbTXfYqRFnc%2FZ15snoG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8790b8c1cd03712b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/Swiper/8.3.2/swiper-bundle.min.css | 104.17.24.14 | 200 OK | 3.9 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/Swiper/8.3.2/swiper-bundle.min.css IP104.17.24.14:443
Requested byhttps://salenzvs.live/product_details/85585263.html CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeASCII text, with very long lines (16213) Hash951eae8c8a442c2940c54d180301ed41 771518669a370d915adf0d207f2a22092a768cd1 4359643e1b6350bffd6e16d543603ea7b393855957e792ac7f9178a81ed0b14d
GET /ajax/libs/Swiper/8.3.2/swiper-bundle.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 23 Apr 2024 20:49:42 GMT
content-type: text/css; charset=utf-8
content-length: 3945
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "62dffbc4-f69"
last-modified: Tue, 26 Jul 2022 14:35:48 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1115458
expires: Sun, 13 Apr 2025 20:49:42 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4X4wNCgIAXopgTMMg7PN1U6U7A2mJmteaaOqXXUaHZZh6K%2B9yESF5MR0NB1O25QBQ9dTdJ05oMsNa737iNQYEen6%2FYn3kQ7s35c4Tf6fPTF41myCxu19dV%2Fwx7CKhnJlDvR5CS7o"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8790b8c1cd08712b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/vant/2.12.48/vant.min.js | 104.17.24.14 | 200 OK | 68 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/vant/2.12.48/vant.min.js IP104.17.24.14:443
Requested byhttps://salenzvs.live/product_details/85585263.html CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (57307) Hash0292da744fb4f768ae77370f868a674e 6dbafd633d187d11e2ef0a9a47044fd5646c70fb 068b71488c3a0d9ccf95e76a72a93678f9baf45786e87e0b2dc8f1be25f72468
GET /ajax/libs/vant/2.12.48/vant.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 23 Apr 2024 20:49:42 GMT
content-type: application/javascript; charset=utf-8
content-length: 67811
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "62b69136-108e3"
last-modified: Sat, 25 Jun 2022 04:38:14 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1133621
expires: Sun, 13 Apr 2025 20:49:42 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HIH8iUHkLre3OGmhd3HRtJ%2Fl7Q7PlAuohKL8LdlfZ0LbHbFLOpjHRVD956UBWomSwTjCjBXkjDpJ%2FgPA65Slj6C4%2FH7xY6pWwfmXQT5y4PHZqrSRIZF5bxzjE4wZ45jahgxSKwDT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8790b8c1cd05712b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/Swiper/8.3.2/swiper-bundle.js | 104.17.24.14 | 200 OK | 50 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/Swiper/8.3.2/swiper-bundle.js IP104.17.24.14:443
Requested byhttps://salenzvs.live/product_details/85585263.html CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text Hashde581e420bf52d70e353080a13094ea8 7e727d99fea8c31c2f2e3173105d585ee3289d31 4eb89fcf77b0f8b3bb92ffae01f6a2773d836e9b15201337de8fe87e7e5c7fa5
GET /ajax/libs/Swiper/8.3.2/swiper-bundle.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 23 Apr 2024 20:49:42 GMT
content-type: application/javascript; charset=utf-8
content-length: 49876
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "62dffbc4-c2d4"
last-modified: Tue, 26 Jul 2022 14:35:48 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 8267741
expires: Sun, 13 Apr 2025 20:49:42 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=otj%2B8Sbga1Ht%2BgC0HAHUU6GbRpsIO0M%2Bm%2FwCCwLf9axB3EwvSLgwjJIhx%2Fb8BSavOenW4cue4PAPMXfhFelD2U51nO%2Ff9DQ%2FkBkufV2%2F%2BhZv7oJ1LrKd2tWE5rlSahFMGJpT3gHD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8790b8c1cd09712b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| salenzvs.live/static/mall/css/font/ecicons.woff2?v=4.7.0 | 188.114.96.1 | 200 OK | 88 kB |
URL GET HTTP/3salenzvs.live/static/mall/css/font/ecicons.woff2?v=4.7.0 IP188.114.96.1:443
Requested byhttps://salenzvs.live/product_details/85585263.html CertificateIssuerLet's Encrypt Subjectsalenzvs.live FingerprintC4:93:74:89:D7:54:43:B0:B2:39:98:89:7A:4C:0B:29:5E:EE:B7:66 ValidityTue, 02 Apr 2024 03:14:40 GMT - Mon, 01 Jul 2024 03:14:39 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 77160, version 4.459 Hashb3c3f10e45b664548ae60468d5253395 7240ce63904c0089ceb858fb2eb0b1952cd4c53b fc9041cc370ccd5d1d76eca7670fd99cf9597fea0383bcb077f4f6790c7b4001
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/mall/css/font/ecicons.woff2?v=4.7.0 HTTP/1.1
Host: salenzvs.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://salenzvs.live/static/mall/css/ecicons.min.css
Cookie: XSRF-TOKEN=eyJpdiI6Ilh4WDBRUUxVV1RVc0cyRmVmaTQ3TWc9PSIsInZhbHVlIjoiRk9UTm5aSXFJR0R5L1ZXMzNkM3FiWDVoVEl3UzdHZ0tjTnM5QytMbDI0YklwU0pEbjdGSEVkQ1E2OFk0WmJyTGt3RzFtakdYQzVjTWY3a1c5cStiSGVzclVQc2tXV29ZZ0lpZndqUWJnRFlkUHpyUjlCbmFxNWV0R3NSckF5bXoiLCJtYWMiOiJhMDdhMjA3ZGRiNDcwOTQ3NTE2NDNmNWEwZTkzMzVjOGY5NTY4ZTdhOTNkNjA5Zjg0NGZjZDA0ZTI2NDA5NzQzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjdVVjlxZXVYU2hzekRJQ2ViQTJrRFE9PSIsInZhbHVlIjoiV3ZLQXJLcXFVQjBnaXIrTWZmVytVcGRpcHM0Z2t6T0RhUWJNck1BbGtBeUd6NGl1SkxUZUZiMy9URmRUOWRRM2M2dHd0Sm45RDQzbmg1NTYxZlRZanBUV0R1N0krMmZGVjdnenlTTlg1YWxzbEVLZGF0LzVUdHRLUXBHMXJHTW0iLCJtYWMiOiI5MDk2OTVkM2VhZThjYTcwMzkzOTMzYzViNDI2NDNiNTcwNDdiM2ZjZDA3OTdmZWMwZDk5NTFlMDY5MjVmMDU5IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 23 Apr 2024 20:49:43 GMT
content-type: font/woff2
last-modified: Thu, 14 Mar 2024 02:59:07 GMT
etag: W/"12d68-6139613294319-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 3432
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8gs5Upaq7htQGsXTYQSdq7eZd%2Bnf6z9g4pZF4lMhxERQjzG0bGIIp0AF9sNRzp2W%2BDhmGp9YzPK4jHZIB2NIlXheYDtJ0je3QXyeNOMib5h%2BN%2FfhedFFft9COnUKCG4l"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8790b8c4fb82569b-OSL
alt-svc: h3=":443"; ma=86400
|
|
| salenzvs.live/static/mall/css/bg-4.css | 188.114.96.1 | 200 OK | 139 kB |
URL GET HTTP/3salenzvs.live/static/mall/css/bg-4.css IP188.114.96.1:443
Requested byhttps://salenzvs.live/product_details/85585263.html CertificateIssuerLet's Encrypt Subjectsalenzvs.live FingerprintC4:93:74:89:D7:54:43:B0:B2:39:98:89:7A:4C:0B:29:5E:EE:B7:66 ValidityTue, 02 Apr 2024 03:14:40 GMT - Mon, 01 Jul 2024 03:14:39 GMT
Size139 kB (138951 bytes) Hashddd5868b8bc8895f74c8448a702ebb68 2bab173d02433fea076b802c46ee3b4f53751657 bb41701246e353c366eec1e0feae6871d1f056749f5055302be15fbe42ed126a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/mall/css/bg-4.css HTTP/1.1
Host: salenzvs.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://salenzvs.live/product_details/85585263.html
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6Ilh4WDBRUUxVV1RVc0cyRmVmaTQ3TWc9PSIsInZhbHVlIjoiRk9UTm5aSXFJR0R5L1ZXMzNkM3FiWDVoVEl3UzdHZ0tjTnM5QytMbDI0YklwU0pEbjdGSEVkQ1E2OFk0WmJyTGt3RzFtakdYQzVjTWY3a1c5cStiSGVzclVQc2tXV29ZZ0lpZndqUWJnRFlkUHpyUjlCbmFxNWV0R3NSckF5bXoiLCJtYWMiOiJhMDdhMjA3ZGRiNDcwOTQ3NTE2NDNmNWEwZTkzMzVjOGY5NTY4ZTdhOTNkNjA5Zjg0NGZjZDA0ZTI2NDA5NzQzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjdVVjlxZXVYU2hzekRJQ2ViQTJrRFE9PSIsInZhbHVlIjoiV3ZLQXJLcXFVQjBnaXIrTWZmVytVcGRpcHM0Z2t6T0RhUWJNck1BbGtBeUd6NGl1SkxUZUZiMy9URmRUOWRRM2M2dHd0Sm45RDQzbmg1NTYxZlRZanBUV0R1N0krMmZGVjdnenlTTlg1YWxzbEVLZGF0LzVUdHRLUXBHMXJHTW0iLCJtYWMiOiI5MDk2OTVkM2VhZThjYTcwMzkzOTMzYzViNDI2NDNiNTcwNDdiM2ZjZDA3OTdmZWMwZDk5NTFlMDY5MjVmMDU5IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 23 Apr 2024 20:49:42 GMT
content-type: text/css
last-modified: Thu, 14 Mar 2024 02:59:07 GMT
etag: W/"1c4-613961328e171-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 5539
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=81yOFbsEqTq8qk6Ls8BGP5GKsRQvtvMn2ARRluFMce51qKQ8mKx44S2HOCunj2450Gb%2FLQEybMQjxnhrD%2BuLVMrEJ21Wb%2FV3La9vfAdtyCFxzurT1%2F2USGEqK12HMhnK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8790b8c16fb8569b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| salenzvs.live/static/mall/css/ecicons.min.css | 188.114.96.1 | 200 OK | 74 kB |
URL GET HTTP/3salenzvs.live/static/mall/css/ecicons.min.css IP188.114.96.1:443
Requested byhttps://salenzvs.live/product_details/85585263.html CertificateIssuerLet's Encrypt Subjectsalenzvs.live FingerprintC4:93:74:89:D7:54:43:B0:B2:39:98:89:7A:4C:0B:29:5E:EE:B7:66 ValidityTue, 02 Apr 2024 03:14:40 GMT - Mon, 01 Jul 2024 03:14:39 GMT
Hashabf739a4f700786a4e2d6abf4c81e3a0 aafb0578ed47df30cc871bc161db5f7d7cd6d444 9eef72c0a2fc38e6190244cfed729e9b9667529b47eabe2f446373d8958a968c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/mall/css/ecicons.min.css HTTP/1.1
Host: salenzvs.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://salenzvs.live/product_details/85585263.html
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6Ilh4WDBRUUxVV1RVc0cyRmVmaTQ3TWc9PSIsInZhbHVlIjoiRk9UTm5aSXFJR0R5L1ZXMzNkM3FiWDVoVEl3UzdHZ0tjTnM5QytMbDI0YklwU0pEbjdGSEVkQ1E2OFk0WmJyTGt3RzFtakdYQzVjTWY3a1c5cStiSGVzclVQc2tXV29ZZ0lpZndqUWJnRFlkUHpyUjlCbmFxNWV0R3NSckF5bXoiLCJtYWMiOiJhMDdhMjA3ZGRiNDcwOTQ3NTE2NDNmNWEwZTkzMzVjOGY5NTY4ZTdhOTNkNjA5Zjg0NGZjZDA0ZTI2NDA5NzQzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjdVVjlxZXVYU2hzekRJQ2ViQTJrRFE9PSIsInZhbHVlIjoiV3ZLQXJLcXFVQjBnaXIrTWZmVytVcGRpcHM0Z2t6T0RhUWJNck1BbGtBeUd6NGl1SkxUZUZiMy9URmRUOWRRM2M2dHd0Sm45RDQzbmg1NTYxZlRZanBUV0R1N0krMmZGVjdnenlTTlg1YWxzbEVLZGF0LzVUdHRLUXBHMXJHTW0iLCJtYWMiOiI5MDk2OTVkM2VhZThjYTcwMzkzOTMzYzViNDI2NDNiNTcwNDdiM2ZjZDA3OTdmZWMwZDk5NTFlMDY5MjVmMDU5IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 23 Apr 2024 20:49:42 GMT
content-type: text/css
last-modified: Thu, 14 Mar 2024 02:59:07 GMT
etag: W/"9531-613961328e941-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 5539
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LkU%2FzuZ1%2Frjff7KGsOcnOgqN2KuHcpn3BsM26%2BKM%2FFJB1Wn1ZR6Af%2F9JtASXI0i7P4lxqSAlWW2UH4eRsI%2FOmUdNYoQ29%2BC%2F3qof4DfA4GgTABNw3k1friIYmek32yfS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8790b8c15fa4569b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| upload.wikimedia.org/wikipedia/commons/thumb/1/1a/2%2C4%2C6-Trimethylaniline.svg/800px-2%2C4%2C6-Trimethylaniline.svg.png |  185.15.59.240 | 200 OK | 20 kB |
URL GET HTTP/2upload.wikimedia.org/wikipedia/commons/thumb/1/1a/2%2C4%2C6-Trimethylaniline.svg/800px-2%2C4%2C6-Trimethylaniline.svg.png IP185.15.59.240:443
Requested byhttps://salenzvs.live/product_details/85585263.html CertificateIssuerDigiCert Inc Subject*.wikipedia.org Fingerprint48:3F:0C:71:F3:4A:E0:EA:30:D9:9B:D6:04:63:DC:DA:A8:F4:9D:FB ValidityWed, 18 Oct 2023 00:00:00 GMT - Wed, 16 Oct 2024 23:59:59 GMT
File typePNG image data, 800 x 711, 8-bit/color RGBA, non-interlaced Hash604577d3771ab61b5325ebb89bd084b4 3beb0b63531667fa46312473d50ab60c8b1cbdef 8ef4bdef000d60f6be889f2decd16da6a9d329e713ecdf5d00080dc0e01e6c73
GET /wikipedia/commons/thumb/1/1a/2%2C4%2C6-Trimethylaniline.svg/800px-2%2C4%2C6-Trimethylaniline.svg.png HTTP/1.1
Host: upload.wikimedia.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
x-object-meta-sha1base36: 6zyuctn28y68prdm20tw15ku8nxk0rz
content-disposition: inline;filename*=UTF-8''2%2C4%2C6-Trimethylaniline.svg.png
etag: 604577d3771ab61b5325ebb89bd084b4
last-modified: Sat, 09 Aug 2014 15:54:55 GMT
content-length: 19551
date: Tue, 23 Apr 2024 20:49:47 GMT
