{"report_id":"780ad225-9fde-4417-889e-30b7546848be","version":6,"status":"done","tags":[],"date":"2026-02-07T00:47:52Z","url":{"schema":"http","addr":"h5.tiktokshop.buzz","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":0,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"final":{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/home","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"title":"首页","dom":{"size":147576,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (57731)","md5":"6ea1adfd91207c61a63a7ac517e00c41","sha1":"f924f49fce3c0b86e264a04272917e9498478661","sha256":"f07d63866f2721e1983b847d2d2c9dec5beed25b3a096faea373d53cf91d89ba","sha512":"7fbad539518966f1d1495984df24ed4a11b351e15ff403a47285612aa115870fe16b45060c5bd30a962ddb213c42ee68ccc00d9a8854266eada9f357f6813c2b","ssdeep":"1536:tFsV8srQFy0bVMplwnpExwEy4B5BK6Ib6REEVLR1:ulQEyw5abXEV/","tlshash":"26e32154e53018ff91638be8e2507fa63597f3aed28945202ead51242ed3df8f8264e4","dom_hash":"domhashcd56559b0f15026c38b47c402be2cd8d","first_seen":"2026-02-07T00:39:12.042419Z","last_seen":"2026-02-07T09:50:53.820792Z","times_seen":3,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"h5.tiktokshop.buzz","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":0,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-14T00:47:52Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"h5.tiktokshop.buzz","ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"domain_registered":"2026-02-03","domain_rank":0,"first_seen":"2026-02-07T00:38:50.227744Z","last_seen":"2026-02-07T00:38:50.227744Z","alert_count":110,"request_count":55,"received_data":11316085,"sent_data":24650,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"apisss.tkshto.cyou","ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"domain_registered":"2026-02-03","domain_rank":0,"first_seen":"2026-02-07T00:47:57.66155Z","last_seen":"2026-02-07T00:47:57.661551Z","alert_count":0,"request_count":5,"received_data":61115,"sent_data":2497,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.onbuy.com","ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2005-06-06","domain_rank":1890675,"first_seen":"2024-02-17T23:31:22Z","last_seen":"2026-02-07T00:38:50.735368Z","alert_count":0,"request_count":101,"received_data":19110471,"sent_data":53913,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/home","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"593c2cdf0439d232e7e305236830b065","sha1":"223f5b6704a0af1cab1c47a381ed5e927f7c3e18","sha256":"3bfe12f26cd2441f69111cceaaf43e52ce69530f187d1c2d86095d4aa3540457","sha512":"a94645aec081c5428af87de48bd1ba303691b0091023e12356a0ad79cfb668a2623d1d808aa7d517fb75e565760fa4aa51ad84e3e4251757fbc8169d25bfcc57","ssdeep":"","tlshash":"a9c08cc4f0c23d002a02a91060af2af89024402774481b63cc94d8492f220b18237e98","size":145,"data":"","first_seen":"2026-02-07T00:39:12.36363Z","last_seen":"2026-06-29T01:25:24.999835Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/home","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"6065b7a3c2912f492664be739d0d2337","sha1":"4328729e709a18e5cdb8a05a5bfacbfb77b134f2","sha256":"3e5a330cc3e46a23fc0dfe29dfc9ff496c892397e02fa9cb4ace1dcd1b1a27b4","sha512":"89b1b3197afb4e9653a0a81c070cce417c800b1c0b28ec6c0512fd863cda559ef6bfa2a1254742ccdf840fe707ba1d97fb3745e4c4e5b408ce2636a8a715b207","ssdeep":"","tlshash":"1ac08cc8a0d22e101602641115af24e490344027b04c1b028c94dca82e220f48233ed8","size":142,"data":"","first_seen":"2024-08-19T17:04:21.453264Z","last_seen":"2026-06-29T01:25:24.94578Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"Function","is_inline":false,"md5":"9ebacfd8d8c8a6f049916b7b3a1dab7d","sha1":"de7b12ceeab6054e1fbbac87c505b18882e307e7","sha256":"87c44bf0fa7472fe33cde99b9428776cfe22854ea4f8e20b8b83acdaf3b5d681","sha512":"669fbf5d4f1edc548a91ee6507ca249c5b45cf523c43721a6dd0961a075709e048bff120b2bfa8de35a7a82fdacd832a3f60866fd37f44932e4bd4cc48ef3af2","ssdeep":"","tlshash":"31c08cc4a0d22e001642691020af25e89024443770485b12cd94dc582e220f09233ea8","size":142,"data":"","first_seen":"2025-09-28T07:44:22.001852Z","last_seen":"2026-06-08T22:23:27.849659Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"Function","is_inline":false,"md5":"c22dbf1e26aea68ef3a1665838d0cd12","sha1":"fd6e40f2d6e07ccbf2ee2bbd8be0f2f9b1a78439","sha256":"650615cfebc397fdbd72e10edcf82690502a581a3bead7c3739bcb1cab822e65","sha512":"78b9b7babf1ed40f0e599ee4acd69761a1974e54956c5ae78f0cc08224fd13612ae2ee5ff96d457048b845f79828a6c6cb89a4ce31ecfd15de487dff2514f60c","ssdeep":"","tlshash":"40c08cc5b0c26d006602691050af25e8a024402ab0481b138c94d8483e630b08233e98","size":142,"data":"","first_seen":"2025-10-08T06:16:58.651304Z","last_seen":"2026-06-08T22:23:27.834834Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/assets/index-CIEJj_EE.js","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"importedModule","is_inline":false,"md5":"8aa941e15270d4d50072566587cbb48c","sha1":"39a9ee2e127fe64b20b5ce3e9e885e5284bd7b7f","sha256":"3b656f75e31b111284f65c96632879c577db4bbb18c084ad98c3795fbbfe2717","sha512":"2c7d7090048e590b4cfccafa4f3dda34779e732f4d15bf99dd479343ec5d9bd942fc01c7cf2f65e03a305a4896e5ae6dfab54455f37b87c04ef966b7554aba58","ssdeep":"","tlshash":"5341928c75acea7ca376a48455184c29c5051f6b3573c4e6e23a381b4beaa80f936e04","size":2008,"data":"","first_seen":"2026-02-07T00:39:12.132779Z","last_seen":"2026-02-07T09:50:53.880189Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/assets/filter-B2uSLGeZ.js","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"importedModule","is_inline":false,"md5":"cf4ab7c5993ad7e1c3f0b7a7858035b7","sha1":"d7c1edb99c8fd1065433f3518778c6252345943b","sha256":"aee8289dc882c12ec0e0c69482ba9392c85f5a25e05439f921fa40201cc61f62","sha512":"c22765557daffcbcbece9922407a3a6989cd9b28f8fde8cf47be7f8d5814f5d52801a3f64106c5d97e0e67242814a451717ac0afde931b7bc6271fb3a8fc2320","ssdeep":"","tlshash":"72b01245315021520200301880566836c264caa0037a4f32c913a19317304242045f89","size":87,"data":"","first_seen":"2025-10-17T22:05:01.117066Z","last_seen":"2026-06-08T22:23:27.753022Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/home","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"e90b0c4775c2173feee1c306f3a9da1b","sha1":"5dc2ac67c2369c7c066d885efe6c0f6dd03d6b38","sha256":"64e46e2b3fa4d956261a815fe4494d17d4ae9101915d9a383b8980d8d2afba18","sha512":"0d93d4379b96441a15bb41541287278e70a3673fa6fe42bbe532261e5a9e832888e803370a6c8c1f57783602c018875e17fcc3df11a4d53a0e25eeff18fce34d","ssdeep":"","tlshash":"f1c08cc4e0c22d002606691050af29e8a024402678481b528ca4d8492e220b08333e9c","size":145,"data":"","first_seen":"2025-10-31T06:40:11.013169Z","last_seen":"2026-06-08T22:23:27.872225Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/home","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"d2a72613025142ccee8a8ec698a47d10","sha1":"86d9c0648cbc7a0c27461b4fabf30d68b407fc9e","sha256":"d49357d9d69c71fdd2a6952e66ab502b9ef1a05d1949cf7039a7939760cef4bc","sha512":"386e66c905bdd05ca59642bce4a68334817b3eab9d3e52e1dce2927a79ecf3541fe8e4fd14013ba830534963f30b901d575475157ca2bb024b5c6b1a8f3e55db","ssdeep":"","tlshash":"35c08cc4a0ca6d001606641010af24e4a024402a74881b52ccd4e8882e620b49237ea8","size":139,"data":"","first_seen":"2024-08-20T10:17:37.70793Z","last_seen":"2026-08-03T04:20:50.57131Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"Function","is_inline":false,"md5":"0b9336d50c0b33343e06d7a48a690daa","sha1":"ad0e3289df6549280b291d1d7acbcc5342b8ef6b","sha256":"58106b02c8ea8aab25a6ada009f48deef0cdc80b78b39a34b87e2b9b011c3f36","sha512":"a60ae12a8b95f97fcf26d1b16dc0ad04100d70dfb4883fd521daafa3bb63de3f099252657ac3899961381843d684c5e8678127b0630897af4dcdc0f471ac1ff8","ssdeep":"","tlshash":"98c08cc4a0c32d006602651210af2ae49028442670882b438c94d8482e220b49233e98","size":142,"data":"","first_seen":"2025-10-08T06:16:58.642256Z","last_seen":"2026-06-08T22:23:27.864929Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/home","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"f5b34ca6e91d25ba9dc95b739b166b8c","sha1":"75068dcccf1b3f2e2aae533c3e2320dd46b3c9f7","sha256":"d6163e83f6cad9ba5dca6981e74b89d11ad59283f88bd966e5b2341c52c01b4b","sha512":"fdcedb7c9f135bcc023400f42b600317e07074e4a474b7239825ef98e69110a38f001646c6ac57b71ec6c590b81c8e5efb214a484ca1b7ab31bad6025373ba7f","ssdeep":"","tlshash":"acc08cc4b0c22d001612645010af24e490248026b0481b12cc94d8882e220f48237e98","size":139,"data":"","first_seen":"2025-08-22T23:47:04.059797Z","last_seen":"2026-06-18T16:01:52.736017Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/assets/index-Dp7_dq1E.js","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"974edfc1fc95fd111b7ed2c64a8e3961","sha1":"b145f2f30d0e6dd848ab50f79fe6dfc38ce70533","sha256":"ba0fe5b886f29286bd111d30516f9cdecb0767c02ed9103a0d442baeaae49ea3","sha512":"10768e47f871cac99f7cc991bc3082262162871b77a68d4f3cc029cd7a6d2510c3ff2c1f3af7f2b26770753fb12b79cd82cced81b369888854c87e01b1f69237","ssdeep":"12288:hmOnUN6lyazyumFZrspoSJwTpBfwWIoQRf2p:hmO8iL7WIZ2p","tlshash":"68944bd93286742993a704f491af3107b23e5e95740c94d4f46ce8ad3ab290ed277fb8","size":444766,"data":"","first_seen":"2026-02-07T00:39:12.239801Z","last_seen":"2026-02-07T09:50:53.905913Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/assets/horiz-4W0iWx_U.js","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"importedModule","is_inline":false,"md5":"4e8a752b1f90313bc01ee4cf77bc75b9","sha1":"085ec93afa9ede106281c542f2853f21cd342fc4","sha256":"129be5b9600a5edf4a0e7ba97e571e88feea8edbe2ec2db6a006d564fe94e864","sha512":"98c9666ecd96156f8b7eae8f6507b9169872a696860212740ed46d1f3e260cf84b37fff5d64821ee21328ae3ac850f6a537f4581d9d4ebdd61bce9a4c2d3fa98","ssdeep":"","tlshash":"fa1100cdccb8c0b5b17c50ecc0050d923959367af3e481a591bab83973924ada3b463a","size":920,"data":"","first_seen":"2026-02-07T00:39:12.077951Z","last_seen":"2026-02-07T09:50:53.83594Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/assets/index-DwDBIbHk.js","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"importedModule","is_inline":false,"md5":"e7a778285028e3c8884da09a7ffdbd7e","sha1":"bf5592f5423ea9daf0d0fb1adfe13fbec919bd85","sha256":"16ff0c02065fa78d1e65712a76666c50f847a12b95cb5b7ce71577625c96de0d","sha512":"3f71f3d8d6b51effafcd89d8a504ecab58985c55823481d0e64ba1fdc8ef31254048c20ca13e900becc916fb8ee0bdb6ce46a1f17946c99989fa9786888c15f7","ssdeep":"","tlshash":"6231568d7882c4b6217384e455801d88b20d9f9b252c7a94b3ecbe1633d2e95cf55e1a","size":1754,"data":"","first_seen":"2026-02-07T00:39:12.161001Z","last_seen":"2026-02-07T09:50:53.892563Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/home","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"28e0e01aae9c13908100aa7fd11814e4","sha1":"d9c4b93154978be928f89d75cb513e121b2dcc47","sha256":"db4fe49b1534878db0f2fd540c4d5525a48243809e739c5b40f14a47dfafb04c","sha512":"7b4cf5508b65ce2991d1b7b07cb6bca40e835e1087cad0dacde4c4d7787fae36fb7a8026c9e6fcb1e0d795f5b1b7ac1ea4430f061bcf5a19e22565cf956f9863","ssdeep":"","tlshash":"04c08cc4b0c22d002606651050af28e49024402674481b028da4d8582e620b08333e98","size":139,"data":"","first_seen":"2024-10-31T08:29:40.625139Z","last_seen":"2026-08-11T16:00:37.968111Z","times_seen":5124,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"Function","is_inline":false,"md5":"2fda27a04ef2d03845172c998337ac94","sha1":"6d24934710884cf1114d1a7fded32cf5bfec44a9","sha256":"a5e9c7d390fcd143302abc70d0ab1c856646911894ada8b90dda89eb9a6bc7b9","sha512":"7b71a1674664acc04751a67ef6bab40b614a2a425b31332bf5110b9e6b834484354abffdbba3bfeec594a1719720420513bf03f7cef787815aa725f4b69f2557","ssdeep":"","tlshash":"bec08cc4a0c22d101602651050af24e8a024442a70485b429da4d8492e230b08233f98","size":142,"data":"","first_seen":"2025-10-08T06:16:58.646828Z","last_seen":"2026-06-08T22:23:27.840436Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"Function","is_inline":false,"md5":"caddad011fc734197686245d2aa3da5b","sha1":"b7085d5a1e285d9b8a29b2344251d36cc035cd12","sha256":"5b07791dd7d36bacfa2e67cf6bdaeee2fb157f24116712132a32cdd2e9a929f4","sha512":"62bb8427dec5c97208cd0e74055e81bba1ab2e4cb7272c9fe36c64d32c91652a907ac19cc32e12516784fee5fd115af25a32dc5db496ef0addc9b7dc7198ac2a","ssdeep":"","tlshash":"32c08cc4a0c32d005602665010af25e49024442a704c1b438c94dc482e620b89233e98","size":142,"data":"","first_seen":"2025-09-28T07:44:21.966053Z","last_seen":"2026-06-08T22:23:27.877406Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/assets/index-BaBXOzg8.js","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"importedModule","is_inline":false,"md5":"b5d32edb3aca5ebb6a69e6bce1138e77","sha1":"dea43f0f935a647afb6e434aabcb3dd0f6a936ce","sha256":"965248381aae1766680242c08f643d3f56d17106e57ea3aff7e458ae6370389b","sha512":"58e746a5574686c717f77a21d047290a795669936bc3564ed4e0696c68178e86435e4c858e12a52ba7c6daf