{"report_id":"274488f2-b490-48ed-91e5-cd5f6149fb93","version":0,"status":"done","tags":[],"date":"2026-10-11T00:49:38Z","url":{"schema":"http","addr":"lamacosmetics.com/","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"lamacosmetics.com/","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"title":"Lama Cosmetics","dom":{"size":22534,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (14042)","md5":"8d1d160e8ad2f0a544fab593272d3e59","sha1":"180ddec03b9cc9df10562992bd1526625e64a42c","sha256":"ee0a0489b1d9b3315c2e9bfcac70eed6c027f597f832a3d6ecd24a0b353a1a09","sha512":"1d0b2e5d37a20587ea83d7f2c5ca8bd1a187df7c19581648c5d1583f4c9f24a188c6a2dc913036b6c927990ae7eb7c52f0989598c29039490788917b93e19334","ssdeep":"384:PcXUuAUjqNn/+AjFZxqR25U6Vlp+6Zp8bUihhg:PcXUuljqN+AjFCwDp+6Zp2Uihhg","tlshash":"f3a2855ab806cd59eca77d59107ead39508dc53b8939ccacf2dcce2607829b85bd2dc0","dom_hash":"domhashf2e29af5048701bcf64c68946df4ac50","first_seen":"2026-10-11T00:50:07.29591Z","last_seen":"2026-10-11T00:50:07.29591Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"lamacosmetics.com/","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-15T00:49:38Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"lamacosmetics.com","ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-11-16","domain_rank":0,"first_seen":"2026-10-11T00:49:56.279777Z","last_seen":"2026-10-11T00:49:56.279777Z","alert_count":80,"request_count":40,"received_data":2693950,"sent_data":19161,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"assets.zatiqeasy.com","ip":{"addr":"172.67.142.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-12-13","domain_rank":0,"first_seen":"2026-06-15T21:15:27.417835Z","last_seen":"2026-09-26T15:40:18.636093Z","alert_count":0,"request_count":1,"received_data":114874,"sent_data":559,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"lamacosmetics.com/","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0f448d7308b4d3a3ba2e61b8e0910018","sha1":"c4a40fe95ba16ece3921eb9b01325473130fa5ae","sha256":"b0206254530e5ebf85e16d14bfad566303bd1a3e5fec54d097726ddaaa4fbc5f","sha512":"063a25d3d4aead246ef87a72001c902ead5ad24237b9715ad9a9dc37ff59bdfba99aa9e3a68a4e57e0b17ac5a7f528e7eebf221bda87ea8348545867d5e50c87","ssdeep":"","tlshash":"76c092fea4a510304ccf30794cae8105b1b080d7338b8a023d6e091c1faa1b4c352b12","size":161,"data":"","first_seen":"2026-07-13T08:25:47.733562Z","last_seen":"2026-10-11T00:50:07.426852Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c3e3e350f78cf22bd7b335d70b41a58a","sha1":"cce22220b6a8dff76692755cc45439b4ec474a4d","sha256":"ee6bb81f4e9fc030a39a7c71affc4d1f2b900baa4b4c7af83361388d7c39599b","sha512":"15b6cbf8bd67e82a4952004138ebc95c44e4d373317826f1560eeec13416cc1d6a38d834609ef4b713e7a9c92d1b1bbf84de08e2e4061ed3d1e3891982c25b0a","ssdeep":"","tlshash":"3f90025ff2302063a756122b166f15456421626565550869123830eb4955148474265c","size":57,"data":"","first_seen":"2025-06-30T14:23:19.448274Z","last_seen":"2026-10-11T03:43:30.071996Z","times_seen":94258,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d4f58df8ef556437633bb90cc31469c4","sha1":"c1c713bb5046a54cb79a8e7537b6d7fca624fd45","sha256":"2dcb2e50c883929aebb7a64a7a22cfe2260d856a3c36a6926c082da19c552b7b","sha512":"54c8a79f5897cd198db689700c24f950ad7fe19eed815f8bfa0e47428701d8c84a1fd8f677a6f1b2a4f1443f35f2dbd19e6f456ceeebfb1c59275bb356e1a5e9","ssdeep":"","tlshash":"bfc02b041427c47b421c6f4dc02243d4e4b020bcdc492480801d181800d0c313b40cd6","size":130,"data":"","first_seen":"2025-03-25T18:26:20.414558Z","last_seen":"2026-10-11T03:21:00.582888Z","times_seen":56376,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"00933d3d76fccf8f1d330b001b6dc118","sha1":"72a3f9f693a7d05bb6f1b38fd381a0f4e8bb5c7a","sha256":"4009527b06902e2fcd3c2ce78c0652caf43bda1783d1577198d0c3919782c607","sha512":"8fce1ced1efcaf7f17f0fbc71664f0ca59f5f7bddc682fdbc8b9ef3862def740a845bc3cd5cc3926c09b98782296d14c9b38d50b2dd6cb53b296ec76ba558602","ssdeep":"","tlshash":"090156a9f328199a66d92fbfa06a570c7460603e380600319507edfa1700de021cbd8e","size":845,"data":"","first_seen":"2025-08-20T23:30:20.291724Z","last_seen":"2026-10-11T03:45:09.004472Z","times_seen":75631,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a6e1178e4bbf5730bd664a49dd3bc24","sha1":"17c3ae3273f9de6afbbdedf2e413dbb3a6722792","sha256":"3814cddd18b2095e01abb745a99e5ada90178e709c09879324c3b623f2d829ea","sha512":"cfb1aab0bf589e33fd12906f448ddbbf7163420a088de513b174304c9ba3a7abcd9b41c98bc4dd51edd0206c1fe4660db9857e3c6163d1bf50c670cefddee509","ssdeep":"","tlshash":"de9002b090c39c5890264186687100160b6c040c01080141132184d810115048e40d8e","size":43,"data":"","first_seen":"2023-03-13T01:07:12Z","last_seen":"2026-10-11T03:43:16.386263Z","times_seen":286597,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6ef54518ef462145748b7889744d4fcf","sha1":"de8ee732483cc34b6e879672fd7ec7f3fa611cf0","sha256":"8e5d15f29bd7ede8c719410e3b7884e5d6f1e5a23f08338ab91030f06f985fdd","sha512":"b4b0d63f325d93033f950d5f6b2b0431c819108b598cdd63b052abdd4dccae4f7923146c641c1082ec848e40fa305912fad3727cb2a6ccebc7fb46b5a86d995f","ssdeep":"","tlshash":"1b21518eb141e4823cb2ce1b41723e3288cdec36423cd4acb01ddb2e50009bba76ac60","size":1410,"data":"","first_seen":"2026-10-11T00:50:07.433784Z","last_seen":"2026-10-11T00:50:07.433784Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6d7be9644360777865d472bc4e89558b","sha1":"60051e60edda5a5a42901aa34e6fab6d341de5cb","sha256":"78b4ef7d6a56225d62d76b627139593d236017f59d90845fe26215e84c3f56dc","sha512":"85d08fe534b1662d09533303670a696c158b12a750de2ae8bfaa53675096c7433aa75595f7256f1bc11852d3f3ec67b3ce03b820c1e1cc8a9fd7816703830a8c","ssdeep":"","tlshash":"4311578f7051ea1039b3dc0b00372e668499dc33063cd42ca15cea6f114227f6769c60","size":898,"data":"","first_seen":"2026-10-11T00:50:07.461597Z","last_seen":"2026-10-11T00:50:07.461597Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"73f0ff8aa226e6290bc170beaed8c019","sha1":"f087f044067fb5b6d430293b0d5e36c1edc98884","sha256":"b9effd018b9d102dbe004dff34ed1dc224f5059263ced25b8406eed6ce97b18a","sha512":"3d90ee4c7186b0f8a47496d37e3c6753ad96d1dbf7cf04004a6ccf98da29bdd77b5f4fec739f50310630ce3b6cbea673126fbe3bf43eb6e9d73236c3d408a13e","ssdeep":"","tlshash":"8511c844f04bfce2ac61a90e203a4d649088ee7c51e598c473dfcad386629b8179598f","size":915,"data":"","first_seen":"2026-10-11T00:50:07.463526Z","last_seen":"2026-10-11T00:50:07.463526Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2b499ad8016931bd2998bd41a2c4f1f4","sha1":"cf10fdcbd4ae0e7dd5c8b3e41dce52c6dba90c2d","sha256":"84bb6702ac3041f3baf1aaa19b0618d24a3fcc5c5bcadd3a6436a80bcfc82a6a","sha512":"16ea45a14ead6fe23bba01d090f0e88d22abafbf6d4a75b2d99e0b9193caa244c9193e51d3840fd7f95cca1147865bdc86971a76edf6865b14baf8da158587f3","ssdeep":"96:Lg0k1iZvspfrunXj1Cxptdq+HmXLw9R2NnBTM8dXgQXK3FR7qu4:20keIP2Nlpdiv4","tlshash":"ada1dd397006cdacec9f3d54107eac39648dc66b86aadeb4f1dcdd21178a4396b82dc0","size":4918,"data":"","first_seen":"2026-10-11T00:50:07.465125Z","last_seen":"2026-10-11T00:50:07.465125Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"80af4c7c885f0f732b77c473af009745","sha1":"804b864f9b94207dd44a620d3523f4565e4b4252","sha256":"5abb244e7de5385227af1e4148ff2c2175e77d306054eb12feb2c8d52e8e06de","sha512":"9947e86f60eef8b7548047af34fcb9c4d5ef1bc6bb854ef22950c99ee3e23ad5e2657d49dc8a12bd9df48e3e05be5789a87e28b5a84d449b0826d3042e0663d2","ssdeep":"","tlshash":"e0417a2db006cd5eec6b7d98013ead3a60cdc5ab4685eeb885dcce240a4683977d3dc0","size":2400,"data":"","first_seen":"2026-05-28T03:10:31.115759Z","last_seen":"2026-10-11T00:50:07.466737Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cf82c5a123b292171a1ea9e256a083c8","sha1":"0325eac9746931ef2dbd5754217fda561cc4e62e","sha256":"e000a6d7d09148dfe825216f8483905b84b995daf0032c1557d1d16d290cb559","sha512":"899e6409f8ea8bfbc1c60d8356694eb91e14237c004433561132fad4101ba242f5a108f4b046ae4758e2bd98d0a2a2fe8a7f61f80bc9b928ecd8d4c622ca8846","ssdeep":"","tlshash":"7fa0223a8300cc0fc83a80030c3cc002008c200c0002aab00280b080028023e2203ece","size":62,"data":"","first_seen":"2026-05-28T03:10:31.116787Z","last_seen":"2026-10-11T00:50:07.472143Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9a6e245d9d75925d4debff20074ce38d","sha1":"869cd64ba4b3f8be7bc3898d23f45ecc1cdd3220","sha256":"49cb9665df7ded6452a331f2663ba520481ca4c9462426875f99a2a56e6e18b2","sha512":"de3f4d144bb10e41c8865592038b459abdb5ff243fe865b9dda5e0efc5e13e684e5bd2dd4e7d8899803550bcc14f2365de069a56ff70c6a3b0928374b1b31d2c","ssdeep":"","tlshash":"d521c0343005dd9efd873c54207edc2e258cd65e86aece6582e4d923558a478bb929c0","size":1358,"data":"","first_seen":"2026-10-11T00:50:07.473674Z","last_seen":"2026-10-11T00:50:07.473674Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"360dc9daa2f1c7cacf0bca0d59bffaaf","sha1":"5aa47e61a7b2bbf0885c4dc262bce626925103de","sha256":"b20666a4217fe13d3fbae0ffc1b4866571132de02a21135b9eff384b1805553a","sha512":"291cde508a6f1ae5c23b7a1bcbc7f112c9223e40bbdd04304cdf7eabfbac8b963ab96ff70408fe3ed57520206d842652ce75b184365dd2179a00170cd1a71bc3","ssdeep":"","tlshash":"08d095d14c03cc1cc6155f112c352c2510cec875470555475dc4ce387f45f351160dc5","size":251,"data":"","first_seen":"2026-10-11T00:50:07.481814Z","last_seen":"2026-10-11T00:50:07.481814Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"39e420257cbafac66d69b8dfa8080160","sha1":"a7ffd5ca51ee27053fe3e8465408bd5bfd4a6e22","sha256":"0a786261bddd2833b2d6b048dd312259a9ef1f87bdf72b84caf07fa3ac9c1499","sha512":"11782f276faa85e400fef7f79e4d7e02b31eee508493edfa495f60ab91ef12d22600212c9779027a8a4f0ea7224e47bad4ea326b8893a80e35188a0abb78f2f5","ssdeep":"","tlshash":"2b2108e3ac15dc0a9b8a6e64083e7c9820ccc75645e5959fd1dcce254683d346af2661","size":1121,"data":"","first_seen":"2026-10-11T00:50:07.483401Z","last_seen":"2026-10-11T00:50:07.483401Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3ab6d64b54bd8eb79c70a088821754c3","sha1":"d23521f2417c704a3c71f165a4ca032055c6f299","sha256":"fb337e3fbc94fa370c84f588485f49d4e2d0eaa97311f8dd881d19909e6de785","sha512":"cb9334f896579d9a72df57324a1d7a5931a925ed599e4590e4b6259147699649bf6e041caf1014467334b705dab956eaa7ea7f0f96a0b1de53a021234590290b","ssdeep":"","tlshash":"4f900470d0404c574033001335f47103555c704c11041d401f57755774115557705f5d","size":47,"data":"","first_seen":"2025-08-21T10:51:45.929442Z","last_seen":"2026-10-11T00:50:07.485159Z","times_seen":787,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/_next/static/chunks/app/not-found-e25d7a82778e599c.js","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ab3226d2bd3431eab50a0b7fd796c2ab","sha1":"8e422d4a1e6adbbf63a085827f76342ef18cf839","sha256":"e61edf0c0a56e603f0ddc604ca26bc1b2287949f70ccebe72fdb40b57135b8e0","sha512":"3e9b1fe5f168d834a2b54d94052512e6d852aba51feef5e8a36266419569303772b22d139dc0e218bfbe68f2911fa5035a362a5264ff2893133418bb3f4be2ac","ssdeep":"","tlshash":"aac022a51100be1ca82b1978a9f50c3530e8005a342ac4d43b244cb01427d2d8390806","size":191,"data":"","first_seen":"2026-07-13T08:25:47.659819Z","last_seen":"2026-10-11T00:50:07.324527Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/_next/static/chunks/8612-2fefed9193b2dce2.js","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4c09b158ea1fa76e8ff386181fe47222","sha1":"b01e5e57952eec021bdc447e5dfcf0decb68bf7d","sha256":"628e303af7807b874ff1b03df46af960ddb6d8e7e7ff24cf0777bdac33bd3c5e","sha512":"8e83356cbd29864c302969741afd74bdece2a383848cfb78ce0d0bb499cc02c564bce9b0b04165cdf7c85dbf66e92546cabdd4b819c5369b7267f505881f00d3","ssdeep":"96:ijTq1ZDwk/47qlSYjeTVmDMve6WgbislAiroL7s3a6L9nnDK:ijT8NwnaSYyTVKM7isl87ODK","tlshash":"f3d12ac8f4e3f0d043be005555ab6ec5f32e5ea7044ac641e492bd823924d59f275fb8","size":6432,"data":"","first_seen":"2026-07-13T08:25:47.663619Z","last_seen":"2026-10-11T00:50:07.344087Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/_next/static/chunks/app/error-7607054d8be731c6.js","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e214f4695ce099eda94338f0cdfd0467","sha1":"01ec475ee378713a73bd8795467b4783b2460981","sha256":"a52ca4afdbabed1b40f3f597ee84a0b4ae89355eabf31c7ca65f51e8629363e8","sha512":"7171de4cf1bae38fd2adb966b5372ea5896db2545281e615da0ce5e7fae6b16ca860d5b07439282e65a4d13ff02e7368d7afe5e19f1c831de8bc95fb9dc3efe2","ssdeep":"","tlshash":"5d812345b255aefcb82b4dec617e602db03b4a91ea1f48f4f5ac6c31154a0987b137d8","size":3935,"data":"","first_seen":"2026-07-13T08:25:47.698316Z","last_seen":"2026-10-11T00:50:07.410534Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/_next/static/chunks/4977-d4ccd9624aa6908b.js","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fe38d11b337c0802e0231c0e1976d02","sha1":"00f4e29401df902b55ac078f7d7bb5f78e5f1dbe","sha256":"2a41187cabd219a92296c83ea5cef6e76c2016b4f1a5f1429c934e6d953847c4","sha512":"79cca7d8eb447eb625630d91ef57dec6553048b24fe683c89131b0b3a72e9286e9830c4d43046371694b561b85ba5bff7592bfd9fe4f84b37adf56ac3a77c32f","ssdeep":"96:2ruE9GCZoRZEC2evKxI8ytKhK5HzOel1s2yNTny4h315feE3gKRjMm6BIQa9Ku:2IVZXLG/hhAhlq2ypnD7jvQar","tlshash":"9ef1f8a630d2f8d4635f54a8807b400ef37e1d27221e4990b396ece579d64d87293fa6","size":7572,"data":"","first_seen":"2026-07-13T08:25:47.699371Z","last_seen":"2026-10-11T00:50:07.326391Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/_next/static/chunks/3911-e942afd961120b84.js","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"762408f1ea7b8520c5d2a1e9f6891139","sha1":"aaa3659482f03463993f9de2c14cf1fbe09b9904","sha256":"12624c7fa9c6fd2b4093f0ca5d52e16fd8444303746d7d3e4b6d7a5d224530f1","sha512":"f6c5f9f168c17743381e4b050c8ae5ac5afa2d35a93adaebdcecf308abd311115f032ba5998e84d2d0529ed48f0d896f6a40ea1ef26f4f3f29131b6db5fe79b5","ssdeep":"1536:ixYl0BCuTdIy5SOBsmPKLBAOSOSrQY+K8u8GS9j6PIafXDqcpwSbSrDddPD+59li:ixYlCCupdSKsmCLBTSfrQY+K8uzSMPIL","tlshash":"2a73b745e225af9de5e74494a99fd44cf03e1f80ea1a8ebcb2b8a41126c70cc77437d9","size":78535,"data":"","first_seen":"2026-10-11T00:50:07.387153Z","last_seen":"2026-10-11T00:50:07.387153Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/_next/static/chunks/d1e54ecc-ff3d1e2bf307393d.js","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"645ca289c473f1980551e29b8bc7ad94","sha1":"f4509058d9c0a89d27a6d4623789347c3de22623","sha256":"ab93bf7cbea0bdb7cd233a13a29d5b9d60f0eb6ebe756d4227183997cc014fe1","sha512":"3d909da22210752ac1fbba86df34d05d56732c396645e4f5b91f35d7fc4aa441db13d4f5b618a72f8700752e9f93d233a272f92b158760efc7cdb633c1e1565e","ssdeep":"1536:sWET9Lwegcl2MywYleojBFOQLfioEV7hNc7lFlgXGhJx4bzZc5zg5tgW/zAe6c0:g9LwzMyh1vLEE7RgXOQ5SIA1","tlshash":"0df3f8ec3999e611aeb342a700df28037378261b240d4d60a614fd9ea57845bb17bfde","size":173025,"data":"","first_seen":"2026-07-13T08:25:47.718941Z","last_seen":"2026-10-11T00:50:07.425447Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-10-11T03:43:27.329361Z","times_seen":451111,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/_next/static/chunks/4663-9669b3feb799af39.js","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f1a21b8b24e44d85310cfcd9eafb2ad3","sha1":"77196e0bf8ad73dd59b7501f3ea4b3e95761d325","sha256":"d0cf7caa54d8cbeacd48f7139ead22ac11786a56d9542b7ac2fc4fe4aaca5e20","sha512":"000082e59e5699e6847e1a8bc52f9ecffcd8855e595010c6137d379db3e41f5bd035d767285ca0a8dda684996c251e2fb8b2dd0aa03f59d1b87da2485c5a1b4c","ssdeep":"768:qjwH1s5drK0SI4coM8cPud5ORD/F62nOX:qJ5zjpoM8cPud5Oh/A2nOX","tlshash":"9ec2f9863252b0604bc68a95c4ff4206f23c6994241b082cf3b56deb75a19cdb6f7f39","size":25885,"data":"","first_seen":"2026-07-13T08:25:47.697451Z","last_seen":"2026-10-11T00:50:07.358278Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/_next/static/chunks/app/(shop)/layout-554afc0842167f6b.js","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e5121e43a0805320663d278aba0c61d0","sha1":"dc83550c33b27fdf1efbe082a02e191a11e48134","sha256":"f13c385e7c4b6da4b519bf16a79878f109312cabe3bfdb7f10ecd92c31314ef0","sha512":"9b27d91f6edfe3426dc2c9c4260beacf89986a853dd93dca1b7a05c9a222f234c0871553d759800b668f2a35f964f6662261f6e482a3ec38c815f7eb046a3fa6","ssdeep":"","tlshash":"3fe0d896074cf91f2c169e69ffa15dd11806403a342b8fa172149da13533b4cc391c58","size":355,"data":"","first_seen":"2026-07-13T08:25:47.694049Z","last_seen":"2026-10-11T00:50:07.330945Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/_next/static/chunks/7471-126ce139292f0269.js","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3469fffb9e982615a225ccb0b01649dd","sha1":"24d45c2d59b7d6d6cb95e3442209d9690f79bdb9","sha256":"b491375be8c0afc6f51e71022f9ba4ecf9727f3940ca4a3c6f9b53dfbd99e8ad","sha512":"f2547f77653ef80c9618d3fdb4d9a622d73d692c57f6d93ccc67c5c951eb9fabc4d3378a988ea7a741d38865b1806dab1867b584e41e77d7c915c07e82231197","ssdeep":"384:LdhqMsTi355zZ9kpx3SkWVWF5sVsAHgH72JR8DS27Si0qyJ2L9xmZMtn:LfqMsTi3LS3S1WPsVsAHgHiJ8WZMZ","tlshash":"0bd2978d7389b035536f34b4847f644fe137a901289e90a0e591e8e4acbd75dc22bfad","size":28451,"data":"","first_seen":"2026-07-13T08:25:47.7292Z","last_seen":"2026-10-11T00:50:07.406746Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/_next/static/chunks/7429-1c97e2ad3dbea8d5.js","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6b6142e98b39a4dd2f87fcace2b0809c","sha1":"980758eb3169263dad986607c589282784ae372a","sha256":"99186e776e81c1ff3b5ba903cd609361cfe5ca526b8ef96f5e4c86cd11f5a0ed","sha512":"19e94b389a9fd6dd6ab38c12882ac63171802b5203309eb0c2d610bea495b6a2a9fba8456955ae402847686dff6c7729d5cf278737ce221cc3bfe5c7ea9bd34a","ssdeep":"192:AzulIP7iRl3SLLfyqgdi7I71S+p25KDDG0bx2yxAkqC+y1f2DWfjF9g2h:A6lIPPyqL7IBSA28fG0bxFWk1Df","tlshash":"dc42d96a7161a21b6ed380815c2e4125e2646d143406942dbea87de3f1a6ccef5fff34","size":12600,"data":"","first_seen":"2026-07-13T08:25:47.722658Z","last_seen":"2026-10-11T00:50:07.378429Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/_next/static/chunks/main-app-83b24b23906acbe3.js","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e1a88293ae9d50acfda546818e4e7715","sha1":"ae2e8de2fc6b25bdd14355742e0a658af10fcc57","sha256":"e34a6a6fae09bfadaf9bbf980e578f2b13de6248000622b72607ea1c852f6735","sha512":"16e86a612daf8f2973ba823e123adf3fa68456150a81b7337f254bd33ccfe5f48876f51223b7968b2fe8dd2d14285cf8147ebf8b626e9a4daa1cac77f612d467","ssdeep":"","tlshash":"80f0125a4f4cf52f5d22ae74fe97ace2141f4535102b4da07800eeb26c23facd260418","size":573,"data":"","first_seen":"2026-07-13T08:25:47.728268Z","last_seen":"2026-10-11T00:50:07.338439Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/_next/static/chunks/7261-9546d08da543f398.js","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8de66986eabd7efb9f8b59e62ce5ce00","sha1":"3453fcf5c233ef62ddd6201f369262100fcaa819","sha256":"506500dfc746f0493cc2a0050b69bd0a002e977cc641917650d42124b218552e","sha512":"2104e3ade5a555769f938ac29686a2a84d4aad34a503e5ae8be018e270166ee78be3b58a8413b195526a92e478333efd0e3bdeea387433de963a051cb557c358","ssdeep":"192:PIBbWek0N+YxxURMeobT9jZu2cbYOHC0dwMcGWx:g1VGMFfEjimwMcGWx","tlshash":"4202b8d675e1f8e2836b0190443b100bf37e1cb5181e9184f7a95ce6b9b046dd1b2f6a","size":8562,"data":"","first_seen":"2026-07-13T08:25:47.662685Z","last_seen":"2026-10-11T00:50:07.323196Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/_next/static/chunks/app/layout-7edb713ba4d001aa.js","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b09411cdd05f7f5a3762d2a5821f1b16","sha1":"8cca51948590a773e2118ee53f19cebf1b415416","sha256":"20ae7983b1c7586eaa075b8e78dea432467e961a847ed3051bae4b86758607ba","sha512":"c2b99187310905d1950ac7ec1d19dab6845197244aefdf658d959d1790f03e7d502fc5c25c6f279a74bbbc016b4bac48ab552c37bcc2661a21242c82aa7b31c0","ssdeep":"384:HFLNZRc/3AaRNrA+sGNsWuRxC7WGOq55zfl32:HFLNZRy3AaR1A+skuRI7LzfZ2","tlshash":"d392e824983c7873a6d6ccc9970d1328d1ab1d83c36aea58dca744182e5cd7c993bded","size":19462,"data":"","first_seen":"2026-07-13T08:25:47.715568Z","last_seen":"2026-10-11T00:50:07.321608Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/_next/static/chunks/3265-792f33f8758afb09.js","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"da0c7c56f270a4021119b90e0e86c406","sha1":"b20f408fbd2d1e62f1e3215174516f9df9d6c8ed","sha256":"f19c88868efc1b95c7564587d8634c91bdeb3643dc8f954eae11acc9dce81558","sha512":"1403930f7d90141cdd53e8c19887dcb13203feeeb0df72f08de8c84e80d332005cc35f7d12f092595909e5acb1ff625f15a80dc0cd14c41369112ba5fa47793d","ssdeep":"768:krgMY3wZ7yWZWr83gdVNF0VjD+LAsVBRYndsLHonMqCE:k0MDVyNrJ0wD0/MQ","tlshash":"f7f218c9d322eeacf46704d494afc20cf12e2f08eb6d5d68b5bc7c1516419c4b2a6b9d","size":34555,"data":"","first_seen":"2026-07-13T08:25:47.652091Z","last_seen":"2026-10-11T00:50:07.311818Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/_next/static/chunks/483-a8ad61604e0696d9.js","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"59f13dbbf4c10168f23c124755993b8e","sha1":"ac6b795610933945d69bfc22478972b183a39638","sha256":"e174ff6b6be495c6acae88af2c66f8b4281506dd281dc37b8a0bb598717dd5c8","sha512":"84acf483d2a15ee2c09c6e3cbd603dfccbd4a379e9cc55b0aed3efe31d32198328e97fecc4f8c578943656f2a25d0ff1b377150dd46160911127a091077c0005","ssdeep":"96:Qw00d8w260QHVWV2P0jfdxbQH2WVhWV2BWVH/JKxMgI0KexnV+Het1VRII82AN9J:Qda70Q5PCdxbgrAZgTjLtnb8jT0jJop","tlshash":"8fe1e8666053768cb56f495411bfd20cb26f2b84a70e4ff871bea4713340c94b253be2","size":7330,"data":"","first_seen":"2026-07-13T08:25:47.669453Z","last_seen":"2026-10-11T00:50:07.398402Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/_next/static/chunks/9236-4fc3a4dec2178b0b.js","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9a11e9cb0351fdb82b95531f55643880","sha1":"e0d1651c9c009461716e5ced539c7e57b61369b3","sha256":"f0f9567a4c4fe8190cbc049c81d5e9aae9338c00060957794a4d8c5d24ee829e","sha512":"ddec78e431df75e19dad0d08a113168902ad9151d736ceabead0084bdaa6ffed86e9be4f7c95ec33c406cb197756845722f4be609ca16b41ac1998bc382511e8","ssdeep":"1536:zXfb8njE42rqr8TgBlxvHa8fkIJ4n3PvIFND0tnw4Z4XiA6w1+S/6ch:zXfZvN3P6Dot8h/64","tlshash":"dc831a89a220757692eb524b93a5c111b3f59845b448847cb1f98ceb58bcd9c03feff8","size":86857,"data":"","first_seen":"2026-07-13T08:25:47.694953Z","last_seen":"2026-10-11T00:50:07.39175Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/_next/static/chunks/e217e3ef-59a5a4e080c2035b.js","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fe989e53d9b0ba71b65e34e23cdf4de6","sha1":"eae1b5d4acf578b7863405d4e3092027bb1035c1","sha256":"f4d376a2d69b4c8f9901c4fcab99de6501028b768e95e8dcc81f61f99bb37961","sha512":"b5d4e415389622cafbb68d70c90a2be0efc866f54af2e1ed515004645de984004a07d3888465d23bc3c620251495ce72cce2bc3033a19acd2255bf191af1d5d6","ssdeep":"6144:7h3ScIxAaLj/ruxGHt+3S+RqnaGuW/gNb2oieNs7UP6wov35wAxDY9g0LtBR9:3aAWjiWtP+FW4b2oDuwAxEtd","tlshash":"53b44cfa33a6a42783d8914b94758612b33cbd4e1808812cfa7efddb2955d45b0b6f70","size":513311,"data":"","first_seen":"2026-07-13T08:25:47.724539Z","last_seen":"2026-10-11T00:50:07.382646Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/_next/static/chunks/2119-6453f91fd9ba4737.js","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"11d8a1c7db152897a5c2c578d16171f1","sha1":"e3c6b3ddffe55f8f2721e90b9392dabbc2bf92ae","sha256":"1d5970876c0be3bd43d75ea3d23a82af60d8d4f258d89c76c8cc3d8e975b85bb","sha512":"83fd845704ca22390725a5fa00fc6414905b421d7e288741f38ea10f6c8eb2f115430a57756b3d8be61e3843398356e7b9bb50dfb41d1eeeeede7bc39644b19b","ssdeep":"192:qYzJZ2EPyQqR5ULY6+RgdFgpdaWvSsGXpiplSGYSsGsrX80Q61KkXGVKIWw5m:Xzn6RR20QdOaufCSSGYf/rsH60kXGUI0","tlshash":"a432c688d361eeac909745c9569ed90df03f6c88f73a8ca87678dc02168d4d43a8b7e5","size":11970,"data":"","first_seen":"2026-07-13T08:25:47.705645Z","last_seen":"2026-10-11T00:50:07.359943Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/_next/static/chunks/app/(shop)/page-5e2b174c46842624.js","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"039fab70453cde255cd0bfee64534efa","sha1":"cd8029c9d7754116b53e563848ac2ac695e946a9","sha256":"787179fbeb8011024a821d6641f55345c3ffa137bff4c1a4c9c8f8255c4562ce","sha512":"91cf00d76b91401439f23daa7ac22314c0bfd192edf8c1f29102cc4458a7fff06fa87c3f3df0695e519a440799f3c28d9cabb3676990b00b717c076a9e6b7110","ssdeep":"","tlshash":"d5d023d80685fd69791b019d41bf1e303de4001b342ec2f1f1754cb050757440780d9f","size":214,"data":"","first_seen":"2026-07-13T08:25:47.67041Z","last_seen":"2026-10-11T00:50:07.335263Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/_next/static/chunks/2025-88ace629794521f2.js","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b827ff8ec52a63552ec313fc6c5dc28","sha1":"940be0db857d903026d872539eee91464398a371","sha256":"4ab8d2bec681993b39d25577e6a16d6f5b7abb3669d2d0498ce9ec78c66beb0b","sha512":"ef3e817b8fe14b61adb929678f2bf2ac71970c67061a91b8b8c8f1fc3f96bf23c591fa0435bd846a81df2aa73f877947c66a278d5e4d41f5ad44210252fba32a","ssdeep":"1536:vc0qgjcdpX7DPZ+ZRr4tHXgj7edGOGTtaocZXxreXRNwrky/Sv0cyFE0wP4zhPIm:vzYbDiRrNmT4RNsz/SXWE02ShPv","tlshash":"b504e9b676d0f8d107a780e5843b400af3295c37146f74a0a3e6dce975605dea1b3faa","size":173810,"data":"","first_seen":"2026-07-13T08:25:47.657547Z","last_seen":"2026-10-11T00:50:07.316542Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/_next/static/chunks/webpack-32ca18bdb57c5e60.js","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"efb9184b9dea3b65b5a9ec2ddde4daa7","sha1":"dc34a9796d18803f6ab4dfd71c00e094261f8b03","sha256":"f1c0c7cb82b593730535626f74f8aba0614b4a42e2f1e67047d90e4528024327","sha512":"b57b09ea4298cb5d56c0ea671c57186569546f2ef51c42b25b15b3b26e7324823b73decd2aa4b66245934a95ed64af861f60b480861caadccff066185f01b6b2","ssdeep":"192:yqgvVuKABgjajjpH2KFZ2kPQ2V3sU3TDNqvD3kNNrZAIcywL8C5R:yz/sHRZzPQfgTDNMorZAjy48Cr","tlshash":"7e122b5b7314f5522e758a448c1ba1e6f61ca533302c88e0d39ded7934a4eda136ae33","size":9634,"data":"","first_seen":"2026-10-11T00:50:07.37596Z","last_seen":"2026-10-11T00:50:07.37596Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/_next/static/chunks/6937-edea53ec95613c82.js","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f8e862cea24cf3f5a29ed78be003dc26","sha1":"05deee409584db5557d4f179d3800451619595ea","sha256":"50a76f645b1a381c0022ff7849a114f63cc52129d5bc7cc08b36e0a4dddd2445","sha512":"549041b6156868bc07a1c90836914bed565ef6e5f1c99a5c65cb866e1c9a595e40164f5b7064f3575416918007648b3e5dd207b77a0e9169a4229873c15eee4d","ssdeep":"3072:W7FeSgALzIzMStlZI32tjmCWVjoyuxnJRELJkbPCecb:W7EWPkI32NmCWVjoyuxnJRELJkbPCecb","tlshash":"10f3579e90541f6cfd3b53ccb14a8a097c261998f0394891ebdf8f4f16c38d86856e6e","size":168684,"data":"","first_seen":"2026-07-13T08:25:47.723551Z","last_seen":"2026-10-11T00:50:07.342397Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/_next/static/chunks/7238-c1a7790b43339acd.js","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9353e889854242384dbda809a165f6c6","sha1":"d3e606e012f188d09fe7e46f8a50cb39c3d82c73","sha256":"3882b3e021b2852c30d98c4b842b944fe5296c1c1a380c1a604e54123a59cdb9","sha512":"def7711d7c04517265c93d2dd3c29c0a6c666e2c39616ddf51c36c9cefb3d27ad787489dcf0c3f9d9c969e5c6d9927696295225c6092f8e0bd3c3a897edf2bda","ssdeep":"3072:lc6Vo/kF4RlsrJ64e65nwc0UoIs56DdnXPL4cH0p:l/Vo/NRyrJ6y5nwc0ElDF/L41p","tlshash":"8ce34bc03656b026c3e76191207f7407f27af515848c4c68f254ede9adbce8992aef78","size":156048,"data":"","first_seen":"2026-07-13T08:25:47.660833Z","last_seen":"2026-10-11T00:50:07.340525Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/_next/static/chunks/9068-5f6341d3a68721ba.js","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9beb067c1697ed4c8cce6343c7a728b2","sha1":"5bfee8c67357bde62822ab32e2e69ebcdb6cdd96","sha256":"4353dd3dd81386ccaf1b6258e2bf5c8f026b8472ac5a180da3f5ce7d2d89de9a","sha512":"274aa9b6da79b865970f2aa3d95097d92415d0a034b8520a187518baac5608d090962ebd13cf0cbd982cfe7a62912bee02b2657a7b15fd13a47af1900ceae153","ssdeep":"3072:G95jyGNccWv5bAI6yy0LCnrRMw1injU3scg24F0Ud743VApd9cCP3YCQB6mA1nHL:gZ12PS6xsFdc8QK3tHS","tlshash":"508466af8f8a168e5912e28c1e0bb0418eed53bd338a4812f44fa573c741597eda3f55","size":399122,"data":"","first_seen":"2026-07-13T08:25:47.65105Z","last_seen":"2026-10-11T00:50:07.41454Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/_next/static/chunks/5965-c7e5481bb0082aac.js","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"98905c90a04529b2c8f604762ba00e65","sha1":"4f264bd22ddc644ec32328491d5b6b22cfcb3abe","sha256":"a0a8dffb3143e1e9e7be24879c0f6b5b7e2ba02b561fb288c23190437b521491","sha512":"acdf3614d52515f41b4b9ffebb631f52245e0f06c66179ad447e1a6b533c3fcb47acb3075ab88ad6451628229f9c7d38c65584ca2360a556cda2e425ea0fb12d","ssdeep":"1536:cIa8aPw9Mkjtn8eE+iNHa2I6Asv1XRNZEHEjOhHTNZ1qqeL8d:cInL9Mkjtn8eE+kHTbv1XRNIEjOhHTNV","tlshash":"05630beeee78f4a093fd98b5941f0952f31c6b07140588a1e1635e0d3748e8eb2e6b75","size":69230,"data":"","first_seen":"2026-10-11T00:50:07.412525Z","last_seen":"2026-10-11T00:50:07.412525Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/_next/static/chunks/5412-d656e30852360889.js","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5d6e2b790ba5e033a748c8e6a9c19320","sha1":"5795a46b0be5011f3d38f868803b769ff7193421","sha256":"5eef87251c11cb01b0185eb9ad518f1556fa85ad5ec3f8774c90ed8325ae6e56","sha512":"0edc4e880a2d8127eef1c8f98b9942a0db980351b1bcfbd66140fb629fe777872547fe4fa0932e4b5153f18ac13a360c4108d08b7c58fb9ded3baa7d8a3abf46","ssdeep":"384:8BjdLFaUundBOMXXXlceosjrs5NGTZ/6g+QzwUVHlsF2tNNT1vzz72J:8piFceFoKQgvzbFsET1rz72J","tlshash":"3192a58ed430fe59f8b50c58b62b4c1eb37eab1e0909c465f96e6e8a17005cc7252fb5","size":20301,"data":"","first_seen":"2026-07-13T08:25:47.730158Z","last_seen":"2026-10-11T00:50:07.381202Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/_next/static/chunks/5605-e4000d1f0ca5ec5c.js","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0cc4308375445b3820ab58b6cf3ccc04","sha1":"e0de12b30d236e40b7da7920bfb2b1efd71addc3","sha256":"6c19f7e65b7cf3253fa7ec002c335b08319e1d17c0cdf701548ffe02bba40818","sha512":"74c150a5a9e7e534df6e2fe375e57b586f577f2b425474b3ffeed68456228ca19649cb61a41803c4c861f7594764969565a7c13dce344bbf74a5d707a73e0a6f","ssdeep":"768:Fzy36wVDFtwMRo2Tk+5ljg6iJAbKpGGFOxXnjU6YiwkvoZ:Fa6wVD/wMDFk6iJA+OxThwkv+","tlshash":"18633a893367b26707da40c664760305e3358e596809641cfa74bfd7e492ecaa2fbf31","size":70439,"data":"","first_seen":"2026-07-13T08:25:47.658952Z","last_seen":"2026-10-11T00:50:07.320165Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"lamacosmetics.com/_next/static/chunks/3265-792f33f8758afb09.js","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lamacosmetics.com/","date":"2026-10-11T00:42:51.047Z","timestamp":1791679371047,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lamacosmetics.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 15:42:22 GMT","end":"Mon, 16 Nov 2026 15:42:21 GMT"},"fingerprint":{"sha1":"79:AE:97:83:F1:FB:17:5D:4F:66:66:29:E0:68:9C:14:CD:8B:51:34","sha256":"7D:A3:8F:2D:DC:D1:B8:0A:45:A1:9F:6F:D2:88:89:DC:0C:F8:15:F9:E2:02:82:D5:EB:F7:B4:EE:64:0D:54:D1"}}},"request":{"raw":"GET /_next/static/chunks/3265-792f33f8758afb09.js HTTP/1.1\r\nHost: lamacosmetics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lamacosmetics.