Report - dcshop.us/panel/m_banks?Brute_Logs?eastwest

Report Overview

Submitted URL
dcshop.us/panel/m_banks?Brute_Logs?eastwest_bank/
IP
185.178.208.144
ASN
#57724 Ddos-Guard Ltd
Submitted
2024-07-27 05:12:35
Access
public
Website Title
DOC-SHOP | Sign in
Final URL
dcshop.us/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
site-assets.fontawesome.com	299062	2012-10-18	2022-02-10	2024-07-26	974 B	171 kB	172.64.147.188
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-07-26	441 B	12 kB	142.250.74.106
r10.o.lencr.org	unknown	2020-06-29	2024-06-06	2024-07-26	1.6 kB	4.4 kB	23.33.119.57
cdnjs.cloudflare.com	235	2009-02-17	2015-04-17	2024-07-26	435 B	3.8 kB	104.17.25.14
dcshop.us	unknown	2022-01-21	2022-04-22	2022-05-14	7.7 kB	1.6 MB	185.178.208.144
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-07-26	1.6 kB	143 kB	142.250.74.67

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

Scan Date	Severity	Indicator	Alert
2024-07-27	medium	dcshop.us/	Detects hex encoded code that has been base64 encoded

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (11)

	URL	Size	First Seen	Last Seen
	dcshop.us/	777 B	2023-06-30T03:16:46Z	2024-08-29T18:02:03.161975Z
Pretty URL dcshop.us/ IP 185.178.208.144 ASN #57724 Ddos-Guard Ltd Introduced by scriptElement Embedded in HTML true Observations First Seen2023-06-30T03:16:46Z Last Seen2024-08-29T18:02:03.161975Z Times Seen147 Hash 2c612aab91668de1663b81933ffded2f a08df3954cdd0da12baab024a6cb8c12a0bc9f01 f67370a55b410ea04dc304c19ccfe069fca20f052b31c67f8677eaca43a14865 Loading...

	dcshop.us/frontend/js/scripts.js	241 kB	2023-06-30T03:16:46Z	2024-08-29T18:02:03.150077Z
Pretty URL dcshop.us/frontend/js/scripts.js IP 185.178.208.144 ASN #57724 Ddos-Guard Ltd Introduced by scriptElement Embedded in HTML false Observations First Seen2023-06-30T03:16:46Z Last Seen2024-08-29T18:02:03.150077Z Times Seen147 Hash 2c3b9bc9c1501adc7ea547d8584eb84d 9598b32c395b4e9eb527e878a1dec054e7d2ef66 ea7e1e6fdde7f920bbf0d6175026f2f704cd9f4fd2b7b7a3687cbe1d9ac15749 Loading...

	dcshop.us/	55 kB	2023-12-04T10:01:18Z	2024-08-29T18:02:03.162595Z
Pretty URL dcshop.us/ IP 185.178.208.144 ASN #57724 Ddos-Guard Ltd Introduced by scriptElement Embedded in HTML true Observations First Seen2023-12-04T10:01:18Z Last Seen2024-08-29T18:02:03.162595Z Times Seen147 Hash ee45e0a7cf9977dfe6f667b10071735a 102b222b56583c97a1dd8efa2835565b5fc1a44e 7734c258ec72429d8fd354505ab48ef25bc3f9a0d7e8735f0c1b6941d86c00c7 Loading...

	dcshop.us/frontend/js/plugins.js	3.8 MB	2023-06-30T03:16:46Z	2024-08-29T18:02:03.150585Z
Pretty URL dcshop.us/frontend/js/plugins.js IP 185.178.208.144 ASN #57724 Ddos-Guard Ltd Introduced by scriptElement Embedded in HTML false Observations First Seen2023-06-30T03:16:46Z Last Seen2024-08-29T18:02:03.150585Z Times Seen147 Hash 8e0861726db4f8117b260adfaba7d083 ba2ec4443a3206849c809ef8488a042f560d1e55 fb2112b2e399ba06f149f937c47de5cbb2da4191775dc4e1800570434972d064 Loading...

	dcshop.us/	964 B	2023-06-30T03:16:46Z	2024-08-29T18:02:03.163192Z
Pretty URL dcshop.us/ IP 185.178.208.144 ASN #57724 Ddos-Guard Ltd Introduced by scriptElement Embedded in HTML true Observations First Seen2023-06-30T03:16:46Z Last Seen2024-08-29T18:02:03.163192Z Times Seen156 Hash 61b177f531079bb093d55e74207c5c93 6b91c5695284a30a76d0320e7167d375dfbbeaf7 a8b448fd07ed852dbbf34eb7d9549505c3ff78e996756cb3d8139621e9f88e28 Loading...

	cdnjs.cloudflare.com/ajax/libs/clipboard.js/2.0.10/clipboard.min.js	9.0 kB	2023-03-07T12:41:35Z	2024-10-18T01:09:13.606151Z
Pretty URL cdnjs.cloudflare.com/ajax/libs/clipboard.js/2.0.10/clipboard.min.js IP 104.17.25.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07T12:41:35Z Last Seen2024-10-18T01:09:13.606151Z Times Seen542 Hash ad98572d415d2f2452845a6068a913c0 6674f81dd01c76be986cf0a8172d1073e56d7ef4 baff7541be9c20f7f977f6993ce39cfa937a7bde69db6e7beebb8f68372682a1 Loading...

	dcshop.us/	20 B	2023-06-30T03:16:46Z	2024-08-29T18:02:03.163772Z
Pretty URL dcshop.us/ IP 185.178.208.144 ASN #57724 Ddos-Guard Ltd Introduced by scriptElement Embedded in HTML true Observations First Seen2023-06-30T03:16:46Z Last Seen2024-08-29T18:02:03.163772Z Times Seen156 Hash a41c812412e06b2b59f9b6a795229228 1c30aa81d03e0cc0a412e9237e015fd95460d63c 32317d565f77f4e5596a27f05975e76c0851f0b49c7a45f085649873145bd47d Loading...