0dc1a6e1333918087461e82e938e31f5ee9288773","ssdeep":"","tlshash":"9d11e1cddcb8d0b5f17a44ac80190dd13d493b5aa3e091a461a9683433654b9d37db39","size":991,"data":"","first_seen":"2026-02-07T00:39:12.109349Z","last_seen":"2026-02-07T09:50:53.823702Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/assets/index-Sgi5eB1f.js","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"0a4e5cf17aef5abaa63654cd8bd3a0cf","sha1":"f8a825421f7ca5a4e98e44f0395727ea62fde7fd","sha256":"1c7988713e404d7d08a687ba0af17e9c4d57a3a2b7192364d023782dcc67c830","sha512":"8f1a208d201d57743850dc1241c156ec5d97d644f9952a394ab32bafe8718436e7ede4cc62134540e6926b6f0a64f92cf1b7e527d8e0420588fc9ab84e8a68eb","ssdeep":"96:EY3A7TVIRdwfX9eqmR6SuV283O6Byn4j/vGaBp3BjV8FBRT9ReXh/zHR:7oN5mREV283O6B2QHb3Bw9Gh/zHR","tlshash":"ecb1940ef87a85ff947184a4c0586880b0221fbe52e585f1f0fd8e0527a9ded875e77a","size":5549,"data":"","first_seen":"2026-02-07T00:39:12.181585Z","last_seen":"2026-02-07T09:50:53.860988Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/assets/index-BNtJKrO5.js","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"importedModule","is_inline":false,"md5":"8a4defa93d51aa12b6e7cc8e143be44f","sha1":"c41bc81ff3bf77755d8b543bdd8870f66015a460","sha256":"22dff1e04f3eb90f3777e037643433d1107b3fc5d391f67527de53fb54e0fb67","sha512":"cdc7ba9539c0f8db93072d3aa4e07c0587ec4fdcd8f458f7e63b47b4708bc5ec5d7f4659e186f8c392dd8742c011e2030321b6f8ef8478231b05d3c20f80d080","ssdeep":"96:eTZapIpPWBXa/uhi7VcbHvX25csbPaqUvYMjXf3BOIS07n9uAt6z6Ym5uFV:WZajJagiRUf2bbPDUv7LfQIdt6bm0FV","tlshash":"60b1c6d27080bdb7c339aacc506141e0976e57e03026c6e9b06f5f032509cf8a2faa4a","size":5144,"data":"","first_seen":"2026-02-07T00:39:12.204053Z","last_seen":"2026-02-07T09:50:53.926725Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/assets/index-CX7p4Hmx.js","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"importedModule","is_inline":false,"md5":"dee952d4cbb74e8706ed371a187657c3","sha1":"0088ed5d6cf71f923f97ab495bef5d1b5fe160c2","sha256":"d8d821b4eda17599f1335aed671f05dad817bcd64d3ec9f010fe28ec7b07b170","sha512":"5f5430b700505706ef2b322dd0ff4d06a90c884bd68be840b1687955a57ad70e211de4e06393d74de8b19b4d9fda6d81f17f2a8cf934166d8eb1ee8bc50e95b5","ssdeep":"192:TcyE8HFsmgmBlk5bkQNnNhA9Gih6zQPZaG/70b:M8HFPlcbkQNnNhAGih69G/70b","tlshash":"7c12e785f5c591729bab64d5b0e68050e55e0f48e01a80e1f07f9d143beeec0b9b9f2d","size":9499,"data":"","first_seen":"2026-02-07T00:39:12.097506Z","last_seen":"2026-02-07T09:50:53.875461Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/home","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"0c4ef312105b760f12c27e881b4de5ce","sha1":"f7444888f89f3c1141ad27684a46e6b2e1ae8342","sha256":"e2e234bf92436ef5d0ff7025efcdddd32945e01829b02de72c60112f734c6019","sha512":"63890e5c155e2951d1f5837fdef33c016e69cbe9cd3cf79ad3a92f1f8f1185dd0756720e04a29a71cf5121c95faae4cd283d1b39ab1afa1f97144cacf85c5ed0","ssdeep":"","tlshash":"edc08cc5a0c22d045602661119af24e49034442670481b129c94e8482e2b0b08237e98","size":139,"data":"","first_seen":"2023-05-12T18:18:30Z","last_seen":"2026-08-12T15:10:56.112126Z","times_seen":6349,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"Function","is_inline":false,"md5":"5b4699038b44ac316a3632f5250b57cf","sha1":"308b6ea34539b9e984ef5e8561a4aa7c08b5ef2f","sha256":"ce6a670bbd6e11e5f01383dd339ab5d834f8da7689bc33c9fb6912fee98f6ede","sha512":"572baab68223960c7e129f878d73ca34cd5f64aa0352487a2b2634dd1018f5f0ec399ed5727b9b2a6a17cad4a29a775f317653a64321a1b21239251e8eec0e45","ssdeep":"","tlshash":"8cc08cc8b0c22d002602661020af24e89024402674481b428d94e8592e220b08333e98","size":139,"data":"","first_seen":"2024-12-31T00:30:12.558438Z","last_seen":"2026-08-12T15:10:56.111235Z","times_seen":5143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"Function","is_inline":false,"md5":"5b31ef4cb01d72916fa5a573311b1022","sha1":"a37c88e2cc7f1e76b44d6cfa0667213be538988d","sha256":"a9f11008391cd36bf4f566dde755a52eaa926dcdf598e0ea87a5402e226e8c65","sha512":"6c2811a9a2cf3d82883370e6325b8bfcf2d6c7f045fd0a3733440a4de12f97b1a7aa834ca0bc3104983083e66f75a34fa846fe56d6a3dd2d8f7fd9949623b246","ssdeep":"","tlshash":"6ac08cc8b0c22d002602641450bf28f4e024402674481b128c98dc583f220b08237e98","size":139,"data":"","first_seen":"2025-09-28T07:44:21.985852Z","last_seen":"2026-06-08T22:23:27.845669Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/assets/home-board-CjvF8wsq.js","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"importedModule","is_inline":false,"md5":"21b915e0c04de9ac3a59c5dfb0ef6a43","sha1":"6b5e4550b0bf20b9b1737c8aa8c3b41dad21ca90","sha256":"af8840c7e778afa665ecc2e18354a91e3a4843d1edd89f1370129a72615d590a","sha512":"7b49dd2e77e58649828a2836f359e43bc64a9158dd5fa04285af8faa01983f8fba67ffea86512b84c874e4f78a402a878b1eaf3335dbea6807aac31fa3cf6b0f","ssdeep":"","tlshash":"4aa00231862504b8c46434555195a49048a1151c7517b26dc41459c9b67645d894ec2a","size":58,"data":"","first_seen":"2025-10-17T22:05:01.327231Z","last_seen":"2026-06-08T22:23:27.711206Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/assets/index-COvtCFcY.js","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"importedModule","is_inline":false,"md5":"a505f3e1274f29700ea511662882c795","sha1":"3c08dfc1cceb8751e4ae44ce81ddeabe7b9e0879","sha256":"ef1fd24bca674bd3258e05ec3300a32ce7f4dfb8304bd4dc41693c2620dd8299","sha512":"50e26b03256cb8becbe058973d7a39a0c675edc8e46e3815ebd70081b7b63cb49c22df7dbd387c92efa21e32c1c6bec74106e107212d7403df75d9ab9f89be83","ssdeep":"","tlshash":"4921748939ddf031fb5e0cd5412b0502e4704a0c940de0f9a8ba4f326b4a284969bbfe","size":1228,"data":"","first_seen":"2026-02-07T00:39:12.167993Z","last_seen":"2026-02-07T09:50:53.835407Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/assets/product-BC8WZLBv.js","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"importedModule","is_inline":false,"md5":"c194acf9ef80e6c493c0cd34616af121","sha1":"3dbfab242999257a9af65d07ebd6b9a48973322b","sha256":"4fc4d9469a365e15a703820523d07a7e2ffb2388c4a88bc2335842735c1c650d","sha512":"4bc1f9ab08883d786acc51a192da9720007e13cac1644169377a60a7b8edc3bbc6c3a22dbe9977b956b0a0ef3df49ba6302aa187fc047cc6f5f931475a5a774a","ssdeep":"","tlshash":"53f0bb89e673f4630316c03594de257ba9bd82929cfd0d21ad00d1977c78d79722a9cd","size":526,"data":"","first_seen":"2026-02-07T00:39:12.069033Z","last_seen":"2026-02-07T09:50:53.895103Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/assets/index-JzdHzEVz.js","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"importedModule","is_inline":false,"md5":"2086fb25a134ffe35f730ade9eda643d","sha1":"e356ece962baf04c8efd8723c05173fa1207bf6d","sha256":"6e63b5929f6dce5905da55e9eb670052abe6a59b81ad10856cfb1daddf11233c","sha512":"0d6099571c0926a1cd59383be5870ad3916b6d6f25b1da403f84cb4b95a9aab2e9b285cda760ce8f42d7d203ed78404defb0782d4674c8cfb2985d96ed9e62ca","ssdeep":"","tlshash":"5e4186adb421e278d37a568880554490572ccb847021ccceebafb5023655fe9e9cda2c","size":1974,"data":"","first_seen":"2026-02-07T00:39:12.049612Z","last_seen":"2026-02-07T09:50:53.822158Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"Function","is_inline":false,"md5":"1c1ef5b572857372fbc129f2a90fe3bb","sha1":"fdf1112f854847f12afc3efeca86dc220bba325b","sha256":"cb5054f9b3e9a7e65bd5289406f5d74f205c59b4cb4d909b9968c9c928cb3a07","sha512":"05970ac9ce31b741fb7d7314bbd7805dc40339c38bd51e79defe3e3ce37137416c94942347c08ecb3729fe40c9ed9cfc0d35a2d9e7d81960cd9bac6025b8d3c1","ssdeep":"","tlshash":"2ec08cc4a0ca3d001602651090af34e8a024402a70485b038ce4d8492e220b08233e98","size":142,"data":"","first_seen":"2025-09-28T07:44:21.989951Z","last_seen":"2026-06-08T22:23:27.842893Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"Function","is_inline":false,"md5":"129c24a9439852ccbbaa1005536531a9","sha1":"6963c0f29a6d2e902b0bdec0f08b924b6c36c112","sha256":"6b2cbc03007cd58c1e0e3339a418ce95850abfd9a5d6e75b99a2175ae71342ff","sha512":"d9fe0ea19af172c0ca2cb47ce8eeddd9d7a5cfef70863af0defbfef2d4661b0cb74270ae34c963dc8c9ea68471e70da1d1292c79216ee25aee963527de29cb04","ssdeep":"","tlshash":"23c08cc4a0c62d0016026a1051af24e89024406ab4482b179c94d8592e220b48233ea8","size":142,"data":"","first_seen":"2025-10-08T06:16:58.645256Z","last_seen":"2026-06-08T22:23:27.845131Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"Function","is_inline":false,"md5":"f76fad7940512befb7da49759f57686a","sha1":"cdcca137517e3b0b3653b323ac2a5f875cc335a4","sha256":"791061f01662bb37f2317f10f4ea70069aa89893f476753d3aa711cbf34d7c7b","sha512":"3fd178e64bae54416fdcd61f17e950fe207df4c473cd9ec02d403a7b66a7d067ba4a0905c480a875441892266e6787d424f5ac6e8474fb4db5e9e6cab1db2aad","ssdeep":"","tlshash":"8fc08cc4a0c73d041602a45110af24e89028402670481b02cc98d8982e220b48233e98","size":139,"data":"","first_seen":"2025-05-14T13:46:38.121052Z","last_seen":"2026-06-08T22:23:27.835607Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/assets/index-DoEN14Oe.js","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"importedModule","is_inline":false,"md5":"1e5779e1078d039dc0d34addce8a1976","sha1":"bd2d59fd2a1f54eb73a01bdb8448ce3244aadfc4","sha256":"489de3df23a9ad6a2fbc0a08ed2a1ab7a10d2958424e3afbbc2cd50e7d2f6eb6","sha512":"35235723ec7038d420bf2ce8be5b90bec8d08244aeadadbee93a4bbc525084e31eb374ea11071bfc021fdc7bf802acc3917f6013ba14676b2f696c7a0ebdd125","ssdeep":"96:zxUBqjTmIO2aA5QGZbQsceU5eBRFx31NfRvV0s:4qjS5mQybQscH4RFxFNfRd0s","tlshash":"2cb1421e4f4a84dcd519cdc4868415811aec5bfe321a8481a2cdae59ada1fbc7ebf1f0","size":5131,"data":"","first_seen":"2026-02-07T00:39:12.111608Z","last_seen":"2026-02-07T09:50:53.848216Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/assets/index-tx-P29g-.js","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"importedModule","is_inline":false,"md5":"36e6d8b98b9839fb20f42ab47f35ed67","sha1":"6995f28fc5cd1ab3fb627297918f00d6d44fb57d","sha256":"7813bc32957ab4d722d82257303c3e155544cab31882238d285fe644d634e06f","sha512":"26c3659a76c5aebd9d86bc9a470417d572d8db965e34fb62eccac8eee0cd6a924d223c98ae4b2ac589c292ab070bf324140f7e56753d50dd1df36105b0eecb02","ssdeep":"","tlshash":"623132c16bcec57f5aa645c990226810824af75cc67822e1f1feadb447ce450a20c778","size":1756,"data":"","first_seen":"2026-02-07T00:39:12.096392Z","last_seen":"2026-02-07T09:50:53.888464Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/assets/home-DCkfi4Hc.js","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"importedModule","is_inline":false,"md5":"3db649ad7e6dbfd51679b684a6b1e30f","sha1":"6963bd1508f78c63c9c00263f9f20159473db8c9","sha256":"f81f93f23dba598491da3640e3be991e1f1f995e67db5db821849f3e9aecf519","sha512":"f7092f9eb4474e84c3326b084b5a92e3de27484bafd98c14f6fd6700a3441d4c2cf08bc1b01363a7755cebd3d81d453a9f748c228c2220fc1803fc10474674e2","ssdeep":"","tlshash":"81f0cdcfab23e6e341054225d85b3f3ba33a9490b86b0d20bc40f08d396c578615e558","size":554,"data":"","first_seen":"2026-02-07T00:39:12.134189Z","last_seen":"2026-02-07T09:50:53.877594Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"Function","is_inline":false,"md5":"c2a59594b7c750c554d59b777cf7e0a5","sha1":"cc0ac4dbb49aff978ff3ee7d7c1a27f761ba6a20","sha256":"505695da350a211f6c8dbebc42f4bdc2bd8e287e4f5611c8eaf94c81f8951468","sha512":"8fdf9120a742f4fb36ebe9f4bd7684db839a87a5773a496dc5a6e6a8403cfe7562e67463995d588160f8fe75170f338034d8676b7708873d3c0b5c84a0da3b51","ssdeep":"","tlshash":"eec08cc8a0c22d041702641011af24e890244026704c5b02cca4d8683e220b48233e98","size":139,"data":"","first_seen":"2023-05-10T15:08:47Z","last_seen":"2026-08-12T15:10:56.091853Z","times_seen":7135,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/home","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"d2a72613025142ccee8a8ec698a47d10","sha1":"86d9c0648cbc7a0c27461b4fabf30d68b407fc9e","sha256":"d49357d9d69c71fdd2a6952e66ab502b9ef1a05d1949cf7039a7939760cef4bc","sha512":"386e66c905bdd05ca59642bce4a68334817b3eab9d3e52e1dce2927a79ecf3541fe8e4fd14013ba830534963f30b901d575475157ca2bb024b5c6b1a8f3e55db","ssdeep":"","tlshash":"35c08cc4a0ca6d001606641010af24e4a024402a74881b52ccd4e8882e620b49237ea8","size":139,"data":"","first_seen":"2024-08-20T10:17:37.70793Z","last_seen":"2026-08-03T04:20:50.57131Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"Function","is_inline":false,"md5":"1bcf2237db2f7ae406fc4cabc8548739","sha1":"6ac40f96087fb9214d7020bf4f8666b7969d0ef1","sha256":"ba60e90118775783b729f5985fadf0513215928f3cf4e192a8b7cb69ee6652aa","sha512":"31fa843fff427cef3f268be68161521b8f6b6b016c222c0f183f79a029b6ec9fb5c07dbf8493620a743c0a786bcf8ff47e184bebc381b956c85cfc29b8a6e3df","ssdeep":"","tlshash":"39c08cc4a0c72d105a02651050af34e89024402670489b138dd4d8492e220b08233e98","size":142,"data":"","first_seen":"2025-09-28T07:44:22.014065Z","last_seen":"2026-06-08T22:23:27.871322Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/assets/basicData-BknPfgPn.js","