| sw-themes.com/porto_dummy/wp-content/uploads/images/shop_payment_logo.png |  172.67.187.134 | 200 OK | 1.6 kB |
URL GET HTTP/2sw-themes.com/porto_dummy/wp-content/uploads/images/shop_payment_logo.png IP172.67.187.134:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subjectsw-themes.com FingerprintB0:B8:DA:03:E8:E4:C2:FF:43:12:C2:4C:CF:A8:C6:A8:1C:F1:0C:DC ValidityFri, 26 Apr 2024 18:27:08 GMT - Thu, 25 Jul 2024 18:27:07 GMT
File typePNG image data, 240 x 32, 8-bit colormap, non-interlaced Hash3084214edcd42575abb8f85b339a273b aeb0c655b5ca1e557f9e1b2f928f4eb1e1efd511 1368c2b3f5f7332592f321051c5b39bc794eaa0e584157d7926781c7d1e83579
GET /porto_dummy/wp-content/uploads/images/shop_payment_logo.png HTTP/1.1
Host: sw-themes.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 04 May 2024 14:45:25 GMT
content-type: image/png
content-length: 1616
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Thu, 02 Feb 2023 05:38:50 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 2372
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=y8n61ceaQNg23Dm05VhMq%2FEhYSqs0nNWLonpHmQ36UBUGRCBnhGW1%2FJBwhXwTaUez07xT7KPln5zw1bHQ22%2FIqhLGE7FxsrCTVeKEMTqLFStAgUXL2rkC7veOeevtJiv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e946406f0156b7-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| |  188.114.96.1 | 301 Moved Permanently | 0 B |
URL User Request GET HTTP/2IP188.114.96.1:443
CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: 3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Sat, 04 May 2024 14:45:25 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.4.33
X-Redirect-By: WordPress
Location: https://www.3beesandme.shop/
Cache-Control: max-age=0
Expires: Sat, 04 May 2024 14:45:24 GMT
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ojdAUY%2F5oAZ2fy9lGqeWaP6xPX9CNvmBVYENB5geInSRvj4Pfh7%2FyspuAqfs6Sj2Neyd4vXC8wjNfhwSLO2NOWQiv8GaOmWXV91ghfvw3zd7vqy2oMIQhYSXQKgpCO0oBI8%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 87e94638a83e0b31-OSL
alt-svc: h2=":443"; ma=60
|
|
| www.3beesandme.shop/wp-content/cache/min/1/wp-content/themes/porto/style.css?ver=1713103522 | 188.114.97.1 | 200 OK | 28 B |
URL GET HTTP/3www.3beesandme.shop/wp-content/cache/min/1/wp-content/themes/porto/style.css?ver=1713103522 IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
File typeASCII text, with no line terminators Hash0320c07ca5fb49adf34c5361f29f3582 92445afbe317486d33d94a8b9f5cbb3e319fc727 4c1f9850e1c7c253ac387218e478215265546c83f35b8f3fa8d1163d9b4b8bcc
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/cache/min/1/wp-content/themes/porto/style.css?ver=1713103522 HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:25 GMT
content-type: text/css
content-length: 28
last-modified: Sun, 14 Apr 2024 14:05:22 GMT
etag: "661be2a2-1c"
expires: Sun, 05 May 2024 02:45:25 GMT
cache-control: max-age=43200
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Swq0HLIElwMqqT6oqPHYRGpm4BOiBrBpUKmSi%2FaXJYrMo6wr7GwDogtN7IiaGtmi5N6CKNqrRiKDrIwkFF1RO%2F8SQRojYYIRRsdGY4qvJkk72WGx%2BrtYz56TUb%2F6NBPkcCdJQQ7H"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e9463f6fef0b49-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.3beesandme.shop/wp-content/uploads/1713/23/embellished-linen-dress-dresses_0-300x300.jpg | 188.114.97.1 | 200 OK | 6.8 kB |
URL GET HTTP/3www.3beesandme.shop/wp-content/uploads/1713/23/embellished-linen-dress-dresses_0-300x300.jpg IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 300x300, components 3 Hashb5103134494633de685fb9821d0675cf c98248759e2521203e7fb13a368f341dae3cb9a6 b7bad7fb6cc4b0271483734771eb1b5c9f61bf4f3f8f206ceca1c5cb84af1aef
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/1713/23/embellished-linen-dress-dresses_0-300x300.jpg HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:25 GMT
content-type: image/jpeg
content-length: 6771
last-modified: Thu, 18 Apr 2024 07:04:15 GMT
etag: "6620c5ef-1a73"
expires: Mon, 03 Jun 2024 14:45:25 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cqlrvcxMp2duWorpHEY86l66%2BmVTEDTxof%2FYNfpTyP%2B5sVyDxDKL0pKxZE4I4dYGCJh06Q1%2BSio2p%2FXXZxdMUfORS4X7Zt6ERYJ0SEKBLfFyjXL%2BuIu0KaW9RUIMoBk8ZL8ZnN4X"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e9463f981a0b49-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.3beesandme.shop/wp-content/uploads/1713/03/baby-boys-logo-print-t-shirt-in-blue-aigner_1-300x300.jpg | 188.114.97.1 | 200 OK | 3.4 kB |
URL GET HTTP/3www.3beesandme.shop/wp-content/uploads/1713/03/baby-boys-logo-print-t-shirt-in-blue-aigner_1-300x300.jpg IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 300x300, components 3 Hash4991baa3ded3c64cb0d04467a62bc14b 35c5f6c18400703facfb91aa74dd7c76f4d1fc6d 7995ab0919483f3cd281f9a5b4cd408d3de50371230002f0a146b5c5e346e314
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/1713/03/baby-boys-logo-print-t-shirt-in-blue-aigner_1-300x300.jpg HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:25 GMT
content-type: image/jpeg
content-length: 3431
last-modified: Sat, 20 Apr 2024 08:55:08 GMT
etag: "662382ec-d67"
expires: Mon, 03 Jun 2024 14:45:25 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KJNBoJoaQnmuDopVixleMwX4hf%2BERlJ6jHp9lLEPv561glAphyYWYcxZrv16WpJppitjELE2bMiy7EkZiLnqcoFVp5egfO34YfN48JsQMgMnyHyfEGb2WhZVrkYKieXTMG800FUG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e9463fa8300b49-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.3beesandme.shop/wp-content/uploads/1713/03/baby-boys-logo-print-t-shirt-in-blue-aigner_0-300x300.jpg | 188.114.97.1 | 200 OK | 7.5 kB |
URL GET HTTP/3www.3beesandme.shop/wp-content/uploads/1713/03/baby-boys-logo-print-t-shirt-in-blue-aigner_0-300x300.jpg IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 300x300, components 3 Hashb863d47a6893d654e4069376ae12382d 4bd93763e6a0e996976fc72df2d2edd5d47f100c 6bb151ffef8b2960f8a0c027d6b3b7a0b47c611e59e9cbcc25fe6ab5b755b49f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/1713/03/baby-boys-logo-print-t-shirt-in-blue-aigner_0-300x300.jpg HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:25 GMT
content-type: image/jpeg
content-length: 7504
last-modified: Sat, 20 Apr 2024 08:55:02 GMT
etag: "662382e6-1d50"
expires: Mon, 03 Jun 2024 14:45:25 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3yq2KhPsMj0c978nN8euqAhodYU5dzkIuAa51COL3qPR8xHN%2BFqpHTcoLBBGUU9VUR%2FHGH3sJ36kHMd7a8QcxpJZrxoAhXinXHWscjY5%2BDDZsalyhMbE%2B5u%2BAMecOstKoUezuz78"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e9463f981d0b49-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.3beesandme.shop/wp-content/uploads/1713/79/kids-frog-print-logo-t-shirt-in-white-marni_0-85x85.jpg | 188.114.97.1 | 200 OK | 1.4 kB |
URL GET HTTP/3www.3beesandme.shop/wp-content/uploads/1713/79/kids-frog-print-logo-t-shirt-in-white-marni_0-85x85.jpg IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 85x85, components 3 Hash41931645b21afc6b8809c52a0887c5fd 69a7ca028bf33352ffe089ad022879664e4297d3 4f750ef67f4acb8e0b15efb7096c74cf151a387b18480876ab5f01475e5e8693
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/1713/79/kids-frog-print-logo-t-shirt-in-white-marni_0-85x85.jpg HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:25 GMT
content-type: image/jpeg
content-length: 1359
last-modified: Tue, 16 Apr 2024 15:00:51 GMT
etag: "661e92a3-54f"
expires: Mon, 03 Jun 2024 14:45:25 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BDrdWpbO5NF%2B5VRvI%2Bs4qXvRHhrz7tE8hBZuCBiQmQYd2SP7rEPwPmFBptloHk4C0BNbrkodcfqLSvHd3naKcjsD23jr9OOTLN254PRjRptDwj8egd%2FL0mcfMVF%2BmGFTiumOoCrM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e94640289d0b49-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.3beesandme.shop/wp-content/uploads/1713/79/kids-frog-print-logo-t-shirt-in-white-marni_1-85x85.jpg | 188.114.97.1 | 200 OK | 952 B |
URL GET HTTP/3www.3beesandme.shop/wp-content/uploads/1713/79/kids-frog-print-logo-t-shirt-in-white-marni_1-85x85.jpg IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 85x85, components 3 Hash8680c092e79dfb6e359658d21fb159f9 9dc053fb3d0fd981ffe63720cdc9f67c53418f2e 6df4654899c175e108ecbedff5c7c3b666848ce150a098f0e9b62a41988ba4a7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/1713/79/kids-frog-print-logo-t-shirt-in-white-marni_1-85x85.jpg HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:25 GMT
content-type: image/jpeg
content-length: 952
last-modified: Tue, 16 Apr 2024 15:01:00 GMT
etag: "661e92ac-3b8"
expires: Mon, 03 Jun 2024 14:45:25 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZfgJxGpTJlq%2FhVuM6q9flmlTKF2zQ2tl9S1SexqXFhUecXdUh353f7mkvqlgMRDpLb2GlODqIO9nBDov6aQEAC7dUemBcFXRPXQL04hS%2BhvOMMJUPfEJy8g9%2FYB08XKs1xiJqo%2Bp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e9464028a70b49-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.3beesandme.shop/wp-content/uploads/1713/91/pola-330920-small-coaling-system-pola-g-scale-buildings-and-accessories_0-85x85.jpg | 188.114.97.1 | 200 OK | 3.4 kB |
URL GET HTTP/3www.3beesandme.shop/wp-content/uploads/1713/91/pola-330920-small-coaling-system-pola-g-scale-buildings-and-accessories_0-85x85.jpg IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 85x85, components 3 Hashd9d64c383ce41238acd0521ef5487e92 23192f349d0c25968f2d8705333dbdcb083162e6 67eb331e51735316cdca108079d3f9090c64634982ab0dbafdde31eac3f20583
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/1713/91/pola-330920-small-coaling-system-pola-g-scale-buildings-and-accessories_0-85x85.jpg HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:25 GMT
content-type: image/jpeg
content-length: 3402
last-modified: Tue, 16 Apr 2024 18:15:16 GMT
etag: "661ec034-d4a"
expires: Mon, 03 Jun 2024 14:45:25 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EYLzK1CswNrBuv0WojCDzBDh1EzEtncRKYzDvwS%2BhrmxGaWSGf9BKaI1NUtnEpKpVYlZXRfVU4IdCvp%2BsHhjHEeztca0kfoXtHSvCaZ5%2FR4zWRCIQH9Rr3UrnaqpPLafaBDnZVG%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e9464038b00b49-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.3beesandme.shop/wp-content/uploads/1713/38/baby-cashmerre-logo-bunny-hat-fendi-boys_0-85x85.jpg | 188.114.97.1 | 200 OK | 1.6 kB |
URL GET HTTP/3www.3beesandme.shop/wp-content/uploads/1713/38/baby-cashmerre-logo-bunny-hat-fendi-boys_0-85x85.jpg IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 85x85, components 3 Hash55a6050838fedf7cffaebf66c9dd5384 28770f563e4dbaad51ac193650339700aed089b3 501a148c2a016ec22f0f1aaa42c805776b52975316ff807b26fe8805469d1f21
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/1713/38/baby-cashmerre-logo-bunny-hat-fendi-boys_0-85x85.jpg HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:25 GMT
content-type: image/jpeg
content-length: 1619
last-modified: Thu, 18 Apr 2024 11:14:13 GMT
etag: "66210085-653"
expires: Mon, 03 Jun 2024 14:45:25 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cdhPkH00coIB2l%2FHyjTdMwogFB5gYqjkDMJkaMXcLgM3QfOcJ1wTTIqWFIQYrBrdp4Ao6yYWvIGujbnt2InA6R%2FQRe48REyOcvuIbNqphwwepgpEj7cqxOLPjDSGEV5IehBQwRZ%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e9464028a80b49-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.3beesandme.shop/wp-content/uploads/1713/38/baby-cashmerre-logo-bunny-hat-fendi-boys_1-85x85.jpg | 188.114.97.1 | 200 OK | 3.1 kB |
URL GET HTTP/3www.3beesandme.shop/wp-content/uploads/1713/38/baby-cashmerre-logo-bunny-hat-fendi-boys_1-85x85.jpg IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 85x85, components 3 Hashf5f911748104657439a4c33891c62693 7dadf6a899df30fc7e0fb0f73d7e6d68210c4613 797f2456685291aa36696cbc4f54f02522a4f953f7c6151033dd301c4c1ba0b4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/1713/38/baby-cashmerre-logo-bunny-hat-fendi-boys_1-85x85.jpg HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:25 GMT
content-type: image/jpeg
content-length: 3051
last-modified: Thu, 18 Apr 2024 11:15:56 GMT
etag: "662100ec-beb"
expires: Mon, 03 Jun 2024 14:45:25 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=T%2BAz3tzhtVVITLi0fOEyR0C6wtcviKAY6oFUVeyUAHaUASTH2aQS5CyFrQMl9%2F7RjG03hpe%2FolarmZGhxCVi90Jkq7HY7A3xVquLjjuG7Vno1WLWB3AXX%2FNiBEOhdfCwJ9Jt6X3d"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e9464038af0b49-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.3beesandme.shop/wp-content/themes/porto-child/style.css?ver=6.5.2 | 188.114.97.1 | 200 OK | 8.4 kB |
URL GET HTTP/3www.3beesandme.shop/wp-content/themes/porto-child/style.css?ver=6.5.2 IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
File typeASCII text, with very long lines (400), with CRLF, LF line terminators Hash58edb82abd16eb13753d3c02a207f88e 8cb2ff16da34ad573b9e933e51473756eaaae116 cd2469bf640dc92487bc681794f3a53358863da2586874529e7f7145c21e1208
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/porto-child/style.css?ver=6.5.2 HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:25 GMT
content-type: text/css
last-modified: Sun, 14 Apr 2024 14:05:22 GMT
etag: W/"661be2a2-312"
expires: Sun, 05 May 2024 02:45:25 GMT
cache-control: max-age=43200
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MYIFviLGEmKas8DAWX8vVWWqZmaY6FEOEWVr6t2IWl6OCnDGAGdoLw5reNUVU29uneoKMC0QlGebBgxUPhzXFGngOirdGPBxqo6MkzjrKL3x3%2BVNii4IdEt7%2FG8lRv0ye9YudNTJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e9463f7ffe0b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.3beesandme.shop/wp-content/cache/min/1/wp-content/plugins/contact-form-7/includes/js/index.js?ver=1713103522 | 188.114.97.1 | 200 OK | 12 kB |
URL GET HTTP/3www.3beesandme.shop/wp-content/cache/min/1/wp-content/plugins/contact-form-7/includes/js/index.js?ver=1713103522 IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
File typeJavaScript source, ASCII text, with very long lines (12942), with no line terminators Hashcc5e69ac94305dc03d3aa9ec854e388b 3aa97238527b7ff6d2df1990dfead7acc888b815 4af9dac8fb9b63a0212749b1d6a4466fab62ba560c630c71b378c1fcde550797
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/cache/min/1/wp-content/plugins/contact-form-7/includes/js/index.js?ver=1713103522 HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:25 GMT
content-type: application/javascript
last-modified: Sun, 14 Apr 2024 14:05:22 GMT
vary: Accept-Encoding
etag: W/"661be2a2-328e"
expires: Sun, 05 May 2024 02:45:25 GMT
cache-control: max-age=43200
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lkm0sKY2uCiXb78QP8siGgfjH4CC5u8wnqQ68ByJ5FdQfFwSwKvF4ogeAU%2BJMfBbKukuPi0wqGWjVtZRlHZ6%2FITAfjPvNrJ1WnVp1mY6x0BAg9erVlsU0ZFMn2Ty2oVv5a62IOVi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9464048be0b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.3beesandme.shop/wp-content/uploads/elementor/css/post-143.css?ver=1712686664 | 188.114.97.1 | 200 OK | 8.8 kB |
URL GET HTTP/3www.3beesandme.shop/wp-content/uploads/elementor/css/post-143.css?ver=1712686664 IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
