{"report_id":"20beea89-3bd4-45d1-8100-326de9ec62d9","version":0,"status":"done","tags":[],"date":"2026-08-31T08:20:55Z","url":{"schema":"http","addr":"eoydoi.shop/","fqdn":"eoydoi.shop","domain":"eoydoi.shop","tld":"shop"},"ip":{"addr":"143.246.213.88","port":0,"asn":600,"as":"OARNET-AS","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"eoydoi.shop/#/","fqdn":"eoydoi.shop","domain":"eoydoi.shop","tld":"shop"},"title":"Amazon Refund Check","dom":{"size":10742,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8139)","md5":"201e405a6357eccb1ce79ed0d649ae6b","sha1":"64b204a6fc9cc544d269a5f700aa02212b7e2d31","sha256":"b7accac41a8675c7def41cfdf26e5da9ae61f4aedc55be5214981a45805a4ac8","sha512":"d3027b363ba963665912ec97974734678b78682b2af83dedbf044ef041753d07abca037afb92812a7d5e2018519228edec1144681d4f7a948cf16883937d3adb","ssdeep":"192:yvUiFItHYGCuVHTNlLDc/CO44gSobSZ/MIyri8UjtjDkb3wBTXk4uwNnFXrEVZvi:SFItHYGZzaCTNWUrGlVBz/2oPAxpKso","tlshash":"7022bd62f04d3c662937a3d4f4636e2964f0f71a820e8c4126f84ae73ed7db1b492755","dom_hash":"domhash3d83446d126295f8b7314e4c538351a3","first_seen":"2026-08-30T21:25:42.462558Z","last_seen":"2026-08-31T08:20:56.727833Z","times_seen":3,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"eoydoi.shop/","fqdn":"eoydoi.shop","domain":"eoydoi.shop","tld":"shop"},"ip":{"addr":"143.246.213.88","port":0,"asn":600,"as":"OARNET-AS","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-05T08:20:55Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"eoydoi.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"eoydoi.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"eoydoi.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"eoydoi.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"eoydoi.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"eoydoi.shop","ip":{"addr":"143.246.213.88","port":443,"asn":600,"as":"OARNET-AS","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-30T21:25:26.05921Z","last_seen":"2026-08-30T21:25:26.05921Z","alert_count":45,"request_count":9,"received_data":378352,"sent_data":4241,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.dcloud.net.cn","ip":{"addr":"124.174.83.217","port":443,"asn":0,"as":"","country":"China","country_code":"CN"},"domain_registered":"2013-07-17","domain_rank":296858,"first_seen":"2018-09-15T09:18:08Z","last_seen":"2026-08-28T22:48:01.920941Z","alert_count":0,"request_count":1,"received_data":577,"sent_data":546,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"eoydoi.shop/","fqdn":"eoydoi.shop","domain":"eoydoi.shop","tld":"shop"},"ip":{"addr":"143.246.213.88","port":443,"asn":600,"as":"OARNET-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"2d6a78ab53be5bc4a6d37c42e772760b","sha1":"32f076aec75ed16ecb874b48f3d3178d4cb46c81","sha256":"58a225a1053179435184af7a71e45ccce47bc71b3d1bbbf14cbf7135f24f4cf0","sha512":"4bb08b63cfb3a7d5c1f089aea9e41ca1094156c40d54d2d90a9a8ee123e58c35dce223748e88feda2cf532357deb184b1387b3045207766812025c714622ed45","ssdeep":"","tlshash":"26c012545838540200f820b8125f6617b4959a3b835c54e0d114ad7c09b814745e9963","size":183,"data":"","first_seen":"2026-08-10T14:47:35.81771Z","last_seen":"2026-08-31T08:20:56.735939Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eoydoi.shop/","fqdn":"eoydoi.shop","domain":"eoydoi.shop","tld":"shop"},"ip":{"addr":"143.246.213.88","port":443,"asn":600,"as":"OARNET-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"9fb187fa1d9a602489647306f7d58dc4","sha1":"c375367d6a998a62bc83615967d2ea608