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"importedModule","is_inline":false,"md5":"9067d54aeb22b87d9d60fa08a8add367","sha1":"294225b0ceb06afc464dc8411d5f6eb000703f1f","sha256":"197221951bf0703da2f8ada5d87526fee1fdf682dd5b75552a3cfe514b192021","sha512":"207958d907c09d837f68347c9c290fa64bb038a07a3b97f1ba1cfc1fc018fc2e0343e322e8ecdee1d04e7a9dece21f9deaa729b9cb604aa68f70f0ae986952d1","ssdeep":"","tlshash":"faf0b41f250d827d316564ecf6d93fc7a32059541e415dfd6758bd44e09af02a0de470","size":504,"data":"","first_seen":"2026-02-07T00:39:12.174003Z","last_seen":"2026-02-07T09:50:53.906747Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/assets/use-id-JUQTbi8i.js","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"importedModule","is_inline":false,"md5":"6d5d195633b510a7044f5991cc75c89b","sha1":"7cf64c51f54daf5e86ca7dad3757d187830a9a72","sha256":"10ba6246b18a568f0544a4682862d99d6f3986810e40129c0409404881793850","sha512":"03599e1aaea02243037907f1616846227e01fbf8c00f3d5ce5e39cb777764e0c7348e21786a37c5e8ac3200e9ae607785ce6b9f4c5cb734db67d1ae3e5e65d07","ssdeep":"","tlshash":"82c02b4e7c4810f126190cf4e22b47aac22b3c10136a99f0f178071705f136ab3baf00","size":151,"data":"","first_seen":"2026-02-07T00:39:12.114596Z","last_seen":"2026-02-07T09:50:53.842291Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/assets/index-Bcg5zGWv.js","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"importedModule","is_inline":false,"md5":"b9c5375b26bec6b387afa8ebe13667f8","sha1":"7e893c8a535800acaf9d6ecee4f2cbee9b80fab3","sha256":"eb434a207ea69bc33957c065d3bfeb7dd768c9801c9ea55ce2b23ec929b2be4b","sha512":"741600f27dad637a53ae4e0f4abced60cdb613be7effc5592eb005bbc7277facf8ed4d72d71c1c58d347727de817d8eb41b7f28195aac5bf93b5cd9814b4ecba","ssdeep":"","tlshash":"fd5194acf4f5f9382b6b5b45550a48f1790a17df99b886d0f4abcc0033a54d8e06871e","size":3037,"data":"","first_seen":"2026-02-07T00:39:12.222565Z","last_seen":"2026-02-07T09:50:53.860509Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65baea2762ee9/990-990/high-precision-shooting-slingshot-with-spirit-level-competitive-game-catapult-stainless-steel-bow-head-wooden-handle.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:34.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65baea2762ee9/990-990/high-precision-shooting-slingshot-with-spirit-level-competitive-game-catapult-stainless-steel-bow-head-wooden-handle.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5WqtEA0zi6H7zr21LUOqN36Eo3enVa5VtznQjrkV2eGfjKbivRQeLJJxTXw4STAuUdFoDoyPHE\r\nx-goog-generation: 1706748462521828\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 446847\r\nx-goog-hash: crc32c=qNisYQ==, md5=ERFnQWg5evxKYJ5ezhQOvQ==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 446847\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Thu, 01 Feb 2024 00:47:42 GMT\r\netag: \"1111674168397afc4a609e5ece140ebd\"\r\ncontent-type: image/jpeg\r\nage: 546\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":446847,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"1111674168397afc4a609e5ece140ebd","sha1":"bbe8df3c143b28b85972ab3cf00ad6a981170050","sha256":"ba79375c20ad37b8fb1e59f2d6e0737444642438d7847f47c3687023d175bb29","sha512":"26387a9eb6d4576c33a4330709fc85d392ac454aff359fbf91097451e3ed3e9faab4eb380cdf24851bb95f99df33331c0c25390063c6151bccdb7d9e5dac4c81","ssdeep":"12288:U4Jdr3TqTtuTfwLZkIihI0aE7AOmK50QNbgCMYMj:U4JZ3GZuTfwCVhIXErmAax","tlshash":"9b942342aee814dd3a87044b3cc773aed935f5812afb50238ffa0815adda362135a577","first_seen":"2026-02-07T00:39:12.106263Z","last_seen":"2026-06-08T22:23:27.669556Z","times_seen":6,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":88,"receive":166,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65a8291d33ae9/990-990/terra-nova-magnifood-life-drink-227g.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:34.661Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65a8291d33ae9/990-990/terra-nova-magnifood-life-drink-227g.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5UOhgrgs8EbrtO6xZb9_RaPPB2MFaxSH1-Y3uGI7_a5cp4V3RKuUEjjQxbtGwWleoq3\r\nx-goog-generation: 1705520485028788\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 132160\r\nx-goog-hash: crc32c=HhLIXg==, md5=uIURBoXJI+nVnY5TeWBxQg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 132160\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Wed, 17 Jan 2024 19:41:25 GMT\r\netag: \"b885110685c923e9d59d8e5379607142\"\r\ncontent-type: image/jpeg\r\nage: 546\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":132160,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"b885110685c923e9d59d8e5379607142","sha1":"4c617182da131804c542d2f1918b5bf25ae086e2","sha256":"05f913d903aad044caa231fb498b0b7aa1cebc34eb7be3585149510827b57c16","sha512":"5f9e9068b2f9484182305d4f6459a2d436ac48953134d0221238119c7fb804034abdfffc4f7a4753481e0cfdec894687589b177885b261c7f1e678a77ad9bebc","ssdeep":"1536:m9Yozp2x3waPrMSULRUU+Znk6ASewqJv/Qv4AcZDDgsc6SNPDxqeDo4E8SGH:xozy3waPAd5xx6VMDgLN1qQo4E8SGH","tlshash":"d9d31250f9e938c9aa24291c2cff994434e653f366b5c50a7dce1fd2ebd8a871105a1c","first_seen":"2026-02-07T00:39:12.052266Z","last_seen":"2026-02-07T09:50:53.917433Z","times_seen":3,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/assets/index-COvtCFcY.js","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:30.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.tiktokpropp.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 13:40:30 GMT","end":"Mon, 04 May 2026 13:40:29 GMT"},"fingerprint":{"sha1":"7F:66:7F:4D:16:40:F2:BB:67:54:E3:04:98:4E:27:FF:AC:99:5C:DE","sha256":"7B:A6:B6:EA:A6:99:D6:2F:9C:45:7E:39:93:41:5C:EE:62:8C:3A:9E:C5:D0:4A:63:46:DA:B6:99:25:49:4F:A2"}}},"request":{"raw":"GET /assets/index-COvtCFcY.js HTTP/1.1\r\nHost: h5.tiktokshop.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://h5.tiktokshop.buzz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 00:47:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 04 Feb 2026 12:44:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69833f40-4cc\"\r\nexpires: Sat, 07 Feb 2026 12:47:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1228,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1227)","md5":"a505f3e1274f29700ea511662882c795","sha1":"3c08dfc1cceb8751e4ae44ce81ddeabe7b9e0879","sha256":"ef1fd24bca674bd3258e05ec3300a32ce7f4dfb8304bd4dc41693c2620dd8299","sha512":"50e26b03256cb8becbe058973d7a39a0c675edc8e46e3815ebd70081b7b63cb49c22df7dbd387c92efa21e32c1c6bec74106e107212d7403df75d9ab9f89be83","ssdeep":"","tlshash":"4921748939ddf031fb5e0cd5412b0502e4704a0c940de0f9a8ba4f326b4a284969bbfe","first_seen":"2026-02-07T00:39:12.167993Z","last_seen":"2026-02-07T09:50:53.835407Z","times_seen":3,"resource_available":true,"data":null}},"time_used":453,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":453,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65b69e7d941c3/990-990/lego-10992-duplo-town-life-at-the-day-nursery.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:34.551Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65b69e7d941c3/990-990/lego-10992-duplo-town-life-at-the-day-nursery.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5W6LboW_G_zQhxCG6X-fEtWafXico9JEpO9Wk5PN4i_vA5fK4dIE7QjJDdwbiTLg1itfzI8bx4\r\nx-goog-generation: 1706466964255182\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 308890\r\nx-goog-hash: crc32c=DDhARA==, md5=9XvTCZR9BzgwNAZ+AI+bUg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 308890\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sun, 01 Feb 2026 02:52:46 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Sun, 28 Jan 2024 18:36:04 GMT\r\netag: \"f57bd309947d07383034067e008f9b52\"\r\ncontent-type: image/jpeg\r\nage: 510888\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":308890,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"f57bd309947d07383034067e008f9b52","sha1":"10ad59ebed7f31fed54a97c70b4cd5958be25faf","sha256":"c04e4793f6064c9a071bf58f98c080792068de187fcdb7b5b1746a0137daee0d","sha512":"13feb576743ec8524603b71d1221f4c071525f490508baae4f38d3579bca230c25c1c017841f3c9a63e13c5b584cc728a1d25dc3a4ae62cea4a409b3188148b0","ssdeep":"6144:VPcG4L4NOflsLwd6MoydfhqH7pq/mYy4OnJU/f+Jdt3eAaWVklM5DGpuV:1cRvEG6MoE0H7pS3ZSJU/WJ/eAaWu6I4","tlshash":"8f641274f3e3e742535b446e883f7d3a1b6051c012d52aa7626b1e6c7638f78a12327e","first_seen":"2026-02-07T00:39:12.1296Z","last_seen":"2026-02-07T09:50:53.824401Z","times_seen":3,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":30,"dns":0,"connect":0,"send":0,"wait":88,"receive":123,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/assets/index-Dp7_dq1E.js","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:29.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.tiktokpropp.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 13:40:30 GMT","end":"Mon, 04 May 2026 13:40:29 GMT"},"fingerprint":{"sha1":"7F:66:7F:4D:16:40:F2:BB:67:54:E3:04:98:4E:27:FF:AC:99:5C:DE","sha256":"7B:A6:B6:EA:A6:99:D6:2F:9C:45:7E:39:93:41:5C:EE:62:8C:3A:9E:C5:D0:4A:63:46:DA:B6:99:25:49:4F:A2"}}},"request":{"raw":"GET /assets/index-Dp7_dq1E.js HTTP/1.1\r\nHost: h5.tiktokshop.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 00:47:29 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 04 Feb 2026 12:44:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69833f40-6c95e\"\r\nexpires: Sat, 07 Feb 2026 12:47:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":444766,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (44267)","md5":"974edfc1fc95fd111b7ed2c64a8e3961","sha1":"b145f2f30d0e6dd848ab50f79fe6dfc38ce70533","sha256":"ba0fe5b886f29286bd111d30516f9cdecb0767c02ed9103a0d442baeaae49ea3","sha512":"10768e47f871cac99f7cc991bc3082262162871b77a68d4f3cc029cd7a6d2510c3ff2c1f3af7f2b26770753fb12b79cd82cced81b369888854c87e01b1f69237","ssdeep":"12288:hmOnUN6lyazyumFZrspoSJwTpBfwWIoQRf2p:hmO8iL7WIZ2p","tlshash":"68944bd93286742993a704f491af3107b23e5e95740c94d4f46ce8ad3ab290ed277fb8","first_seen":"2026-02-07T00:39:12.239801Z","last_seen":"2026-02-07T09:50:53.905913Z","times_seen":3,"resource_available":true,"data":null}},"time_used":329,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":329,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/assets/use-id-JUQTbi8i.js","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:30.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.tiktokpropp.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 13:40:30 GMT","end":"Mon, 04 May 2026 13:40:29 GMT"},"fingerprint":{"sha1":"7F:66:7F:4D:16:40:F2:BB:67:54:E3:04:98:4E:27:FF:AC:99:5C:DE","sha256":"7B:A6:B6:EA:A6:99:D6:2F:9C:45:7E:39:93:41:5C:EE:62:8C:3A:9E:C5:D0:4A:63:46:DA:B6:99:25:49:4F:A2"}}},"request":{"raw":"GET /assets/use-id-JUQTbi8i.js HTTP/1.1\r\nHost: h5.tiktokshop.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://h5.tiktokshop.buzz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 00:47:30 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 151\r\nlast-modified: Wed, 04 Feb 2026 12:44:48 GMT\r\netag: \"69833f40-97\"\r\nexpires: Sat, 07 Feb 2026 12:47:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":151,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"6d5d195633b510a7044f5991cc75c89b","sha1":"7cf64c51f54daf5e86ca7dad3757d187830a9a72","sha256":"10ba6246b18a568f0544a4682862d99d6f3986810e40129c0409404881793850","sha512":"03599e1aaea02243037907f1616846227e01fbf8c00f3d5ce5e39cb777764e0c7348e21786a37c5e8ac3200e9ae607785ce6b9f4c5cb734db67d1ae3e5e65d07","ssdeep":"","tlshash":"82c02b4e7c4810f126190cf4e22b47aac22b3c10136a99f0f178071705f136ab3baf00","first_seen":"2026-02-07T00:39:12.114596Z","last_seen":"2026-02-07T09:50:53.842291Z","times_seen":3,"resource_available":true,"data":null}},"time_used":449,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":449,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65b19545c43e6/990-990/aloe-vera-10000mg-x-180-tablets-skincare-colon-cleanse-digestion-detox.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:34.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65b19545c43e6/990-990/aloe-vera-10000mg-x-180-tablets-skincare-colon-cleanse-digestion-detox.