{"report_id":"5de823cd-592a-4c83-b783-906253bb45bf","version":6,"status":"done","tags":[],"date":"2026-05-20T07:15:38Z","url":{"schema":"https","addr":"tiktokshopsell.com/","fqdn":"tiktokshopsell.com","domain":"tiktokshopsell.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":0,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"final":{"url":{"schema":"https","addr":"tiktokshopsell.com/login","fqdn":"tiktokshopsell.com","domain":"tiktokshopsell.com","tld":"com"},"title":"Gestione TikTok Shop","dom":{"size":28582,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (16980)","md5":"4f258cac8015e83c82da7fb4fcdaeeff","sha1":"ee27cccc7ab0595f823611211f7fca87505fae83","sha256":"f8add52f0d4c4bafd8beafccb519544694adb59038dde7c443b93ea2215485f8","sha512":"5deb93ed54f4926440d4dab706bbc2616c18ab430bdb642400591407f43f6d0b4629d040cddabcd583e6a8a9292a0bbac3425c255f19ef1bf9bbc12d9e68209c","ssdeep":"384:trTUqYBQOx05nrGPKJgg8T4xksc64Jysq7vwYj2NjaNmFhXQ:trTox0rGV4xksc64Jysq7vw2kaNmFy","tlshash":"e2d2f9c0f51c123c5d2be754efc8a75c9125f0a2ee124876b10e04aaead7fe535a2f91","dom_hash":"domhashf52e44dcff6a058a6ad985567333c936","first_seen":"2026-05-20T07:15:43.521282Z","last_seen":"2026-05-20T07:15:43.521282Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"tiktokshopsell.com/","fqdn":"tiktokshopsell.com","domain":"tiktokshopsell.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":0,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-24T07:15:38Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"tiktokshopsell.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-20","alert":"Phishing Block","trigger":"tiktokshopsell.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"tiktokshopsell.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.gpteng.co","ip":{"addr":"104.18.28.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-06-26","domain_rank":776423,"first_seen":"2024-12-08T00:48:33.877309Z","last_seen":"2026-05-13T12:52:33.781654Z","alert_count":0,"request_count":1,"received_data":134509,"sent_data":536,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"tiktokshopsell.com","ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"domain_registered":"2026-05-19","domain_rank":0,"first_seen":"2026-05-20T07:15:39.10982Z","last_seen":"2026-05-20T07:15:39.10982Z","alert_count":39,"request_count":13,"received_data":773401,"sent_data":9917,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"tiktokshopsell.com/assets/index-DPVPldsJ.js","fqdn":"tiktokshopsell.com","domain":"tiktokshopsell.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"3f689b65a5fbb8e9cd309bd1bfde5808","sha1":"0b7146f8797098de6b68f2e796ea3820965824b7","sha256":"e511c9630d1bcd1b5528186ce73fe2e79b45d9cc0908b9e21876ea75b867d73f","sha512":"13c52a1c74d8ca8edc2cabf9d0f4fe39e95254f98f776b1a87c5d167b453b20aaa7214ec38ca155b2706d198b4d27151e8af8192bdd46c89b2640a89f2c04b43","ssdeep":"","tlshash":"2df0d4dee001de7e459749d4bd6d586190310674977c46d2f1fd01390fa1054aa5da19","size":467,"data":"","first_seen":"2026-05-20T07:15:43.522539Z","last_seen":"2026-05-20T07:15:43.522539Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tiktokshopsell.com/assets/client-Cput_dEt.js","fqdn":"tiktokshopsell.com","domain":"tiktokshopsell.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"importedModule","is_inline":false,"md5":"23c13dcccd3a2a1734904591cd94a580","sha1":"577c121d40f3ca896f5086a2212e476756e42794","sha256":"3b4644aada9b237abc393e9f366e5d588ec2af2a6b923b3cc561af5a9d623ff5","sha512":"d14465f3fa08e13030427e28b7a3688cda2c618f7045b1ae965962d3526b6d3b892da751ff61f8cb8a7fcdb57b45d5020165284a3e410686d6eface015b7645b","ssdeep":"6144:Cdy9Cw2WzQiXnYAqdduvxKo2ItzJyXyUAMAJZKBEIL2t:jTQiXYAWduvxKopCyL","tlshash":"051418c4b3b6547206d194e1d4351603f3397909b81e806cfbac1edb6ea9909eb3be35","size":205255,"data":"","first_seen":"2026-05-20T07:15:43.529499Z","last_seen":"2026-05-20T07:15:43.529499Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tiktokshopsell.com/assets/loader-circle-D7SkTCHl.js","fqdn":"tiktokshopsell.com","domain":"tiktokshopsell.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"importedModule","is_inline":false,"md5":"a50b33502c2653db0ed04843f767b974","sha1":"5d647ffac56bc66854689bfac3fe65e06bf456cc","sha256":"8ea382c543f1cad3942dffb9ed17bcc60df04cc8dae94098f4a5138e28617383","sha512":"b625a45ed0bd8a3b047db517fd63e24c033484d8a274c58dfaa5fc4fffe87f351e61e37facf842c4c934ca4f96eb1f956c1c0119ab22560b44067a49f0c75542","ssdeep":"","tlshash":"ecc08c2a6f2408a506028e9a0225b2005d51065213c10ed660548b3bc2834d7a0efe86","size":151,"data":"","first_seen":"2026-05-20T07:15:43.524686Z","last_seen":"2026-05-20T07:15:43.524686Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tiktokshopsell.com/assets/createLucideIcon-CxNPK2-O.js","fqdn":"tiktokshopsell.com","domain":"tiktokshopsell.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"importedModule","is_inline":false,"md5":"378b4feddb818c3e5b77e485ca676e8b","sha1":"fab7fa1b4c77bd62e12d883cabbdb554bec89c69","sha256":"c3f00b9a62eef350bfd46e20cdc0e636ac51c8a25b1abb274860def03b376b5f","sha512":"d1116bef5b7b0efb20101059a4ea256c28e3d158dd8b4193171f37277eaf264ff4fb80bc4e86bca42332582534c4ebf5876cad15ec1ce73e74f2f13f3a844f21","ssdeep":"","tlshash":"cb214408b3d4283ca23594dd96583069ec779a28f9635a58d2fc5d2a3623042a337acc","size":1202,"data":"","first_seen":"2026-05-20T07:15:43.531629Z","last_seen":"2026-05-20T07:15:43.531629Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tiktokshopsell.com/","fqdn":"tiktokshopsell.com","domain":"tiktokshopsell.