a312d14","sha256":"43f4c921d36ccc72e7da1cb65cb33b37614fc0171383689d0917aec3d79b68e0","sha512":"30bafb6cf64157f694d2a910e28d95517fdd89e62a186977a7576d3eb3187a755556980b04cbc743a23b10f7f7973869d52560ebc55e68ea02dc7b5cb2918a39","ssdeep":"","tlshash":"2df0545c3c51f81333f53634c2338a2f37510700348355398645cc246c544861445c8d","size":477,"data":"","first_seen":"2026-08-30T21:25:42.517876Z","last_seen":"2026-08-31T08:20:56.736419Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eoydoi.shop/assets/index-ByLTYRRe.js","fqdn":"eoydoi.shop","domain":"eoydoi.shop","tld":"shop"},"ip":{"addr":"143.246.213.88","port":443,"asn":600,"as":"OARNET-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7fdd94e9e78526f6e3e7afacaae0cdd1","sha1":"d297bd8c3937bca3346be1cdc36b01ebf88afa18","sha256":"962f04f2e2d155ef88bfc279633f1389c86777150ac6cd8d888264ee064619f2","sha512":"4c8a53a24535472c8c21bd7f308db600594963a629c5117fdec96c4785eb7109eb5eda2f4cb1cbaf48884f12f8cf252a866465bd42af8348164a412f9ef78847","ssdeep":"6144:9fcU6MPOn4FR2Fn+5iznhWTmycta0Veh596RZQozxcR8HH:9XR21+5iITzcta0VehX6RZQVG","tlshash":"c83407e93282b03243e609f6507b0506f2392d55784e94d4f16ceceb3d6785a92bbf6c","size":231430,"data":"","first_seen":"2026-08-30T21:25:42.509413Z","last_seen":"2026-08-31T08:20:56.728648Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eoydoi.shop/assets/_plugin-vue_export-helper.DlAUqK2U.js","fqdn":"eoydoi.shop","domain":"eoydoi.shop","tld":"shop"},"ip":{"addr":"143.246.213.88","port":443,"asn":600,"as":"OARNET-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"25e3a5dcaf00fb2b1ba0c8ecea6d2560","sha1":"7850b3fd4aeb69387bdb5a60025d15c41351d5eb","sha256":"cb85b0f263dbe24e857338301c0627076592e9f1f1a5662929f86d2c126444aa","sha512":"2e5cc9b53d5641147f68c73e5db0442d93fb6a64da45cfc051da5550a2fad07e912e651bd730e54325ef74eb706be0c5df612355c1dca144ab6e9cc8c4ecc73b","ssdeep":"","tlshash":"1fb012c81cc3e078939818d47738c15844380448310742b0808c0943e2c20809797c1d","size":91,"data":"","first_seen":"2023-03-08T16:39:49Z","last_seen":"2026-08-31T16:19:41.297077Z","times_seen":26194,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eoydoi.shop/assets/pages-welcome-hub.CB5OvWZO.js","fqdn":"eoydoi.shop","domain":"eoydoi.shop","tld":"shop"},"ip":{"addr":"143.246.213.88","port":443,"asn":600,"as":"OARNET-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6361f0cb6ffb8ac6d7aa2a7202efcab4","sha1":"7f2a84e59652bbe517052a1bdda1c412f26bedf8","sha256":"76e7c1660495964d448ddf35572351b366b029279b957982308088ab197b5c94","sha512":"6a7975d2f2096643a24fb803ede7717a0061ba4ee7fb606cf82d3e34e19deea20a32ea2ab1de7e0f31d49d854c166801a7bf2d278796b30b83335494cddb89d6","ssdeep":"192:QnUPniszX0fplTIlZPy0H5RrszntsIHZlRurZLDhRK25Ytb+a0b:s6niwmlTIzq0HPWqLDXK2abpy","tlshash":"bd02958a791b8b3e4a67422a76466c1822593fff82580d1345f8cd3527e4ebc3737a5c","size":8305,"data":"","first_seen":"2026-08-30T21:25:42.499222Z","last_seen":"2026-08-31T08:20:56.73058Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"eoydoi.shop/assets/index-ByLTYRRe.js","fqdn":"eoydoi.shop","domain":"eoydoi.shop","tld":"shop"},"ip":{"addr":"143.246.213.88","port":443,"asn":600,"as":"OARNET-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eoydoi.shop/","date":"2026-08-31T08:20:26.573Z","timestamp":1788164426573,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eoydoi.shop","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sun, 30 Aug 2026 17:00:00 GMT","end":"Sat, 28 Nov 2026 16:59:59 GMT"},"fingerprint":{"sha1":"2F:2C:53:68:A7:23:45:A6:CC:E4:DE:40:24:CA:DC:8E:8B:33:91:7D","sha256":"AD:92:D8:D0:CD:22:CC:54:B1:FA:5F:BB:6F:52:0B:91:FC:1B:87:67:3E:B2:FB:21:29:D5:97:67:BD:97:35:07"}}},"request":{"raw":"GET /assets/index-ByLTYRRe.js HTTP/1.1\r\nHost: eoydoi.