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5U-YOQ_bFLeGpwPz3JzzrZXt2v8QG9Ij1Yv7PTpOATWX77Tu2TOoyxg1nIxo7MlpNMa\r\nx-goog-generation: 1706136908375203\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 95666\r\nx-goog-hash: crc32c=6RzTZg==, md5=IzfE7dHP8B7/iu33EYt6vQ==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 95666\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Wed, 24 Jan 2024 22:55:08 GMT\r\netag: \"2337c4edd1cff01eff8aedf7118b7abd\"\r\ncontent-type: image/jpeg\r\nage: 547\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":95666,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"2337c4edd1cff01eff8aedf7118b7abd","sha1":"ea0db3c8c5fa7db09f6d16e94cdfb77f11110736","sha256":"18c444c4e442be065e1642a3c43926c126f798163988c904408aabf697163cec","sha512":"db212c2dfb0b385a3d9ec4c3b16082b8c6dd339d46692ac3bd163bd9fcd4523efa970bf696196a60369110a016e56645552983c3a45e62456d2dc4cca295ee17","ssdeep":"1536:cBRAZ0YuT5miOLi/drHkOEEewMXECLhS1Lid35MmQH9W6Q3bsA4GQP:cBRAiYq9EYyOLWXHgipgdW6Q3bsAK","tlshash":"1f931201b89652d3fd60291d91416866bff8410cb628f8f630f25af7681b84d3ff955b","first_seen":"2026-02-07T00:39:12.082304Z","last_seen":"2026-06-08T22:23:27.653747Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1821,"timings":{"blocked":905,"dns":0,"connect":25,"send":0,"wait":14,"receive":3,"ssl":871},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65bac78cacd85/990-990/cream-3xl-men-long-sleeve-stripe-cable-knited-cricket-jumper.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:35.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65bac78cacd85/990-990/cream-3xl-men-long-sleeve-stripe-cable-knited-cricket-jumper.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5XCiOw3lb5a37GiQPHLwd4oKA22mjN403RhEipRsDN2fygULFkCPpG6L_yZmK0lNNYY\r\nx-goog-generation: 1706739621829607\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 409231\r\nx-goog-hash: crc32c=6G5KNg==, md5=tGAlh7yneIhDpvioNbaFRA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 409231\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Wed, 04 Feb 2026 23:07:50 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Wed, 31 Jan 2024 22:20:21 GMT\r\netag: \"b4602587bca7788843a6f8a835b68544\"\r\ncontent-type: image/jpeg\r\nage: 178785\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":409231,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"b4602587bca7788843a6f8a835b68544","sha1":"26b8acc0adbcf65a34421b2c89b9843c273b3d9c","sha256":"ff23caa45ac587f6750d9bee33cfe2f9411d5d0c20ff3cb8068f57c3f4351c16","sha512":"cf57336145efdd68a58eff46af3e7bc92f56b22b9f289596903f094943a2b998ccdcaaaa3d6e681c22148d1f069a92a48abc13a142fc66c2a92e27bc004d99c1","ssdeep":"12288:v21Wy65eXbzNY6uaZAjf/B6IHAQ1riACvg:v8WDeXbzi6u3jh4QYJg","tlshash":"6c94efd0d7b921eab7ea2a6eeffbfe183c712507c358375b2d066074e65d0466782012","first_seen":"2026-02-07T00:39:12.05471Z","last_seen":"2026-06-08T22:23:27.669032Z","times_seen":6,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65b542d4751dd/990-990/500g-numb-cream-skin-numbing-topical-anesthetics-for-tattoo.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:34.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65b542d4751dd/990-990/500g-numb-cream-skin-numbing-topical-anesthetics-for-tattoo.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5VOWnPt-SBIU5cFmiLNkW1x-z-7YCJ8970XTxTBEE0tIYtN1Fsq_lMfTQPe3BeDamkB\r\nx-goog-generation: 1706377946662974\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 142929\r\nx-goog-hash: crc32c=2IWaxg==, md5=vOQ11g4G39NzJdnHsx3pEQ==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 142929\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Sat, 27 Jan 2024 17:52:26 GMT\r\netag: \"bce435d60e06dfd37325d9c7b31de911\"\r\ncontent-type: image/jpeg\r\nage: 546\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":142929,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"bce435d60e06dfd37325d9c7b31de911","sha1":"abb214b40dd4438726ba0d7a758aa89c78907df4","sha256":"bcf13ccc298e873db0efb1ff8814e40b2729daeccfda6534e4ab6716c2315a9e","sha512":"4b354996cf6e464f628a1746e281314f285cc3f48a10c5c11e697d88a260d72a8be7967aeab39fd32f969bb908eb8d910047682c1616ea4f4af62ad8fa394768","ssdeep":"3072:8qfUtykt9DVtkXwdK3qtnC6LV1frJZRaRTADC+IcnDcFzfdGY:8JYuyMzLRAT7cgFzfYY","tlshash":"6cd313833236f4dccd1d841dc8949c5817adb3c5a8c364a36890c9a2b3d2ab351fa77b","first_seen":"2026-02-07T00:39:12.098771Z","last_seen":"2026-02-07T09:50:53.909869Z","times_seen":3,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/assets/index-BGw9XBQr.css","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:30.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.tiktokpropp.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 13:40:30 GMT","end":"Mon, 04 May 2026 13:40:29 GMT"},"fingerprint":{"sha1":"7F:66:7F:4D:16:40:F2:BB:67:54:E3:04:98:4E:27:FF:AC:99:5C:DE","sha256":"7B:A6:B6:EA:A6:99:D6:2F:9C:45:7E:39:93:41:5C:EE:62:8C:3A:9E:C5:D0:4A:63:46:DA:B6:99:25:49:4F:A2"}}},"request":{"raw":"GET /assets/index-BGw9XBQr.css HTTP/1.1\r\nHost: h5.tiktokshop.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 00:47:30 GMT\r\ncontent-type: text/css\r\ncontent-length: 388\r\nlast-modified: Wed, 04 Feb 2026 12:44:48 GMT\r\netag: \"69833f40-184\"\r\nexpires: Sat, 07 Feb 2026 12:47:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":388,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (387)","md5":"38b4692ba8cb966ca61a153f03892a53","sha1":"d564ed6215e4471b6db70dbee23eb0dd043ce368","sha256":"812894f893d5bfe95dbbede07c8a20c7d24c6b803d521b0c8b0ac072de1b7ad2","sha512":"855ba6f19e02c9bc366a470c09ab49398f6d321a010f75908801d7f865de4b60a043021065ba519936200dd11f779b86df8efd5afa8d2fa4a0ef44bce8e3e4c0","ssdeep":"","tlshash":"11e02222276ab424f971824a34407a985148e3328205ae6ccfa3de18ccd31a33a926cf","first_seen":"2025-09-28T07:44:21.881839Z","last_seen":"2026-06-08T22:23:27.683245Z","times_seen":13,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/assets/index-CIEJj_EE.js","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:31.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.tiktokpropp.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 13:40:30 GMT","end":"Mon, 04 May 2026 13:40:29 GMT"},"fingerprint":{"sha1":"7F:66:7F:4D:16:40:F2:BB:67:54:E3:04:98:4E:27:FF:AC:99:5C:DE","sha256":"7B:A6:B6:EA:A6:99:D6:2F:9C:45:7E:39:93:41:5C:EE:62:8C:3A:9E:C5:D0:4A:63:46:DA:B6:99:25:49:4F:A2"}}},"request":{"raw":"GET /assets/index-CIEJj_EE.js HTTP/1.1\r\nHost: h5.tiktokshop.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/assets/index-Sgi5eB1f.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 00:47:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 04 Feb 2026 12:44:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69833f40-7d8\"\r\nexpires: Sat, 07 Feb 2026 12:47:31 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2008,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2007)","md5":"8aa941e15270d4d50072566587cbb48c","sha1":"39a9ee2e127fe64b20b5ce3e9e885e5284bd7b7f","sha256":"3b656f75e31b111284f65c96632879c577db4bbb18c084ad98c3795fbbfe2717","sha512":"2c7d7090048e590b4cfccafa4f3dda34779e732f4d15bf99dd479343ec5d9bd942fc01c7cf2f65e03a305a4896e5ae6dfab54455f37b87c04ef966b7554aba58","ssdeep":"","tlshash":"5341928c75acea7ca376a48455184c29c5051f6b3573c4e6e23a381b4beaa80f936e04","first_seen":"2026-02-07T00:39:12.132779Z","last_seen":"2026-02-07T09:50:53.880189Z","times_seen":3,"resource_available":true,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/assets/index-tx-P29g-.js","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:31.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.tiktokpropp.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 13:40:30 GMT","end":"Mon, 04 May 2026 13:40:29 GMT"},"fingerprint":{"sha1":"7F:66:7F:4D:16:40:F2:BB:67:54:E3:04:98:4E:27:FF:AC:99:5C:DE","sha256":"7B:A6:B6:EA:A6:99:D6:2F:9C:45:7E:39:93:41:5C:EE:62:8C:3A:9E:C5:D0:4A:63:46:DA:B6:99:25:49:4F:A2"}}},"request":{"raw":"GET /assets/index-tx-P29g-.js HTTP/1.1\r\nHost: h5.tiktokshop.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/assets/index-Sgi5eB1f.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 00:47:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 04 Feb 2026 12:44:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69833f40-6dc\"\r\nexpires: Sat, 07 Feb 2026 12:47:31 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1756,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1755)","md5":"36e6d8b98b9839fb20f42ab47f35ed67","sha1":"6995f28fc5cd1ab3fb627297918f00d6d44fb57d","sha256":"7813bc32957ab4d722d82257303c3e155544cab31882238d285fe644d634e06f","sha512":"26c3659a76c5aebd9d86bc9a470417d572d8db965e34fb62eccac8eee0cd6a924d223c98ae4b2ac589c292ab070bf324140f7e56753d50dd1df36105b0eecb02","ssdeep":"","tlshash":"623132c16bcec57f5aa645c990226810824af75cc67822e1f1feadb447ce450a20c778","first_seen":"2026-02-07T00:39:12.096392Z","last_seen":"2026-02-07T09:50:53.888464Z","times_seen":3,"resource_available":true,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/assets/basicData-BknPfgPn.js","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:31.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.tiktokpropp.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 13:40:30 GMT","end":"Mon, 04 May 2026 13:40:29 GMT"},"fingerprint":{"sha1":"7F:66:7F:4D:16:40:F2:BB:67:54:E3:04:98:4E:27:FF:AC:99:5C:DE","sha256":"7B:A6:B6:EA:A6:99:D6:2F:9C:45:7E:39:93:41:5C:EE:62:8C:3A:9E:C5:D0:4A:63:46:DA:B6:99:25:49:4F:A2"}}},"request":{"raw":"GET /assets/basicData-BknPfgPn.js HTTP/1.1\r\nHost: h5.tiktokshop.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/assets/index-Sgi5eB1f.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 00:47:31 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 504\r\nlast-modified: Wed, 04 Feb 2026 12:44:48 GMT\r\netag: \"69833f40-1f8\"\r\nexpires: Sat, 07 Feb 2026 12:47:31 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":504,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (503)","md5":"9067d54aeb22b87d9d60fa08a8add367","sha1":"294225b0ceb06afc464dc8411d5f6eb000703f1f","sha256":"197221951bf0703da2f8ada5d87526fee1fdf682dd5b75552a3cfe514b192021","sha512":"207958d907c09d837f68347c9c290fa64bb038a07a3b97f1ba1cfc1fc018fc2e0343e322e8ecdee1d04e7a9dece21f9deaa729b9cb604aa68f70f0ae986952d1","ssdeep":"","tlshash":"faf0b41f250d827d316564ecf6d93fc7a32059541e415dfd6758bd44e09af02a0de470","first_seen":"2026-02-07T00:39:12.174003Z","last_seen":"2026-02-07T09:50:53.906747Z","times_seen":3,"resource_available":true,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apisss.tkshto.cyou/api/user/language_list","fqdn":"apisss.tkshto.cyou","domain":"tkshto.cyou","tld":"cyou"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:31.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apisss.tkshto.cyou","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 06:22:01 GMT","end":"Mon, 04 May 2026 06:22:00 GMT"},"fingerprint":{"sha1":"32:6C:65:A1:A0:B9:66:0C:2D:29:7E:06:BD:FC:98:8E:96:14:5F:02","sha256":"09:19:64:F5:16:55:B6:C1:7F:61:55:5F:BA:A0:9D:BF:E0:EE:A8:91:54:09:45:26:8F:3A:6C:7F:3B:0B:C7:EA"}}},"request":{"raw":"GET /api/user/language_list HTTP/1.1\r\nHost: apisss.tkshto.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://h5.tiktokshop.buzz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 00:47:32 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: https://h5.tiktokshop.buzz\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1001,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"265808b99163fce14253cec12c8e7472","sha1":"b42ab0ab3dcc71f386c399b74b608ecf609a8e02","sha256":"bd6856dfa4cad7736167aef59baa3353bd72d78bbebe03fde6c1452dd8c51fd7","sha512":"7245ba4d56f8ea4f5cb0e8f402526f07a7f5916c035ebad72f131d335c9a45e06161c5354366836feff2edcd62779139ea17dc3e758d06ad8553379fb148089c","ssdeep":"","tlshash":"7111ca0e3aa8cc1cff1e410a68c7a84d7b48c41f6ec97f9603dc7d2c954dac9995a163","first_seen":"2026-02-07T00:48:02.84205Z","last_seen":"2026-02-07T00:48:02.84205Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1274,"timings":{"blocked":491,"dns":1,"connect":243,"send":0,"wait":290,"receive":0,"ssl":247},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apisss.tkshto.cyou/api/product/search?page=1\u0026limit=100","fqdn":"apisss.tkshto.cyou","domain":"tkshto.cyou","tld":"cyou"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:32.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apisss.tkshto.cyou","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 06:22:01 GMT","end":"Mon, 04 May 2026 06:22:00 GMT"},"fingerprint":{"sha1":"32:6C:65:A1:A0:B9:66:0C:2D:29:7E:06:BD:FC:98:8E:96:14:5F:02","sha256":"09:19:64:F5:16:55:B6:C1:7F:61:55:5F:BA:A0:9D:BF:E0:EE:A8:91:54:09:45:26:8F:3A:6C:7F:3B:0B:C7:EA"}}},"request":{"raw":"GET /api/product/search?page=1\u0026limit=100 HTTP/1.1\r\nHost: apisss.tkshto.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://h5.tiktokshop.buzz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 00:47:32 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: https://h5.tiktokshop.buzz\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":51939,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"33472d93d9440dac7db74c3c31eece64","sha1":"3be36863318c1a6c2c4bb7d4da5ffe1bbe052836","sha256":"7982bdaf07d13066f02a0da5ab24d621f09e08dc0fd76422cbe1c175d2b755d4","sha512":"ee5b6c65d7a4255c12cfe3bea18166df1092f66908777cd315f92f56154866091c030055adaef75a818b1cee6ca8c99a92d6f23727babb832752e8bc7faace99","ssdeep":"768:7gjS058i2r8w0AlAtyREwVIQI2GL+5gNm5gxr05y58dLRLV:t058i2IwAwIQI2GLMter0458dLRLV","tlshash":"503373a8dbb40cfb4bf169a899e631eabc96110353e19e26835fd003147d47e539287f","first_seen":"2026-02-07T00:48:02.844097Z","last_seen":"2026-02-07T00:48:02.844097Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1866,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1866,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65b28f4b6b116/990-990/lg-velvet-g900-6128gb-black-single-sim-smartphone.