server: envoy
age: 1
x-cache: cp3078 miss, cp3078 miss
x-cache-status: miss
server-timing: cache;desc="miss", host;desc="cp3078"
strict-transport-security: max-age=106384710; includeSubDomains; preload
report-to: { "group": "wm_nel", "max_age": 604800, "endpoints": [{ "url": "https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error&schema_uri=/w3c/reportingapi/network_error/1.0.0" }] }
nel: { "report_to": "wm_nel", "max_age": 604800, "failure_fraction": 0.05, "success_fraction": 0.0}
x-client-ip: 91.90.42.154
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-expose-headers: Age, Date, Content-Length, Content-Range, X-Content-Duration, X-Cache
timing-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| salenzvs.live/api/item/randomByKeyword | 188.114.96.1 | 200 OK | 1.8 kB |
URL POST HTTP/3salenzvs.live/api/item/randomByKeyword IP188.114.96.1:443
Requested byhttps://salenzvs.live/product_details/85585263.html CertificateIssuerLet's Encrypt Subjectsalenzvs.live FingerprintC4:93:74:89:D7:54:43:B0:B2:39:98:89:7A:4C:0B:29:5E:EE:B7:66 ValidityTue, 02 Apr 2024 03:14:40 GMT - Mon, 01 Jul 2024 03:14:39 GMT
Hash04be5def4ad7c137a4b2b7d0426d71cb c0fae5b17d2a51d1d5e7362e608a439d259ed483 7a15723164d77f9c1ef6ca70d3c2f3463b4588156353e59b55fc757a54cecbeb
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /api/item/randomByKeyword HTTP/1.1
Host: salenzvs.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://salenzvs.live/product_details/85585263.html
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
Content-Length: 120
Origin: https://salenzvs.live
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IkQ2LzlDU0paSWQ3WVZmbWhrRUxFc3c9PSIsInZhbHVlIjoiK01sNG9YblYway8wNUQwakliV0E4eG5NYytaR0pPVmJEQXRMQUZYYmlwVnMrc1pnUnc4ZkUyVm1hS1VaNzlOdlBISUJUNlBaNHZ3NW93bmFKbjRVaEk4M3BHSm51dXZDaStZaE1xMi9uT2h3UGJSRmZ0Mm1NVVdTYWpPOTBpa0EiLCJtYWMiOiJhMGJhMzYxZThmYzc2Mjg1ZTJmZDZjODZlMzdiMzU4NzNhYzRkNTBjMWFkNDI4YTU1N2U1NDI0N2U0OWU4NWJlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IndrK3Q3UHVpUE5QSWNaYXEzSXc4VkE9PSIsInZhbHVlIjoiNVZDY2FESktIck5Vc3Z6Y3RqNFBhcjlkQWlTU211UFoyWmxJN05OUE12K1dTYzZjQXlpTkRSQ2FxYlFsQTBiczBnd3Qwa3Q5Mk9HKzVQQ1Qyb25DeDNMd2NNcVZMRTUwa0dvSmRVMzdtTXZ1RklUNkZGd0NQWTl4NEZmcGtldDAiLCJtYWMiOiIxOGNmZjZhOTM0MGZiOGViOGY3MGZmNDliNjcxNmY5MzkzZmVhZGEzMjk5NDE2ZTAwODgxZTYyMDBhMmI0ZjJlIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 23 Apr 2024 20:49:46 GMT
content-type: application/json
cache-control: no-cache, private
x-ratelimit-limit: 60
x-ratelimit-remaining: 58
access-control-allow-origin: *
set-cookie: laravel_session=eyJpdiI6ImtvSHJoS1owTzRoQkRyTzkzQ1FKN0E9PSIsInZhbHVlIjoibys5T21iNTNwWW1tcXV0NnpxaGc0QmxJdjh5V2J3cncxVU5rSVJJekh6WWVKM0RocnFRMFlRS08wcWFuN0daN3hqRjN5K1FqSXhuemFSajBWWFdybDhtNUZuaUlLRUxNZDZXRDNDUldyelF3UEoyQk1qN2lIUmVERlMvYjhiaWoiLCJtYWMiOiJjZjNjMDQ4OGM4NTY2OTZiMjQ5NThhMjVkMjE4ODkwN2ZiZWMyM2NiZDM0ZDViOGI1MzIyMTcxZjA2MDJiNjI4IiwidGFnIjoiIn0%3D; expires=Tue, 23-Apr-2024 22:49:46 GMT; Max-Age=7200; path=/; httponly; samesite=lax
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mzf3vOgj9ZUue80pOPDooFEvtl6jNOxoKZWlWfK%2FazfEKvSNMIOT5G5jelxvIzceEaY3n8Ips52Oq8wONBsaowmLBJzFkYrmLd61dmFFaybCIx3KYq7fu5vMMYwcWvYF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8790b8d03f99569b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| salenzvs.live/product_details/85585263.html | 188.114.96.1 | 200 OK | 118 kB |
URL User Request GET HTTP/2salenzvs.live/product_details/85585263.html IP188.114.96.1:443
CertificateIssuerLet's Encrypt Subjectsalenzvs.live FingerprintC4:93:74:89:D7:54:43:B0:B2:39:98:89:7A:4C:0B:29:5E:EE:B7:66 ValidityTue, 02 Apr 2024 03:14:40 GMT - Mon, 01 Jul 2024 03:14:39 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (2315) Size118 kB (117897 bytes) Hasha5d77a647388be2d051cafb04e8faf3c f20857284c6c1aac39ca593b5f5409f10987ce24 9edc8943eeb12a89a4a5cd00b3f627503a4555d4d02745d8d3c0179d48686174
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /product_details/85585263.html HTTP/1.1
Host: salenzvs.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 23 Apr 2024 20:49:42 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache, private
set-cookie: XSRF-TOKEN=eyJpdiI6Ilh4WDBRUUxVV1RVc0cyRmVmaTQ3TWc9PSIsInZhbHVlIjoiRk9UTm5aSXFJR0R5L1ZXMzNkM3FiWDVoVEl3UzdHZ0tjTnM5QytMbDI0YklwU0pEbjdGSEVkQ1E2OFk0WmJyTGt3RzFtakdYQzVjTWY3a1c5cStiSGVzclVQc2tXV29ZZ0lpZndqUWJnRFlkUHpyUjlCbmFxNWV0R3NSckF5bXoiLCJtYWMiOiJhMDdhMjA3ZGRiNDcwOTQ3NTE2NDNmNWEwZTkzMzVjOGY5NTY4ZTdhOTNkNjA5Zjg0NGZjZDA0ZTI2NDA5NzQzIiwidGFnIjoiIn0%3D; expires=Tue, 23-Apr-2024 22:49:42 GMT; Max-Age=7200; path=/; samesite=lax
laravel_session=eyJpdiI6IjdVVjlxZXVYU2hzekRJQ2ViQTJrRFE9PSIsInZhbHVlIjoiV3ZLQXJLcXFVQjBnaXIrTWZmVytVcGRpcHM0Z2t6T0RhUWJNck1BbGtBeUd6NGl1SkxUZUZiMy9URmRUOWRRM2M2dHd0Sm45RDQzbmg1NTYxZlRZanBUV0R1N0krMmZGVjdnenlTTlg1YWxzbEVLZGF0LzVUdHRLUXBHMXJHTW0iLCJtYWMiOiI5MDk2OTVkM2VhZThjYTcwMzkzOTMzYzViNDI2NDNiNTcwNDdiM2ZjZDA3OTdmZWMwZDk5NTFlMDY5MjVmMDU5IiwidGFnIjoiIn0%3D; expires=Tue, 23-Apr-2024 22:49:42 GMT; Max-Age=7200; path=/; httponly; samesite=lax
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uuL9vin%2BE87sYEOqMcuu3EXftktJGZMQ7DdqHQueEZxjSTGSAETSvtFKFHofqIzcJ0tF5gPwl2Ejg1tCcuSOANKwg%2FQXNAeJs4f0K8fMSlVJnxyOLY4293kWQIy0QSQs"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8790b8bcfac37130-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| salenzvs.live/static/mall/css/swiper-bundle.min.css | 188.114.96.1 | 200 OK | 855 kB |
URL GET HTTP/3salenzvs.live/static/mall/css/swiper-bundle.min.css IP188.114.96.1:443
Requested byhttps://salenzvs.live/product_details/85585263.html CertificateIssuerLet's Encrypt Subjectsalenzvs.live FingerprintC4:93:74:89:D7:54:43:B0:B2:39:98:89:7A:4C:0B:29:5E:EE:B7:66 ValidityTue, 02 Apr 2024 03:14:40 GMT - Mon, 01 Jul 2024 03:14:39 GMT
File typeASCII text, with very long lines (13428) Size855 kB (854959 bytes) Hash91a0424bb56d373b12fa509e49fa86d2 39087ce17748c48a5218767af371e2aabb576a49 665d1995ba3fd0f5caf431866b89bdfaf36debae2f1c07d8187bc559c41fadc7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/mall/css/swiper-bundle.min.css HTTP/1.1
Host: salenzvs.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://salenzvs.live/product_details/85585263.html
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6Ilh4WDBRUUxVV1RVc0cyRmVmaTQ3TWc9PSIsInZhbHVlIjoiRk9UTm5aSXFJR0R5L1ZXMzNkM3FiWDVoVEl3UzdHZ0tjTnM5QytMbDI0YklwU0pEbjdGSEVkQ1E2OFk0WmJyTGt3RzFtakdYQzVjTWY3a1c5cStiSGVzclVQc2tXV29ZZ0lpZndqUWJnRFlkUHpyUjlCbmFxNWV0R3NSckF5bXoiLCJtYWMiOiJhMDdhMjA3ZGRiNDcwOTQ3NTE2NDNmNWEwZTkzMzVjOGY5NTY4ZTdhOTNkNjA5Zjg0NGZjZDA0ZTI2NDA5NzQzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjdVVjlxZXVYU2hzekRJQ2ViQTJrRFE9PSIsInZhbHVlIjoiV3ZLQXJLcXFVQjBnaXIrTWZmVytVcGRpcHM0Z2t6T0RhUWJNck1BbGtBeUd6NGl1SkxUZUZiMy9URmRUOWRRM2M2dHd0Sm45RDQzbmg1NTYxZlRZanBUV0R1N0krMmZGVjdnenlTTlg1YWxzbEVLZGF0LzVUdHRLUXBHMXJHTW0iLCJtYWMiOiI5MDk2OTVkM2VhZThjYTcwMzkzOTMzYzViNDI2NDNiNTcwNDdiM2ZjZDA3OTdmZWMwZDk5NTFlMDY5MjVmMDU5IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 23 Apr 2024 20:49:42 GMT
content-type: text/css
last-modified: Thu, 14 Mar 2024 02:59:07 GMT
etag: W/"357e-6139613294319-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 5539
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jQdjQWs4iSQirwWqc8uOAt1P83mSn2HBDeSJ3O%2FRrbF65bg68Ik%2Bjc3x8MbQMDvQ8hl%2FLgQuwn2fB6ikwEalzPJTeQ6EUpUZTZfi9QyxY85rWbJwRqcLQWaULKmmwu85"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8790b8c16fab569b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| salenzvs.live/static/mall/css/countdownTimer.css | 188.114.96.1 | 200 OK | 342 kB |
URL GET HTTP/3salenzvs.live/static/mall/css/countdownTimer.css IP188.114.96.1:443
Requested byhttps://salenzvs.live/product_details/85585263.html CertificateIssuerLet's Encrypt Subjectsalenzvs.live FingerprintC4:93:74:89:D7:54:43:B0:B2:39:98:89:7A:4C:0B:29:5E:EE:B7:66 ValidityTue, 02 Apr 2024 03:14:40 GMT - Mon, 01 Jul 2024 03:14:39 GMT
Size342 kB (341937 bytes) Hash4c5a2eae14139012db8c7261d53a2b1f d152958bb95adc8068f5249a72fc61a3f3c934a9 6135e3fdaa3cbbbdb11483b7ddefe4576b30c8e2a009264313c0833e61b961c6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/mall/css/countdownTimer.css HTTP/1.1
Host: salenzvs.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://salenzvs.live/product_details/85585263.html
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6Ilh4WDBRUUxVV1RVc0cyRmVmaTQ3TWc9PSIsInZhbHVlIjoiRk9UTm5aSXFJR0R5L1ZXMzNkM3FiWDVoVEl3UzdHZ0tjTnM5QytMbDI0YklwU0pEbjdGSEVkQ1E2OFk0WmJyTGt3RzFtakdYQzVjTWY3a1c5cStiSGVzclVQc2tXV29ZZ0lpZndqUWJnRFlkUHpyUjlCbmFxNWV0R3NSckF5bXoiLCJtYWMiOiJhMDdhMjA3ZGRiNDcwOTQ3NTE2NDNmNWEwZTkzMzVjOGY5NTY4ZTdhOTNkNjA5Zjg0NGZjZDA0ZTI2NDA5NzQzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjdVVjlxZXVYU2hzekRJQ2ViQTJrRFE9PSIsInZhbHVlIjoiV3ZLQXJLcXFVQjBnaXIrTWZmVytVcGRpcHM0Z2t6T0RhUWJNck1BbGtBeUd6NGl1SkxUZUZiMy9URmRUOWRRM2M2dHd0Sm45RDQzbmg1NTYxZlRZanBUV0R1N0krMmZGVjdnenlTTlg1YWxzbEVLZGF0LzVUdHRLUXBHMXJHTW0iLCJtYWMiOiI5MDk2OTVkM2VhZThjYTcwMzkzOTMzYzViNDI2NDNiNTcwNDdiM2ZjZDA3OTdmZWMwZDk5NTFlMDY5MjVmMDU5IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 23 Apr 2024 20:49:42 GMT
content-type: text/css
last-modified: Thu, 14 Mar 2024 02:59:07 GMT
etag: W/"4fc-613961328e559-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 5539
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=06WKxbteDAUgue5glJXRXn%2Bf0WvHY806ZuxDddf5KAJ9FszQYr%2BMl%2BO6rGGQzdpWbMa2h6vrbZtrmg9wSBkRNOho6OfYEE5qF2AEpaJtwy4cnL66VvApvbOp8O1KOlMk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8790b8c16fad569b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| salenzvs.live/api/item/getImageUrl?url=https%253A%252F%252Flookaside.fbsbx.com%252Flookaside%252Fcrawler%252Fmedia%252F%253Fmedia_id%253D100044594912138 | 188.114.96.1 | 200 OK | 204 kB |
URL GET HTTP/3salenzvs.live/api/item/getImageUrl?url=https%253A%252F%252Flookaside.fbsbx.com%252Flookaside%252Fcrawler%252Fmedia%252F%253Fmedia_id%253D100044594912138 IP188.114.96.1:443
Requested byhttps://salenzvs.live/product_details/85585263.html CertificateIssuerLet's Encrypt Subjectsalenzvs.live FingerprintC4:93:74:89:D7:54:43:B0:B2:39:98:89:7A:4C:0B:29:5E:EE:B7:66 ValidityTue, 02 Apr 2024 03:14:40 GMT - Mon, 01 Jul 2024 03:14:39 GMT
Size204 kB (204487 bytes) Hashb16c295075350e5dc2cee6013f74ee5d 9964d3b04f3e9769e69bb858d24f045cf628f274 f971059e875ac4b9c6302cfa80f827491b1a779ba90e36a417ecfc82c58634fc
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /api/item/getImageUrl?url=https%253A%252F%252Flookaside.fbsbx.com%252Flookaside%252Fcrawler%252Fmedia%252F%253Fmedia_id%253D100044594912138 HTTP/1.1
Host: salenzvs.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://salenzvs.live/product_details/85585263.html