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://eoydoi.shop/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 08:20:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 30 Aug 2026 18:12:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a9472a0-38806\"\r\nexpires: Mon, 31 Aug 2026 20:20:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":231430,"size_decoded":88348,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (50134)","md5":"7fdd94e9e78526f6e3e7afacaae0cdd1","sha1":"d297bd8c3937bca3346be1cdc36b01ebf88afa18","sha256":"962f04f2e2d155ef88bfc279633f1389c86777150ac6cd8d888264ee064619f2","sha512":"4c8a53a24535472c8c21bd7f308db600594963a629c5117fdec96c4785eb7109eb5eda2f4cb1cbaf48884f12f8cf252a866465bd42af8348164a412f9ef78847","ssdeep":"6144:9fcU6MPOn4FR2Fn+5iznhWTmycta0Veh596RZQozxcR8HH:9XR21+5iITzcta0VehX6RZQVG","tlshash":"c83407e93282b03243e609f6507b0506f2392d55784e94d4f16ceceb3d6785a92bbf6c","first_seen":"2026-08-30T21:25:42.509413Z","last_seen":"2026-08-31T08:20:56.728648Z","times_seen":3,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"eoydoi.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"eoydoi.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"eoydoi.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"eoydoi.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"eoydoi.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eoydoi.shop/assets/index-DMl9amc0.css","fqdn":"eoydoi.shop","domain":"eoydoi.shop","tld":"shop"},"ip":{"addr":"143.246.213.88","port":443,"asn":600,"as":"OARNET-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://eoydoi.shop/","date":"2026-08-31T08:20:26.576Z","timestamp":1788164426576,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eoydoi.shop","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sun, 30 Aug 2026 17:00:00 GMT","end":"Sat, 28 Nov 2026 16:59:59 GMT"},"fingerprint":{"sha1":"2F:2C:53:68:A7:23:45:A6:CC:E4:DE:40:24:CA:DC:8E:8B:33:91:7D","sha256":"AD:92:D8:D0:CD:22:CC:54:B1:FA:5F:BB:6F:52:0B:91:FC:1B:87:67:3E:B2:FB:21:29:D5:97:67:BD:97:35:07"}}},"request":{"raw":"GET /assets/index-DMl9amc0.css HTTP/1.1\r\nHost: eoydoi.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://eoydoi.shop/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 08:20:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 30 Aug 2026 18:12:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a9472a1-6b51\"\r\nexpires: Mon, 31 Aug 2026 20:20:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27473,"size_decoded":4880,"mime_type":"text/css","magic":"ASCII text, with very long lines (27472)","md5":"b559022718b3f9d9b87cf0da46d9ca37","sha1":"5f5c7844dc90b2a1f9c82b9dcc703b754f5e953f","sha256":"0304ea13c631384e05bf2d61d14091a29f5259597d1855f28f29072a02507217","sha512":"867c3ced4eeb72f64cd86a5e2c01ab9b8ea35f5cf65d7979f93385ee252e5fc52f33f718ec9caf7d87ad7243f4631cad56d7def94a22d20ed8a017e78f9c9d57","ssdeep":"384:FgDzFzaGIK5jBzQxtGkH9213E9z4TYDChl:ODpOEn","tlshash":"10c2eeb2aa503d4be27d8b33ec911768351050a1936313f277a76f9a8d0d65f46633ce","first_seen":"2026-08-18T01:32:15.538392Z","last_seen":"2026-08-31T08:20:56.729766Z","times_seen":4,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"eoydoi.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"eoydoi.