| followshops.net/user/ebenistes/followers |  104.21.17.152 | 301 Moved Permanently | 0 B |
URL HTTP/1.1followshops.net/user/ebenistes/followers IP104.21.17.152:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /user/ebenistes/followers HTTP/1.1
Host: followshops.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Thu, 10 Nov 2022 03:48:02 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Thu, 10 Nov 2022 04:48:02 GMT
Location: https://followshops.net/user/ebenistes/followers
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Vkk9yI1LzooKL%2F%2Bcc5sAF6zZNfUKKl6af3uCHzZUjVvf12srM9hYjjwsRgOsuGdiLQFTlwgjgHHh4K4g0QpL6kN%2FTPw%2FNStTnIWBH18KpSNsTO66jFBPNarjsxj7uSKczYI%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 767bcf6c7d5eb511-OSL
alt-svc: h2=":443"; ma=60
|
|
| r3.o.lencr.org/ |  23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashaabe410b4bbe4d8beb0e4561d3aa158e e1788632902ddea62cdd9e7ad6009a75ffb69788 ad535e27b201e92670770b2b868c58f7c05633ec66490a41ef4592f062834c1f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AD535E27B201E92670770B2B868C58F7C05633EC66490A41EF4592F062834C1F"
Last-Modified: Wed, 09 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2932
Expires: Thu, 10 Nov 2022 04:36:54 GMT
Date: Thu, 10 Nov 2022 03:48:02 GMT
Connection: keep-alive
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash4c6e4047ec266b87485610e26a85bb6f cd543757597609d7309d02652318359078a965c2 d8aff7a24f3274782b4f41d6dbd181ba817f5a562d992a3a82966481c91f8a90
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6239
Cache-Control: max-age=116821
Content-Type: application/ocsp-response
Date: Thu, 10 Nov 2022 03:48:02 GMT
Etag: "636b8168-1d7"
Expires: Fri, 11 Nov 2022 12:15:03 GMT
Last-Modified: Wed, 09 Nov 2022 10:31:04 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 471
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash4c6e4047ec266b87485610e26a85bb6f cd543757597609d7309d02652318359078a965c2 d8aff7a24f3274782b4f41d6dbd181ba817f5a562d992a3a82966481c91f8a90
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6234
Cache-Control: max-age=116816
Content-Type: application/ocsp-response
Date: Thu, 10 Nov 2022 03:48:02 GMT
Etag: "636b8168-1d7"
Expires: Fri, 11 Nov 2022 12:14:58 GMT
Last-Modified: Wed, 09 Nov 2022 10:31:04 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashdc90abd8b3ea8e75a68c144d74d75788 1ce29dca1ee9ca8931397de31ffb6cf7833baaf8 807000997bcf1b7a1fa35e43908cbfa54cd1704a5a0f53c09e1ae154638f10e0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "807000997BCF1B7A1FA35E43908CBFA54CD1704A5A0F53C09E1AE154638F10E0"
Last-Modified: Tue, 08 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6365
Expires: Thu, 10 Nov 2022 05:34:07 GMT
Date: Thu, 10 Nov 2022 03:48:02 GMT
Connection: keep-alive
|
|
| firefox.settings.services.mozilla.com/v1/ |  34.102.187.140 | 200 OK | 939 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/ IP34.102.187.140:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hashd130218d0e2841f39c99610fe1a2ab90 29fbe1e177ee55c7a61ae0a206afff271cf5f945 6b6d74dccf10c2bc98a91c3388280d7ba1d9596bf8cadd7db0e2f63720b3d152
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
Alt-Used: 0
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Backoff, Content-Type, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 10 Nov 2022 03:43:49 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 253
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hash67d5a988edcda47bc3b3b3f65d32b4b6 d4f0e0da8b3690cc7da925026d3414b68c7d954f 55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 1Td6uB8lbv5RcUm0RiypmtD5PPSHwxcidvvjZSThvegcUonsb+/NG/aqWKq0A39FFqIqnguFVe0=
x-amz-request-id: VJHJYNZN9BNMZK8A
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 10 Nov 2022 03:11:59 GMT
age: 2163
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 10 Nov 2022 03:48:02 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 279 B |
IP93.184.220.29:0
Hashc7df636eebdec79915b0b56dde01c538 b18ffb7c184c9a371e5095cff2b778b46a1243a4 96cb32087217cc126391e482458926f3a956d79429a7a7c38e2e05a0d7916e53
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=121726
Content-Type: application/ocsp-response
Date: Thu, 10 Nov 2022 03:48:03 GMT
Etag: "636bacf1-117"
Expires: Fri, 11 Nov 2022 13:36:49 GMT
Last-Modified: Wed, 09 Nov 2022 13:36:49 GMT
Server: nginx
Content-Length: 279
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 279 B |
IP93.184.220.29:0
Hashc7df636eebdec79915b0b56dde01c538 b18ffb7c184c9a371e5095cff2b778b46a1243a4 96cb32087217cc126391e482458926f3a956d79429a7a7c38e2e05a0d7916e53
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=121726
Content-Type: application/ocsp-response
Date: Thu, 10 Nov 2022 03:48:03 GMT
Etag: "636bacf1-117"
Expires: Fri, 11 Nov 2022 13:36:49 GMT
Last-Modified: Wed, 09 Nov 2022 13:36:49 GMT
Server: nginx
Content-Length: 279
|
|
| followshops.net/images/users/user-thumb1.png | 172.67.177.12 | 200 OK | 1.4 kB |
URL HTTP/2followshops.net/images/users/user-thumb1.png IP172.67.177.12:0
File typePNG image data, 40 x 40, 8-bit/color RGB, non-interlaced\012- data Hash25216cc01210322e52ca0f421e693409 8f82afde806a9bb2124e797651835ca7318928ca b33fcf9f7f3a9ff45f2614d920a947a07469cb3f53860f651808274ac0bff094
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /images/users/user-thumb1.png HTTP/1.1
Host: followshops.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://followshops.net/
Cookie: ci_session=a%3A6%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%22447453c41217835300c86e097762fb8f%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A12%3A%2291.90.42.154%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A80%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1668052083%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3Bs%3A18%3A%22fc_session_temp_id%22%3Bs%3A6%3A%22328801%22%3B%7D18ec40193a8b486ce09716994a8ca1d6670976f0; PHPSESSID=jg1d8651mggao56hp1p1o52hi6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 10 Nov 2022 03:48:03 GMT
content-type: image/png
content-length: 1403
last-modified: Thu, 01 Oct 2015 09:55:22 GMT
etag: "560d030a-57b"
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 90902
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=i4ca1ZqGX83ulQiWquiCSbBTUDayS2mgF3OzCjXGk1Ohx90N5cGaoOJr87V72sLdGvz3PpKHJDuxZXgjvBOUL82564op3Xb53f1IK%2FJXjmCjoNxNnMzPaK3HMUqPe2FTc2w%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 767bcf71595cb50f-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/popper.js/1.16.0/umd/popper.min.js | 104.17.25.14 | 200 OK | 6.7 kB |
URL HTTP/2cdnjs.cloudflare.com/ajax/libs/popper.js/1.16.0/umd/popper.min.js IP104.17.25.14:0
File typeASCII text, with very long lines (21084) Hash9e85c6f6521bceeccb3d9ba9149fef80 1e18137215b276bb9bda85ac311d9c8cd5b01985 913b850ee0b505bf6b957ecd04dd3aab13543c9047c46532ac27b0be31e206bc
GET /ajax/libs/popper.js/1.16.0/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://followshops.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 10 Nov 2022 03:48:03 GMT
content-type: application/javascript; charset=utf-8
content-length: 6696
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-5309"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1855278
expires: Tue, 31 Oct 2023 03:48:03 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bQeVp2g3JRxWf5Ke%2FCiycaCEGiVgmtvnToiGbXGzpoodexL6pZsIFAMT%2FGFALa1K6nk2uiw75zoYNLGXG3zBHX7KeLPDBZ1l6gjyVbYna45uLJ%2BDDYO3GG1rb%2B1DRjfudBco5fxN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 767bcf715f48b4f7-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| followshops.net/images/site/blank.gif | 172.67.177.12 | 200 OK | 43 B |
URL HTTP/2followshops.net/images/site/blank.gif IP172.67.177.12:0
File typeGIF image data, version 89a, 1 x 1\012- data Hash325472601571f31e1bf00674c368d335 2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /images/site/blank.gif HTTP/1.1
Host: followshops.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://followshops.net/
Cookie: ci_session=a%3A6%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%22447453c41217835300c86e097762fb8f%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A12%3A%2291.90.42.154%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A80%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1668052083%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3Bs%3A18%3A%22fc_session_temp_id%22%3Bs%3A6%3A%22328801%22%3B%7D18ec40193a8b486ce09716994a8ca1d6670976f0; PHPSESSID=jg1d8651mggao56hp1p1o52hi6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 10 Nov 2022 03:48:03 GMT
content-type: image/gif
content-length: 43
last-modified: Thu, 01 Oct 2015 09:55:22 GMT
etag: "560d030a-2b"
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 350174