		Size	First Seen	Last Seen
	#1 Eval - 11cfed14ce5f261b3d4bb832b38b1b1c	627 B	2023-06-30T03:16:47Z	2024-08-29T18:02:03.1668Z
Pretty Observations First Seen2023-06-30T03:16:47Z Last Seen2024-08-29T18:02:03.1668Z Times Seen149 Hash 11cfed14ce5f261b3d4bb832b38b1b1c 318fe251520aaa1ce526852a4c3dd102251eb607 e951422e3766a6ca3c502efa4923b42cc88a8c4c14e891eb0701280bd46592e7 Loading...

	#2 Eval - 460c4fddbd1fc74793bf40c145372ac0	41 kB	2023-12-04T10:01:19Z	2024-08-29T18:02:03.166163Z
Pretty Observations First Seen2023-12-04T10:01:19Z Last Seen2024-08-29T18:02:03.166163Z Times Seen135 Hash 460c4fddbd1fc74793bf40c145372ac0 fc8bf7aad378abec9fcf3bfb4483a9a3c560fee5 be486bf99a1d9a80f26b0cfe337f6177b90031821be645c42deba92914310e40 Loading...

	#3 Eval - 31f7aad8099fbc80c5799bbd5edf7d1a	700 B	2023-06-30T03:16:47Z	2024-08-29T18:02:03.165568Z
Pretty Observations First Seen2023-06-30T03:16:47Z Last Seen2024-08-29T18:02:03.165568Z Times Seen153 Hash 31f7aad8099fbc80c5799bbd5edf7d1a ca82082fb9680d8325ac61204f6ede5f91c20952 ef8adacb5c551c020d77ced8833899c2d5069642d95d1de798de3ff00c8f6122 Loading...

	#4 Eval - 815f9ae6b813a7f3ce6b40c78f54ea8c	67 B	2023-06-30T03:16:46Z	2024-08-29T18:02:03.164363Z
Pretty Observations First Seen2023-06-30T03:16:46Z Last Seen2024-08-29T18:02:03.164363Z Times Seen150 Hash 815f9ae6b813a7f3ce6b40c78f54ea8c 48c84440ceb468b9aec10cb9a0de3ac8d595a144 605dd11c1489a3b8ef6ac3e7a5d466493072a96378810fa75208471bcaa95a89 Loading...

HTTP Transactions (26)

URL IP Response Size

r10.o.lencr.org/

23.33.119.57

504 B

URL
r10.o.lencr.org/
IP
23.33.119.57:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
8f4e7b75de1ed909fa79bbcdafccceac
274c1ea75520a0ea06e19a7e692c034baae2cdc1
62cc974e51b62480f576b53853f8f24bfc873687c02bc23c1713956d4b96c0b1

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "62CC974E51B62480F576B53853F8F24BFC873687C02BC23C1713956D4B96C0B1"
Last-Modified: Wed, 24 Jul 2024 18:58:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7278
Expires: Sat, 27 Jul 2024 07:13:25 GMT
Date: Sat, 27 Jul 2024 05:12:07 GMT
Connection: keep-alive

r10.o.lencr.org/

23.33.119.27

504 B

URL
r10.o.lencr.org/
IP
23.33.119.27:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
730c6945f15daff31735507460a1ef7b
77fccc4e1bd156532fbf9c06b29f2d3eb6b19dbb
68be6b2e2d186307b27fa06a20bf76c9254965d51c2810027c3a5072b5ed5dc6

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "68BE6B2E2D186307B27FA06A20BF76C9254965D51C2810027C3A5072B5ED5DC6"
Last-Modified: Wed, 24 Jul 2024 20:42:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21570
Expires: Sat, 27 Jul 2024 11:11:37 GMT
Date: Sat, 27 Jul 2024 05:12:07 GMT
Connection: keep-alive

cdnjs.cloudflare.com/ajax/libs/clipboard.js/2.0.10/clipboard.min.js

104.17.25.14

200 OK

2.8 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/clipboard.js/2.0.10/clipboard.min.js
IP
104.17.25.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://dcshop.us/
Certificate
IssuerLet's Encrypt
Subjectcdnjs.cloudflare.com
Fingerprint3B:5B:7C:DD:19:E8:16:5A:09:22:D6:1E:03:84:8D:B9:A1:32:BF:8E
ValiditySun, 02 Jun 2024 00:47:32 GMT - Sat, 31 Aug 2024 00:47:31 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (8941)
Size
2.8 kB (2797 bytes)
Hash
ad98572d415d2f2452845a6068a913c0
6674f81dd01c76be986cf0a8172d1073e56d7ef4
baff7541be9c20f7f977f6993ce39cfa937a7bde69db6e7beebb8f68372682a1