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"eoydoi.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"eoydoi.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"eoydoi.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eoydoi.shop/assets/pages-welcome-hub.CB5OvWZO.js","fqdn":"eoydoi.shop","domain":"eoydoi.shop","tld":"shop"},"ip":{"addr":"143.246.213.88","port":443,"asn":600,"as":"OARNET-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eoydoi.shop/","date":"2026-08-31T08:20:27.000Z","timestamp":1788164427000,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eoydoi.shop","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sun, 30 Aug 2026 17:00:00 GMT","end":"Sat, 28 Nov 2026 16:59:59 GMT"},"fingerprint":{"sha1":"2F:2C:53:68:A7:23:45:A6:CC:E4:DE:40:24:CA:DC:8E:8B:33:91:7D","sha256":"AD:92:D8:D0:CD:22:CC:54:B1:FA:5F:BB:6F:52:0B:91:FC:1B:87:67:3E:B2:FB:21:29:D5:97:67:BD:97:35:07"}}},"request":{"raw":"GET /assets/pages-welcome-hub.CB5OvWZO.js HTTP/1.1\r\nHost: eoydoi.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://eoydoi.shop/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 08:20:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 30 Aug 2026 18:12:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a9472aa-2071\"\r\nexpires: Mon, 31 Aug 2026 20:20:27 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8305,"size_decoded":3932,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8290)","md5":"6361f0cb6ffb8ac6d7aa2a7202efcab4","sha1":"7f2a84e59652bbe517052a1bdda1c412f26bedf8","sha256":"76e7c1660495964d448ddf35572351b366b029279b957982308088ab197b5c94","sha512":"6a7975d2f2096643a24fb803ede7717a0061ba4ee7fb606cf82d3e34e19deea20a32ea2ab1de7e0f31d49d854c166801a7bf2d278796b30b83335494cddb89d6","ssdeep":"192:QnUPniszX0fplTIlZPy0H5RrszntsIHZlRurZLDhRK25Ytb+a0b:s6niwmlTIzq0HPWqLDXK2abpy","tlshash":"bd02958a791b8b3e4a67422a76466c1822593fff82580d1345f8cd3527e4ebc3737a5c","first_seen":"2026-08-30T21:25:42.499222Z","last_seen":"2026-08-31T08:20:56.73058Z","times_seen":3,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"eoydoi.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"eoydoi.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"eoydoi.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"eoydoi.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"eoydoi.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eoydoi.shop/assets/welcome-hub-C-o_AcSb.css","fqdn":"eoydoi.shop","domain":"eoydoi.shop","tld":"shop"},"ip":{"addr":"143.246.213.88","port":443,"asn":600,"as":"OARNET-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://eoydoi.shop/","date":"2026-08-31T08:20:27.004Z","timestamp":1788164427004,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eoydoi.shop","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sun, 30 Aug 2026 17:00:00 GMT","end":"Sat, 28 Nov 2026 16:59:59 GMT"},"fingerprint":{"sha1":"2F:2C:53:68:A7:23:45:A6:CC:E4:DE:40:24:CA:DC:8E:8B:33:91:7D","sha256":"AD:92:D8:D0:CD:22:CC:54:B1:FA:5F:BB:6F:52:0B:91:FC:1B:87:67:3E:B2:FB:21:29:D5:97:67:BD:97:35:07"}}},"request":{"raw":"GET /assets/welcome-hub-C-o_AcSb.css HTTP/1.1\r\nHost: eoydoi.