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:34.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65b28f4b6b116/990-990/lg-velvet-g900-6128gb-black-single-sim-smartphone.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5VXJyjHjXQvLQPkBcpB2O6CjfpKNfQZoht_V94JKUI2oLNLn5YroBomTRYPPW6EUkkd\r\nx-goog-generation: 1706201406219580\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 42071\r\nx-goog-hash: crc32c=+8p7Pw==, md5=WPMEbdg0JWoSAAhvhVZZIw==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 42071\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Thu, 25 Jan 2024 16:50:06 GMT\r\netag: \"58f3046dd834256a1200086f85565923\"\r\ncontent-type: image/jpeg\r\nage: 546\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":42071,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"58f3046dd834256a1200086f85565923","sha1":"2f193504e23f2789920da9a422640e883dc6e4ea","sha256":"54781d75a0110ccaf4d62c040c213def850b7ea2108845d5483455459800257a","sha512":"de99604220037749cf490f2ed1036480762c625dbd7c74b285ebb590898c783d24313f70c69e16485ad3b85a119436c1b2e0f9d343c9e8010aa1e6b8c4fc293d","ssdeep":"768:dFXfTxuPhctld78r2YszsOOlhXX4yYKB1pN5Wmxd1D9mp:zrxuWtb7g2pYbnX4y7Hd1JM","tlshash":"3113f2138b42b49dc817c6fbea672cd3c3ae052423e6404f86e5b3ad8537b9635006f4","first_seen":"2025-10-17T22:05:01.191297Z","last_seen":"2026-06-08T22:23:27.746254Z","times_seen":7,"resource_available":false,"data":null}},"time_used":327,"timings":{"blocked":106,"dns":3,"connect":27,"send":0,"wait":89,"receive":21,"ssl":75},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/assets/index-CQ0jj5mE.css","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:30.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.tiktokpropp.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 13:40:30 GMT","end":"Mon, 04 May 2026 13:40:29 GMT"},"fingerprint":{"sha1":"7F:66:7F:4D:16:40:F2:BB:67:54:E3:04:98:4E:27:FF:AC:99:5C:DE","sha256":"7B:A6:B6:EA:A6:99:D6:2F:9C:45:7E:39:93:41:5C:EE:62:8C:3A:9E:C5:D0:4A:63:46:DA:B6:99:25:49:4F:A2"}}},"request":{"raw":"GET /assets/index-CQ0jj5mE.css HTTP/1.1\r\nHost: h5.tiktokshop.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 00:47:30 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 04 Feb 2026 12:44:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69833f40-633\"\r\nexpires: Sat, 07 Feb 2026 12:47:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1587,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1586)","md5":"4bc5777c04875c84c1e31fc89065d4fe","sha1":"0303ac9cdec1d72a1dac191b7c56f1afde2d6ed9","sha256":"9b63b805907cf76717a81e19b4316475a7296d566b7a315321fee3b1aa17861b","sha512":"a24a539e7428c174fe9398dedfaf0e376a7eddd7d0705404d24a909be6e361d53bbceabf798a027751266ee960af93c40cfd7cb042b0de7cae913cf0f92b31d9","ssdeep":"","tlshash":"78310735ec905877dd227124b6e165c8a03cf1717ea1899a712d7918cbaf6f4071b20b","first_seen":"2025-04-17T21:25:00.101735Z","last_seen":"2026-08-09T06:30:16.445559Z","times_seen":181,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/assets/index-BvAkWtUQ.css","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:30.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.tiktokpropp.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 13:40:30 GMT","end":"Mon, 04 May 2026 13:40:29 GMT"},"fingerprint":{"sha1":"7F:66:7F:4D:16:40:F2:BB:67:54:E3:04:98:4E:27:FF:AC:99:5C:DE","sha256":"7B:A6:B6:EA:A6:99:D6:2F:9C:45:7E:39:93:41:5C:EE:62:8C:3A:9E:C5:D0:4A:63:46:DA:B6:99:25:49:4F:A2"}}},"request":{"raw":"GET /assets/index-BvAkWtUQ.css HTTP/1.1\r\nHost: h5.tiktokshop.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 00:47:30 GMT\r\ncontent-type: text/css\r\ncontent-length: 673\r\nlast-modified: Wed, 04 Feb 2026 12:44:48 GMT\r\netag: \"69833f40-2a1\"\r\nexpires: Sat, 07 Feb 2026 12:47:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":673,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (672)","md5":"5caf81bc65787b5fd3a169b04eeadbe2","sha1":"4b5beaa792895ef818491c736faaf8145ef1d24b","sha256":"e8911d222c6ceff75c3f9ccbfb0faf4aa57a1fd81e69a980783350ec9ba2d1a6","sha512":"417bf4bdda689e0ff98bd6bc43d406b04471315f28adb65bbb2972ea41caf4ac747959842724318fe13fa1fd6c6341f93e2910549703966692b209fa83f5deb5","ssdeep":"","tlshash":"f301ac026e5cf415f4bada9864d0c6dc5f409326cd1f1799f311d672cae64072b36d58","first_seen":"2025-09-28T07:44:21.873545Z","last_seen":"2026-06-08T22:23:27.81827Z","times_seen":10,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65aa93093dd41/990-990/playmobil-70442-demolition-crane.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:34.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65aa93093dd41/990-990/playmobil-70442-demolition-crane.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5WtTqXPCV_P0Aow4jjNM14p6w54ixEhhgN1UCeUqbxcGivaJb5KzXlckTPlYk7IudQg\r\nx-goog-generation: 1705677594015909\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 314622\r\nx-goog-hash: crc32c=JBB27g==, md5=zlznOvDrjukDD9uUBNXFqQ==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 314622\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Fri, 19 Jan 2024 15:19:54 GMT\r\netag: \"ce5ce73af0eb8ee9030fdb9404d5c5a9\"\r\ncontent-type: image/jpeg\r\nage: 546\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":314622,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"ce5ce73af0eb8ee9030fdb9404d5c5a9","sha1":"bcf0fd170dcc95d240de54e47df1a15c6f09f8b3","sha256":"8c5b15e7476fa3918ebccbbe9e19f319846b8e8c9747a3b09ec08f4aacc65071","sha512":"22824abf020b11b3bd9e409a4f26127415e3b13d6f80dfa6034a4471dda1ff8eaa50ebec4df28eacc0e02469f8387e58dc7e5f419a58672599861332eb010820","ssdeep":"6144:QF9SUOXUq55UsLpqfCrpUIzv6YHV/cC3Nh08PWpZiqTM9R1KQ:QrhOXUm5MfYxzv6YHb98J40Q","tlshash":"c964cdb947b2820fe0ee6d61d8711bc357b39746856ba134f0a6e8e34737b4a7202d1d","first_seen":"2026-02-07T00:39:12.247692Z","last_seen":"2026-02-07T09:50:53.881857Z","times_seen":3,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":90,"receive":133,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65b1641d452e7/990-990/premium-skipping-rope-screen-calorie-workout-time-counter-290cm.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:34.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65b1641d452e7/990-990/premium-skipping-rope-screen-calorie-workout-time-counter-290cm.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5Viq4C8wvreY4cpsAGi8nQTYmZReRc4Ir9FKZI5rzF1VEhWnkzxxqhIFBh0w4sjwfpR\r\nx-goog-generation: 1706124708181463\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 83410\r\nx-goog-hash: crc32c=9ri5bw==, md5=I6vw7E3uNv2AVq8+SHwgOw==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 83410\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Wed, 24 Jan 2024 19:31:48 GMT\r\netag: \"23abf0ec4dee36fd8056af3e487c203b\"\r\ncontent-type: image/jpeg\r\nage: 546\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":83410,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"23abf0ec4dee36fd8056af3e487c203b","sha1":"fd073f27e318297b41d473cd2b398b67895ad98f","sha256":"48db04e98c246b667c5a7691a80e08f6293823a9cb4fabf6269d389c1f057a94","sha512":"e4b6a6a0a8bd3339de4be2201c5abba96d80ec96e83e84ef9d78a666149fa8238354c1f76ea3e32a133d5a7bb89219146e9e6dcf9a358fd1ba49543fef0032e6","ssdeep":"1536:u9d/UcC0I1QXVIk8aLKk5FO739s16PXlAGOxsYe+CD7X/G4:sUlYX9k0FO7NiUJY0fn","tlshash":"5583f187f488a91c6019161d1dfde218528346fa2136dea27cdf1ce2d3d1763f82ad65","first_seen":"2026-02-07T00:39:12.280818Z","last_seen":"2026-02-07T09:50:53.916539Z","times_seen":3,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":89,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65b1c432141e0/990-990/redblack-t-angle-bearing-jump-rope.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:36.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65b1c432141e0/990-990/redblack-t-angle-bearing-jump-rope.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-guploader-uploadid: AJRbA5XU5RS1jOLcpfGHn1s8-qf_TQ3N1IDzDQOu-iZdmI6EDPbrXy2vHj8pzFDA8nLrsgEv\r\nx-goog-generation: 1706148920006995\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 88421\r\nx-goog-hash: crc32c=YTSGrw==, md5=t6hBdxy8Dz0lKujIbYgcCg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 88421\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Thu, 25 Jan 2024 02:15:20 GMT\r\netag: \"b7a841771cbc0f3d252ae8c86d881c0a\"\r\ncontent-type: image/jpeg\r\nage: 547\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":88421,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"b7a841771cbc0f3d252ae8c86d881c0a","sha1":"9024b5ed74a0b394effe1ded144ef1f37b17ca2c","sha256":"cb215b73c9d0532f32115c89bc09a9f733526206de6690fe6879f649fc94fcb7","sha512":"07093e48738fa732dca10e5e362a86f8dbac456fd7c1b86422c6a0447f76db27e7f37a8d21df3ea731b8b30a5635d9b5929396575bc0a018a22beb5f59a3814e","ssdeep":"1536:9Eop3j0J9APitQSDvlYQ2I0aG1dunu0grm0oAX8xjauytI1c4ZP:9AJ9dQSDlP2I0aG1suzm0oAMxjaji/h","tlshash":"9283f104f1632fe96101286e8d2cfaa41a8254fb6df8c522327c7df6f7e6157b11049a","first_seen":"2026-02-07T00:39:12.231287Z","last_seen":"2026-02-07T09:50:53.843954Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1492,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":1457,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/assets/index-BXO8W_zr.css","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:30.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.tiktokpropp.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 13:40:30 GMT","end":"Mon, 04 May 2026 13:40:29 GMT"},"fingerprint":{"sha1":"7F:66:7F:4D:16:40:F2:BB:67:54:E3:04:98:4E:27:FF:AC:99:5C:DE","sha256":"7B:A6:B6:EA:A6:99:D6:2F:9C:45:7E:39:93:41:5C:EE:62:8C:3A:9E:C5:D0:4A:63:46:DA:B6:99:25:49:4F:A2"}}},"request":{"raw":"GET /assets/index-BXO8W_zr.css HTTP/1.1\r\nHost: h5.tiktokshop.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 00:47:30 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 04 Feb 2026 12:44:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69833f40-512\"\r\nexpires: Sat, 07 Feb 2026 12:47:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1298,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1297)","md5":"936ad9455deb736e6ec859713452db07","sha1":"d981ac96b638f87d8556659cd9cc31d9e365cc8e","sha256":"4e5b1b13a7d5f94510d9ed2a04380d901410189d400e2426f5d15b19453ec657","sha512":"3a8ca67cce30dc7ce01e15e531d9bd3cbcd2db02b24026aadc4555b84d8936dd52700ffe005ca43605701b92080845d3cde58f6e89438dc33359599c6a74d456","ssdeep":"","tlshash":"9a2191c9fe7919507032c87da8412bcd7e00b5be81da5128d903f710edd299b273631e","first_seen":"2026-02-07T00:39:12.192492Z","last_seen":"2026-02-07T09:50:53.825897Z","times_seen":3,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/assets/index-BNtJKrO5.js","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:30.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.tiktokpropp.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 13:40:30 GMT","end":"Mon, 04 May 2026 13:40:29 GMT"},"fingerprint":{"sha1":"7F:66:7F:4D:16:40:F2:BB:67:54:E3:04:98:4E:27:FF:AC:99:5C:DE","sha256":"7B:A6:B6:EA:A6:99:D6:2F:9C:45:7E:39:93:41:5C:EE:62:8C:3A:9E:C5:D0:4A:63:46:DA:B6:99:25:49:4F:A2"}}},"request":{"raw":"GET /assets/index-BNtJKrO5.js HTTP/1.1\r\nHost: h5.tiktokshop.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://h5.tiktokshop.buzz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 00:47:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 04 Feb 2026 12:44:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69833f40-1418\"\r\nexpires: Sat, 07 Feb 2026 12:47:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5144,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (5143)","md5":"8a4defa93d51aa12b6e7cc8e143be44f","sha1":"c41bc81ff3bf77755d8b543bdd8870f66015a460","sha256":"22dff1e04f3eb90f3777e037643433d1107b3fc5d391f67527de53fb54e0fb67","sha512":"cdc7ba9539c0f8db93072d3aa4e07c0587ec4fdcd8f458f7e63b47b4708bc5ec5d7f4659e186f8c392dd8742c011e2030321b6f8ef8478231b05d3c20f80d080","ssdeep":"96:eTZapIpPWBXa/uhi7VcbHvX25csbPaqUvYMjXf3BOIS07n9uAt6z6Ym5uFV:WZajJagiRUf2bbPDUv7LfQIdt6bm0FV","tlshash":"60b1c6d27080bdb7c339aacc506141e0976e57e03026c6e9b06f5f032509cf8a2faa4a","first_seen":"2026-02-07T00:39:12.204053Z","last_seen":"2026-02-07T09:50:53.926725Z","times_seen":3,"resource_available":true,"data":null}},"time_used":451,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":451,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65b7283975c0a/990-990/aloe-vera-ginger-90-capsules-detox-colon-cleanse-supplements-high-strength-90-i-aloe-vera-10000mgcapsule-with-natural-herbal-ingredients-for.