HTTP Headers

GET /ajax/libs/clipboard.js/2.0.10/clipboard.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dcshop.us/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 27 Jul 2024 05:12:08 GMT
content-type: application/javascript; charset=utf-8
content-length: 2797
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "61faba8a-aed"
last-modified: Wed, 02 Feb 2022 17:08:26 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 901113
expires: Thu, 17 Jul 2025 05:12:08 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=y4DuX9M0elD7Alf%2B3qtolycd7tIj4oSQUBWNMF3KmQuak3YJCE38mBGuQzrepLx4vkiiyjJvJbqvWP1rGFa8299sleE5%2F76iHABuDyl2%2FN1ax244FId7Rg%2BtoL6v9aSwDJsiTgU3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8a9a21fb0dcc712b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

dcshop.us/frontend/img/united-states.svg

185.178.208.144

200 OK

1.6 kB

URL GET HTTP/2
dcshop.us/frontend/img/united-states.svg
IP
185.178.208.144:443
ASN
#57724 Ddos-Guard Ltd

Requested by
https://dcshop.us/
Certificate
IssuerLet's Encrypt
Subjectdcshop.us
FingerprintE8:4B:D0:FE:26:D3:B5:F2:CD:F8:55:22:E8:41:3F:E4:64:0A:96:FF
ValidityWed, 24 Jul 2024 08:38:01 GMT - Tue, 22 Oct 2024 08:38:00 GMT

File type
SVG Scalable Vector Graphics image
Size
1.6 kB (1581 bytes)
Hash
f4cc0b5eff95481b1c900a1da2486029
c020b5d82338eef02bc8b242e3b3929780190161
ad9c7e75dfbcf358d5850e3f6dac41bad25d6da8984eca3224175b1d62c38cbb

HTTP Headers

GET /frontend/img/united-states.svg HTTP/1.1
Host: dcshop.us
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dcshop.us/
Cookie: __ddg1_=Sgzj2irxoHmRqPD8C075; PHPSESSID=b1e85cee915b34c8c7fa13b05e98f724
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Mon, 22 Jul 2024 20:59:58 GMT
content-type: image/svg+xml
last-modified: Wed, 28 Sep 2022 17:37:34 GMT
content-encoding: gzip
etag: "6334865e-3f9f"
age: 375130
content-length: 1581
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2

dcshop.us/

185.178.208.144

200 OK

28 kB

URL User Request GET HTTP/2
dcshop.us/
IP
185.178.208.144:443
ASN
#57724 Ddos-Guard Ltd

Certificate
IssuerLet's Encrypt
Subjectdcshop.us
FingerprintE8:4B:D0:FE:26:D3:B5:F2:CD:F8:55:22:E8:41:3F:E4:64:0A:96:FF
ValidityWed, 24 Jul 2024 08:38:01 GMT - Tue, 22 Oct 2024 08:38:00 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (54995), with CRLF line terminators
Size
28 kB (27801 bytes)
Hash
0fb1764ca7522d3b3e621a3ab4877cc6
a3774bf43a521010c5870befcf6265eaa5d688a6
1552eb9e749a77448a99b09c4116cf7309f7fdcf28b65950fdf116e56ba492dd

Detections

Analyzer	Verdict	Alert
Public Nextron YARA rules	malware	Detects hex encoded code that has been base64 encoded

HTTP Headers

GET / HTTP/1.1
Host: dcshop.us
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dcshop.us/panel/m_banks?Brute_Logs?eastwest_bank/
Cookie: __ddg1_=Sgzj2irxoHmRqPD8C075; PHPSESSID=b1e85cee915b34c8c7fa13b05e98f724
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Sat, 27 Jul 2024 05:12:08 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2

dcshop.us/frontend/img/ru.svg

185.178.208.144

200 OK

207 B

URL GET HTTP/2
dcshop.us/frontend/img/ru.svg
IP
185.178.208.144:443
ASN
#57724 Ddos-Guard Ltd

Requested by
https://dcshop.us/
Certificate
IssuerLet's Encrypt
Subjectdcshop.us
FingerprintE8:4B:D0:FE:26:D3:B5:F2:CD:F8:55:22:E8:41:3F:E4:64:0A:96:FF
ValidityWed, 24 Jul 2024 08:38:01 GMT - Tue, 22 Oct 2024 08:38:00 GMT

File type
SVG Scalable Vector Graphics image
Size
207 B (207 bytes)
Hash
e3ee3b099783ef393f2f4dabdc75d5bc
fbe8adc1f75d896354345414a75cf5f847967ee7
bb2782a916b1a28eb081895afa90f4ed5dca5df320b9cc95f867bc2a26e29064

HTTP Headers

GET /frontend/img/ru.svg HTTP/1.1
Host: dcshop.us
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dcshop.us/
Cookie: __ddg1_=Sgzj2irxoHmRqPD8C075; PHPSESSID=b1e85cee915b34c8c7fa13b05e98f724
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Tue, 23 Jul 2024 06:19:42 GMT
content-type: image/svg+xml
last-modified: Thu, 20 Jan 2022 17:33:52 GMT
etag: W/"61e99d00-122"
content-encoding: gzip
age: 341546
content-length: 207
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2

dcshop.us/frontend/css/style.css

185.178.208.144

200 OK

174 kB

URL GET HTTP/2
dcshop.us/frontend/css/style.css
IP
185.178.208.144:443
ASN
#57724 Ddos-Guard Ltd