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors 'self' https://merchant.zatiqeasy.com https://staging.protected.zatiqeasy.com https://merchant.stg-7f91c2.zatiqeasy.com https://*.zatiqeasy.com https://*.zatiq.app\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Sun, 11 Oct 2026 00:42:51 GMT\r\netag: W/\"86fb-1a0ab8ac710\"\r\nlast-modified: Wed, 16 Sep 2026 18:46:34 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(self)\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KSWxyUXazWG7N8%2Ffd8fjmScKS0cCAiykNErHpXYH5OV%2BjMbJuj2BkfoG1mf2qIB4Fk1%2F3YUrBBibIDDaACyMfu2qEZVpT9YAlYvGsy%2FOP5g5FDx%2FFO3xCB45HtUcAas0cmCWtQ%3D%3D\"}]}\r\ncf-ray: a489d3c50f35568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34555,"size_decoded":10885,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (34555), with no line terminators","md5":"da0c7c56f270a4021119b90e0e86c406","sha1":"b20f408fbd2d1e62f1e3215174516f9df9d6c8ed","sha256":"f19c88868efc1b95c7564587d8634c91bdeb3643dc8f954eae11acc9dce81558","sha512":"1403930f7d90141cdd53e8c19887dcb13203feeeb0df72f08de8c84e80d332005cc35f7d12f092595909e5acb1ff625f15a80dc0cd14c41369112ba5fa47793d","ssdeep":"768:krgMY3wZ7yWZWr83gdVNF0VjD+LAsVBRYndsLHonMqCE:k0MDVyNrJ0wD0/MQ","tlshash":"f7f218c9d322eeacf46704d494afc20cf12e2f08eb6d5d68b5bc7c1516419c4b2a6b9d","first_seen":"2026-07-13T08:25:47.652091Z","last_seen":"2026-10-11T00:50:07.311818Z","times_seen":2,"resource_available":true,"data":null}},"time_used":384,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":384,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/_next/static/media/a3a053d5ba3eaf5e-s.p.woff2","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lamacosmetics.com/","date":"2026-10-11T00:42:51.003Z","timestamp":1791679371003,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lamacosmetics.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 15:42:22 GMT","end":"Mon, 16 Nov 2026 15:42:21 GMT"},"fingerprint":{"sha1":"79:AE:97:83:F1:FB:17:5D:4F:66:66:29:E0:68:9C:14:CD:8B:51:34","sha256":"7D:A3:8F:2D:DC:D1:B8:0A:45:A1:9F:6F:D2:88:89:DC:0C:F8:15:F9:E2:02:82:D5:EB:F7:B4:EE:64:0D:54:D1"}}},"request":{"raw":"GET /_next/static/media/a3a053d5ba3eaf5e-s.p.woff2 HTTP/1.1\r\nHost: lamacosmetics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lamacosmetics.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nserver-timing: cfExtPri\r\ncontent-security-policy: frame-ancestors 'self' https://merchant.zatiqeasy.com https://staging.protected.zatiqeasy.com https://merchant.stg-7f91c2.zatiqeasy.com https://*.zatiqeasy.com https://*.zatiq.app\r\ncontent-type: font/woff2\r\ndate: Sun, 11 Oct 2026 00:42:52 GMT\r\netag: W/\"1a56c-1a0ab8ac710\"\r\nlast-modified: Wed, 16 Sep 2026 18:46:34 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(self)\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y1OpjMa1%2FWhIh%2B0%2BmbA8GDC%2FMoIHm%2B4JKwkO1q%2FpIuJ0tWRchs%2FogPx2yVUbwWJzGlY1JsnrkAwH5lHeGjXHzLmzro8d%2FplnWedRXLeXae993CWUDLi%2Bi3ym%2FCupJ2nxC3fg%2FQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a489d3c4cf13568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 107884\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":107884,"size_decoded":109056,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 107884, version 1.0","md5":"2b09a52e3b6d772db58c6e16a2c3a47d","sha1":"69f19d17602453ab40a637ca70b40f9525df8674","sha256":"d8cebde0595ce46cfbf85911792fc7cb5525d8ba61e1a2f8979cb4389d40c948","sha512":"ecde9241c5b53d3b0b654e9b8e7204f3d888cca12e03a133720097a808bbc748f8f7fa7f3bb6b83ab7d16bb8a416ef75eb24199d831a12bc301fd6e5f1e0ac92","ssdeep":"3072:nPutUQuypLDenmiLOQe4Sk/jYQBtDPd8QTb:nwUHYLDEmidSk/jlTb","tlshash":"53b31297842ff96df8f3a0d260546ab29a33c6fbb910a30e5615cf646004fb90d567bc","first_seen":"2026-02-23T16:09:35.286212Z","last_seen":"2026-10-11T00:50:07.315521Z","times_seen":492,"resource_available":false,"data":null}},"time_used":1940,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1398,"receive":542,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/_next/static/chunks/2025-88ace629794521f2.js","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lamacosmetics.com/","date":"2026-10-11T00:42:51.019Z","timestamp":1791679371019,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lamacosmetics.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 15:42:22 GMT","end":"Mon, 16 Nov 2026 15:42:21 GMT"},"fingerprint":{"sha1":"79:AE:97:83:F1:FB:17:5D:4F:66:66:29:E0:68:9C:14:CD:8B:51:34","sha256":"7D:A3:8F:2D:DC:D1:B8:0A:45:A1:9F:6F:D2:88:89:DC:0C:F8:15:F9:E2:02:82:D5:EB:F7:B4:EE:64:0D:54:D1"}}},"request":{"raw":"GET /_next/static/chunks/2025-88ace629794521f2.js HTTP/1.1\r\nHost: lamacosmetics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lamacosmetics.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors 'self' https://merchant.zatiqeasy.com https://staging.protected.zatiqeasy.com https://merchant.stg-7f91c2.zatiqeasy.com https://*.zatiqeasy.com https://*.zatiq.app\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Sun, 11 Oct 2026 00:42:52 GMT\r\netag: W/\"2a6f2-1a0ab8ac710\"\r\nlast-modified: Wed, 16 Sep 2026 18:46:34 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(self)\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KM9GSW%2FL6klHiQQhVhDbXcjuDD%2FVUXEFn2Iva5TlEYzTo5TjHKBMrxxk%2FGvWXCu5EPCaKfi9bHbfSaDn0oL8bGHvwSRfQve0wyCn1rkzGJXhanYg4MfZe9etArpBawrrtA55Vw%3D%3D\"}]}\r\ncf-ray: a489d3c4df1d568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":173810,"size_decoded":47811,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"3b827ff8ec52a63552ec313fc6c5dc28","sha1":"940be0db857d903026d872539eee91464398a371","sha256":"4ab8d2bec681993b39d25577e6a16d6f5b7abb3669d2d0498ce9ec78c66beb0b","sha512":"ef3e817b8fe14b61adb929678f2bf2ac71970c67061a91b8b8c8f1fc3f96bf23c591fa0435bd846a81df2aa73f877947c66a278d5e4d41f5ad44210252fba32a","ssdeep":"1536:vc0qgjcdpX7DPZ+ZRr4tHXgj7edGOGTtaocZXxreXRNwrky/Sv0cyFE0wP4zhPIm:vzYbDiRrNmT4RNsz/SXWE02ShPv","tlshash":"b504e9b676d0f8d107a780e5843b400af3295c37146f74a0a3e6dce975605dea1b3faa","first_seen":"2026-07-13T08:25:47.657547Z","last_seen":"2026-10-11T00:50:07.316542Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1777,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1409,"receive":368,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/_next/static/chunks/5605-e4000d1f0ca5ec5c.js","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lamacosmetics.com/","date":"2026-10-11T00:42:51.025Z","timestamp":1791679371025,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lamacosmetics.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 15:42:22 GMT","end":"Mon, 16 Nov 2026 15:42:21 GMT"},"fingerprint":{"sha1":"79:AE:97:83:F1:FB:17:5D:4F:66:66:29:E0:68:9C:14:CD:8B:51:34","sha256":"7D:A3:8F:2D:DC:D1:B8:0A:45:A1:9F:6F:D2:88:89:DC:0C:F8:15:F9:E2:02:82:D5:EB:F7:B4:EE:64:0D:54:D1"}}},"request":{"raw":"GET /_next/static/chunks/5605-e4000d1f0ca5ec5c.js HTTP/1.1\r\nHost: lamacosmetics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lamacosmetics.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors 'self' https://merchant.zatiqeasy.com https://staging.protected.zatiqeasy.com https://merchant.stg-7f91c2.zatiqeasy.com https://*.zatiqeasy.com https://*.zatiq.app\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Sun, 11 Oct 2026 00:42:51 GMT\r\netag: W/\"11327-1a0ab8ac710\"\r\nlast-modified: Wed, 16 Sep 2026 18:46:34 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(self)\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a1EnMax7AKyKEzEmmadFgwZkmyKdudYfUd5ReBkcfj7MfLUqPn18rjTl7gffjXmIYmaVNR9jgJNCZkkR3D63z%2BfJhVFNMHf%2F08BdtY1PVAbLQC%2Fj0QT1LfnyYKt02HqIUBnWfw%3D%3D\"}]}\r\ncf-ray: a489d3c4ef22568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":70439,"size_decoded":23334,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"0cc4308375445b3820ab58b6cf3ccc04","sha1":"e0de12b30d236e40b7da7920bfb2b1efd71addc3","sha256":"6c19f7e65b7cf3253fa7ec002c335b08319e1d17c0cdf701548ffe02bba40818","sha512":"74c150a5a9e7e534df6e2fe375e57b586f577f2b425474b3ffeed68456228ca19649cb61a41803c4c861f7594764969565a7c13dce344bbf74a5d707a73e0a6f","ssdeep":"768:Fzy36wVDFtwMRo2Tk+5ljg6iJAbKpGGFOxXnjU6YiwkvoZ:Fa6wVD/wMDFk6iJA+OxThwkv+","tlshash":"18633a893367b26707da40c664760305e3358e596809641cfa74bfd7e492ecaa2fbf31","first_seen":"2026-07-13T08:25:47.658952Z","last_seen":"2026-10-11T00:50:07.320165Z","times_seen":2,"resource_available":true,"data":null}},"time_used":568,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":387,"receive":181,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/_next/static/chunks/app/layout-7edb713ba4d001aa.js","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lamacosmetics.com/","date":"2026-10-11T00:42:51.026Z","timestamp":1791679371026,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lamacosmetics.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 15:42:22 GMT","end":"Mon, 16 Nov 2026 15:42:21 GMT"},"fingerprint":{"sha1":"79:AE:97:83:F1:FB:17:5D:4F:66:66:29:E0:68:9C:14:CD:8B:51:34","sha256":"7D:A3:8F:2D:DC:D1:B8:0A:45:A1:9F:6F:D2:88:89:DC:0C:F8:15:F9:E2:02:82:D5:EB:F7:B4:EE:64:0D:54:D1"}}},"request":{"raw":"GET /_next/static/chunks/app/layout-7edb713ba4d001aa.js HTTP/1.1\r\nHost: lamacosmetics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lamacosmetics.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors 'self' https://merchant.zatiqeasy.com https://staging.protected.zatiqeasy.com https://merchant.stg-7f91c2.zatiqeasy.com https://*.zatiqeasy.com https://*.zatiq.app\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Sun, 11 Oct 2026 00:42:51 GMT\r\netag: W/\"4c06-1a0ab8ac710\"\r\nlast-modified: Wed, 16 Sep 2026 18:46:34 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(self)\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I4WquffdXmxv2w9FwIUNQhHsRYj2GVGZ%2BU15LfDLCUtJWT72gULiSbeVVn4t0FaZ%2BZTAmTGVIljBRbG0WiQVwDa2myfTtkipOMh4XUXImg9Rpydngqo8GVEr7SwMc8fGWBeocw%3D%3D\"}]}\r\ncf-ray: a489d3c4ef23568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19462,"size_decoded":8046,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (15218), with no line terminators","md5":"b09411cdd05f7f5a3762d2a5821f1b16","sha1":"8cca51948590a773e2118ee53f19cebf1b415416","sha256":"20ae7983b1c7586eaa075b8e78dea432467e961a847ed3051bae4b86758607ba","sha512":"c2b99187310905d1950ac7ec1d19dab6845197244aefdf658d959d1790f03e7d502fc5c25c6f279a74bbbc016b4bac48ab552c37bcc2661a21242c82aa7b31c0","ssdeep":"384:HFLNZRc/3AaRNrA+sGNsWuRxC7WGOq55zfl32:HFLNZRy3AaR1A+skuRI7LzfZ2","tlshash":"d392e824983c7873a6d6ccc9970d1328d1ab1d83c36aea58dca744182e5cd7c993bded","first_seen":"2026-07-13T08:25:47.715568Z","last_seen":"2026-10-11T00:50:07.321608Z","times_seen":2,"resource_available":true,"data":null}},"time_used":392,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":392,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/_next/static/chunks/7261-9546d08da543f398.js","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lamacosmetics.com/","date":"2026-10-11T00:42:51.028Z","timestamp":1791679371028,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lamacosmetics.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 15:42:22 GMT","end":"Mon, 16 Nov 2026 15:42:21 GMT"},"fingerprint":{"sha1":"79:AE:97:83:F1:FB:17:5D:4F:66:66:29:E0:68:9C:14:CD:8B:51:34","sha256":"7D:A3:8F:2D:DC:D1:B8:0A:45:A1:9F:6F:D2:88:89:DC:0C:F8:15:F9:E2:02:82:D5:EB:F7:B4:EE:64:0D:54:D1"}}},"request":{"raw":"GET /_next/static/chunks/7261-9546d08da543f398.js HTTP/1.1\r\nHost: lamacosmetics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lamacosmetics.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors 'self' https://merchant.zatiqeasy.com https://staging.protected.zatiqeasy.com https://merchant.stg-7f91c2.zatiqeasy.com https://*.zatiqeasy.com https://*.zatiq.app\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Sun, 11 Oct 2026 00:42:52 GMT\r\netag: W/\"2172-1a0ab8ac710\"\r\nlast-modified: Wed, 16 Sep 2026 18:46:34 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(self)\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wjpEpaNRSNrwD9%2BRrKUqnsMFCf252xtWsTzhp6bM79CRZNE4YbMUqW1H7YGGyivOHDkZQkJ0DXRn94y4boXOu59EAOLN2QpGUClgkgg1G1dCjGw9DUXHEb%2FpqDO2gY%2Flb19Rvg%3D%3D\"}]}\r\ncf-ray: a489d3c4ef24568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8562,"size_decoded":4599,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (8562), with no line terminators","md5":"8de66986eabd7efb9f8b59e62ce5ce00","sha1":"3453fcf5c233ef62ddd6201f369262100fcaa819","sha256":"506500dfc746f0493cc2a0050b69bd0a002e977cc641917650d42124b218552e","sha512":"2104e3ade5a555769f938ac29686a2a84d4aad34a503e5ae8be018e270166ee78be3b58a8413b195526a92e478333efd0e3bdeea387433de963a051cb557c358","ssdeep":"192:PIBbWek0N+YxxURMeobT9jZu2cbYOHC0dwMcGWx:g1VGMFfEjimwMcGWx","tlshash":"4202b8d675e1f8e2836b0190443b100bf37e1cb5181e9184f7a95ce6b9b046dd1b2f6a","first_seen":"2026-07-13T08:25:47.662685Z","last_seen":"2026-10-11T00:50:07.323196Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1432,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1432,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/_next/static/chunks/app/not-found-e25d7a82778e599c.js","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lamacosmetics.com/","date":"2026-10-11T00:42:51.030Z","timestamp":1791679371030,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lamacosmetics.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 15:42:22 GMT","end":"Mon, 16 Nov 2026 15:42:21 GMT"},"fingerprint":{"sha1":"79:AE:97:83:F1:FB:17:5D:4F:66:66:29:E0:68:9C:14:CD:8B:51:34","sha256":"7D:A3:8F:2D:DC:D1:B8:0A:45:A1:9F:6F:D2:88:89:DC:0C:F8:15:F9:E2:02:82:D5:EB:F7:B4:EE:64:0D:54:D1"}}},"request":{"raw":"GET /_next/static/chunks/app/not-found-e25d7a82778e599c.js HTTP/1.1\r\nHost: lamacosmetics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lamacosmetics.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: zstd\r\ncontent-security-policy: frame-ancestors 'self' https://merchant.zatiqeasy.com https://staging.protected.zatiqeasy.com https://merchant.stg-7f91c2.zatiqeasy.com https://*.zatiqeasy.com https://*.zatiq.app\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Sun, 11 Oct 2026 00:42:51 GMT\r\netag: W/\"bf-1a0ab8ac710\"\r\nlast-modified: Wed, 16 Sep 2026 18:46:34 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(self)\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dHcE5q3uCsJ%2FNvT3IqAw%2FahYZEOjlhlvjX1X16gnb57BpVjmXJsG5QN49mOVvjvmmC4k2DtZ8R9rAkA5JQQmXzAEurzlmY767R1PLfCdY62cASx9r2%2FlkBjy56Pj8iRDaLAJbw%3D%3D\"}]}\r\ncf-ray: a489d3c4ef27568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":191,"size_decoded":1341,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"ab3226d2bd3431eab50a0b7fd796c2ab","sha1":"8e422d4a1e6adbbf63a085827f76342ef18cf839","sha256":"e61edf0c0a56e603f0ddc604ca26bc1b2287949f70ccebe72fdb40b57135b8e0","sha512":"3e9b1fe5f168d834a2b54d94052512e6d852aba51feef5e8a36266419569303772b22d139dc0e218bfbe68f2911fa5035a362a5264ff2893133418bb3f4be2ac","ssdeep":"","tlshash":"aac022a51100be1ca82b1978a9f50c3530e8005a342ac4d43b244cb01427d2d8390806","first_seen":"2026-07-13T08:25:47.659819Z","last_seen":"2026-10-11T00:50:07.324527Z","times_seen":2,"resource_available":true,"data":null}},"time_used":390,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":390,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/_next/static/chunks/4977-d4ccd9624aa6908b.js","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lamacosmetics.com/","date":"2026-10-11T00:42:51.037Z","timestamp":1791679371037,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lamacosmetics.