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://eoydoi.shop/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 08:20:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 30 Aug 2026 18:13:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a9472b0-2119\"\r\nexpires: Mon, 31 Aug 2026 20:20:27 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8473,"size_decoded":2935,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (8470)","md5":"9ff87ca3738a871998a7c28f82385370","sha1":"15673381760c844c2fb2a8a442e6c1b26a2ee3a9","sha256":"ff69b744996abdc2a806974c53741c2be6c6b712a7bde68491a1eb8ecabd8913","sha512":"4d033c8af1284550a4825bac2f201c6379bdc5bd6833de7425c1714daf00ecae1493703b0b4f4d643bfd22f7ad654017648f606d143f91b2bf47e4582cbefc48","ssdeep":"192:/2CPLhpEmkiO826WDaSSEsp6dqdgCQh5r:OChpdZO0WDaf+p","tlshash":"6502622376a5f138f97bd4b2b9a4069f7050f803a82357dacda3a215c9c72fb5761348","first_seen":"2026-08-30T21:25:42.470253Z","last_seen":"2026-08-31T08:20:56.73119Z","times_seen":3,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"eoydoi.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"eoydoi.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"eoydoi.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"eoydoi.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"eoydoi.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eoydoi.shop/static/site-icon.png","fqdn":"eoydoi.shop","domain":"eoydoi.shop","tld":"shop"},"ip":{"addr":"143.246.213.88","port":443,"asn":600,"as":"OARNET-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eoydoi.shop/","date":"2026-08-31T08:20:27.067Z","timestamp":1788164427067,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eoydoi.shop","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sun, 30 Aug 2026 17:00:00 GMT","end":"Sat, 28 Nov 2026 16:59:59 GMT"},"fingerprint":{"sha1":"2F:2C:53:68:A7:23:45:A6:CC:E4:DE:40:24:CA:DC:8E:8B:33:91:7D","sha256":"AD:92:D8:D0:CD:22:CC:54:B1:FA:5F:BB:6F:52:0B:91:FC:1B:87:67:3E:B2:FB:21:29:D5:97:67:BD:97:35:07"}}},"request":{"raw":"GET /static/site-icon.png HTTP/1.1\r\nHost: eoydoi.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://eoydoi.shop/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 08:20:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 30 Aug 2026 18:13:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a9472b4-1226e\"\r\nexpires: Wed, 30 Sep 2026 08:20:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":74350,"size_decoded":73324,"mime_type":"image/png","magic":"PNG image data, 720 x 589, 8-bit/color RGBA, non-interlaced","md5":"4dd91911b613e8a47eefa9744c0eea7c","sha1":"3fdb6505a6674b07a69e7f200f0ffe69c51a8523","sha256":"309d3df30f5aaf77d8c6ed72ce863636634b06192254bc40b0cbed046f0c6020","sha512":"ecfc90f19961e4c2307e9074fd67236bc5c643c6784574bb74533198cf1914255a541b1b6af2fbb2eb0d51fc5f4a15e021e6672afdf6ed1d5470871d7a521ec9","ssdeep":"1536:uPYpDfeCwwCijjJ2UrjO+GEhPIYpoFjpotmNk1ok8Tm1mNN8:uOfeCNrjjsoORjEoppImNk1WmAb8","tlshash":"f0730203db018c5fd6a48d3a04d705897436eca748e6d2a47316fa470afad690cbbf8d","first_seen":"2026-06-24T12:29:43.693944Z","last_seen":"2026-08-31T08:20:56.731695Z","times_seen":39,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"eoydoi.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"eoydoi.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"eoydoi.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"eoydoi.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"eoydoi.