File typeASCII text, with very long lines (6724), with no line terminators Hashd7ff6d2def3d002c85c151d70c421c2b ec127450fb3dce2b8e0fd79b014fb9d79b109275 73240e648a737b03b39c40f7f36c4f513899b0316e8b2a400fb7a91b2e8597ff
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/elementor/css/post-143.css?ver=1712686664 HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:25 GMT
content-type: text/css
last-modified: Sun, 14 Apr 2024 14:05:22 GMT
vary: Accept-Encoding
etag: W/"661be2a2-1a44"
expires: Sun, 05 May 2024 02:45:25 GMT
cache-control: max-age=43200
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cXZpPu847JZRrs7nMD2EombGa6%2BdljqvuMbUXMJ3%2B7U6QgZfNibWZicvAl%2FwIH4Hc7jFh%2Ba8dUBN5z5mtXCunGp5Mn18oRfwdoI7p55mSKQW4PVW5C9z39F7xInlZcm1i1oxzwLb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9463f6fea0b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.3beesandme.shop/wp-content/uploads/elementor/css/custom-frontend-lite.min.css?ver=1712686238 | 188.114.97.1 | 200 OK | 20 kB |
URL GET HTTP/3www.3beesandme.shop/wp-content/uploads/elementor/css/custom-frontend-lite.min.css?ver=1712686238 IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hashdbd516ad415847ec7381afef5f2e60c5 ad5cc2f9cd04bdb35562eeda53e99f4a82422c05 4e9f6ef440ba0c7d8c48806facbf3c8d4064c04692aea4c663e1584ce9489afb
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/elementor/css/custom-frontend-lite.min.css?ver=1712686238 HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:25 GMT
content-type: text/css
last-modified: Sun, 14 Apr 2024 14:05:22 GMT
vary: Accept-Encoding
etag: W/"661be2a2-1ca7c"
expires: Sun, 05 May 2024 02:45:25 GMT
cache-control: max-age=43200
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=A20tEy7tcq51gEn%2Fs27L6%2FzllLjiL3X6XaLdq5a1Sc1qmhewTCLDlyPi43otjbzFsX8%2BEU7QYJUfiCLf516gf3WUOqYy95dtZD7ahpu2Oeqa%2FPG9Yc7NZR96A2NuOj72%2F3tXpO37"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9463f2fad0b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.3beesandme.shop/wp-content/uploads/1713/34/brawa-67726-tank-car-zzw-dr-minol-brawa-new-items-2023-n-scale_0-300x300.jpg | 188.114.97.1 | 200 OK | 10 kB |
URL GET HTTP/3www.3beesandme.shop/wp-content/uploads/1713/34/brawa-67726-tank-car-zzw-dr-minol-brawa-new-items-2023-n-scale_0-300x300.jpg IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 300x300, components 3 Hashca7f5daa3973c863890b5cb9a1bd38ca e1fd12cd3725e1d01997d5727a465f013495842a e0c089c32f1ab5e2e28881ed8f517330508849bb2130df913d38ea4eb4781b6f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/1713/34/brawa-67726-tank-car-zzw-dr-minol-brawa-new-items-2023-n-scale_0-300x300.jpg HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Cookie: __vtins__KHkbEi6sh2jJsBBW=%7B%22sid%22%3A%20%22c90d2a27-e9a1-55e1-affa-e72a557daae8%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201714835726029%2C%20%22ct%22%3A%201714833926029%7D; __51uvsct__KHkbEi6sh2jJsBBW=1; __51vcke__KHkbEi6sh2jJsBBW=21d6a815-1a78-5524-bae2-5248b98afe08; __51vuft__KHkbEi6sh2jJsBBW=1714833926035
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:26 GMT
content-type: image/jpeg
content-length: 10200
last-modified: Thu, 18 Apr 2024 10:07:52 GMT
etag: "6620f0f8-27d8"
expires: Mon, 03 Jun 2024 14:45:26 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IAHeWUyJsTVuQC6mCyTKm%2BqwGzNh1GFqHb%2BKk3RvBTYqyBon9cNdIgNXJcxL0OL5WN006sp9eMECPn7OzUATxe7SaUOW07vvy5kIW9L1Nv3xSINxZHXq%2BFguzmZEvtLgv%2BKRUlzB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e9464888150b49-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.3beesandme.shop/wp-content/uploads/elementor/css/post-2060.css?ver=1712685875 | 188.114.97.1 | 200 OK | 14 kB |
URL GET HTTP/3www.3beesandme.shop/wp-content/uploads/elementor/css/post-2060.css?ver=1712685875 IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
File typeASCII text, with very long lines (1108), with no line terminators Hashf3b6ff263ea1db2595b2dc44ee768688 9c91da3c1dd7e8cd2d5b4a5075f299dbc83130f8 f60459ae077ee5a950edd0d1baa83a9d360a78a8024e0e07d990e6acdd40b86c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/elementor/css/post-2060.css?ver=1712685875 HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:25 GMT
content-type: text/css
last-modified: Sun, 14 Apr 2024 14:05:22 GMT
vary: Accept-Encoding
etag: W/"661be2a2-454"
expires: Sun, 05 May 2024 02:45:25 GMT
cache-control: max-age=43200
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=N4LDTLVyr1aT2qHmwYqcxhSlJqtQm9O%2BxEaPcuquw%2Bhk2Twk0iE4OU3pfPvDNzE6Yr01m9JYzVx78oAut8%2FE0xaLSX9Z4DweZyMSSjIuiP9FUNbuEDZU2WWK7SpB20MAvOtRjIag"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9463f3fb40b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.3beesandme.shop/wp-content/cache/min/1/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-all-blocks-style.css?ver=1713103522 | 188.114.97.1 | 200 OK | 54 kB |
URL GET HTTP/3www.3beesandme.shop/wp-content/cache/min/1/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-all-blocks-style.css?ver=1713103522 IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
File typeUnicode text, UTF-8 text, with very long lines (65528), with no line terminators Hash7c3a4afde2a8d76fb9421daf88c92897 41e4ad5195214b5b7e07c5638f0154883a1be214 f417e758b3e73a8bc1f677cb83b74c766df9bd107ee3122088af66696a90d02e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/cache/min/1/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-all-blocks-style.css?ver=1713103522 HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:25 GMT
content-type: text/css
last-modified: Sun, 14 Apr 2024 14:05:22 GMT
vary: Accept-Encoding
etag: W/"661be2a2-42a82"
expires: Sun, 05 May 2024 02:45:25 GMT
cache-control: max-age=43200
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=u%2BsXB8y7yJwUeFrz6h4NdltinYX5O6%2FkndMsal%2FY3IpoS0D5u3PBKdH9StgTK72DS3pWNXyl7v1kg%2FOv0OFnrkufQ%2B814CN5UUvz567bylQGdAoZkI7szqItIBWbYLpAsKFROcGW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9463f1f9c0b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.3beesandme.shop/wp-content/cache/min/1/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=1713103522 | 188.114.97.1 | 200 OK | 7.0 kB |
URL GET HTTP/3www.3beesandme.shop/wp-content/cache/min/1/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=1713103522 IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
File typeASCII text, with very long lines (2342), with no line terminators Hash1a1cb56f002e6194505129baa93f9825 227859a55318c09980a847518d52dfd689ba43d7 88f21490128244f54a38864c301f0c9be49f323f6da36c5f5a6bd02175647ada
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/cache/min/1/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=1713103522 HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:25 GMT
content-type: text/css
last-modified: Sun, 14 Apr 2024 14:05:22 GMT
vary: Accept-Encoding
etag: W/"661be2a2-926"
expires: Sun, 05 May 2024 02:45:25 GMT
cache-control: max-age=43200
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lb555t8TqXBgXsrmTqxjlxlqJcAw3bGp5fN6GGbZ8J%2BAeDTjnbzqk3P8p%2Fw2K299uBnL4LZ8L5FKM30lOMwIsRoBSJbRKuT2g1Gg1tGJvstAqNVmPcQxL1e4PgFEKVPRd79l9FWm"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9463f2fa60b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.3beesandme.shop/wp-content/cache/min/1/wp-content/plugins/elementor/assets/lib/swiper/v8/css/swiper.min.css?ver=1713103522 | 188.114.97.1 | 200 OK | 9.4 kB |
URL GET HTTP/3www.3beesandme.shop/wp-content/cache/min/1/wp-content/plugins/elementor/assets/lib/swiper/v8/css/swiper.min.css?ver=1713103522 IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
File typeASCII text, with very long lines (16223), with no line terminators Hash6da6c8d78c46089d6b215f2a52cedcc2 b6f6662b150780633f4adcf48a81e045b02e0e8a fde233fecd445e0ebc6ac433b417171ca3612c9d7bd8a6ab16c87807f56aaf6b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/cache/min/1/wp-content/plugins/elementor/assets/lib/swiper/v8/css/swiper.min.css?ver=1713103522 HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:25 GMT
content-type: text/css
last-modified: Sun, 14 Apr 2024 14:05:22 GMT
vary: Accept-Encoding
etag: W/"661be2a2-3f5f"
expires: Sun, 05 May 2024 02:45:25 GMT
cache-control: max-age=43200
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=O1ZeiaFGInnGqYieLY60vzW4celEOb9yybGTBhxz0AvpVtCgkj3TXIPIbeCOdroq%2BxemCDKuoUQn0w4UN%2FHLfr2lLc2YBBrVom%2BbTzgxAZHb25R1iiMzNKR243NaEN1fHXCQzLJG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9463f3faf0b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.3beesandme.shop/wp-content/themes/porto/fonts/porto-font/porto.woff2 | 188.114.97.1 | 200 OK | 55 kB |
URL GET HTTP/3www.3beesandme.shop/wp-content/themes/porto/fonts/porto-font/porto.woff2 IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 54868, version 1.0 Hash12f09cf1816f03eadc287d279b5ae526 45cbd4c2a723cfd8512d64e04dd42ce965170c11 9e97d3c07ef972e6ef77a535f387ad3244fae1c56aa26586a1ef6f25691fd217
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/porto/fonts/porto-font/porto.woff2 HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/wp-content/cache/min/1/wp-content/themes/porto/css/plugins.css?ver=1713103522
Cookie: __vtins__KHkbEi6sh2jJsBBW=%7B%22sid%22%3A%20%22c90d2a27-e9a1-55e1-affa-e72a557daae8%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201714835726029%2C%20%22ct%22%3A%201714833926029%7D; __51uvsct__KHkbEi6sh2jJsBBW=1; __51vcke__KHkbEi6sh2jJsBBW=21d6a815-1a78-5524-bae2-5248b98afe08; __51vuft__KHkbEi6sh2jJsBBW=1714833926035
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:26 GMT
content-type: font/woff2
content-length: 54868
last-modified: Sun, 14 Apr 2024 14:05:22 GMT
etag: "661be2a2-d654"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FBbTT7Q3yyQ8vwTZMQwWuGCd4mtqyLJmd%2BBGAmirfGz94V7wbHL%2BXQD%2FYip6PFXPoftZ5va%2Fi7%2BhXmm%2FwA0IC%2BJaiXcwbg84dgJJEBMefOOxKJdxoX3kYWu5%2BBFAnu8xfqbMDZzH"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e946465e4d0b49-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.3beesandme.shop/wp-content/themes/porto/fonts/fontawesome/fa-brands-400.woff2 | 188.114.97.1 | 200 OK | 77 kB |
URL GET HTTP/3www.3beesandme.shop/wp-content/themes/porto/fonts/fontawesome/fa-brands-400.woff2 IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 77400, version 331.17301 Hashcac68c831145804808381a7032fdc7c2 62584b9868428fd75af3fc5ee2f9918dda428be5 1c87d2b26de7d55c66037916bbb4cba6c791da0e2adfa378332678ff13e12d9d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/porto/fonts/fontawesome/fa-brands-400.woff2 HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/wp-content/cache/min/1/wp-content/themes/porto/css/plugins.css?ver=1713103522
Cookie: __vtins__KHkbEi6sh2jJsBBW=%7B%22sid%22%3A%20%22c90d2a27-e9a1-55e1-affa-e72a557daae8%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201714835726029%2C%20%22ct%22%3A%201714833926029%7D; __51uvsct__KHkbEi6sh2jJsBBW=1; __51vcke__KHkbEi6sh2jJsBBW=21d6a815-1a78-5524-bae2-5248b98afe08; __51vuft__KHkbEi6sh2jJsBBW=1714833926035
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:26 GMT
content-type: font/woff2
content-length: 77400
last-modified: Sun, 14 Apr 2024 14:05:22 GMT
etag: "661be2a2-12e58"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xHhPhmcutTr53KE8oVE3UJA%2Bkzl5BtYYH7e2P%2FTweyOrU3eVCFgYU4b%2FSYWqPxea3sGKDj3BoFAQdd0H%2BM3VNHuwB5KnD1kI%2FLbfOh8oV4oQHzcwP5WLOxoIBbPKT4KvzuCJh8IW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e946467e660b49-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.3beesandme.shop/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 | 188.114.97.1 | 200 OK | 13 kB |
URL GET HTTP/3www.3beesandme.shop/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
File typeJavaScript source, ASCII text, with very long lines (13479) Hash9ffeb32e2d9efbf8f70caabded242267 3ad0c10e501ac2a9bfa18f9cd7e700219b378738 5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:25 GMT
content-type: application/javascript
last-modified: Sun, 14 Apr 2024 14:05:23 GMT
vary: Accept-Encoding
etag: W/"661be2a3-3509"
expires: Sun, 05 May 2024 02:45:25 GMT
cache-control: max-age=43200
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=n%2BiYKvQ0GYI2CF7Sambu4FK96ThQyxsogLKJCghgSKXmbqj%2Fhn1dVCGuCFDntZ07uRyKsvKXXEbZD4B8uYh9YJjSURbXIkI2Rg%2Fwdl8FdQr2IRiTKTWTPq7sIhZZy2STb1nds2wz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9463f880a0b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.3beesandme.shop/wp-content/themes/porto/fonts/Simple-Line-Icons/Simple-Line-Icons.ttf | 188.114.97.1 | 200 OK | 54 kB |
URL GET HTTP/3www.3beesandme.shop/wp-content/themes/porto/fonts/Simple-Line-Icons/Simple-Line-Icons.ttf IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
File typeTrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, Simple-Line-Icons Hash89c4fa5d1b1b134b4bb26f1e7d496439 3b925d9100460c9791dcf8e4c8f18474aa10207b d3e2dba264092fd22c56b7319186df70c9375b16bbfbf01bd2ec7810bf3f03d8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/porto/fonts/Simple-Line-Icons/Simple-Line-Icons.ttf HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/wp-content/cache/min/1/wp-content/themes/porto/css/plugins.css?ver=1713103522
Cookie: __vtins__KHkbEi6sh2jJsBBW=%7B%22sid%22%3A%20%22c90d2a27-e9a1-55e1-affa-e72a557daae8%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201714835726029%2C%20%22ct%22%3A%201714833926029%7D; __51uvsct__KHkbEi6sh2jJsBBW=1; __51vcke__KHkbEi6sh2jJsBBW=21d6a815-1a78-5524-bae2-5248b98afe08; __51vuft__KHkbEi6sh2jJsBBW=1714833926035
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:26 GMT
content-type: application/octet-stream
content-length: 53968
last-modified: Sun, 14 Apr 2024 14:05:22 GMT
etag: "661be2a2-d2d0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oN%2FQSnjK30gNGDDBqRZKaeSOYLm1LKme1H%2BwqbkI%2BRO2pnvPp9RoYHd9nvSb%2FLLKy0a91qVF6mMwfUOaQqh%2BUiqF%2BTDC4jyNlqJ5BawOdvslbEEtP4XgaQdYDVkwR%2Bw8YHZcjbpN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e94646bea30b49-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.3beesandme.shop/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.16.5 | 188.114.97.1 | 200 OK | 10 kB |
URL GET HTTP/3www.3beesandme.shop/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.16.5 IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
File typeJavaScript source, ASCII text, with very long lines (4957) Hash05d26af7e844a12180c27977d2cac604 4aa2696e8d5a82e1dda2643e8521e60a01f01ef6 e2fac582fdf894c636e3c703267d799d0f8807750322c8ec51810be815a8c669
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.16.5 HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:25 GMT
content-type: application/javascript
last-modified: Sun, 14 Apr 2024 14:05:22 GMT
vary: Accept-Encoding
etag: W/"661be2a2-1385"
expires: Sun, 05 May 2024 02:45:25 GMT
cache-control: max-age=43200