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 15:42:22 GMT","end":"Mon, 16 Nov 2026 15:42:21 GMT"},"fingerprint":{"sha1":"79:AE:97:83:F1:FB:17:5D:4F:66:66:29:E0:68:9C:14:CD:8B:51:34","sha256":"7D:A3:8F:2D:DC:D1:B8:0A:45:A1:9F:6F:D2:88:89:DC:0C:F8:15:F9:E2:02:82:D5:EB:F7:B4:EE:64:0D:54:D1"}}},"request":{"raw":"GET /_next/static/chunks/4977-d4ccd9624aa6908b.js HTTP/1.1\r\nHost: lamacosmetics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lamacosmetics.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors 'self' https://merchant.zatiqeasy.com https://staging.protected.zatiqeasy.com https://merchant.stg-7f91c2.zatiqeasy.com https://*.zatiqeasy.com https://*.zatiq.app\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Sun, 11 Oct 2026 00:42:52 GMT\r\netag: W/\"1d94-1a0ab8ac710\"\r\nlast-modified: Wed, 16 Sep 2026 18:46:34 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(self)\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NT6Ae9DCDwGoTHK%2FijT8k7gfUDdy%2BBk09x1iJzzhrnTmUMIdSI0DI8qcK6gG3rE%2FI3V%2FWO%2FYxzedB3%2Bya%2Boc3y96I0UxmNP0e%2F1eyS2qP3ym4oVJUwwLf6oA2I3ugi%2FXK12ZEg%3D%3D\"}]}\r\ncf-ray: a489d3c4ff2d568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7572,"size_decoded":4297,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7572), with no line terminators","md5":"8fe38d11b337c0802e0231c0e1976d02","sha1":"00f4e29401df902b55ac078f7d7bb5f78e5f1dbe","sha256":"2a41187cabd219a92296c83ea5cef6e76c2016b4f1a5f1429c934e6d953847c4","sha512":"79cca7d8eb447eb625630d91ef57dec6553048b24fe683c89131b0b3a72e9286e9830c4d43046371694b561b85ba5bff7592bfd9fe4f84b37adf56ac3a77c32f","ssdeep":"96:2ruE9GCZoRZEC2evKxI8ytKhK5HzOel1s2yNTny4h315feE3gKRjMm6BIQa9Ku:2IVZXLG/hhAhlq2ypnD7jvQar","tlshash":"9ef1f8a630d2f8d4635f54a8807b400ef37e1d27221e4990b396ece579d64d87293fa6","first_seen":"2026-07-13T08:25:47.699371Z","last_seen":"2026-10-11T00:50:07.326391Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1433,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1433,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/_next/static/chunks/app/(shop)/layout-554afc0842167f6b.js","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lamacosmetics.com/","date":"2026-10-11T00:42:51.038Z","timestamp":1791679371038,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lamacosmetics.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 15:42:22 GMT","end":"Mon, 16 Nov 2026 15:42:21 GMT"},"fingerprint":{"sha1":"79:AE:97:83:F1:FB:17:5D:4F:66:66:29:E0:68:9C:14:CD:8B:51:34","sha256":"7D:A3:8F:2D:DC:D1:B8:0A:45:A1:9F:6F:D2:88:89:DC:0C:F8:15:F9:E2:02:82:D5:EB:F7:B4:EE:64:0D:54:D1"}}},"request":{"raw":"GET /_next/static/chunks/app/(shop)/layout-554afc0842167f6b.js HTTP/1.1\r\nHost: lamacosmetics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lamacosmetics.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: zstd\r\ncontent-security-policy: frame-ancestors 'self' https://merchant.zatiqeasy.com https://staging.protected.zatiqeasy.com https://merchant.stg-7f91c2.zatiqeasy.com https://*.zatiqeasy.com https://*.zatiq.app\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Sun, 11 Oct 2026 00:42:52 GMT\r\netag: W/\"163-1a0ab8ac710\"\r\nlast-modified: Wed, 16 Sep 2026 18:46:34 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(self)\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FoLPa5B%2FtGpaLji0pEyJ4XV4zWXytEK%2BFoqKr%2FBg1ACedENRWxC8iOXVyYnACHRbl5Gf%2F59aJzPsVD7qLkWjTw19B6D2VqV5mj8IdC%2BSeQ4RbGH05oUJkInZchN3yZ%2BUmO2X0g%3D%3D\"}]}\r\ncf-ray: a489d3c4ff2e568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":355,"size_decoded":1399,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (355), with no line terminators","md5":"e5121e43a0805320663d278aba0c61d0","sha1":"dc83550c33b27fdf1efbe082a02e191a11e48134","sha256":"f13c385e7c4b6da4b519bf16a79878f109312cabe3bfdb7f10ecd92c31314ef0","sha512":"9b27d91f6edfe3426dc2c9c4260beacf89986a853dd93dca1b7a05c9a222f234c0871553d759800b668f2a35f964f6662261f6e482a3ec38c815f7eb046a3fa6","ssdeep":"","tlshash":"3fe0d896074cf91f2c169e69ffa15dd11806403a342b8fa172149da13533b4cc391c58","first_seen":"2026-07-13T08:25:47.694049Z","last_seen":"2026-10-11T00:50:07.330945Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1381,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1381,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/_next/static/chunks/app/(shop)/page-5e2b174c46842624.js","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lamacosmetics.com/","date":"2026-10-11T00:42:51.049Z","timestamp":1791679371049,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lamacosmetics.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 15:42:22 GMT","end":"Mon, 16 Nov 2026 15:42:21 GMT"},"fingerprint":{"sha1":"79:AE:97:83:F1:FB:17:5D:4F:66:66:29:E0:68:9C:14:CD:8B:51:34","sha256":"7D:A3:8F:2D:DC:D1:B8:0A:45:A1:9F:6F:D2:88:89:DC:0C:F8:15:F9:E2:02:82:D5:EB:F7:B4:EE:64:0D:54:D1"}}},"request":{"raw":"GET /_next/static/chunks/app/(shop)/page-5e2b174c46842624.js HTTP/1.1\r\nHost: lamacosmetics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lamacosmetics.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: zstd\r\ncontent-security-policy: frame-ancestors 'self' https://merchant.zatiqeasy.com https://staging.protected.zatiqeasy.com https://merchant.stg-7f91c2.zatiqeasy.com https://*.zatiqeasy.com https://*.zatiq.app\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Sun, 11 Oct 2026 00:42:51 GMT\r\netag: W/\"d6-1a0ab8ac710\"\r\nlast-modified: Wed, 16 Sep 2026 18:46:34 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(self)\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jYJoLQZ2wdtaoKpUSd8SpOOxD0GNWx9riycFPMcJmyfXUM%2FP3Deu%2Buz%2FbdtnNYrCL5CZrzT4pxsox%2BGMbBE5Ti%2BwB96sndYOz2ZgTgrQl5OQ5rhFYevRBmaEc%2F5K3mESLruBhw%3D%3D\"}]}\r\ncf-ray: a489d3c50f36568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":214,"size_decoded":1352,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"039fab70453cde255cd0bfee64534efa","sha1":"cd8029c9d7754116b53e563848ac2ac695e946a9","sha256":"787179fbeb8011024a821d6641f55345c3ffa137bff4c1a4c9c8f8255c4562ce","sha512":"91cf00d76b91401439f23daa7ac22314c0bfd192edf8c1f29102cc4458a7fff06fa87c3f3df0695e519a440799f3c28d9cabb3676990b00b717c076a9e6b7110","ssdeep":"","tlshash":"d5d023d80685fd69791b019d41bf1e303de4001b342ec2f1f1754cb050757440780d9f","first_seen":"2026-07-13T08:25:47.67041Z","last_seen":"2026-10-11T00:50:07.335263Z","times_seen":2,"resource_available":true,"data":null}},"time_used":623,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":623,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-11T00:42:49.401Z","timestamp":1791679369401,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lamacosmetics.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 15:42:22 GMT","end":"Mon, 16 Nov 2026 15:42:21 GMT"},"fingerprint":{"sha1":"79:AE:97:83:F1:FB:17:5D:4F:66:66:29:E0:68:9C:14:CD:8B:51:34","sha256":"7D:A3:8F:2D:DC:D1:B8:0A:45:A1:9F:6F:D2:88:89:DC:0C:F8:15:F9:E2:02:82:D5:EB:F7:B4:EE:64:0D:54:D1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: lamacosmetics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\npriority: u=0,i\r\ncontent-security-policy: frame-ancestors 'self' https://merchant.zatiqeasy.com https://staging.protected.zatiqeasy.com https://merchant.stg-7f91c2.zatiqeasy.com https://*.zatiqeasy.com https://*.zatiq.app\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sun, 11 Oct 2026 00:42:50 GMT\r\nlink: \u003c/_next/static/media/5924d7180a413da6-s.p.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\", \u003c/_next/static/media/a3a053d5ba3eaf5e-s.p.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\", \u003c/_next/static/media/aaeab2556cf1c8a5-s.p.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\", \u003c/_next/static/media/c9e6921c7fc300d8-s.p.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\", \u003c/_next/static/media/13971731025ec697-s.p.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\"\r\npermissions-policy: camera=(), microphone=(), geolocation=(self)\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-content-type-options: nosniff\r\ncontent-encoding: zstd\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dYr%2F%2B6TISd%2FV4eNvxSyIaDjcF0Cnd%2FQdsumQnHbLv%2Fe3eyHqFVNnI1UDektEjNH7TIYT38byELqLxZDevxqqRMuy%2BHTjvfuhWjXZCFg9JI%2BpDusI29gtSZ%2FC4BpBFu%2Bb1Za6NQ%3D%3D\"}]}\r\ncf-ray: a489d3baee9a568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22343,"size_decoded":8606,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (13969)","md5":"2944a11e72468d1a16aeb11ac3a38a42","sha1":"f1b0f5fd7483737a714c32a73c0d6721884046cb","sha256":"104a38319bb72bfefe9fbc7e538954f0aa72dcc403fc6274bf9ed8f887251f85","sha512":"eb4144be5f351f371335d01236cca1dd88e412fd7cba3a354939c91210b3fdae6a5864ffb428c98ad73b870b61b8d13c621d114f7e66f4909b0985e4ee6fc775","ssdeep":"384:pt4fOhUgOvdqlyweNzK75U6Vlp+6Zp8bUihhM:pt4fOKgOglycDp+6Zp2UihhM","tlshash":"01a2756ab806cd59aca7bd59103ead3d508dc53bc939ccacf2dcce2507429b95b92dc0","first_seen":"2026-10-11T00:50:07.336655Z","last_seen":"2026-10-11T00:50:07.336655Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1621,"timings":{"blocked":-1,"dns":6,"connect":22,"send":0,"wait":1410,"receive":183,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/_next/static/chunks/main-app-83b24b23906acbe3.js","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lamacosmetics.com/","date":"2026-10-11T00:42:51.020Z","timestamp":1791679371020,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lamacosmetics.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 15:42:22 GMT","end":"Mon, 16 Nov 2026 15:42:21 GMT"},"fingerprint":{"sha1":"79:AE:97:83:F1:FB:17:5D:4F:66:66:29:E0:68:9C:14:CD:8B:51:34","sha256":"7D:A3:8F:2D:DC:D1:B8:0A:45:A1:9F:6F:D2:88:89:DC:0C:F8:15:F9:E2:02:82:D5:EB:F7:B4:EE:64:0D:54:D1"}}},"request":{"raw":"GET /_next/static/chunks/main-app-83b24b23906acbe3.js HTTP/1.1\r\nHost: lamacosmetics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lamacosmetics.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors 'self' https://merchant.zatiqeasy.com https://staging.protected.zatiqeasy.com https://merchant.stg-7f91c2.zatiqeasy.com https://*.zatiqeasy.com https://*.zatiq.app\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Sun, 11 Oct 2026 00:42:52 GMT\r\netag: W/\"23d-1a0ab8ac710\"\r\nlast-modified: Wed, 16 Sep 2026 18:46:34 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(self)\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ce0Nf0b4FE4r70VWBmlrDVezBhIDqtfcV%2F6cHAwQ3Dxo5r9vFM6I8kKxdn3x5Z%2FXJ7TWlhCy8i37SKOBsW3sr%2BTayVKm8o3FiHJNoGuYlfqmlU0Ypj3KkidAIvLLT1DEyoWvVg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a489d3c4df1e568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 240\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":573,"size_decoded":1482,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (573), with no line terminators","md5":"e1a88293ae9d50acfda546818e4e7715","sha1":"ae2e8de2fc6b25bdd14355742e0a658af10fcc57","sha256":"e34a6a6fae09bfadaf9bbf980e578f2b13de6248000622b72607ea1c852f6735","sha512":"16e86a612daf8f2973ba823e123adf3fa68456150a81b7337f254bd33ccfe5f48876f51223b7968b2fe8dd2d14285cf8147ebf8b626e9a4daa1cac77f612d467","ssdeep":"","tlshash":"80f0125a4f4cf52f5d22ae74fe97ace2141f4535102b4da07800eeb26c23facd260418","first_seen":"2026-07-13T08:25:47.728268Z","last_seen":"2026-10-11T00:50:07.338439Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1408,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1408,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/_next/static/chunks/7238-c1a7790b43339acd.js","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lamacosmetics.com/","date":"2026-10-11T00:42:51.031Z","timestamp":1791679371031,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lamacosmetics.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 15:42:22 GMT","end":"Mon, 16 Nov 2026 15:42:21 GMT"},"fingerprint":{"sha1":"79:AE:97:83:F1:FB:17:5D:4F:66:66:29:E0:68:9C:14:CD:8B:51:34","sha256":"7D:A3:8F:2D:DC:D1:B8:0A:45:A1:9F:6F:D2:88:89:DC:0C:F8:15:F9:E2:02:82:D5:EB:F7:B4:EE:64:0D:54:D1"}}},"request":{"raw":"GET /_next/static/chunks/7238-c1a7790b43339acd.js HTTP/1.1\r\nHost: lamacosmetics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lamacosmetics.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors 'self' https://merchant.zatiqeasy.com https://staging.protected.zatiqeasy.com https://merchant.stg-7f91c2.zatiqeasy.com https://*.zatiqeasy.com https://*.zatiq.app\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Sun, 11 Oct 2026 00:42:51 GMT\r\netag: W/\"26190-1a0ab8ac710\"\r\nlast-modified: Wed, 16 Sep 2026 18:46:34 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(self)\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HllYlgxZXamGqkuMXX%2BhJKUX4%2BcaQfMSn9h1semIgY5XQqzEuIwUvgXPESW1NZ5tEAd7ws54pz1ZB77RHY0Cccim%2BRzpVSsCeo%2BD5BqSNRWtOeUPzrhAi9V1ZjKYoRLC5SxaYg%3D%3D\"}]}\r\ncf-ray: a489d3c4ef28568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":156048,"size_decoded":58366,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"9353e889854242384dbda809a165f6c6","sha1":"d3e606e012f188d09fe7e46f8a50cb39c3d82c73","sha256":"3882b3e021b2852c30d98c4b842b944fe5296c1c1a380c1a604e54123a59cdb9","sha512":"def7711d7c04517265c93d2dd3c29c0a6c666e2c39616ddf51c36c9cefb3d27ad787489dcf0c3f9d9c969e5c6d9927696295225c6092f8e0bd3c3a897edf2bda","ssdeep":"3072:lc6Vo/kF4RlsrJ64e65nwc0UoIs56DdnXPL4cH0p:l/Vo/NRyrJ6y5nwc0ElDF/L41p","tlshash":"8ce34bc03656b026c3e76191207f7407f27af515848c4c68f254ede9adbce8992aef78","first_seen":"2026-07-13T08:25:47.660833Z","last_seen":"2026-10-11T00:50:07.340525Z","times_seen":2,"resource_available":true,"data":null}},"time_used":792,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":409,"receive":383,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/_next/static/chunks/6937-edea53ec95613c82.js","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lamacosmetics.com/","date":"2026-10-11T00:42:51.033Z","timestamp":1791679371033,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lamacosmetics.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 15:42:22 GMT","end":"Mon, 16 Nov 2026 15:42:21 GMT"},"fingerprint":{"sha1":"79:AE:97:83:F1:FB:17:5D:4F:66:66:29:E0:68:9C:14:CD:8B:51:34","sha256":"7D:A3:8F:2D:DC:D1:B8:0A:45:A1:9F:6F:D2:88:89:DC:0C:F8:15:F9:E2:02:82:D5:EB:F7:B4:EE:64:0D:54:D1"}}},"request":{"raw":"GET /_next/static/chunks/6937-edea53ec95613c82.js HTTP/1.1\r\nHost: lamacosmetics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lamacosmetics.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors 'self' https://merchant.zatiqeasy.com https://staging.protected.zatiqeasy.com https://merchant.stg-7f91c2.zatiqeasy.com https://*.zatiqeasy.com https://*.zatiq.app\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Sun, 11 Oct 2026 00:42:51 GMT\r\netag: W/\"292ec-1a0ab8ac710\"\r\nlast-modified: Wed, 16 Sep 2026 18:46:34 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(self)\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yxWrVET%2FVKhM8ncMwgluVQ93SnNouXeix9P6g1JE49uPTX%2BgmV0fdnSsdNbjlV9NqMktxMxbuSkzeJGyPKjs5%2BZOgtCzdcXPpENZSPTb8DphG2W8pCG1lsFxI%2B0eKQr2T4btiA%3D%3D\"}]}\r\ncf-ray: a489d3c4ff29568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":168684,"size_decoded":44168,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"f8e862cea24cf3f5a29ed78be003dc26","sha1":"05deee409584db5557d4f179d3800451619595ea","sha256":"50a76f645b1a381c0022ff7849a114f63cc52129d5bc7cc08b36e0a4dddd2445","sha512":"549041b6156868bc07a1c90836914bed565ef6e5f1c99a5c65cb866e1c9a595e40164f5b7064f3575416918007648b3e5dd207b77a0e9169a4229873c15eee4d","ssdeep":"3072:W7FeSgALzIzMStlZI32tjmCWVjoyuxnJRELJkbPCecb:W7EWPkI32NmCWVjoyuxnJRELJkbPCecb","tlshash":"10f3579e90541f6cfd3b53ccb14a8a097c261998f0394891ebdf8f4f16c38d86856e6e","first_seen":"2026-07-13T08:25:47.723551Z","last_seen":"2026-10-11T00:50:07.342397Z","times_seen":2,"resource_available":true,"data":null}},"time_used":795,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":414,"receive":381,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/_next/static/chunks/8612-2fefed9193b2dce2.js","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lamacosmetics.com/","date":"2026-10-11T00:42:51.033Z","timestamp":1791679371033,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lamacosmetics.