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":true,"md5":"56d307324e57c8fce019ba9aa1956d7e","sha1":"26b0a3f43c216e73e47d14501e909f79c5e4f22b","sha256":"2a67149b8762b3c70fd2a6f38925c7f5c874787be4c6c433dc9b6de9c1f29feb","sha512":"ff2cafef8ef9e04effd816fbc129490e7460ff1e8316f4de65c0b5556eec71343f1a06a80fb86c0ce5a5dcd49ce6278f4e2756acb4383565282815d1b9a36993","ssdeep":"","tlshash":"6d01ceb71811555e516cbd8624307a82027119057bb6d2acf2ffe89caa00c89057ce71","size":809,"data":"","first_seen":"2026-05-20T07:15:43.535713Z","last_seen":"2026-05-20T07:15:43.535713Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tiktokshopsell.com/","fqdn":"tiktokshopsell.com","domain":"tiktokshopsell.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":true,"md5":"2acd3d73bbc8d3ba3f35629bb52bdc87","sha1":"1ceb5cdb1aaef828d045f93c024d676b2a173ff5","sha256":"b6ca917f8a08af4a6ad8cc558c1aa032e1e0648b79ce297747c7f6d3a6693807","sha512":"087546aae007202ed3509d48e832308255bf2c81f32242f4fcfc51a4bd81b653856059e7c9abfa88b9fadaa45ed3857d59acc885222f8d6f2234942b235402f7","ssdeep":"","tlshash":"9801afcbe7ec623243a5b4b9185aa5dd3e3800f0eb005bb61c744db43394d5d002ee81","size":829,"data":"","first_seen":"2026-01-07T03:19:54.535133Z","last_seen":"2026-06-07T05:26:16.21982Z","times_seen":947,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tiktokshopsell.com/~flock.js","fqdn":"tiktokshopsell.com","domain":"tiktokshopsell.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed557a78d5301fbb961abfe911a42b62","sha1":"d11a2a4e9fee28c4b1abc38cd8136bffec7e325b","sha256":"a86e084b4f82709814be6c15fd6305daa783fda87ad95402da9a4d3a1dd6d748","sha512":"18dd1525e2b4d89e3c46d92367fca020cf99fb07856acfd96a25dc7410611eea83b438c91691683983495945eb04a9427bc63e2a383cbe93449f4df0eb1ddb51","ssdeep":"384:FtUCBXTpeaFEo5TTThri1t/mCsOCXiTNZruJ4vKFlcEhRCDxOcX/YM2Vybyq/kmt:n7XTpeauI/Thri1CKWM4ldRzurwkTO0D","tlshash":"cea2b6d61007243d57ead1a13929f7d63177ea98a0caec8a7de91f84d414c83f3f294a","size":21296,"data":"","first_seen":"2025-07-30T15:25:28.733337Z","last_seen":"2026-08-13T09:29:59.313374Z","times_seen":15421,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tiktokshopsell.com/assets/index-BywgOftg.js","fqdn":"tiktokshopsell.com","domain":"tiktokshopsell.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"58e5bf14e456aeab198d82e43279e152","sha1":"0344eea5cffef954672ace9c185e3111eb806667","sha256":"13b107e693cf96a68137344f92d77add7c5541b4f2aaee53f9ac2adc7c0e940a","sha512":"18c7eb84fd1a2db2525d90d5ccda606f95a2ffff8f55ea7432ee205d83cf71ed25e10e1b04502bef00baa09092f2ca5ef2e7198e8e4b890020e41b8f186b2ed1","ssdeep":"6144:o2GkCr3sCCOOpwfcjqdZkUa1y/5+dhH0Raoe2ietACB7z66Q420eL1:zGS8fadXcTDM6Q4zY","tlshash":"f4844de83199b6211be355e4407f1107b1392c23344c8460f268edee7ab598a65bbffd","size":387122,"data":"","first_seen":"2026-05-20T07:15:43.527464Z","last_seen":"2026-05-20T07:15:43.527464Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tiktokshopsell.com/assets/use-auth-DcjUPLMJ.js","fqdn":"tiktokshopsell.com","domain":"tiktokshopsell.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"importedModule","is_inline":false,"md5":"b411eb0bd0136000e4526c2fb37fde50","sha1":"507c764e18d39ab6f3bead2835ea2b4404dd4d6b","sha256":"51f02a99dc744213044c61cc30cb38d35b4cbe2ed6c11fe6b9e6e561818bc243","sha512":"034074262617d8b96e910ef98559e4d304bd0e8a5313296889b70f4ec5eabbcd71871a6b626ad02721ed00e99d469517d35c90b754fb50c2149f8ec00c0c5fe3","ssdeep":"","tlshash":"90e05cea6425ecb8444484e1cd7fc44047312c6eb627518191b91d5c47785857e4e976","size":435,"data":"","first_seen":"2026-05-20T07:15:43.523605Z","last_seen":"2026-05-20T07:15:43.523605Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tiktokshopsell.com/assets/login-JteViNgu.js","fqdn":"tiktokshopsell.com","domain":"tiktokshopsell.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"7b0fb7bda04d4e76781595a56f14c52b","sha1":"2c697414f08710f33005c96b8b4035b2813b1dce","sha256":"f9c48318df712b3f825c54fada042fbc87d9c242a4f4426980a2dd67a3d911b9","sha512":"a4b9d39e37cc44a75e01f7a21408e9de63eb265541cf194f55f3c61c798be02ae82be09d57a9ede55a36896c0ecea55fbfd893c5dedd70a6b1031a8b59dd18eb","ssdeep":"96:6HkKSuvssd+HOAe35XrnxDmF4y6n3VE/hqvOXtx1J7HkRx:6HkKhhoH05XrQFD6n3adx1Jjk3","tlshash":"3191a614f0116fefed5208f8956ea004711f0a8cde1b8aa9f1be24270fa65957f637c5","size":4233,"data":"","first_seen":"2026-05-20T07:15:43.530725Z","last_seen":"2026-05-20T07:15:43.530725Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"tiktokshopsell.com/assets/index-DPVPldsJ.js","fqdn":"tiktokshopsell.com","domain":"tiktokshopsell.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tiktokshopsell.com/","date":"2026-05-20T07:15:17.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tiktokshopsell.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 May 2026 13:50:23 GMT","end":"Mon, 17 Aug 2026 14:50:07 GMT"},"fingerprint":{"sha1":"4D:BE:82:C9:60:59:34:F9:73:84:12:F5:4A:69:4A:11:8D:D3:55:53","sha256":"7B:33:A4:D4:23:00:3E:30:C1:66:3D:17:77:98:E2:D1:84:4B:F2:DE:B8:A5:00:45:50:7E:E5:69:B1:2B:AF:F0"}}},"request":{"raw":"GET /assets/index-DPVPldsJ.js HTTP/1.1\r\nHost: tiktokshopsell.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tiktokshopsell.com/assets/index-BywgOftg.