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sxAqjyL16J9O1SnBflwfb1OGgRjn0eA7VBX5URr9GELc5UGvOoeFiXVjZ8MxN1ZoqwUodMK8xhf3FKwEba%2FrOzTbMUAOJIL%2FnnbcF3t2V3hUi0HBpOmEuInzYjCQt%2BarVhzAPOxv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9464089140b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.3beesandme.shop/wp-content/cache/min/1/wp-content/plugins/yith-woocommerce-wishlist/assets/css/jquery.selectBox.css?ver=1713103522 | 188.114.97.1 | 200 OK | 23 kB |
URL GET HTTP/3www.3beesandme.shop/wp-content/cache/min/1/wp-content/plugins/yith-woocommerce-wishlist/assets/css/jquery.selectBox.css?ver=1713103522 IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
File typeASCII text, with very long lines (2692), with no line terminators Hash83e2ff2f06a7affa8a3d4eab875d491d fed2a35cefc71602328a85306ae7c2e754576981 1d1ca7aa6e8c0c55c5114358e946f18bdf31000d21d9bb00dae77a0cb341a84a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/cache/min/1/wp-content/plugins/yith-woocommerce-wishlist/assets/css/jquery.selectBox.css?ver=1713103522 HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:25 GMT
content-type: text/css
last-modified: Sun, 14 Apr 2024 14:05:22 GMT
vary: Accept-Encoding
etag: W/"661be2a2-a84"
expires: Sun, 05 May 2024 02:45:25 GMT
cache-control: max-age=43200
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ChaArJrCURi4QhO9rw7e1RtkOYSwqrXv8Ab0YipDYYmV3%2B769%2B10%2FWZ3q59yZxfFELtX%2FwqjB%2BC7yFb2k9ypDV7mfjJpwXO5rc7eA1zCCus7avGi9M6JQQ1J2HfBg9i33K4YtC2N"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9463f1f9f0b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.3beesandme.shop/wp-content/uploads/1713/83/piko-58367-2-car-set-stock-cars-dr-iii-piko-h0-scale-freight-cars_0-300x300.jpg | 188.114.97.1 | 200 OK | 13 kB |
URL GET HTTP/3www.3beesandme.shop/wp-content/uploads/1713/83/piko-58367-2-car-set-stock-cars-dr-iii-piko-h0-scale-freight-cars_0-300x300.jpg IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 300x300, components 3 Hasha29c25fa45d96dc2b01d301a494b8552 47b216bbe166cf9d22ac5656beb0ab9f73b6ebba c9d0177bec3641748444b97697d6e94c88ca1ed78ab93db6bec174f82a22f624
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/1713/83/piko-58367-2-car-set-stock-cars-dr-iii-piko-h0-scale-freight-cars_0-300x300.jpg HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Cookie: __vtins__KHkbEi6sh2jJsBBW=%7B%22sid%22%3A%20%22c90d2a27-e9a1-55e1-affa-e72a557daae8%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201714835726029%2C%20%22ct%22%3A%201714833926029%7D; __51uvsct__KHkbEi6sh2jJsBBW=1; __51vcke__KHkbEi6sh2jJsBBW=21d6a815-1a78-5524-bae2-5248b98afe08; __51vuft__KHkbEi6sh2jJsBBW=1714833926035
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:26 GMT
content-type: image/jpeg
content-length: 13166
last-modified: Sun, 21 Apr 2024 07:17:11 GMT
etag: "6624bd77-336e"
expires: Mon, 03 Jun 2024 14:45:26 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hPPtvFPulJM7dpRtK%2Bk6%2B0AD28Qz%2BiG5ttk%2FoaoaVmh3h8sGNLTrCcGXylvrNxvyzI%2F3i%2FqawCGz91nsgUZkuJxbiiG1GS%2F%2BA1gSbyMFSVeePsKEu4fF1dlN92tcFcILzXTA5G4u"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e94648982b0b49-OSL
alt-svc: h3=":443"; ma=86400
|
|
| | 188.114.97.1 | 301 Moved Permanently | 6.8 kB |
URL User Request GET HTTP/2IP188.114.97.1:443
CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
Hashf0d31aa9a463675323ac94e38c39cbec 10cbaa85bbbb629e54945dc11f6c534a4af86af1 5383d2a0e4a019af2914904bd36879b1526df07128978c57fc7592d0b1af909e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: 3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Sat, 04 May 2024 14:45:22 GMT
content-type: text/html; charset=UTF-8
location: https://www.3beesandme.shop/
x-powered-by: PHP/7.4.33
x-redirect-by: WordPress
cache-control: max-age=0
expires: Sat, 04 May 2024 14:45:21 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=szIX5DEniEqzSw06gklq8LAwF1vSTIJkWnKFpBX9EtDQgeAooXoGSsnasYXscbnwSnE8QVWO6cJF%2BFyNYrkJmgBNRM5fSdZPrDVZln%2Bf3ivLN8XbkQnqagVrIKBDKqlNlXg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e946264e861c0e-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.3beesandme.shop/wp-content/cache/min/1/wp-content/themes/porto/css/plugins.css?ver=1713103522 | 188.114.97.1 | 200 OK | 40 kB |
URL GET HTTP/3www.3beesandme.shop/wp-content/cache/min/1/wp-content/themes/porto/css/plugins.css?ver=1713103522 IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hash566e14f41292222eb21ca930bdde0944 e1178bc5094fbbc230fa936585e56698e26f994d 9761e8c96dbeb69a73cbdc73493e44d37e55bb7ce5579c539be854e99f8eb307
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/cache/min/1/wp-content/themes/porto/css/plugins.css?ver=1713103522 HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:25 GMT
content-type: text/css
last-modified: Sun, 14 Apr 2024 14:05:22 GMT
vary: Accept-Encoding
etag: W/"661be2a2-1c24a"
expires: Sun, 05 May 2024 02:45:25 GMT
cache-control: max-age=43200
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HjOvSqeQa737RBVj3PeNvtZfGvtsSU0r2jcF%2BXI1%2BQQHWxlU8ZqYsmO%2BASM9lMZ2ZbXI1pHmHbl2skXXFTcUAAX9sFLhBX0h2ISrnFzYVK77%2BYUDW529G7SKpzwCq%2BDqPZT9YL1T"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9463f3fc00b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| | 188.114.97.1 | 200 OK | 65 kB |
URL User Request GET HTTP/3IP188.114.97.1:443
CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
File typeJavaScript source, ASCII text, with very long lines (9691), with CRLF, LF line terminators Hash02089f02b22770a1cfb22da30406f390 a6bdea6a283c7feb3b2dad9b9f8808a40512a9c0 27b692b50d1403744d3a3d7e8b90c2cc570027b60544ba54e4a0298880c7f832
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:24 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/7.4.33
link: <https://www.3beesandme.shop/wp-json/>; rel="https://api.w.org/", <https://www.3beesandme.shop/wp-json/wp/v2/pages/143>; rel="alternate"; type="application/json", <https://www.3beesandme.shop/>; rel=shortlink
last-modified: Sat, 04 May 2024 14:45:24 GMT
cache-control: max-age=0
expires: Sat, 04 May 2024 14:45:22 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=exeEaPTwpIqybBDQ3ULPe0LyETQ7R8LpiFTaaH5zIRbs%2Bm6I4x%2FsmQZXRK85eim%2B334Hpxkx6TJ1sjcATWA0eoSOVvQfbUbGky517bKKZL7Oh5NR4u8zHP%2BA4sgQKvdrcLQAv15n"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9462f98e60b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.3beesandme.shop/wp-content/themes/porto/fonts/fontawesome/fa-solid-900.woff2 | 188.114.97.1 | 200 OK | 80 kB |
URL GET HTTP/3www.3beesandme.shop/wp-content/themes/porto/fonts/fontawesome/fa-solid-900.woff2 IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 80148, version 331.17301 Hashc500da19d776384ba69573ae6fe274e7 6290834672aba86d5b6c1c73b30b57c9c53996f7 cfe3b7382e477059da11be2099914b94f0e2a4f08240c60542c376957b8d9658
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/porto/fonts/fontawesome/fa-solid-900.woff2 HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/wp-content/cache/min/1/wp-content/themes/porto/css/plugins.css?ver=1713103522
Cookie: __vtins__KHkbEi6sh2jJsBBW=%7B%22sid%22%3A%20%22c90d2a27-e9a1-55e1-affa-e72a557daae8%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201714835726029%2C%20%22ct%22%3A%201714833926029%7D; __51uvsct__KHkbEi6sh2jJsBBW=1; __51vcke__KHkbEi6sh2jJsBBW=21d6a815-1a78-5524-bae2-5248b98afe08; __51vuft__KHkbEi6sh2jJsBBW=1714833926035
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:26 GMT
content-type: font/woff2
content-length: 80148
last-modified: Sun, 14 Apr 2024 14:05:22 GMT
etag: "661be2a2-13914"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5QCq1oEy3EdWXlSIkgFxR1yF6AxB2JRA9vA6paOGKSUoGV7Kbh7s%2Fea8dksCpcvUATLCI6v0H1U1RMU4FhQOLLK%2FR4RjetXzf2ThLR%2B%2BVgeBPpo6Vrpn2eEcgbqlrhBvvf4fusoM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e94646be9d0b49-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.3beesandme.shop/wp-content/uploads/1713/83/baby-girls-teddy-bear-tracksuit-in-ivory-girls-loungewear_0-300x300.jpg | 188.114.97.1 | 200 OK | 17 kB |
URL GET HTTP/3www.3beesandme.shop/wp-content/uploads/1713/83/baby-girls-teddy-bear-tracksuit-in-ivory-girls-loungewear_0-300x300.jpg IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 300x300, components 3 Hash540b8ccdfbc42f29fd44ef5b5388cad3 179bc106125c2952adcb6c370914626ccc30eaef 609b99e2691986b267fdc9899f9c4b4ac6bd043f37ecb03b9a435d2ca2cb9e0e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/1713/83/baby-girls-teddy-bear-tracksuit-in-ivory-girls-loungewear_0-300x300.jpg HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Cookie: __vtins__KHkbEi6sh2jJsBBW=%7B%22sid%22%3A%20%22c90d2a27-e9a1-55e1-affa-e72a557daae8%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201714835726029%2C%20%22ct%22%3A%201714833926029%7D; __51uvsct__KHkbEi6sh2jJsBBW=1; __51vcke__KHkbEi6sh2jJsBBW=21d6a815-1a78-5524-bae2-5248b98afe08; __51vuft__KHkbEi6sh2jJsBBW=1714833926035
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:27 GMT
content-type: image/jpeg
content-length: 17279
last-modified: Sun, 21 Apr 2024 07:10:34 GMT
etag: "6624bbea-437f"
expires: Mon, 03 Jun 2024 14:45:26 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DQ2OYbOX3NazJPJHMeBFswqDWPy%2F7DUSE5y%2BViDzAZ7eE4OjdI8Dw5%2BT6x5OmUyR6DH%2BgvANYeuzHIzTq2NC6fclGK%2Bz90rxLaKySjKBtmU9hZDeAm0twV6khGa0Upz4Hr%2Bumf%2Fc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e94648a8390b49-OSL
alt-svc: h3=":443"; ma=86400
|
|
| collect-v6.51.la/v6/collect?dt=4 |  203.107.86.226 | 403 | 0 B |
URL POST HTTP/1.1collect-v6.51.la/v6/collect?dt=4 IP203.107.86.226:443 ASN#37963 Hangzhou Alibaba Advertising Co.,Ltd.
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGlobalSign nv-sa Subject*.51.la Fingerprint9E:F3:EB:9A:59:E9:6D:6E:48:13:64:78:3C:33:1D:AA:79:52:5B:79 ValidityThu, 20 Apr 2023 01:12:57 GMT - Tue, 21 May 2024 01:12:56 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /v6/collect?dt=4 HTTP/1.1
Host: collect-v6.51.la
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 261
Origin: https://www.3beesandme.shop
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403
Date: Sat, 04 May 2024 14:45:27 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: aliyungf_tc=59342d2b502d19e682ee12029e0c42894892a2c51dfa4978ebded5176c60abae; Path=/; HttpOnly
acw_tc=ac11000117148339275597068e1d96163f17200bea08659d1c0b4de727fb2c;path=/;HttpOnly;Max-Age=1800
Server: nginx
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
Access-Control-Allow-Origin: https://www.3beesandme.shop
Access-Control-Allow-Credentials: true
|
|
| www.3beesandme.shop/wp-includes/css/dist/block-library/style.min.css?ver=6.5.2 | 188.114.97.1 | 200 OK | 37 kB |
URL GET HTTP/3www.3beesandme.shop/wp-includes/css/dist/block-library/style.min.css?ver=6.5.2 IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
File typeASCII text, with very long lines (59701) Hash51a8390b47aa0582cf2d9c96c5addee2 b16a640874025d085c38119a1a02a3460f83f2de 98cecf88a23542fa047ce46eedb650b5c5128761ed4386c0977b847094ddfa20
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.5.2 HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:25 GMT
content-type: text/css
last-modified: Sun, 14 Apr 2024 14:05:23 GMT
vary: Accept-Encoding
etag: W/"661be2a3-1bae5"
expires: Sun, 05 May 2024 02:45:25 GMT
cache-control: max-age=43200
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Y8T3XwwirEVtQg2EgvkyF%2BA1ZVYKBZhahnXbEDHmgbkJPbOuAgxAgKeSrbPIKcnWy3OQFO9wH4vqz6m0r%2FyJwp610eJQxUUdnpQnJOnzcMKwhqQn1DvFFptXe1Ay9bHeaRjB2e2Z"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9463f1f960b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.3beesandme.shop/?wc-ajax=get_refreshed_fragments | 188.114.97.1 | 200 OK | 4.5 kB |
URL POST HTTP/3www.3beesandme.shop/?wc-ajax=get_refreshed_fragments IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
Hash32f93bf92b581dea68f6c14902768300 9fa811f24f081bc68e077f1c6d758f6d7f903c0a c0f6020befaeb6c85832a0c2ce8df6bbfd8fabd3398043b6cc98d4b31fb2591f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /?wc-ajax=get_refreshed_fragments HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 18
Origin: https://www.3beesandme.shop
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Cookie: __vtins__KHkbEi6sh2jJsBBW=%7B%22sid%22%3A%20%22c90d2a27-e9a1-55e1-affa-e72a557daae8%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201714835726029%2C%20%22ct%22%3A%201714833926029%7D; __51uvsct__KHkbEi6sh2jJsBBW=1; __51vcke__KHkbEi6sh2jJsBBW=21d6a815-1a78-5524-bae2-5248b98afe08; __51vuft__KHkbEi6sh2jJsBBW=1714833926035
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:27 GMT
content-type: application/json; charset=UTF-8
x-powered-by: PHP/7.4.33
cache-control: max-age=0
expires: Sat, 04 May 2024 14:45:26 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cslddqpUEAthRHyLk2vY7lWsstNWXF1ZvQTYQLAVhKnVtukOi0bIvgH9tPBEXT4lCbRvBLcrHc1tqPx8T3zCEfipwyQ7ZndVbSAj9eoHQ%2F%2BlFrUjCIyoU8YU9Qcxw8rH7KHJYfcZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9464978f30b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.3beesandme.shop/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=8.1.1 | 188.114.97.1 | 200 OK | 2.1 kB |
URL GET HTTP/3www.3beesandme.shop/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=8.1.1 IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
File typeJavaScript source, ASCII text, with very long lines (2257), with no line terminators Hash846a24981bff9217c95389e6dc346313 e03631b8e1438e09c8d7876ab20b0d69d0c4d819 29327d5b926dcc7de82c087f261b00355dce3492f0b9721887819b5f54cf8486
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=8.1.1 HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:25 GMT
content-type: application/javascript
last-modified: Sun, 14 Apr 2024 14:05:22 GMT
vary: Accept-Encoding
etag: W/"661be2a2-85b"
expires: Sun, 05 May 2024 02:45:25 GMT
cache-control: max-age=43200
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ld7QtX%2FNJCz7mfoghP2ttuiFOQ1Ff5eW%2FowW2l4Ahpk7ZUFIOlidVtaq4X8i0uKtXD7r18QLMBXa84UlJHjBWTVql%2BLBxZ05E3sLU7uIbK4wLjOm5%2Bkx8nzXBzZQMR35awUue7Fs"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9464058d20b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.3beesandme.shop/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 | 188.114.97.1 | 200 OK | 21 kB |
URL GET HTTP/3www.3beesandme.shop/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:25 GMT
content-type: application/javascript
last-modified: Sun, 14 Apr 2024 14:05:23 GMT
vary: Accept-Encoding
etag: W/"661be2a3-53be"
expires: Sun, 05 May 2024 02:45:25 GMT
cache-control: max-age=43200
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3uZnmIowCaEFpeS9QeUU0vjip4tfPvbIg%2FWoSJWRhsu9hTaX58ZEOtipvfBHJIJ%2F2gY20Ez8DIhtTKnVDithQB22UWm7DwqWTA%2BHnER68JhAEbb3HXZ1TXCu3JioqZw8ODNstpvB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9464099210b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.3beesandme.shop/wp-content/cache/min/1/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=1713103522 | 188.114.97.1 | 200 OK | 11 kB |