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pd%2FdWboCAwfL67c%2BEPecB2oC4OogE0NHD6g6TKqS6w1PWb2ae5p4qeZmfPV2AFEfEKLg2zJZOE7CIV3RaiAre%2BWk%2B9%2FhmziOXPvyJigkEib%2FLbD5kIK1RsBY02D5rtkh844%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 767bcf715959b50f-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 280 B |
IP93.184.220.29:0
Hash87fa8e71a8dacba779a21338a94f841c da2f625947dd791987f59af9ef39808804543fbe 1faea1fcba69bc8aac30d26c3d6ea989e914b7311108b150f9257bdcb987d833
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6227
Cache-Control: max-age=104227
Content-Type: application/ocsp-response
Date: Thu, 10 Nov 2022 03:48:03 GMT
Etag: "636b5043-118"
Expires: Fri, 11 Nov 2022 08:45:11 GMT
Last-Modified: Wed, 09 Nov 2022 07:01:23 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 280
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 280 B |
IP93.184.220.29:0
Hash87fa8e71a8dacba779a21338a94f841c da2f625947dd791987f59af9ef39808804543fbe 1faea1fcba69bc8aac30d26c3d6ea989e914b7311108b150f9257bdcb987d833
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2240
Cache-Control: max-age=100240
Content-Type: application/ocsp-response
Date: Thu, 10 Nov 2022 03:48:03 GMT
Etag: "636b5043-118"
Expires: Fri, 11 Nov 2022 07:38:43 GMT
Last-Modified: Wed, 09 Nov 2022 07:01:23 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 280
|
|
| followshops.net/images/logo/followshops.png | 172.67.177.12 | 200 OK | 52 kB |
URL HTTP/2followshops.net/images/logo/followshops.png IP172.67.177.12:0
File typePNG image data, 500 x 106, 8-bit/color RGBA, non-interlaced\012- data Hasheed78319f3cb4e09117f4757f3cfad3a b24f49ee17b1673a5d88202c85b74723cbb63ed7 55acd64c847b3fe9f4dbdb4a65020a6328ebf8bbea73a3d7e69f6589550db1ea
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /images/logo/followshops.png HTTP/1.1
Host: followshops.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://followshops.net/
Cookie: ci_session=a%3A6%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%22447453c41217835300c86e097762fb8f%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A12%3A%2291.90.42.154%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A80%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1668052083%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3Bs%3A18%3A%22fc_session_temp_id%22%3Bs%3A6%3A%22328801%22%3B%7D18ec40193a8b486ce09716994a8ca1d6670976f0; PHPSESSID=jg1d8651mggao56hp1p1o52hi6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 10 Nov 2022 03:48:03 GMT
content-type: image/png
content-length: 51655
last-modified: Thu, 01 Oct 2015 09:55:24 GMT
etag: "560d030c-c9c7"
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 350174
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nwLUw7IPsVjUZL6qzJevrpVWOIeVunn%2Fa8JIWnJGfWFNLm7squQWDShlQhy%2FFmxirG33RyKD022EwWyQcmmuYNkyTzww3E1UMo%2BQy%2FmPgSuk0souVHMzmKR%2FeM4LM%2BzrSTY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 767bcf715956b50f-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| followshops.net/images/site/loading.gif | 172.67.177.12 | 200 OK | 1.2 kB |
URL HTTP/2followshops.net/images/site/loading.gif IP172.67.177.12:0
File typeGIF image data, version 89a, 32 x 22\012- data Hash206d3c2a8896cbb199683a9906075f8c ffa26c8e5eee4b4e15acf13d547c3f33a174976e 551e27d05a38b2505f23c14f83b584af3e815f1aca16ad9177f66a92d0b879a4
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /images/site/loading.gif HTTP/1.1
Host: followshops.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://followshops.net/
Cookie: ci_session=a%3A6%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%22447453c41217835300c86e097762fb8f%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A12%3A%2291.90.42.154%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A80%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1668052083%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3Bs%3A18%3A%22fc_session_temp_id%22%3Bs%3A6%3A%22328801%22%3B%7D18ec40193a8b486ce09716994a8ca1d6670976f0; PHPSESSID=jg1d8651mggao56hp1p1o52hi6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 10 Nov 2022 03:48:03 GMT
content-type: image/gif
content-length: 1188
last-modified: Thu, 01 Oct 2015 09:55:24 GMT
etag: "560d030c-4a4"
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 350174
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ppGl2GQp29vTEL7L99Livx3jYW2sgxlai7hJaPlUmEvUHpilbtqMrDvgu10vEPq%2B9DlsbLv7eA%2Ft7FBh9QohJJ80i7r6c3tYiwB3Dx0JQYcKfBzTEfIfc95VslJjyGUP7AI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 767bcf715957b50f-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 280 B |
IP93.184.220.29:0
Hash87fa8e71a8dacba779a21338a94f841c da2f625947dd791987f59af9ef39808804543fbe 1faea1fcba69bc8aac30d26c3d6ea989e914b7311108b150f9257bdcb987d833
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6227
Cache-Control: max-age=104227
Content-Type: application/ocsp-response
Date: Thu, 10 Nov 2022 03:48:03 GMT
Etag: "636b5043-118"
Expires: Fri, 11 Nov 2022 08:45:11 GMT
Last-Modified: Wed, 09 Nov 2022 07:01:23 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 280
|
|
| followshops.net/images/product/IMG_077023.JPG | 172.67.177.12 | 200 OK | 48 kB |
URL HTTP/2followshops.net/images/product/IMG_077023.JPG IP172.67.177.12:0
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 99", baseline, precision 8, 600x600, components 3\012- data Hash7d6b5145dbba97dc9e70c2c980c77e6b 3c5331db85f63d10b3fa15eeb455bad8f0400a25 f5b483dc2bc96a28cd99c032550005a8abe4b877d61ca8be832a8e7f4bd55bb0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /images/product/IMG_077023.JPG HTTP/1.1
Host: followshops.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://followshops.net/
Cookie: ci_session=a%3A6%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%22447453c41217835300c86e097762fb8f%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A12%3A%2291.90.42.154%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A80%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1668052083%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3Bs%3A18%3A%22fc_session_temp_id%22%3Bs%3A6%3A%22328801%22%3B%7D18ec40193a8b486ce09716994a8ca1d6670976f0; PHPSESSID=jg1d8651mggao56hp1p1o52hi6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 10 Nov 2022 03:48:03 GMT
content-type: image/jpeg
content-length: 48206
last-modified: Mon, 21 Jun 2021 07:52:43 GMT
etag: "60d0454b-bc4e"
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 90902
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zYiN%2BNP0UNZEvg9zSszgFZXKHZRrowSVMhyz3gVPyAqjRxVnb4CQOArW%2BpsHQaHsQBj5Xlyk7M%2FXfBvqBKr2XBCIjQfzy8cN%2BiX%2BuwVnRDFAzNPrnvK%2B5KvFZMA%2FZROGejw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 767bcf715960b50f-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| code.jquery.com/jquery-1.11.3.min.js | 69.16.175.42 | 200 OK | 33 kB |
URL HTTP/2code.jquery.com/jquery-1.11.3.min.js IP69.16.175.42:0
File typeASCII text, with very long lines (32038) Hash1c8acbf5f411ace3b76578a1fd1a603e b1bbee9db24d885c25afd2e5a7720e4f79b6b991 e37464521b5447580a641b775ddb258a76f3bc7a3ca5a34eb452b12908b350a9
GET /jquery-1.11.3.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://followshops.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 10 Nov 2022 03:48:03 GMT
content-encoding: gzip
content-length: 33261
content-type: application/javascript; charset=utf-8
last-modified: Fri, 20 Aug 2021 17:47:53 GMT
accept-ranges: bytes
server: nginx
etag: W/"611feac9-176d5"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1668052083.dop023.sk1.t,1668052083.cds259.sk1.hn,1668052083.cds216.sk1.c
X-Firefox-Spdy: h2
|
|
| code.jquery.com/jquery-migrate-1.2.1.min.js | 69.16.175.42 | 200 OK | 3.1 kB |
URL HTTP/2code.jquery.com/jquery-migrate-1.2.1.min.js IP69.16.175.42:0
File typeASCII text, with very long lines (7085) Hashe1084a25976d8b8999acadc7350ffb48 99b723d38b78d8347e8dfa60193b12864a370227 b98359c65420aa3864d5b86ef94c4c9a5fb8c772a905884a5ba4ce55319a3d13
GET /jquery-migrate-1.2.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://followshops.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 10 Nov 2022 03:48:03 GMT
content-encoding: gzip
content-length: 3063
content-type: application/javascript; charset=utf-8
last-modified: Wed, 16 Feb 2022 10:50:39 GMT
accept-ranges: bytes
server: nginx
etag: W/"620cd6ff-1c1f"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1668052083.dop023.sk1.t,1668052083.cds259.sk1.hn,1668052083.cds242.sk1.c
X-Firefox-Spdy: h2
|
|
| followshops.net/js/site/follow-filesjquery_002.js | 172.67.177.12 | 200 OK | 5.9 kB |
URL HTTP/2followshops.net/js/site/follow-filesjquery_002.js IP172.67.177.12:0
File typeassembler source, ASCII text Hash9e531bfb9f794a3f1b0c160d8f1d0686 c8e65f7e9aa39fd45838f55c1e2c0f91e4719682 7eb5eda87e675afd7fef9c444a7c845743c8eb12b36eab557f0f67046e311ebb
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /js/site/follow-filesjquery_002.js HTTP/1.1
Host: followshops.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://followshops.net/