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __dpl=6fa2651cf76ea0010c5f532d34a6a46edd6ff1c5174934d8c57e6abdc89de421; __cf_bm=LgTP70n_Dz_XRT0OvLRM4gtqQGT7pCbdVtSPZnVzFew-1779261315.5932605-1.0.1.1-qel68.e3s9xKC6R8153jxCdxzI88WUunFXp5VGjB6AtbQwsx3Shwe.PlCOIaBYurLEWHo4YuIcU6IDHaRs3c..yG.iAYDW5Z3_SPY0gQWWG2a80qveh72dsd2wVP4wwt; session-id=90ffccb2-fb9a-4e3d-9eda-773de062fc7f\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 20 May 2026 07:15:17 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 6fa2651cf76ea0010c5f532d34a6a46edd6ff1c5174934d8c57e6abdc89de421\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9fe98ca10b065688-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":467,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (466)","md5":"3f689b65a5fbb8e9cd309bd1bfde5808","sha1":"0b7146f8797098de6b68f2e796ea3820965824b7","sha256":"e511c9630d1bcd1b5528186ce73fe2e79b45d9cc0908b9e21876ea75b867d73f","sha512":"13c52a1c74d8ca8edc2cabf9d0f4fe39e95254f98f776b1a87c5d167b453b20aaa7214ec38ca155b2706d198b4d27151e8af8192bdd46c89b2640a89f2c04b43","ssdeep":"","tlshash":"2df0d4dee001de7e459749d4bd6d586190310674977c46d2f1fd01390fa1054aa5da19","first_seen":"2026-05-20T07:15:43.522539Z","last_seen":"2026-05-20T07:15:43.522539Z","times_seen":1,"resource_available":true,"data":null}},"time_used":269,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":269,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"tiktokshopsell.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-20","alert":"Phishing Block","trigger":"tiktokshopsell.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"tiktokshopsell.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tiktokshopsell.com/assets/use-auth-DcjUPLMJ.js","fqdn":"tiktokshopsell.com","domain":"tiktokshopsell.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tiktokshopsell.com/","date":"2026-05-20T07:15:17.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tiktokshopsell.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 May 2026 13:50:23 GMT","end":"Mon, 17 Aug 2026 14:50:07 GMT"},"fingerprint":{"sha1":"4D:BE:82:C9:60:59:34:F9:73:84:12:F5:4A:69:4A:11:8D:D3:55:53","sha256":"7B:33:A4:D4:23:00:3E:30:C1:66:3D:17:77:98:E2:D1:84:4B:F2:DE:B8:A5:00:45:50:7E:E5:69:B1:2B:AF:F0"}}},"request":{"raw":"GET /assets/use-auth-DcjUPLMJ.js HTTP/1.1\r\nHost: tiktokshopsell.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tiktokshopsell.com/assets/index-DPVPldsJ.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __dpl=6fa2651cf76ea0010c5f532d34a6a46edd6ff1c5174934d8c57e6abdc89de421; __cf_bm=LgTP70n_Dz_XRT0OvLRM4gtqQGT7pCbdVtSPZnVzFew-1779261315.5932605-1.0.1.1-qel68.e3s9xKC6R8153jxCdxzI88WUunFXp5VGjB6AtbQwsx3Shwe.PlCOIaBYurLEWHo4YuIcU6IDHaRs3c..yG.iAYDW5Z3_SPY0gQWWG2a80qveh72dsd2wVP4wwt; session-id=90ffccb2-fb9a-4e3d-9eda-773de062fc7f\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 20 May 2026 07:15:17 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 6fa2651cf76ea0010c5f532d34a6a46edd6ff1c5174934d8c57e6abdc89de421\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9fe98ca2cd255688-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":435,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (434)","md5":"b411eb0bd0136000e4526c2fb37fde50","sha1":"507c764e18d39ab6f3bead2835ea2b4404dd4d6b","sha256":"51f02a99dc744213044c61cc30cb38d35b4cbe2ed6c11fe6b9e6e561818bc243","sha512":"034074262617d8b96e910ef98559e4d304bd0e8a5313296889b70f4ec5eabbcd71871a6b626ad02721ed00e99d469517d35c90b754fb50c2149f8ec00c0c5fe3","ssdeep":"","tlshash":"90e05cea6425ecb8444484e1cd7fc44047312c6eb627518191b91d5c47785857e4e976","first_seen":"2026-05-20T07:15:43.523605Z","last_seen":"2026-05-20T07:15:43.523605Z","times_seen":1,"resource_available":true,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"tiktokshopsell.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"tiktokshopsell.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-20","alert":"Phishing Block","trigger":"tiktokshopsell.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tiktokshopsell.com/assets/loader-circle-D7SkTCHl.js","fqdn":"tiktokshopsell.com","domain":"tiktokshopsell.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tiktokshopsell.com/","date":"2026-05-20T07:15:18.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tiktokshopsell.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 May 2026 13:50:23 GMT","end":"Mon, 17 Aug 2026 14:50:07 GMT"},"fingerprint":{"sha1":"4D:BE:82:C9:60:59:34:F9:73:84:12:F5:4A:69:4A:11:8D:D3:55:53","sha256":"7B:33:A4:D4:23:00:3E:30:C1:66:3D:17:77:98:E2:D1:84:4B:F2:DE:B8:A5:00:45:50:7E:E5:69:B1:2B:AF:F0"}}},"request":{"raw":"GET /assets/loader-circle-D7SkTCHl.js HTTP/1.1\r\nHost: tiktokshopsell.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tiktokshopsell.com/assets/login-JteViNgu.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __dpl=6fa2651cf76ea0010c5f532d34a6a46edd6ff1c5174934d8c57e6abdc89de421; __cf_bm=LgTP70n_Dz_XRT0OvLRM4gtqQGT7pCbdVtSPZnVzFew-1779261315.5932605-1.0.1.1-qel68.e3s9xKC6R8153jxCdxzI88WUunFXp5VGjB6AtbQwsx3Shwe.PlCOIaBYurLEWHo4YuIcU6IDHaRs3c..yG.iAYDW5Z3_SPY0gQWWG2a80qveh72dsd2wVP4wwt; session-id=90ffccb2-fb9a-4e3d-9eda-773de062fc7f\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 20 May 2026 07:15:18 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 6fa2651cf76ea0010c5f532d34a6a46edd6ff1c5174934d8c57e6abdc89de421\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9fe98ca6b9d75688-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":151,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text","md5":"a50b33502c2653db0ed04843f767b974","sha1":"5d647ffac56bc66854689bfac3fe65e06bf456cc","sha256":"8ea382c543f1cad3942dffb9ed17bcc60df04cc8dae94098f4a5138e28617383","sha512":"b625a45ed0bd8a3b047db517fd63e24c033484d8a274c58dfaa5fc4fffe87f351e61e37facf842c4c934ca4f96eb1f956c1c0119ab22560b44067a49f0c75542","ssdeep":"","tlshash":"ecc08c2a6f2408a506028e9a0225b2005d51065213c10ed660548b3bc2834d7a0efe86","first_seen":"2026-05-20T07:15:43.524686Z","last_seen":"2026-05-20T07:15:43.524686Z","times_seen":1,"resource_available":true,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"tiktokshopsell.