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 15:42:22 GMT","end":"Mon, 16 Nov 2026 15:42:21 GMT"},"fingerprint":{"sha1":"79:AE:97:83:F1:FB:17:5D:4F:66:66:29:E0:68:9C:14:CD:8B:51:34","sha256":"7D:A3:8F:2D:DC:D1:B8:0A:45:A1:9F:6F:D2:88:89:DC:0C:F8:15:F9:E2:02:82:D5:EB:F7:B4:EE:64:0D:54:D1"}}},"request":{"raw":"GET /_next/static/chunks/8612-2fefed9193b2dce2.js HTTP/1.1\r\nHost: lamacosmetics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lamacosmetics.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors 'self' https://merchant.zatiqeasy.com https://staging.protected.zatiqeasy.com https://merchant.stg-7f91c2.zatiqeasy.com https://*.zatiqeasy.com https://*.zatiq.app\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Sun, 11 Oct 2026 00:42:52 GMT\r\netag: W/\"1920-1a0ab8ac710\"\r\nlast-modified: Wed, 16 Sep 2026 18:46:34 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(self)\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IaRE3SMZbql4fHTf3kWCSzEcB0aMb%2BAo%2FN97v4NLYTdgRuWkk7azGui5mj7a6IfeS4AxIxWl8%2FQ2Cvi0noXs8DIgRxRJUNMlqfXOZtkRE2HNBVYGcjTybTcmCSK6bzvbAh1YNQ%3D%3D\"}]}\r\ncf-ray: a489d3c4ff2a568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6432,"size_decoded":4135,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (6406), with no line terminators","md5":"4c09b158ea1fa76e8ff386181fe47222","sha1":"b01e5e57952eec021bdc447e5dfcf0decb68bf7d","sha256":"628e303af7807b874ff1b03df46af960ddb6d8e7e7ff24cf0777bdac33bd3c5e","sha512":"8e83356cbd29864c302969741afd74bdece2a383848cfb78ce0d0bb499cc02c564bce9b0b04165cdf7c85dbf66e92546cabdd4b819c5369b7267f505881f00d3","ssdeep":"96:ijTq1ZDwk/47qlSYjeTVmDMve6WgbislAiroL7s3a6L9nnDK:ijT8NwnaSYyTVKM7isl87ODK","tlshash":"f3d12ac8f4e3f0d043be005555ab6ec5f32e5ea7044ac641e492bd823924d59f275fb8","first_seen":"2026-07-13T08:25:47.663619Z","last_seen":"2026-10-11T00:50:07.344087Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1392,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1392,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/_next/static/media/5924d7180a413da6-s.p.woff2","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lamacosmetics.com/","date":"2026-10-11T00:42:51.002Z","timestamp":1791679371002,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lamacosmetics.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 15:42:22 GMT","end":"Mon, 16 Nov 2026 15:42:21 GMT"},"fingerprint":{"sha1":"79:AE:97:83:F1:FB:17:5D:4F:66:66:29:E0:68:9C:14:CD:8B:51:34","sha256":"7D:A3:8F:2D:DC:D1:B8:0A:45:A1:9F:6F:D2:88:89:DC:0C:F8:15:F9:E2:02:82:D5:EB:F7:B4:EE:64:0D:54:D1"}}},"request":{"raw":"GET /_next/static/media/5924d7180a413da6-s.p.woff2 HTTP/1.1\r\nHost: lamacosmetics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lamacosmetics.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nserver-timing: cfExtPri\r\ncontent-security-policy: frame-ancestors 'self' https://merchant.zatiqeasy.com https://staging.protected.zatiqeasy.com https://merchant.stg-7f91c2.zatiqeasy.com https://*.zatiqeasy.com https://*.zatiq.app\r\ncontent-type: font/woff2\r\ndate: Sun, 11 Oct 2026 00:42:52 GMT\r\netag: W/\"37c0-1a0ab8ac710\"\r\nlast-modified: Wed, 16 Sep 2026 18:46:34 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(self)\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BQLSWWXlzTWeM9pTBjkbgtkKyNPfaTI4O5zqKPrVjGMO%2F%2BBDSDqgRgSRjYE8ufD1sUgBwcsRMiX2RVBtGgt40u1YwP6ZDn7F2YJOoyPXo3t3RnUG%2B4crTz0LEKDhxgjfp7Ij8g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a489d3c4bf12568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14272\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14272,"size_decoded":15426,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14272, version 1.0","md5":"dc6fd559e41d5021de35e485f93be20c","sha1":"9161d93760a9aeb2f07c49b11b7c99703aaad739","sha256":"be9d4883e7f45ed729a83c255d68ea7329fa84fefe84ce44cf1668792a628c3a","sha512":"15774fa5298a94e5c64887201b8e9fdd2052fa87f59828413bb48a1e85761269c216c21c92b7d8cd96e47eec7dcadc60eba694008738dafc04af9b39af08bfca","ssdeep":"384:MyFDNxqLUSfwbRUUehQCpcoVtdGpb8MyVj8tCgKG0:MyFXxSfwbCUeJXspgwrR0","tlshash":"b452d03b1cf9bf71ee60443526cd01b7546095ca9c2c42283189a0daf9bd71e9e5e237","first_seen":"2025-09-27T07:43:29.957455Z","last_seen":"2026-10-11T00:50:07.349004Z","times_seen":161,"resource_available":false,"data":null}},"time_used":1606,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1422,"receive":184,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/_next/static/media/13971731025ec697-s.p.woff2","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lamacosmetics.com/","date":"2026-10-11T00:42:51.008Z","timestamp":1791679371008,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lamacosmetics.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 15:42:22 GMT","end":"Mon, 16 Nov 2026 15:42:21 GMT"},"fingerprint":{"sha1":"79:AE:97:83:F1:FB:17:5D:4F:66:66:29:E0:68:9C:14:CD:8B:51:34","sha256":"7D:A3:8F:2D:DC:D1:B8:0A:45:A1:9F:6F:D2:88:89:DC:0C:F8:15:F9:E2:02:82:D5:EB:F7:B4:EE:64:0D:54:D1"}}},"request":{"raw":"GET /_next/static/media/13971731025ec697-s.p.woff2 HTTP/1.1\r\nHost: lamacosmetics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lamacosmetics.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nserver-timing: cfExtPri\r\ncontent-security-policy: frame-ancestors 'self' https://merchant.zatiqeasy.com https://staging.protected.zatiqeasy.com https://merchant.stg-7f91c2.zatiqeasy.com https://*.zatiqeasy.com https://*.zatiq.app\r\ncontent-type: font/woff2\r\ndate: Sun, 11 Oct 2026 00:42:52 GMT\r\netag: W/\"9074-1a0ab8ac710\"\r\nlast-modified: Wed, 16 Sep 2026 18:46:34 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(self)\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xlHu2ltEn5jpoS4ws9wwsEzHNHG0VgyItoGuWbhGvRWGmopY%2FDG%2FcJuvrgkQ%2FMOMazTfK%2FXkHSrDtwVGRREOsDfiy18hxlgaLndAqwjhf1VATv%2F3lUP1iJdGOcIkN4HfStUlDQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a489d3c4cf16568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 36980\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36980,"size_decoded":38138,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36980, version 1.0","md5":"d4c68940b772538be3593f0c646de4a0","sha1":"780cf59b7711cee0db291f06922ca66b12b65dcf","sha256":"468d56b6b25b05b70190b6c233d773f6f1770e8579827ce022a57f03fa8002fb","sha512":"9ef888244841c65da84ab26fee2d312bf0410e340df78b10f087c00e6f190cf8abd61cb09e5790dfd7270edaac1bbb7f871031b195a7b2363f389b6be0038e89","ssdeep":"768:HLi1ptmFif/WvZWPAD1lDB55/hMWS/CtVkvIP0t8eY:HLktmFif/WYPe1lod6fkvfueY","tlshash":"d1f2f1730f45f63229562eb8fd398b4e772845856ec18ec68d90a8f8f403f646469a09","first_seen":"2025-09-15T08:14:29.049499Z","last_seen":"2026-10-11T00:50:07.351545Z","times_seen":8008,"resource_available":false,"data":null}},"time_used":1575,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1394,"receive":181,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/_next/static/css/40fc525fee84bb2c.css","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lamacosmetics.com/","date":"2026-10-11T00:42:51.012Z","timestamp":1791679371012,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lamacosmetics.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 15:42:22 GMT","end":"Mon, 16 Nov 2026 15:42:21 GMT"},"fingerprint":{"sha1":"79:AE:97:83:F1:FB:17:5D:4F:66:66:29:E0:68:9C:14:CD:8B:51:34","sha256":"7D:A3:8F:2D:DC:D1:B8:0A:45:A1:9F:6F:D2:88:89:DC:0C:F8:15:F9:E2:02:82:D5:EB:F7:B4:EE:64:0D:54:D1"}}},"request":{"raw":"GET /_next/static/css/40fc525fee84bb2c.css HTTP/1.1\r\nHost: lamacosmetics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lamacosmetics.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors 'self' https://merchant.zatiqeasy.com https://staging.protected.zatiqeasy.com https://merchant.stg-7f91c2.zatiqeasy.com https://*.zatiqeasy.com https://*.zatiq.app\r\ncontent-type: text/css; charset=UTF-8\r\ndate: Sun, 11 Oct 2026 00:42:51 GMT\r\netag: W/\"e6c-1a0ab8ac710\"\r\nlast-modified: Wed, 16 Sep 2026 18:46:34 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(self)\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pMv5Q%2BOfo22mrUTEbFSk5mUAA6sDJosfXgNVOg1QAjMKx5C1MHwIAZjxpUZrgfw9ayX7PEv1wmoFFIj2GQzWYwBN1%2BToi326JwMyX3FmdRzaVS0UoJCacSCZRvkMqr4Ywmxv4w%3D%3D\"}]}\r\ncf-ray: a489d3c4cf17568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3692,"size_decoded":2024,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (3692), with no line terminators","md5":"3ec7e44d8cf05fd80a4a811661be2c33","sha1":"407ce814583b0ca62526be726ad5bd74610a99f6","sha256":"b9a7c3f6d002ec9df2004ccbc852828bd580fce5a445eaeb42c11870be1e4215","sha512":"48869618deb44a0e8b37041b56e9cfb31b0e15a53af794d0dca62ee41ceef429a0ae51797a47b448001b47cf01af0ccb2486e079f456b08430d0971961c1c3f8","ssdeep":"","tlshash":"af71ae30841a906ee932bdc731ce3f13153d142596d45922ae6d99a94e9bc6e33b0bec","first_seen":"2026-04-05T07:54:56.165057Z","last_seen":"2026-10-11T00:50:07.35338Z","times_seen":12,"resource_available":true,"data":null}},"time_used":395,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":395,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/_next/static/chunks/4663-9669b3feb799af39.js","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lamacosmetics.com/","date":"2026-10-11T00:42:51.021Z","timestamp":1791679371021,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lamacosmetics.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 15:42:22 GMT","end":"Mon, 16 Nov 2026 15:42:21 GMT"},"fingerprint":{"sha1":"79:AE:97:83:F1:FB:17:5D:4F:66:66:29:E0:68:9C:14:CD:8B:51:34","sha256":"7D:A3:8F:2D:DC:D1:B8:0A:45:A1:9F:6F:D2:88:89:DC:0C:F8:15:F9:E2:02:82:D5:EB:F7:B4:EE:64:0D:54:D1"}}},"request":{"raw":"GET /_next/static/chunks/4663-9669b3feb799af39.js HTTP/1.1\r\nHost: lamacosmetics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lamacosmetics.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors 'self' https://merchant.zatiqeasy.com https://staging.protected.zatiqeasy.com https://merchant.stg-7f91c2.zatiqeasy.com https://*.zatiqeasy.com https://*.zatiq.app\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Sun, 11 Oct 2026 00:42:51 GMT\r\netag: W/\"651d-1a0ab8ac710\"\r\nlast-modified: Wed, 16 Sep 2026 18:46:34 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(self)\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AgVykQoOipaoFchqNeAun2hqT0qmhoDb79jSpu1ZVQDlrBm4D9MXOKSlXCdPgoF3oNgLR1yZkIAT7J%2FpgTKIKNgR3uy6uT5LfLYTp0kqoTbkM%2FmYOLp7Y2o2W1fCKwlPxumA6g%3D%3D\"}]}\r\ncf-ray: a489d3c4df1f568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25885,"size_decoded":10179,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (25885), with no line terminators","md5":"f1a21b8b24e44d85310cfcd9eafb2ad3","sha1":"77196e0bf8ad73dd59b7501f3ea4b3e95761d325","sha256":"d0cf7caa54d8cbeacd48f7139ead22ac11786a56d9542b7ac2fc4fe4aaca5e20","sha512":"000082e59e5699e6847e1a8bc52f9ecffcd8855e595010c6137d379db3e41f5bd035d767285ca0a8dda684996c251e2fb8b2dd0aa03f59d1b87da2485c5a1b4c","ssdeep":"768:qjwH1s5drK0SI4coM8cPud5ORD/F62nOX:qJ5zjpoM8cPud5Oh/A2nOX","tlshash":"9ec2f9863252b0604bc68a95c4ff4206f23c6994241b082cf3b56deb75a19cdb6f7f39","first_seen":"2026-07-13T08:25:47.697451Z","last_seen":"2026-10-11T00:50:07.358278Z","times_seen":2,"resource_available":true,"data":null}},"time_used":395,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":395,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/_next/static/chunks/2119-6453f91fd9ba4737.js","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lamacosmetics.com/","date":"2026-10-11T00:42:51.045Z","timestamp":1791679371045,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lamacosmetics.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 15:42:22 GMT","end":"Mon, 16 Nov 2026 15:42:21 GMT"},"fingerprint":{"sha1":"79:AE:97:83:F1:FB:17:5D:4F:66:66:29:E0:68:9C:14:CD:8B:51:34","sha256":"7D:A3:8F:2D:DC:D1:B8:0A:45:A1:9F:6F:D2:88:89:DC:0C:F8:15:F9:E2:02:82:D5:EB:F7:B4:EE:64:0D:54:D1"}}},"request":{"raw":"GET /_next/static/chunks/2119-6453f91fd9ba4737.js HTTP/1.1\r\nHost: lamacosmetics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lamacosmetics.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors 'self' https://merchant.zatiqeasy.com https://staging.protected.zatiqeasy.com https://merchant.stg-7f91c2.zatiqeasy.com https://*.zatiqeasy.com https://*.zatiq.app\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Sun, 11 Oct 2026 00:42:51 GMT\r\netag: W/\"2ec2-1a0ab8ac710\"\r\nlast-modified: Wed, 16 Sep 2026 18:46:34 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(self)\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8NVoQwyIRWZf7Q6rN3WYVakkmrj5IZOVBFlVdS5FAnIdOu0pFfKddie3YYVKpBsoPBJ0LEPEEi%2Bl4B5mRtpqgddGMu866WEnUfFJJIt2fncRdzy4kAcXAuSF3KE7%2FTej1mcMvw%3D%3D\"}]}\r\ncf-ray: a489d3c50f34568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11970,"size_decoded":4964,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (11970), with no line terminators","md5":"11d8a1c7db152897a5c2c578d16171f1","sha1":"e3c6b3ddffe55f8f2721e90b9392dabbc2bf92ae","sha256":"1d5970876c0be3bd43d75ea3d23a82af60d8d4f258d89c76c8cc3d8e975b85bb","sha512":"83fd845704ca22390725a5fa00fc6414905b421d7e288741f38ea10f6c8eb2f115430a57756b3d8be61e3843398356e7b9bb50dfb41d1eeeeede7bc39644b19b","ssdeep":"192:qYzJZ2EPyQqR5ULY6+RgdFgpdaWvSsGXpiplSGYSsGsrX80Q61KkXGVKIWw5m:Xzn6RR20QdOaufCSSGYf/rsH60kXGUI0","tlshash":"a432c688d361eeac909745c9569ed90df03f6c88f73a8ca87678dc02168d4d43a8b7e5","first_seen":"2026-07-13T08:25:47.705645Z","last_seen":"2026-10-11T00:50:07.359943Z","times_seen":2,"resource_available":true,"data":null}},"time_used":384,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":384,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/page.png","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://lamacosmetics.com/","date":"2026-10-11T00:42:51.691Z","timestamp":1791679371691,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lamacosmetics.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 15:42:22 GMT","end":"Mon, 16 Nov 2026 15:42:21 GMT"},"fingerprint":{"sha1":"79:AE:97:83:F1:FB:17:5D:4F:66:66:29:E0:68:9C:14:CD:8B:51:34","sha256":"7D:A3:8F:2D:DC:D1:B8:0A:45:A1:9F:6F:D2:88:89:DC:0C:F8:15:F9:E2:02:82:D5:EB:F7:B4:EE:64:0D:54:D1"}}},"request":{"raw":"GET /page.png HTTP/1.1\r\nHost: lamacosmetics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lamacosmetics.