Requested by
https://dcshop.us/
Certificate
IssuerLet's Encrypt
Subjectdcshop.us
FingerprintE8:4B:D0:FE:26:D3:B5:F2:CD:F8:55:22:E8:41:3F:E4:64:0A:96:FF
ValidityWed, 24 Jul 2024 08:38:01 GMT - Tue, 22 Oct 2024 08:38:00 GMT

File type
Unicode text, UTF-8 text, with very long lines (560), with CRLF line terminators
Size
174 kB (174017 bytes)
Hash
17251f46dbabd70df968abf9c7181999
425a34579c6d708c81dc8390ab5ed555ecb21dd7
f8c354914218445ecd1a818c3affd15b1d1fa508706c955541425257f976be6a

HTTP Headers

GET /frontend/css/style.css HTTP/1.1
Host: dcshop.us
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dcshop.us/
Cookie: __ddg1_=Sgzj2irxoHmRqPD8C075; PHPSESSID=b1e85cee915b34c8c7fa13b05e98f724
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Fri, 19 Jul 2024 13:49:25 GMT
content-type: text/css
last-modified: Sat, 14 Jan 2023 21:44:09 GMT
etag: W/"63c32229-16c71e"
content-encoding: gzip
age: 660163
content-length: 174017
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2

dcshop.us/frontend/css/plugins.css

185.178.208.144

200 OK

118 kB

URL GET HTTP/2
dcshop.us/frontend/css/plugins.css
IP
185.178.208.144:443
ASN
#57724 Ddos-Guard Ltd

Requested by
https://dcshop.us/
Certificate
IssuerLet's Encrypt
Subjectdcshop.us
FingerprintE8:4B:D0:FE:26:D3:B5:F2:CD:F8:55:22:E8:41:3F:E4:64:0A:96:FF
ValidityWed, 24 Jul 2024 08:38:01 GMT - Tue, 22 Oct 2024 08:38:00 GMT

File type
ASCII text, with CRLF, CR line terminators
Size
118 kB (118417 bytes)
Hash
bff066c6932f0b6b0bad7500a03adcd1
b815edd3a690a939ca1ec611cf84d43969de01c6
d94ca665c3f47e003e5e108f909f78b430292955dd29a56d8417542b1589f51c

HTTP Headers

GET /frontend/css/plugins.css HTTP/1.1
Host: dcshop.us
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dcshop.us/
Cookie: __ddg1_=Sgzj2irxoHmRqPD8C075; PHPSESSID=b1e85cee915b34c8c7fa13b05e98f724
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Sat, 20 Jul 2024 10:44:17 GMT
content-type: text/css
last-modified: Tue, 20 Dec 2022 10:58:48 GMT
etag: W/"63a19568-9d70c"
content-encoding: gzip
age: 584871
content-length: 118417
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2

dcshop.us/frontend/js/scripts.js

185.178.208.144

200 OK

54 kB

URL GET HTTP/2
dcshop.us/frontend/js/scripts.js
IP
185.178.208.144:443
ASN
#57724 Ddos-Guard Ltd

Requested by
https://dcshop.us/
Certificate
IssuerLet's Encrypt
Subjectdcshop.us
FingerprintE8:4B:D0:FE:26:D3:B5:F2:CD:F8:55:22:E8:41:3F:E4:64:0A:96:FF
ValidityWed, 24 Jul 2024 08:38:01 GMT - Tue, 22 Oct 2024 08:38:00 GMT

File type
JavaScript source, ASCII text, with CRLF line terminators
Size
54 kB (53538 bytes)
Hash
2c3b9bc9c1501adc7ea547d8584eb84d
9598b32c395b4e9eb527e878a1dec054e7d2ef66
ea7e1e6fdde7f920bbf0d6175026f2f704cd9f4fd2b7b7a3687cbe1d9ac15749

HTTP Headers

GET /frontend/js/scripts.js HTTP/1.1
Host: dcshop.us
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dcshop.us/
Cookie: __ddg1_=Sgzj2irxoHmRqPD8C075; PHPSESSID=b1e85cee915b34c8c7fa13b05e98f724
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Wed, 24 Jul 2024 10:33:24 GMT
content-type: application/javascript; charset=utf-8
last-modified: Tue, 20 Dec 2022 17:09:21 GMT
etag: W/"63a1ec41-3ac63"
content-encoding: gzip
age: 239924
content-length: 53538
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2

dcshop.us/frontend/js/plugins.js

185.178.208.144

200 OK

1.1 MB

URL GET HTTP/2
dcshop.us/frontend/js/plugins.js
IP
185.178.208.144:443
ASN
#57724 Ddos-Guard Ltd

Requested by
https://dcshop.us/
Certificate
IssuerLet's Encrypt
Subjectdcshop.us
FingerprintE8:4B:D0:FE:26:D3:B5:F2:CD:F8:55:22:E8:41:3F:E4:64:0A:96:FF
ValidityWed, 24 Jul 2024 08:38:01 GMT - Tue, 22 Oct 2024 08:38:00 GMT

File type
JavaScript source, ASCII text, with CRLF line terminators
Size
1.1 MB (1081291 bytes)
Hash
8e0861726db4f8117b260adfaba7d083
ba2ec4443a3206849c809ef8488a042f560d1e55
fb2112b2e399ba06f149f937c47de5cbb2da4191775dc4e1800570434972d064