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-20","alert":"Phishing Block","trigger":"tiktokshopsell.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"tiktokshopsell.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tiktokshopsell.com/assets/tiktok-logo-login-D82VK-rI.png","fqdn":"tiktokshopsell.com","domain":"tiktokshopsell.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokshopsell.com/","date":"2026-05-20T07:15:18.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tiktokshopsell.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 May 2026 13:50:23 GMT","end":"Mon, 17 Aug 2026 14:50:07 GMT"},"fingerprint":{"sha1":"4D:BE:82:C9:60:59:34:F9:73:84:12:F5:4A:69:4A:11:8D:D3:55:53","sha256":"7B:33:A4:D4:23:00:3E:30:C1:66:3D:17:77:98:E2:D1:84:4B:F2:DE:B8:A5:00:45:50:7E:E5:69:B1:2B:AF:F0"}}},"request":{"raw":"GET /assets/tiktok-logo-login-D82VK-rI.png HTTP/1.1\r\nHost: tiktokshopsell.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tiktokshopsell.com/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __dpl=6fa2651cf76ea0010c5f532d34a6a46edd6ff1c5174934d8c57e6abdc89de421; __cf_bm=LgTP70n_Dz_XRT0OvLRM4gtqQGT7pCbdVtSPZnVzFew-1779261315.5932605-1.0.1.1-qel68.e3s9xKC6R8153jxCdxzI88WUunFXp5VGjB6AtbQwsx3Shwe.PlCOIaBYurLEWHo4YuIcU6IDHaRs3c..yG.iAYDW5Z3_SPY0gQWWG2a80qveh72dsd2wVP4wwt; session-id=90ffccb2-fb9a-4e3d-9eda-773de062fc7f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T09:51:56.860212Z","times_seen":17869789,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"tiktokshopsell.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-20","alert":"Phishing Block","trigger":"tiktokshopsell.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"tiktokshopsell.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tiktokshopsell.com/assets/tiktok-logo-login-D82VK-rI.png","fqdn":"tiktokshopsell.com","domain":"tiktokshopsell.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tiktokshopsell.com/","date":"2026-05-20T07:15:18.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tiktokshopsell.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 May 2026 13:50:23 GMT","end":"Mon, 17 Aug 2026 14:50:07 GMT"},"fingerprint":{"sha1":"4D:BE:82:C9:60:59:34:F9:73:84:12:F5:4A:69:4A:11:8D:D3:55:53","sha256":"7B:33:A4:D4:23:00:3E:30:C1:66:3D:17:77:98:E2:D1:84:4B:F2:DE:B8:A5:00:45:50:7E:E5:69:B1:2B:AF:F0"}}},"request":{"raw":"GET /assets/tiktok-logo-login-D82VK-rI.png HTTP/1.1\r\nHost: tiktokshopsell.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tiktokshopsell.com/login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __dpl=6fa2651cf76ea0010c5f532d34a6a46edd6ff1c5174934d8c57e6abdc89de421; __cf_bm=LgTP70n_Dz_XRT0OvLRM4gtqQGT7pCbdVtSPZnVzFew-1779261315.5932605-1.0.1.1-qel68.e3s9xKC6R8153jxCdxzI88WUunFXp5VGjB6AtbQwsx3Shwe.PlCOIaBYurLEWHo4YuIcU6IDHaRs3c..yG.iAYDW5Z3_SPY0gQWWG2a80qveh72dsd2wVP4wwt; session-id=90ffccb2-fb9a-4e3d-9eda-773de062fc7f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 20 May 2026 07:15:18 GMT\r\ncontent-type: image/png\r\ncontent-length: 46937\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 6fa2651cf76ea0010c5f532d34a6a46edd6ff1c5174934d8c57e6abdc89de421\r\nserver: cloudflare\r\ncf-ray: 9fe98ca88b6b5688-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46937,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 855 x 855, 8-bit/color RGBA, non-interlaced","md5":"ef84d93f4f0d046cddcc4e72638eafc6","sha1":"b56edab9eec7d83d3cf4e7ff4985be144d90e18e","sha256":"9c4336ea8aafc8d56201a7c5530573507dbfa6881f73ca5239578866114ec339","sha512":"0bb3989af63f94b879a128f02a7a90c93c0818a011f751620da9043a45a295235b0a7e0172607d2739f482b90acbae44110c862c94845cdfe0d1d4ce5d478632","ssdeep":"768:HndYAeotbUfKSzQr4qaiGE9Lp+4qbRV8TZVIM4PgV+fFBYoVo7CRKBxKcd:Hd7lUfKmQrraiFqbRdnE+fFBRo7pBgcd","tlshash":"7223e17b4d2746caec3b3234065c350d1db6ba84aaefe4b7e5949604ac177a0180fb37","first_seen":"2026-05-20T07:15:43.52651Z","last_seen":"2026-05-20T07:15:43.52651Z","times_seen":1,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":235,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"tiktokshopsell.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-20","alert":"Phishing Block","trigger":"tiktokshopsell.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"tiktokshopsell.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tiktokshopsell.com/assets/index-BywgOftg.js","fqdn":"tiktokshopsell.com","domain":"tiktokshopsell.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tiktokshopsell.com/","date":"2026-05-20T07:15:16.948Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tiktokshopsell.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 May 2026 13:50:23 GMT","end":"Mon, 17 Aug 2026 14:50:07 GMT"},"fingerprint":{"sha1":"4D:BE:82:C9:60:59:34:F9:73:84:12:F5:4A:69:4A:11:8D:D3:55:53","sha256":"7B:33:A4:D4:23:00:3E:30:C1:66:3D:17:77:98:E2:D1:84:4B:F2:DE:B8:A5:00:45:50:7E:E5:69:B1:2B:AF:F0"}}},"request":{"raw":"GET /assets/index-BywgOftg.js HTTP/1.1\r\nHost: tiktokshopsell.