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:35.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65b7283975c0a/990-990/aloe-vera-ginger-90-capsules-detox-colon-cleanse-supplements-high-strength-90-i-aloe-vera-10000mgcapsule-with-natural-herbal-ingredients-for.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5Xll2TrQqSx5R2L0o4X7QwxdnOiiD2DSTvZozgSLeK9Y6mdqRPxZoh7lOSyzBjLJlcb\r\nx-goog-generation: 1706502204922834\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 59010\r\nx-goog-hash: crc32c=N3AKgQ==, md5=jG2Dew8BCkAKbe/F57Qx6w==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 59010\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Mon, 29 Jan 2024 04:23:24 GMT\r\netag: \"8c6d837b0f010a400a6defc5e7b431eb\"\r\ncontent-type: image/jpeg\r\nage: 547\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":59010,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"8c6d837b0f010a400a6defc5e7b431eb","sha1":"03b4abee08d75f4e7d998ae49ae5943b96ab9c87","sha256":"66c091939358b10bffdfc3ea3fb638dac45932f0b042570cf94b8c38f996f8d7","sha512":"f06574189bd06743310dc10804afc73cdf598244100a5184153f92ae7382df01b64af57e0021203bb5920f02251f8c6dbf259573f4fb932c9d4db30f8efec965","ssdeep":"1536:yhgPy9ADrOC+inl2O3u6zcLmGKrZXIariIYQP:yejDrOCflq6QVm9Iaria","tlshash":"c043f1d8e743e4c8f4a06276c7735fb4a5e6733a872d84e58f5d8ed588432a94cc248d","first_seen":"2026-02-07T00:39:12.119551Z","last_seen":"2026-02-07T09:50:53.834837Z","times_seen":3,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/assets/index-CRBgZeG7.css","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:30.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.tiktokpropp.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 13:40:30 GMT","end":"Mon, 04 May 2026 13:40:29 GMT"},"fingerprint":{"sha1":"7F:66:7F:4D:16:40:F2:BB:67:54:E3:04:98:4E:27:FF:AC:99:5C:DE","sha256":"7B:A6:B6:EA:A6:99:D6:2F:9C:45:7E:39:93:41:5C:EE:62:8C:3A:9E:C5:D0:4A:63:46:DA:B6:99:25:49:4F:A2"}}},"request":{"raw":"GET /assets/index-CRBgZeG7.css HTTP/1.1\r\nHost: h5.tiktokshop.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 00:47:30 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 04 Feb 2026 12:44:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69833f40-51e\"\r\nexpires: Sat, 07 Feb 2026 12:47:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1310,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1309)","md5":"bdd6896b250ed4eb594fb4956f704d1c","sha1":"64e99dacc13770778a38b3743aecc81bdbdaf1b7","sha256":"0331ce3a3ccb911f93abde66b3658f1d3b54080cd6934e791ea21ecd671fe85d","sha512":"7d8ea9792c8e00a4ed6613fbdb19d61345339022a39649248fed83ac3126d79edd28e60f1082b8f24c8784f7bbb16acd90c7bda47381cd35d5118c403e40c3de","ssdeep":"","tlshash":"f1210914da5453bdef2eb0a11f5739c4e0a899918927c2cc732c61d608c7af1273bce8","first_seen":"2025-09-28T07:44:21.959661Z","last_seen":"2026-06-08T22:23:27.717139Z","times_seen":15,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/assets/index-tx-P29g-.js","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:30.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.tiktokpropp.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 13:40:30 GMT","end":"Mon, 04 May 2026 13:40:29 GMT"},"fingerprint":{"sha1":"7F:66:7F:4D:16:40:F2:BB:67:54:E3:04:98:4E:27:FF:AC:99:5C:DE","sha256":"7B:A6:B6:EA:A6:99:D6:2F:9C:45:7E:39:93:41:5C:EE:62:8C:3A:9E:C5:D0:4A:63:46:DA:B6:99:25:49:4F:A2"}}},"request":{"raw":"GET /assets/index-tx-P29g-.js HTTP/1.1\r\nHost: h5.tiktokshop.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://h5.tiktokshop.buzz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 00:47:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 04 Feb 2026 12:44:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69833f40-6dc\"\r\nexpires: Sat, 07 Feb 2026 12:47:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1756,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1755)","md5":"36e6d8b98b9839fb20f42ab47f35ed67","sha1":"6995f28fc5cd1ab3fb627297918f00d6d44fb57d","sha256":"7813bc32957ab4d722d82257303c3e155544cab31882238d285fe644d634e06f","sha512":"26c3659a76c5aebd9d86bc9a470417d572d8db965e34fb62eccac8eee0cd6a924d223c98ae4b2ac589c292ab070bf324140f7e56753d50dd1df36105b0eecb02","ssdeep":"","tlshash":"623132c16bcec57f5aa645c990226810824af75cc67822e1f1feadb447ce450a20c778","first_seen":"2026-02-07T00:39:12.096392Z","last_seen":"2026-02-07T09:50:53.888464Z","times_seen":3,"resource_available":true,"data":null}},"time_used":453,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":453,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/assets/index-Bcg5zGWv.js","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:30.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.tiktokpropp.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 13:40:30 GMT","end":"Mon, 04 May 2026 13:40:29 GMT"},"fingerprint":{"sha1":"7F:66:7F:4D:16:40:F2:BB:67:54:E3:04:98:4E:27:FF:AC:99:5C:DE","sha256":"7B:A6:B6:EA:A6:99:D6:2F:9C:45:7E:39:93:41:5C:EE:62:8C:3A:9E:C5:D0:4A:63:46:DA:B6:99:25:49:4F:A2"}}},"request":{"raw":"GET /assets/index-Bcg5zGWv.js HTTP/1.1\r\nHost: h5.tiktokshop.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://h5.tiktokshop.buzz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 00:47:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 04 Feb 2026 12:44:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69833f40-bdd\"\r\nexpires: Sat, 07 Feb 2026 12:47:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3037,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (3036)","md5":"b9c5375b26bec6b387afa8ebe13667f8","sha1":"7e893c8a535800acaf9d6ecee4f2cbee9b80fab3","sha256":"eb434a207ea69bc33957c065d3bfeb7dd768c9801c9ea55ce2b23ec929b2be4b","sha512":"741600f27dad637a53ae4e0f4abced60cdb613be7effc5592eb005bbc7277facf8ed4d72d71c1c58d347727de817d8eb41b7f28195aac5bf93b5cd9814b4ecba","ssdeep":"","tlshash":"fd5194acf4f5f9382b6b5b45550a48f1790a17df99b886d0f4abcc0033a54d8e06871e","first_seen":"2026-02-07T00:39:12.222565Z","last_seen":"2026-02-07T09:50:53.860509Z","times_seen":3,"resource_available":true,"data":null}},"time_used":455,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":455,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/assets/home-board-CjvF8wsq.js","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:31.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.tiktokpropp.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 13:40:30 GMT","end":"Mon, 04 May 2026 13:40:29 GMT"},"fingerprint":{"sha1":"7F:66:7F:4D:16:40:F2:BB:67:54:E3:04:98:4E:27:FF:AC:99:5C:DE","sha256":"7B:A6:B6:EA:A6:99:D6:2F:9C:45:7E:39:93:41:5C:EE:62:8C:3A:9E:C5:D0:4A:63:46:DA:B6:99:25:49:4F:A2"}}},"request":{"raw":"GET /assets/home-board-CjvF8wsq.js HTTP/1.1\r\nHost: h5.tiktokshop.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/assets/index-Sgi5eB1f.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 00:47:31 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 58\r\nlast-modified: Wed, 04 Feb 2026 12:44:48 GMT\r\netag: \"69833f40-3a\"\r\nexpires: Sat, 07 Feb 2026 12:47:31 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"21b915e0c04de9ac3a59c5dfb0ef6a43","sha1":"6b5e4550b0bf20b9b1737c8aa8c3b41dad21ca90","sha256":"af8840c7e778afa665ecc2e18354a91e3a4843d1edd89f1370129a72615d590a","sha512":"7b49dd2e77e58649828a2836f359e43bc64a9158dd5fa04285af8faa01983f8fba67ffea86512b84c874e4f78a402a878b1eaf3335dbea6807aac31fa3cf6b0f","ssdeep":"","tlshash":"4aa00231862504b8c46434555195a49048a1151c7517b26dc41459c9b67645d894ec2a","first_seen":"2025-10-17T22:05:01.327231Z","last_seen":"2026-06-08T22:23:27.711206Z","times_seen":8,"resource_available":true,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/assets/home-DCkfi4Hc.js","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:31.274Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.tiktokpropp.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 13:40:30 GMT","end":"Mon, 04 May 2026 13:40:29 GMT"},"fingerprint":{"sha1":"7F:66:7F:4D:16:40:F2:BB:67:54:E3:04:98:4E:27:FF:AC:99:5C:DE","sha256":"7B:A6:B6:EA:A6:99:D6:2F:9C:45:7E:39:93:41:5C:EE:62:8C:3A:9E:C5:D0:4A:63:46:DA:B6:99:25:49:4F:A2"}}},"request":{"raw":"GET /assets/home-DCkfi4Hc.js HTTP/1.1\r\nHost: h5.tiktokshop.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/assets/index-Sgi5eB1f.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 00:47:31 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 554\r\nlast-modified: Wed, 04 Feb 2026 12:44:48 GMT\r\netag: \"69833f40-22a\"\r\nexpires: Sat, 07 Feb 2026 12:47:31 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":554,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (553)","md5":"3db649ad7e6dbfd51679b684a6b1e30f","sha1":"6963bd1508f78c63c9c00263f9f20159473db8c9","sha256":"f81f93f23dba598491da3640e3be991e1f1f995e67db5db821849f3e9aecf519","sha512":"f7092f9eb4474e84c3326b084b5a92e3de27484bafd98c14f6fd6700a3441d4c2cf08bc1b01363a7755cebd3d81d453a9f748c228c2220fc1803fc10474674e2","ssdeep":"","tlshash":"81f0cdcfab23e6e341054225d85b3f3ba33a9490b86b0d20bc40f08d396c578615e558","first_seen":"2026-02-07T00:39:12.134189Z","last_seen":"2026-02-07T09:50:53.877594Z","times_seen":3,"resource_available":true,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65b298851a055/990-990/dog-sniffing-toys-funny-chicken-hens-lay-eggs-hide-food-training-pe.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:34.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65b298851a055/990-990/dog-sniffing-toys-funny-chicken-hens-lay-eggs-hide-food-training-pe.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5VIA_OEh7sB-n_oUf_glrXq0tPohPgagyfpiwCGmdBtYPQ7E3gUJB4_hWRH_XpFRIUG\r\nx-goog-generation: 1706203273618620\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 145891\r\nx-goog-hash: crc32c=E9tuhA==, md5=EkQ/KUJ7g4lBawlIbrEEkw==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 145891\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Thu, 25 Jan 2024 17:21:13 GMT\r\netag: \"12443f29427b8389416b09486eb10493\"\r\ncontent-type: image/jpeg\r\nage: 546\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":145891,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"12443f29427b8389416b09486eb10493","sha1":"f006373bd3b0a8bf8ec7512be488cc56d34a2168","sha256":"bc1152174b7e5985dbc7f4f829c3de84e05a668db257f22deff38648d037241e","sha512":"d302bb5a34753ddd6f29854ccc4914d4a3588ac78b5290a21b7ecf787ebf817f3c5240bf94a69a778a481ba1c128ea5138921372fc76846a59c73b26d117a9f7","ssdeep":"3072:jTadjUe/uKGFYMxu/S5IpgFd6fdgzYoCiFJ4u9lHMK0Dj:jedjT9+hx8SCpgLzYoHFJ4ujHkDj","tlshash":"74e312ecf06084e7d989381cbc7db2326b44a2f29576c51738edace6fbec1670561095","first_seen":"2026-02-07T00:39:12.124277Z","last_seen":"2026-02-07T09:50:53.883934Z","times_seen":3,"resource_available":false,"data":null}},"time_used":759,"timings":{"blocked":294,"dns":2,"connect":27,"send":0,"wait":166,"receive":3,"ssl":246},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65a7dff68c92b/990-990/pizza-tray-set-of-2-haware-10-inch-round-pizza-pan-trays-stainless-steel-for-oven-baking-non-toxic-healthy-heavy-duty-dishwasher-safe-2-pack.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:34.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65a7dff68c92b/990-990/pizza-tray-set-of-2-haware-10-inch-round-pizza-pan-trays-stainless-steel-for-oven-baking-non-toxic-healthy-heavy-duty-dishwasher-safe-2-pack.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5UM9pAKarg2lE9ZpEx0avDe_16rWUUo31L_2LTAZadhZXzuUPYwkhZp0uGxIAg6DavvLOX0Gbo\r\nx-goog-generation: 1705500724545653\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 65232\r\nx-goog-hash: crc32c=o6tKJg==, md5=FA4JavjQUb6Vc2tMs68Vog==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 65232\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Wed, 17 Jan 2024 14:12:04 GMT\r\netag: \"140e096af8d051be95736b4cb3af15a2\"\r\ncontent-type: image/jpeg\r\nage: 546\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":65232,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"140e096af8d051be95736b4cb3af15a2","sha1":"43af3c6e9b0287b8727b5fcd908b14e268ffc6e6","sha256":"f575c7d92c80ba1e06b4c32eb6dd5d88a4c73273dce81be1a717f9397e9de4cb","sha512":"10537f2eb0c1f729153b7eea9ee225277a8718276f5a87d8db715ba1df28344d66b9b909eee5eafdc0a0103eba5f6a536d1fd5debba15686aa35173d477621c4","ssdeep":"1536:mDRKXWloZGpwGorqjlX75V4c4h0ABySzL5DZPi1OBMvI5w04t/1:AsX3ZIwG2q575VdvYJLtZPqOB9K0491","tlshash":"2953026500797987d1d0c375c1b74d91a1e84624b4b1322396eec1a0f2f63b7a9f1d7c","first_seen":"2026-02-07T00:39:12.177999Z","last_seen":"2026-02-07T09:50:53.849565Z","times_seen":3,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":71,"dns":0,"connect":0,"send":0,"wait":63,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65a79553d9a2c/990-990/doterra-introductory-kit.