HTTP Headers

GET /frontend/js/plugins.js HTTP/1.1
Host: dcshop.us
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dcshop.us/
Cookie: __ddg1_=Sgzj2irxoHmRqPD8C075; PHPSESSID=b1e85cee915b34c8c7fa13b05e98f724
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Tue, 23 Jul 2024 06:19:42 GMT
content-type: application/javascript; charset=utf-8
last-modified: Tue, 20 Dec 2022 09:55:11 GMT
etag: W/"63a1867f-39fd0c"
content-encoding: gzip
age: 341546
content-length: 1081291
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2

fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2

142.250.74.67

200 OK

47 kB

URL GET HTTP/2
fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2
IP
142.250.74.67:443
ASN
#15169 GOOGLE

Requested by
https://dcshop.us/
Certificate
IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint7C:32:9F:9C:78:5C:00:05:2B:B3:0F:CD:46:FF:78:83:BC:E3:DE:79
ValidityMon, 01 Jul 2024 07:30:56 GMT - Mon, 23 Sep 2024 07:30:55 GMT

File type
Web Open Font Format (Version 2), TrueType, length 46704, version 1.0
Size
47 kB (46704 bytes)
Hash
30a274cd01b6eeb0b082c918b0697f1e
393311bde26b99a4ad935fa55bad1dce7994388b
88df0b5a7bc397dbc13a26bb8b3742cc62cd1c9b0dded57da7832416d6f52f42

HTTP Headers

GET /s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dcshop.us
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 46704
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 24 Jul 2024 19:09:42 GMT
expires: Thu, 24 Jul 2025 19:09:42 GMT
cache-control: public, max-age=31536000
age: 208947
last-modified: Wed, 13 Sep 2023 23:49:07 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2

142.250.74.67

200 OK

47 kB

URL GET HTTP/2
fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2
IP
142.250.74.67:443
ASN
#15169 GOOGLE

Requested by
https://dcshop.us/
Certificate
IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint7C:32:9F:9C:78:5C:00:05:2B:B3:0F:CD:46:FF:78:83:BC:E3:DE:79
ValidityMon, 01 Jul 2024 07:30:56 GMT - Mon, 23 Sep 2024 07:30:55 GMT

File type
Web Open Font Format (Version 2), TrueType, length 46704, version 1.0
Size
47 kB (46704 bytes)
Hash
30a274cd01b6eeb0b082c918b0697f1e
393311bde26b99a4ad935fa55bad1dce7994388b
88df0b5a7bc397dbc13a26bb8b3742cc62cd1c9b0dded57da7832416d6f52f42

HTTP Headers

GET /s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dcshop.us
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 46704
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 24 Jul 2024 19:09:42 GMT
expires: Thu, 24 Jul 2025 19:09:42 GMT
cache-control: public, max-age=31536000
age: 208947
last-modified: Wed, 13 Sep 2023 23:49:07 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2

142.250.74.67

200 OK

47 kB

URL GET HTTP/2
fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2
IP
142.250.74.67:443
ASN
#15169 GOOGLE

Requested by
https://dcshop.us/
Certificate
IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint7C:32:9F:9C:78:5C:00:05:2B:B3:0F:CD:46:FF:78:83:BC:E3:DE:79
ValidityMon, 01 Jul 2024 07:30:56 GMT - Mon, 23 Sep 2024 07:30:55 GMT

File type
Web Open Font Format (Version 2), TrueType, length 46704, version 1.0
Size
47 kB (46704 bytes)
Hash
30a274cd01b6eeb0b082c918b0697f1e
393311bde26b99a4ad935fa55bad1dce7994388b
88df0b5a7bc397dbc13a26bb8b3742cc62cd1c9b0dded57da7832416d6f52f42

HTTP Headers

GET /s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dcshop.us
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 46704
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 24 Jul 2024 19:09:42 GMT
expires: Thu, 24 Jul 2025 19:09:42 GMT
cache-control: public, max-age=31536000
age: 208947
last-modified: Wed, 13 Sep 2023 23:49:07 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

r10.o.lencr.org/

23.33.119.27

504 B

URL
r10.o.lencr.org/
IP
23.33.119.27:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
edb57be0536524541d7ac5d4ee6b5585
a34a54318477c70e34c9f5e27cba428b4530b05b
895b01022c914d4f0facb78182c6ed0ee5c7b3c6b10516327dc5f08a54dc0204

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "895B01022C914D4F0FACB78182C6ED0EE5C7B3C6B10516327DC5F08A54DC0204"
Last-Modified: Wed, 24 Jul 2024 18:58:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16123
Expires: Sat, 27 Jul 2024 09:40:52 GMT
Date: Sat, 27 Jul 2024 05:12:09 GMT
Connection: keep-alive

r10.o.lencr.org/

23.33.119.27

504 B

URL
r10.o.lencr.org/
IP
23.33.119.27:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
edb57be0536524541d7ac5d4ee6b5585
a34a54318477c70e34c9f5e27cba428b4530b05b
895b01022c914d4f0facb78182c6ed0ee5c7b3c6b10516327dc5f08a54dc0204