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tiktokshopsell.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __dpl=6fa2651cf76ea0010c5f532d34a6a46edd6ff1c5174934d8c57e6abdc89de421; __cf_bm=LgTP70n_Dz_XRT0OvLRM4gtqQGT7pCbdVtSPZnVzFew-1779261315.5932605-1.0.1.1-qel68.e3s9xKC6R8153jxCdxzI88WUunFXp5VGjB6AtbQwsx3Shwe.PlCOIaBYurLEWHo4YuIcU6IDHaRs3c..yG.iAYDW5Z3_SPY0gQWWG2a80qveh72dsd2wVP4wwt\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 20 May 2026 07:15:17 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 6fa2651cf76ea0010c5f532d34a6a46edd6ff1c5174934d8c57e6abdc89de421\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9fe98c9ee8985688-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":387122,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (41996)","md5":"58e5bf14e456aeab198d82e43279e152","sha1":"0344eea5cffef954672ace9c185e3111eb806667","sha256":"13b107e693cf96a68137344f92d77add7c5541b4f2aaee53f9ac2adc7c0e940a","sha512":"18c7eb84fd1a2db2525d90d5ccda606f95a2ffff8f55ea7432ee205d83cf71ed25e10e1b04502bef00baa09092f2ca5ef2e7198e8e4b890020e41b8f186b2ed1","ssdeep":"6144:o2GkCr3sCCOOpwfcjqdZkUa1y/5+dhH0Raoe2ietACB7z66Q420eL1:zGS8fadXcTDM6Q4zY","tlshash":"f4844de83199b6211be355e4407f1107b1392c23344c8460f268edee7ab598a65bbffd","first_seen":"2026-05-20T07:15:43.527464Z","last_seen":"2026-05-20T07:15:43.527464Z","times_seen":1,"resource_available":true,"data":null}},"time_used":258,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-20","alert":"Phishing Block","trigger":"tiktokshopsell.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"tiktokshopsell.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"tiktokshopsell.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gpteng.co/mcp-widgets/v1/fonts/CameraPlainVariable.woff2","fqdn":"cdn.gpteng.co","domain":"gpteng.co","tld":"co"},"ip":{"addr":"104.18.28.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tiktokshopsell.com/","date":"2026-05-20T07:15:16.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.gpteng.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 20:25:47 GMT","end":"Sun, 12 Jul 2026 21:25:38 GMT"},"fingerprint":{"sha1":"B5:C2:5D:87:D7:51:E0:73:8D:83:C4:92:3B:A5:57:F0:18:C3:10:15","sha256":"B7:2A:6D:36:CB:2E:C6:82:0E:25:CC:93:EE:AC:6C:04:54:D4:F1:4C:15:85:D1:44:FB:0F:51:54:CB:A0:39:00"}}},"request":{"raw":"GET /mcp-widgets/v1/fonts/CameraPlainVariable.woff2 HTTP/1.1\r\nHost: cdn.gpteng.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://tiktokshopsell.com/\r\nOrigin: https://tiktokshopsell.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 20 May 2026 07:15:17 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 133760\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\netag: \"c48bd2439e2921fc4d3aaef0e57446be\"\r\nlast-modified: Wed, 10 Dec 2025 13:46:40 GMT\r\nvary: Origin\r\nserver: cloudflare\r\nset-cookie: __cf_bm=h6FannttCNf30oM7RMfxC6ZOkrJJM0r4Yna6iDfpD04-1779261317.0132768-1.0.1.1-RR5ujqCt0PnCnclCRT1fYU3OMMNckUBOf3c41a7dhrHVDWu_kVIY59k0RQv.JEZtYB0BF9ISbOwzkNmRlLJ_Wmu_OWauPs_1n6HthUUIGy_h.ZQR3MCvAg87Ou4f79ob; HttpOnly; SameSite=None; Secure; Path=/; Domain=gpteng.co; Expires=Wed, 20 May 2026 07:45:17 GMT\r\ncf-cache-status: HIT\r\nexpires: Wed, 20 May 2026 11:15:17 GMT\r\ncache-control: public, max-age=14400\r\ncf-ray: 9fe98c9f5951a41f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":133760,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 133760, version 2.0","md5":"c48bd2439e2921fc4d3aaef0e57446be","sha1":"396596764aebbe25ba1c45f19091f48a7e17a9e5","sha256":"0f4491b0f9f6b9c3e6054a9f0036583e3978fd3a8d8f49ba5da05d63cf875cbb","sha512":"cb9ff1ede5ea280e8586c3e6e84c68685b3749fa492fb1babef3d0bb72ab1b095b1c00531554ead12e31139f226c7aa96399b11fd6ae256ea134639d98d95b64","ssdeep":"3072:OWSP0iIzCkvibLej77I/9GRBm7Xy2TJ46tNP7HlgXffTp/CGZ7YpV/z:OdYGkviXe7l87C2XtBC1/CGin/z","tlshash":"d9d3123e2ad0e463aba505b13a7f65808a2e5f11e3c773c145b274cfd5302a8236da7d","first_seen":"2025-04-23T20:37:12.507957Z","last_seen":"2026-08-13T06:38:30.383436Z","times_seen":1893,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":21,"dns":5,"connect":1,"send":0,"wait":68,"receive":5,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tiktokshopsell.com/~api/analytics","fqdn":"tiktokshopsell.com","domain":"tiktokshopsell.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tiktokshopsell.com/","date":"2026-05-20T07:15:17.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tiktokshopsell.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 May 2026 13:50:23 GMT","end":"Mon, 17 Aug 2026 14:50:07 GMT"},"fingerprint":{"sha1":"4D:BE:82:C9:60:59:34:F9:73:84:12:F5:4A:69:4A:11:8D:D3:55:53","sha256":"7B:33:A4:D4:23:00:3E:30:C1:66:3D:17:77:98:E2:D1:84:4B:F2:DE:B8:A5:00:45:50:7E:E5:69:B1:2B:AF:F0"}}},"request":{"raw":"POST /~api/analytics HTTP/1.1\r\nHost: tiktokshopsell.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tiktokshopsell.com/\r\nContent-Type: application/json\r\nContent-Length: 339\r\nOrigin: https://tiktokshopsell.