Cookie: ci_session=a%3A6%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%22447453c41217835300c86e097762fb8f%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A12%3A%2291.90.42.154%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A80%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1668052083%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3Bs%3A18%3A%22fc_session_temp_id%22%3Bs%3A6%3A%22328801%22%3B%7D18ec40193a8b486ce09716994a8ca1d6670976f0; PHPSESSID=jg1d8651mggao56hp1p1o52hi6
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 10 Nov 2022 03:48:03 GMT
content-type: application/javascript
last-modified: Mon, 31 Aug 2015 07:24:06 GMT
vary: Accept-Encoding
etag: W/"55e40116-5eaa"
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 350174
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xFyViYaqyXNPtG%2Bn8EbHsGlg%2FWzdcgc2ktkdm0PZZHcm%2FafQwTrlTP5Jbce946XoN2n5fKDhSkuS7AxxACPb5wozfPeZTU0RopSsbkz2yCnMCCfkcDDLDq6xGmOIl6rhwdM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 767bcf714942b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hashc59d06092401e375df491b06ee8e6dbc 2e27b8ff7c08a5349e27969bc2a08e5e19d0c1da 23ee4ab633fcf67dc5d4d1931450e365cec8d436ef1f9ba5f46b6bab974724c4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4658
Cache-Control: max-age=110184
Content-Type: application/ocsp-response
Date: Thu, 10 Nov 2022 03:48:03 GMT
Etag: "636b6da9-1d7"
Expires: Fri, 11 Nov 2022 10:24:27 GMT
Last-Modified: Wed, 09 Nov 2022 09:06:49 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 471 B |
IP142.250.74.35:0
Hash2d46cc53a1538ba2f6bb280da629e041 2ef714b4f668272bd5ab9c1a27a7e5441c975b53 178465070084aced449db36199915decc6517938c9261ca1a9a0bf5b7d95a94d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 10 Nov 2022 03:48:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 471 B |
IP142.250.74.35:0
Hash2d46cc53a1538ba2f6bb280da629e041 2ef714b4f668272bd5ab9c1a27a7e5441c975b53 178465070084aced449db36199915decc6517938c9261ca1a9a0bf5b7d95a94d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 10 Nov 2022 03:48:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| followshops.net/css/site/follow-main.css?v=123456 | 172.67.177.12 | 200 OK | 78 kB |
URL HTTP/2followshops.net/css/site/follow-main.css?v=123456 IP172.67.177.12:0
File typeASCII text, with CRLF, CR line terminators Hashf05f9f3ecea0799238f3c30ed817d542 9e7a4fcd6853f7d4563dde223e3d0ea7ee7d21a9 62435dd842066130773c925880a31c36c446aea2148988d232228f41a638afd0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /css/site/follow-main.css?v=123456 HTTP/1.1
Host: followshops.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://followshops.net/
Cookie: ci_session=a%3A6%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%22447453c41217835300c86e097762fb8f%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A12%3A%2291.90.42.154%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A80%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1668052083%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3Bs%3A18%3A%22fc_session_temp_id%22%3Bs%3A6%3A%22328801%22%3B%7D18ec40193a8b486ce09716994a8ca1d6670976f0; PHPSESSID=jg1d8651mggao56hp1p1o52hi6
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 10 Nov 2022 03:48:03 GMT
content-type: text/css
last-modified: Thu, 29 Jul 2021 06:05:38 GMT
vary: Accept-Encoding
etag: W/"61024532-6d08f"
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 350174
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dJwJhxB9MpmyrTqGiunNnG0t9DE2ARsBOjh09vw0ARURNHviKElFf2zKs9xRV40zdX5FGvTX0wZXF0STKMVUR1fBdnXOXEoA2GMbHBLDRmvcupgTo3vM7OBHR4bNc%2BOhY08%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 767bcf712924b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js | 142.250.74.106 | 200 OK | 31 kB |
URL HTTP/2ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js IP142.250.74.106:0
File typeASCII text, with very long lines (65451) Hash903bc7a7e510f87aa5d0201eb59a0832 ac9aa4dd94cde1bcba9037e94087138b127e41fc 41a7ac8150cc9f38421451d5143c1ffec7a1f1fafbf7a7fc0f51b98ad699cf8f
GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://followshops.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 31021
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 09 Nov 2022 16:32:03 GMT
expires: Thu, 09 Nov 2023 16:32:03 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Fri, 08 May 2020 07:05:03 GMT
content-type: text/javascript; charset=UTF-8
age: 40560
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| maps.google.com/maps/api/js?key=AIzaSyBVL5oiAiHqEzFAqjR2U6OX2SWB2K6TlPs&sensor=false&libraries=places | 216.58.211.14 | 200 OK | 56 kB |
URL HTTP/2maps.google.com/maps/api/js?key=AIzaSyBVL5oiAiHqEzFAqjR2U6OX2SWB2K6TlPs&sensor=false&libraries=places IP216.58.211.14:0
File typeASCII text, with very long lines (2393) Hash2a533bd2f58bb40ec1a23e6c1942dde1 f4a1d7136fa1ca19e0a0e18ace71c5609e2c56b0 a449315ebaf9a360bf39d2242c4410b305e353c74885a21f97b296472a7c375d
GET /maps/api/js?key=AIzaSyBVL5oiAiHqEzFAqjR2U6OX2SWB2K6TlPs&sensor=false&libraries=places HTTP/1.1
Host: maps.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://followshops.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
date: Thu, 10 Nov 2022 03:48:03 GMT
expires: Thu, 10 Nov 2022 04:18:03 GMT
cache-control: public, max-age=1800
vary: Accept-Language
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
content-encoding: gzip
server: mafe
content-length: 55526
x-xss-protection: 0
x-frame-options: SAMEORIGIN
server-timing: gfet4t7; dur=14
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 471 B |
IP142.250.74.35:0
Hash2d46cc53a1538ba2f6bb280da629e041 2ef714b4f668272bd5ab9c1a27a7e5441c975b53 178465070084aced449db36199915decc6517938c9261ca1a9a0bf5b7d95a94d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 10 Nov 2022 03:48:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 471 B |
IP142.250.74.35:0
Hash9cec7fd19118aaeb5702dd97a8dd2b0e 40769764dfe2e1d216aeb0f18b935ad9e2fd9b11 0d10421ffd21c60df554fc54330fb769ea6cf59b8a795c14500defff88f8b366
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 10 Nov 2022 03:48:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| followshops.net/css/site/follow-filessign.css?v=123456 | 172.67.177.12 | 200 OK | 7.6 kB |
URL HTTP/2followshops.net/css/site/follow-filessign.css?v=123456 IP172.67.177.12:0
File typeASCII text, with very long lines (421), with CRLF line terminators Hashab7099d0214d76f101462dc89d9430d2 7b8cb1337fbc48cd424a5ecc8abe34e7a7a338ae 643e20ab7327c5fb03096cbe987bfc7c5bbb9b3cede1622af643c0020041a8fb
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /css/site/follow-filessign.css?v=123456 HTTP/1.1
Host: followshops.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://followshops.net/
Cookie: ci_session=a%3A6%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%22447453c41217835300c86e097762fb8f%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A12%3A%2291.90.42.154%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A80%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1668052083%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3Bs%3A18%3A%22fc_session_temp_id%22%3Bs%3A6%3A%22328801%22%3B%7D18ec40193a8b486ce09716994a8ca1d6670976f0; PHPSESSID=jg1d8651mggao56hp1p1o52hi6
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 10 Nov 2022 03:48:03 GMT
content-type: text/css
last-modified: Mon, 24 May 2021 08:06:23 GMT
vary: Accept-Encoding
etag: W/"60ab5e7f-6bee"
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 350174
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BbQffUf%2BJ4y8m0GkADXtkh%2BPlFKz%2B%2Bzvf694zmV%2BilBeQcwWDIOd1gGtDSQWKaMwJhFikqOpO0sd6FziRBTfV7LlJdEuPPZRj729o8CWFv908uSdK1urdkj0RUDBtH2g7Nc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 767bcf712926b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| followshops.net/css/site/follow-selectbox.css?v=123456 | 172.67.177.12 | 200 OK | 38 kB |
URL HTTP/2followshops.net/css/site/follow-selectbox.css?v=123456 IP172.67.177.12:0
File typeASCII text, with CRLF line terminators Hashcafb45bf441f40b64be77b14bc65af7b 9c8f6222f8170da05cb1d2d074db8df102e933fc 4d8f5540f74f7a25e39156903e42c7783d7c7b4f356b649eae16f6d94f9b6715
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /css/site/follow-selectbox.css?v=123456 HTTP/1.1
Host: followshops.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://followshops.net/
Cookie: ci_session=a%3A6%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%22447453c41217835300c86e097762fb8f%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A12%3A%2291.90.42.154%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A80%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1668052083%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3Bs%3A18%3A%22fc_session_temp_id%22%3Bs%3A6%3A%22328801%22%3B%7D18ec40193a8b486ce09716994a8ca1d6670976f0; PHPSESSID=jg1d8651mggao56hp1p1o52hi6