URL GET HTTP/3www.3beesandme.shop/wp-content/cache/min/1/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=1713103522 IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
File typeJavaScript source, ASCII text, with very long lines (10769), with no line terminators Hash73e40bc1184958ee16a59cbed591cb08 5fb9f64da55396f6b92e0f8dc5e24d1a174de576 f271360c544394f70c29284d881571e3b69ee6fa4a3a41d81c5a3d074cbeff4f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/cache/min/1/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=1713103522 HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:25 GMT
content-type: application/javascript
last-modified: Sun, 14 Apr 2024 14:05:22 GMT
vary: Accept-Encoding
etag: W/"661be2a2-2a11"
expires: Sun, 05 May 2024 02:45:25 GMT
cache-control: max-age=43200
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0525S539zbF79%2BWUz0NA%2BryR4b5XTii73YWUjlJnknmKwDcbuUS31%2F3uYqWB6G0eLusFgZRmax73Bh%2BTdtG%2B1qtPI8AqaBNVEPawEGjyqI304%2Fvp8Y%2FD87C5A5Mjjlo3yJOM1Son"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9464038bc0b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.3beesandme.shop/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.8.1.1 | 188.114.97.1 | 200 OK | 9.6 kB |
URL GET HTTP/3www.3beesandme.shop/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.8.1.1 IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
File typeJavaScript source, ASCII text, with very long lines (9963), with no line terminators Hash7ed2c573e85b2b4e5fb8b4131e95e469 140691f29cb181849892640d1b237fa6a4e5beae a637f7d3e1ca8aeb1d7d4499419916cca6c18a2b625a616f6950f2b978a91ba6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.8.1.1 HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:25 GMT
content-type: application/javascript
last-modified: Sun, 14 Apr 2024 14:05:22 GMT
vary: Accept-Encoding
etag: W/"661be2a2-25a4"
expires: Sun, 05 May 2024 02:45:25 GMT
cache-control: max-age=43200
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=THbG3D5dBcBe7kKgdsw8ntrAAb%2Byvy2InxXBc45UobPDhQI8M2XKJAyjlr6BpbJzHD8N2v4AXOZOVvKbfoYXvXx8uUbni%2FFW7NJ0JhZ6CXbCWSh%2FYAn74welFyzpWorY9WjmYTxd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9464048ce0b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.3beesandme.shop/wp-content/themes/porto/inc/lib/live-search/live-search.min.js?ver=6.10.0 | 188.114.97.1 | 200 OK | 14 kB |
URL GET HTTP/3www.3beesandme.shop/wp-content/themes/porto/inc/lib/live-search/live-search.min.js?ver=6.10.0 IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
File typeJavaScript source, ASCII text, with very long lines (14405), with no line terminators Hash69755c22ccfd7140a75ae545417329c5 b031e2d2ae42ed6364a1dab3818527b0df62eb6e 649fbe6f32931a56674267436d1ce81ad12c012db4d2a2d2b72e69531f89f3d7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/porto/inc/lib/live-search/live-search.min.js?ver=6.10.0 HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:25 GMT
content-type: application/javascript
last-modified: Sun, 14 Apr 2024 14:05:22 GMT
vary: Accept-Encoding
etag: W/"661be2a2-3845"
expires: Sun, 05 May 2024 02:45:25 GMT
cache-control: max-age=43200
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vc1BdiU2q2xbTC2qTVY%2BqXzlhx55HyjFjf5LjfhVQltUjt%2BiQ7fBMIQmsaph%2FVhX05MGmnadLCVrhNTufAP18vFRcI%2FKtO4unYk6W4oHN7obNDYpnnfJuCuuGDt%2FibWowv7rhIPv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9464058d30b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.3beesandme.shop/wp-content/cache/min/1/wp-content/uploads/porto_styles/shortcodes.css?ver=1713103522 | 188.114.97.1 | 200 OK | 142 kB |
URL GET HTTP/3www.3beesandme.shop/wp-content/cache/min/1/wp-content/uploads/porto_styles/shortcodes.css?ver=1713103522 IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
Size142 kB (141870 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/cache/min/1/wp-content/uploads/porto_styles/shortcodes.css?ver=1713103522 HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:25 GMT
content-type: text/css
last-modified: Sun, 14 Apr 2024 14:05:22 GMT
vary: Accept-Encoding
etag: W/"661be2a2-22a2e"
expires: Sun, 05 May 2024 02:45:25 GMT
cache-control: max-age=43200
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ifxRgp05V4tZUQf3EmmPX2%2BPt06QBPT%2BtxNL7LQz2jqD7i4onhbXqDglqi5WwnAogWXWgO1MQg86WMIj6EIHn4jI7Pf66l1GfDMVSYwTmythJOxPGZ%2BMq1vvhx1NrTjjqRIozZaP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9463f3fc50b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.3beesandme.shop/wp-content/cache/min/1/wp-content/themes/porto/js/theme-async.js?ver=1713103522 | 188.114.97.1 | 200 OK | 84 kB |
URL GET HTTP/3www.3beesandme.shop/wp-content/cache/min/1/wp-content/themes/porto/js/theme-async.js?ver=1713103522 IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
File typeJavaScript source, ASCII text, with very long lines (2091) Hash59bd7259dbe0f83a7b57ce24da966bf6 fe632ea01a6cbd96220b41707c51dc726a2ae65b 2fea1a3de8fcbd970a05b96d5a0933f9f5c9cac7b4f6a45bdec4d6bf7c9ba650
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/cache/min/1/wp-content/themes/porto/js/theme-async.js?ver=1713103522 HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:25 GMT
content-type: application/javascript
last-modified: Sun, 14 Apr 2024 14:05:22 GMT
vary: Accept-Encoding
etag: W/"661be2a2-149b9"
expires: Sun, 05 May 2024 02:45:25 GMT
cache-control: max-age=43200
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=w%2BENjt2Gr21Y6PApVRgx%2FOk2naaN7uEiZxgFwTCJmMVfTXF9RzvJmVzQTyoF4gFkbrwsqn2BJ43Ml83Cwg2LJL3ccS08GR%2BcueEDCQl5h4BCaaB4wbdIAwCqKvDe%2F1Ccl4cmi6cs"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9464079050b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.3beesandme.shop/wp-content/uploads/1713/85/piko-27503-elektotriebwagen-gtw-2-6-stadler-thurbo-bwegt-sbb-vi-piko-h0-scale-powered-railcars_0-300x300.jpg | 188.114.97.1 | 200 OK | 22 kB |
URL GET HTTP/3www.3beesandme.shop/wp-content/uploads/1713/85/piko-27503-elektotriebwagen-gtw-2-6-stadler-thurbo-bwegt-sbb-vi-piko-h0-scale-powered-railcars_0-300x300.jpg IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 300x300, components 3 Hash1a960eda9151245a2fbbbe21af660fbe 8db7898d2ce178f9666c2b0eca9493a6a2f328ea 30fdc9558c0c6908550e27352b5f49db402fb8757987e4b59e37b0f5d7e256ed
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/1713/85/piko-27503-elektotriebwagen-gtw-2-6-stadler-thurbo-bwegt-sbb-vi-piko-h0-scale-powered-railcars_0-300x300.jpg HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Cookie: __vtins__KHkbEi6sh2jJsBBW=%7B%22sid%22%3A%20%22c90d2a27-e9a1-55e1-affa-e72a557daae8%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201714835726029%2C%20%22ct%22%3A%201714833926029%7D; __51uvsct__KHkbEi6sh2jJsBBW=1; __51vcke__KHkbEi6sh2jJsBBW=21d6a815-1a78-5524-bae2-5248b98afe08; __51vuft__KHkbEi6sh2jJsBBW=1714833926035
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:26 GMT
content-type: image/jpeg
content-length: 22544
last-modified: Tue, 16 Apr 2024 16:41:13 GMT
etag: "661eaa29-5810"
expires: Mon, 03 Jun 2024 14:45:26 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PigTRSGeE2bis38pvSCqlM5INP%2FfrerN3%2BTdqSzzxMCCGgH7DFAYGbiLhB8pKNYPzkmFmiaWbPf%2BGkx5%2BzIMWhfwDjEWtHsns40epGcQ7KtUT9SF2LlkQpMfSpQFvNNf1aSukRZy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e94648881a0b49-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.3beesandme.shop/wp-content/plugins/51la/js-sdk-event.min.js?u=KHkbEi6sh2jJsBBW | 188.114.97.1 | 200 OK | 76 kB |
URL GET HTTP/3www.3beesandme.shop/wp-content/plugins/51la/js-sdk-event.min.js?u=KHkbEi6sh2jJsBBW IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/51la/js-sdk-event.min.js?u=KHkbEi6sh2jJsBBW HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Cookie: __vtins__KHkbEi6sh2jJsBBW=%7B%22sid%22%3A%20%22c90d2a27-e9a1-55e1-affa-e72a557daae8%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201714835726029%2C%20%22ct%22%3A%201714833926029%7D; __51uvsct__KHkbEi6sh2jJsBBW=1; __51vcke__KHkbEi6sh2jJsBBW=21d6a815-1a78-5524-bae2-5248b98afe08; __51vuft__KHkbEi6sh2jJsBBW=1714833926035
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:26 GMT
content-type: application/javascript
last-modified: Sun, 14 Apr 2024 14:05:22 GMT
vary: Accept-Encoding
etag: W/"661be2a2-127d3"
expires: Sun, 05 May 2024 02:45:26 GMT
cache-control: max-age=43200
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5SfvMBvRv9ItCxfjXjN%2Fz30q0PTvryDEW1pREDi2zed75byrZiwP%2FH2VAZJHCuE9VjIUuJTEA9qPIfdgjJoMxIQXAXeWF2Xu9FiRauevggctjCEKpNf2Mf%2FbQBqv%2BjLxuJfboYfF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e94645dde50b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.3beesandme.shop/wp-includes/images/w-logo-blue-white-bg.png | 188.114.97.1 | 200 OK | 4.1 kB |
URL GET HTTP/3www.3beesandme.shop/wp-includes/images/w-logo-blue-white-bg.png IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
File typePNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced Hash000bf649cc8f6bf27cfb04d1bcdcd3c7 d73d2f6d74ec6cdcbae07955592962e77d8ae814 6bdb369337ac2496761c6f063bffea0aa6a91d4662279c399071a468251f51f0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/images/w-logo-blue-white-bg.png HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.3beesandme.shop/
DNT: 1
Connection: keep-alive
Cookie: __vtins__KHkbEi6sh2jJsBBW=%7B%22sid%22%3A%20%22c90d2a27-e9a1-55e1-affa-e72a557daae8%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201714835726029%2C%20%22ct%22%3A%201714833926029%7D; __51uvsct__KHkbEi6sh2jJsBBW=1; __51vcke__KHkbEi6sh2jJsBBW=21d6a815-1a78-5524-bae2-5248b98afe08; __51vuft__KHkbEi6sh2jJsBBW=1714833926035
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:29 GMT
content-type: image/png
content-length: 4119
last-modified: Sun, 14 Apr 2024 14:05:22 GMT
etag: "661be2a2-1017"
expires: Mon, 03 Jun 2024 14:45:29 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8vBpfrx4wkfFyfAb9QKET9hKspgSNCMP%2Ba9EO%2F%2FsMyeoTEtZEdmv1uzC0j2Q0TI8n%2Bid5spEt%2B5pVRcZUmvagAJXOswraVmvEQgyK%2FcY1fvpkFAZGGdvXo4oiU64deTL16f6fDSk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e94659782e0b49-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.3beesandme.shop/wp-content/themes/porto/js/libs/jquery.selectric.min.js?ver=1.9.6 | 188.114.97.1 | 200 OK | 7.1 kB |
URL GET HTTP/3www.3beesandme.shop/wp-content/themes/porto/js/libs/jquery.selectric.min.js?ver=1.9.6 IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
File typeJavaScript source, ASCII text, with very long lines (7362), with no line terminators Hashd19fe944ddfc77163f2f2c6a266ee7d3 b7455128f60bdbcde0825baed3e21cd2023c5029 8a87042470f63dd6b598f483fef7c10e654be3a0af532d344fde7d15245a9bba
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/porto/js/libs/jquery.selectric.min.js?ver=1.9.6 HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:25 GMT
content-type: application/javascript
last-modified: Sun, 14 Apr 2024 14:05:22 GMT
vary: Accept-Encoding
etag: W/"661be2a2-1bbc"
expires: Sun, 05 May 2024 02:45:25 GMT
cache-control: max-age=43200
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=A%2FAEGyyGiRikPF%2BxT0El7kfaALjImpXW2A0hPBmNX3OLhsU2Ii04Xc9nlNhN51j3zCRNWJ0gdvniAgxEpGJ%2B5glWfq%2BScqjAVt4C85%2BxBezRlUKTaQSq8IpRaCDS8XtT2HlOV1QZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9464079070b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.3beesandme.shop/wp-content/uploads/1713/83/girls-polo-dress-in-yellow-holiday-shop-girls_1-300x300.jpg | 188.114.97.1 | 200 OK | 5.4 kB |
URL GET HTTP/3www.3beesandme.shop/wp-content/uploads/1713/83/girls-polo-dress-in-yellow-holiday-shop-girls_1-300x300.jpg IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 300x300, components 3 Hashdf7bc9193b56bb90ce8fa56729093e30 e4de999604339ad9350f475d36e5b7a075d95045 b2b25a0b1f467157e941b19f24f3ee939a44bb94e3350cff03ee29ec88af9c06
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/1713/83/girls-polo-dress-in-yellow-holiday-shop-girls_1-300x300.jpg HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Cookie: __vtins__KHkbEi6sh2jJsBBW=%7B%22sid%22%3A%20%22c90d2a27-e9a1-55e1-affa-e72a557daae8%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201714835726029%2C%20%22ct%22%3A%201714833926029%7D; __51uvsct__KHkbEi6sh2jJsBBW=1; __51vcke__KHkbEi6sh2jJsBBW=21d6a815-1a78-5524-bae2-5248b98afe08; __51vuft__KHkbEi6sh2jJsBBW=1714833926035
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:26 GMT
content-type: image/jpeg
content-length: 5376
last-modified: Sun, 21 Apr 2024 07:19:19 GMT
etag: "6624bdf7-1500"
expires: Mon, 03 Jun 2024 14:45:26 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Fnt6gu1WD1719tNJlOG6NYvZPToxrnrieD2FB534thh1%2B4HgoSts%2F2rpTyWgW3ZvmB9YevLq%2BiCgQbAhImNGP%2Bkt13zGMJ%2BNv%2BlPSe4BFqKsX1sK%2BVxpjGApFT0KX6O74kF%2Bamo4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e9464898260b49-OSL
alt-svc: h3=":443"; ma=86400
|
|
| fonts.googleapis.com/css?family=Poppins:400,500,600,700,800 | 142.250.74.106 | 200 OK | 3.7 kB |
URL GET HTTP/3fonts.googleapis.com/css?family=Poppins:400,500,600,700,800 IP142.250.74.106:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File typeASCII text, with very long lines (3797), with no line terminators Hash873cb1160984700ad28e14fdf1c917de 3e37d696a333a93b2b730fe265c2b33fc0962ef2 a98dfaa779bd1280339d3d4ddd83c102615a0cde4a5378fc92cf998123540958
GET /css?family=Poppins:400,500,600,700,800 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 04 May 2024 14:45:26 GMT
date: Sat, 04 May 2024 14:45:26 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.3beesandme.shop/wp-content/cache/min/1/wp-content/uploads/porto_styles/theme_css_vars.css?ver=1713103522 | 188.114.97.1 | 200 OK | 5.8 kB |
URL GET HTTP/3www.3beesandme.shop/wp-content/cache/min/1/wp-content/uploads/porto_styles/theme_css_vars.css?ver=1713103522 IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
File typeASCII text, with very long lines (5814), with no line terminators Hashbadcf12db95db80231962f8f4c1d5b16 9593009007c8d129e751b6d861eda9fe34f1d36d 30f8e7783e835e895bc1b63992d700e54a23b13b96719e1125e02efc9c3123b4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/cache/min/1/wp-content/uploads/porto_styles/theme_css_vars.css?ver=1713103522 HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:25 GMT
content-type: text/css
last-modified: Sun, 14 Apr 2024 14:05:22 GMT
vary: Accept-Encoding
etag: W/"661be2a2-16a2"
expires: Sun, 05 May 2024 02:45:25 GMT
cache-control: max-age=43200
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sGFQWg%2FCtktruKYBbn1w%2FHnbl3Exa%2FXeQxSKWfRfWfE43pa4RtrTtQsGF6vN%2BAyO5n2oDIe5fSXoieftqXtmwwQrooMnSISaAkNkxJCSAPMY05h1lOHU6Zl7LREos13zAMFnwF1r"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9463f3fbb0b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.3beesandme.shop/wp-json/contact-form-7/v1/contact-forms/1453/refill | 188.114.97.1 | 200 OK | 2 B |
URL GET HTTP/3www.3beesandme.shop/wp-json/contact-form-7/v1/contact-forms/1453/refill IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