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eoydoi.shop/static/entry/portal-brand-mark.png","fqdn":"eoydoi.shop","domain":"eoydoi.shop","tld":"shop"},"ip":{"addr":"143.246.213.88","port":443,"asn":600,"as":"OARNET-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eoydoi.shop/","date":"2026-08-31T08:20:27.110Z","timestamp":1788164427110,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eoydoi.shop","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sun, 30 Aug 2026 17:00:00 GMT","end":"Sat, 28 Nov 2026 16:59:59 GMT"},"fingerprint":{"sha1":"2F:2C:53:68:A7:23:45:A6:CC:E4:DE:40:24:CA:DC:8E:8B:33:91:7D","sha256":"AD:92:D8:D0:CD:22:CC:54:B1:FA:5F:BB:6F:52:0B:91:FC:1B:87:67:3E:B2:FB:21:29:D5:97:67:BD:97:35:07"}}},"request":{"raw":"GET /static/entry/portal-brand-mark.png HTTP/1.1\r\nHost: eoydoi.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://eoydoi.shop/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 08:20:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 30 Aug 2026 18:13:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a9472b6-382a\"\r\nexpires: Wed, 30 Sep 2026 08:20:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14378,"size_decoded":14872,"mime_type":"image/png","magic":"PNG image data, 542 x 165, 8-bit colormap, non-interlaced","md5":"fadb8e5d1532ae95893aced1c6ee1822","sha1":"d6859963024cdfed23cbbfa3e393b2535afb6844","sha256":"66753e608935e672d8e6b9f1d5be8d8dae426b085589e4952b7f9f93f87a14fa","sha512":"c2ab4329a4a947affc2456278657a156c493b57232fdd7c16d1b94e29bc89946a0307e43f72f6430fb32e924453953be1f284ef5a606bfecb0b1ea48925cf4a0","ssdeep":"384:PIjHPNcsdyvnAMpBnQTiJ8fr5l8YSJov4Fpac2Ly:gjFck2nAMpBnSiJkl8YSU4Fn2+","tlshash":"1652cf2b184bc860ce5ba5a58227d71ef53c835c79d16026e60bec57cf84de12c0e393","first_seen":"2026-08-18T01:32:15.528002Z","last_seen":"2026-08-31T08:20:56.732235Z","times_seen":4,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"eoydoi.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"eoydoi.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"eoydoi.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"eoydoi.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"eoydoi.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eoydoi.shop/assets/_plugin-vue_export-helper.DlAUqK2U.js","fqdn":"eoydoi.shop","domain":"eoydoi.shop","tld":"shop"},"ip":{"addr":"143.246.213.88","port":443,"asn":600,"as":"OARNET-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eoydoi.shop/","date":"2026-08-31T08:20:27.002Z","timestamp":1788164427002,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eoydoi.shop","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sun, 30 Aug 2026 17:00:00 GMT","end":"Sat, 28 Nov 2026 16:59:59 GMT"},"fingerprint":{"sha1":"2F:2C:53:68:A7:23:45:A6:CC:E4:DE:40:24:CA:DC:8E:8B:33:91:7D","sha256":"AD:92:D8:D0:CD:22:CC:54:B1:FA:5F:BB:6F:52:0B:91:FC:1B:87:67:3E:B2:FB:21:29:D5:97:67:BD:97:35:07"}}},"request":{"raw":"GET /assets/_plugin-vue_export-helper.DlAUqK2U.js HTTP/1.1\r\nHost: eoydoi.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://eoydoi.shop/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 08:20:27 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 91\r\nlast-modified: Sun, 30 Aug 2026 18:13:05 GMT\r\netag: \"6a9472b1-5b\"\r\nexpires: Mon, 31 Aug 2026 20:20:27 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":91,"size_decoded":608,"mime_type":"application/javascript","magic":"ASCII text","md5":"25e3a5dcaf00fb2b1ba0c8ecea6d2560","sha1":"7850b3fd4aeb69387bdb5a60025d15c41351d5eb","sha256":"cb85b0f263dbe24e857338301c0627076592e9f1f1a5662929f86d2c126444aa","sha512":"2e5cc9b53d5641147f68c73e5db0442d93fb6a64da45cfc051da5550a2fad07e912e651bd730e54325ef74eb706be0c5df612355c1dca144ab6e9cc8c4ecc73b","ssdeep":"","tlshash":"1fb012c81cc3e078939818d47738c15844380448310742b0808c0943e2c20809797c1d","first_seen":"2023-03-08T16:39:49Z","last_seen":"2026-08-31T16:19:41.297077Z","times_seen":26194,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"eoydoi.