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 10 Nov 2022 03:48:03 GMT
content-type: text/css
last-modified: Sat, 17 Aug 2013 10:11:42 GMT
vary: Accept-Encoding
etag: W/"520f4c5e-bb6"
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 350174
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=izkMqSXJ6PBUuh2CHldbRYCqoOrkqcZm0tUSMcELRVFT9PgSQ6AEFrCaSgJ0DCREU%2FP6WRv4I74W%2Fah8eB9tm52H3A1%2B0RwUsvYBXyPsu1clNBVzduT4CJNOafCWywQWEXU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 767bcf71292db50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| followshops.net/css/site/follow-timeline.css?v=123456 | 172.67.177.12 | 200 OK | 11 kB |
URL HTTP/2followshops.net/css/site/follow-timeline.css?v=123456 IP172.67.177.12:0
Hash021baa14a1ce3109d6a6bc90d9fa8304 e4c5384bbc2dc7a1bb50cb750a5080acb6fd7b25 cc664dac63885cccf174311a9dd218551939ab46d8b025d01067d29cd589fdab
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /css/site/follow-timeline.css?v=123456 HTTP/1.1
Host: followshops.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://followshops.net/
Cookie: ci_session=a%3A6%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%22447453c41217835300c86e097762fb8f%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A12%3A%2291.90.42.154%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A80%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1668052083%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3Bs%3A18%3A%22fc_session_temp_id%22%3Bs%3A6%3A%22328801%22%3B%7D18ec40193a8b486ce09716994a8ca1d6670976f0; PHPSESSID=jg1d8651mggao56hp1p1o52hi6
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 10 Nov 2022 03:48:03 GMT
content-type: text/css
last-modified: Tue, 27 Jul 2021 11:07:55 GMT
vary: Accept-Encoding
etag: W/"60ffe90b-c05d"
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 350174
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=j3xCe3VmP25qzm5vJF0oguk06sSNSFSN32iRM1TwJaYu9Y1%2BZIiPkQtpo3hcsaASL5nCW69qbuFWsDlnBZ1mEaqpWm7mQkLDnuO5SQRMghZR0IF1n%2FoZea5jl6lvVagunro%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 767bcf712932b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| push.services.mozilla.com/ | 35.83.241.90 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP35.83.241.90:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 9Y3trnfQC7veZpm+6DU40g==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: R9l8D/SZcYePpJ1rn0X4PvVk0G4=
|
|
| followshops.net/js/site/follow-filescatalog.js | 172.67.177.12 | 200 OK | 44 kB |
URL HTTP/2followshops.net/js/site/follow-filescatalog.js IP172.67.177.12:0
Hash56a0304843440e42a83b6c1096a0ed79 b0aa47cab8f814e545bfdd4ac5e7a59b02b8bf8f efcf184244010badebed0a62d4374198a4d420b440fd4de5b956bcafd6f2751a
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /js/site/follow-filescatalog.js HTTP/1.1
Host: followshops.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://followshops.net/
Cookie: ci_session=a%3A6%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%22447453c41217835300c86e097762fb8f%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A12%3A%2291.90.42.154%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A80%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1668052083%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3Bs%3A18%3A%22fc_session_temp_id%22%3Bs%3A6%3A%22328801%22%3B%7D18ec40193a8b486ce09716994a8ca1d6670976f0; PHPSESSID=jg1d8651mggao56hp1p1o52hi6
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 10 Nov 2022 03:48:03 GMT
content-type: application/javascript
last-modified: Mon, 31 Aug 2015 07:24:06 GMT
vary: Accept-Encoding
etag: W/"55e40116-b21"
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 350174
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6RgO9PgFA2Gr2UBU7UTM9EU7IFJIcyF%2FFJ%2FP7%2BaF%2FeZlZ3aXcDB69Z9MAkaOSKlMeVnhpL%2Bp29SlvK0f%2BSjbdaGIuv5zyjYnD%2BLn7LiI8YI%2FHT2%2F32eXzQ34JxmHbgDAZyg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 767bcf71493eb50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hash2b6e814cf24d6076a53097eacb138a7f 7e3b9b5d44699f81209a7ea0182640f5596804a5 218be263224d3d1a01ba126d0a7311b972bd88744ec0919b5e471077abe68e03
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 10 Nov 2022 03:48:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| maps.googleapis.com/maps/api/mapsjs/gen_204?csp_test=true | 142.250.74.170 | 200 OK | 23 B |
URL HTTP/2maps.googleapis.com/maps/api/mapsjs/gen_204?csp_test=true IP142.250.74.170:0
File typeJSON data\012- , ASCII text Hashe3981ca10169a319d5aa062bf43a5fa1 2c6ed584767b65688ce99b1ebe1a3b7448a67421 8b0b8749aba12de93f3cf5d86f9fac9d6de7cac400a17473718f182a34ebb7e9
GET /maps/api/mapsjs/gen_204?csp_test=true HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://followshops.net
Connection: keep-alive
Referer: https://followshops.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Thu, 10 Nov 2022 03:48:04 GMT
server: scaffolding on HTTPServer2
cache-control: private
content-length: 23
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://followshops.net
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| www.google-analytics.com/analytics.js | 142.250.74.174 | 200 OK | 20 kB |
URL HTTP/2www.google-analytics.com/analytics.js IP142.250.74.174:0
File typeASCII text, with very long lines (1325) Hash47e6f374ca946fddd5b59871b325736c baa9282efc8785e84d247c3bff518eaa45f101c4 16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://followshops.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Thu, 10 Nov 2022 02:41:09 GMT
expires: Thu, 10 Nov 2022 04:41:09 GMT
cache-control: public, max-age=7200
age: 4015
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hash2b6e814cf24d6076a53097eacb138a7f 7e3b9b5d44699f81209a7ea0182640f5596804a5 218be263224d3d1a01ba126d0a7311b972bd88744ec0919b5e471077abe68e03
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 10 Nov 2022 03:48:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 471 B |
IP142.250.74.35:0
Hash61a9432317cba5908c0a73266e8b8a62 c8bc872f016956cbb5569d7727bdfd46d64146c6 fafa5e76a4ed086616cce2f8e5af613630b11221ec9001d30cac72f6c1f350de
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 10 Nov 2022 03:48:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| maps.gstatic.com/mapfiles/transparent.png | 142.250.74.163 | 200 OK | 15 kB |
URL HTTP/2maps.gstatic.com/mapfiles/transparent.png IP142.250.74.163:0
Hashec965ccfd8acaf0602eef03eedac08a2 08efc4a5c15ae6da0d0d317d0468378e1066382f 3b853d1584261fe8098ec4a2cdd9696eccdcf6a00448cfe3038df9c1f48e0889
GET /mapfiles/transparent.png HTTP/1.1
Host: maps.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://followshops.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/geo-tactile
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="geo-tactile"
report-to: {"group":"geo-tactile","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/geo-tactile"}]}
content-length: 68
date: Thu, 10 Nov 2022 03:48:04 GMT
expires: Thu, 10 Nov 2022 03:48:04 GMT
cache-control: private, max-age=31536000
last-modified: Tue, 18 May 2021 19:15:00 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 471 B |
IP142.250.74.35:0
Hash61a9432317cba5908c0a73266e8b8a62 c8bc872f016956cbb5569d7727bdfd46d64146c6 fafa5e76a4ed086616cce2f8e5af613630b11221ec9001d30cac72f6c1f350de
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 10 Nov 2022 03:48:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| maps.gstatic.com/mapfiles/undo_poly.png | 142.250.74.163 | 200 OK | 1.8 kB |
URL HTTP/2maps.gstatic.com/mapfiles/undo_poly.png IP142.250.74.163:0
File typePNG image data, 90 x 27, 8-bit/color RGBA, non-interlaced\012- data Hash2bb1383e2a9ee6528ddb13196809fb3f ea89cd4bd22c7210609dd81ab7b950c54e610b4f c2891e07d682011e6916fb39490661579278993d30a0c0a4bf41b08627fafb88
GET /mapfiles/undo_poly.png HTTP/1.1
Host: maps.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://followshops.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/geo-tactile
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="geo-tactile"
report-to: {"group":"geo-tactile","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/geo-tactile"}]}
content-length: 1804
date: Thu, 10 Nov 2022 03:48:04 GMT
expires: Thu, 10 Nov 2022 03:48:04 GMT
cache-control: private, max-age=31536000
last-modified: Tue, 18 May 2021 19:15:00 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash4599ea4ab89bca0461dfc4e86cf90610 d513a3fca97e06dbc1a6cdd02fbdd3c7253c865a 6056ef181a66539dd449318a89c133c3711e3244394126a66b8ebd29cff4692b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6056EF181A66539DD449318A89C133C3711E3244394126A66B8EBD29CFF4692B"
Last-Modified: Tue, 08 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12573
Expires: Thu, 10 Nov 2022 07:17:38 GMT
Date: Thu, 10 Nov 2022 03:48:05 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash4599ea4ab89bca0461dfc4e86cf90610 d513a3fca97e06dbc1a6cdd02fbdd3c7253c865a 6056ef181a66539dd449318a89c133c3711e3244394126a66b8ebd29cff4692b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6056EF181A66539DD449318A89C133C3711E3244394126A66B8EBD29CFF4692B"