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __dpl=6fa2651cf76ea0010c5f532d34a6a46edd6ff1c5174934d8c57e6abdc89de421; __cf_bm=LgTP70n_Dz_XRT0OvLRM4gtqQGT7pCbdVtSPZnVzFew-1779261315.5932605-1.0.1.1-qel68.e3s9xKC6R8153jxCdxzI88WUunFXp5VGjB6AtbQwsx3Shwe.PlCOIaBYurLEWHo4YuIcU6IDHaRs3c..yG.iAYDW5Z3_SPY0gQWWG2a80qveh72dsd2wVP4wwt; session-id=90ffccb2-fb9a-4e3d-9eda-773de062fc7f\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":339,"data":"{\"timestamp\":\"2026-05-20T07:15:17.291Z\",\"action\":\"page_hit\",\"version\":\"1\",\"session_id\":\"90ffccb2-fb9a-4e3d-9eda-773de062fc7f\",\"payload\":\"{\\\"user-agent\\\":\\\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\\\",\\\"locale\\\":\\\"en-US\\\",\\\"referrer\\\":\\\"\\\",\\\"pathname\\\":\\\"/\\\",\\\"href\\\":\\\"https://tiktokshopsell.com/\\\"}\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 20 May 2026 07:15:18 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 4\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 9fe98ca11b0e5688-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"f92965e2c8a7afb3c1b9a5c09a263636","sha1":"e9b450d14bc2363d292c84f17cfad5cfbd58a458","sha256":"11a6767d5674c7e45f7e00dc525762275b3a48491ad6045427d2609cc496c516","sha512":"25775ba3c567970fc3df3f8107f2a78a67c5619d54bfb37704423acceec253316949eee77b81100a01b91c742e475b4f6157dd2427a9f9fafd87a4078f2d65df","ssdeep":"","tlshash":"54300000000000000000c00c00000000000000000c0000000000000000000000000000","first_seen":"2023-04-09T18:20:08Z","last_seen":"2026-08-13T03:36:38.061723Z","times_seen":12922,"resource_available":true,"data":null}},"time_used":1669,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1669,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"tiktokshopsell.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-20","alert":"Phishing Block","trigger":"tiktokshopsell.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"tiktokshopsell.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tiktokshopsell.com/assets/client-Cput_dEt.js","fqdn":"tiktokshopsell.com","domain":"tiktokshopsell.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tiktokshopsell.com/","date":"2026-05-20T07:15:17.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tiktokshopsell.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 May 2026 13:50:23 GMT","end":"Mon, 17 Aug 2026 14:50:07 GMT"},"fingerprint":{"sha1":"4D:BE:82:C9:60:59:34:F9:73:84:12:F5:4A:69:4A:11:8D:D3:55:53","sha256":"7B:33:A4:D4:23:00:3E:30:C1:66:3D:17:77:98:E2:D1:84:4B:F2:DE:B8:A5:00:45:50:7E:E5:69:B1:2B:AF:F0"}}},"request":{"raw":"GET /assets/client-Cput_dEt.js HTTP/1.1\r\nHost: tiktokshopsell.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tiktokshopsell.com/assets/index-DPVPldsJ.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __dpl=6fa2651cf76ea0010c5f532d34a6a46edd6ff1c5174934d8c57e6abdc89de421; __cf_bm=LgTP70n_Dz_XRT0OvLRM4gtqQGT7pCbdVtSPZnVzFew-1779261315.5932605-1.0.1.1-qel68.e3s9xKC6R8153jxCdxzI88WUunFXp5VGjB6AtbQwsx3Shwe.PlCOIaBYurLEWHo4YuIcU6IDHaRs3c..yG.iAYDW5Z3_SPY0gQWWG2a80qveh72dsd2wVP4wwt; session-id=90ffccb2-fb9a-4e3d-9eda-773de062fc7f\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 20 May 2026 07:15:17 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 6fa2651cf76ea0010c5f532d34a6a46edd6ff1c5174934d8c57e6abdc89de421\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9fe98ca2cd265688-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":205255,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (27734)","md5":"23c13dcccd3a2a1734904591cd94a580","sha1":"577c121d40f3ca896f5086a2212e476756e42794","sha256":"3b4644aada9b237abc393e9f366e5d588ec2af2a6b923b3cc561af5a9d623ff5","sha512":"d14465f3fa08e13030427e28b7a3688cda2c618f7045b1ae965962d3526b6d3b892da751ff61f8cb8a7fcdb57b45d5020165284a3e410686d6eface015b7645b","ssdeep":"6144:Cdy9Cw2WzQiXnYAqdduvxKo2ItzJyXyUAMAJZKBEIL2t:jTQiXYAWduvxKopCyL","tlshash":"051418c4b3b6547206d194e1d4351603f3397909b81e806cfbac1edb6ea9909eb3be35","first_seen":"2026-05-20T07:15:43.529499Z","last_seen":"2026-05-20T07:15:43.529499Z","times_seen":1,"resource_available":true,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":279,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-20","alert":"Phishing Block","trigger":"tiktokshopsell.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"tiktokshopsell.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"tiktokshopsell.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tiktokshopsell.com/assets/login-JteViNgu.js","fqdn":"tiktokshopsell.com","domain":"tiktokshopsell.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tiktokshopsell.com/","date":"2026-05-20T07:15:17.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tiktokshopsell.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 May 2026 13:50:23 GMT","end":"Mon, 17 Aug 2026 14:50:07 GMT"},"fingerprint":{"sha1":"4D:BE:82:C9:60:59:34:F9:73:84:12:F5:4A:69:4A:11:8D:D3:55:53","sha256":"7B:33:A4:D4:23:00:3E:30:C1:66:3D:17:77:98:E2:D1:84:4B:F2:DE:B8:A5:00:45:50:7E:E5:69:B1:2B:AF:F0"}}},"request":{"raw":"GET /assets/login-JteViNgu.js HTTP/1.1\r\nHost: tiktokshopsell.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tiktokshopsell.com/assets/index-BywgOftg.