Hashd751713988987e9331980363e24189ce 97d170e1550eee4afc0af065b78cda302a97674c 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-json/contact-form-7/v1/contact-forms/1453/refill HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, */*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.3beesandme.shop/
DNT: 1
Connection: keep-alive
Cookie: __vtins__KHkbEi6sh2jJsBBW=%7B%22sid%22%3A%20%22c90d2a27-e9a1-55e1-affa-e72a557daae8%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201714835726029%2C%20%22ct%22%3A%201714833926029%7D; __51uvsct__KHkbEi6sh2jJsBBW=1; __51vcke__KHkbEi6sh2jJsBBW=21d6a815-1a78-5524-bae2-5248b98afe08; __51vuft__KHkbEi6sh2jJsBBW=1714833926035
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:28 GMT
content-type: application/json; charset=UTF-8
content-length: 2
x-powered-by: PHP/7.4.33
x-robots-tag: noindex
link: <https://www.3beesandme.shop/wp-json/>; rel="https://api.w.org/"
x-content-type-options: nosniff
access-control-expose-headers: X-WP-Total, X-WP-TotalPages, Link
access-control-allow-headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type
allow: GET
cache-control: max-age=0
expires: Sat, 04 May 2024 14:45:27 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jp5Eqcmm0Ocb%2Bb8OG7b%2By1kHSQqaojdx%2Bm%2BEAigadyU4aR9jcmyakvewfLRn4HxD8a0VrzaXZ8N1Xq82SAFnfnbMXMy6sjfh1OIjV2P%2B6ZthhSs3ditH0bDAcVY%2BqRUCy%2BNbtMGU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9464cfc540b49-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.3beesandme.shop/wp-content/plugins/51la/js-sdk-pro.min.js | 188.114.97.1 | 200 OK | 34 kB |
URL GET HTTP/3www.3beesandme.shop/wp-content/plugins/51la/js-sdk-pro.min.js IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/51la/js-sdk-pro.min.js HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:25 GMT
content-type: application/javascript
last-modified: Sun, 14 Apr 2024 14:05:22 GMT
vary: Accept-Encoding
etag: W/"661be2a2-861a"
expires: Sun, 05 May 2024 02:45:25 GMT
cache-control: max-age=43200
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IJTWTXJcFgO%2FzyBpgM2%2BSmwQAFKyOpIMaB2Qd%2FonsTVUS%2FFPmYWsfqd%2F03hUIMFHNy2gqFVlK%2BHbFvuzyw%2FDmVIb5BATbq0tCt196ggXLUYiosgga%2FOti6xc8IFphInnBmcZ8g3i"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9463f88110b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.3beesandme.shop/wp-content/plugins/woocommerce/assets/js/prettyPhoto/jquery.prettyPhoto.min.js?ver=3.1.6 | 188.114.97.1 | 200 OK | 22 kB |
URL GET HTTP/3www.3beesandme.shop/wp-content/plugins/woocommerce/assets/js/prettyPhoto/jquery.prettyPhoto.min.js?ver=3.1.6 IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
File typeHTML document, ASCII text, with very long lines (21612), with no line terminators Hash62331b455760a3d587436a5aefd3ac55 a2e9dad245b08b6d5a02defbae14b15b3bb95ade f0bc0f5d0d025d1b2686d9a47780934a4e747b5f0d2e067ff64f40bae2f7d0cf
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/woocommerce/assets/js/prettyPhoto/jquery.prettyPhoto.min.js?ver=3.1.6 HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:25 GMT
content-type: application/javascript
last-modified: Sun, 14 Apr 2024 14:05:22 GMT
vary: Accept-Encoding
etag: W/"661be2a2-546c"
expires: Sun, 05 May 2024 02:45:25 GMT
cache-control: max-age=43200
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=p2m%2BVqmEYggn9XIzZxjiE7T9swc6Yl332hKKI920jmHpBv5ujTOHJvt1VzVwbjNl9AiQYaIIBRwAlnF7LIic2GLH99lcb%2Bkme6eLr4cdF6y1TnRgZWn0wvu8MyX6qH%2BuMUHEdDiC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9464038b40b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.3beesandme.shop/wp-content/uploads/1713/83/baby-girls-teddy-bear-tracksuit-in-ivory-girls-loungewear_1-300x300.jpg | 188.114.97.1 | 200 OK | 17 kB |
URL GET HTTP/3www.3beesandme.shop/wp-content/uploads/1713/83/baby-girls-teddy-bear-tracksuit-in-ivory-girls-loungewear_1-300x300.jpg IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 300x300, components 3 Hash5c980e1bf3df062dc2008bb25853e540 a8f887f94b1734bc46683da0f2ed7b504ec8dfa5 f39b4c7954858047dd1895d1996fbbef78689fc14de75f93337d058fa9601dc7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/1713/83/baby-girls-teddy-bear-tracksuit-in-ivory-girls-loungewear_1-300x300.jpg HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Cookie: __vtins__KHkbEi6sh2jJsBBW=%7B%22sid%22%3A%20%22c90d2a27-e9a1-55e1-affa-e72a557daae8%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201714835726029%2C%20%22ct%22%3A%201714833926029%7D; __51uvsct__KHkbEi6sh2jJsBBW=1; __51vcke__KHkbEi6sh2jJsBBW=21d6a815-1a78-5524-bae2-5248b98afe08; __51vuft__KHkbEi6sh2jJsBBW=1714833926035
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:26 GMT
content-type: image/jpeg
content-length: 17133
last-modified: Sun, 21 Apr 2024 07:10:38 GMT
etag: "6624bbee-42ed"
expires: Mon, 03 Jun 2024 14:45:26 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jz4gxj0QD8avurd2rUnTa5UhGQNV1DUFk6bb74QuMosv7dJz0w1D85FfK512vjmO6oPylmGbDPYv65MJOSgeAI%2BsP8jAcmaHUzAVbjDoh1O595JirP4ongGwFrqWdsWEzJDYwTWl"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e94648a83a0b49-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.3beesandme.shop/favicon.ico | 188.114.97.1 | 302 Found | 4.1 kB |
URL GET HTTP/3www.3beesandme.shop/favicon.ico IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Cookie: __vtins__KHkbEi6sh2jJsBBW=%7B%22sid%22%3A%20%22c90d2a27-e9a1-55e1-affa-e72a557daae8%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201714835726029%2C%20%22ct%22%3A%201714833926029%7D; __51uvsct__KHkbEi6sh2jJsBBW=1; __51vcke__KHkbEi6sh2jJsBBW=21d6a815-1a78-5524-bae2-5248b98afe08; __51vuft__KHkbEi6sh2jJsBBW=1714833926035
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
date: Sat, 04 May 2024 14:45:29 GMT
content-type: text/html; charset=UTF-8
location: https://www.3beesandme.shop/wp-includes/images/w-logo-blue-white-bg.png
x-powered-by: PHP/7.4.33
link: <https://www.3beesandme.shop/wp-json/>; rel="https://api.w.org/"
x-redirect-by: WordPress
cache-control: max-age=14400
expires: Sat, 04 May 2024 14:45:27 GMT
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RsSOxQmdgTB1HCC1OLDWbEov5b4b66zA%2FJTGYqlOq87UYK99MJM1VnuStyOcA07hLlBeMO16DUbwcBawHqrDFY48S%2FTuUUn7ZMXYZJ4%2BWGukINYEdmlAMZpEpDG%2Bg5%2FEj59QO5Tx"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e9464f7e780b49-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.3beesandme.shop/wp-content/themes/porto/js/libs/webfont.js | 188.114.97.1 | 200 OK | 13 kB |
URL GET HTTP/3www.3beesandme.shop/wp-content/themes/porto/js/libs/webfont.js IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
File typeJavaScript source, ASCII text, with very long lines (2134), with CRLF line terminators Hasha29599549c40a5d41326d95650d33639 fa5127c50898eb42c64186a843c57312a447ed0f b3ca7d262a9370115f0cb5af00ed49f738e43ab587246c6aef865f1894c891d7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/porto/js/libs/webfont.js HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:26 GMT
content-type: application/javascript
last-modified: Sun, 14 Apr 2024 14:05:22 GMT
vary: Accept-Encoding
etag: W/"661be2a2-33a5"
expires: Sun, 05 May 2024 02:45:26 GMT
cache-control: max-age=43200
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3phi9%2Ffi00Ds1TMhLEvwyp1Og0Y9CrktTE%2FIfhwoIbmG6n%2BDRXFw9QOHLgjbHlodCZMPPPHh%2FxV8QiZbwfAU5yfe6zqKH190cxmTCuOpcuvoI5I80SprlM%2BFs%2BzmK4fig%2Fx7aaVQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e94645adb90b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.3beesandme.shop/wp-content/themes/porto/images/select-bg.svg | 188.114.97.1 | 200 OK | 405 B |
URL GET HTTP/3www.3beesandme.shop/wp-content/themes/porto/images/select-bg.svg IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
File typeSVG Scalable Vector Graphics image Hashdcbd221c451c2a86b469b997ebf9bd01 f9ddbc7b0ca61a143e9c338411253a770d6458d6 de9487926fca2d75b69db33f304fd81462b9ce9853b6afd2f3c92662023bc4b4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/porto/images/select-bg.svg HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/wp-content/cache/min/1/wp-content/themes/porto/css/theme.css?ver=1713103522
Cookie: __vtins__KHkbEi6sh2jJsBBW=%7B%22sid%22%3A%20%22c90d2a27-e9a1-55e1-affa-e72a557daae8%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201714835726029%2C%20%22ct%22%3A%201714833926029%7D; __51uvsct__KHkbEi6sh2jJsBBW=1; __51vcke__KHkbEi6sh2jJsBBW=21d6a815-1a78-5524-bae2-5248b98afe08; __51vuft__KHkbEi6sh2jJsBBW=1714833926035
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:26 GMT
content-type: image/svg+xml
last-modified: Sun, 14 Apr 2024 14:05:22 GMT
etag: W/"661be2a2-195"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ahOsPXWWHnXsL8z1yrQXJuIYhFkLQl%2FtPl39R6JqJNgiLtvswP3zuiagJIXTusWub%2FFomWwkQVjNIFdNEjIzPN%2BRTC6o9O9QWBz0JkBHjf2pO2ebbyiS2qv%2BqAbAQu1JXca4Fn0a"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e94647af5c0b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.3beesandme.shop/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart-variation.min.js?ver=8.1.1 | 188.114.97.1 | 200 OK | 14 kB |
URL GET HTTP/3www.3beesandme.shop/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart-variation.min.js?ver=8.1.1 IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
File typeJavaScript source, ASCII text, with very long lines (13786), with no line terminators Hashc3825b9d2bb7e067a90db543db343f68 7ef77fddc64dd62688f242c7ae9ce4e9516b1eaa 70bb06a0005a4c1776d94eb9216dfb3841a5722ae2ed0c930664378b7d5c9504
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart-variation.min.js?ver=8.1.1 HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:25 GMT
content-type: application/javascript
last-modified: Sun, 14 Apr 2024 14:05:22 GMT
vary: Accept-Encoding
etag: W/"661be2a2-35da"
expires: Sun, 05 May 2024 02:45:25 GMT
cache-control: max-age=43200
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kKonMHWIJbHK2aph6CdcYtmyMwwtfciOTrEIh81PxILq6hnRQdQDwIMvbO%2Ff9VHlqp5khEIdyJhdlw7d9lfRYKcPeN2zKYG2zku8uLlk4wKSVt17Wvbmur535cAaeAoJDTBvWtIn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9464089110b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.3beesandme.shop/wp-content/uploads/1713/84/preiser-14105-railway-shunters-6-pcs-preiser-h0-scale-in-stock_0-300x300.jpg | 188.114.97.1 | 200 OK | 14 kB |
URL GET HTTP/3www.3beesandme.shop/wp-content/uploads/1713/84/preiser-14105-railway-shunters-6-pcs-preiser-h0-scale-in-stock_0-300x300.jpg IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 300x300, components 3 Hash73dbce6992a045f96f9d21ecea065eed 9aa42d9c32bb65c1ec25f4c5eaf9ee93716fdd25 abecf99f13cf7b13e2a46bbad88ef458093c286a40a25679119867abcfd6d81e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/1713/84/preiser-14105-railway-shunters-6-pcs-preiser-h0-scale-in-stock_0-300x300.jpg HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Cookie: __vtins__KHkbEi6sh2jJsBBW=%7B%22sid%22%3A%20%22c90d2a27-e9a1-55e1-affa-e72a557daae8%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201714835726029%2C%20%22ct%22%3A%201714833926029%7D; __51uvsct__KHkbEi6sh2jJsBBW=1; __51vcke__KHkbEi6sh2jJsBBW=21d6a815-1a78-5524-bae2-5248b98afe08; __51vuft__KHkbEi6sh2jJsBBW=1714833926035
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:26 GMT
content-type: image/jpeg
content-length: 13672
last-modified: Sun, 21 Apr 2024 07:21:17 GMT
etag: "6624be6d-3568"
expires: Mon, 03 Jun 2024 14:45:26 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oBfCBIk0HUrRyX%2BkiH5bgDlYVZ%2Fvz0HcZxMF8vh4%2FXQhNiX2OINdcedSVLH1edfUbsTUFOpcB5y2zUYcGM94FooIcShf0ErPjBDyGKvVOV4JO%2F3%2BeJLDW6KQbF%2B%2BrFW3fncf97Il"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e94648981e0b49-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.3beesandme.shop/wp-content/cache/min/1/wp-content/uploads/porto_styles/dynamic_style.css?ver=1713103522 | 188.114.97.1 | 200 OK | 50 kB |
URL GET HTTP/3www.3beesandme.shop/wp-content/cache/min/1/wp-content/uploads/porto_styles/dynamic_style.css?ver=1713103522 IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
File typeASCII text, with very long lines (50108), with no line terminators Hash8e8752d4b458e341e51096f009f1b69b e194c69f6ee4fa7bed977980c75e5ea9f2cb95d4 c6b0be2564fcde7bca0e7bc93fe336421e7bc4cad4ffb5080ce13a79a95846dd
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/cache/min/1/wp-content/uploads/porto_styles/dynamic_style.css?ver=1713103522 HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:25 GMT
content-type: text/css
last-modified: Sun, 14 Apr 2024 14:05:22 GMT
vary: Accept-Encoding
etag: W/"661be2a2-c3bc"
expires: Sun, 05 May 2024 02:45:25 GMT
cache-control: max-age=43200
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FmKWT37YmmIEPbwGCV5ETMwxHrN%2FJoiEKBxriTHh32yh2AfY2jULt98pJDh2biiXRDJ8JbUgc%2F3IHH5Iw8WOZ0P4DwgyWXdB0a8ilYm0cYQH2EcACXs9DxLZGJx6p0KfZqBgVi8X"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9463f5fdf0b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.3beesandme.shop/wp-includes/js/wp-emoji-release.min.js?ver=6.5.2 | 188.114.97.1 | 200 OK | 19 kB |
URL GET HTTP/3www.3beesandme.shop/wp-includes/js/wp-emoji-release.min.js?ver=6.5.2 IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
File typeJavaScript source, ASCII text, with very long lines (15752) Hashb976b651932bfd25b9ddb5b7693d88a7 7fcb7cb5c11227f9213b1e08a07d0212209e1432 4e6ce5444c7f396cef0eb1fa3611034151e485dd06fbe5573a5583e1eebc98c3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.5.2 HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Cookie: __vtins__KHkbEi6sh2jJsBBW=%7B%22sid%22%3A%20%22c90d2a27-e9a1-55e1-affa-e72a557daae8%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201714835726029%2C%20%22ct%22%3A%201714833926029%7D; __51uvsct__KHkbEi6sh2jJsBBW=1; __51vcke__KHkbEi6sh2jJsBBW=21d6a815-1a78-5524-bae2-5248b98afe08; __51vuft__KHkbEi6sh2jJsBBW=1714833926035
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:26 GMT
content-type: application/javascript
last-modified: Sun, 14 Apr 2024 14:05:22 GMT
vary: Accept-Encoding
etag: W/"661be2a2-4926"
expires: Sun, 05 May 2024 02:45:26 GMT
cache-control: max-age=43200
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rTQxz3NlTWtIGw6t%2FycdGfC2oieGKPCP3GLNHmt1ZMsdu3UbdEi5demb8VAnjJI1x%2FbYud1DWfVprIo0zzzWSTqoOyd2zSGEf3ggya5elrxC%2Fcsl%2B1AkjebDZCkCIq%2F%2FLpH5%2BIA5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e94648c85e0b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.3beesandme.shop/wp-content/themes/porto/js/libs/jquery.magnific-popup.min.js?ver=1.1.0 | 188.114.97.1 | 200 OK | 20 kB |
URL GET HTTP/3www.3beesandme.shop/wp-content/themes/porto/js/libs/jquery.magnific-popup.min.js?ver=1.1.0 IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