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"eoydoi.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"eoydoi.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"eoydoi.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"eoydoi.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.dcloud.net.cn/img/shadow-grey.png","fqdn":"cdn.dcloud.net.cn","domain":"dcloud.net.cn","tld":"net.cn"},"ip":{"addr":"124.174.83.217","port":443,"asn":0,"as":"","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eoydoi.shop/","date":"2026-08-31T08:20:29.823Z","timestamp":1788164429823,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dcloud.net.cn","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 26 Aug 2025 11:47:17 GMT","end":"Fri, 25 Sep 2026 11:47:16 GMT"},"fingerprint":{"sha1":"47:A7:6C:09:6B:1D:CA:2D:7D:39:2E:C1:7F:15:DE:5D:F2:C4:0F:77","sha256":"EA:73:37:83:D0:38:44:D9:3C:0B:26:F0:DD:D1:22:2F:36:F7:F2:86:A1:B0:58:52:DE:4E:0A:21:D6:89:E7:3E"}}},"request":{"raw":"GET /img/shadow-grey.png HTTP/1.1\r\nHost: cdn.dcloud.net.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://eoydoi.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 08:20:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 136\r\nlast-modified: Thu, 06 Jun 2019 06:42:07 GMT\r\netag: \"5cf8b5bf-88\"\r\nexpires: Mon, 31 Aug 2026 15:20:30 GMT\r\ncache-control: max-age=25200\r\nset-cookie: __uni__uid=rBACaWqVOU546vIrA6ahAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dcloud.net.cn; path=/; secure; httponly; samesite=none\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__uni__uid","value":"rBACaWqVOU546vIrA6ahAg==","quoted":false,"path":"/","domain":"dcloud.net.cn","raw_expires":"Thu, 31-Dec-37 23:55:55 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__uni__uid=rBACaWqVOU546vIrA6ahAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dcloud.net.cn; path=/; secure; httponly; samesite=none"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":136,"size_decoded":577,"mime_type":"image/png","magic":"PNG image data, 1 x 6, 4-bit colormap, non-interlaced","md5":"5a962adf74d92ae702467b3f47976547","sha1":"36f74049375584e3fa69b5ef87e9572336ff9e7a","sha256":"ad4ebea1c3496dd2924789ee009174a2c6289d1200e9811f458fd46f172d1d6f","sha512":"4ace23fe7ec6c7271710030fd423aace13eafac68ac3e76366ce4ce9bdc702caf71c9bdc2fb6a32c8e9791546098617cc0259decd8bb8489afdbce43e1b53a73","ssdeep":"","tlshash":"47c09bf3a615dc754a0d153b42e98271f429511e07046d0e5a13c216741e3448d56793","first_seen":"2023-04-15T10:50:30Z","last_seen":"2026-08-31T08:58:03.888326Z","times_seen":20401,"resource_available":false,"data":null}},"time_used":960,"timings":{"blocked":0,"dns":32,"connect":230,"send":0,"wait":230,"receive":0,"ssl":467},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eoydoi.shop/","fqdn":"eoydoi.shop","domain":"eoydoi.shop","tld":"shop"},"ip":{"addr":"143.246.213.88","port":443,"asn":600,"as":"OARNET-AS","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-31T08:20:26.164Z","timestamp":1788164426164,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eoydoi.shop","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sun, 30 Aug 2026 17:00:00 GMT","end":"Sat, 28 Nov 2026 16:59:59 GMT"},"fingerprint":{"sha1":"2F:2C:53:68:A7:23:45:A6:CC:E4:DE:40:24:CA:DC:8E:8B:33:91:7D","sha256":"AD:92:D8:D0:CD:22:CC:54:B1:FA:5F:BB:6F:52:0B:91:FC:1B:87:67:3E:B2:FB:21:29:D5:97:67:BD:97:35:07"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: eoydoi.