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __dpl=6fa2651cf76ea0010c5f532d34a6a46edd6ff1c5174934d8c57e6abdc89de421; __cf_bm=LgTP70n_Dz_XRT0OvLRM4gtqQGT7pCbdVtSPZnVzFew-1779261315.5932605-1.0.1.1-qel68.e3s9xKC6R8153jxCdxzI88WUunFXp5VGjB6AtbQwsx3Shwe.PlCOIaBYurLEWHo4YuIcU6IDHaRs3c..yG.iAYDW5Z3_SPY0gQWWG2a80qveh72dsd2wVP4wwt; session-id=90ffccb2-fb9a-4e3d-9eda-773de062fc7f\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 20 May 2026 07:15:18 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 6fa2651cf76ea0010c5f532d34a6a46edd6ff1c5174934d8c57e6abdc89de421\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9fe98ca52f985688-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4233,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (3413)","md5":"7b0fb7bda04d4e76781595a56f14c52b","sha1":"2c697414f08710f33005c96b8b4035b2813b1dce","sha256":"f9c48318df712b3f825c54fada042fbc87d9c242a4f4426980a2dd67a3d911b9","sha512":"a4b9d39e37cc44a75e01f7a21408e9de63eb265541cf194f55f3c61c798be02ae82be09d57a9ede55a36896c0ecea55fbfd893c5dedd70a6b1031a8b59dd18eb","ssdeep":"96:6HkKSuvssd+HOAe35XrnxDmF4y6n3VE/hqvOXtx1J7HkRx:6HkKhhoH05XrQFD6n3adx1Jjk3","tlshash":"3191a614f0116fefed5208f8956ea004711f0a8cde1b8aa9f1be24270fa65957f637c5","first_seen":"2026-05-20T07:15:43.530725Z","last_seen":"2026-05-20T07:15:43.530725Z","times_seen":1,"resource_available":true,"data":null}},"time_used":241,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-20","alert":"Phishing Block","trigger":"tiktokshopsell.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"tiktokshopsell.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"tiktokshopsell.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tiktokshopsell.com/assets/createLucideIcon-CxNPK2-O.js","fqdn":"tiktokshopsell.com","domain":"tiktokshopsell.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tiktokshopsell.com/","date":"2026-05-20T07:15:18.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tiktokshopsell.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 May 2026 13:50:23 GMT","end":"Mon, 17 Aug 2026 14:50:07 GMT"},"fingerprint":{"sha1":"4D:BE:82:C9:60:59:34:F9:73:84:12:F5:4A:69:4A:11:8D:D3:55:53","sha256":"7B:33:A4:D4:23:00:3E:30:C1:66:3D:17:77:98:E2:D1:84:4B:F2:DE:B8:A5:00:45:50:7E:E5:69:B1:2B:AF:F0"}}},"request":{"raw":"GET /assets/createLucideIcon-CxNPK2-O.js HTTP/1.1\r\nHost: tiktokshopsell.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tiktokshopsell.com/assets/login-JteViNgu.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __dpl=6fa2651cf76ea0010c5f532d34a6a46edd6ff1c5174934d8c57e6abdc89de421; __cf_bm=LgTP70n_Dz_XRT0OvLRM4gtqQGT7pCbdVtSPZnVzFew-1779261315.5932605-1.0.1.1-qel68.e3s9xKC6R8153jxCdxzI88WUunFXp5VGjB6AtbQwsx3Shwe.PlCOIaBYurLEWHo4YuIcU6IDHaRs3c..yG.iAYDW5Z3_SPY0gQWWG2a80qveh72dsd2wVP4wwt; session-id=90ffccb2-fb9a-4e3d-9eda-773de062fc7f\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 20 May 2026 07:15:18 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 6fa2651cf76ea0010c5f532d34a6a46edd6ff1c5174934d8c57e6abdc89de421\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9fe98ca6b9df5688-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1202,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (1201)","md5":"378b4feddb818c3e5b77e485ca676e8b","sha1":"fab7fa1b4c77bd62e12d883cabbdb554bec89c69","sha256":"c3f00b9a62eef350bfd46e20cdc0e636ac51c8a25b1abb274860def03b376b5f","sha512":"d1116bef5b7b0efb20101059a4ea256c28e3d158dd8b4193171f37277eaf264ff4fb80bc4e86bca42332582534c4ebf5876cad15ec1ce73e74f2f13f3a844f21","ssdeep":"","tlshash":"cb214408b3d4283ca23594dd96583069ec779a28f9635a58d2fc5d2a3623042a337acc","first_seen":"2026-05-20T07:15:43.531629Z","last_seen":"2026-05-20T07:15:43.531629Z","times_seen":1,"resource_available":true,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-20","alert":"Phishing Block","trigger":"tiktokshopsell.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"tiktokshopsell.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"tiktokshopsell.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tiktokshopsell.com/","fqdn":"tiktokshopsell.com","domain":"tiktokshopsell.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-20T07:15:15.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tiktokshopsell.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 May 2026 13:50:23 GMT","end":"Mon, 17 Aug 2026 14:50:07 GMT"},"fingerprint":{"sha1":"4D:BE:82:C9:60:59:34:F9:73:84:12:F5:4A:69:4A:11:8D:D3:55:53","sha256":"7B:33:A4:D4:23:00:3E:30:C1:66:3D:17:77:98:E2:D1:84:4B:F2:DE:B8:A5:00:45:50:7E:E5:69:B1:2B:AF:F0"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: tiktokshopsell.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 20 May 2026 07:15:16 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, must-revalidate, max-age=0\r\nx-deployment-id: 6fa2651cf76ea0010c5f532d34a6a46edd6ff1c5174934d8c57e6abdc89de421\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nset-cookie: __dpl=6fa2651cf76ea0010c5f532d34a6a46edd6ff1c5174934d8c57e6abdc89de421; Path=/; Max-Age=86400; SameSite=Lax; Secure\n__cf_bm=LgTP70n_Dz_XRT0OvLRM4gtqQGT7pCbdVtSPZnVzFew-1779261315.5932605-1.0.1.1-qel68.e3s9xKC6R8153jxCdxzI88WUunFXp5VGjB6AtbQwsx3Shwe.PlCOIaBYurLEWHo4YuIcU6IDHaRs3c..yG.iAYDW5Z3_SPY0gQWWG2a80qveh72dsd2wVP4wwt; HttpOnly; SameSite=None; Secure; Path=/; Domain=tiktokshopsell.com; Expires=Wed, 20 May 2026 07:45:16 GMT\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9fe98c967f005688-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12439,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"data","md5":"ce6cabe82bde021c3616ed1706863e6e","sha1":"bb0963f82009c0b9a08bef185fc177f33555761a","sha256":"c078efbf24ff9a599d96f59132320d8b2d550101aadd0af5ce001896a3cdec0e","sha512":"f21181a2e856ae29b7652e27cbb53e900fce082065168f9b28d327aff4df15b14ef09c9ecb7e23a1e404991b1907d1bf81a6e7e289a2c2fa7a93e791ac7f2532","ssdeep":"96:tzX5TLpAUDTU15OA3lghaoX9DSjxpeHTw0eLso4I/Ev67g2+3wehaBQ8VjKx3Nut:hTUqYvd34DAjywAcQSyUZxBH73YXQ","tlshash":"52420ad3c314a53e4361e2bcfea4e4c4137990f2ea448de5f5ae497916c7a98e107e60","first_seen":"2026-05-20T07:15:43.532958Z","last_seen":"2026-05-20T07:15:43.532958Z","times_seen":1,"resource_available":false,"data":null}},"time_used":936,"timings":{"blocked":44,"dns":31,"connect":1,"send":0,"wait":839,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"tiktokshopsell.