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IkQ2LzlDU0paSWQ3WVZmbWhrRUxFc3c9PSIsInZhbHVlIjoiK01sNG9YblYway8wNUQwakliV0E4eG5NYytaR0pPVmJEQXRMQUZYYmlwVnMrc1pnUnc4ZkUyVm1hS1VaNzlOdlBISUJUNlBaNHZ3NW93bmFKbjRVaEk4M3BHSm51dXZDaStZaE1xMi9uT2h3UGJSRmZ0Mm1NVVdTYWpPOTBpa0EiLCJtYWMiOiJhMGJhMzYxZThmYzc2Mjg1ZTJmZDZjODZlMzdiMzU4NzNhYzRkNTBjMWFkNDI4YTU1N2U1NDI0N2U0OWU4NWJlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IndrK3Q3UHVpUE5QSWNaYXEzSXc4VkE9PSIsInZhbHVlIjoiNVZDY2FESktIck5Vc3Z6Y3RqNFBhcjlkQWlTU211UFoyWmxJN05OUE12K1dTYzZjQXlpTkRSQ2FxYlFsQTBiczBnd3Qwa3Q5Mk9HKzVQQ1Qyb25DeDNMd2NNcVZMRTUwa0dvSmRVMzdtTXZ1RklUNkZGd0NQWTl4NEZmcGtldDAiLCJtYWMiOiIxOGNmZjZhOTM0MGZiOGViOGY3MGZmNDliNjcxNmY5MzkzZmVhZGEzMjk5NDE2ZTAwODgxZTYyMDBhMmI0ZjJlIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 23 Apr 2024 20:49:49 GMT
content-type: application/json
cache-control: no-cache, private
x-ratelimit-limit: 60
x-ratelimit-remaining: 57
access-control-allow-origin: *
set-cookie: laravel_session=eyJpdiI6IjRXM1R4NFJKc002VDRqeGYvQ0tGZHc9PSIsInZhbHVlIjoiRjZPRE1oV2s1NVJnMWF3UG02VHFnT1NoOHFKeVF3ajZrV0F5UDllQmhyOWFMUnVnZE04amhUWUYrcVdabitGdm1DREo2VlF4Mk5zMlYrbEtVQ0gzT2NjbEQ1ME90bzA4b3pNQ0FOa2lJS2phUlBaMUlINjhqQ0V6Y21hcFI2bGoiLCJtYWMiOiI0ZmExOWZjNjY4ZjZlZTgzOTNhMGQ3ZDgxMTA0NWRlZjFmNzhkMWVmMGJmNmU3M2VlMTdlNDgyMTFhYTM4NzhiIiwidGFnIjoiIn0%3D; expires=Tue, 23-Apr-2024 22:49:49 GMT; Max-Age=7200; path=/; httponly; samesite=lax
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=m93KcOlfKh7m8Kp2bTQIHBUfaAZH34nEGk9ILidasum%2Bk3U3pYJH%2Fwx8vUVnEbjlJmNyrvV7a1e08T7kXcNFmjBHYGmj18zP6Mi2fFFiGtRKbCUT3VInaiXCqF%2Bh%2Fz1U"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8790b8d05fb9569b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| salenzvs.live/static/mall/css/slick.min.css | 188.114.96.1 | 200 OK | 1.3 kB |
URL GET HTTP/3salenzvs.live/static/mall/css/slick.min.css IP188.114.96.1:443
Requested byhttps://salenzvs.live/product_details/85585263.html CertificateIssuerLet's Encrypt Subjectsalenzvs.live FingerprintC4:93:74:89:D7:54:43:B0:B2:39:98:89:7A:4C:0B:29:5E:EE:B7:66 ValidityTue, 02 Apr 2024 03:14:40 GMT - Mon, 01 Jul 2024 03:14:39 GMT
File typeASCII text, with very long lines (1327), with no line terminators Hashda4e146913da6966d85a6b8686886edb 03a28dac9dfc6c33e6175c9c185911c56525d31b fb3ed351cd5c0f1f30f88778ee1f9b056598e6d25ac4fdcab1eebcd8be521cd9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/mall/css/slick.min.css HTTP/1.1
Host: salenzvs.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://salenzvs.live/product_details/85585263.html
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6Ilh4WDBRUUxVV1RVc0cyRmVmaTQ3TWc9PSIsInZhbHVlIjoiRk9UTm5aSXFJR0R5L1ZXMzNkM3FiWDVoVEl3UzdHZ0tjTnM5QytMbDI0YklwU0pEbjdGSEVkQ1E2OFk0WmJyTGt3RzFtakdYQzVjTWY3a1c5cStiSGVzclVQc2tXV29ZZ0lpZndqUWJnRFlkUHpyUjlCbmFxNWV0R3NSckF5bXoiLCJtYWMiOiJhMDdhMjA3ZGRiNDcwOTQ3NTE2NDNmNWEwZTkzMzVjOGY5NTY4ZTdhOTNkNjA5Zjg0NGZjZDA0ZTI2NDA5NzQzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjdVVjlxZXVYU2hzekRJQ2ViQTJrRFE9PSIsInZhbHVlIjoiV3ZLQXJLcXFVQjBnaXIrTWZmVytVcGRpcHM0Z2t6T0RhUWJNck1BbGtBeUd6NGl1SkxUZUZiMy9URmRUOWRRM2M2dHd0Sm45RDQzbmg1NTYxZlRZanBUV0R1N0krMmZGVjdnenlTTlg1YWxzbEVLZGF0LzVUdHRLUXBHMXJHTW0iLCJtYWMiOiI5MDk2OTVkM2VhZThjYTcwMzkzOTMzYzViNDI2NDNiNTcwNDdiM2ZjZDA3OTdmZWMwZDk5NTFlMDY5MjVmMDU5IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 20:49:42 GMT
content-type: text/css
last-modified: Thu, 14 Mar 2024 02:59:07 GMT
etag: W/"52f-6139613294319-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 5539
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pYnnL2I4mCk1dgnlspR5XJoVw3x7gb4uUDy6U5Vsv7pmLakg9GsGo0cDcB%2BlGpmf2LmzQLAo5VJY5eB0Fpe9K0dvld3xe54y0bS5lf8S7fcfO9PNcz7E2OSSpiFswYGr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8790b8c16fae569b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| salenzvs.live/static/mall/css/font/Poppins-Regular.ttf | 188.114.96.1 | 200 OK | 158 kB |
URL GET HTTP/3salenzvs.live/static/mall/css/font/Poppins-Regular.ttf IP188.114.96.1:443
Requested byhttps://salenzvs.live/product_details/85585263.html CertificateIssuerLet's Encrypt Subjectsalenzvs.live FingerprintC4:93:74:89:D7:54:43:B0:B2:39:98:89:7A:4C:0B:29:5E:EE:B7:66 ValidityTue, 02 Apr 2024 03:14:40 GMT - Mon, 01 Jul 2024 03:14:39 GMT
File typeTrueType Font data, 13 tables, 1st "GDEF", 17 names, Microsoft, language 0x409, Copyright 2020 The Poppins Project Authors (https://github.com/itfoundry/Poppins)PoppinsRegularI Size158 kB (158192 bytes) Hash8b6af8e5e8324edfd77af8b3b35d7f9c 01d319c533f62ea29f03b5df8adfd4d93d2d2a38 78f127277756ae464f4eb665ce214cb6315746f6f4193e95b31f18f4b3e97527
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/mall/css/font/Poppins-Regular.ttf HTTP/1.1
Host: salenzvs.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://salenzvs.live/static/mall/css/demo1.css
Cookie: XSRF-TOKEN=eyJpdiI6IkQ2LzlDU0paSWQ3WVZmbWhrRUxFc3c9PSIsInZhbHVlIjoiK01sNG9YblYway8wNUQwakliV0E4eG5NYytaR0pPVmJEQXRMQUZYYmlwVnMrc1pnUnc4ZkUyVm1hS1VaNzlOdlBISUJUNlBaNHZ3NW93bmFKbjRVaEk4M3BHSm51dXZDaStZaE1xMi9uT2h3UGJSRmZ0Mm1NVVdTYWpPOTBpa0EiLCJtYWMiOiJhMGJhMzYxZThmYzc2Mjg1ZTJmZDZjODZlMzdiMzU4NzNhYzRkNTBjMWFkNDI4YTU1N2U1NDI0N2U0OWU4NWJlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImtvSHJoS1owTzRoQkRyTzkzQ1FKN0E9PSIsInZhbHVlIjoibys5T21iNTNwWW1tcXV0NnpxaGc0QmxJdjh5V2J3cncxVU5rSVJJekh6WWVKM0RocnFRMFlRS08wcWFuN0daN3hqRjN5K1FqSXhuemFSajBWWFdybDhtNUZuaUlLRUxNZDZXRDNDUldyelF3UEoyQk1qN2lIUmVERlMvYjhiaWoiLCJtYWMiOiJjZjNjMDQ4OGM4NTY2OTZiMjQ5NThhMjVkMjE4ODkwN2ZiZWMyM2NiZDM0ZDViOGI1MzIyMTcxZjA2MDJiNjI4IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 20:49:46 GMT
content-type: font/ttf
last-modified: Thu, 14 Mar 2024 02:59:07 GMT
etag: W/"269f0-61396132927c1-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 3435
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DAj3urXbNBz8mvB3ZOjL1bnPogFZwlwC0UFnYb3Zcn2YXnHDmyqA%2BI1f0E3e1Hl6RYm%2FIhiIpCsKMCpZ0qn0TV4VyarTazQ5p6IAk6zWxJYcGFjsw8cve5QNII1tcFS0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8790b8dbed44569b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| p16-sign.tiktokcdn-us.com/tos-useast5-p-0068-tx/e927fc87aa014ae2ba134d9d73c6b855~tplv-photomode-zoomcover:720:720.jpeg?x-expires=1694451600&x-signature=TbM2LMQihqf0wyE01efWp2zZ70s%3D | 23.218.107.170 | 403 Forbidden | 0 B |
URL GET HTTP/2p16-sign.tiktokcdn-us.com/tos-useast5-p-0068-tx/e927fc87aa014ae2ba134d9d73c6b855~tplv-photomode-zoomcover:720:720.jpeg?x-expires=1694451600&x-signature=TbM2LMQihqf0wyE01efWp2zZ70s%3D IP23.218.107.170:443 ASN#20940 Akamai International B.V.
Requested byhttps://salenzvs.live/product_details/85585263.html CertificateIssuerDigiCert Inc Subject*.tiktokcdn-us.com FingerprintE2:8B:12:BD:C5:BB:C1:09:C6:4B:21:1B:F3:EB:67:A4:69:21:42:D5 ValiditySat, 26 Aug 2023 00:00:00 GMT - Wed, 25 Sep 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tos-useast5-p-0068-tx/e927fc87aa014ae2ba134d9d73c6b855~tplv-photomode-zoomcover:720:720.jpeg?x-expires=1694451600&x-signature=TbM2LMQihqf0wyE01efWp2zZ70s%3D HTTP/1.1
Host: p16-sign.tiktokcdn-us.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
server: AkamaiGHost
mime-version: 1.0
content-type: text/html
content-length: 530
expires: Tue, 23 Apr 2024 20:49:47 GMT
date: Tue, 23 Apr 2024 20:49:47 GMT
x-cache: TCP_DENIED from a23-218-107-166.deploy.akamaitechnologies.com (AkamaiGHost/11.4.5-55502997) (-)
cross-origin-resource-policy: cross-origin
x-tt-trace-tag: id=16;cdn-cache=miss;type=static
server-timing: cdn-cache; desc=MISS, edge; dur=0, origin; dur=0
x-failure-reason: failure-expired
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| salenzvs.live/static/mall/css/responsive.css | 188.114.96.1 | 200 OK | 62 kB |
URL GET HTTP/3salenzvs.live/static/mall/css/responsive.css IP188.114.96.1:443
Requested byhttps://salenzvs.live/product_details/85585263.html CertificateIssuerLet's Encrypt Subjectsalenzvs.live FingerprintC4:93:74:89:D7:54:43:B0:B2:39:98:89:7A:4C:0B:29:5E:EE:B7:66 ValidityTue, 02 Apr 2024 03:14:40 GMT - Mon, 01 Jul 2024 03:14:39 GMT
Hash5a0f0223020c05a39623fee1527a2b81 07468c1803b6ec9d1c47b051d099815d98618307 5ced93256785d0fc2aed667d047221aea1e152189227f76c0c5c5dd5b6798d60
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/mall/css/responsive.css HTTP/1.1
Host: salenzvs.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://salenzvs.live/product_details/85585263.html
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6Ilh4WDBRUUxVV1RVc0cyRmVmaTQ3TWc9PSIsInZhbHVlIjoiRk9UTm5aSXFJR0R5L1ZXMzNkM3FiWDVoVEl3UzdHZ0tjTnM5QytMbDI0YklwU0pEbjdGSEVkQ1E2OFk0WmJyTGt3RzFtakdYQzVjTWY3a1c5cStiSGVzclVQc2tXV29ZZ0lpZndqUWJnRFlkUHpyUjlCbmFxNWV0R3NSckF5bXoiLCJtYWMiOiJhMDdhMjA3ZGRiNDcwOTQ3NTE2NDNmNWEwZTkzMzVjOGY5NTY4ZTdhOTNkNjA5Zjg0NGZjZDA0ZTI2NDA5NzQzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjdVVjlxZXVYU2hzekRJQ2ViQTJrRFE9PSIsInZhbHVlIjoiV3ZLQXJLcXFVQjBnaXIrTWZmVytVcGRpcHM0Z2t6T0RhUWJNck1BbGtBeUd6NGl1SkxUZUZiMy9URmRUOWRRM2M2dHd0Sm45RDQzbmg1NTYxZlRZanBUV0R1N0krMmZGVjdnenlTTlg1YWxzbEVLZGF0LzVUdHRLUXBHMXJHTW0iLCJtYWMiOiI5MDk2OTVkM2VhZThjYTcwMzkzOTMzYzViNDI2NDNiNTcwNDdiM2ZjZDA3OTdmZWMwZDk5NTFlMDY5MjVmMDU5IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 20:49:42 GMT
content-type: text/css
last-modified: Thu, 14 Mar 2024 02:59:07 GMT
etag: W/"f2c8-6139613294319-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 5539
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=w07255PDUjHJKmeIeK1LFdEwL6Aig7EXyaSpPy2SR0OKkV86kTq1r06svz8Tq%2FxUN6cV2KP80ZOfoRrpYbL7%2F6fhSZ8AEjlFIe86Bv44SYytmGEW5KHeYvU8X0roIRAn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8790b8c16fb4569b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| salenzvs.live/static/mall/css/font/Poppins-SemiBold.ttf | 188.114.96.1 | 200 OK | 155 kB |
URL GET HTTP/3salenzvs.live/static/mall/css/font/Poppins-SemiBold.ttf IP188.114.96.1:443
Requested byhttps://salenzvs.live/product_details/85585263.html CertificateIssuerLet's Encrypt Subjectsalenzvs.live FingerprintC4:93:74:89:D7:54:43:B0:B2:39:98:89:7A:4C:0B:29:5E:EE:B7:66 ValidityTue, 02 Apr 2024 03:14:40 GMT - Mon, 01 Jul 2024 03:14:39 GMT
File typeTrueType Font data, 13 tables, 1st "GDEF", 19 names, Microsoft, language 0x409, Copyright 2020 The Poppins Project Authors (https://github.com/itfoundry/Poppins)Poppins SemiBol Size155 kB (155192 bytes) Hash4cdacb8f89d588d69e8570edcbe49507 20b39c8b480c946b084d6aa09f12bf10b2ec5aa6 bf9c1ff640acc8bb5441a9b564360943f9db90969742aa33a36329b2828d2759
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/mall/css/font/Poppins-SemiBold.ttf HTTP/1.1
Host: salenzvs.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://salenzvs.live/static/mall/css/demo1.css
Cookie: XSRF-TOKEN=eyJpdiI6Ilh4WDBRUUxVV1RVc0cyRmVmaTQ3TWc9PSIsInZhbHVlIjoiRk9UTm5aSXFJR0R5L1ZXMzNkM3FiWDVoVEl3UzdHZ0tjTnM5QytMbDI0YklwU0pEbjdGSEVkQ1E2OFk0WmJyTGt3RzFtakdYQzVjTWY3a1c5cStiSGVzclVQc2tXV29ZZ0lpZndqUWJnRFlkUHpyUjlCbmFxNWV0R3NSckF5bXoiLCJtYWMiOiJhMDdhMjA3ZGRiNDcwOTQ3NTE2NDNmNWEwZTkzMzVjOGY5NTY4ZTdhOTNkNjA5Zjg0NGZjZDA0ZTI2NDA5NzQzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjdVVjlxZXVYU2hzekRJQ2ViQTJrRFE9PSIsInZhbHVlIjoiV3ZLQXJLcXFVQjBnaXIrTWZmVytVcGRpcHM0Z2t6T0RhUWJNck1BbGtBeUd6NGl1SkxUZUZiMy9URmRUOWRRM2M2dHd0Sm45RDQzbmg1NTYxZlRZanBUV0R1N0krMmZGVjdnenlTTlg1YWxzbEVLZGF0LzVUdHRLUXBHMXJHTW0iLCJtYWMiOiI5MDk2OTVkM2VhZThjYTcwMzkzOTMzYzViNDI2NDNiNTcwNDdiM2ZjZDA3OTdmZWMwZDk5NTFlMDY5MjVmMDU5IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 20:49:43 GMT
content-type: font/ttf
last-modified: Thu, 14 Mar 2024 02:59:07 GMT