File typeJavaScript source, ASCII text, with very long lines (20113), with CRLF line terminators Hash9f55a34716e844184babd2dbeb441011 d6d2df510c0dc74ca24327ac48686d590451d8b4 c8eac9a3262dd857cc52d05a4fc4f1e4da96691e546d837a6ecf0a2c260d4bc6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/porto/js/libs/jquery.magnific-popup.min.js?ver=1.1.0 HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:25 GMT
content-type: application/javascript
last-modified: Sun, 14 Apr 2024 14:05:22 GMT
vary: Accept-Encoding
etag: W/"661be2a2-4f15"
expires: Sun, 05 May 2024 02:45:25 GMT
cache-control: max-age=43200
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wTXwwwGeFb1ESW86dyEGiHe6ogybr4BB4JyAxnFFNZqVMCA4264ODbrXUuAoMcIA3SoZNQ0iSWDERzBTo4kPmekqT4SsQup7SYHO%2FEat8I0pxNlSIK2NnvTzYwwpbe8tCQRsR1Jd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9464068ee0b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=swap&ver=6.5.2 | 142.250.74.106 | 200 OK | 50 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=swap&ver=6.5.2 IP142.250.74.106:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
Hash313a6232699b2f02296b5be9f4a0a5f8 d9aa6f8de96b123ea9f0546e062e340657ef0191 94f0cb222975e7939a4b4c283376fc06fbcdfcfced990a4cfbb37bf74a29567f
GET /css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=swap&ver=6.5.2 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 04 May 2024 14:45:25 GMT
date: Sat, 04 May 2024 14:45:25 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.3beesandme.shop/wp-content/plugins/woocommerce/assets/js/jquery-cookie/jquery.cookie.min.js?ver=1.4.1-wc.8.1.1 | 188.114.97.1 | 200 OK | 1.4 kB |
URL GET HTTP/3www.3beesandme.shop/wp-content/plugins/woocommerce/assets/js/jquery-cookie/jquery.cookie.min.js?ver=1.4.1-wc.8.1.1 IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
File typeJavaScript source, ASCII text, with very long lines (1479), with no line terminators Hashf52f4f105760b97c65a34d5d08d6cd55 ec635d27940f2fb8d11f99cc4e945cc7fb2b06c6 03379c07a2783f0340be898f58fb74ecdaf2e45f40701313e92bc980b2865a0c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/woocommerce/assets/js/jquery-cookie/jquery.cookie.min.js?ver=1.4.1-wc.8.1.1 HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:25 GMT
content-type: application/javascript
last-modified: Sun, 14 Apr 2024 14:05:22 GMT
vary: Accept-Encoding
etag: W/"661be2a2-586"
expires: Sun, 05 May 2024 02:45:25 GMT
cache-control: max-age=43200
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0HvvHHgFaBWWVhxzk2B2B5Hk3WMM%2BxPc%2BFOsTn0UVQP%2B1i6bfFGeflO7XacHvBWs14q5O3fX%2BDK0KwOF63CKkNzg6ozMi07dWh0m7xz1H29Kh4w65CYkC6aMdRtK%2Foxwin63pZgA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9464058e10b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 | 216.58.207.227 | 200 OK | 8.0 kB |
URL GET HTTP/2fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 IP216.58.207.227:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 8000, version 1.0 Hash72993dddf88a63e8f226656f7de88e57 179f97ec0275f09603a8db94d4380eb584d81cd5 f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149
GET /s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.3beesandme.shop
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 8000
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 15:13:04 GMT
expires: Fri, 02 May 2025 15:13:04 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 22 Mar 2024 00:00:59 GMT
content-type: font/woff2
age: 171142
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.3beesandme.shop/wp-content/uploads/1713/83/baby-girls-logo-tracksuit-in-pink-girls-loungewear_0-300x300.jpg | 188.114.97.1 | 200 OK | 6.1 kB |
URL GET HTTP/3www.3beesandme.shop/wp-content/uploads/1713/83/baby-girls-logo-tracksuit-in-pink-girls-loungewear_0-300x300.jpg IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 300x300, components 3 Hash649d09854b10e9b06568688d833875fd 97a2e4a196746df917e6fdf557b78894955264d2 6812e8b3d5e40edf0061eb326ab99b2adcb28984a6cd2953df3dce17fcf103f3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/1713/83/baby-girls-logo-tracksuit-in-pink-girls-loungewear_0-300x300.jpg HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Cookie: __vtins__KHkbEi6sh2jJsBBW=%7B%22sid%22%3A%20%22c90d2a27-e9a1-55e1-affa-e72a557daae8%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201714835726029%2C%20%22ct%22%3A%201714833926029%7D; __51uvsct__KHkbEi6sh2jJsBBW=1; __51vcke__KHkbEi6sh2jJsBBW=21d6a815-1a78-5524-bae2-5248b98afe08; __51vuft__KHkbEi6sh2jJsBBW=1714833926035
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:26 GMT
content-type: image/jpeg
content-length: 6115
last-modified: Sun, 21 Apr 2024 07:13:17 GMT
etag: "6624bc8d-17e3"
expires: Mon, 03 Jun 2024 14:45:26 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4duXb6F1Xw%2BJcjzTN7jfYRzVybdPezU7a6ZbsyKmgRxJeh99yO6UunyuT9JBuoUUch1f56rUtuinlwOO4mklqFss8tGrflWgAYi8RvsSP1050kzpNzq6shByueHOPyec3AlY2h8v"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e94648a8310b49-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.3beesandme.shop/wp-content/cache/min/1/wp-content/uploads/porto_styles/bootstrap.css?ver=1713103522 | 188.114.97.1 | 200 OK | 147 kB |
URL GET HTTP/3www.3beesandme.shop/wp-content/cache/min/1/wp-content/uploads/porto_styles/bootstrap.css?ver=1713103522 IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
Size147 kB (146921 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/cache/min/1/wp-content/uploads/porto_styles/bootstrap.css?ver=1713103522 HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:25 GMT
content-type: text/css
last-modified: Sun, 14 Apr 2024 14:05:22 GMT
vary: Accept-Encoding
etag: W/"661be2a2-23de9"
expires: Sun, 05 May 2024 02:45:25 GMT
cache-control: max-age=43200
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KxCRwDgzZUoTOjlHUefZ%2FsTPLFdEVcPsapJB%2Fs%2FxJ2kz6RpEJc4iYjwhcBkDN5JAiS49r7VwDBmqKI35FoEyUj8P0XlhEp%2BrnqhIeJH%2FeAT9Vx3H9BGgzT19n89J4%2Fj%2FW2XxlQNf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9463f3fbf0b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.3beesandme.shop/wp-content/cache/min/1/wp-content/themes/porto/js/bootstrap.js?ver=1713103522 | 188.114.97.1 | 200 OK | 122 kB |
URL GET HTTP/3www.3beesandme.shop/wp-content/cache/min/1/wp-content/themes/porto/js/bootstrap.js?ver=1713103522 IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
File typeJavaScript source, ASCII text, with very long lines (3002) Size122 kB (121613 bytes) Hash5c83b117f67a3ae7e53f52d21132ca49 55849ffe7ffe55c21c537e0b64118c25db1eb0f3 3ca30b893f6b3df57cbc786a6428eecce3b524295e1533c04846648fab6d1bfd
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/cache/min/1/wp-content/themes/porto/js/bootstrap.js?ver=1713103522 HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:25 GMT
content-type: application/javascript
last-modified: Sun, 14 Apr 2024 14:05:22 GMT
vary: Accept-Encoding
etag: W/"661be2a2-1db0d"
expires: Sun, 05 May 2024 02:45:25 GMT
cache-control: max-age=43200
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pJoPM%2B%2B%2BF%2FilSjWVc5r0V0pKBrYjF1PE7KGkjNiW%2BuEe8pe9atygs4ueEyPL0q7b6fj0SpCany3wzNbyaTzebIidroKRVNCbK0XkGjWTdzjSJGUFtMTjEIDw6xCO95KQoCppjigr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9464058de0b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2 | 216.58.207.227 | 200 OK | 7.9 kB |
URL GET HTTP/2fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2 IP216.58.207.227:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 7884, version 1.0 Hash9212f6f9860f9fc6c69b02fedf6db8c3 ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b 7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f
GET /s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.3beesandme.shop
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7884
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 19:57:12 GMT
expires: Fri, 02 May 2025 19:57:12 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 22 Mar 2024 00:00:38 GMT
content-type: font/woff2
age: 154094
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDD4Z1xlFQ.woff2 | 216.58.207.227 | 200 OK | 7.8 kB |
URL GET HTTP/2fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDD4Z1xlFQ.woff2 IP216.58.207.227:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 7824, version 1.0 Hashaf4d371a10271dafeb343f1eace762bc 6d11d743bc3cfb169d70bc86450f18351dc1a905 60bf0aba6526436f3930c58c12047687fbb6bff4dd180cce4613458ed3439ea2
GET /s/poppins/v21/pxiByp8kv8JHgFVrLDD4Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.3beesandme.shop
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7824
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 06:27:59 GMT
expires: Sat, 03 May 2025 06:27:59 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 22 Mar 2024 00:00:57 GMT
content-type: font/woff2
age: 116247
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.3beesandme.shop/wp-content/cache/min/1/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-vendors-style.css?ver=1713103522 | 188.114.97.1 | 200 OK | 10 kB |
URL GET HTTP/3www.3beesandme.shop/wp-content/cache/min/1/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-vendors-style.css?ver=1713103522 IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
File typeASCII text, with very long lines (10351), with no line terminators Hashb4eefed94a4409b1b967c1d9f3f24ca7 dfbb92b5f3daa0dc92bbecdfd48552503c7da728 aaa023fab455c76dbff35378941f3387e1ed67389d820c57cf2d1cd92c72b952
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/cache/min/1/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-vendors-style.css?ver=1713103522 HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:25 GMT
content-type: text/css
last-modified: Sun, 14 Apr 2024 14:05:22 GMT
vary: Accept-Encoding
etag: W/"661be2a2-286f"
expires: Sun, 05 May 2024 02:45:25 GMT
cache-control: max-age=43200
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8kqAB7fhWn4MYoGNyHldJixZBxyiqoUK8OjAA83%2FJMaCmpiBiNMXtvQyXVTBJf9bjwYM%2FN8XB%2FLwUYFcScxM9IMs36DLhMRcLMl5W7imQMVEWTuArkDir8AQEleTh4%2B0ZyCDD9qx"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9463f1f990b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.3beesandme.shop/wp-content/cache/min/1/wp-content/themes/porto/js/woocommerce-theme.js?ver=1713103522 | 188.114.97.1 | 200 OK | 97 kB |
URL GET HTTP/3www.3beesandme.shop/wp-content/cache/min/1/wp-content/themes/porto/js/woocommerce-theme.js?ver=1713103522 IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
File typeJavaScript source, ASCII text, with very long lines (1948) Hash5824087692f0d34e066728dac5f6e0c8 cbc89937bfa644b43af6964de6c1b1d26f0c1afc 2a8d45352e974b9e3d9161bf7be128488ae3422ec72755b3fcf5a784ce93e6d8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/cache/min/1/wp-content/themes/porto/js/woocommerce-theme.js?ver=1713103522 HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:25 GMT
content-type: application/javascript
last-modified: Sun, 14 Apr 2024 14:05:22 GMT
vary: Accept-Encoding
etag: W/"661be2a2-17c37"
expires: Sun, 05 May 2024 02:45:25 GMT
cache-control: max-age=43200
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TXCpph3cOHm49DEdrfkj%2FlaCvCeL8ZeAKgxgJ1faX2j9HIN8f4yCMK%2Br034xQxyXAZQfPSuh8J9SKxvTSVABcF7BLYKM%2BcqK4kTakGlNojzawdZur0CPwdpLhJqXSuaZLF%2FXRjvn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9464079060b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.3beesandme.shop/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=8.1.1 | 188.114.97.1 | 200 OK | 2.9 kB |
URL GET HTTP/3www.3beesandme.shop/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=8.1.1 IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
File typeJavaScript source, ASCII text, with very long lines (3027), with no line terminators Hash07f449fe7d38a778763f7d00a3e71a97 b7b5372d41a46dc9696e1aef9e2197364cd12be9 0eaa09587ef6f687515f88fef1f9be42b420e28cfef19e2424a7628f9ece18bd
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=8.1.1 HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:25 GMT
content-type: application/javascript
last-modified: Sun, 14 Apr 2024 14:05:22 GMT
vary: Accept-Encoding
etag: W/"661be2a2-b7b"
expires: Sun, 05 May 2024 02:45:25 GMT
cache-control: max-age=43200
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tT9n%2FW0hYuJ9owbcJqG7StUp6Z20N%2FkLX1q0c4wAx%2BTPdV3U8bhFXFhoCy15rVloxv0OAFuroElz7jb8dJSMfTCORfOPibYeLdRj7YeB%2B8ZcCelXuSSWof34wBa%2FK%2BJ8inE1in2N"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9464058d40b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.3beesandme.shop/wp-includes/js/underscore.min.js?ver=1.13.4 | 188.114.97.1 | 200 OK | 19 kB |
URL GET HTTP/3www.3beesandme.shop/wp-includes/js/underscore.min.js?ver=1.13.4 IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
File typeJavaScript source, ASCII text, with very long lines (18798) Hashf88d5720bb454ed5d204cbdb56901f6b f1952292fde4b15936e9aac16b2b9896684db95b 726b820e44f6ab90ad991d30a4bf26d3a5d71493cbcd1fb1efd0d14e89b9df2a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/underscore.min.js?ver=1.13.4 HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:25 GMT
content-type: application/javascript
last-modified: Sun, 14 Apr 2024 14:05:23 GMT
vary: Accept-Encoding
etag: W/"661be2a3-4991"
expires: Sun, 05 May 2024 02:45:25 GMT
cache-control: max-age=43200
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iFj9EPMQrFVwlVRDU34iA8TFluz7JxHMeRyZrhhQ5AW1eFSPh17iQ35G1nbIrMoBj1wZGHbMrnfsvbrYRFlxemcduByK%2B3sHJQjN2y8GOsNDQLAvXvucgmSeBuxwTfZJnOXTOqel"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9464079080b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.3beesandme.shop/wp-content/cache/min/1/wp-content/plugins/yith-woocommerce-wishlist/assets/css/style.css?ver=1713103522 | 188.114.97.1 | 200 OK | 30 kB |
URL GET HTTP/3www.3beesandme.shop/wp-content/cache/min/1/wp-content/plugins/yith-woocommerce-wishlist/assets/css/style.css?ver=1713103522 IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
File typeASCII text, with very long lines (29595), with no line terminators Hash2dbdafd85a7037c6e6baa9683b2df642 6f5e128535075df09b43ed5c9cd85a4b1a0f4ceb ea2d00f4413b9ea5b23ee8e66e5b848c73de05da2af8efce8f8cc649722115ea
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/cache/min/1/wp-content/plugins/yith-woocommerce-wishlist/assets/css/style.css?ver=1713103522 HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:25 GMT
content-type: text/css
last-modified: Sun, 14 Apr 2024 14:05:22 GMT
vary: Accept-Encoding
etag: W/"661be2a2-739b"
expires: Sun, 05 May 2024 02:45:25 GMT
cache-control: max-age=43200
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RgEETM63NjB1gIt1M67snTMszM54iXKtKQGxQsz0Vi3XuYi1hLTW549uUkpVYSKl3heqIE5TR1DqKdJrRAkKG1mBp4%2FhP4KRam5%2Fg%2FbouZop%2BXZT5JNRYAoEWzC0O5xU2LYArD1V"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9463f2fa10b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.3beesandme.shop/wp-content/cache/min/1/wp-content/plugins/porto-functionality/builders/assets/type-builder.css?ver=1713103522 | 188.114.97.1 | 200 OK | 8.8 kB |