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 08:20:26 GMT\r\ncontent-type: text/html\r\nlast-modified: Sun, 30 Aug 2026 18:15:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a947350-791\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1937,"size_decoded":1470,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"f3a73fe13f0fc88dff90058033bd275d","sha1":"68e0de7a471fa063bca34b71003b58c77513449f","sha256":"e9a640c4745824129269cc49f5c128072318f15555862a886bcc8bf808c74f8e","sha512":"777475ed1e6ff9b5e4c30ec7a90dce111fca90716c70bc023f94c95ca58e1b49612a1bac20e813f71d4eaa292ab52a302e63ce287b029021a6151bd4ec49b86b","ssdeep":"","tlshash":"f941b7079c10e80652f41734a662f60862d4d727838ddda4b4c9e07d9ec4bc68cebb7c","first_seen":"2026-08-30T21:25:42.507196Z","last_seen":"2026-08-31T08:20:56.733723Z","times_seen":3,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":0,"dns":5,"connect":53,"send":0,"wait":55,"receive":0,"ssl":114},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"eoydoi.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"eoydoi.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"eoydoi.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"eoydoi.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"eoydoi.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eoydoi.shop/assets/uni.10eeaeb8.css","fqdn":"eoydoi.shop","domain":"eoydoi.shop","tld":"shop"},"ip":{"addr":"143.246.213.88","port":443,"asn":600,"as":"OARNET-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://eoydoi.shop/","date":"2026-08-31T08:20:26.569Z","timestamp":1788164426569,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eoydoi.shop","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sun, 30 Aug 2026 17:00:00 GMT","end":"Sat, 28 Nov 2026 16:59:59 GMT"},"fingerprint":{"sha1":"2F:2C:53:68:A7:23:45:A6:CC:E4:DE:40:24:CA:DC:8E:8B:33:91:7D","sha256":"AD:92:D8:D0:CD:22:CC:54:B1:FA:5F:BB:6F:52:0B:91:FC:1B:87:67:3E:B2:FB:21:29:D5:97:67:BD:97:35:07"}}},"request":{"raw":"GET /assets/uni.10eeaeb8.css HTTP/1.1\r\nHost: eoydoi.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://eoydoi.shop/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 08:20:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 30 Aug 2026 18:13:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a9472ae-1ca8\"\r\nexpires: Mon, 31 Aug 2026 20:20:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7336,"size_decoded":2317,"mime_type":"text/css","magic":"ASCII text, with very long lines (7335)","md5":"bd585bdcd5c970cfbb39fa6a8d400a1b","sha1":"9d158c1cbc185311274d64ca639798288c1c4e65","sha256":"10eeaeb81f6fda8d0e9ef65a69d9e33f08357eafd5e8f7a6c511efe36d4b7cd7","sha512":"dc9933ceb803bfabb9f6b14ec8b1fa52619c25d9b0deb8a7609dcc35970f7ba3840b1d7dbac8d554d4ef20e464ffe7ae54ff2ba35f850b080cd7c77109c730cb","ssdeep":"96:Ubf2Vi8Lg7J0CQLnDSL9LBunNXVAG5MtmD/PFhZKw3:Ujj8LGJ0CQLnWL9MNXVA8MED/Phd","tlshash":"22e18471d440132ef51bcf3e12e2db8e312245b2dd523f28bb6534b48f9a1c6693a786","first_seen":"2026-08-18T01:32:15.533382Z","last_seen":"2026-08-31T08:20:56.734333Z","times_seen":4,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"eoydoi.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"eoydoi.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"eoydoi.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"eoydoi.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"eoydoi.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}