etag: W/"25e38-6139613292ba9-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 3432
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wvE1T3jJMmbj6ZuqivIwUGhOmCLRosstyo5vn9tjZbjVscZwymyu8KHCAoPc%2Bw9Qtk0s54rgG3DEw9t9gX6cEcysSLU1yGh%2Fs5rvlW6y6cpHju3EF1cjW4P1lRwKCg4H"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8790b8c42a9a569b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| res.cloudinary.com/dia/image/upload/f_auto,t_pdp_main_800/Products/CeCe/Gia%20Flutter%20Sleeve%20Top/39212-front-model-f67ccb2c29c65c9e9da9ee00e8cc9c05 | 104.19.167.65 | 200 OK | 66 kB |
URL GET HTTP/2res.cloudinary.com/dia/image/upload/f_auto,t_pdp_main_800/Products/CeCe/Gia%20Flutter%20Sleeve%20Top/39212-front-model-f67ccb2c29c65c9e9da9ee00e8cc9c05 IP104.19.167.65:443
Requested byhttps://salenzvs.live/product_details/85585263.html CertificateIssuerGoDaddy.com, Inc. Subject*.cloudinary.com FingerprintF8:54:70:A6:3D:D6:0A:BD:5E:7A:14:E6:56:4C:42:23:56:BB:E6:7C ValidityThu, 14 Dec 2023 11:11:09 GMT - Sat, 22 Jun 2024 11:52:01 GMT
Hashc0c8dcc540121283f8186e141d660d44 770dee6a1de9ba5b7d8dac14e786ba5e16b5b0ac 462890e0f418d7dfee68cd792edd2ed0fcb3e7713ab4638c80f4540f61bb7ad4
GET /dia/image/upload/f_auto,t_pdp_main_800/Products/CeCe/Gia%20Flutter%20Sleeve%20Top/39212-front-model-f67ccb2c29c65c9e9da9ee00e8cc9c05 HTTP/1.1
Host: res.cloudinary.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 23 Apr 2024 20:49:47 GMT
content-type: image/avif
content-length: 66168
cf-ray: 8790b8dbf994b517-OSL
accept-ranges: bytes
access-control-allow-origin: *
cache-control: private, no-transform, max-age=31536000
etag: "c0c8dcc540121283f8186e141d660d44"
last-modified: Fri, 20 Jan 2023 19:20:03 GMT
strict-transport-security: max-age=604800
vary: Accept,User-Agent, Accept-Encoding
access-control-expose-headers: Content-Length,ETag,Server-Timing,Vary,x-content-type-options
server-timing: cld-cloudflare;dur=225;start=2024-04-23T20:49:46.876Z;desc=miss,rtt;dur=1,content-info;desc="width=800,height=1000,owidth=1600,oheight=2000,obytes=1309351;";cloudinary;dur=80;start=2024-04-23T20:49:46.954Z
timing-allow-origin: *
x-content-type-options: nosniff
server: cloudflare
X-Firefox-Spdy: h2
|
|
| salenzvs.live/static/default/js/vue.min.js | 188.114.96.1 | 200 OK | 94 kB |
URL GET HTTP/3salenzvs.live/static/default/js/vue.min.js IP188.114.96.1:443
Requested byhttps://salenzvs.live/product_details/85585263.html CertificateIssuerLet's Encrypt Subjectsalenzvs.live FingerprintC4:93:74:89:D7:54:43:B0:B2:39:98:89:7A:4C:0B:29:5E:EE:B7:66 ValidityTue, 02 Apr 2024 03:14:40 GMT - Mon, 01 Jul 2024 03:14:39 GMT
File typeJavaScript source, ASCII text, with very long lines (65449) Hashb21b8531847604ab5f2f5caaef51ba31 da8d7a59f4e6cc55ea58abec33ef9cebb9ba67c1 9174c425c445377df4562ad9165ea08fdf9433a808296d7de5f619791df10e17
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/default/js/vue.min.js HTTP/1.1
Host: salenzvs.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://salenzvs.live/product_details/85585263.html
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6Ilh4WDBRUUxVV1RVc0cyRmVmaTQ3TWc9PSIsInZhbHVlIjoiRk9UTm5aSXFJR0R5L1ZXMzNkM3FiWDVoVEl3UzdHZ0tjTnM5QytMbDI0YklwU0pEbjdGSEVkQ1E2OFk0WmJyTGt3RzFtakdYQzVjTWY3a1c5cStiSGVzclVQc2tXV29ZZ0lpZndqUWJnRFlkUHpyUjlCbmFxNWV0R3NSckF5bXoiLCJtYWMiOiJhMDdhMjA3ZGRiNDcwOTQ3NTE2NDNmNWEwZTkzMzVjOGY5NTY4ZTdhOTNkNjA5Zjg0NGZjZDA0ZTI2NDA5NzQzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjdVVjlxZXVYU2hzekRJQ2ViQTJrRFE9PSIsInZhbHVlIjoiV3ZLQXJLcXFVQjBnaXIrTWZmVytVcGRpcHM0Z2t6T0RhUWJNck1BbGtBeUd6NGl1SkxUZUZiMy9URmRUOWRRM2M2dHd0Sm45RDQzbmg1NTYxZlRZanBUV0R1N0krMmZGVjdnenlTTlg1YWxzbEVLZGF0LzVUdHRLUXBHMXJHTW0iLCJtYWMiOiI5MDk2OTVkM2VhZThjYTcwMzkzOTMzYzViNDI2NDNiNTcwNDdiM2ZjZDA3OTdmZWMwZDk5NTFlMDY5MjVmMDU5IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 20:49:42 GMT
content-type: application/javascript
last-modified: Thu, 14 Mar 2024 02:59:07 GMT
etag: W/"16fc7-613961327b4a8-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 5539
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9sRnAb%2FekzsXP4AdqBFEfNgyXsIDp8GO65%2BNNfrI4FF5UAFJ7BOW3WbZMLXoQd%2FXruUAlIJcayXsFYD3drcvmX8Lm2yYoYr6jnEHl642Oymd0LQL5y7qErqKeniQ8MKW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8790b8c17fda569b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| salenzvs.live/api/cart/index | 188.114.96.1 | 200 OK | 139 B |
URL GET HTTP/3salenzvs.live/api/cart/index IP188.114.96.1:443
Requested byhttps://salenzvs.live/product_details/85585263.html CertificateIssuerLet's Encrypt Subjectsalenzvs.live FingerprintC4:93:74:89:D7:54:43:B0:B2:39:98:89:7A:4C:0B:29:5E:EE:B7:66 ValidityTue, 02 Apr 2024 03:14:40 GMT - Mon, 01 Jul 2024 03:14:39 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash44f293d1057e83d64adbd382f9753c0c 64b4ac33d19337d1a099cf6f41cacbf95d017ac6 e0b1b9c0ec1aa8b305e8ee8c3f3946d9de911e5b0d29b9a80dfe128ce623fa13
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /api/cart/index HTTP/1.1
Host: salenzvs.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://salenzvs.live/product_details/85585263.html
Authorization:
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6Ilh4WDBRUUxVV1RVc0cyRmVmaTQ3TWc9PSIsInZhbHVlIjoiRk9UTm5aSXFJR0R5L1ZXMzNkM3FiWDVoVEl3UzdHZ0tjTnM5QytMbDI0YklwU0pEbjdGSEVkQ1E2OFk0WmJyTGt3RzFtakdYQzVjTWY3a1c5cStiSGVzclVQc2tXV29ZZ0lpZndqUWJnRFlkUHpyUjlCbmFxNWV0R3NSckF5bXoiLCJtYWMiOiJhMDdhMjA3ZGRiNDcwOTQ3NTE2NDNmNWEwZTkzMzVjOGY5NTY4ZTdhOTNkNjA5Zjg0NGZjZDA0ZTI2NDA5NzQzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjdVVjlxZXVYU2hzekRJQ2ViQTJrRFE9PSIsInZhbHVlIjoiV3ZLQXJLcXFVQjBnaXIrTWZmVytVcGRpcHM0Z2t6T0RhUWJNck1BbGtBeUd6NGl1SkxUZUZiMy9URmRUOWRRM2M2dHd0Sm45RDQzbmg1NTYxZlRZanBUV0R1N0krMmZGVjdnenlTTlg1YWxzbEVLZGF0LzVUdHRLUXBHMXJHTW0iLCJtYWMiOiI5MDk2OTVkM2VhZThjYTcwMzkzOTMzYzViNDI2NDNiNTcwNDdiM2ZjZDA3OTdmZWMwZDk5NTFlMDY5MjVmMDU5IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 20:49:43 GMT
content-type: application/json
cache-control: no-cache, private
x-ratelimit-limit: 60
x-ratelimit-remaining: 56
access-control-allow-origin: *
set-cookie: laravel_session=eyJpdiI6Imdac3lQY1E5cU5xa0o1K1ZMOE1XQkE9PSIsInZhbHVlIjoiSXhwREVmb25oV2xVdnZwUlNHYWJaVHhpbVF6bWlLQmZFR0M3VU42VUZpeXhDaWpMQjRZVTJleVVqNkI2MFRvaisrTlUyaXlkN09CNnlkUHZ5am9wQkZyakJwNDVLUlQzMTIwaGdYK01oZ2k5UFdyNE9ZWWRkUTJuVUgzK2FvMGoiLCJtYWMiOiI0MzkxOWQxM2UzNTM3MTkzZGMyZmMzM2M4NmRmN2I4Y2M2ZGQ4NGNjYTRlNjgwMTA4MWQwN2Y5MmQzYjgxODljIiwidGFnIjoiIn0%3D; expires=Tue, 23-Apr-2024 22:49:43 GMT; Max-Age=7200; path=/; httponly; samesite=lax
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=odnW6ajthIe7EDBNw4MpJokUH4odEPjEaF97IiRLftSky%2BXY%2Fh34I7e5ulqoKSLZzHCwK6D%2FiusC49oUmdZRu5yZhk5KOWI6iaDSE4t%2BggZa0a7G%2FCxG95NlF0seQDs3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8790b8c3da3e569b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| naploungewear.com/wp-content/uploads/2021/11/TH-59.jpg | 188.114.97.1 | 200 OK | 139 kB |
URL GET HTTP/2naploungewear.com/wp-content/uploads/2021/11/TH-59.jpg IP188.114.97.1:443
Requested byhttps://salenzvs.live/product_details/85585263.html CertificateIssuerGoogle Trust Services LLC Subjectnaploungewear.com FingerprintAF:6A:18:41:A4:8A:9B:5A:72:89:DF:59:B1:2D:A1:3D:04:A1:61:8C ValidityTue, 02 Apr 2024 13:22:51 GMT - Mon, 01 Jul 2024 13:22:50 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1024x1396, components 3 Size139 kB (138851 bytes) Hashf5298abb0b06b41708a804402c763285 11ad4fa7f5c1570db5a8b780ceb2fda6c5b9d44b 49bd7a0c163eb198c226a753e7248872e1d45b016335b78d2cd4a50a803c4d0b
GET /wp-content/uploads/2021/11/TH-59.jpg HTTP/1.1
Host: naploungewear.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 23 Apr 2024 20:49:46 GMT
content-type: image/jpeg
content-length: 138851
last-modified: Wed, 08 Nov 2023 12:19:46 GMT
etag: "654b7ce2-21e63"
expires: Sat, 18 May 2024 09:43:17 GMT
cache-control: public, max-age=2592000
access-control-allow-origin: *
access-control-allow-headers: X-Requested-With
access-control-allow-methods: GET,POST,OPTIONS
cf-cache-status: HIT
age: 471989
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EqWKhwuaE%2FbFYzPfesjlQxd%2FBr6Ed78vzF6GMdxshIaogN5eSpBy0nJTK0ayE8i9%2FWOBLrd20PgZDsm5dlfMYZp0x8zWABuukB9pLVDHKqOnF6cEWJ6cJXP8DYRoX%2FN7iW%2FVTQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8790b8dc1ecb1c12-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| salenzvs.live/static/default/css/iconfont.css | 188.114.96.1 | 200 OK | 1.4 kB |
URL GET HTTP/3salenzvs.live/static/default/css/iconfont.css IP188.114.96.1:443
Requested byhttps://salenzvs.live/product_details/85585263.html CertificateIssuerLet's Encrypt Subjectsalenzvs.live FingerprintC4:93:74:89:D7:54:43:B0:B2:39:98:89:7A:4C:0B:29:5E:EE:B7:66 ValidityTue, 02 Apr 2024 03:14:40 GMT - Mon, 01 Jul 2024 03:14:39 GMT
File typeASCII text, with very long lines (1543), with no line terminators Hash090f72d902afd1175acf4cad9f14c475 570ba183720b7f40f15601d0d4321a6ad819fcf2 29b84aaf9a3d5b98b8f77db96a21f11fd83bf97cc140f3e7ff41735aba555187
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/default/css/iconfont.css HTTP/1.1
Host: salenzvs.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://salenzvs.live/product_details/85585263.html
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6Ilh4WDBRUUxVV1RVc0cyRmVmaTQ3TWc9PSIsInZhbHVlIjoiRk9UTm5aSXFJR0R5L1ZXMzNkM3FiWDVoVEl3UzdHZ0tjTnM5QytMbDI0YklwU0pEbjdGSEVkQ1E2OFk0WmJyTGt3RzFtakdYQzVjTWY3a1c5cStiSGVzclVQc2tXV29ZZ0lpZndqUWJnRFlkUHpyUjlCbmFxNWV0R3NSckF5bXoiLCJtYWMiOiJhMDdhMjA3ZGRiNDcwOTQ3NTE2NDNmNWEwZTkzMzVjOGY5NTY4ZTdhOTNkNjA5Zjg0NGZjZDA0ZTI2NDA5NzQzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjdVVjlxZXVYU2hzekRJQ2ViQTJrRFE9PSIsInZhbHVlIjoiV3ZLQXJLcXFVQjBnaXIrTWZmVytVcGRpcHM0Z2t6T0RhUWJNck1BbGtBeUd6NGl1SkxUZUZiMy9URmRUOWRRM2M2dHd0Sm45RDQzbmg1NTYxZlRZanBUV0R1N0krMmZGVjdnenlTTlg1YWxzbEVLZGF0LzVUdHRLUXBHMXJHTW0iLCJtYWMiOiI5MDk2OTVkM2VhZThjYTcwMzkzOTMzYzViNDI2NDNiNTcwNDdiM2ZjZDA3OTdmZWMwZDk5NTFlMDY5MjVmMDU5IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 20:49:42 GMT
content-type: text/css
last-modified: Thu, 14 Mar 2024 02:59:07 GMT
etag: W/"55c-6139613276a70-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 5539
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4d2nLexW%2BHstHbIgyd8q0Uk%2FTohDid4dTNeKaM64zB%2Bt%2B4u7UEN8x%2F%2FD3NmADo9i91FUCR6qehI0s%2BvhwugdDamEsudJ64q5VcTmMDtoIsJ%2B6pitw4kstuR68UzX1d%2BV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8790b8c17fcc569b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| salenzvs.live/api/item/getImageUrl?url=https%253A%252F%252Fp16-sign.tiktokcdn-us.com%252Ftos-useast5-p-0068-tx%252Fe927fc87aa014ae2ba134d9d73c6b855~tplv-photomode-zoomcover%253A720%253A720.jpeg%253Fx-expires%253D1694451600%2526x-signature%253DTbM2LMQihqf0wyE01efWp2zZ70s%25253D | 188.114.96.1 | 200 OK | 38 B |
URL GET HTTP/3salenzvs.live/api/item/getImageUrl?url=https%253A%252F%252Fp16-sign.tiktokcdn-us.com%252Ftos-useast5-p-0068-tx%252Fe927fc87aa014ae2ba134d9d73c6b855~tplv-photomode-zoomcover%253A720%253A720.jpeg%253Fx-expires%253D1694451600%2526x-signature%253DTbM2LMQihqf0wyE01efWp2zZ70s%25253D IP188.114.96.1:443