URL GET HTTP/3www.3beesandme.shop/wp-content/cache/min/1/wp-content/plugins/porto-functionality/builders/assets/type-builder.css?ver=1713103522 IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
File typeASCII text, with very long lines (8799), with no line terminators Hash6e3a3ad146f34226dd09f327744314c6 64af50898d754f7fb5018c672e57f698e3f67535 c37ef6b3b8caf33776c0c2fb5a0f057c55ccd64b4cc9920aea133bb77f505f50
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/cache/min/1/wp-content/plugins/porto-functionality/builders/assets/type-builder.css?ver=1713103522 HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:25 GMT
content-type: text/css
last-modified: Sun, 14 Apr 2024 14:05:22 GMT
vary: Accept-Encoding
etag: W/"661be2a2-2249"
expires: Sun, 05 May 2024 02:45:25 GMT
cache-control: max-age=43200
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=69veN2CYUiWwnN7ND0rW2kGF%2F8HOpTLHJJ%2BzXCPIUoBD%2BnmWTHVbo4ptGNMXvO%2BVcZOXogg7lq%2Fw4LgprWeNNvrGEUjdzCcvbhxC%2Bo5ajfyKmXWZ0%2FOFv7oBBowIlPbR29lIBVNi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9463f6fe70b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.3beesandme.shop/wp-content/plugins/yith-woocommerce-wishlist/assets/js/jquery.yith-wcwl.min.js?ver=3.25.0 | 188.114.97.1 | 200 OK | 25 kB |
URL GET HTTP/3www.3beesandme.shop/wp-content/plugins/yith-woocommerce-wishlist/assets/js/jquery.yith-wcwl.min.js?ver=3.25.0 IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
File typeJavaScript source, ASCII text, with very long lines (25294), with no line terminators Hash32f353893906d18e1fc351066e4b263a c8ed65fffa387077fe4ba700b7913bbb59f90436 80d7254b4e01cf17bf56254fc3698a81ce127553bc9eac47ef24b9e2a94cad8f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/yith-woocommerce-wishlist/assets/js/jquery.yith-wcwl.min.js?ver=3.25.0 HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:25 GMT
content-type: application/javascript
last-modified: Sun, 14 Apr 2024 14:05:22 GMT
vary: Accept-Encoding
etag: W/"661be2a2-62ce"
expires: Sun, 05 May 2024 02:45:25 GMT
cache-control: max-age=43200
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rToSz1tlZLyPybXuxdXrNnInKNzy0%2B2blmjn45AIdW2djwVFaDZ6zVfYAUHdAOhGBQJzJALgcxur94jTCZ14fgSw8Ef%2BvG7W4u4OLCaoq7i5PG%2FX%2BuTdfRTptKdHenDOu7ushiVN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9464038bb0b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 | 216.58.207.227 | 200 OK | 7.8 kB |
URL GET HTTP/2fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 IP216.58.207.227:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 7816, version 1.0 Hash25b0e113ca7cce3770d542736db26368 cb726212d5d525021752a1d8470a0fb593e0c49e 9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526
GET /s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.3beesandme.shop
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7816
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 01:53:08 GMT
expires: Fri, 02 May 2025 01:53:08 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 22 Mar 2024 00:00:32 GMT
content-type: font/woff2
age: 219138
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.3beesandme.shop/wp-content/uploads/1713/83/piko-58288-sliding-tarp-car-fs-vi-piko-h0-scale-freight-cars_0-300x300.jpg | 188.114.97.1 | 200 OK | 10 kB |
URL GET HTTP/3www.3beesandme.shop/wp-content/uploads/1713/83/piko-58288-sliding-tarp-car-fs-vi-piko-h0-scale-freight-cars_0-300x300.jpg IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 300x300, components 3 Hash35f1964e9042a82e297603129a60a060 8957a94aab81d974cc8125307332c7437fb52ac9 44035784d00a3bb838995d42705d5558e46a10a8a4f223bd30e8452965b7b4f7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/1713/83/piko-58288-sliding-tarp-car-fs-vi-piko-h0-scale-freight-cars_0-300x300.jpg HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Cookie: __vtins__KHkbEi6sh2jJsBBW=%7B%22sid%22%3A%20%22c90d2a27-e9a1-55e1-affa-e72a557daae8%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201714835726029%2C%20%22ct%22%3A%201714833926029%7D; __51uvsct__KHkbEi6sh2jJsBBW=1; __51vcke__KHkbEi6sh2jJsBBW=21d6a815-1a78-5524-bae2-5248b98afe08; __51vuft__KHkbEi6sh2jJsBBW=1714833926035
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:26 GMT
content-type: image/jpeg
content-length: 10095
last-modified: Sun, 21 Apr 2024 07:14:57 GMT
etag: "6624bcf1-276f"
expires: Mon, 03 Jun 2024 14:45:26 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=G59jQWHWSzF%2FL25ynEifUSo3imtiGfsH0kEdryX1gvawBn5GSU8PLxjWXFGi6aAqSPeTZekmoo6JkijhItGK0nWKrfl2kGXXoiWwnD5dw4Nwx4p2SCMqH47BQMWzNE5ULP5ynmGD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e94648982e0b49-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.3beesandme.shop/wp-includes/js/wp-util.min.js?ver=6.5.2 | 188.114.97.1 | 200 OK | 1.4 kB |
URL GET HTTP/3www.3beesandme.shop/wp-includes/js/wp-util.min.js?ver=6.5.2 IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
File typeJavaScript source, ASCII text, with very long lines (1469), with no line terminators Hash4cfa97208f3196db8343dab3061e3599 538b31a3ee7b795af2a2687e1558d0bcf579e949 ce1c908010099b7d7d15bfab3630252fd30d6aa29951121f98eaa46ead8cd1a8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/wp-util.min.js?ver=6.5.2 HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:25 GMT
content-type: application/javascript
last-modified: Sun, 14 Apr 2024 14:05:23 GMT
vary: Accept-Encoding
etag: W/"661be2a3-592"
expires: Sun, 05 May 2024 02:45:25 GMT
cache-control: max-age=43200
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=M4JYSetnzcJExnm141JwGhblZqj6DHVlhqJindJ14v3vXyYjdZrLQQxpDWN63PNWvVYU0Dws3KyFSggKkqq6oKUvu5fF%2F9UXTqmX7LCbV%2FOrYbyaytFWkjJ3f0RHvrJDHRnhVJ7D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e94640790b0b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.3beesandme.shop/wp-content/cache/min/1/wp-content/themes/porto/css/theme.css?ver=1713103522 | 188.114.97.1 | 200 OK | 301 kB |
URL GET HTTP/3www.3beesandme.shop/wp-content/cache/min/1/wp-content/themes/porto/css/theme.css?ver=1713103522 IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
Size301 kB (301074 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/cache/min/1/wp-content/themes/porto/css/theme.css?ver=1713103522 HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:25 GMT
content-type: text/css
last-modified: Sun, 14 Apr 2024 14:05:22 GMT
vary: Accept-Encoding
etag: W/"661be2a2-49812"
expires: Sun, 05 May 2024 02:45:25 GMT
cache-control: max-age=43200
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5aBvCvA32jzhh%2BnbHXbtky6SsnNQ91GvL3ULY9Vhxxl7i%2FBcqZPN7L1bYKcWolpLRExXKhD7GWWvivMHFHGdjpE55Y1e3itWHbsSwb1gKQ4PEYheEbi9PD9%2BOwbFJNZ7rVqZLKEe"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9463f3fc20b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.3beesandme.shop/wp-content/cache/min/1/wp-content/themes/porto/css/theme_shop.css?ver=1713103522 | 188.114.97.1 | 200 OK | 149 kB |
URL GET HTTP/3www.3beesandme.shop/wp-content/cache/min/1/wp-content/themes/porto/css/theme_shop.css?ver=1713103522 IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
File typeASCII text, with very long lines (65536), with no line terminators Size149 kB (148872 bytes) Hasha2be8aff80c20adf839c0d565135430f b15d2e7a719223b070c5970bc92d28f8a914cb20 cb63cef0943a3e07afde4bdf8cee3d9e0fcac13d42e05aec6dce109c0ec23eec
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/cache/min/1/wp-content/themes/porto/css/theme_shop.css?ver=1713103522 HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:25 GMT
content-type: text/css
last-modified: Sun, 14 Apr 2024 14:05:22 GMT
vary: Accept-Encoding
etag: W/"661be2a2-24588"
expires: Sun, 05 May 2024 02:45:25 GMT
cache-control: max-age=43200
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ku%2B4CRQ3CXsK5eyyJgA9yichtBu%2FOnMapHfVZ6eCyIVHaTTvvRYdb6IGHcBo2kt%2Fpl11FQAWAYnV8h4clT%2BDLOB%2BRY2tZBUiDpH2%2B0kfOVtPvcCrNtxRGXPWjO9TLRWylfeZhpvF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9463f4fcc0b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.3beesandme.shop/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.8.1.1 | 188.114.97.1 | 200 OK | 1.8 kB |
URL GET HTTP/3www.3beesandme.shop/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.8.1.1 IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
File typeJavaScript source, ASCII text, with very long lines (1885), with no line terminators Hash8013d1698d3ebd4d2e9cfc9f6893a0e7 a2ed64fa47db140c2c81ebeb74b4b3926ebf2ba6 75268c5a239447196edc6c3dce15149ab595dea7983a7b17da35d068dba29e2d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.8.1.1 HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:25 GMT
content-type: application/javascript
last-modified: Sun, 14 Apr 2024 14:05:22 GMT
vary: Accept-Encoding
etag: W/"661be2a2-735"
expires: Sun, 05 May 2024 02:45:25 GMT
cache-control: max-age=43200
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jXMjGBEGJAgMdGUjUUMaDbnkKc5zJJCX2t7bujJR0QYoDpbZIC4EFsi9CJ9mGDf%2BNGRTdB0FX%2FWIquaF1atrQLdIz0oLCq9JIHmUW%2BwJ7H%2BNxBKm4zsjcr0wcWUK%2FW7%2BQTQD%2F%2BZt"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9464048cf0b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.3beesandme.shop/wp-content/cache/min/1/wp-content/themes/porto/js/theme.js?ver=1713103522 | 188.114.97.1 | 200 OK | 126 kB |
URL GET HTTP/3www.3beesandme.shop/wp-content/cache/min/1/wp-content/themes/porto/js/theme.js?ver=1713103522 IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
File typeJavaScript source, ASCII text, with very long lines (10425) Size126 kB (126372 bytes) Hash94f08a6d2744406617572e5b083edc7c e6f8cc6dddc5080be3cfa2cc50dc1e865ae86f2c 8e0afdc3f5a3fc1e7fa154fccf184c917d2ab82d99c30d7bcb997cc12516b5c4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/cache/min/1/wp-content/themes/porto/js/theme.js?ver=1713103522 HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:25 GMT
content-type: application/javascript
last-modified: Sun, 14 Apr 2024 14:05:22 GMT
vary: Accept-Encoding
etag: W/"661be2a2-1eda4"
expires: Sun, 05 May 2024 02:45:25 GMT
cache-control: max-age=43200
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NTviVpu5qINn%2BS7xK0ZyWzj%2FokkE25BzSKGnBQVRwocIcbgf7fctWLiBwr9mCUutPXfqCKhNwMHn0SoB%2Bq699FTF4mzAWZnHZaDRFFUaOAHEscNY3CpD%2B7PbcOUNj9DHjRPL%2B0TG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9464079030b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.3beesandme.shop/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2 | 188.114.97.1 | 200 OK | 12 kB |
URL GET HTTP/3www.3beesandme.shop/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2 IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
File typeJavaScript source, ASCII text, with very long lines (12198), with no line terminators Hash3819c3569da71daec283a75483735f7e ecd40a5cc6f0b76200c454ca880210dc301cfab8 214674cc77aba35ab3567b88e2739fd08e8e96c61d279559ad61874069683ea0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2 HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:25 GMT
content-type: application/javascript
last-modified: Sun, 14 Apr 2024 14:05:22 GMT
vary: Accept-Encoding
etag: W/"661be2a2-2fa6"
expires: Sun, 05 May 2024 02:45:25 GMT
cache-control: max-age=43200
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zGxYuqvg4U1NJ4voPxowIM2CwVUEvmUlJyV%2F%2BhJzpwCHddcKGDx43Zx9wdLa%2F7XM5d38tfZr66CHBR5aqPLSpAVG3N4ArEtvRt96B%2F7Efxx9Vfe0IEIfdk%2BQAbKtjcYiLNww4Hyg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e94640891c0b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.3beesandme.shop/wp-content/themes/porto/js/libs/owl.carousel.min.js?ver=2.3.4 | 188.114.97.1 | 200 OK | 116 kB |
URL GET HTTP/3www.3beesandme.shop/wp-content/themes/porto/js/libs/owl.carousel.min.js?ver=2.3.4 IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
Size116 kB (115888 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/porto/js/libs/owl.carousel.min.js?ver=2.3.4 HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:25 GMT
content-type: application/javascript
last-modified: Sun, 14 Apr 2024 14:05:22 GMT
vary: Accept-Encoding
etag: W/"661be2a2-1c4b0"
expires: Sun, 05 May 2024 02:45:25 GMT
cache-control: max-age=43200
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6ZQG5NQP7OuG3%2BrES229mqxhjmx02%2BGL0i%2FLt7z%2FU9ivvxszUxrvEtoF9dFhHe8DVGH%2FlSvKVsTtaEJic8Jw2ZV9qfTTH5cPCYriI76nwyW2kZn%2BT4fQgRqnD%2BWhz70ia8emsTx7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9464068e70b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.3beesandme.shop/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.16.5 | 188.114.97.1 | 200 OK | 40 kB |
URL GET HTTP/3www.3beesandme.shop/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.16.5 IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
File typeJavaScript source, ASCII text, with very long lines (40396) Hashac7624f04566920dae03f91eb66dd97b d9b51553e1aaa1440a16437050f496277fc10bc5 07571bc50f1998b305037b073daebec638f70ad32390a63d151cdbac2180d386
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.16.5 HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:25 GMT
content-type: application/javascript
last-modified: Sun, 14 Apr 2024 14:05:22 GMT
vary: Accept-Encoding
etag: W/"661be2a2-9df4"
expires: Sun, 05 May 2024 02:45:25 GMT
cache-control: max-age=43200
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FXOzpH0GmB4Q184UkySr1yo75F3hMdpHfL87EaQJfCa%2BqFJ3DDyFzo6ZiJR08bSCm6Og3ft0oAGtv4o7Q6JcAbZy5O3ffj2x%2F92fNUM%2FbXJvYephjK9WIRETnP4m8NwiwoH%2B2Huw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9464099240b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.3beesandme.shop/wp-content/themes/porto/images/flags.png | 188.114.97.1 | 200 OK | 24 kB |
URL GET HTTP/3www.3beesandme.shop/wp-content/themes/porto/images/flags.png IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
File typePNG image data, 256 x 176, 8-bit colormap, non-interlaced Hash04928df0f0bee1344874f2d89ac3783c 5421b494a6cc32b37e39c229c53961d8fc1296c5 0b51dc4b77e0d7b660e388ffbaa188d751fb22905d7b529a2825b24fd416b797
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/porto/images/flags.png HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/wp-content/cache/min/1/wp-content/themes/porto/css/theme.css?ver=1713103522
Cookie: __vtins__KHkbEi6sh2jJsBBW=%7B%22sid%22%3A%20%22c90d2a27-e9a1-55e1-affa-e72a557daae8%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201714835726029%2C%20%22ct%22%3A%201714833926029%7D; __51uvsct__KHkbEi6sh2jJsBBW=1; __51vcke__KHkbEi6sh2jJsBBW=21d6a815-1a78-5524-bae2-5248b98afe08; __51vuft__KHkbEi6sh2jJsBBW=1714833926035
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:26 GMT
content-type: image/png
content-length: 23902
last-modified: Sun, 14 Apr 2024 14:05:22 GMT
etag: "661be2a2-5d5e"