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nserver-timing: cfExtPri\r\ncontent-security-policy: frame-ancestors 'self' https://merchant.zatiqeasy.com https://staging.protected.zatiqeasy.com https://merchant.stg-7f91c2.zatiqeasy.com https://*.zatiqeasy.com https://*.zatiq.app\r\ncontent-type: image/png\r\ndate: Sun, 11 Oct 2026 00:42:52 GMT\r\netag: W/\"d315-1a0ab875058\"\r\nlast-modified: Wed, 16 Sep 2026 18:42:47 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(self)\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=20H31Qf%2B8AAlLgrKyvAum%2FJ5cupx5oyt4Ad6eE7kt6FK6ot1eMpWOVaDkT2td244Q%2Bkf7zFBz%2Fz%2B0gBVDrp3JR0QeHw5CakVFJs268SoHG%2F8SyDOO11QReBqvNP2KTbqCKYHmQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a489d3c90f67568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 54037\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54037,"size_decoded":55179,"mime_type":"image/png","magic":"PNG image data, 1860 x 252, 8-bit/color RGBA, non-interlaced","md5":"e4257183e9d24e67b39b96c29a39d17c","sha1":"67f52893315866fab41962f8933ef1ef0fad02cf","sha256":"13f1e08484098b4ebc3cf4897407c0ca2525d73b004ed118499bf372fe363a50","sha512":"59e04b54b3d6be5b83bdbe65c3b31afaca95bbccaa962f3997b43dfa78a4a75a2d63119b41e13683762942bcea3bd2643a9c1b9b85c998d2e8f516f9638946de","ssdeep":"1536:GhULVwHyiMI5fyn1zrszqM9X/tkkDCefFI:ZVwHDb5wXPLHkO","tlshash":"00330282067bdc6bdf6ff23e2ee35b4d050651e0124e1a353759205ced06a2bd896f0d","first_seen":"2025-01-05T09:47:26.279755Z","last_seen":"2026-10-11T00:50:07.361384Z","times_seen":4,"resource_available":false,"data":null}},"time_used":764,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":399,"receive":365,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/_next/static/media/aaeab2556cf1c8a5-s.p.woff2","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lamacosmetics.com/","date":"2026-10-11T00:42:51.005Z","timestamp":1791679371005,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lamacosmetics.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 15:42:22 GMT","end":"Mon, 16 Nov 2026 15:42:21 GMT"},"fingerprint":{"sha1":"79:AE:97:83:F1:FB:17:5D:4F:66:66:29:E0:68:9C:14:CD:8B:51:34","sha256":"7D:A3:8F:2D:DC:D1:B8:0A:45:A1:9F:6F:D2:88:89:DC:0C:F8:15:F9:E2:02:82:D5:EB:F7:B4:EE:64:0D:54:D1"}}},"request":{"raw":"GET /_next/static/media/aaeab2556cf1c8a5-s.p.woff2 HTTP/1.1\r\nHost: lamacosmetics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lamacosmetics.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nserver-timing: cfExtPri\r\ncontent-security-policy: frame-ancestors 'self' https://merchant.zatiqeasy.com https://staging.protected.zatiqeasy.com https://merchant.stg-7f91c2.zatiqeasy.com https://*.zatiqeasy.com https://*.zatiq.app\r\ncontent-type: font/woff2\r\ndate: Sun, 11 Oct 2026 00:42:52 GMT\r\netag: W/\"6434-1a0ab8ac710\"\r\nlast-modified: Wed, 16 Sep 2026 18:46:34 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(self)\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2OsJWFtGZDk1dMBV1uqpN%2Fpe2LKYESLqHnB%2Bu%2BwF5i47C2M8OGlNVfhelyFG7unNZuq3vfIE7AC61gq2CeB9pHM9SmKeBQ5uRIcK7kamSsjeTvMKUrRdbb6r%2F1fWqHJWgmeGnQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a489d3c4cf14568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 25652\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25652,"size_decoded":26808,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25652, version 1.0","md5":"89ed132378bc626b0eda45b9a2f47c32","sha1":"9a579ec41551c52a5cf82d2b3dc8fddcf39fcbef","sha256":"58c6bc805295744df0cf1c11a2fab1f9aabc5edeabfd0cb32a5705e19967f006","sha512":"9873e7e05909b125714088baf417e1cc19ade1760aa10addf7ca9fef779e5b8cea8c5f8a4b7263de2034f6bfe90598f1b3defae204a0a7e637934df94f1c8178","ssdeep":"768:zMDSQqZ0m75POI9JLL1sgxyTNOvvPXvGlILfu6:gqqyPrJLL1pc0PfGgu6","tlshash":"c1b202385ed73280090b54fd9f6abc776b238e075190ca3211a37a3876e78d96cd438b","first_seen":"2026-02-23T16:09:35.293045Z","last_seen":"2026-10-11T00:50:07.370989Z","times_seen":49,"resource_available":false,"data":null}},"time_used":1621,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1431,"receive":190,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/_next/static/chunks/webpack-32ca18bdb57c5e60.js","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lamacosmetics.com/","date":"2026-10-11T00:42:51.016Z","timestamp":1791679371016,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lamacosmetics.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 15:42:22 GMT","end":"Mon, 16 Nov 2026 15:42:21 GMT"},"fingerprint":{"sha1":"79:AE:97:83:F1:FB:17:5D:4F:66:66:29:E0:68:9C:14:CD:8B:51:34","sha256":"7D:A3:8F:2D:DC:D1:B8:0A:45:A1:9F:6F:D2:88:89:DC:0C:F8:15:F9:E2:02:82:D5:EB:F7:B4:EE:64:0D:54:D1"}}},"request":{"raw":"GET /_next/static/chunks/webpack-32ca18bdb57c5e60.js HTTP/1.1\r\nHost: lamacosmetics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lamacosmetics.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors 'self' https://merchant.zatiqeasy.com https://staging.protected.zatiqeasy.com https://merchant.stg-7f91c2.zatiqeasy.com https://*.zatiqeasy.com https://*.zatiq.app\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Sun, 11 Oct 2026 00:42:51 GMT\r\netag: W/\"25a2-1a0ab8ac710\"\r\nlast-modified: Wed, 16 Sep 2026 18:46:34 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(self)\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K9%2BpH1hTHOptTqE0YQA95eOrQF3w9cqDqibI126BoQvLm986kIUMu2OavgORHg06QK17JUCFE3RKLA3mSczld%2F3tkYKpNznAFSLnT6gLnpq9NDlMezwfRWezpBBPyxqha0Pk%2Fw%3D%3D\"}]}\r\ncf-ray: a489d3c4df1a568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9634,"size_decoded":6163,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (9634), with no line terminators","md5":"efb9184b9dea3b65b5a9ec2ddde4daa7","sha1":"dc34a9796d18803f6ab4dfd71c00e094261f8b03","sha256":"f1c0c7cb82b593730535626f74f8aba0614b4a42e2f1e67047d90e4528024327","sha512":"b57b09ea4298cb5d56c0ea671c57186569546f2ef51c42b25b15b3b26e7324823b73decd2aa4b66245934a95ed64af861f60b480861caadccff066185f01b6b2","ssdeep":"192:yqgvVuKABgjajjpH2KFZ2kPQ2V3sU3TDNqvD3kNNrZAIcywL8C5R:yz/sHRZzPQfgTDNMorZAjy48Cr","tlshash":"7e122b5b7314f5522e758a448c1ba1e6f61ca533302c88e0d39ded7934a4eda136ae33","first_seen":"2026-10-11T00:50:07.37596Z","last_seen":"2026-10-11T00:50:07.37596Z","times_seen":1,"resource_available":true,"data":null}},"time_used":403,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":403,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/_next/static/chunks/7429-1c97e2ad3dbea8d5.js","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lamacosmetics.com/","date":"2026-10-11T00:42:51.022Z","timestamp":1791679371022,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lamacosmetics.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 15:42:22 GMT","end":"Mon, 16 Nov 2026 15:42:21 GMT"},"fingerprint":{"sha1":"79:AE:97:83:F1:FB:17:5D:4F:66:66:29:E0:68:9C:14:CD:8B:51:34","sha256":"7D:A3:8F:2D:DC:D1:B8:0A:45:A1:9F:6F:D2:88:89:DC:0C:F8:15:F9:E2:02:82:D5:EB:F7:B4:EE:64:0D:54:D1"}}},"request":{"raw":"GET /_next/static/chunks/7429-1c97e2ad3dbea8d5.js HTTP/1.1\r\nHost: lamacosmetics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lamacosmetics.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors 'self' https://merchant.zatiqeasy.com https://staging.protected.zatiqeasy.com https://merchant.stg-7f91c2.zatiqeasy.com https://*.zatiqeasy.com https://*.zatiq.app\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Sun, 11 Oct 2026 00:42:51 GMT\r\netag: W/\"3138-1a0ab8ac710\"\r\nlast-modified: Wed, 16 Sep 2026 18:46:34 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(self)\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5V%2F4JNR3Ug0xMkSvnzVOTDQIrkztCbE%2FxgrRUoHfNF3fpYKvjeh7Gj2UgQdvOtOaONO%2BnSm7YMZlSBq4LCNQzaord8KJRym6w7ZktFylJG63UdGZE%2F5BfQKP4ThebRv%2BszHeRQ%3D%3D\"}]}\r\ncf-ray: a489d3c4df20568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12600,"size_decoded":5924,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (12596), with no line terminators","md5":"6b6142e98b39a4dd2f87fcace2b0809c","sha1":"980758eb3169263dad986607c589282784ae372a","sha256":"99186e776e81c1ff3b5ba903cd609361cfe5ca526b8ef96f5e4c86cd11f5a0ed","sha512":"19e94b389a9fd6dd6ab38c12882ac63171802b5203309eb0c2d610bea495b6a2a9fba8456955ae402847686dff6c7729d5cf278737ce221cc3bfe5c7ea9bd34a","ssdeep":"192:AzulIP7iRl3SLLfyqgdi7I71S+p25KDDG0bx2yxAkqC+y1f2DWfjF9g2h:A6lIPPyqL7IBSA28fG0bxFWk1Df","tlshash":"dc42d96a7161a21b6ed380815c2e4125e2646d143406942dbea87de3f1a6ccef5fff34","first_seen":"2026-07-13T08:25:47.722658Z","last_seen":"2026-10-11T00:50:07.378429Z","times_seen":2,"resource_available":true,"data":null}},"time_used":398,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":398,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/_next/static/chunks/5412-d656e30852360889.js","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lamacosmetics.com/","date":"2026-10-11T00:42:51.036Z","timestamp":1791679371036,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lamacosmetics.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 15:42:22 GMT","end":"Mon, 16 Nov 2026 15:42:21 GMT"},"fingerprint":{"sha1":"79:AE:97:83:F1:FB:17:5D:4F:66:66:29:E0:68:9C:14:CD:8B:51:34","sha256":"7D:A3:8F:2D:DC:D1:B8:0A:45:A1:9F:6F:D2:88:89:DC:0C:F8:15:F9:E2:02:82:D5:EB:F7:B4:EE:64:0D:54:D1"}}},"request":{"raw":"GET /_next/static/chunks/5412-d656e30852360889.js HTTP/1.1\r\nHost: lamacosmetics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lamacosmetics.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors 'self' https://merchant.zatiqeasy.com https://staging.protected.zatiqeasy.com https://merchant.stg-7f91c2.zatiqeasy.com https://*.zatiqeasy.com https://*.zatiq.app\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Sun, 11 Oct 2026 00:42:51 GMT\r\netag: W/\"4f4d-1a0ab8ac710\"\r\nlast-modified: Wed, 16 Sep 2026 18:46:34 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(self)\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=haLjrJDTTXaaExX8%2B2oSLkJGe9ssMbyPwjzFKSd1R%2BZNIcciGR3ub66aBsjE7CDu0a7Zyi6xXy5Hi%2Fo6IbSRisYhij%2FTjoET6zKmZTDwLfXKYXKHXY6NKMxyXSM7oHIh37iA3A%3D%3D\"}]}\r\ncf-ray: a489d3c4ff2c568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20301,"size_decoded":7210,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (20301), with no line terminators","md5":"5d6e2b790ba5e033a748c8e6a9c19320","sha1":"5795a46b0be5011f3d38f868803b769ff7193421","sha256":"5eef87251c11cb01b0185eb9ad518f1556fa85ad5ec3f8774c90ed8325ae6e56","sha512":"0edc4e880a2d8127eef1c8f98b9942a0db980351b1bcfbd66140fb629fe777872547fe4fa0932e4b5153f18ac13a360c4108d08b7c58fb9ded3baa7d8a3abf46","ssdeep":"384:8BjdLFaUundBOMXXXlceosjrs5NGTZ/6g+QzwUVHlsF2tNNT1vzz72J:8piFceFoKQgvzbFsET1rz72J","tlshash":"3192a58ed430fe59f8b50c58b62b4c1eb37eab1e0909c465f96e6e8a17005cc7252fb5","first_seen":"2026-07-13T08:25:47.730158Z","last_seen":"2026-10-11T00:50:07.381202Z","times_seen":2,"resource_available":true,"data":null}},"time_used":403,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":403,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/_next/static/chunks/e217e3ef-59a5a4e080c2035b.js","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lamacosmetics.com/","date":"2026-10-11T00:42:51.039Z","timestamp":1791679371039,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lamacosmetics.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 15:42:22 GMT","end":"Mon, 16 Nov 2026 15:42:21 GMT"},"fingerprint":{"sha1":"79:AE:97:83:F1:FB:17:5D:4F:66:66:29:E0:68:9C:14:CD:8B:51:34","sha256":"7D:A3:8F:2D:DC:D1:B8:0A:45:A1:9F:6F:D2:88:89:DC:0C:F8:15:F9:E2:02:82:D5:EB:F7:B4:EE:64:0D:54:D1"}}},"request":{"raw":"GET /_next/static/chunks/e217e3ef-59a5a4e080c2035b.js HTTP/1.1\r\nHost: lamacosmetics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lamacosmetics.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors 'self' https://merchant.zatiqeasy.com https://staging.protected.zatiqeasy.com https://merchant.stg-7f91c2.zatiqeasy.com https://*.zatiqeasy.com https://*.zatiq.app\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Sun, 11 Oct 2026 00:42:51 GMT\r\netag: W/\"7d51f-1a0ab8ac710\"\r\nlast-modified: Wed, 16 Sep 2026 18:46:34 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(self)\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kagH%2BjJ0XZj15ArD2zSElobmgZnvA40WE1mpQs2rOE8hBflZYw3d4sc28%2FwHu%2BZlnluzHTsBVkOpgiTgRKZf3%2F9ULpD9Ymgcui0ZR7D8JL57O2tkSZ9%2Fxkw5JEGb4r%2FRZ8bmyA%3D%3D\"}]}\r\ncf-ray: a489d3c4ff2f568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":513311,"size_decoded":157573,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (34724)","md5":"fe989e53d9b0ba71b65e34e23cdf4de6","sha1":"eae1b5d4acf578b7863405d4e3092027bb1035c1","sha256":"f4d376a2d69b4c8f9901c4fcab99de6501028b768e95e8dcc81f61f99bb37961","sha512":"b5d4e415389622cafbb68d70c90a2be0efc866f54af2e1ed515004645de984004a07d3888465d23bc3c620251495ce72cce2bc3033a19acd2255bf191af1d5d6","ssdeep":"6144:7h3ScIxAaLj/ruxGHt+3S+RqnaGuW/gNb2oieNs7UP6wov35wAxDY9g0LtBR9:3aAWjiWtP+FW4b2oDuwAxEtd","tlshash":"53b44cfa33a6a42783d8914b94758612b33cbd4e1808812cfa7efddb2955d45b0b6f70","first_seen":"2026-07-13T08:25:47.724539Z","last_seen":"2026-10-11T00:50:07.382646Z","times_seen":2,"resource_available":true,"data":null}},"time_used":962,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":400,"receive":562,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/_next/static/chunks/3911-e942afd961120b84.js","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lamacosmetics.com/","date":"2026-10-11T00:42:51.044Z","timestamp":1791679371044,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lamacosmetics.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 15:42:22 GMT","end":"Mon, 16 Nov 2026 15:42:21 GMT"},"fingerprint":{"sha1":"79:AE:97:83:F1:FB:17:5D:4F:66:66:29:E0:68:9C:14:CD:8B:51:34","sha256":"7D:A3:8F:2D:DC:D1:B8:0A:45:A1:9F:6F:D2:88:89:DC:0C:F8:15:F9:E2:02:82:D5:EB:F7:B4:EE:64:0D:54:D1"}}},"request":{"raw":"GET /_next/static/chunks/3911-e942afd961120b84.js HTTP/1.1\r\nHost: lamacosmetics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lamacosmetics.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors 'self' https://merchant.zatiqeasy.com https://staging.protected.zatiqeasy.com https://merchant.stg-7f91c2.zatiqeasy.com https://*.zatiqeasy.com https://*.zatiq.app\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Sun, 11 Oct 2026 00:42:52 GMT\r\netag: W/\"132c7-1a0ab8ac710\"\r\nlast-modified: Wed, 16 Sep 2026 18:46:34 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(self)\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yhuu1AZezMxx9InjqOhlh52weDgKAQEwOvSYvtL1Q6ob1EjPPyDX7Jk5GU%2FbjL%2BS7nciCVH%2BksR1lfnLDbrFL%2F%2BBQ3Ob395n5RXTzyc62Zp%2B72BuX%2B9uP89S874stjRNxEh80g%3D%3D\"}]}\r\ncf-ray: a489d3c50f33568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":78535,"size_decoded":16247,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"762408f1ea7b8520c5d2a1e9f6891139","sha1":"aaa3659482f03463993f9de2c14cf1fbe09b9904","sha256":"12624c7fa9c6fd2b4093f0ca5d52e16fd8444303746d7d3e4b6d7a5d224530f1","sha512":"f6c5f9f168c17743381e4b050c8ae5ac5afa2d35a93adaebdcecf308abd311115f032ba5998e84d2d0529ed48f0d896f6a40ea1ef26f4f3f29131b6db5fe79b5","ssdeep":"1536:ixYl0BCuTdIy5SOBsmPKLBAOSOSrQY+K8u8GS9j6PIafXDqcpwSbSrDddPD+59li:ixYlCCupdSKsmCLBTSfrQY+K8uzSMPIL","tlshash":"2a73b745e225af9de5e74494a99fd44cf03e1f80ea1a8ebcb2b8a41126c70cc77437d9","first_seen":"2026-10-11T00:50:07.387153Z","last_seen":"2026-10-11T00:50:07.387153Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1573,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1387,"receive":186,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/_next/static/chunks/9236-4fc3a4dec2178b0b.js","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lamacosmetics.com/","date":"2026-10-11T00:42:51.040Z","timestamp":1791679371040,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lamacosmetics.