Requested byhttps://salenzvs.live/product_details/85585263.html CertificateIssuerLet's Encrypt Subjectsalenzvs.live FingerprintC4:93:74:89:D7:54:43:B0:B2:39:98:89:7A:4C:0B:29:5E:EE:B7:66 ValidityTue, 02 Apr 2024 03:14:40 GMT - Mon, 01 Jul 2024 03:14:39 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash080bff720b79594bbe2bab08954f4cc1 325482b3c50845bc3faaaf61af567ec91c7791d8 fbb4235c8fec2785469f9a5fd49401f0974a1862a33e917cba5ebbdbb49a7acf
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /api/item/getImageUrl?url=https%253A%252F%252Fp16-sign.tiktokcdn-us.com%252Ftos-useast5-p-0068-tx%252Fe927fc87aa014ae2ba134d9d73c6b855~tplv-photomode-zoomcover%253A720%253A720.jpeg%253Fx-expires%253D1694451600%2526x-signature%253DTbM2LMQihqf0wyE01efWp2zZ70s%25253D HTTP/1.1
Host: salenzvs.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://salenzvs.live/product_details/85585263.html
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IkQ2LzlDU0paSWQ3WVZmbWhrRUxFc3c9PSIsInZhbHVlIjoiK01sNG9YblYway8wNUQwakliV0E4eG5NYytaR0pPVmJEQXRMQUZYYmlwVnMrc1pnUnc4ZkUyVm1hS1VaNzlOdlBISUJUNlBaNHZ3NW93bmFKbjRVaEk4M3BHSm51dXZDaStZaE1xMi9uT2h3UGJSRmZ0Mm1NVVdTYWpPOTBpa0EiLCJtYWMiOiJhMGJhMzYxZThmYzc2Mjg1ZTJmZDZjODZlMzdiMzU4NzNhYzRkNTBjMWFkNDI4YTU1N2U1NDI0N2U0OWU4NWJlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImtvSHJoS1owTzRoQkRyTzkzQ1FKN0E9PSIsInZhbHVlIjoibys5T21iNTNwWW1tcXV0NnpxaGc0QmxJdjh5V2J3cncxVU5rSVJJekh6WWVKM0RocnFRMFlRS08wcWFuN0daN3hqRjN5K1FqSXhuemFSajBWWFdybDhtNUZuaUlLRUxNZDZXRDNDUldyelF3UEoyQk1qN2lIUmVERlMvYjhiaWoiLCJtYWMiOiJjZjNjMDQ4OGM4NTY2OTZiMjQ5NThhMjVkMjE4ODkwN2ZiZWMyM2NiZDM0ZDViOGI1MzIyMTcxZjA2MDJiNjI4IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 20:49:53 GMT
content-type: application/json
cache-control: no-cache, private
x-ratelimit-limit: 60
x-ratelimit-remaining: 57
access-control-allow-origin: *
set-cookie: laravel_session=eyJpdiI6ImhNcjNkVjlQaFVwb21VbDB2Z1Y1V3c9PSIsInZhbHVlIjoiamR5Q242SEtCOFhyaHBzWXFIYUtzc0NoSmI1enM0OFgvTEhUNlB5S2VxTDBnOWJYWW5YWlM3OXBmZVlpdjBaWlIzUWY2RzVxblVNcU9iMHJ1T3lnMXJTd0dLZGtaUzdKTXNvVUVJb2huek5xMzFjdlRFdU5sQSthK3luYkdzdzYiLCJtYWMiOiJlOWE2N2RkZmNiZGUxMGI2YWI4YjhkZmU1OGZkM2ZmZjZmNDZiZWQyNzViZWE3ZDA1OTM3ZWY4MjUxNjRkZjA3IiwidGFnIjoiIn0%3D; expires=Tue, 23-Apr-2024 22:49:53 GMT; Max-Age=7200; path=/; httponly; samesite=lax
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JPP9qXKukY6Jka5359GUOxAzg4gke1pcOz3%2FEyk1PXOMNnhhgqeesNHaQnEKMV0W%2BaSs%2Bjmh97JQoHyKAlOnzasSEuPiidGDRiIoglcNbg0fzEfCze%2BqlHMF7lAZlRKx"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8790b8de6842569b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| salenzvs.live/static/mall/css/animate.css | 188.114.96.1 | 200 OK | 72 kB |
URL GET HTTP/3salenzvs.live/static/mall/css/animate.css IP188.114.96.1:443
Requested byhttps://salenzvs.live/product_details/85585263.html CertificateIssuerLet's Encrypt Subjectsalenzvs.live FingerprintC4:93:74:89:D7:54:43:B0:B2:39:98:89:7A:4C:0B:29:5E:EE:B7:66 ValidityTue, 02 Apr 2024 03:14:40 GMT - Mon, 01 Jul 2024 03:14:39 GMT
File typeASCII text, with very long lines (65343) Hasha2debeb6012c56100f1180d3de887927 b49fa74ae3abff550dc4beff7e6e540ec1f37029 fee5e34c63f9527f33c78381943de33789c521a12f8ec151991bc5247d5f7bc0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/mall/css/animate.css HTTP/1.1
Host: salenzvs.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://salenzvs.live/product_details/85585263.html
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6Ilh4WDBRUUxVV1RVc0cyRmVmaTQ3TWc9PSIsInZhbHVlIjoiRk9UTm5aSXFJR0R5L1ZXMzNkM3FiWDVoVEl3UzdHZ0tjTnM5QytMbDI0YklwU0pEbjdGSEVkQ1E2OFk0WmJyTGt3RzFtakdYQzVjTWY3a1c5cStiSGVzclVQc2tXV29ZZ0lpZndqUWJnRFlkUHpyUjlCbmFxNWV0R3NSckF5bXoiLCJtYWMiOiJhMDdhMjA3ZGRiNDcwOTQ3NTE2NDNmNWEwZTkzMzVjOGY5NTY4ZTdhOTNkNjA5Zjg0NGZjZDA0ZTI2NDA5NzQzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjdVVjlxZXVYU2hzekRJQ2ViQTJrRFE9PSIsInZhbHVlIjoiV3ZLQXJLcXFVQjBnaXIrTWZmVytVcGRpcHM0Z2t6T0RhUWJNck1BbGtBeUd6NGl1SkxUZUZiMy9URmRUOWRRM2M2dHd0Sm45RDQzbmg1NTYxZlRZanBUV0R1N0krMmZGVjdnenlTTlg1YWxzbEVLZGF0LzVUdHRLUXBHMXJHTW0iLCJtYWMiOiI5MDk2OTVkM2VhZThjYTcwMzkzOTMzYzViNDI2NDNiNTcwNDdiM2ZjZDA3OTdmZWMwZDk5NTFlMDY5MjVmMDU5IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 20:49:42 GMT
content-type: text/css
last-modified: Thu, 14 Mar 2024 02:59:07 GMT
etag: W/"1184b-613961328e171-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 5539
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EYTlrLiFtXDlBVJ9WA6xbCZ3a3kX3Vbq6%2B%2Fh%2Fpi9iUqiTkea%2B5H2VkoD3NFu689OUtHX73SXZqhi4Y9gvWy3ZJRog6ukgBhqP3bNpQIKldbSMPxW9Y2fRK3guGXQJuv4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8790b8c16fa8569b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| salenzvs.live/api/item/info?id=85585263 | 188.114.96.1 | 200 OK | 1.4 kB |
URL GET HTTP/3salenzvs.live/api/item/info?id=85585263 IP188.114.96.1:443
Requested byhttps://salenzvs.live/product_details/85585263.html CertificateIssuerLet's Encrypt Subjectsalenzvs.live FingerprintC4:93:74:89:D7:54:43:B0:B2:39:98:89:7A:4C:0B:29:5E:EE:B7:66 ValidityTue, 02 Apr 2024 03:14:40 GMT - Mon, 01 Jul 2024 03:14:39 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (1602), with no line terminators Hash0ad12671ed47e5fd6f583d83050d06fb d0c2f3164173c582b05920b4f85d2aa4341f40cb 680babead4e06f18ab07c9aacd7c899cba3b971c61516bb3449e2fd90b23c28d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /api/item/info?id=85585263 HTTP/1.1
Host: salenzvs.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://salenzvs.live/product_details/85585263.html
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6Ilh4WDBRUUxVV1RVc0cyRmVmaTQ3TWc9PSIsInZhbHVlIjoiRk9UTm5aSXFJR0R5L1ZXMzNkM3FiWDVoVEl3UzdHZ0tjTnM5QytMbDI0YklwU0pEbjdGSEVkQ1E2OFk0WmJyTGt3RzFtakdYQzVjTWY3a1c5cStiSGVzclVQc2tXV29ZZ0lpZndqUWJnRFlkUHpyUjlCbmFxNWV0R3NSckF5bXoiLCJtYWMiOiJhMDdhMjA3ZGRiNDcwOTQ3NTE2NDNmNWEwZTkzMzVjOGY5NTY4ZTdhOTNkNjA5Zjg0NGZjZDA0ZTI2NDA5NzQzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjdVVjlxZXVYU2hzekRJQ2ViQTJrRFE9PSIsInZhbHVlIjoiV3ZLQXJLcXFVQjBnaXIrTWZmVytVcGRpcHM0Z2t6T0RhUWJNck1BbGtBeUd6NGl1SkxUZUZiMy9URmRUOWRRM2M2dHd0Sm45RDQzbmg1NTYxZlRZanBUV0R1N0krMmZGVjdnenlTTlg1YWxzbEVLZGF0LzVUdHRLUXBHMXJHTW0iLCJtYWMiOiI5MDk2OTVkM2VhZThjYTcwMzkzOTMzYzViNDI2NDNiNTcwNDdiM2ZjZDA3OTdmZWMwZDk5NTFlMDY5MjVmMDU5IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 20:49:44 GMT
content-type: application/json
cache-control: no-cache, private
x-ratelimit-limit: 60
x-ratelimit-remaining: 60
access-control-allow-origin: *
set-cookie: laravel_session=eyJpdiI6IndrK3Q3UHVpUE5QSWNaYXEzSXc4VkE9PSIsInZhbHVlIjoiNVZDY2FESktIck5Vc3Z6Y3RqNFBhcjlkQWlTU211UFoyWmxJN05OUE12K1dTYzZjQXlpTkRSQ2FxYlFsQTBiczBnd3Qwa3Q5Mk9HKzVQQ1Qyb25DeDNMd2NNcVZMRTUwa0dvSmRVMzdtTXZ1RklUNkZGd0NQWTl4NEZmcGtldDAiLCJtYWMiOiIxOGNmZjZhOTM0MGZiOGViOGY3MGZmNDliNjcxNmY5MzkzZmVhZGEzMjk5NDE2ZTAwODgxZTYyMDBhMmI0ZjJlIiwidGFnIjoiIn0%3D; expires=Tue, 23-Apr-2024 22:49:44 GMT; Max-Age=7200; path=/; httponly; samesite=lax
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=f5mPG%2BKc2a1lnm8%2FgTXewdOYTeB2jFuYoxWhjWTxKpM7tnpGtAOCorQ5%2Ff67Pq1naRlvA89s7LlxPUwwovkB7%2FP%2B%2B2yNOiHh991lvSmFAKp26eDN%2BQ8KkILg3fhR3RaZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8790b8c43ab3569b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| bshop-prod.store-image.jp/product/BSB231M103-0034/BSB231M103-0034_detail_25.jpg |  153.121.1.2 | 200 OK | 341 kB |
URL GET HTTP/2bshop-prod.store-image.jp/product/BSB231M103-0034/BSB231M103-0034_detail_25.jpg IP153.121.1.2:443 ASN#9370 SAKURA Internet Inc.
Requested byhttps://salenzvs.live/product_details/85585263.html CertificateIssuerSectigo Limited Subject*.store-image.jp Fingerprint34:37:BE:34:F2:C2:5B:EB:27:D3:F3:4C:91:BA:02:63:65:F7:75:7F ValidityMon, 29 May 2023 00:00:00 GMT - Fri, 28 Jun 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Compressed by shrink", progressive, precision 8, 1005x1338, components 3 Size341 kB (341364 bytes) Hash28b39076ba7efdcddcb33ec12a3fcf52 c14602d345fccda2fc66fa71111ee0955edb7ac7 8830a9d5dacf600fb2457387545adb8500423c405bbac4801c1936bd25a4522c
GET /product/BSB231M103-0034/BSB231M103-0034_detail_25.jpg HTTP/1.1
Host: bshop-prod.store-image.jp
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 23 Apr 2024 20:49:49 GMT
content-type: image/jpeg
content-length: 341364
last-modified: Thu, 23 Mar 2023 02:24:31 GMT
etag: "28b39076ba7efdcddcb33ec12a3fcf52"
x-amz-server-side-encryption: AES256
x-amz-meta-lightfile-original-size: 1309071
x-amz-meta-lightfile-status: done
x-amz-meta-lightfile-result-size: 1309071
accept-ranges: bytes
x-dh-cdn-version: 1
cache-control: max-age=1209600, s-maxage=604800, public
x-cache: HIT
via: 1.1 4b397a6a53bfcb755444b99f0e4cdf48.cloudfront.net (CloudFront), http/1.1 sv10-tky01-jp (ApacheTrafficServer-second [uScHs f p eN:t cCHp s ]), http/1.1 sv17-tky01-jp (ApacheTrafficServer-first [uScMsSfWpSeN:t cCMpSs ])
x-amz-cf-pop: NRT12-C3
x-amz-cf-id: H6gYcuvRbPR0OdszYq69BumodWDwarqFuxUDx7QBHKDzanwCGnWysg==
age: 39789
X-Firefox-Spdy: h2
|
|
| salenzvs.live/static/mall/css/demo1.css | 188.114.96.1 | 200 OK | 439 kB |
URL GET HTTP/3salenzvs.live/static/mall/css/demo1.css IP188.114.96.1:443
Requested byhttps://salenzvs.live/product_details/85585263.html CertificateIssuerLet's Encrypt Subjectsalenzvs.live FingerprintC4:93:74:89:D7:54:43:B0:B2:39:98:89:7A:4C:0B:29:5E:EE:B7:66 ValidityTue, 02 Apr 2024 03:14:40 GMT - Mon, 01 Jul 2024 03:14:39 GMT
Size439 kB (438856 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/mall/css/demo1.css HTTP/1.1
Host: salenzvs.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://salenzvs.live/product_details/85585263.html
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6Ilh4WDBRUUxVV1RVc0cyRmVmaTQ3TWc9PSIsInZhbHVlIjoiRk9UTm5aSXFJR0R5L1ZXMzNkM3FiWDVoVEl3UzdHZ0tjTnM5QytMbDI0YklwU0pEbjdGSEVkQ1E2OFk0WmJyTGt3RzFtakdYQzVjTWY3a1c5cStiSGVzclVQc2tXV29ZZ0lpZndqUWJnRFlkUHpyUjlCbmFxNWV0R3NSckF5bXoiLCJtYWMiOiJhMDdhMjA3ZGRiNDcwOTQ3NTE2NDNmNWEwZTkzMzVjOGY5NTY4ZTdhOTNkNjA5Zjg0NGZjZDA0ZTI2NDA5NzQzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjdVVjlxZXVYU2hzekRJQ2ViQTJrRFE9PSIsInZhbHVlIjoiV3ZLQXJLcXFVQjBnaXIrTWZmVytVcGRpcHM0Z2t6T0RhUWJNck1BbGtBeUd6NGl1SkxUZUZiMy9URmRUOWRRM2M2dHd0Sm45RDQzbmg1NTYxZlRZanBUV0R1N0krMmZGVjdnenlTTlg1YWxzbEVLZGF0LzVUdHRLUXBHMXJHTW0iLCJtYWMiOiI5MDk2OTVkM2VhZThjYTcwMzkzOTMzYzViNDI2NDNiNTcwNDdiM2ZjZDA3OTdmZWMwZDk5NTFlMDY5MjVmMDU5IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 20:49:42 GMT
content-type: text/css
last-modified: Thu, 14 Mar 2024 02:59:07 GMT
etag: W/"6b248-613961328e941-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 5539
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ztxfd7pYeDR0%2F2GpbUMxVip5pDmB0ajbX4rhKQJJXEXcxv%2FUkTcE0uzHzdyfYwbRUz%2BE2YUmRdL9wBLi%2B%2B762BJSHbnDFE%2F5xkSlSATcttpC8OR5MIs6fYVNkYoY69Me"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8790b8c16fb2569b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| salenzvs.live/static/mall/css/font/Montserrat-SemiBold.ttf | 188.114.96.1 | 200 OK | 244 kB |
URL GET HTTP/3salenzvs.live/static/mall/css/font/Montserrat-SemiBold.ttf IP188.114.96.1:443