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "895B01022C914D4F0FACB78182C6ED0EE5C7B3C6B10516327DC5F08A54DC0204"
Last-Modified: Wed, 24 Jul 2024 18:58:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16123
Expires: Sat, 27 Jul 2024 09:40:52 GMT
Date: Sat, 27 Jul 2024 05:12:09 GMT
Connection: keep-alive

r10.o.lencr.org/

23.33.119.27

504 B

URL
r10.o.lencr.org/
IP
23.33.119.27:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
edb57be0536524541d7ac5d4ee6b5585
a34a54318477c70e34c9f5e27cba428b4530b05b
895b01022c914d4f0facb78182c6ed0ee5c7b3c6b10516327dc5f08a54dc0204

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "895B01022C914D4F0FACB78182C6ED0EE5C7B3C6B10516327DC5F08A54DC0204"
Last-Modified: Wed, 24 Jul 2024 18:58:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16123
Expires: Sat, 27 Jul 2024 09:40:52 GMT
Date: Sat, 27 Jul 2024 05:12:09 GMT
Connection: keep-alive

dcshop.us/post?VlBBrrKlJJuvF

185.178.208.144

200 OK

649 B

URL POST HTTP/2
dcshop.us/post?VlBBrrKlJJuvF
IP
185.178.208.144:443
ASN
#57724 Ddos-Guard Ltd

Requested by
https://dcshop.us/
Certificate
IssuerLet's Encrypt
Subjectdcshop.us
FingerprintE8:4B:D0:FE:26:D3:B5:F2:CD:F8:55:22:E8:41:3F:E4:64:0A:96:FF
ValidityWed, 24 Jul 2024 08:38:01 GMT - Tue, 22 Oct 2024 08:38:00 GMT

File type
gzip compressed data, max speed, from Unix
Size
649 B (649 bytes)
Hash
209b8ac026e1f735c2a25b2fc7898cff
46b098588c1af83cc2c59e4ab0ae2b71ca0a4ef1
3652cb60696872e425a78dac042734b3d174ddf96c734628ffeb72f7ef9d093b

HTTP Headers

POST /post?VlBBrrKlJJuvF HTTP/1.1
Host: dcshop.us
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Origin: https://dcshop.us
DNT: 1
Connection: keep-alive
Referer: https://dcshop.us/
Cookie: __ddg1_=Sgzj2irxoHmRqPD8C075; PHPSESSID=b1e85cee915b34c8c7fa13b05e98f724
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
TE: trailers

HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Sat, 27 Jul 2024 05:12:09 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2

site-assets.fontawesome.com/releases/v5.15.4/css/all.css

172.64.147.188

200 OK

33 kB

URL GET HTTP/2
site-assets.fontawesome.com/releases/v5.15.4/css/all.css
IP
172.64.147.188:443
ASN
#13335 CLOUDFLARENET

Requested by
https://dcshop.us/
Certificate
IssuerDigiCert Inc
Subject*.fontawesome.com
Fingerprint93:F9:69:8C:73:B0:08:60:65:F3:39:41:39:66:D3:2B:78:3A:6E:3D
ValidityMon, 04 Dec 2023 00:00:00 GMT - Fri, 03 Jan 2025 23:59:59 GMT

File type
ASCII text, with very long lines (65393)
Size
33 kB (32798 bytes)
Hash
21f9f9f41222c9f2acec907529ea35a1
418719c07b53e2ca55ae8bf8406ab8cdd67ce0ee
89b2462070a1a639c693794bc1d8d9131e6eb9274fc7fb0fb854943e58940a22

HTTP Headers

GET /releases/v5.15.4/css/all.css HTTP/1.1
Host: site-assets.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dcshop.us/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 27 Jul 2024 05:12:08 GMT
content-type: text/css
x-amz-id-2: 9AM6bLC68SYgLysNkrj3vwpSmDGZMBSa2RGXOfRJdWiEnajDG8dCT7Gu1wgAJOkB+T5CPxjHyvml7sQjYhAyLw==
x-amz-request-id: RSSE9T1E6KWAZ9K7
last-modified: Mon, 07 Feb 2022 19:57:26 GMT
etag: W/"21f9f9f41222c9f2acec907529ea35a1"
cache-control: max-age=31556926
cf-cache-status: HIT
age: 1884118
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a9a21fafea456aa-OSL
content-encoding: gzip
X-Firefox-Spdy: h2

dcshop.us/frontend/img/l5N.png

185.178.208.144

200 OK

14 kB

URL GET HTTP/2
dcshop.us/frontend/img/l5N.png
IP
185.178.208.144:443
ASN
#57724 Ddos-Guard Ltd

Requested by
https://dcshop.us/
Certificate
IssuerLet's Encrypt
Subjectdcshop.us
FingerprintE8:4B:D0:FE:26:D3:B5:F2:CD:F8:55:22:E8:41:3F:E4:64:0A:96:FF
ValidityWed, 24 Jul 2024 08:38:01 GMT - Tue, 22 Oct 2024 08:38:00 GMT

File type
PNG image data, 671 x 282, 8-bit/color RGBA, non-interlaced
Size
14 kB (14370 bytes)
Hash
cea033f680ff9687c71fe7142bfcb35d
92e570213856eea90e5c5f49bf1596da5531b898
db6bcdc1675fffb08bee667d69af0f178382674f5ae433436317d9a384a33fff