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"tiktokshopsell.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-20","alert":"Phishing Block","trigger":"tiktokshopsell.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tiktokshopsell.com/assets/styles-y7UR1JaT.css","fqdn":"tiktokshopsell.com","domain":"tiktokshopsell.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tiktokshopsell.com/","date":"2026-05-20T07:15:16.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tiktokshopsell.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 May 2026 13:50:23 GMT","end":"Mon, 17 Aug 2026 14:50:07 GMT"},"fingerprint":{"sha1":"4D:BE:82:C9:60:59:34:F9:73:84:12:F5:4A:69:4A:11:8D:D3:55:53","sha256":"7B:33:A4:D4:23:00:3E:30:C1:66:3D:17:77:98:E2:D1:84:4B:F2:DE:B8:A5:00:45:50:7E:E5:69:B1:2B:AF:F0"}}},"request":{"raw":"GET /assets/styles-y7UR1JaT.css HTTP/1.1\r\nHost: tiktokshopsell.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tiktokshopsell.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __dpl=6fa2651cf76ea0010c5f532d34a6a46edd6ff1c5174934d8c57e6abdc89de421; __cf_bm=LgTP70n_Dz_XRT0OvLRM4gtqQGT7pCbdVtSPZnVzFew-1779261315.5932605-1.0.1.1-qel68.e3s9xKC6R8153jxCdxzI88WUunFXp5VGjB6AtbQwsx3Shwe.PlCOIaBYurLEWHo4YuIcU6IDHaRs3c..yG.iAYDW5Z3_SPY0gQWWG2a80qveh72dsd2wVP4wwt\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 20 May 2026 07:15:16 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 6fa2651cf76ea0010c5f532d34a6a46edd6ff1c5174934d8c57e6abdc89de421\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9fe98c9cbda55688-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":87989,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"f6109dd0a1eed275cd6a2b5c14a0fcb3","sha1":"c2afb761f8e31b2fca463110cd8765d4624e61d0","sha256":"36cf1a4cb304e23742b425430548a040b79db281c001f3fc3c2679c5350a2276","sha512":"e86c34b41b8de0fcc497482c08a06e5cc96cb5881cc76026935c61fef9e1d5a88d53081923dcd4a238c72c7583c9db908000d5dd4b07ba49c3d2bbf9c9db62f7","ssdeep":"1536:T08JPV0Meh+jGGKxgFygE0ES6rV91GHOahSsMq+WDhXX7RHLPXJUzcWlw988R98R:A8JPV0Meh+jGGKaFykES6rV91K5Mq+Wg","tlshash":"4983c594b229d93fbc33a4f5938cb85c9119b0c0dd3546e8fe16612217c7bf29dab618","first_seen":"2026-05-20T07:15:43.533818Z","last_seen":"2026-05-20T07:15:43.533818Z","times_seen":1,"resource_available":false,"data":null}},"time_used":305,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":305,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"tiktokshopsell.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"tiktokshopsell.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-20","alert":"Phishing Block","trigger":"tiktokshopsell.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tiktokshopsell.com/~flock.js","fqdn":"tiktokshopsell.com","domain":"tiktokshopsell.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tiktokshopsell.com/","date":"2026-05-20T07:15:16.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tiktokshopsell.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 May 2026 13:50:23 GMT","end":"Mon, 17 Aug 2026 14:50:07 GMT"},"fingerprint":{"sha1":"4D:BE:82:C9:60:59:34:F9:73:84:12:F5:4A:69:4A:11:8D:D3:55:53","sha256":"7B:33:A4:D4:23:00:3E:30:C1:66:3D:17:77:98:E2:D1:84:4B:F2:DE:B8:A5:00:45:50:7E:E5:69:B1:2B:AF:F0"}}},"request":{"raw":"GET /~flock.js HTTP/1.1\r\nHost: tiktokshopsell.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tiktokshopsell.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __dpl=6fa2651cf76ea0010c5f532d34a6a46edd6ff1c5174934d8c57e6abdc89de421; __cf_bm=LgTP70n_Dz_XRT0OvLRM4gtqQGT7pCbdVtSPZnVzFew-1779261315.5932605-1.0.1.1-qel68.e3s9xKC6R8153jxCdxzI88WUunFXp5VGjB6AtbQwsx3Shwe.PlCOIaBYurLEWHo4YuIcU6IDHaRs3c..yG.iAYDW5Z3_SPY0gQWWG2a80qveh72dsd2wVP4wwt\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 20 May 2026 07:15:16 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: max-age=1500\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9fe98c9cbda75688-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21296,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (21296), with no line terminators","md5":"ed557a78d5301fbb961abfe911a42b62","sha1":"d11a2a4e9fee28c4b1abc38cd8136bffec7e325b","sha256":"a86e084b4f82709814be6c15fd6305daa783fda87ad95402da9a4d3a1dd6d748","sha512":"18dd1525e2b4d89e3c46d92367fca020cf99fb07856acfd96a25dc7410611eea83b438c91691683983495945eb04a9427bc63e2a383cbe93449f4df0eb1ddb51","ssdeep":"384:FtUCBXTpeaFEo5TTThri1t/mCsOCXiTNZruJ4vKFlcEhRCDxOcX/YM2Vybyq/kmt:n7XTpeauI/Thri1CKWM4ldRzurwkTO0D","tlshash":"cea2b6d61007243d57ead1a13929f7d63177ea98a0caec8a7de91f84d414c83f3f294a","first_seen":"2025-07-30T15:25:28.733337Z","last_seen":"2026-08-13T09:29:59.313374Z","times_seen":15421,"resource_available":true,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-20","alert":"Phishing Block","trigger":"tiktokshopsell.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"tiktokshopsell.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"tiktokshopsell.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}