expires: Mon, 03 Jun 2024 14:45:26 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8Wwns7hRx752Ta9k9CnaTy88aQGmd14H%2FKAR836nDhBA9pkjndjclu6IrnEGfnZ%2BBLg9g2pARHy6BjWbFr4ZhD6FeM2gPJkizPzg2qqGGnHuerKb3FfcX%2FGCnSSo6T5S1ORLFgNP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e946463e340b49-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.3beesandme.shop/wp-content/cache/min/1/wp-content/themes/porto/css/theme_elementor.css?ver=1713103522 | 188.114.97.1 | 200 OK | 8.6 kB |
URL GET HTTP/3www.3beesandme.shop/wp-content/cache/min/1/wp-content/themes/porto/css/theme_elementor.css?ver=1713103522 IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
File typeASCII text, with very long lines (8630), with no line terminators Hash78bec06c7de8a735dc55ed08448d06d1 13be9161f2ba38035f37758ce2d3fa1ffe906601 3c367a4aac7da08de872f88ec55e48a5be7a40f191853750f68dddb33c689f64
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/cache/min/1/wp-content/themes/porto/css/theme_elementor.css?ver=1713103522 HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:25 GMT
content-type: text/css
last-modified: Sun, 14 Apr 2024 14:05:22 GMT
vary: Accept-Encoding
etag: W/"661be2a2-21b4"
expires: Sun, 05 May 2024 02:45:25 GMT
cache-control: max-age=43200
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=R6xPK9N1Po31amTYEMie7eccM%2FtkhMMEzay2qj5v8%2B%2F0Q1qCYfu7N3eW57jvrP6FMvSGjLHqX%2FG2dHIfLIXmwbEADBLHjuHFp57JQcDzrpck5jV%2FwD1Ucl%2B3gTml61xJ8FrHoSJV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9463f4fd00b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.3beesandme.shop/wp-content/uploads/1713/83/girls-polo-dress-in-yellow-holiday-shop-girls_0-300x300.jpg | 188.114.97.1 | 200 OK | 6.2 kB |
URL GET HTTP/3www.3beesandme.shop/wp-content/uploads/1713/83/girls-polo-dress-in-yellow-holiday-shop-girls_0-300x300.jpg IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 300x300, components 3 Hash7a24aa52e05f1db97a2ed2a22fb822c1 17e783258dd2c218dec8771ac8c50a86b9c9b660 542c389ecb69fbde94a1367b506182cc49c2b463bf1536bb1c6eaa0349361cfe
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/1713/83/girls-polo-dress-in-yellow-holiday-shop-girls_0-300x300.jpg HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Cookie: __vtins__KHkbEi6sh2jJsBBW=%7B%22sid%22%3A%20%22c90d2a27-e9a1-55e1-affa-e72a557daae8%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201714835726029%2C%20%22ct%22%3A%201714833926029%7D; __51uvsct__KHkbEi6sh2jJsBBW=1; __51vcke__KHkbEi6sh2jJsBBW=21d6a815-1a78-5524-bae2-5248b98afe08; __51vuft__KHkbEi6sh2jJsBBW=1714833926035
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:26 GMT
content-type: image/jpeg
content-length: 6235
last-modified: Sun, 21 Apr 2024 07:19:13 GMT
etag: "6624bdf1-185b"
expires: Mon, 03 Jun 2024 14:45:26 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NUwowb5JpBcyLJ2lJPbhjuap5ul%2FYsgX450BMjlzHcsWwCB4jmGo9jmM6jPgPuQ%2FPTy2%2FSQr1YxjVFxjAO0KTB%2FQJiN08q8gzhoqO9bONSeYJ0N4DRHdXmaWOpYKOCRvj3AMayK%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e9464898210b49-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.3beesandme.shop/wp-json/contact-form-7/v1/contact-forms/1453/feedback/schema | 188.114.97.1 | 200 OK | 235 B |
URL GET HTTP/3www.3beesandme.shop/wp-json/contact-form-7/v1/contact-forms/1453/feedback/schema IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash1cdd42b127e4fe7f624536e46667efa6 19d5eea894d8c3bebbc11ed51f28c3e2d8f0f804 0d73b6a29f81ca103ce6590cd6e01dfe507c5baf06431ed4b44b686bfeb731ad
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-json/contact-form-7/v1/contact-forms/1453/feedback/schema HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, */*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.3beesandme.shop/
DNT: 1
Connection: keep-alive
Cookie: __vtins__KHkbEi6sh2jJsBBW=%7B%22sid%22%3A%20%22c90d2a27-e9a1-55e1-affa-e72a557daae8%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201714835726029%2C%20%22ct%22%3A%201714833926029%7D; __51uvsct__KHkbEi6sh2jJsBBW=1; __51vcke__KHkbEi6sh2jJsBBW=21d6a815-1a78-5524-bae2-5248b98afe08; __51vuft__KHkbEi6sh2jJsBBW=1714833926035
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:27 GMT
content-type: application/json; charset=UTF-8
x-powered-by: PHP/7.4.33
x-robots-tag: noindex
link: <https://www.3beesandme.shop/wp-json/>; rel="https://api.w.org/"
x-content-type-options: nosniff
access-control-expose-headers: X-WP-Total, X-WP-TotalPages, Link
access-control-allow-headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type
allow: GET
cache-control: max-age=0
expires: Sat, 04 May 2024 14:45:26 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fUbt9Aivmq8RtH0us8r%2BfM%2BlRcNZXJyoDC3nwqOD7sZLHqWCe0kQl%2FvZYuDceVYFPaQokztqg4MtK9QA44opyUJf3fEOjVFlWrPba0ljmrUkA8kA%2FHGLxkGQIBcocmwK1wFapA%2FA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e94648c8610b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.3beesandme.shop/wp-content/cache/min/1/wp-content/plugins/woocommerce/assets/css/prettyPhoto.css?ver=1713103522 | 188.114.97.1 | 200 OK | 9.8 kB |
URL GET HTTP/3www.3beesandme.shop/wp-content/cache/min/1/wp-content/plugins/woocommerce/assets/css/prettyPhoto.css?ver=1713103522 IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
File typeASCII text, with very long lines (9839), with no line terminators Hashc6c8f156176110e0bdd2bcaae8ebc184 fec9cdb298129bf906c7f74da1b366bbcfd583be c98938e43dc3f7814bf68e8a48ee868c63960aab85b3dc039854b4d6c7b1a223
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/cache/min/1/wp-content/plugins/woocommerce/assets/css/prettyPhoto.css?ver=1713103522 HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:25 GMT
content-type: text/css
last-modified: Sun, 14 Apr 2024 14:05:22 GMT
vary: Accept-Encoding
etag: W/"661be2a2-2646"
expires: Sun, 05 May 2024 02:45:25 GMT
cache-control: max-age=43200
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5gQL1m3d6Zb%2Fd6Cz%2Bw3Sprpxb%2BKDKVALI3YCDtoOPor7z3TtiN444EIPAaZqGXYW1mgGZiqgCqqR9NhyYZwMBUU6M9aDRZO3fZZ09Vybf5MAQ8mBGoEEQ5yxHEAVeZ0xkiWQePCw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9463f2fa00b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.3beesandme.shop/wp-content/cache/min/1/wp-content/themes/porto/css/theme/shop/login-style/account-login.css?ver=1713103522 | 188.114.97.1 | 200 OK | 2.5 kB |
URL GET HTTP/3www.3beesandme.shop/wp-content/cache/min/1/wp-content/themes/porto/css/theme/shop/login-style/account-login.css?ver=1713103522 IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
File typeASCII text, with very long lines (2506), with no line terminators Hashd39ec26aec768b24f60becc8295c14bc 4fb82584f671018bb6c3fbab1c5979fe8e62dd06 27997f7d4f75689619db31a07cb6c486a5905512759705b8ddc0e1a67357178c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/cache/min/1/wp-content/themes/porto/css/theme/shop/login-style/account-login.css?ver=1713103522 HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:25 GMT
content-type: text/css
last-modified: Sun, 14 Apr 2024 14:05:22 GMT
vary: Accept-Encoding
etag: W/"661be2a2-9c3"
expires: Sun, 05 May 2024 02:45:25 GMT
cache-control: max-age=43200
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xXv9VHSJA5hMhvWWf74MUJa3o7rXFxbLVN9rCzgtClEhGXTXV6b8PlbL4XiQackIhZMq65RVvneJjojAE01c9rsL%2BKnvFXNkcHFf8gwR2gBz%2Fx7QOYXHP6oLwMkz1GtXtoX44sgh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9463f6fe90b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.3beesandme.shop/wp-includes/js/jquery/jquery.min.js?ver=3.7.1 | 188.114.97.1 | 200 OK | 88 kB |
URL GET HTTP/3www.3beesandme.shop/wp-includes/js/jquery/jquery.min.js?ver=3.7.1 IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
File typeJavaScript source, ASCII text, with very long lines (65447) Hash826eb77e86b02ab7724fe3d0141ff87c 79cd3587d565afe290076a8d36c31c305a573d18 cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:25 GMT
content-type: application/javascript
last-modified: Sun, 14 Apr 2024 14:05:23 GMT
vary: Accept-Encoding
etag: W/"661be2a3-15601"
expires: Sun, 05 May 2024 02:45:25 GMT
cache-control: max-age=43200
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3of0phV5LIkMqrsmW5%2FJSlhDQ%2BF2n%2B%2BCOiCBONRiHGKbM3H1waKTDDLSsbGqiaGTY0ATdYz1E4WiXXBbpdv09TTUUOZWqdDbMPH04fz9YfSdXDzKYIwE3AhvRVEhYSqBkD2lmo6t"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9463f78070b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.3beesandme.shop/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.16.5 | 188.114.97.1 | 200 OK | 59 kB |
URL GET HTTP/3www.3beesandme.shop/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.16.5 IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.16.5 HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:25 GMT
content-type: application/javascript
last-modified: Sun, 14 Apr 2024 14:05:22 GMT
vary: Accept-Encoding
etag: W/"661be2a2-e5ec"
expires: Sun, 05 May 2024 02:45:25 GMT
cache-control: max-age=43200
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CHnsNwuBdm%2BUpOUkFmIHyzjv2dCDdXB5RdYSKgJ%2FcC8qOjG0rH2GrRZ30JC%2BMnZGfOy9173XHPAXpeyyFb5TAkkvT57hjHXFDMyzpxMNNlV%2Fc2i11%2BBjXMuv71xlMfMBCK%2FKn5K6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9464089160b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.3beesandme.shop/wp-content/uploads/1713/83/baby-girls-logo-tracksuit-in-pink-girls-loungewear_1-300x300.jpg | 188.114.97.1 | 200 OK | 5.0 kB |
URL GET HTTP/3www.3beesandme.shop/wp-content/uploads/1713/83/baby-girls-logo-tracksuit-in-pink-girls-loungewear_1-300x300.jpg IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 300x300, components 3 Hash580d54e128ba2e8432092431c15e5ed5 4975508e1869622b9b0ca249956f9bb83ddaaa68 2e95c0aee06bb4ccf0d6fe686285b6052de403cf8b9b3d96fa30b56ae003d5e6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/1713/83/baby-girls-logo-tracksuit-in-pink-girls-loungewear_1-300x300.jpg HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Cookie: __vtins__KHkbEi6sh2jJsBBW=%7B%22sid%22%3A%20%22c90d2a27-e9a1-55e1-affa-e72a557daae8%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201714835726029%2C%20%22ct%22%3A%201714833926029%7D; __51uvsct__KHkbEi6sh2jJsBBW=1; __51vcke__KHkbEi6sh2jJsBBW=21d6a815-1a78-5524-bae2-5248b98afe08; __51vuft__KHkbEi6sh2jJsBBW=1714833926035
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:26 GMT
content-type: image/jpeg
content-length: 4978
last-modified: Sun, 21 Apr 2024 07:13:23 GMT
etag: "6624bc93-1372"
expires: Mon, 03 Jun 2024 14:45:26 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=f%2BT0E%2BVsjQM5AdOiJxMsT8KrALpli9qOccu9cvobru77%2Fw2zmsoGqhcuK6zMUmVyKkqaXe6lsNir1KB1S%2BwnwzNWumNViQ8RRdZAENhNbd1mR%2BlInmEXH%2FjzAQKvJ0VzmvMuwSdc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e94648a8370b49-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.3beesandme.shop/wp-content/plugins/yith-woocommerce-wishlist/assets/js/jquery.selectBox.min.js?ver=1.2.0 | 188.114.97.1 | 200 OK | 15 kB |
URL GET HTTP/3www.3beesandme.shop/wp-content/plugins/yith-woocommerce-wishlist/assets/js/jquery.selectBox.min.js?ver=1.2.0 IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/yith-woocommerce-wishlist/assets/js/jquery.selectBox.min.js?ver=1.2.0 HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:25 GMT
content-type: application/javascript
last-modified: Sun, 14 Apr 2024 14:05:22 GMT
vary: Accept-Encoding
etag: W/"661be2a2-3a4f"
expires: Sun, 05 May 2024 02:45:25 GMT
cache-control: max-age=43200
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=loxbRj%2FUpkNJ29XYlFYV4rrYD1saHnBG0zjiUpeCfyySGTK3lV0G1%2B3e6oSwo%2FOIYrJrBh7XfCuJX9fw4Fm8RB2WmE5ee3HE2W0RXUiFtjyUtzmK9gW6TLG04M3FGWYwcR0o300C"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9464038b30b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.3beesandme.shop/wp-content/cache/min/1/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=1713103522 | 188.114.97.1 | 200 OK | 20 kB |
URL GET HTTP/3www.3beesandme.shop/wp-content/cache/min/1/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=1713103522 IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
File typeASCII text, with very long lines (19883) Hashdbb092855d59598c20acf0729eda1273 b794b6a6ace8d8c0ec9bd4c9ea87d4b4c0868cfa 054d4eba2270037bdce228b46620018244a9f2fcf20b7eb23df59806e1eb1c93
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/cache/min/1/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=1713103522 HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:25 GMT
content-type: text/css
last-modified: Sun, 14 Apr 2024 14:05:22 GMT
vary: Accept-Encoding
etag: W/"661be2a2-4dd9"
expires: Sun, 05 May 2024 02:45:25 GMT
cache-control: max-age=43200
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lFJn0jF1BhOzZs39P%2Fut398Ecq8fXrU4R8vTI%2BPR9qrSGOE1UgoXW2N0SDVs7E2D9qJBvbQLP294Qo0Ec6hGnQXeisVA96sxdrLCAsi3bfTcxG3BQjbWRrM%2Fl051BeIG2bfICgGJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9463f2fa90b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.3beesandme.shop/wp-includes/js/imagesloaded.min.js?ver=5.0.0 | 188.114.97.1 | 200 OK | 5.5 kB |
URL GET HTTP/3www.3beesandme.shop/wp-includes/js/imagesloaded.min.js?ver=5.0.0 IP188.114.97.1:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject3beesandme.shop FingerprintBB:07:E1:A8:70:15:C1:D7:5E:B1:97:97:B9:48:EB:48:FD:81:4F:BA ValiditySun, 14 Apr 2024 08:08:48 GMT - Sat, 13 Jul 2024 08:08:47 GMT
File typeJavaScript source, ASCII text, with very long lines (5620), with no line terminators Hashbc3890f850c25498759ca3e66da8b393 cefa096be6b211430446e0b5fb931f6d3bf19b4f 447daf0f56e15ee2a1f123f9172dcde114eb14683f92fa1d13b1ff2af2d1743e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/imagesloaded.min.js?ver=5.0.0 HTTP/1.1
Host: www.3beesandme.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.3beesandme.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 14:45:25 GMT
content-type: application/javascript
last-modified: Sun, 14 Apr 2024 14:05:23 GMT
vary: Accept-Encoding
etag: W/"661be2a3-1590"
expires: Sun, 05 May 2024 02:45:25 GMT
cache-control: max-age=43200
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=z3HYEPUZ7Clzz13seClaxWxjz91FQE9GknyHS2EiJcWDBpyRfxWCMlwx8wVPbbgvV3PTG36i%2B4ki7QMRhjg4c%2FMHcbWvvtlziiusZGXWkHPPTanKYb1556Frxnhqhzn1qqXvreN0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9464068ea0b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 | 216.58.207.227 | 200 OK | 7.7 kB |
URL GET HTTP/2fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 IP216.58.207.227:443
Requested byhttps://www.3beesandme.shop/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 7748, version 1.0 Hasha09f2fccfee35b7247b08a1a266f0328 0da2d17e738f46d2a09e6fb7969da451719a9820 cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446
GET /s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.3beesandme.shop
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7748
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 30 Apr 2024 03:25:26 GMT
expires: Wed, 30 Apr 2025 03:25:26 GMT
cache-control: public, max-age=31536000
age: 386400
last-modified: Fri, 22 Mar 2024 00:01:14 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|