Last-Modified: Tue, 08 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12573
Expires: Thu, 10 Nov 2022 07:17:38 GMT
Date: Thu, 10 Nov 2022 03:48:05 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash4599ea4ab89bca0461dfc4e86cf90610 d513a3fca97e06dbc1a6cdd02fbdd3c7253c865a 6056ef181a66539dd449318a89c133c3711e3244394126a66b8ebd29cff4692b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6056EF181A66539DD449318A89C133C3711E3244394126A66B8EBD29CFF4692B"
Last-Modified: Tue, 08 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12573
Expires: Thu, 10 Nov 2022 07:17:38 GMT
Date: Thu, 10 Nov 2022 03:48:05 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff6f25920-a3d0-43b8-b5bf-03e98ef4db49.jpeg | 34.120.237.76 | 200 OK | 11 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff6f25920-a3d0-43b8-b5bf-03e98ef4db49.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash9ee61492435f30b5997b4628feffd92a 7a4873a1b472f973fe8eef44a5af4eb7ace6344f 2685279092cd3c81ed4064ca47c286bc9993df2558be22326d3db2810544c4c2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff6f25920-a3d0-43b8-b5bf-03e98ef4db49.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10654
x-amzn-requestid: 29c382f1-c231-4293-bb36-3547bd2f93a7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bRUxYFKwoAMFj7Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636a01a2-5960978c2e9561057ad85692;Sampled=0
x-amzn-remapped-date: Tue, 08 Nov 2022 07:13:38 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: YZQmyZ5nAhwM9swgxxovu0g3JsQkYRQBArFWND76bj-bT6BWXbhkuQ==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 32d624dbeb2a8b7f24dbe49007e37c90.cloudfront.net (CloudFront), 1.1 google
date: Wed, 09 Nov 2022 07:14:55 GMT
age: 73990
etag: "7a4873a1b472f973fe8eef44a5af4eb7ace6344f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F74db090f-5da5-464b-91b1-7fac90d3e5eb.jpeg | 34.120.237.76 | 200 OK | 8.0 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F74db090f-5da5-464b-91b1-7fac90d3e5eb.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashd68ac59950c3276cd8f92b777a004df1 94c0ee5c14e8e8cdf95883582ba8084cc5867f93 b02d6d61c1fae8260d1fc30c0a78ebbc3482a3aa0acafb58d8269942ff8e732b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F74db090f-5da5-464b-91b1-7fac90d3e5eb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7987
x-amzn-requestid: 6a465dcd-6a4e-49fb-9fa9-169678d39b5d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bWlo7HBFIAMFSQw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636c1c9f-4ffe8f2534aeaef73329a8cd;Sampled=0
x-amzn-remapped-date: Wed, 09 Nov 2022 21:33:19 GMT
x-amz-cf-pop: SEA73-P2, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: gbK3hyzE9RBuLiIQHUrouV-Kqe6r2cTMLYauv9W0ych9irxQexKWAQ==
via: 1.1 637ef0a7bc474e9a314fa064b65e8082.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 09 Nov 2022 21:53:35 GMT
age: 21270
etag: "94c0ee5c14e8e8cdf95883582ba8084cc5867f93"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb45d42fc-185c-4bf0-906b-55b0275ee2d4.jpeg | 34.120.237.76 | 200 OK | 3.3 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb45d42fc-185c-4bf0-906b-55b0275ee2d4.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashaeb648ba8ff2bcbb363004559ced5b87 25c8230dc14cfc31d8660b8ea8a72f3ac881ea7e 3eb0d98cc52b574f7496061ab00d6276c7a83ca1be7b7974a932a7827a9dd4b3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb45d42fc-185c-4bf0-906b-55b0275ee2d4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3319
x-amzn-requestid: 4720d817-e198-4cae-b14c-b78972e7dd05
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bWlrkGdMIAMF8_A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636c1cb0-6c3edabf3f07e37951156122;Sampled=0
x-amzn-remapped-date: Wed, 09 Nov 2022 21:33:36 GMT
x-amz-cf-pop: SEA73-P2, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: DM1zgiiuwGAtsVQj7S-Nz7N8_NvgUdw8JceoQtBRJrNg9iUmpfBY3w==
via: 1.1 c21a0d27ceec21e266c9f962d0349438.cloudfront.net (CloudFront), 1.1 b8c4a4ca04bb1976e020396d211bc8dc.cloudfront.net (CloudFront), 1.1 google
date: Wed, 09 Nov 2022 21:43:10 GMT
age: 21895
etag: "25c8230dc14cfc31d8660b8ea8a72f3ac881ea7e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0d37511-5958-42ab-acd0-aed0c04a0e2c.jpeg | 34.120.237.76 | 200 OK | 9.4 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0d37511-5958-42ab-acd0-aed0c04a0e2c.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash61e58563ce83ab22c1604920db81f8e5 71dc8a32634a72c2092ef90a4f46250599b523f6 ddbb9d12368a95d38b94398274524862a28da41f22062d0096ac0c7052e2ca3b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0d37511-5958-42ab-acd0-aed0c04a0e2c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9360
x-amzn-requestid: ab27926c-6cd1-4817-a5ff-aa47f666f337
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bWlpOGmjoAMFU4w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636c1ca1-5835f3a814659500346d44e8;Sampled=0
x-amzn-remapped-date: Wed, 09 Nov 2022 21:33:21 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: MrUvpMcxRPmksSmHQv-VIavSGtumJjPbrn4wleWN-9EXk-IUctJsgg==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Wed, 09 Nov 2022 21:57:48 GMT
age: 21017
etag: "71dc8a32634a72c2092ef90a4f46250599b523f6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7b66f592-618a-4463-834d-ff9bbe8866ae.jpeg | 34.120.237.76 | 200 OK | 11 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7b66f592-618a-4463-834d-ff9bbe8866ae.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash848af62ec10d0c297922f8600b6ad12d 4eadbf5f0dade92dcc6d68c8ebb70898aadb9a7d a3b4eb6768259876819d7e6c7ac9e21c603d54f60bf70ed077cb820711e2ae74
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7b66f592-618a-4463-834d-ff9bbe8866ae.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11316
x-amzn-requestid: 8456b25a-b87f-490d-86b3-fb217afea082
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bWlniESaIAMF3Qg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636c1c96-30ed3b0972418bae4700edc8;Sampled=0
x-amzn-remapped-date: Wed, 09 Nov 2022 21:33:10 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: paNICiysr9pIOxtqOqjnIOValYbM8InQZ9SmEOUIJirFQd03IN6eRw==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 5397b304713f6301c7c94ac084b6ed08.cloudfront.net (CloudFront), 1.1 google
date: Wed, 09 Nov 2022 21:43:10 GMT
age: 21895
etag: "4eadbf5f0dade92dcc6d68c8ebb70898aadb9a7d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7f570a6d-7e0c-4dc3-9a3f-7af7ccbae623.jpeg | 34.120.237.76 | 200 OK | 8.2 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7f570a6d-7e0c-4dc3-9a3f-7af7ccbae623.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashfeb275cc5fa7b13e70522cb76f001bbc 80ca9cf6cbbc73a884c3a839ace9a7aa191a8504 a5680637b55669355967b87fd4be4881a3e4dea746b7c420acf4dcb46b8a28de
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7f570a6d-7e0c-4dc3-9a3f-7af7ccbae623.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8242
x-amzn-requestid: 1ab9c180-7e6b-4eae-a6cf-6a45c96fdc4e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bWlrkE_2oAMFk2A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636c1cb0-0089846803d11bb649874507;Sampled=0
x-amzn-remapped-date: Wed, 09 Nov 2022 21:33:36 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 6xhB_vy5Aj6ScBQuTwWX93HFG5eS3SZHr7dP2Qsz-Q1P1pcXk339gQ==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 28390a4d24ed4fdccd685d99cd06cf4e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 09 Nov 2022 21:43:10 GMT
age: 21895
etag: "80ca9cf6cbbc73a884c3a839ace9a7aa191a8504"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| followshops.net/css/site/follow-filesphoto.css?v=123456 | 172.67.177.12 | 200 OK | 0 B |
URL HTTP/2followshops.net/css/site/follow-filesphoto.css?v=123456 IP172.67.177.12:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /css/site/follow-filesphoto.css?v=123456 HTTP/1.1
Host: followshops.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://followshops.net/
Cookie: ci_session=a%3A6%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%22447453c41217835300c86e097762fb8f%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A12%3A%2291.90.42.154%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A80%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1668052083%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3Bs%3A18%3A%22fc_session_temp_id%22%3Bs%3A6%3A%22328801%22%3B%7D18ec40193a8b486ce09716994a8ca1d6670976f0; PHPSESSID=jg1d8651mggao56hp1p1o52hi6
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 10 Nov 2022 03:48:03 GMT
content-type: text/css
last-modified: Mon, 31 Aug 2015 07:21:32 GMT
vary: Accept-Encoding
etag: W/"55e4007c-8a5"
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 350174