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:34.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65a79553d9a2c/990-990/doterra-introductory-kit.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5W5IxJUOngD5bwngizU4z5tUgM2sYGEHL3f2bGjqG-Hazg5VL_bf-ONSE4qD1x1LeYW\r\nx-goog-generation: 1705481559440603\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 46781\r\nx-goog-hash: crc32c=pIPvCQ==, md5=JcT/5y9lJxzYN5uFbEYGmg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 46781\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Wed, 17 Jan 2024 08:52:39 GMT\r\netag: \"25c4ffe72f65271cd8379b856c46069a\"\r\ncontent-type: image/jpeg\r\nage: 546\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":46781,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"25c4ffe72f65271cd8379b856c46069a","sha1":"e1cf7340e0407f53a1d992db930dd207848cb2c7","sha256":"865de2a89c73296862cd259a1f2f2b8b2f15d359f7e567372b2279a3db872a22","sha512":"8e79da109c730c4f90aeda44bf58542dc342867cf01755faf11715df8c9354a779d55d2d55dc7fff8a828dcf65426b9d61ab44dda0be7ff8c64407b6a915bf44","ssdeep":"768:1FhRHBYL2Is/lGFtLmNYe4aGaOTor/h2ZmAtsGeL+a4E2U0SV2:1FhRhNlGSNYDkThotTj2ISY","tlshash":"5823e112ad8488aaff45bf395a152d21dbf7d2032694871643cb24d8acdeb537f036e4","first_seen":"2026-02-07T00:39:12.158957Z","last_seen":"2026-06-08T20:49:28.604605Z","times_seen":5,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/assets/home-board-DW8gr9K_.png","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:31.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.tiktokpropp.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 13:40:30 GMT","end":"Mon, 04 May 2026 13:40:29 GMT"},"fingerprint":{"sha1":"7F:66:7F:4D:16:40:F2:BB:67:54:E3:04:98:4E:27:FF:AC:99:5C:DE","sha256":"7B:A6:B6:EA:A6:99:D6:2F:9C:45:7E:39:93:41:5C:EE:62:8C:3A:9E:C5:D0:4A:63:46:DA:B6:99:25:49:4F:A2"}}},"request":{"raw":"GET /assets/home-board-DW8gr9K_.png HTTP/1.1\r\nHost: h5.tiktokshop.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T20:51:55.920032Z","times_seen":17875984,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65ab1d4b636f1/990-990/instax-square-sq1-instant-camera-chalk-white.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:34.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65ab1d4b636f1/990-990/instax-square-sq1-instant-camera-chalk-white.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5VxvQYDuOdarvAqqCCTsMfyLvB6QDika2FTl5LMiUKfcSxG8nG45NWawQxfIut-R9Im\r\nx-goog-generation: 1705713007724852\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 42511\r\nx-goog-hash: crc32c=JMqnsA==, md5=GSAyFVUpfZU6QZYc0Hff7w==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 42511\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Sat, 20 Jan 2024 01:10:07 GMT\r\netag: \"1920321555297d953a41961cd077dfef\"\r\ncontent-type: image/jpeg\r\nage: 546\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":42511,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"1920321555297d953a41961cd077dfef","sha1":"8b50efc80a009360b33a8e87790d17d0c23d5c61","sha256":"91221ab2f6fa6919361b4d91865a46d76f8b11960fac4d7c18ef57339efd0bb3","sha512":"e2b14ed4a279115324c5b03103583d9a95771dec03da27d6d74566c97bf67953d0ab037fa725661ddb7d9ff404a0913891cf1791e482ea390f4b3a723b859f82","ssdeep":"768:4GfeM46MGt0dCfshCF3FveQp8Kx5+kulOTIF85v9cAV/T:4GmMhMGt0cfkUTSg5UkJRVb","tlshash":"da13e15ea631c6e1e1d8ebf1ba0b6553bfeecf618108814f37d6a8842493708fd8559c","first_seen":"2026-02-07T00:39:12.218101Z","last_seen":"2026-02-07T09:50:53.925017Z","times_seen":3,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65b5e04beae9e/990-990/flymo-easistore-300r-corded-electric-lawn-mower.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:34.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65b5e04beae9e/990-990/flymo-easistore-300r-corded-electric-lawn-mower.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5UIInbVLsjQqU4lcvLfwqJ1Tbgl6xJYHihaNcT80F3udPPJC0D9ulomYgsIo-rERcnt\r\nx-goog-generation: 1706418256194488\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 110053\r\nx-goog-hash: crc32c=ISOpbw==, md5=ao7h2e6PSv5XM1gusegkog==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 110053\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Sun, 28 Jan 2024 05:04:16 GMT\r\netag: \"6a8ee1d9ee8f4afe5733582eb1e824a2\"\r\ncontent-type: image/jpeg\r\nage: 546\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":110053,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"6a8ee1d9ee8f4afe5733582eb1e824a2","sha1":"00ced16026a87c53a06a284e29f53b264d303e2d","sha256":"9d79be12d8aab748f2f516ebef26ba5e72c90f7c3a4de7d5a5e1e4d76639bb72","sha512":"48ff0c4b959be01122c81c2ddf28fa5d59b45174fc41aa474b6a1625ee18555f938ee52d93c72b2e92b17fc525cf009569a17f17abac3b768a6eeb60238491da","ssdeep":"1536:/SoiMPvq96gN62X8BlHGxsweLFmOzj5eaC5OGupOLAkdS9wbvWeiq0KywYbQu1iL:/iQlA87HGKflwsGuxfm+ez/SID","tlshash":"4ab30155f6e4ccb03c48659c9eaf0b2998dcacfa0a3cc6e67a2e1fd0d7c514752d0162","first_seen":"2026-02-07T00:39:12.205031Z","last_seen":"2026-02-07T09:50:53.828197Z","times_seen":3,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/assets/index-DwYrxYpv.css","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:30.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.tiktokpropp.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 13:40:30 GMT","end":"Mon, 04 May 2026 13:40:29 GMT"},"fingerprint":{"sha1":"7F:66:7F:4D:16:40:F2:BB:67:54:E3:04:98:4E:27:FF:AC:99:5C:DE","sha256":"7B:A6:B6:EA:A6:99:D6:2F:9C:45:7E:39:93:41:5C:EE:62:8C:3A:9E:C5:D0:4A:63:46:DA:B6:99:25:49:4F:A2"}}},"request":{"raw":"GET /assets/index-DwYrxYpv.css HTTP/1.1\r\nHost: h5.tiktokshop.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 00:47:30 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 04 Feb 2026 12:44:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69833f40-1c88\"\r\nexpires: Sat, 07 Feb 2026 12:47:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7304,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7303)","md5":"2b9a46018bf0b0a146b45fbbad5fb998","sha1":"66416cad334883af1dfd4412bc0dcef650a049b5","sha256":"e2e83aa79cac2b76f1610502cf3ba2be4c6e14c18051ddb12ee42f84a40e4afb","sha512":"427921da2665424c480696e054b365f02ec49bde3e4b62e19eec9489b7a31fa182daaa670716fc2b8649cb71e21c11dd0675f3c3a76a2d926816a7c8041bbebe","ssdeep":"96:oiCpwZq2ULPIQ4MbBtqjrjp2APG9yweSCe5ctJMkJMXp/MRI:oqsF2jrtwec5+TG","tlshash":"67e15c8eabe8a575df0e79e96746d1e8f278d730cd0293a2f30055990bc3af71602635","first_seen":"2025-05-15T07:28:02.301279Z","last_seen":"2026-08-12T21:33:13.652918Z","times_seen":91,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/assets/index-BaBXOzg8.js","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:30.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.tiktokpropp.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 13:40:30 GMT","end":"Mon, 04 May 2026 13:40:29 GMT"},"fingerprint":{"sha1":"7F:66:7F:4D:16:40:F2:BB:67:54:E3:04:98:4E:27:FF:AC:99:5C:DE","sha256":"7B:A6:B6:EA:A6:99:D6:2F:9C:45:7E:39:93:41:5C:EE:62:8C:3A:9E:C5:D0:4A:63:46:DA:B6:99:25:49:4F:A2"}}},"request":{"raw":"GET /assets/index-BaBXOzg8.js HTTP/1.1\r\nHost: h5.tiktokshop.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://h5.tiktokshop.buzz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 00:47:30 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 991\r\nlast-modified: Wed, 04 Feb 2026 12:44:48 GMT\r\netag: \"69833f40-3df\"\r\nexpires: Sat, 07 Feb 2026 12:47:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":991,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (988)","md5":"b5d32edb3aca5ebb6a69e6bce1138e77","sha1":"dea43f0f935a647afb6e434aabcb3dd0f6a936ce","sha256":"965248381aae1766680242c08f643d3f56d17106e57ea3aff7e458ae6370389b","sha512":"58e746a5574686c717f77a21d047290a795669936bc3564ed4e0696c68178e86435e4c858e12a52ba7c6daf0dc1a6e1333918087461e82e938e31f5ee9288773","ssdeep":"","tlshash":"9d11e1cddcb8d0b5f17a44ac80190dd13d493b5aa3e091a461a9683433654b9d37db39","first_seen":"2026-02-07T00:39:12.109349Z","last_seen":"2026-02-07T09:50:53.823702Z","times_seen":3,"resource_available":true,"data":null}},"time_used":452,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":452,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/assets/index-DwDBIbHk.js","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:31.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.tiktokpropp.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 13:40:30 GMT","end":"Mon, 04 May 2026 13:40:29 GMT"},"fingerprint":{"sha1":"7F:66:7F:4D:16:40:F2:BB:67:54:E3:04:98:4E:27:FF:AC:99:5C:DE","sha256":"7B:A6:B6:EA:A6:99:D6:2F:9C:45:7E:39:93:41:5C:EE:62:8C:3A:9E:C5:D0:4A:63:46:DA:B6:99:25:49:4F:A2"}}},"request":{"raw":"GET /assets/index-DwDBIbHk.js HTTP/1.1\r\nHost: h5.tiktokshop.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/assets/index-Sgi5eB1f.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 00:47:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 04 Feb 2026 12:44:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69833f40-6da\"\r\nexpires: Sat, 07 Feb 2026 12:47:31 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1754,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1753)","md5":"e7a778285028e3c8884da09a7ffdbd7e","sha1":"bf5592f5423ea9daf0d0fb1adfe13fbec919bd85","sha256":"16ff0c02065fa78d1e65712a76666c50f847a12b95cb5b7ce71577625c96de0d","sha512":"3f71f3d8d6b51effafcd89d8a504ecab58985c55823481d0e64ba1fdc8ef31254048c20ca13e900becc916fb8ee0bdb6ce46a1f17946c99989fa9786888c15f7","ssdeep":"","tlshash":"6231568d7882c4b6217384e455801d88b20d9f9b252c7a94b3ecbe1633d2e95cf55e1a","first_seen":"2026-02-07T00:39:12.161001Z","last_seen":"2026-02-07T09:50:53.892563Z","times_seen":3,"resource_available":true,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65b59f7dc2406/990-990/32gb-instant-print-photo-camera-for-kids-24-with-print-paper-birthday-christmas-gift-for-childblue.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:34.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65b59f7dc2406/990-990/32gb-instant-print-photo-camera-for-kids-24-with-print-paper-birthday-christmas-gift-for-childblue.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5Wy7agjyzMw0baYfad--nqtJpBio6TUEOYGxtT5bd78jDhk5Q5JmzYzxu9Kaowmok3HTlgLi14\r\nx-goog-generation: 1706401670744748\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 79165\r\nx-goog-hash: crc32c=ZL5rSg==, md5=xh2BDEi5ha5nyJnL239tqg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 79165\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Sun, 28 Jan 2024 00:27:50 GMT\r\netag: \"c61d810c48b985ae67c899cbdb7f6daa\"\r\ncontent-type: image/jpeg\r\nage: 546\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":79165,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"c61d810c48b985ae67c899cbdb7f6daa","sha1":"eb6646507932480955486cda8cf8db88a05d5474","sha256":"9c221a95f22d9151ea3bb0ec22ca963e15bbd01ddd442fb187a9ce949bb682cb","sha512":"ba038d579f658a50846b928eeff2f9198aa09112510836c342980253d22f18cd28d9851eefd5d851d3ded1672ef25b4836ca45ca5a3f0e3e599346005965cb6f","ssdeep":"1536:lWms4t4vc77XauuStcQczkljvVQnpnUEEEjaEEEESQUMI1k6RHX6nZ0KoQ28dt:lW34t4k77KgnlTwlQ/SHX6neyZ","tlshash":"3d73d133af752d9bfb64f77e55a4119acc9d273c00a3a0c328c389a54a987a1ef444b5","first_seen":"2026-02-07T00:39:12.234283Z","last_seen":"2026-06-08T22:23:27.828202Z","times_seen":6,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":65,"dns":0,"connect":0,"send":0,"wait":64,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65a895f4e5595/990-990/janod-brico-kids-magnetic-diy-trolley.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:35.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65a895f4e5595/990-990/janod-brico-kids-magnetic-diy-trolley.