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 15:42:22 GMT","end":"Mon, 16 Nov 2026 15:42:21 GMT"},"fingerprint":{"sha1":"79:AE:97:83:F1:FB:17:5D:4F:66:66:29:E0:68:9C:14:CD:8B:51:34","sha256":"7D:A3:8F:2D:DC:D1:B8:0A:45:A1:9F:6F:D2:88:89:DC:0C:F8:15:F9:E2:02:82:D5:EB:F7:B4:EE:64:0D:54:D1"}}},"request":{"raw":"GET /_next/static/chunks/9236-4fc3a4dec2178b0b.js HTTP/1.1\r\nHost: lamacosmetics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lamacosmetics.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors 'self' https://merchant.zatiqeasy.com https://staging.protected.zatiqeasy.com https://merchant.stg-7f91c2.zatiqeasy.com https://*.zatiqeasy.com https://*.zatiq.app\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Sun, 11 Oct 2026 00:42:51 GMT\r\netag: W/\"15349-1a0ab8ac710\"\r\nlast-modified: Wed, 16 Sep 2026 18:46:34 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(self)\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4AYWcpypwZhJ%2F9MIDWVkAbdF7a58e%2FrchSQYCRwBT5l73M5PpiiwvqgYMVFXYdQS3kKlOM%2BBjj0As1TaeNAFGW%2BBqfKsdApNRfEAUvKE84FlNMZc2K3RD1FIjxZ36RBZrQBuZg%3D%3D\"}]}\r\ncf-ray: a489d3c4ff30568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":86857,"size_decoded":26852,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"9a11e9cb0351fdb82b95531f55643880","sha1":"e0d1651c9c009461716e5ced539c7e57b61369b3","sha256":"f0f9567a4c4fe8190cbc049c81d5e9aae9338c00060957794a4d8c5d24ee829e","sha512":"ddec78e431df75e19dad0d08a113168902ad9151d736ceabead0084bdaa6ffed86e9be4f7c95ec33c406cb197756845722f4be609ca16b41ac1998bc382511e8","ssdeep":"1536:zXfb8njE42rqr8TgBlxvHa8fkIJ4n3PvIFND0tnw4Z4XiA6w1+S/6ch:zXfZvN3P6Dot8h/64","tlshash":"dc831a89a220757692eb524b93a5c111b3f59845b448847cb1f98ceb58bcd9c03feff8","first_seen":"2026-07-13T08:25:47.694953Z","last_seen":"2026-10-11T00:50:07.39175Z","times_seen":2,"resource_available":true,"data":null}},"time_used":571,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":389,"receive":182,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/_next/static/chunks/483-a8ad61604e0696d9.js","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lamacosmetics.com/","date":"2026-10-11T00:42:51.043Z","timestamp":1791679371043,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lamacosmetics.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 15:42:22 GMT","end":"Mon, 16 Nov 2026 15:42:21 GMT"},"fingerprint":{"sha1":"79:AE:97:83:F1:FB:17:5D:4F:66:66:29:E0:68:9C:14:CD:8B:51:34","sha256":"7D:A3:8F:2D:DC:D1:B8:0A:45:A1:9F:6F:D2:88:89:DC:0C:F8:15:F9:E2:02:82:D5:EB:F7:B4:EE:64:0D:54:D1"}}},"request":{"raw":"GET /_next/static/chunks/483-a8ad61604e0696d9.js HTTP/1.1\r\nHost: lamacosmetics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lamacosmetics.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors 'self' https://merchant.zatiqeasy.com https://staging.protected.zatiqeasy.com https://merchant.stg-7f91c2.zatiqeasy.com https://*.zatiqeasy.com https://*.zatiq.app\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Sun, 11 Oct 2026 00:42:51 GMT\r\netag: W/\"1ca2-1a0ab8ac710\"\r\nlast-modified: Wed, 16 Sep 2026 18:46:34 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(self)\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JHlJjYUnXDdSNBm0MEk2SarCwm3X9WW0rV7DJLjjeDUGw8j5N4cbu5c7jbU7WprPB8hSiSa45ZZYvhjR4FROjznQXI4fLYxFMTK2C2KgYmfIhkq9ZValN6hq1nwq%2Bo17sPdeOQ%3D%3D\"}]}\r\ncf-ray: a489d3c50f32568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7330,"size_decoded":3963,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7330), with no line terminators","md5":"59f13dbbf4c10168f23c124755993b8e","sha1":"ac6b795610933945d69bfc22478972b183a39638","sha256":"e174ff6b6be495c6acae88af2c66f8b4281506dd281dc37b8a0bb598717dd5c8","sha512":"84acf483d2a15ee2c09c6e3cbd603dfccbd4a379e9cc55b0aed3efe31d32198328e97fecc4f8c578943656f2a25d0ff1b377150dd46160911127a091077c0005","ssdeep":"96:Qw00d8w260QHVWV2P0jfdxbQH2WVhWV2BWVH/JKxMgI0KexnV+Het1VRII82AN9J:Qda70Q5PCdxbgrAZgTjLtnb8jT0jJop","tlshash":"8fe1e8666053768cb56f495411bfd20cb26f2b84a70e4ff871bea4713340c94b253be2","first_seen":"2026-07-13T08:25:47.669453Z","last_seen":"2026-10-11T00:50:07.398402Z","times_seen":2,"resource_available":true,"data":null}},"time_used":392,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":392,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/_next/static/css/5c4826c56b72a529.css","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lamacosmetics.com/","date":"2026-10-11T00:42:51.051Z","timestamp":1791679371051,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lamacosmetics.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 15:42:22 GMT","end":"Mon, 16 Nov 2026 15:42:21 GMT"},"fingerprint":{"sha1":"79:AE:97:83:F1:FB:17:5D:4F:66:66:29:E0:68:9C:14:CD:8B:51:34","sha256":"7D:A3:8F:2D:DC:D1:B8:0A:45:A1:9F:6F:D2:88:89:DC:0C:F8:15:F9:E2:02:82:D5:EB:F7:B4:EE:64:0D:54:D1"}}},"request":{"raw":"GET /_next/static/css/5c4826c56b72a529.css HTTP/1.1\r\nHost: lamacosmetics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lamacosmetics.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=0,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: zstd\r\ncontent-security-policy: frame-ancestors 'self' https://merchant.zatiqeasy.com https://staging.protected.zatiqeasy.com https://merchant.stg-7f91c2.zatiqeasy.com https://*.zatiqeasy.com https://*.zatiq.app\r\ncontent-type: text/css; charset=UTF-8\r\ndate: Sun, 11 Oct 2026 00:42:52 GMT\r\netag: W/\"145-1a0ab8ac710\"\r\nlast-modified: Wed, 16 Sep 2026 18:46:34 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(self)\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EAncbJH4CSU%2FnhCYfHovMWF8lUDZ1qfCK9xWy6LVUOmAPik5BlB4M4s8EvYyoDJJ8YD8BNYL4voOg9ay7doGBxE43nPSstd3UFQkxh%2BR7vdcu55OmQmO4ZvnplJmmBBnLakRqQ%3D%3D\"}]}\r\ncf-ray: a489d3c50f39568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":325,"size_decoded":1300,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (325), with no line terminators","md5":"c6e11d44aff1861a7dd723bdc36a4e47","sha1":"27c1094a72698486c66a50aed1a3c2bee12b7774","sha256":"89e7b8e26c51ec4c7f256ced3ba231556f320179b5e0bc64fa596986998a83cd","sha512":"fece1b3e2d2753d6db2dd220f8e2ec673804baf90ed46b464a522eb2a7394def6f8f8911f28781f316a6c2b15264e3e6cfd8c51557b345599d40a3276ee39d13","ssdeep":"","tlshash":"54e012045f805ca3442e0f029da1d1b54df260d12d7b01b127d5ed59efb10f6303e2ca","first_seen":"2023-09-25T16:07:01Z","last_seen":"2026-10-11T00:50:07.402658Z","times_seen":919,"resource_available":true,"data":null}},"time_used":1388,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1388,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/_next/static/chunks/7471-126ce139292f0269.js","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lamacosmetics.com/","date":"2026-10-11T00:42:51.023Z","timestamp":1791679371023,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lamacosmetics.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 15:42:22 GMT","end":"Mon, 16 Nov 2026 15:42:21 GMT"},"fingerprint":{"sha1":"79:AE:97:83:F1:FB:17:5D:4F:66:66:29:E0:68:9C:14:CD:8B:51:34","sha256":"7D:A3:8F:2D:DC:D1:B8:0A:45:A1:9F:6F:D2:88:89:DC:0C:F8:15:F9:E2:02:82:D5:EB:F7:B4:EE:64:0D:54:D1"}}},"request":{"raw":"GET /_next/static/chunks/7471-126ce139292f0269.js HTTP/1.1\r\nHost: lamacosmetics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lamacosmetics.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors 'self' https://merchant.zatiqeasy.com https://staging.protected.zatiqeasy.com https://merchant.stg-7f91c2.zatiqeasy.com https://*.zatiqeasy.com https://*.zatiq.app\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Sun, 11 Oct 2026 00:42:51 GMT\r\netag: W/\"6f23-1a0ab8ac710\"\r\nlast-modified: Wed, 16 Sep 2026 18:46:34 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(self)\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sqZBYo8Pqg64E83I5qFBqKW8ABi4gGbTZtJCqj9ZqkSCNAF7gZW4hJxLJcedSnF%2FVbrHumwvvDJAtO7lYtB4WAp9J5or5K68A3y%2Fsjrt7JzFZjaEP4jIYn6UbCEgDElzN2vKuw%3D%3D\"}]}\r\ncf-ray: a489d3c4ef21568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28451,"size_decoded":9853,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (28451), with no line terminators","md5":"3469fffb9e982615a225ccb0b01649dd","sha1":"24d45c2d59b7d6d6cb95e3442209d9690f79bdb9","sha256":"b491375be8c0afc6f51e71022f9ba4ecf9727f3940ca4a3c6f9b53dfbd99e8ad","sha512":"f2547f77653ef80c9618d3fdb4d9a622d73d692c57f6d93ccc67c5c951eb9fabc4d3378a988ea7a741d38865b1806dab1867b584e41e77d7c915c07e82231197","ssdeep":"384:LdhqMsTi355zZ9kpx3SkWVWF5sVsAHgH72JR8DS27Si0qyJ2L9xmZMtn:LfqMsTi3LS3S1WPsVsAHgHiJ8WZMZ","tlshash":"0bd2978d7389b035536f34b4847f644fe137a901289e90a0e591e8e4acbd75dc22bfad","first_seen":"2026-07-13T08:25:47.7292Z","last_seen":"2026-10-11T00:50:07.406746Z","times_seen":2,"resource_available":true,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/_next/static/chunks/app/error-7607054d8be731c6.js","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lamacosmetics.com/","date":"2026-10-11T00:42:51.029Z","timestamp":1791679371029,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lamacosmetics.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 15:42:22 GMT","end":"Mon, 16 Nov 2026 15:42:21 GMT"},"fingerprint":{"sha1":"79:AE:97:83:F1:FB:17:5D:4F:66:66:29:E0:68:9C:14:CD:8B:51:34","sha256":"7D:A3:8F:2D:DC:D1:B8:0A:45:A1:9F:6F:D2:88:89:DC:0C:F8:15:F9:E2:02:82:D5:EB:F7:B4:EE:64:0D:54:D1"}}},"request":{"raw":"GET /_next/static/chunks/app/error-7607054d8be731c6.js HTTP/1.1\r\nHost: lamacosmetics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lamacosmetics.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors 'self' https://merchant.zatiqeasy.com https://staging.protected.zatiqeasy.com https://merchant.stg-7f91c2.zatiqeasy.com https://*.zatiqeasy.com https://*.zatiq.app\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Sun, 11 Oct 2026 00:42:52 GMT\r\netag: W/\"f5f-1a0ab8ac710\"\r\nlast-modified: Wed, 16 Sep 2026 18:46:34 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(self)\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HxNYzcdFsOD74zc3mX9tSLTiQcXpyTccyDXsIwgxZdRdDQGUZ7s04mSFT0o7ifIyRmQFON42CwQ9ix%2BQ4xGXk3PN9ITgyemTjf1E9O8YB7TdC97gsLbhUJJYtl9RTPMVN%2B3EVA%3D%3D\"}]}\r\ncf-ray: a489d3c4ef25568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3935,"size_decoded":2622,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3935), with no line terminators","md5":"e214f4695ce099eda94338f0cdfd0467","sha1":"01ec475ee378713a73bd8795467b4783b2460981","sha256":"a52ca4afdbabed1b40f3f597ee84a0b4ae89355eabf31c7ca65f51e8629363e8","sha512":"7171de4cf1bae38fd2adb966b5372ea5896db2545281e615da0ce5e7fae6b16ca860d5b07439282e65a4d13ff02e7368d7afe5e19f1c831de8bc95fb9dc3efe2","ssdeep":"","tlshash":"5d812345b255aefcb82b4dec617e602db03b4a91ea1f48f4f5ac6c31154a0987b137d8","first_seen":"2026-07-13T08:25:47.698316Z","last_seen":"2026-10-11T00:50:07.410534Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1416,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1414,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/_next/static/chunks/5965-c7e5481bb0082aac.js","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lamacosmetics.com/","date":"2026-10-11T00:42:51.035Z","timestamp":1791679371035,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lamacosmetics.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 15:42:22 GMT","end":"Mon, 16 Nov 2026 15:42:21 GMT"},"fingerprint":{"sha1":"79:AE:97:83:F1:FB:17:5D:4F:66:66:29:E0:68:9C:14:CD:8B:51:34","sha256":"7D:A3:8F:2D:DC:D1:B8:0A:45:A1:9F:6F:D2:88:89:DC:0C:F8:15:F9:E2:02:82:D5:EB:F7:B4:EE:64:0D:54:D1"}}},"request":{"raw":"GET /_next/static/chunks/5965-c7e5481bb0082aac.js HTTP/1.1\r\nHost: lamacosmetics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lamacosmetics.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors 'self' https://merchant.zatiqeasy.com https://staging.protected.zatiqeasy.com https://merchant.stg-7f91c2.zatiqeasy.com https://*.zatiqeasy.com https://*.zatiq.app\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Sun, 11 Oct 2026 00:42:52 GMT\r\netag: W/\"10e6e-1a0ab8ac710\"\r\nlast-modified: Wed, 16 Sep 2026 18:46:34 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(self)\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xUfk6xd9%2BFARJSr636eR7aUCp1RZ6SV0VU5b1K%2BtAd5zPXkxLDzHhZD1iQD4TCmEWaB6qYmjlOjoBhW%2FjZFgLHau38YJ401GMpYTnBCI3o30WG4C1s4JbyysiH9eAkqLj2qB%2BA%3D%3D\"}]}\r\ncf-ray: a489d3c4ff2b568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":69230,"size_decoded":22266,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65532), with no line terminators","md5":"98905c90a04529b2c8f604762ba00e65","sha1":"4f264bd22ddc644ec32328491d5b6b22cfcb3abe","sha256":"a0a8dffb3143e1e9e7be24879c0f6b5b7e2ba02b561fb288c23190437b521491","sha512":"acdf3614d52515f41b4b9ffebb631f52245e0f06c66179ad447e1a6b533c3fcb47acb3075ab88ad6451628229f9c7d38c65584ca2360a556cda2e425ea0fb12d","ssdeep":"1536:cIa8aPw9Mkjtn8eE+iNHa2I6Asv1XRNZEHEjOhHTNZ1qqeL8d:cInL9Mkjtn8eE+kHTbv1XRNIEjOhHTNV","tlshash":"05630beeee78f4a093fd98b5941f0952f31c6b07140588a1e1635e0d3748e8eb2e6b75","first_seen":"2026-10-11T00:50:07.412525Z","last_seen":"2026-10-11T00:50:07.412525Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1623,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1429,"receive":194,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/_next/static/chunks/9068-5f6341d3a68721ba.js","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lamacosmetics.com/","date":"2026-10-11T00:42:51.042Z","timestamp":1791679371042,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lamacosmetics.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 15:42:22 GMT","end":"Mon, 16 Nov 2026 15:42:21 GMT"},"fingerprint":{"sha1":"79:AE:97:83:F1:FB:17:5D:4F:66:66:29:E0:68:9C:14:CD:8B:51:34","sha256":"7D:A3:8F:2D:DC:D1:B8:0A:45:A1:9F:6F:D2:88:89:DC:0C:F8:15:F9:E2:02:82:D5:EB:F7:B4:EE:64:0D:54:D1"}}},"request":{"raw":"GET /_next/static/chunks/9068-5f6341d3a68721ba.js HTTP/1.1\r\nHost: lamacosmetics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lamacosmetics.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors 'self' https://merchant.zatiqeasy.com https://staging.protected.zatiqeasy.com https://merchant.stg-7f91c2.zatiqeasy.com https://*.zatiqeasy.com https://*.zatiq.app\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Sun, 11 Oct 2026 00:42:51 GMT\r\netag: W/\"61712-1a0ab8ac710\"\r\nlast-modified: Wed, 16 Sep 2026 18:46:34 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(self)\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4SVOuQlCKyvPiqsQKt5XMpDMZ8RRboNVKf7cS7wg651h72ZQbYsr3BK0h7GXjqTig8CpW%2FiVbUTBBl0p4PeINwuEMqsgZpFBy08AZznZr%2BTtNoQkKlRNPMAY%2BUyEQjGYBd44wQ%3D%3D\"}]}\r\ncf-ray: a489d3c4ff31568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":399122,"size_decoded":107671,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"9beb067c1697ed4c8cce6343c7a728b2","sha1":"5bfee8c67357bde62822ab32e2e69ebcdb6cdd96","sha256":"4353dd3dd81386ccaf1b6258e2bf5c8f026b8472ac5a180da3f5ce7d2d89de9a","sha512":"274aa9b6da79b865970f2aa3d95097d92415d0a034b8520a187518baac5608d090962ebd13cf0cbd982cfe7a62912bee02b2657a7b15fd13a47af1900ceae153","ssdeep":"3072:G95jyGNccWv5bAI6yy0LCnrRMw1injU3scg24F0Ud743VApd9cCP3YCQB6mA1nHL:gZ12PS6xsFdc8QK3tHS","tlshash":"508466af8f8a168e5912e28c1e0bb0418eed53bd338a4812f44fa573c741597eda3f55","first_seen":"2026-07-13T08:25:47.65105Z","last_seen":"2026-10-11T00:50:07.41454Z","times_seen":2,"resource_available":true,"data":null}},"time_used":953,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":393,"receive":560,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/_next/static/css/3cd83cfe34ca397f.css","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lamacosmetics.com/","date":"2026-10-11T00:42:51.050Z","timestamp":1791679371050,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lamacosmetics.