Requested byhttps://salenzvs.live/product_details/85585263.html CertificateIssuerLet's Encrypt Subjectsalenzvs.live FingerprintC4:93:74:89:D7:54:43:B0:B2:39:98:89:7A:4C:0B:29:5E:EE:B7:66 ValidityTue, 02 Apr 2024 03:14:40 GMT - Mon, 01 Jul 2024 03:14:39 GMT
File typeTrueType Font data, 17 tables, 1st "GDEF", 15 names, Microsoft, language 0x409, Copyright 2011 The Montserrat Project Authors (https://github.com/JulietaUla/Montserrat)Montserr Size244 kB (243816 bytes) Hashc641dbee1d75892e4d88bdc31560c91b f829de4c176fb2ccf5e33360920f48de6794434e f227901ef48ac4d1fe4cc6ed0dbce99e6b38969babe5e05da2dfb33521b02944
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/mall/css/font/Montserrat-SemiBold.ttf HTTP/1.1
Host: salenzvs.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://salenzvs.live/static/mall/css/demo1.css
Cookie: XSRF-TOKEN=eyJpdiI6Ilh4WDBRUUxVV1RVc0cyRmVmaTQ3TWc9PSIsInZhbHVlIjoiRk9UTm5aSXFJR0R5L1ZXMzNkM3FiWDVoVEl3UzdHZ0tjTnM5QytMbDI0YklwU0pEbjdGSEVkQ1E2OFk0WmJyTGt3RzFtakdYQzVjTWY3a1c5cStiSGVzclVQc2tXV29ZZ0lpZndqUWJnRFlkUHpyUjlCbmFxNWV0R3NSckF5bXoiLCJtYWMiOiJhMDdhMjA3ZGRiNDcwOTQ3NTE2NDNmNWEwZTkzMzVjOGY5NTY4ZTdhOTNkNjA5Zjg0NGZjZDA0ZTI2NDA5NzQzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjdVVjlxZXVYU2hzekRJQ2ViQTJrRFE9PSIsInZhbHVlIjoiV3ZLQXJLcXFVQjBnaXIrTWZmVytVcGRpcHM0Z2t6T0RhUWJNck1BbGtBeUd6NGl1SkxUZUZiMy9URmRUOWRRM2M2dHd0Sm45RDQzbmg1NTYxZlRZanBUV0R1N0krMmZGVjdnenlTTlg1YWxzbEVLZGF0LzVUdHRLUXBHMXJHTW0iLCJtYWMiOiI5MDk2OTVkM2VhZThjYTcwMzkzOTMzYzViNDI2NDNiNTcwNDdiM2ZjZDA3OTdmZWMwZDk5NTFlMDY5MjVmMDU5IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 20:49:43 GMT
content-type: font/ttf
last-modified: Thu, 14 Mar 2024 02:59:07 GMT
etag: W/"3b868-61396132900b1-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 3432
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DRabGEufQBD%2B5epD9x9IgmmwZ5WFCi%2BuG0IqXXd7EEHZkYLbisBHNqwGZI8ZDOjojkYSidEjD%2FonwjkFUuljuJLOxHCGWpfEaT3P%2BKYQSZ5UMZlzD9YSEaFCXSQVgO1w"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8790b8c4fb7c569b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| salenzvs.live/static/mall/css/bootstrap.css | 188.114.96.1 | 200 OK | 205 kB |
URL GET HTTP/3salenzvs.live/static/mall/css/bootstrap.css IP188.114.96.1:443
Requested byhttps://salenzvs.live/product_details/85585263.html CertificateIssuerLet's Encrypt Subjectsalenzvs.live FingerprintC4:93:74:89:D7:54:43:B0:B2:39:98:89:7A:4C:0B:29:5E:EE:B7:66 ValidityTue, 02 Apr 2024 03:14:40 GMT - Mon, 01 Jul 2024 03:14:39 GMT
Size205 kB (205443 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/mall/css/bootstrap.css HTTP/1.1
Host: salenzvs.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://salenzvs.live/product_details/85585263.html
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6Ilh4WDBRUUxVV1RVc0cyRmVmaTQ3TWc9PSIsInZhbHVlIjoiRk9UTm5aSXFJR0R5L1ZXMzNkM3FiWDVoVEl3UzdHZ0tjTnM5QytMbDI0YklwU0pEbjdGSEVkQ1E2OFk0WmJyTGt3RzFtakdYQzVjTWY3a1c5cStiSGVzclVQc2tXV29ZZ0lpZndqUWJnRFlkUHpyUjlCbmFxNWV0R3NSckF5bXoiLCJtYWMiOiJhMDdhMjA3ZGRiNDcwOTQ3NTE2NDNmNWEwZTkzMzVjOGY5NTY4ZTdhOTNkNjA5Zjg0NGZjZDA0ZTI2NDA5NzQzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjdVVjlxZXVYU2hzekRJQ2ViQTJrRFE9PSIsInZhbHVlIjoiV3ZLQXJLcXFVQjBnaXIrTWZmVytVcGRpcHM0Z2t6T0RhUWJNck1BbGtBeUd6NGl1SkxUZUZiMy9URmRUOWRRM2M2dHd0Sm45RDQzbmg1NTYxZlRZanBUV0R1N0krMmZGVjdnenlTTlg1YWxzbEVLZGF0LzVUdHRLUXBHMXJHTW0iLCJtYWMiOiI5MDk2OTVkM2VhZThjYTcwMzkzOTMzYzViNDI2NDNiNTcwNDdiM2ZjZDA3OTdmZWMwZDk5NTFlMDY5MjVmMDU5IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 20:49:42 GMT
content-type: text/css
last-modified: Thu, 14 Mar 2024 02:59:07 GMT
etag: W/"32283-613961328e559-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 5539
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BRxPrXAjTfSzOxAIcSS3%2B6vBDVJJyEgxy1VPnheI5FHtJ%2FdyCX0nznTQ%2BBtOAg%2Bls%2BFuKgdmmMpSiq58sppVyhLFqkOGFYq2z9A5gnEuC%2BgY2oF3B3PbWDYp%2BH0HbCvZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8790b8c16fb0569b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| salenzvs.live/api/item/secondCate | 188.114.96.1 | 200 OK | 105 kB |
URL GET HTTP/3salenzvs.live/api/item/secondCate IP188.114.96.1:443
Requested byhttps://salenzvs.live/product_details/85585263.html CertificateIssuerLet's Encrypt Subjectsalenzvs.live FingerprintC4:93:74:89:D7:54:43:B0:B2:39:98:89:7A:4C:0B:29:5E:EE:B7:66 ValidityTue, 02 Apr 2024 03:14:40 GMT - Mon, 01 Jul 2024 03:14:39 GMT
Size105 kB (105151 bytes) Hash0f6eb50a0e462ce99c859937f98d1631 1379fe41a7264432d9d4c95b35fdff97a532e58b 28493e1fb974bc45eb0e57bcd9bd09b0e6b43c94714c21bab08903a5f7b2b5af
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /api/item/secondCate HTTP/1.1
Host: salenzvs.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://salenzvs.live/product_details/85585263.html
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6Ilh4WDBRUUxVV1RVc0cyRmVmaTQ3TWc9PSIsInZhbHVlIjoiRk9UTm5aSXFJR0R5L1ZXMzNkM3FiWDVoVEl3UzdHZ0tjTnM5QytMbDI0YklwU0pEbjdGSEVkQ1E2OFk0WmJyTGt3RzFtakdYQzVjTWY3a1c5cStiSGVzclVQc2tXV29ZZ0lpZndqUWJnRFlkUHpyUjlCbmFxNWV0R3NSckF5bXoiLCJtYWMiOiJhMDdhMjA3ZGRiNDcwOTQ3NTE2NDNmNWEwZTkzMzVjOGY5NTY4ZTdhOTNkNjA5Zjg0NGZjZDA0ZTI2NDA5NzQzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjdVVjlxZXVYU2hzekRJQ2ViQTJrRFE9PSIsInZhbHVlIjoiV3ZLQXJLcXFVQjBnaXIrTWZmVytVcGRpcHM0Z2t6T0RhUWJNck1BbGtBeUd6NGl1SkxUZUZiMy9URmRUOWRRM2M2dHd0Sm45RDQzbmg1NTYxZlRZanBUV0R1N0krMmZGVjdnenlTTlg1YWxzbEVLZGF0LzVUdHRLUXBHMXJHTW0iLCJtYWMiOiI5MDk2OTVkM2VhZThjYTcwMzkzOTMzYzViNDI2NDNiNTcwNDdiM2ZjZDA3OTdmZWMwZDk5NTFlMDY5MjVmMDU5IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 20:49:43 GMT
content-type: application/json
cache-control: no-cache, private
x-ratelimit-limit: 60
x-ratelimit-remaining: 57
access-control-allow-origin: *
set-cookie: laravel_session=eyJpdiI6IlArUEFhS1NRdEJyczVJVWY3Q092Y3c9PSIsInZhbHVlIjoiWFBCTUdIcVpzTlRkMzRsaE9ZK2tlZFlkaWYrWVRNbE80WUh1UlhuZlRLejA4UFJidENzc2EvRjRSOWR0ZlM1Y1d6STk1ZW1tSFBiMXlzSy8ySXUwZEY2KzZPeHBuVFQyUGFtMDRPTkd3UzNrQTM4eERJWXlhbGpJZVF0cVAxcDgiLCJtYWMiOiJlNWU3YmNkZjI1ZTIyYTI0NTkxZTNjMTI1ZjdiMzg1OTI3ZTIwZjRmOTc5M2FjZjNhMDM4NTA3Mzk3ZDMwNTVkIiwidGFnIjoiIn0%3D; expires=Tue, 23-Apr-2024 22:49:43 GMT; Max-Age=7200; path=/; httponly; samesite=lax
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ru2PP8Xn5DOqpitOOsUZ7FrncfFyKyjIk0tMP9sq%2FeVuA1SFraV1dwTEIyXkTxZ6rnAwLza7HbC35H6q0JHcDN%2Fyrxw2oCTTRZlwTO6ItTtLt%2B2Cd8a0AHPsgO9HQJo%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8790b8c3ca32569b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| salenzvs.live/static/mall/css/font/Montserrat-Regular.ttf | 188.114.96.1 | 200 OK | 246 kB |
URL GET HTTP/3salenzvs.live/static/mall/css/font/Montserrat-Regular.ttf IP188.114.96.1:443
Requested byhttps://salenzvs.live/product_details/85585263.html CertificateIssuerLet's Encrypt Subjectsalenzvs.live FingerprintC4:93:74:89:D7:54:43:B0:B2:39:98:89:7A:4C:0B:29:5E:EE:B7:66 ValidityTue, 02 Apr 2024 03:14:40 GMT - Mon, 01 Jul 2024 03:14:39 GMT
File typeTrueType Font data, 17 tables, 1st "GDEF", 13 names, Microsoft, language 0x409, Copyright 2011 The Montserrat Project Authors (https://github.com/JulietaUla/Montserrat)Montserr Size246 kB (245708 bytes) Hashee6539921d713482b8ccd4d0d23961bb d25b35242deb1c6ff888b8162ca2aacc356d3899 077cdab15161232a9ba7124d2ddd7a9425145750788e9a966c156cc66274f525
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/mall/css/font/Montserrat-Regular.ttf HTTP/1.1
Host: salenzvs.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://salenzvs.live/static/mall/css/demo1.css
Cookie: XSRF-TOKEN=eyJpdiI6Ilh4WDBRUUxVV1RVc0cyRmVmaTQ3TWc9PSIsInZhbHVlIjoiRk9UTm5aSXFJR0R5L1ZXMzNkM3FiWDVoVEl3UzdHZ0tjTnM5QytMbDI0YklwU0pEbjdGSEVkQ1E2OFk0WmJyTGt3RzFtakdYQzVjTWY3a1c5cStiSGVzclVQc2tXV29ZZ0lpZndqUWJnRFlkUHpyUjlCbmFxNWV0R3NSckF5bXoiLCJtYWMiOiJhMDdhMjA3ZGRiNDcwOTQ3NTE2NDNmNWEwZTkzMzVjOGY5NTY4ZTdhOTNkNjA5Zjg0NGZjZDA0ZTI2NDA5NzQzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjdVVjlxZXVYU2hzekRJQ2ViQTJrRFE9PSIsInZhbHVlIjoiV3ZLQXJLcXFVQjBnaXIrTWZmVytVcGRpcHM0Z2t6T0RhUWJNck1BbGtBeUd6NGl1SkxUZUZiMy9URmRUOWRRM2M2dHd0Sm45RDQzbmg1NTYxZlRZanBUV0R1N0krMmZGVjdnenlTTlg1YWxzbEVLZGF0LzVUdHRLUXBHMXJHTW0iLCJtYWMiOiI5MDk2OTVkM2VhZThjYTcwMzkzOTMzYzViNDI2NDNiNTcwNDdiM2ZjZDA3OTdmZWMwZDk5NTFlMDY5MjVmMDU5IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 20:49:43 GMT
content-type: font/ttf
last-modified: Thu, 14 Mar 2024 02:59:07 GMT
etag: W/"3bfcc-613961328fcc9-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 3432
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9%2FAUSRuGd4N94ooYGM%2Bouy%2FK5V3euF2aMmGpy9cHfNpHmcy5wAOAFj31lnfecLeHLNcQHhaT7w9aAYZ5YIQrFTEa7IA2iEPKUcq6yWkNxe%2B4B1AZUo%2BmO8bgajEAHSOY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8790b8c4fb6e569b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| salenzvs.live/static/default/img/20220514153821.png | 188.114.96.1 | 200 OK | 15 kB |
URL GET HTTP/3salenzvs.live/static/default/img/20220514153821.png IP188.114.96.1:443
Requested byhttps://salenzvs.live/product_details/85585263.html CertificateIssuerLet's Encrypt Subjectsalenzvs.live FingerprintC4:93:74:89:D7:54:43:B0:B2:39:98:89:7A:4C:0B:29:5E:EE:B7:66 ValidityTue, 02 Apr 2024 03:14:40 GMT - Mon, 01 Jul 2024 03:14:39 GMT
File typePNG image data, 245 x 222, 8-bit/color RGBA, non-interlaced Hash3ecbb8f543b70888626038f8cf81f227 a9bf6388621ba59e09e59e58713e8abfc04e5ff3 2214e58d7962a38491fb50f2f641b869917fba48120c02e5f207b5c9025326f8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/default/img/20220514153821.png HTTP/1.1
Host: salenzvs.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://salenzvs.live/product_details/85585263.html
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IkQ2LzlDU0paSWQ3WVZmbWhrRUxFc3c9PSIsInZhbHVlIjoiK01sNG9YblYway8wNUQwakliV0E4eG5NYytaR0pPVmJEQXRMQUZYYmlwVnMrc1pnUnc4ZkUyVm1hS1VaNzlOdlBISUJUNlBaNHZ3NW93bmFKbjRVaEk4M3BHSm51dXZDaStZaE1xMi9uT2h3UGJSRmZ0Mm1NVVdTYWpPOTBpa0EiLCJtYWMiOiJhMGJhMzYxZThmYzc2Mjg1ZTJmZDZjODZlMzdiMzU4NzNhYzRkNTBjMWFkNDI4YTU1N2U1NDI0N2U0OWU4NWJlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImhNcjNkVjlQaFVwb21VbDB2Z1Y1V3c9PSIsInZhbHVlIjoiamR5Q242SEtCOFhyaHBzWXFIYUtzc0NoSmI1enM0OFgvTEhUNlB5S2VxTDBnOWJYWW5YWlM3OXBmZVlpdjBaWlIzUWY2RzVxblVNcU9iMHJ1T3lnMXJTd0dLZGtaUzdKTXNvVUVJb2huek5xMzFjdlRFdU5sQSthK3luYkdzdzYiLCJtYWMiOiJlOWE2N2RkZmNiZGUxMGI2YWI4YjhkZmU1OGZkM2ZmZjZmNDZiZWQyNzViZWE3ZDA1OTM3ZWY4MjUxNjRkZjA3IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 20:49:53 GMT
content-type: image/png
content-length: 15411
last-modified: Thu, 14 Mar 2024 02:59:07 GMT
etag: "3c33-61396132781e0"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uNR%2FAELqhBTc2PYd4%2Fm4d0kaobVucNlJ4cwHhgmcsHmbRXnwrhMgyl3zPVIAyIORk4j8MvPgXl1IkSl%2B1hQ%2FpOWWySAFDSMlZvsaEFaQ1vkJDlQv6hDTko3%2BPidBxQhg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8790b90469f1569b-OSL
alt-svc: h3=":443"; ma=86400
|
|
| salenzvs.live/static/mall/css/jquery-ui.min.css | 188.114.96.1 | 200 OK | 34 kB |
URL GET HTTP/3salenzvs.live/static/mall/css/jquery-ui.min.css IP188.114.96.1:443
Requested byhttps://salenzvs.live/product_details/85585263.html CertificateIssuerLet's Encrypt Subjectsalenzvs.live FingerprintC4:93:74:89:D7:54:43:B0:B2:39:98:89:7A:4C:0B:29:5E:EE:B7:66 ValidityTue, 02 Apr 2024 03:14:40 GMT - Mon, 01 Jul 2024 03:14:39 GMT