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Abu%2F0q6gbn7KuA6EIFYqZfEa2orqwSueXE5QgB1q83GhGsEsloQXjbV0SD0SCcayYOOMpRV0I%2BMjeSEPayrnDecrH%2FJo9R7I2mFHa9x71Je346pFY6IZQXO%2FNQvgmnBAK1s%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 767bcf71292cb50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| followshops.net/css/site/follow-filestimeline-slideshow.css?v=123456 | 172.67.177.12 | 200 OK | 0 B |
URL HTTP/2followshops.net/css/site/follow-filestimeline-slideshow.css?v=123456 IP172.67.177.12:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /css/site/follow-filestimeline-slideshow.css?v=123456 HTTP/1.1
Host: followshops.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://followshops.net/
Cookie: ci_session=a%3A6%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%22447453c41217835300c86e097762fb8f%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A12%3A%2291.90.42.154%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A80%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1668052083%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3Bs%3A18%3A%22fc_session_temp_id%22%3Bs%3A6%3A%22328801%22%3B%7D18ec40193a8b486ce09716994a8ca1d6670976f0; PHPSESSID=jg1d8651mggao56hp1p1o52hi6
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 10 Nov 2022 03:48:03 GMT
content-type: text/css
last-modified: Sat, 17 Aug 2013 10:10:34 GMT
vary: Accept-Encoding
etag: W/"520f4c1a-27ee"
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 350174
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2F1SOW5t%2BL8jlEMPEjBw6c4XwXd48%2BuokyJ%2B%2FCsj%2BEZD0jPMd%2FJt5ukFjrRvM02ABj5%2FdfOvxFvNcxusRoWUoVzOdzj7z1ChgTK%2F%2FKQM6c3pypD3%2F2d6gIMl3ncLSM%2BMEHYs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 767bcf71292ab50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| followshops.net/js/locationpicker.jquery.js | 172.67.177.12 | 200 OK | 0 B |
URL HTTP/2followshops.net/js/locationpicker.jquery.js IP172.67.177.12:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /js/locationpicker.jquery.js HTTP/1.1
Host: followshops.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://followshops.net/
Cookie: ci_session=a%3A6%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%22447453c41217835300c86e097762fb8f%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A12%3A%2291.90.42.154%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A80%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1668052083%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3Bs%3A18%3A%22fc_session_temp_id%22%3Bs%3A6%3A%22328801%22%3B%7D18ec40193a8b486ce09716994a8ca1d6670976f0; PHPSESSID=jg1d8651mggao56hp1p1o52hi6
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 10 Nov 2022 03:48:03 GMT
content-type: application/javascript
last-modified: Mon, 06 Sep 2021 10:20:01 GMT
vary: Accept-Encoding
etag: W/"6135eb51-2ce9"
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 350174
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HyK9vzA3EyogtKCM7LXfV35W%2FZLX%2FizvkGUSoLlX9eKDoKaG36hY6iT51ArhQ1fizCo9DREL7VlJDvSATMFhAqi15M%2FNXX7NERmVDksWqJ9fSRSfxOcEqVxqQ13JkRYJVAg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 767bcf71493fb50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| followshops.net/js/site/main4.js | 172.67.177.12 | 200 OK | 0 B |
URL HTTP/2followshops.net/js/site/main4.js IP172.67.177.12:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /js/site/main4.js HTTP/1.1
Host: followshops.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://followshops.net/
Cookie: ci_session=a%3A6%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%22447453c41217835300c86e097762fb8f%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A12%3A%2291.90.42.154%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A80%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1668052083%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3Bs%3A18%3A%22fc_session_temp_id%22%3Bs%3A6%3A%22328801%22%3B%7D18ec40193a8b486ce09716994a8ca1d6670976f0; PHPSESSID=jg1d8651mggao56hp1p1o52hi6
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 10 Nov 2022 03:48:03 GMT
content-type: application/javascript
last-modified: Sat, 26 Jun 2021 07:58:22 GMT
vary: Accept-Encoding
etag: W/"60d6de1e-1f848"
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 350174
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fJ4LauPMgaMfE69gjV%2B0Dw2AI1SahE1kw2LBQm2kJVcYb2oIY3e94apeUaPSibpJ6na4RU57wwkm2R1sc0EBOf%2F94iFtrJ1oW5VEz8e5HwcKSXE05vBZHnAX44pEAm%2B5a1I%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 767bcf714944b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| maxcdn.bootstrapcdn.com/bootstrap/3.3.5/js/bootstrap.min.js | 104.18.10.207 | 200 OK | 0 B |
URL HTTP/2maxcdn.bootstrapcdn.com/bootstrap/3.3.5/js/bootstrap.min.js IP104.18.10.207:0
GET /bootstrap/3.3.5/js/bootstrap.min.js HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://followshops.net
Connection: keep-alive
Referer: https://followshops.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 10 Nov 2022 03:48:03 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"4becdc9104623e891fbb9d38bba01be4"
last-modified: Mon, 25 Jan 2021 22:03:59 GMT
cdn-cachedat: 08/20/2022 02:32:00
cdn-proxyver: 1.02
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 864
cdn-status: 200
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-requestid: b17f0addf2f0a395fbf75d9383f20934
cdn-cache: HIT
cf-cache-status: HIT
age: 350174
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 767bcf729c18b515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ajax.googleapis.com/ajax/libs/jqueryui/1.10.3/jquery-ui.min.js | 142.250.74.106 | 200 OK | 0 B |
URL HTTP/2ajax.googleapis.com/ajax/libs/jqueryui/1.10.3/jquery-ui.min.js IP142.250.74.106:0
GET /ajax/libs/jqueryui/1.10.3/jquery-ui.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://followshops.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 60529
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 09 Nov 2022 19:02:03 GMT
expires: Thu, 09 Nov 2023 19:02:03 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
age: 31560
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| followshops.net/user/ebenistes/followers | 172.67.177.12 | 302 Found | 0 B |
URL HTTP/2followshops.net/user/ebenistes/followers IP172.67.177.12:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /user/ebenistes/followers HTTP/1.1
Host: followshops.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
date: Thu, 10 Nov 2022 03:48:03 GMT
content-type: text/html; charset=UTF-8
location: https://followshops.net/
cf-cache-status: DYNAMIC
set-cookie: ci_session=a%3A5%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%22447453c41217835300c86e097762fb8f%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A12%3A%2291.90.42.154%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A80%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1668052083%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3B%7D9a1deead45bcf3a208167e06cd881cf9797ce2ae; path=/
ci_session=a%3A6%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%22447453c41217835300c86e097762fb8f%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A12%3A%2291.90.42.154%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A80%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1668052083%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3Bs%3A18%3A%22fc_session_temp_id%22%3Bs%3A6%3A%22328801%22%3B%7D18ec40193a8b486ce09716994a8ca1d6670976f0; path=/
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZU4LM5fU72FM6XgWicb2vgmoS6HE4MOWYnlffeoz%2BlMiTc80ehWL9pdXDtEs%2FSsJhDLhEk0sOAmahzdFKKgo0YL8vCqvpQr7FZCHKzf3t6O392c57VHQ%2F%2BuZc6JUJM7fDVI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 767bcf6f6ff7b50f-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| followshops.net/css/site/follow-filespopup.css?v=1234567 | 172.67.177.12 | 200 OK | 0 B |
URL HTTP/2followshops.net/css/site/follow-filespopup.css?v=1234567 IP172.67.177.12:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /css/site/follow-filespopup.css?v=1234567 HTTP/1.1
Host: followshops.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://followshops.net/
Cookie: ci_session=a%3A6%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%22447453c41217835300c86e097762fb8f%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A12%3A%2291.90.42.154%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A80%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1668052083%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3Bs%3A18%3A%22fc_session_temp_id%22%3Bs%3A6%3A%22328801%22%3B%7D18ec40193a8b486ce09716994a8ca1d6670976f0; PHPSESSID=jg1d8651mggao56hp1p1o52hi6
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 10 Nov 2022 03:48:03 GMT
content-type: text/css
last-modified: Thu, 29 Jul 2021 09:33:28 GMT
vary: Accept-Encoding
etag: W/"610275e8-25b41"
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 350174