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 15:42:22 GMT","end":"Mon, 16 Nov 2026 15:42:21 GMT"},"fingerprint":{"sha1":"79:AE:97:83:F1:FB:17:5D:4F:66:66:29:E0:68:9C:14:CD:8B:51:34","sha256":"7D:A3:8F:2D:DC:D1:B8:0A:45:A1:9F:6F:D2:88:89:DC:0C:F8:15:F9:E2:02:82:D5:EB:F7:B4:EE:64:0D:54:D1"}}},"request":{"raw":"GET /_next/static/css/3cd83cfe34ca397f.css HTTP/1.1\r\nHost: lamacosmetics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lamacosmetics.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors 'self' https://merchant.zatiqeasy.com https://staging.protected.zatiqeasy.com https://merchant.stg-7f91c2.zatiqeasy.com https://*.zatiqeasy.com https://*.zatiq.app\r\ncontent-type: text/css; charset=UTF-8\r\ndate: Sun, 11 Oct 2026 00:42:51 GMT\r\netag: W/\"1929-1a0ab8ac710\"\r\nlast-modified: Wed, 16 Sep 2026 18:46:34 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(self)\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\npriority: u=0,i=?0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VJCRAEVAVdrseKQnYWRWUYxuoeY%2Bm4hzmE9zMkV6aVS5irkd6MPyJLXH6axEj05ontjUtQbWgEjEJHu7a6hZ0FNCfy0hWSC2LmtPLmaZtmFGfzbEiDxC22WTkn9vPUSmx0brvA%3D%3D\"}]}\r\ncf-ray: a489d3c50f38568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6441,"size_decoded":4031,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (6441), with no line terminators","md5":"aee5b4deb5948fcad3f9d117b1b80bde","sha1":"865ee0641a57422e7279f209ae607246e577af17","sha256":"11f47f69d58ae08ad2e3691400092bd1fb32e1695bd7abd4cb8fc40047a900bb","sha512":"8cbc1108a7038cb1cd6f5046b4353798bc66b007c0b46e297c5f162c50788d25065ad33025ca253f750b92a51d1d08da4ef41577e71ff8ee7db7993519f8c035","ssdeep":"96:PB5mSJ+MbpDAKneQYXzJToiR5dKSme+jeHoaapU3Eyw06:3mUJbiKneTJTLdKSme+jeHoo6","tlshash":"91d1b730a3145c2361274f295744e6f86ea484338ba38519f6856e3cdffd8f5125eb92","first_seen":"2025-05-08T10:08:16.650261Z","last_seen":"2026-10-11T00:50:07.416984Z","times_seen":338,"resource_available":true,"data":null}},"time_used":394,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":394,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lamacosmetics.com/","date":"2026-10-11T00:42:51.052Z","timestamp":1791679371052,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lamacosmetics.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 15:42:22 GMT","end":"Mon, 16 Nov 2026 15:42:21 GMT"},"fingerprint":{"sha1":"79:AE:97:83:F1:FB:17:5D:4F:66:66:29:E0:68:9C:14:CD:8B:51:34","sha256":"7D:A3:8F:2D:DC:D1:B8:0A:45:A1:9F:6F:D2:88:89:DC:0C:F8:15:F9:E2:02:82:D5:EB:F7:B4:EE:64:0D:54:D1"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: lamacosmetics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lamacosmetics.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Tue, 13 Oct 2026 00:42:51 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m8NzUzb6wYY23bErpwwwuyHI1zyr%2Bvk%2F9TSILTUvzHd%2BZ4Y9Xp7AKJhLsenFUovi9OGntozAH%2B5TXcHjScbu0y4lYxC5mu6vcZ84zzE%2Fe23kKvzC2%2FcYwbDnKfnQo8I1l1N8cg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Sun, 11 Oct 2026 00:42:51 GMT\r\nserver: cloudflare\r\ncf-ray: a489d3c50f3a568a-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1302,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-10-11T03:43:27.329361Z","times_seen":451111,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.zatiqeasy.com/shops/3189067345759225.png","fqdn":"assets.zatiqeasy.com","domain":"zatiqeasy.com","tld":"com"},"ip":{"addr":"172.67.142.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lamacosmetics.com/","date":"2026-10-11T00:42:53.107Z","timestamp":1791679373107,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"b895247e.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 15:36:35 GMT","end":"Thu, 26 Nov 2026 16:36:29 GMT"},"fingerprint":{"sha1":"55:5F:EC:5E:CD:FA:95:B5:4C:37:CC:01:80:F5:86:62:2A:91:68:E3","sha256":"C2:4E:E9:AA:A1:51:3C:EB:72:8A:F6:5F:FF:F5:85:8C:EE:8D:4F:DE:8C:D0:B7:4F:59:59:6F:87:51:10:A7:AA"}}},"request":{"raw":"GET /shops/3189067345759225.png HTTP/1.1\r\nHost: assets.zatiqeasy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lamacosmetics.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 00:42:53 GMT\r\ncontent-type: image/png\r\ncontent-length: 114232\r\naccept-ranges: bytes\r\netag: \"33fa78c05dd6c7f4bcd2c9535e8eee61\"\r\nlast-modified: Tue, 10 Mar 2026 17:42:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FzISYWYXrDHZ%2BpHlbsxDZikhd1VAKMP7J%2FFOBpV7SH0WbrUkZgNNxnDXQrf12320e8ojLbzey%2Be2n3hvdMRtKpCAoM69pzwvjMpHAU%2FZET6pYuH%2FA2YTM60ElPfrpXXohXjVyo9fzw%3D%3D\"}]}\r\ncf-ray: a489d3d22c540daa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":114232,"size_decoded":114874,"mime_type":"image/png","magic":"PNG image data, 2828 x 1885, 8-bit/color RGBA, non-interlaced","md5":"33fa78c05dd6c7f4bcd2c9535e8eee61","sha1":"d4294ccc5375564b81f2faf37d4babfec729ea13","sha256":"02b848606c57144167408b5076af1a47eacc4c94a3de900fdeabd69580a5908a","sha512":"71e2184771730f2a245c551846e627cbeae0265dd4f946f785322ea3ac326115de36a31454e27b3e87dba25c52a337a16aa649424e4a386eae4aedea13ec1465","ssdeep":"1536:LCkYrrKeqikw6MrMkE435qKIhoMyoRUN83FWi8Y19pK2LimNSY6cWb3ir2xHsMW:6rKOkw9Z8XySUi919U50SHRb5xHsMW","tlshash":"66b3f1565c158c48fd9d8a33c8de1998a39b35c60420232b06fac2f73d6a3bceb95859","first_seen":"2026-10-11T00:50:07.419484Z","last_seen":"2026-10-11T00:50:07.419484Z","times_seen":1,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":-1,"dns":30,"connect":9,"send":0,"wait":271,"receive":3,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/_next/static/media/c9e6921c7fc300d8-s.p.woff2","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lamacosmetics.com/","date":"2026-10-11T00:42:51.006Z","timestamp":1791679371006,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lamacosmetics.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 15:42:22 GMT","end":"Mon, 16 Nov 2026 15:42:21 GMT"},"fingerprint":{"sha1":"79:AE:97:83:F1:FB:17:5D:4F:66:66:29:E0:68:9C:14:CD:8B:51:34","sha256":"7D:A3:8F:2D:DC:D1:B8:0A:45:A1:9F:6F:D2:88:89:DC:0C:F8:15:F9:E2:02:82:D5:EB:F7:B4:EE:64:0D:54:D1"}}},"request":{"raw":"GET /_next/static/media/c9e6921c7fc300d8-s.p.woff2 HTTP/1.1\r\nHost: lamacosmetics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lamacosmetics.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nserver-timing: cfExtPri\r\ncontent-security-policy: frame-ancestors 'self' https://merchant.zatiqeasy.com https://staging.protected.zatiqeasy.com https://merchant.stg-7f91c2.zatiqeasy.com https://*.zatiqeasy.com https://*.zatiq.app\r\ncontent-type: font/woff2\r\ndate: Sun, 11 Oct 2026 00:42:52 GMT\r\netag: W/\"c55c-1a0ab8ac710\"\r\nlast-modified: Wed, 16 Sep 2026 18:46:34 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(self)\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rNJSPrJIyWz4cVtqVrQsJ2TYVgv4%2FlrT3%2F%2BQZqN48F%2BbduaICET56uWZMEcsEJrodr2xq0VNJC9hF4Wlb%2FpJ272laKW7Z%2FNjdilZbq8wOIceC%2BernEkktb1GmzdJcGDO9fvpng%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a489d3c4cf15568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 50524\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":50524,"size_decoded":51686,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 50524, version 1.0","md5":"4890688e64367257c794ab3ad38ce580","sha1":"37354b7587aaaa0d38d27e1b2f608d5559cbc2b7","sha256":"72cd8f67849cc714f3364eeeb378df9a49f4aff00e6a3640fad36c9c93a9b197","sha512":"8264c58d0d4fa187a5c5ef9f19cb7999c2bd0d2e8ea92f621b545c8582c541f11061f0559f6a3420190711779639855bb2f6843a44af7dd44437fca2c6fc608b","ssdeep":"768:XY+4R8nxUvkqJnQHFMPOKsrB9Pd3jdegruIc1tX8suHRd0bShIZMcmlJ/ghBlbJO:I/KnEF0MPOTjZjdegrbGx7sJ/gbl8","tlshash":"823302d1e88207b1bc85a321af50b9f4f3dfd3552ce099758262efc1b112a954ce768b","first_seen":"2025-09-11T22:43:23.196881Z","last_seen":"2026-10-11T00:50:07.42162Z","times_seen":1642,"resource_available":false,"data":null}},"time_used":1790,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1419,"receive":371,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/_next/static/css/b5580e2abdb755cc.css","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lamacosmetics.com/","date":"2026-10-11T00:42:51.013Z","timestamp":1791679371013,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lamacosmetics.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 15:42:22 GMT","end":"Mon, 16 Nov 2026 15:42:21 GMT"},"fingerprint":{"sha1":"79:AE:97:83:F1:FB:17:5D:4F:66:66:29:E0:68:9C:14:CD:8B:51:34","sha256":"7D:A3:8F:2D:DC:D1:B8:0A:45:A1:9F:6F:D2:88:89:DC:0C:F8:15:F9:E2:02:82:D5:EB:F7:B4:EE:64:0D:54:D1"}}},"request":{"raw":"GET /_next/static/css/b5580e2abdb755cc.css HTTP/1.1\r\nHost: lamacosmetics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lamacosmetics.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors 'self' https://merchant.zatiqeasy.com https://staging.protected.zatiqeasy.com https://merchant.stg-7f91c2.zatiqeasy.com https://*.zatiqeasy.com https://*.zatiq.app\r\ncontent-type: text/css; charset=UTF-8\r\ndate: Sun, 11 Oct 2026 00:42:51 GMT\r\netag: W/\"38763-1a0ab8ac710\"\r\nlast-modified: Wed, 16 Sep 2026 18:46:34 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(self)\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ubCP53PgdIM7o0BxnTMfRMDsjcDTWvapj2W5yfw1BR6vaxV8ZTNET3gu68bQbMzYG%2BDbY4O7%2FG8RqhqHYS6QNDKG2XzIjDfFzDd2hH%2BHe82uCvumDavUvujV%2FZCjYJkqDjbPEQ%3D%3D\"}]}\r\ncf-ray: a489d3c4cf18568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":231267,"size_decoded":34221,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"17c3b31c4a2f25f04d5638bcf3d31fdc","sha1":"a63d00daf6c33395b0fb35fe73f72c59209720db","sha256":"2c3ed7585eedfa9684552f4bd9323a35a0a895b17d4f2f8d0993db2f6c49f2ca","sha512":"979262d8d876f3da5ea13abbec89adcb6961658100e39d3d8b86182494d418760f97d74a05da7995607a57b76ebc9a64610ec144c89f19b2228f63ee78a80041","ssdeep":"6144:NYyJP3uzP0m8Pc8ewPJkVwJxBBvnyj+IBfZAVNImJqGClZS86vo5U4vWSaa:eaVNIxvWSv","tlshash":"1d3462f4a2b9e43ffc33b0e9d39ce41c9518b196dd261aedb901611623d77f28c16a24","first_seen":"2026-10-11T00:50:07.422932Z","last_seen":"2026-10-11T00:50:07.422932Z","times_seen":1,"resource_available":true,"data":null}},"time_used":600,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":411,"receive":189,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/_next/static/css/964745cad08d99f4.css","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lamacosmetics.com/","date":"2026-10-11T00:42:51.014Z","timestamp":1791679371014,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lamacosmetics.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 15:42:22 GMT","end":"Mon, 16 Nov 2026 15:42:21 GMT"},"fingerprint":{"sha1":"79:AE:97:83:F1:FB:17:5D:4F:66:66:29:E0:68:9C:14:CD:8B:51:34","sha256":"7D:A3:8F:2D:DC:D1:B8:0A:45:A1:9F:6F:D2:88:89:DC:0C:F8:15:F9:E2:02:82:D5:EB:F7:B4:EE:64:0D:54:D1"}}},"request":{"raw":"GET /_next/static/css/964745cad08d99f4.css HTTP/1.1\r\nHost: lamacosmetics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lamacosmetics.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors 'self' https://merchant.zatiqeasy.com https://staging.protected.zatiqeasy.com https://merchant.stg-7f91c2.zatiqeasy.com https://*.zatiqeasy.com https://*.zatiq.app\r\ncontent-type: text/css; charset=UTF-8\r\ndate: Sun, 11 Oct 2026 00:42:51 GMT\r\netag: W/\"112a-1a0ab8ac710\"\r\nlast-modified: Wed, 16 Sep 2026 18:46:34 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(self)\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nHFBUD1G49oGG41xP4oRrCGeisfxDw5WLuZDuAl%2FxifGmrKN3vNjLXnr89008CxS2r8uCfAM1hOdTZcircSyAT4nxQYnXIbO5OKAyYLF0cQWw7zcLMs90%2BSR4vuuFqtNsvburw%3D%3D\"}]}\r\ncf-ray: a489d3c4df19568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4394,"size_decoded":2156,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (4394), with no line terminators","md5":"6552b49d4fe86324e441d76268f981cd","sha1":"b340747444b4e6bcde49f208d82cf6a06e72b030","sha256":"525c2c8d097cb38737e40538b6142f488f115f55162a1509e98e9c3787efbcd3","sha512":"80328641e7d2083471bb4d670455127ebcca28f8a1d8b61bfca590ec72211d33a87224039542bed8d999d4bd8ae09a37be33a1693ca63722fc4deb16b755ae66","ssdeep":"96:ADpyVH4VCS/Rl5GBqRxjnKnDH4vrPXH4vrTpqp0Qx:AwVYVCS//5AqxjnADYvrfYvrkhx","tlshash":"2491cf35401a954dd563bcc231ce7f532c2a142959d88562ea2d09ea8efbcbb7390f7c","first_seen":"2026-04-05T07:54:56.113482Z","last_seen":"2026-10-11T00:50:07.424245Z","times_seen":12,"resource_available":true,"data":null}},"time_used":399,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":399,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lamacosmetics.com/_next/static/chunks/d1e54ecc-ff3d1e2bf307393d.js","fqdn":"lamacosmetics.com","domain":"lamacosmetics.com","tld":"com"},"ip":{"addr":"172.67.211.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lamacosmetics.com/","date":"2026-10-11T00:42:51.017Z","timestamp":1791679371017,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lamacosmetics.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 15:42:22 GMT","end":"Mon, 16 Nov 2026 15:42:21 GMT"},"fingerprint":{"sha1":"79:AE:97:83:F1:FB:17:5D:4F:66:66:29:E0:68:9C:14:CD:8B:51:34","sha256":"7D:A3:8F:2D:DC:D1:B8:0A:45:A1:9F:6F:D2:88:89:DC:0C:F8:15:F9:E2:02:82:D5:EB:F7:B4:EE:64:0D:54:D1"}}},"request":{"raw":"GET /_next/static/chunks/d1e54ecc-ff3d1e2bf307393d.js HTTP/1.1\r\nHost: lamacosmetics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lamacosmetics.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-security-policy: frame-ancestors 'self' https://merchant.zatiqeasy.com https://staging.protected.zatiqeasy.com https://merchant.stg-7f91c2.zatiqeasy.com https://*.zatiqeasy.com https://*.zatiq.app\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Sun, 11 Oct 2026 00:42:51 GMT\r\netag: W/\"2a3e1-1a0ab8ac710\"\r\nlast-modified: Wed, 16 Sep 2026 18:46:34 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(self)\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kgMSt7dy5j6Jp9SmTTS5kGXFGHbKw5Vf4CLIbY8p4ZYP%2BnJMKUhFNkQox8NnppCdrry5colg40IxSMUZFv7h7OiOrmG07ktfpOZwfJd5khTBArKDEHO3zmd3Xnpz1tNa005g5A%3D%3D\"}]}\r\ncf-ray: a489d3c4df1c568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":173025,"size_decoded":55571,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"645ca289c473f1980551e29b8bc7ad94","sha1":"f4509058d9c0a89d27a6d4623789347c3de22623","sha256":"ab93bf7cbea0bdb7cd233a13a29d5b9d60f0eb6ebe756d4227183997cc014fe1","sha512":"3d909da22210752ac1fbba86df34d05d56732c396645e4f5b91f35d7fc4aa441db13d4f5b618a72f8700752e9f93d233a272f92b158760efc7cdb633c1e1565e","ssdeep":"1536:sWET9Lwegcl2MywYleojBFOQLfioEV7hNc7lFlgXGhJx4bzZc5zg5tgW/zAe6c0:g9LwzMyh1vLEE7RgXOQ5SIA1","tlshash":"0df3f8ec3999e611aeb342a700df28037378261b240d4d60a614fd9ea57845bb17bfde","first_seen":"2026-07-13T08:25:47.718941Z","last_seen":"2026-10-11T00:50:07.425447Z","times_seen":2,"resource_available":true,"data":null}},"time_used":769,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":404,"receive":365,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lamacosmetics.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}