File typeASCII text, with very long lines (2363) Hashbd2605faa1a82b81a3499b489ed5fb22 dab30edbfa1758f8a150148675a4758822986c05 541607bcce7ec5803b0dfc7b0565deec6605b5f7e9f464420b530ffd75015db9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/mall/css/jquery-ui.min.css HTTP/1.1
Host: salenzvs.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://salenzvs.live/product_details/85585263.html
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6Ilh4WDBRUUxVV1RVc0cyRmVmaTQ3TWc9PSIsInZhbHVlIjoiRk9UTm5aSXFJR0R5L1ZXMzNkM3FiWDVoVEl3UzdHZ0tjTnM5QytMbDI0YklwU0pEbjdGSEVkQ1E2OFk0WmJyTGt3RzFtakdYQzVjTWY3a1c5cStiSGVzclVQc2tXV29ZZ0lpZndqUWJnRFlkUHpyUjlCbmFxNWV0R3NSckF5bXoiLCJtYWMiOiJhMDdhMjA3ZGRiNDcwOTQ3NTE2NDNmNWEwZTkzMzVjOGY5NTY4ZTdhOTNkNjA5Zjg0NGZjZDA0ZTI2NDA5NzQzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjdVVjlxZXVYU2hzekRJQ2ViQTJrRFE9PSIsInZhbHVlIjoiV3ZLQXJLcXFVQjBnaXIrTWZmVytVcGRpcHM0Z2t6T0RhUWJNck1BbGtBeUd6NGl1SkxUZUZiMy9URmRUOWRRM2M2dHd0Sm45RDQzbmg1NTYxZlRZanBUV0R1N0krMmZGVjdnenlTTlg1YWxzbEVLZGF0LzVUdHRLUXBHMXJHTW0iLCJtYWMiOiI5MDk2OTVkM2VhZThjYTcwMzkzOTMzYzViNDI2NDNiNTcwNDdiM2ZjZDA3OTdmZWMwZDk5NTFlMDY5MjVmMDU5IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 20:49:42 GMT
content-type: text/css
last-modified: Thu, 14 Mar 2024 02:59:07 GMT
etag: W/"865d-6139613294319-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 5539
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EoBLUUMxv3ErlRlrUGcYgXrXZKA6qKDmdzRqQuvFO8%2Fm2MUA98frPHnIMWj1AVYJz559Fxmb7X8Lp%2FYwrZzPWGa096kE5AlS1wmOGfj4uNKAlsffYcNnW7lNn2YUK1gC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8790b8c16fac569b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| salenzvs.live/static/market/js/jquery.min.js | 188.114.96.1 | 200 OK | 84 kB |
URL GET HTTP/3salenzvs.live/static/market/js/jquery.min.js IP188.114.96.1:443
Requested byhttps://salenzvs.live/product_details/85585263.html CertificateIssuerLet's Encrypt Subjectsalenzvs.live FingerprintC4:93:74:89:D7:54:43:B0:B2:39:98:89:7A:4C:0B:29:5E:EE:B7:66 ValidityTue, 02 Apr 2024 03:14:40 GMT - Mon, 01 Jul 2024 03:14:39 GMT
File typeJavaScript source, ASCII text, with very long lines (32061) Hashe40ec2161fe7993196f23c8a07346306 afb90752e0a90c24b7f724faca86c5f3d15d1178 874706b2b1311a0719b5267f7d1cf803057e367e94ae1ff7bf78c5450d30f5d4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/market/js/jquery.min.js HTTP/1.1
Host: salenzvs.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://salenzvs.live/product_details/85585263.html
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6Ilh4WDBRUUxVV1RVc0cyRmVmaTQ3TWc9PSIsInZhbHVlIjoiRk9UTm5aSXFJR0R5L1ZXMzNkM3FiWDVoVEl3UzdHZ0tjTnM5QytMbDI0YklwU0pEbjdGSEVkQ1E2OFk0WmJyTGt3RzFtakdYQzVjTWY3a1c5cStiSGVzclVQc2tXV29ZZ0lpZndqUWJnRFlkUHpyUjlCbmFxNWV0R3NSckF5bXoiLCJtYWMiOiJhMDdhMjA3ZGRiNDcwOTQ3NTE2NDNmNWEwZTkzMzVjOGY5NTY4ZTdhOTNkNjA5Zjg0NGZjZDA0ZTI2NDA5NzQzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjdVVjlxZXVYU2hzekRJQ2ViQTJrRFE9PSIsInZhbHVlIjoiV3ZLQXJLcXFVQjBnaXIrTWZmVytVcGRpcHM0Z2t6T0RhUWJNck1BbGtBeUd6NGl1SkxUZUZiMy9URmRUOWRRM2M2dHd0Sm45RDQzbmg1NTYxZlRZanBUV0R1N0krMmZGVjdnenlTTlg1YWxzbEVLZGF0LzVUdHRLUXBHMXJHTW0iLCJtYWMiOiI5MDk2OTVkM2VhZThjYTcwMzkzOTMzYzViNDI2NDNiNTcwNDdiM2ZjZDA3OTdmZWMwZDk5NTFlMDY5MjVmMDU5IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 20:49:42 GMT
content-type: application/javascript
last-modified: Thu, 14 Mar 2024 02:59:07 GMT
etag: W/"14915-613961329d3a1-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 5539
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=J%2BI41%2B9hqTd0vmsCbHuezjiuQ06Jz0c8eBh2rzWuPRg%2FN8v3%2B8Qas58P9C%2FKh8OHhxEdMj%2Bc0tVQtvBJQ56i6boo21vyT82hjMNpE%2BkyoOTYPhQ7UyXUoRcYRjyQ9ogS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8790b8c16fc2569b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| salenzvs.live/static/default/js/delighters.js | 188.114.96.1 | 200 OK | 2.6 kB |
URL GET HTTP/3salenzvs.live/static/default/js/delighters.js IP188.114.96.1:443
Requested byhttps://salenzvs.live/product_details/85585263.html CertificateIssuerLet's Encrypt Subjectsalenzvs.live FingerprintC4:93:74:89:D7:54:43:B0:B2:39:98:89:7A:4C:0B:29:5E:EE:B7:66 ValidityTue, 02 Apr 2024 03:14:40 GMT - Mon, 01 Jul 2024 03:14:39 GMT
File typeUnicode text, UTF-8 text, with very long lines (2931), with no line terminators Hashcea7916cd59794680bc1752664077410 d4422dde39ad8be545e06aa2885d86c1cf64eae4 4bca5b5d62a05152ccea31e00d2357202f87d7dded717de41ef17d5fec719ff9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/default/js/delighters.js HTTP/1.1
Host: salenzvs.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://salenzvs.live/product_details/85585263.html
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6Ilh4WDBRUUxVV1RVc0cyRmVmaTQ3TWc9PSIsInZhbHVlIjoiRk9UTm5aSXFJR0R5L1ZXMzNkM3FiWDVoVEl3UzdHZ0tjTnM5QytMbDI0YklwU0pEbjdGSEVkQ1E2OFk0WmJyTGt3RzFtakdYQzVjTWY3a1c5cStiSGVzclVQc2tXV29ZZ0lpZndqUWJnRFlkUHpyUjlCbmFxNWV0R3NSckF5bXoiLCJtYWMiOiJhMDdhMjA3ZGRiNDcwOTQ3NTE2NDNmNWEwZTkzMzVjOGY5NTY4ZTdhOTNkNjA5Zjg0NGZjZDA0ZTI2NDA5NzQzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjdVVjlxZXVYU2hzekRJQ2ViQTJrRFE9PSIsInZhbHVlIjoiV3ZLQXJLcXFVQjBnaXIrTWZmVytVcGRpcHM0Z2t6T0RhUWJNck1BbGtBeUd6NGl1SkxUZUZiMy9URmRUOWRRM2M2dHd0Sm45RDQzbmg1NTYxZlRZanBUV0R1N0krMmZGVjdnenlTTlg1YWxzbEVLZGF0LzVUdHRLUXBHMXJHTW0iLCJtYWMiOiI5MDk2OTVkM2VhZThjYTcwMzkzOTMzYzViNDI2NDNiNTcwNDdiM2ZjZDA3OTdmZWMwZDk5NTFlMDY5MjVmMDU5IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 20:49:42 GMT
content-type: application/javascript
last-modified: Thu, 14 Mar 2024 02:59:07 GMT
etag: W/"a4b-613961327a120-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 5539
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Q7d6KUoDir4oCWFwFxkDTolZBV3DyzndLP6lbWsqoZZraVjgA6KZrNzD6TLnkXQcPUA9DlPGXgUa7AgA%2FJZtoidd2TgG2b0nOmCYjPh7gxjVcwwKxzA7sbFCuxJ9W9vD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8790b8c18ff2569b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| salenzvs.live/traffic_statistics?gurl= | 188.114.96.1 | 200 OK | 0 B |
URL GET HTTP/3salenzvs.live/traffic_statistics?gurl= IP188.114.96.1:443
Requested byhttps://salenzvs.live/product_details/85585263.html CertificateIssuerLet's Encrypt Subjectsalenzvs.live FingerprintC4:93:74:89:D7:54:43:B0:B2:39:98:89:7A:4C:0B:29:5E:EE:B7:66 ValidityTue, 02 Apr 2024 03:14:40 GMT - Mon, 01 Jul 2024 03:14:39 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /traffic_statistics?gurl= HTTP/1.1
Host: salenzvs.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://salenzvs.live/product_details/85585263.html
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6Ilh4WDBRUUxVV1RVc0cyRmVmaTQ3TWc9PSIsInZhbHVlIjoiRk9UTm5aSXFJR0R5L1ZXMzNkM3FiWDVoVEl3UzdHZ0tjTnM5QytMbDI0YklwU0pEbjdGSEVkQ1E2OFk0WmJyTGt3RzFtakdYQzVjTWY3a1c5cStiSGVzclVQc2tXV29ZZ0lpZndqUWJnRFlkUHpyUjlCbmFxNWV0R3NSckF5bXoiLCJtYWMiOiJhMDdhMjA3ZGRiNDcwOTQ3NTE2NDNmNWEwZTkzMzVjOGY5NTY4ZTdhOTNkNjA5Zjg0NGZjZDA0ZTI2NDA5NzQzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjdVVjlxZXVYU2hzekRJQ2ViQTJrRFE9PSIsInZhbHVlIjoiV3ZLQXJLcXFVQjBnaXIrTWZmVytVcGRpcHM0Z2t6T0RhUWJNck1BbGtBeUd6NGl1SkxUZUZiMy9URmRUOWRRM2M2dHd0Sm45RDQzbmg1NTYxZlRZanBUV0R1N0krMmZGVjdnenlTTlg1YWxzbEVLZGF0LzVUdHRLUXBHMXJHTW0iLCJtYWMiOiI5MDk2OTVkM2VhZThjYTcwMzkzOTMzYzViNDI2NDNiNTcwNDdiM2ZjZDA3OTdmZWMwZDk5NTFlMDY5MjVmMDU5IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 20:49:43 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache, private
set-cookie: XSRF-TOKEN=eyJpdiI6IkQ2LzlDU0paSWQ3WVZmbWhrRUxFc3c9PSIsInZhbHVlIjoiK01sNG9YblYway8wNUQwakliV0E4eG5NYytaR0pPVmJEQXRMQUZYYmlwVnMrc1pnUnc4ZkUyVm1hS1VaNzlOdlBISUJUNlBaNHZ3NW93bmFKbjRVaEk4M3BHSm51dXZDaStZaE1xMi9uT2h3UGJSRmZ0Mm1NVVdTYWpPOTBpa0EiLCJtYWMiOiJhMGJhMzYxZThmYzc2Mjg1ZTJmZDZjODZlMzdiMzU4NzNhYzRkNTBjMWFkNDI4YTU1N2U1NDI0N2U0OWU4NWJlIiwidGFnIjoiIn0%3D; expires=Tue, 23-Apr-2024 22:49:43 GMT; Max-Age=7200; path=/; samesite=lax
laravel_session=eyJpdiI6IkVJb3V2cnloaElUdFkzS2EzZDc0RVE9PSIsInZhbHVlIjoiWkFOWDQzNGd2WDVSaXp4ZktBU1NWeE5xQzdZMklwRlhkeUcvbmplK2w1RUpmK3FzbkdkcnhDdjJua0NFeGwyY1p4UUl3bHl4Z0MyNE91a3lzczE4Q3llUFhidUxTREpxa0tIYnVtZE9mWlZkT0E1S0wzWVdTaWUxZWx3T1ZpbkoiLCJtYWMiOiIzZmRlNmFjYWYwMzcyNjIwNDJhZDQ0ZjMyNzhkNDkzYjJmYzE5ZjEyNDM2ZTIyYWRmYTliMDc2MGQ1ZjU4NGU2IiwidGFnIjoiIn0%3D; expires=Tue, 23-Apr-2024 22:49:43 GMT; Max-Age=7200; path=/; httponly; samesite=lax
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZOeUB5fC7RLVyeoE1JT%2FchNxJXNmn8u31quTQKV7%2BaQDG8U7y7OS%2BRFM2XqOFxHT2TR5XFvRIwjzn1ZXB00RG6KEiofBVPVddp4WNOWMX4IRHWM9k9DBTN09hrSloW7N"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8790b8c4db5a569b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| salenzvs.live/favicon.ico | 188.114.96.1 | 200 OK | 61 B |
URL GET HTTP/3salenzvs.live/favicon.ico IP188.114.96.1:443
Requested byhttps://salenzvs.live/product_details/85585263.html CertificateIssuerLet's Encrypt Subjectsalenzvs.live FingerprintC4:93:74:89:D7:54:43:B0:B2:39:98:89:7A:4C:0B:29:5E:EE:B7:66 ValidityTue, 02 Apr 2024 03:14:40 GMT - Mon, 01 Jul 2024 03:14:39 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash2d963171282c4de9d6969472b23e47e3 1ea3d4ba9fe4b01b4edf5b7dcd20ac246d2187d8 87ed5a5a37969aa977d6f4fc16ae7a094bc1abc454307e011b65036646b4d3ab
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: salenzvs.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://salenzvs.live/product_details/85585263.html
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IkQ2LzlDU0paSWQ3WVZmbWhrRUxFc3c9PSIsInZhbHVlIjoiK01sNG9YblYway8wNUQwakliV0E4eG5NYytaR0pPVmJEQXRMQUZYYmlwVnMrc1pnUnc4ZkUyVm1hS1VaNzlOdlBISUJUNlBaNHZ3NW93bmFKbjRVaEk4M3BHSm51dXZDaStZaE1xMi9uT2h3UGJSRmZ0Mm1NVVdTYWpPOTBpa0EiLCJtYWMiOiJhMGJhMzYxZThmYzc2Mjg1ZTJmZDZjODZlMzdiMzU4NzNhYzRkNTBjMWFkNDI4YTU1N2U1NDI0N2U0OWU4NWJlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkVJb3V2cnloaElUdFkzS2EzZDc0RVE9PSIsInZhbHVlIjoiWkFOWDQzNGd2WDVSaXp4ZktBU1NWeE5xQzdZMklwRlhkeUcvbmplK2w1RUpmK3FzbkdkcnhDdjJua0NFeGwyY1p4UUl3bHl4Z0MyNE91a3lzczE4Q3llUFhidUxTREpxa0tIYnVtZE9mWlZkT0E1S0wzWVdTaWUxZWx3T1ZpbkoiLCJtYWMiOiIzZmRlNmFjYWYwMzcyNjIwNDJhZDQ0ZjMyNzhkNDkzYjJmYzE5ZjEyNDM2ZTIyYWRmYTliMDc2MGQ1ZjU4NGU2IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 20:49:44 GMT
content-type: application/json
cache-control: no-cache, private
vary: Accept-Encoding
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SCtooZ9PLr8O3T%2BcJvZEalWCL2tYW%2FQe%2BKQDCcLAz7EKPDZLHB9pa9mYRgUC1pLUiwHLMPD2sZxC33GpagHq6vreBrsrF1jiRkIC4qM%2FWeRCspD12t%2FmYVxsUx1Yrh9q"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8790b8c86f0f569b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| cdna.lystit.com/520/650/n/photos/amazon-prime/876b6a9f/vera-bradley-Provence-Paisley-Stripes-Long-Sleeve-Button-up-Shirt.jpeg | 172.64.144.10 | 200 OK | 75 kB |
URL GET HTTP/2cdna.lystit.com/520/650/n/photos/amazon-prime/876b6a9f/vera-bradley-Provence-Paisley-Stripes-Long-Sleeve-Button-up-Shirt.jpeg IP172.64.144.10:443
Requested byhttps://salenzvs.live/product_details/85585263.html CertificateIssuerLet's Encrypt Subjectlystit.com Fingerprint41:5E:89:63:FE:7B:DA:5C:5D:76:31:36:47:D0:9D:E0:3D:5E:00:6A ValidityTue, 05 Mar 2024 09:51:56 GMT - Mon, 03 Jun 2024 09:51:55 GMT