HTTP Headers

GET /frontend/img/l5N.png HTTP/1.1
Host: dcshop.us
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dcshop.us/
Cookie: __ddg1_=Sgzj2irxoHmRqPD8C075; PHPSESSID=b1e85cee915b34c8c7fa13b05e98f724
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Mon, 22 Jul 2024 10:35:34 GMT
content-type: image/png
content-length: 14370
last-modified: Thu, 20 Jan 2022 17:33:52 GMT
etag: "61e99d00-3822"
accept-ranges: bytes
age: 412595
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2

dcshop.us/frontend/css/datatables.bundle.css

185.178.208.144

200 OK

41 kB

URL GET HTTP/2
dcshop.us/frontend/css/datatables.bundle.css
IP
185.178.208.144:443
ASN
#57724 Ddos-Guard Ltd

Requested by
https://dcshop.us/
Certificate
IssuerLet's Encrypt
Subjectdcshop.us
FingerprintE8:4B:D0:FE:26:D3:B5:F2:CD:F8:55:22:E8:41:3F:E4:64:0A:96:FF
ValidityWed, 24 Jul 2024 08:38:01 GMT - Tue, 22 Oct 2024 08:38:00 GMT

File type

Size
41 kB (40946 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /frontend/css/datatables.bundle.css HTTP/1.1
Host: dcshop.us
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dcshop.us/
Cookie: __ddg1_=Sgzj2irxoHmRqPD8C075; PHPSESSID=b1e85cee915b34c8c7fa13b05e98f724
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Wed, 24 Jul 2024 12:50:35 GMT
content-type: text/css
last-modified: Thu, 22 Dec 2022 12:12:42 GMT
etag: W/"63a449ba-9ff2"
content-encoding: gzip
age: 231693
content-length: 8397
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2

dcshop.us/post?hnKGpdefPr

185.178.208.144

200 OK

1.7 kB

URL POST HTTP/2
dcshop.us/post?hnKGpdefPr
IP
185.178.208.144:443
ASN
#57724 Ddos-Guard Ltd

Requested by
https://dcshop.us/
Certificate
IssuerLet's Encrypt
Subjectdcshop.us
FingerprintE8:4B:D0:FE:26:D3:B5:F2:CD:F8:55:22:E8:41:3F:E4:64:0A:96:FF
ValidityWed, 24 Jul 2024 08:38:01 GMT - Tue, 22 Oct 2024 08:38:00 GMT

File type
PNG image data, 140 x 30, 8-bit/color RGBA, non-interlaced
Size
1.7 kB (1652 bytes)
Hash
ea878c5e6323a04def955a5805df41f2
fefbd0f0354fc251ad3f3f97dba5a553506a8092
1616200c45b812a73dd567a2db391fd0f0d9abfba5531b7772fd06178b308330

HTTP Headers

POST /post?hnKGpdefPr HTTP/1.1
Host: dcshop.us
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
poren: XcZw2DIOs3Jyr6YyWjFLjC
X-Requested-With: XMLHttpRequest
Origin: https://dcshop.us
DNT: 1
Connection: keep-alive
Referer: https://dcshop.us/
Cookie: __ddg1_=Sgzj2irxoHmRqPD8C075; PHPSESSID=b1e85cee915b34c8c7fa13b05e98f724
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0

HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Sat, 27 Jul 2024 05:12:09 GMT
content-type: image/jpeg
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
X-Firefox-Spdy: h2

fonts.googleapis.com/css?family=Inter:300,400,500,600,700

142.250.74.106

200 OK

11 kB

URL GET HTTP/2
fonts.googleapis.com/css?family=Inter:300,400,500,600,700
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://dcshop.us/
Certificate
IssuerGoogle Trust Services
Subjectupload.video.google.com
Fingerprint05:EB:36:6C:36:86:24:74:94:BB:40:A9:5B:70:D4:0B:D6:3D:9E:39
ValidityMon, 01 Jul 2024 07:31:02 GMT - Mon, 23 Sep 2024 07:31:01 GMT

File type
ASCII text
Size
11 kB (11300 bytes)
Hash
c1386afc95470eaefaba66a4e130db53
24390b6e8b6ce929ee7ebae4eaa81305ce73606a
6090c70d9b6502fa2a70394e8bfaa18ceb768ff688718562d3ad4adf75bb068e

HTTP Headers

GET /css?family=Inter:300,400,500,600,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dcshop.us/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 27 Jul 2024 05:12:08 GMT
date: Sat, 27 Jul 2024 05:12:08 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

dcshop.us/frontend/fonts/bootstrap-icons.woff2?24e3eb84d0bcaf83d77f904c78ac1f47

185.178.208.144

200 OK

102 kB

URL GET HTTP/2
dcshop.us/frontend/fonts/bootstrap-icons.woff2?24e3eb84d0bcaf83d77f904c78ac1f47
IP
185.178.208.144:443
ASN
#57724 Ddos-Guard Ltd

Requested by
https://dcshop.us/
Certificate
IssuerLet's Encrypt
Subjectdcshop.us
FingerprintE8:4B:D0:FE:26:D3:B5:F2:CD:F8:55:22:E8:41:3F:E4:64:0A:96:FF
ValidityWed, 24 Jul 2024 08:38:01 GMT - Tue, 22 Oct 2024 08:38:00 GMT

File type
Web Open Font Format (Version 2), TrueType, length 102536, version 1.0
Size
102 kB (102536 bytes)
Hash
1ed478a6b265d4b4f5c26bb063203588
1ca5e8c7d2fb8e9d60ad1a1feb2a46e98c248a3d
c874e14c63db86c4c5318c77cb557fce7036645edc7d690dcc1d23b389631b13