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pbNfKTqWdyy2msq5WJ6vdAuLCW5FswK4hyE5TTrZH%2FFSh76pr%2BlYV7vp1DsHiRlHgtW42OsiMGFJl%2BXOjCD3CIz4r9UHwq8R9vUT4%2BsrswaN3fUsK6xfmM1mlmn%2FwR1xTsY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 767bcf712927b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| followshops.net/css/developer.css?v=123456 | 172.67.177.12 | 200 OK | 0 B |
URL HTTP/2followshops.net/css/developer.css?v=123456 IP172.67.177.12:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /css/developer.css?v=123456 HTTP/1.1
Host: followshops.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://followshops.net/
Cookie: ci_session=a%3A6%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%22447453c41217835300c86e097762fb8f%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A12%3A%2291.90.42.154%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A80%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1668052083%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3Bs%3A18%3A%22fc_session_temp_id%22%3Bs%3A6%3A%22328801%22%3B%7D18ec40193a8b486ce09716994a8ca1d6670976f0; PHPSESSID=jg1d8651mggao56hp1p1o52hi6
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 10 Nov 2022 03:48:03 GMT
content-type: text/css
last-modified: Tue, 27 Apr 2021 08:49:57 GMT
vary: Accept-Encoding
etag: W/"6087d035-2a57"
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 350174
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LC3t9uqpmGoRlBb7mNl4sXNkF8CQ56%2FZztgzKbokeHm%2F3zwjC5895mOwAX7osx9c7lqaHkoBmbHkOKRoFbp4Pbj%2BfS0g0JSWHEHWGFHDn2%2B3qXyCFsJbJcK7J2rQu6P68RU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 767bcf712931b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| followshops.net/js/site/jquery.ui.addresspicker.js | 172.67.177.12 | 200 OK | 0 B |
URL HTTP/2followshops.net/js/site/jquery.ui.addresspicker.js IP172.67.177.12:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /js/site/jquery.ui.addresspicker.js HTTP/1.1
Host: followshops.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://followshops.net/
Cookie: ci_session=a%3A6%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%22447453c41217835300c86e097762fb8f%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A12%3A%2291.90.42.154%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A80%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1668052083%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3Bs%3A18%3A%22fc_session_temp_id%22%3Bs%3A6%3A%22328801%22%3B%7D18ec40193a8b486ce09716994a8ca1d6670976f0; PHPSESSID=jg1d8651mggao56hp1p1o52hi6
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 10 Nov 2022 03:48:03 GMT
content-type: application/javascript
last-modified: Sat, 04 Sep 2021 10:14:40 GMT
vary: Accept-Encoding
etag: W/"61334710-286f"
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 350174
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hzSv7W42MTAI43knM7unS%2BEjXtX%2BaaLL76rfPKqwFwuzfaH64NAbpXkNOsidxhv1shTei%2B1uEKqO81OYR%2FZNCEKMXe9Yr2AIT6DdHqll78aK8ZVU8LmfFpebVfdIm2xWOpA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 767bcf714941b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| maxcdn.bootstrapcdn.com/bootstrap/4.5.2/js/bootstrap.min.js | 104.18.10.207 | 200 OK | 0 B |
URL HTTP/2maxcdn.bootstrapcdn.com/bootstrap/4.5.2/js/bootstrap.min.js IP104.18.10.207:0
GET /bootstrap/4.5.2/js/bootstrap.min.js HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://followshops.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 10 Nov 2022 03:48:03 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: SE
cdn-edgestorageid: 601, 617, 617
last-modified: Mon, 25 Jan 2021 22:04:11 GMT
cdn-cachedat: 2021-04-23 06:18:12
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cache-control: public, max-age=31919000
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
cdn-requestid: 635a5ba5b16f6b5cab614d07cc78dc4b
cdn-cache: HIT
cf-cache-status: HIT
age: 16162381
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 767bcf722f97b4fa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| followshops.net/js/site/editor-config.js | 172.67.177.12 | 200 OK | 0 B |
URL HTTP/2followshops.net/js/site/editor-config.js IP172.67.177.12:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /js/site/editor-config.js HTTP/1.1
Host: followshops.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://followshops.net/
Cookie: ci_session=a%3A6%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%22447453c41217835300c86e097762fb8f%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A12%3A%2291.90.42.154%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A80%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1668052083%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3Bs%3A18%3A%22fc_session_temp_id%22%3Bs%3A6%3A%22328801%22%3B%7D18ec40193a8b486ce09716994a8ca1d6670976f0; PHPSESSID=jg1d8651mggao56hp1p1o52hi6
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 10 Nov 2022 03:48:03 GMT
content-type: application/javascript
last-modified: Thu, 01 Oct 2015 09:47:54 GMT
vary: Accept-Encoding
etag: W/"560d014a-c89"
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 350174
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=m1jOPRET5wQq%2F0nDq%2BtPzJ9C6PZPwQBSr60c2TaTxjGqXxKJDjKvLVdAjmGXq0WphdpXrIA7pl4CGRQHdmJkuMJogJKPSb8JwTQ9MHO4ZMNqcurB0wmwvHsTpiVWol%2FCtHE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 767bcf714947b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| followshops.net/js/site/follow-filesjquery.js | 172.67.177.12 | 200 OK | 0 B |
URL HTTP/2followshops.net/js/site/follow-filesjquery.js IP172.67.177.12:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /js/site/follow-filesjquery.js HTTP/1.1
Host: followshops.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://followshops.net/
Cookie: ci_session=a%3A6%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%22447453c41217835300c86e097762fb8f%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A12%3A%2291.90.42.154%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A80%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1668052083%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3Bs%3A18%3A%22fc_session_temp_id%22%3Bs%3A6%3A%22328801%22%3B%7D18ec40193a8b486ce09716994a8ca1d6670976f0; PHPSESSID=jg1d8651mggao56hp1p1o52hi6
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 10 Nov 2022 03:48:03 GMT
content-type: application/javascript
last-modified: Mon, 31 Aug 2015 07:24:06 GMT
vary: Accept-Encoding
etag: W/"55e40116-1d01"
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 350174
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZZ8PyuODpE5mWUuMOOSV8Nbb%2B0R7hIUIUkwEi6PAHF30evzMZfilj943xzhPiD13AxVcUmkjXSwRrko0G2ZMbprba1wECr0Ml%2Ft1dy%2B1ywUVAW%2B3twiOWBB4OceYlj2cODE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 767bcf714943b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| followshops.net/js/site/landing_category.js | 172.67.177.12 | 200 OK | 0 B |
URL HTTP/2followshops.net/js/site/landing_category.js IP172.67.177.12:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /js/site/landing_category.js HTTP/1.1
Host: followshops.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://followshops.net/
Cookie: ci_session=a%3A6%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%22447453c41217835300c86e097762fb8f%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A12%3A%2291.90.42.154%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A80%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1668052083%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3Bs%3A18%3A%22fc_session_temp_id%22%3Bs%3A6%3A%22328801%22%3B%7D18ec40193a8b486ce09716994a8ca1d6670976f0; PHPSESSID=jg1d8651mggao56hp1p1o52hi6
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 10 Nov 2022 03:48:03 GMT
content-type: application/javascript
last-modified: Mon, 03 Apr 2017 16:29:54 GMT
vary: Accept-Encoding
etag: W/"58e27882-2ff5"
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 90902
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YpgGHzGmIW0WIrQwFAwSZwCi54vAhVPwJxNT17m2SQWD0j4NsM0M%2BYFOM100G6tvfAJrHX6748YmruW0ftdHuLwKh1zJqMNXbQG3sBpYu0Vta5PvoGn3uFapJf9xOaf4v8w%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 767bcf71595ab50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| maxcdn.bootstrapcdn.com/bootstrap/4.5.2/css/bootstrap.min.css | 104.18.10.207 | 200 OK | 0 B |
URL HTTP/2maxcdn.bootstrapcdn.com/bootstrap/4.5.2/css/bootstrap.min.css IP104.18.10.207:0
GET /bootstrap/4.5.2/css/bootstrap.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://followshops.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 10 Nov 2022 03:48:03 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
last-modified: Mon, 25 Jan 2021 22:04:11 GMT
cdn-cachedat: 08/03/2021 15:44:07
cdn-edgestorageid: 601
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-proxyver: 1.0