File typeJPEG image data, baseline, precision 8, 520x650, components 3 Hashcde98b11115fe065d51f05770d0ac139 f244e00b5e57955bdca551ae7b7d8d1dc327cc7d 921e880c937a19b656ce22afb4dbaf1c606c582e593ec01df6fefaa6a1bbc761
GET /520/650/n/photos/amazon-prime/876b6a9f/vera-bradley-Provence-Paisley-Stripes-Long-Sleeve-Button-up-Shirt.jpeg HTTP/1.1
Host: cdna.lystit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 23 Apr 2024 20:49:47 GMT
content-type: image/jpeg
last-modified: Tue, 23 Apr 2024 20:49:47 GMT
cf-cache-status: MISS
expires: Wed, 23 Apr 2025 20:49:47 GMT
cache-control: public, max-age=31536000
vary: Accept-Encoding
strict-transport-security: max-age=15552000; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8790b8dc69a15699-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| storage.googleapis.com/assets.mcomnyapps.net/international-wholesale/2023-04/images/charter-club-editorial-01@2x.jpg | 142.250.74.123 | 200 OK | 851 kB |
URL GET HTTP/2storage.googleapis.com/assets.mcomnyapps.net/international-wholesale/2023-04/images/charter-club-editorial-01@2x.jpg IP142.250.74.123:443
Requested byhttps://salenzvs.live/product_details/85585263.html CertificateIssuerGoogle Trust Services LLC Subjectstorage.googleapis.com Fingerprint42:33:73:56:74:C7:8E:ED:CD:00:0D:AE:0E:4F:AF:8D:9D:61:F9:1D ValidityMon, 18 Mar 2024 20:54:36 GMT - Mon, 10 Jun 2024 20:54:35 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1640x1478, components 3 Size851 kB (850930 bytes) Hash9f4a8c9ded3ca5afbd08c86ba5716ef6 fb4e35deadcc11237a8bae201d98f2c7b9ba47ce 0e6e9ad0111d69f236b8281fb4f0f361ca6ed19ac259658ba15d96ebf584cd59
GET /assets.mcomnyapps.net/international-wholesale/2023-04/images/charter-club-editorial-01@2x.jpg HTTP/1.1
Host: storage.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-guploader-uploadid: ABPtcPoFdmHQHqTkWj5reYvOi98o91xzUFpdMfzq2Zw_lGA2CSAVTWR-rr2PVkw09NWd0_tSDNFoa3FUig
expires: Tue, 23 Apr 2024 21:49:47 GMT
date: Tue, 23 Apr 2024 20:49:47 GMT
cache-control: public, max-age=3600
last-modified: Tue, 28 Mar 2023 21:14:27 GMT
etag: "9f4a8c9ded3ca5afbd08c86ba5716ef6"
x-goog-generation: 1680038067471716
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 850930
content-type: image/jpeg
x-goog-hash: crc32c=Ahio0A==, md5=n0qMne08pa+9CMhrpXFu9g==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 850930
vary: Origin
server: UploadServer
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| salenzvs.live/static/default/js/delighters.js | 188.114.96.1 | 200 OK | 2.6 kB |
URL GET HTTP/3salenzvs.live/static/default/js/delighters.js IP188.114.96.1:443
Requested byhttps://salenzvs.live/product_details/85585263.html CertificateIssuerLet's Encrypt Subjectsalenzvs.live FingerprintC4:93:74:89:D7:54:43:B0:B2:39:98:89:7A:4C:0B:29:5E:EE:B7:66 ValidityTue, 02 Apr 2024 03:14:40 GMT - Mon, 01 Jul 2024 03:14:39 GMT
File typeUnicode text, UTF-8 text, with very long lines (2931), with no line terminators Hashcea7916cd59794680bc1752664077410 d4422dde39ad8be545e06aa2885d86c1cf64eae4 4bca5b5d62a05152ccea31e00d2357202f87d7dded717de41ef17d5fec719ff9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/default/js/delighters.js HTTP/1.1
Host: salenzvs.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://salenzvs.live/product_details/85585263.html
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6Ilh4WDBRUUxVV1RVc0cyRmVmaTQ3TWc9PSIsInZhbHVlIjoiRk9UTm5aSXFJR0R5L1ZXMzNkM3FiWDVoVEl3UzdHZ0tjTnM5QytMbDI0YklwU0pEbjdGSEVkQ1E2OFk0WmJyTGt3RzFtakdYQzVjTWY3a1c5cStiSGVzclVQc2tXV29ZZ0lpZndqUWJnRFlkUHpyUjlCbmFxNWV0R3NSckF5bXoiLCJtYWMiOiJhMDdhMjA3ZGRiNDcwOTQ3NTE2NDNmNWEwZTkzMzVjOGY5NTY4ZTdhOTNkNjA5Zjg0NGZjZDA0ZTI2NDA5NzQzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjdVVjlxZXVYU2hzekRJQ2ViQTJrRFE9PSIsInZhbHVlIjoiV3ZLQXJLcXFVQjBnaXIrTWZmVytVcGRpcHM0Z2t6T0RhUWJNck1BbGtBeUd6NGl1SkxUZUZiMy9URmRUOWRRM2M2dHd0Sm45RDQzbmg1NTYxZlRZanBUV0R1N0krMmZGVjdnenlTTlg1YWxzbEVLZGF0LzVUdHRLUXBHMXJHTW0iLCJtYWMiOiI5MDk2OTVkM2VhZThjYTcwMzkzOTMzYzViNDI2NDNiNTcwNDdiM2ZjZDA3OTdmZWMwZDk5NTFlMDY5MjVmMDU5IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 20:49:42 GMT
content-type: application/javascript
last-modified: Thu, 14 Mar 2024 02:59:07 GMT
etag: W/"a4b-613961327a120-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 5539
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=29MFMVfCNRCblTUX5nfPBFFgJzGjFjlAFY0FJXoPparwED6ZVqO7v%2FsfI42MYlG2Ma5dWKCO4rBtQl15eF0kWID%2Fw1H5jkLw5kNJ5YwdfARxlfMNilLNAmP%2B01PWzRCm"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8790b8c39a03569b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| wheat.eu/cdn/shop/files/Rib_T-Shirt_Reese-Jersey_Tops_and_T-Shirts-0151i-007-3006_soft_brown_1024x.jpg?v=1688471343 |  23.227.38.65 | 200 OK | 103 kB |
URL GET HTTP/2wheat.eu/cdn/shop/files/Rib_T-Shirt_Reese-Jersey_Tops_and_T-Shirts-0151i-007-3006_soft_brown_1024x.jpg?v=1688471343 IP23.227.38.65:443
Requested byhttps://salenzvs.live/product_details/85585263.html CertificateIssuerLet's Encrypt Subjectwheat.eu Fingerprint6E:CD:6C:2F:81:44:7D:C3:E6:6D:55:29:99:A7:1C:35:23:1B:56:91 ValidityMon, 11 Mar 2024 10:09:44 GMT - Sun, 09 Jun 2024 10:09:43 GMT
File typeRIFF (little-endian) data, Web/P image Size103 kB (102726 bytes) Hashe10c411e1987cb5899be90efa5ac88d6 ee41be59575e368cac3fc6c9a6be99591cdaa5f9 321b22e809ec08b667f4f6b8646aeeefdcbfcc7321b7f6a86d6f202d18603d83
GET /cdn/shop/files/Rib_T-Shirt_Reese-Jersey_Tops_and_T-Shirts-0151i-007-3006_soft_brown_1024x.jpg?v=1688471343 HTTP/1.1
Host: wheat.eu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 23 Apr 2024 20:49:48 GMT
content-type: image/webp
content-length: 102726
x-sorting-hat-podid: 341
x-sorting-hat-shopid: 12847665
access-control-allow-origin: *
access-control-expose-headers: *
cache-control: public, max-age=31557600
content-security-policy: sandbox allow-scripts allow-forms allow-modals allow-popups allow-downloads allow-top-navigation-by-user-activation
source-length: 542817
source-type: image/jpeg
timing-allow-origin: *
vary: Accept, Accept-Encoding
x-content-type-options: nosniff
x-request-id: 5dfb2d12-cfdd-41dc-837f-9f801ecabe11-1713905386
x-xss-protection: 1; mode=block
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-dc: gcp-us-east1,gcp-us-east1
last-modified: Tue, 23 Apr 2024 20:49:48 GMT
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rXHGlqfczo8hBHa%2FFx4Ay2RgJT6ikzTomCH6%2F809gLjFGM9fNH9n3WKjbQXdpITDfa%2BLU7ZyMPsL%2FIwKTh%2FLrQ6%2BxkuPBg3QivlfSdiBwgA9z%2F%2B0olFMXtbj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server-timing: imagery;dur=660.421, imageryFetch;dur=193.760, imageryProcess;dur=464.556;desc="image", cfRequestDuration;dur=1215.000153
x-permitted-cross-domain-policies: none
x-download-options: noopen
server: cloudflare
cf-ray: 8790b8dcbed0930a-CPH
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| salenzvs.live/static/store/css/checkout.css | 188.114.96.1 | 200 OK | 4.8 kB |
URL GET HTTP/3salenzvs.live/static/store/css/checkout.css IP188.114.96.1:443
Requested byhttps://salenzvs.live/product_details/85585263.html CertificateIssuerLet's Encrypt Subjectsalenzvs.live FingerprintC4:93:74:89:D7:54:43:B0:B2:39:98:89:7A:4C:0B:29:5E:EE:B7:66 ValidityTue, 02 Apr 2024 03:14:40 GMT - Mon, 01 Jul 2024 03:14:39 GMT
File typeASCII text, with very long lines (5046), with no line terminators Hash78004bf5e334b836b476f48fcb42d6b2 1b118f3acfd8329b2219397946fbdcdd2eb8a8a1 36ec4ba8f16410525a9046d41eab8c0acb179340bed5d10a795edb52fc899bb0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/store/css/checkout.css HTTP/1.1
Host: salenzvs.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://salenzvs.live/product_details/85585263.html
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6Ilh4WDBRUUxVV1RVc0cyRmVmaTQ3TWc9PSIsInZhbHVlIjoiRk9UTm5aSXFJR0R5L1ZXMzNkM3FiWDVoVEl3UzdHZ0tjTnM5QytMbDI0YklwU0pEbjdGSEVkQ1E2OFk0WmJyTGt3RzFtakdYQzVjTWY3a1c5cStiSGVzclVQc2tXV29ZZ0lpZndqUWJnRFlkUHpyUjlCbmFxNWV0R3NSckF5bXoiLCJtYWMiOiJhMDdhMjA3ZGRiNDcwOTQ3NTE2NDNmNWEwZTkzMzVjOGY5NTY4ZTdhOTNkNjA5Zjg0NGZjZDA0ZTI2NDA5NzQzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjdVVjlxZXVYU2hzekRJQ2ViQTJrRFE9PSIsInZhbHVlIjoiV3ZLQXJLcXFVQjBnaXIrTWZmVytVcGRpcHM0Z2t6T0RhUWJNck1BbGtBeUd6NGl1SkxUZUZiMy9URmRUOWRRM2M2dHd0Sm45RDQzbmg1NTYxZlRZanBUV0R1N0krMmZGVjdnenlTTlg1YWxzbEVLZGF0LzVUdHRLUXBHMXJHTW0iLCJtYWMiOiI5MDk2OTVkM2VhZThjYTcwMzkzOTMzYzViNDI2NDNiNTcwNDdiM2ZjZDA3OTdmZWMwZDk5NTFlMDY5MjVmMDU5IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 20:49:42 GMT
content-type: text/css
last-modified: Thu, 14 Mar 2024 02:59:07 GMT
etag: W/"12d8-61396132b006a-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 5539
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1FIydLIZWgwPWIeBs2h2%2FJ79xz2aPv8E2fUOFM9ZfjTP22bR8Wj58CvGUue6VeQO6Bmr1gMkV0eF8P6Lt%2BuyDXuWvvlPnhuc3ss%2FXtTeimTh%2BsNTa5nY23Uq8pt3sWTE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8790b8c16fba569b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| salenzvs.live/static/default/js/public.js | 188.114.96.1 | 200 OK | 1.9 kB |
URL GET HTTP/3salenzvs.live/static/default/js/public.js IP188.114.96.1:443
Requested byhttps://salenzvs.live/product_details/85585263.html CertificateIssuerLet's Encrypt Subjectsalenzvs.live FingerprintC4:93:74:89:D7:54:43:B0:B2:39:98:89:7A:4C:0B:29:5E:EE:B7:66 ValidityTue, 02 Apr 2024 03:14:40 GMT - Mon, 01 Jul 2024 03:14:39 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (1900), with no line terminators Hash51c8cad5196fedebda08621dea5c6405 5edaf17734119cf9985a4c1474bbde7eb801de35 13d077ad8e2e39537edac3359ea189cc9dd414f7a939e19950e22d7f7bcb1d34
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/default/js/public.js HTTP/1.1
Host: salenzvs.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://salenzvs.live/product_details/85585263.html
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6Ilh4WDBRUUxVV1RVc0cyRmVmaTQ3TWc9PSIsInZhbHVlIjoiRk9UTm5aSXFJR0R5L1ZXMzNkM3FiWDVoVEl3UzdHZ0tjTnM5QytMbDI0YklwU0pEbjdGSEVkQ1E2OFk0WmJyTGt3RzFtakdYQzVjTWY3a1c5cStiSGVzclVQc2tXV29ZZ0lpZndqUWJnRFlkUHpyUjlCbmFxNWV0R3NSckF5bXoiLCJtYWMiOiJhMDdhMjA3ZGRiNDcwOTQ3NTE2NDNmNWEwZTkzMzVjOGY5NTY4ZTdhOTNkNjA5Zjg0NGZjZDA0ZTI2NDA5NzQzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjdVVjlxZXVYU2hzekRJQ2ViQTJrRFE9PSIsInZhbHVlIjoiV3ZLQXJLcXFVQjBnaXIrTWZmVytVcGRpcHM0Z2t6T0RhUWJNck1BbGtBeUd6NGl1SkxUZUZiMy9URmRUOWRRM2M2dHd0Sm45RDQzbmg1NTYxZlRZanBUV0R1N0krMmZGVjdnenlTTlg1YWxzbEVLZGF0LzVUdHRLUXBHMXJHTW0iLCJtYWMiOiI5MDk2OTVkM2VhZThjYTcwMzkzOTMzYzViNDI2NDNiNTcwNDdiM2ZjZDA3OTdmZWMwZDk5NTFlMDY5MjVmMDU5IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 20:49:42 GMT
content-type: application/javascript
last-modified: Thu, 14 Mar 2024 02:59:07 GMT
etag: W/"76f-613961327a8f0-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 5539
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TpNu50t5ujQVw591ryOtnByqDK2oYM2BRG6dbQeSAYjbHL%2FZLM78dI39YthzFhwocW17MnMc3RJWV%2FU1Fe28KhQ37eWhuHKF7avyCbJwBQl%2FS7%2FD1YTKhdHErNIqD3cE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8790b8c17fdd569b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|