HTTP Headers

GET /frontend/fonts/bootstrap-icons.woff2?24e3eb84d0bcaf83d77f904c78ac1f47 HTTP/1.1
Host: dcshop.us
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://dcshop.us/frontend/css/plugins.css
Cookie: __ddg1_=Sgzj2irxoHmRqPD8C075; PHPSESSID=b1e85cee915b34c8c7fa13b05e98f724
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Fri, 19 Jul 2024 08:03:52 GMT
content-type: font/woff2
content-length: 102536
last-modified: Tue, 08 Feb 2022 04:54:22 GMT
etag: "6201f77e-19088"
accept-ranges: bytes
age: 680896
ddg-cache-status: HIT,MISS
X-Firefox-Spdy: h2

dcshop.us/post?count_ticketUser

185.178.208.144

200 OK

162 B

URL POST HTTP/2
dcshop.us/post?count_ticketUser
IP
185.178.208.144:443
ASN
#57724 Ddos-Guard Ltd

Requested by
https://dcshop.us/
Certificate
IssuerLet's Encrypt
Subjectdcshop.us
FingerprintE8:4B:D0:FE:26:D3:B5:F2:CD:F8:55:22:E8:41:3F:E4:64:0A:96:FF
ValidityWed, 24 Jul 2024 08:38:01 GMT - Tue, 22 Oct 2024 08:38:00 GMT

File type
JavaScript source, ASCII text, with no line terminators
Size
162 B (162 bytes)
Hash
779c3e5100c5c2414ae30c6aea56cf18
183b3c3f385c1f0a4dcdfdfdc970307e5d70c36f
a8d3778dd8737d8d2bb7e90d04dc0c36ce2105d9e9fc711c4410ad191090d1da

HTTP Headers

POST /post?count_ticketUser HTTP/1.1
Host: dcshop.us
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Origin: https://dcshop.us
DNT: 1
Connection: keep-alive
Referer: https://dcshop.us/
Cookie: __ddg1_=Sgzj2irxoHmRqPD8C075; PHPSESSID=b1e85cee915b34c8c7fa13b05e98f724
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0

HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Sat, 27 Jul 2024 05:12:09 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2

site-assets.fontawesome.com/releases/v5.15.4/webfonts/fa-solid-900.woff2

172.64.147.188

200 OK

137 kB

URL GET HTTP/2
site-assets.fontawesome.com/releases/v5.15.4/webfonts/fa-solid-900.woff2
IP
172.64.147.188:443
ASN
#13335 CLOUDFLARENET

Requested by
https://dcshop.us/
Certificate
IssuerDigiCert Inc
Subject*.fontawesome.com
Fingerprint93:F9:69:8C:73:B0:08:60:65:F3:39:41:39:66:D3:2B:78:3A:6E:3D
ValidityMon, 04 Dec 2023 00:00:00 GMT - Fri, 03 Jan 2025 23:59:59 GMT

File type
Web Open Font Format (Version 2), TrueType, length 137104, version 331.-31196
Size
137 kB (137104 bytes)
Hash
dbf1fc91f1beec2915123257ea4d58ef
d2a6d5d31334f6d0831f1c17d26e23fe0aa6a8db
8d4d29042c23b5fcbed3af690421776de0f8ad3d308d66e24a9d80bcc8ccb522

HTTP Headers

GET /releases/v5.15.4/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: site-assets.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dcshop.us
DNT: 1
Connection: keep-alive
Referer: https://site-assets.fontawesome.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 27 Jul 2024 05:12:08 GMT
content-type: font/woff2
content-length: 137104
x-amz-id-2: e92lrszG6wZAm8fZyvnnf5YVMJ/TlEw4lNsIfQ/FgvzhVco2HkeQpatzFqqzC8M79DCLJu2abVU=
x-amz-request-id: NAF21J6DBZDC5EP6
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Mon, 07 Feb 2022 19:58:47 GMT
etag: "dbf1fc91f1beec2915123257ea4d58ef"
cache-control: max-age=31556926
cf-cache-status: HIT
age: 17117
accept-ranges: bytes
server: cloudflare
cf-ray: 8a9a21fecb310afe-OSL
X-Firefox-Spdy: h2

dcshop.us/post?pKIhcCNGzPzRNhTtD

185.178.208.144

200 OK

0 B

URL POST HTTP/2
dcshop.us/post?pKIhcCNGzPzRNhTtD
IP
185.178.208.144:443
ASN
#57724 Ddos-Guard Ltd

Requested by
https://dcshop.us/
Certificate
IssuerLet's Encrypt
Subjectdcshop.us
FingerprintE8:4B:D0:FE:26:D3:B5:F2:CD:F8:55:22:E8:41:3F:E4:64:0A:96:FF
ValidityWed, 24 Jul 2024 08:38:01 GMT - Tue, 22 Oct 2024 08:38:00 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST /post?pKIhcCNGzPzRNhTtD HTTP/1.1
Host: dcshop.us
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 10
Origin: https://dcshop.us
DNT: 1
Connection: keep-alive
Referer: https://dcshop.us/
Cookie: __ddg1_=Sgzj2irxoHmRqPD8C075; PHPSESSID=b1e85cee915b34c8c7fa13b05e98f724
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Sat, 27 Jul 2024 05:12:09 GMT
content-type: text/html; charset=UTF-8
content-length: 0
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (11)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

Observations

Hash

Observations