cdn-status: 200
cdn-requestid: 0c835de6853c3382b93a518481c93460
cdn-cache: HIT
cf-cache-status: HIT
age: 1216340
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 767bcf722fa8b4fa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| followshops.net/css/site/follow-clone-style.css?v=123456 | 172.67.177.12 | 200 OK | 0 B |
URL HTTP/2followshops.net/css/site/follow-clone-style.css?v=123456 IP172.67.177.12:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /css/site/follow-clone-style.css?v=123456 HTTP/1.1
Host: followshops.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://followshops.net/
Cookie: ci_session=a%3A6%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%22447453c41217835300c86e097762fb8f%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A12%3A%2291.90.42.154%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A80%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1668052083%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3Bs%3A18%3A%22fc_session_temp_id%22%3Bs%3A6%3A%22328801%22%3B%7D18ec40193a8b486ce09716994a8ca1d6670976f0; PHPSESSID=jg1d8651mggao56hp1p1o52hi6
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 10 Nov 2022 03:48:03 GMT
content-type: text/css
last-modified: Thu, 29 Jul 2021 06:25:50 GMT
vary: Accept-Encoding
etag: W/"610249ee-28684"
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 350174
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=U5XHE4JA0v6PAzvXonjOGVnZ3sPPGgJZbN81z%2FupC8LpXxPZL1zLBuBzHxgFW%2FRPCPCKgrFqbjnechtPnz5efMKE7uIbjv9GdE210SsfjjD8kgAZ6rCZGnQq2zGXZbaeSDw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 767bcf71191bb50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| followshops.net/js/site/bootstrap3-typeahead.min.js | 172.67.177.12 | 200 OK | 0 B |
URL HTTP/2followshops.net/js/site/bootstrap3-typeahead.min.js IP172.67.177.12:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /js/site/bootstrap3-typeahead.min.js HTTP/1.1
Host: followshops.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://followshops.net/
Cookie: ci_session=a%3A6%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%22447453c41217835300c86e097762fb8f%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A12%3A%2291.90.42.154%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A80%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1668052083%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3Bs%3A18%3A%22fc_session_temp_id%22%3Bs%3A6%3A%22328801%22%3B%7D18ec40193a8b486ce09716994a8ca1d6670976f0; PHPSESSID=jg1d8651mggao56hp1p1o52hi6
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 10 Nov 2022 03:48:03 GMT
content-type: application/javascript
last-modified: Mon, 09 Nov 2015 14:54:28 GMT
vary: Accept-Encoding
etag: W/"5640b3a4-1ade"
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 350174
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WuckX1ZO%2FxI9jHhRLfjde6MblT5Wmsdds5gH1f5l2SpwRudwpiimyxqDg%2FmTx%2FbW9zYcGLjWERS%2B2N6rWEMGUBXhX2%2BYRaIHWv1t197LVg6xUehJOmzY7MBkzm3X0hfx1dQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 767bcf714940b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| followshops.net/js/site/follow-filestimeline_slideshow.js | 172.67.177.12 | 200 OK | 0 B |
URL HTTP/2followshops.net/js/site/follow-filestimeline_slideshow.js IP172.67.177.12:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /js/site/follow-filestimeline_slideshow.js HTTP/1.1
Host: followshops.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://followshops.net/
Cookie: ci_session=a%3A6%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%22447453c41217835300c86e097762fb8f%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A12%3A%2291.90.42.154%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A80%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1668052083%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3Bs%3A18%3A%22fc_session_temp_id%22%3Bs%3A6%3A%22328801%22%3B%7D18ec40193a8b486ce09716994a8ca1d6670976f0; PHPSESSID=jg1d8651mggao56hp1p1o52hi6
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 10 Nov 2022 03:48:03 GMT
content-type: application/javascript
last-modified: Mon, 31 Aug 2015 07:24:08 GMT
vary: Accept-Encoding
etag: W/"55e40118-5bbb"
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 350174
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Vgtv1NePLlkF1JDxvcMd%2BiuNSyfKzFUWAl3usvENTm5azfZd0%2Byfd2KywO0uU8Lqh5hbUh%2Bn698N%2F4eXTK73uyQ19KkVaRCXGNTXQsScCRVq33hQdYKPkBuYLU%2Bph2CdKhI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 767bcf714945b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| followshops.net/js/tinymce/jscripts/tiny_mce/tiny_mce.js | 172.67.177.12 | 200 OK | 0 B |
URL HTTP/2followshops.net/js/tinymce/jscripts/tiny_mce/tiny_mce.js IP172.67.177.12:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /js/tinymce/jscripts/tiny_mce/tiny_mce.js HTTP/1.1
Host: followshops.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://followshops.net/
Cookie: ci_session=a%3A6%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%22447453c41217835300c86e097762fb8f%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A12%3A%2291.90.42.154%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A80%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1668052083%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3Bs%3A18%3A%22fc_session_temp_id%22%3Bs%3A6%3A%22328801%22%3B%7D18ec40193a8b486ce09716994a8ca1d6670976f0; PHPSESSID=jg1d8651mggao56hp1p1o52hi6
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 10 Nov 2022 03:48:03 GMT
content-type: application/javascript
last-modified: Thu, 01 Oct 2015 09:47:54 GMT
vary: Accept-Encoding
etag: W/"560d014a-28fe4"
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 350174
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ce4bEvhwFScruAHwYQjMnhNfPAEkZ6GfAWVJd0zZ6IR3zQTm1%2BTT2XZqHEx3%2Boc0a5R0bWAclGeP%2FbXeFUpvSb9dpxxcQ%2BvvGneWyEpLlTWESGCtCJQgLXzFs6AZWhV4jXY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 767bcf714946b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| followshops.net/css/site/follow-timeline.css?v=12345 | 172.67.177.12 | 200 OK | 0 B |
URL HTTP/2followshops.net/css/site/follow-timeline.css?v=12345 IP172.67.177.12:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /css/site/follow-timeline.css?v=12345 HTTP/1.1
Host: followshops.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://followshops.net/
Cookie: ci_session=a%3A6%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%22447453c41217835300c86e097762fb8f%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A12%3A%2291.90.42.154%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A80%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1668052083%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3Bs%3A18%3A%22fc_session_temp_id%22%3Bs%3A6%3A%22328801%22%3B%7D18ec40193a8b486ce09716994a8ca1d6670976f0; PHPSESSID=jg1d8651mggao56hp1p1o52hi6
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 10 Nov 2022 03:48:03 GMT
content-type: text/css
last-modified: Tue, 27 Jul 2021 11:07:55 GMT
vary: Accept-Encoding
etag: W/"60ffe90b-c05d"
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 90902
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=s6iRpEdEm5M9Sg3%2B%2FurbYjtNxrmC0Ex58V6uUmpZhoJuD5NU4WCpjsQpBQSwiHSjT8YB5GOIPDjyii5wV24Xl7y4YDIUx25U8T0d4YlrJHsNTPms1ikfzZI1hYKz0kkl7hE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 767bcf71595bb50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| followshops.net/js/validation.js | 172.67.177.12 | 200 OK | 0 B |
URL HTTP/2followshops.net/js/validation.js IP172.67.177.12:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /js/validation.js HTTP/1.1
Host: followshops.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://followshops.net/
Cookie: ci_session=a%3A6%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%22447453c41217835300c86e097762fb8f%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A12%3A%2291.90.42.154%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A80%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1668052083%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3Bs%3A18%3A%22fc_session_temp_id%22%3Bs%3A6%3A%22328801%22%3B%7D18ec40193a8b486ce09716994a8ca1d6670976f0; PHPSESSID=jg1d8651mggao56hp1p1o52hi6
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 10 Nov 2022 03:48:03 GMT
content-type: application/javascript
last-modified: Thu, 01 Oct 2015 09:47:56 GMT
vary: Accept-Encoding
etag: W/"560d014c-bacd"
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 350174
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=m%2F%2ByfIegRiKe%2BFz43FC9vC9M7JZvRGUxY7wnRGGfaWdO83%2F3AHC4opxqlhrNFXVEcBL9DNOpRmWtqeq9JQ%2BUaps9yTIQu9CGir96QkWJcVIQ7clfL%2Fdk3MZ%2FWFderT23mq0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 767bcf715955b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
104.21.17.152