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5UDA8_TDGV2yeCbNMKSzSgkkd_o8G7z8qCZns4fFWmzcVXrreUG0ErKVhZaLPm-vicG\r\nx-goog-generation: 1705547268171721\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 89122\r\nx-goog-hash: crc32c=Oz2yLA==, md5=ofABeDwWyL3CP3DhYVn8lw==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 89122\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Thu, 18 Jan 2024 03:07:48 GMT\r\netag: \"a1f001783c16c8bdc23f70e16159fc97\"\r\ncontent-type: image/jpeg\r\nage: 546\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":89122,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"a1f001783c16c8bdc23f70e16159fc97","sha1":"c6c5745f035584f86d2c6b590f8b6803fb3b1adf","sha256":"388ddd2b78018a805ad88c29a7d5d9db6c32f53f1fd2b69ac968972947cecc36","sha512":"710eeffa56f52ab968467924a5e1ef72c1205b06b484e7fd829f5f972938ff24c0e4181fd2b6ae25c5754824a4564b4086c159321697a84b64b961d6a98aa225","ssdeep":"1536:EYiFnuGBIOGHfw6l+zU9QH+zAcc0gEdZNQXewucy:EYiluIIZ/VcU9QHKgEdZmX8b","tlshash":"c993f223754802fdf58fd1b355db3682ddac690aa0ca522a51cb3da00cbb6a25d126f9","first_seen":"2026-02-07T00:39:12.284787Z","last_seen":"2026-02-07T09:50:53.821591Z","times_seen":3,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65b42e0f80c6d/990-990/pizza-pan-baking-mould-for-non-stick-round-baking-tray-for-kitchen-pizza-pan-15-inch.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:35.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65b42e0f80c6d/990-990/pizza-pan-baking-mould-for-non-stick-round-baking-tray-for-kitchen-pizza-pan-15-inch.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5XHekl06pBnugbXB5gCxS3Fix8UDtfySLP6zV29--3MxY2WCSqqhN6r5RyYstFByjwT0KaM4HA\r\nx-goog-generation: 1706307096457365\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 54517\r\nx-goog-hash: crc32c=QpjjgQ==, md5=Je+TLlsq6wfHGIbpoLiXng==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 54517\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Fri, 26 Jan 2024 22:11:36 GMT\r\netag: \"25ef932e5b2aeb07c71886e9a0b8979e\"\r\ncontent-type: image/jpeg\r\nage: 546\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":54517,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"25ef932e5b2aeb07c71886e9a0b8979e","sha1":"3e27c6b3c2ebb5f98bcadd9315a3ffb9201673bc","sha256":"034896d3295aa815d61c765cd02376c5bbaf030855946c634067713cccf9d27e","sha512":"58df55b1de31f9e87153d034fa9da5c0d4e012f724b09690d99dae92579d002cda6715fb90b1ebd77000dc4f22e7fcd042ea5559ad75c723a99c74cf405c2d06","ssdeep":"1536:07LmcdyDqcnEKmqX/FNEL9zsYrnxeqaCaj:KpUOSVFNEL9zsMn5at","tlshash":"d633af7224327d80ec94c3bf3aa06b55abb005d13f35d448e6ddb0e25fd9a95a9b6c02","first_seen":"2026-02-07T00:39:12.321098Z","last_seen":"2026-02-07T09:50:53.833787Z","times_seen":3,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/assets/filter-B2uSLGeZ.js","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:30.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.tiktokpropp.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 13:40:30 GMT","end":"Mon, 04 May 2026 13:40:29 GMT"},"fingerprint":{"sha1":"7F:66:7F:4D:16:40:F2:BB:67:54:E3:04:98:4E:27:FF:AC:99:5C:DE","sha256":"7B:A6:B6:EA:A6:99:D6:2F:9C:45:7E:39:93:41:5C:EE:62:8C:3A:9E:C5:D0:4A:63:46:DA:B6:99:25:49:4F:A2"}}},"request":{"raw":"GET /assets/filter-B2uSLGeZ.js HTTP/1.1\r\nHost: h5.tiktokshop.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://h5.tiktokshop.buzz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 00:47:30 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 87\r\nlast-modified: Wed, 04 Feb 2026 12:44:48 GMT\r\netag: \"69833f40-57\"\r\nexpires: Sat, 07 Feb 2026 12:47:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":87,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"cf4ab7c5993ad7e1c3f0b7a7858035b7","sha1":"d7c1edb99c8fd1065433f3518778c6252345943b","sha256":"aee8289dc882c12ec0e0c69482ba9392c85f5a25e05439f921fa40201cc61f62","sha512":"c22765557daffcbcbece9922407a3a6989cd9b28f8fde8cf47be7f8d5814f5d52801a3f64106c5d97e0e67242814a451717ac0afde931b7bc6271fb3a8fc2320","ssdeep":"","tlshash":"72b01245315021520200301880566836c264caa0037a4f32c913a19317304242045f89","first_seen":"2025-10-17T22:05:01.117066Z","last_seen":"2026-06-08T22:23:27.753022Z","times_seen":7,"resource_available":true,"data":null}},"time_used":452,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":452,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65bac78151f53/990-990/navy-l-men-long-sleeve-stripe-cable-knited-cricket-jumper.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:34.573Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65bac78151f53/990-990/navy-l-men-long-sleeve-stripe-cable-knited-cricket-jumper.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5Uz6wv7IfYzBozJ2txsEV_lQvXfnVuKYunZXP8EeF1oc1PWkdHgCb9V3eSJnB178D-7\r\nx-goog-generation: 1706739610915214\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 340263\r\nx-goog-hash: crc32c=CeImIg==, md5=wwWdfC+chJ8SXZFadqLnpg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 340263\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Wed, 31 Jan 2024 22:20:10 GMT\r\netag: \"c3059d7c2f9c849f125d915a76a2e7a6\"\r\ncontent-type: image/jpeg\r\nage: 546\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":340263,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"c3059d7c2f9c849f125d915a76a2e7a6","sha1":"7bd6db135f037088426fa33a92b49aba6aa67aae","sha256":"5b8f9c7f70641824def558d3748cd766d945065817b5baf19ea3c021204b9c14","sha512":"d1244a36c6984ff5fc57b037b0aff675852e2c58c90023c14c8edaed8969bc8dde9b90f234cb700c4d1cfeaec9b65b6f726e75a8aaa7000ca9490a01ca0d4f99","ssdeep":"6144:4sZ1OSunIXDdYd1iA1DNTIqaSYi+Qh5OzqlhiG9Q2WnHTX2EvDzEyEM6nHSGs:4s/mBhA3izrhiG6vrHnN","tlshash":"3274bc7d0bb0629be0cf8c52903a0ae796379344c99f89b9f196d4d646bb7187358c2c","first_seen":"2025-10-17T22:05:01.307277Z","last_seen":"2026-06-08T22:23:27.66811Z","times_seen":7,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":89,"receive":150,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65b3acf835653/990-990/mattel-monster-high-car-toys.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:35.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65b3acf835653/990-990/mattel-monster-high-car-toys.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5WPLb6it-xIAqCWWpplrmWHkbUf79Ez_eOK_xfN_BAquDLD9czOGS9QKyA3_CCY0Peg\r\nx-goog-generation: 1706274049292341\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 183950\r\nx-goog-hash: crc32c=zOUwSg==, md5=5HMb0QqnlCgcGX5zILqAyw==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 183950\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Fri, 26 Jan 2024 13:00:49 GMT\r\netag: \"e4731bd10aa794281c197e7320ba80cb\"\r\ncontent-type: image/jpeg\r\nage: 546\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":183950,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"e4731bd10aa794281c197e7320ba80cb","sha1":"79ad53aafb572491544df52e2c26500021123272","sha256":"8a7a631c0c867b59fc2eef10dfbc462d3061d379e3344f6e5e700be06cca43e8","sha512":"fce7eb87b4568b96e41742b3e3e875667310d01103bbf0ec80984efd50202e5d51b6f753a7edd29de2f2accb2c5e53e2efb71086e60e4c83e42c9e0696289904","ssdeep":"3072:Rt+8X1rgFgwwyLjMf86Z5R/mDtktPZntTA6QEer9JZz3D+mY1wuUCQp89D7yrAbt:RjX1rglxMfnf/XRt8lbD3YFUp89aEeu5","tlshash":"e40412ca913a404727e9e7586f6ecd063949b007c3ea0a42f7ae5e525fec9d7708260c","first_seen":"2025-10-17T22:05:01.686528Z","last_seen":"2026-06-08T22:23:27.746817Z","times_seen":7,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65b8477e00f9f/990-990/10-inch-pizza-pan-stainless-steel-wooden-handle-pizza-baking-paddle.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:36.025Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65b8477e00f9f/990-990/10-inch-pizza-pan-stainless-steel-wooden-handle-pizza-baking-paddle.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-guploader-uploadid: AJRbA5UBt8EUdgK5NBdXIKFt2kKSAeS7_340lXZofM-CXDbDd_UwA0RtvH-FTUn9hUcl4GAK\r\nx-goog-generation: 1706575747669917\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 85651\r\nx-goog-hash: crc32c=UO/Jdg==, md5=C9/ufetaaBKMAueQPuYJ2Q==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 85651\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Tue, 30 Jan 2024 00:49:07 GMT\r\netag: \"0bdfee7deb5a68128c02e7903ee609d9\"\r\ncontent-type: image/jpeg\r\nage: 547\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":85651,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"0bdfee7deb5a68128c02e7903ee609d9","sha1":"1d4cac3ba77b99fb1db3bf3464667e0c4d1a2d40","sha256":"2b8a01ce0931fdf996f79d98622b1e821ac0bb813b95184c2dd0b56643a4a8e0","sha512":"1963ce695d59d071c94edbd11a5a4ad3f2dada52a80c6f810a4cf7678fab3d0b5b99f74e5029c74fd294bafa988656c4bdf5d9588caede7c09244358c5c8b17e","ssdeep":"1536:+wZkFrpK99kta37efx6+bOGwX/d5WGh3ug/z7fyIG68+5:+wZkxp4Lefx6MwX/T7P/fGXc","tlshash":"0083123f4d84dadef8140dfcec1b0751eeadc15ad71819b2a6dacd28b1912121be9e44","first_seen":"2026-02-07T00:39:12.074728Z","last_seen":"2026-02-07T09:50:53.898762Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1499,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1321,"receive":178,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65b3170d12bbe/990-990/grey-automatic-intelligent-rope-skipping-machine-with-bluetooth-counting.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:34.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65b3170d12bbe/990-990/grey-automatic-intelligent-rope-skipping-machine-with-bluetooth-counting.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5XT_IK7ku8nRp-HIxjsBZwS9thgFlWfpTquTE58Yuv9fNKHApePD4ScAUwo5LNJbTroclqUlig\r\nx-goog-generation: 1706235663497998\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 49627\r\nx-goog-hash: crc32c=mRlzVg==, md5=35b/4jbHOZsCO7nYQS99FA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 49627\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Fri, 26 Jan 2024 02:21:03 GMT\r\netag: \"df96ffe236c7399b023bb9d8412f7d14\"\r\ncontent-type: image/jpeg\r\nage: 546\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":49627,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"df96ffe236c7399b023bb9d8412f7d14","sha1":"025d7a3a37698c778f03d7bd6f0375c7ae46f71a","sha256":"084aa690f080f4d16de29144edc92f0ea26c93c660220d9898a50cbc3c15e9aa","sha512":"ff870b9e42acc92e66f26607d97af71d0d972f8c4f14ac2a5257b8b5abb94c4b1a2e58673ddd697b22106420ac61802a2cb6391228a36a96c4c8d6e739fc03bc","ssdeep":"768:9FIf2RCCmOG2JW1Hcb3NVsCoUO2yO5szPkdtDk4EP67h9GY:rIfCCVGW1oNVHxXbWjWtIQ9","tlshash":"c023f2dc29d8d6e6f43552b5a5098e1303cc42278ab994cf69c8b4a44733d3f523ac2c","first_seen":"2026-02-07T00:39:12.169469Z","last_seen":"2026-02-07T09:50:53.884743Z","times_seen":3,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65b29885812ac/990-990/indestructible-dog-grenade-chew-toy.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:34.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65b29885812ac/990-990/indestructible-dog-grenade-chew-toy.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5XSgtaowSRKpKARwfuA3av78xM2gR0db0MVg2T9v5JeJaxATdurTFbh5HXxUftCl7ZDdmEzPIo\r\nx-goog-generation: 1706203276658499\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 160014\r\nx-goog-hash: crc32c=EWigNQ==, md5=4LBVpIbd4oJ+K0mh2VouWA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 160014\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Thu, 25 Jan 2024 17:21:16 GMT\r\netag: \"e0b055a486dde2827e2b49a1d95a2e58\"\r\ncontent-type: image/jpeg\r\nage: 546\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":160014,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"e0b055a486dde2827e2b49a1d95a2e58","sha1":"756b7f3c8be06a821a9cc90056bbf5c559dfda38","sha256":"74805c10b447a7c9fa291e69d438a44280354d33d3aefa8788b1aff270043cb2","sha512":"847635bd7aa02198b1fcb2ecc1d546d1ec42591ae80883a29003080095400aa3e76539f907c15be745f277d06b2c15ace16e52da13d521f4471795b716783a88","ssdeep":"3072:Tym5PLZmWLIjttP5NYyZCe2P3xH7zU5yy/NFvVz3py4N5SHH+BIbiX9R:T1FLlgTYyZehbzUYy/NllppN5SmIbiNR","tlshash":"abf31262f90ea00591cb18dc6e5e1c862ed0adf51032d05a377c2cfeefe56876499d8a","first_seen":"2026-02-07T00:39:12.164592Z","last_seen":"2026-02-07T09:50:53.909064Z","times_seen":3,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":75,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65b1a30a6b8f3/990-990/5-pcs-numbing-cream-waxing-piercing-eyebrow-makeup.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:34.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65b1a30a6b8f3/990-990/5-pcs-numbing-cream-waxing-piercing-eyebrow-makeup.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5Xm5VQTcwuEcfl-yQa5QnklPRhJdD83sIBNHVryhkL9NZFxHWdWGRUvBHJ6OdqzOtto0ElJcdg\r\nx-goog-generation: 1706140466766703\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 233309\r\nx-goog-hash: crc32c=NN6epA==, md5=PGR7PrmLyAPYkJLQo72IFg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 233309\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Wed, 24 Jan 2024 23:54:26 GMT\r\netag: \"3c647b3eb98bc803d89092d0a3bd8816\"\r\ncontent-type: image/jpeg\r\nage: 546\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":233309,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"3c647b3eb98bc803d89092d0a3bd8816","sha1":"4df6135dbf9d3f0e223c1d870e705fd6a30978f8","sha256":"22c096c8a9561cc8134d9957074c808dc8267cd66fe9673ccceb8ee33bd97643","sha512":"a6f35ce0366128a4bde36b0d2270fa6c35b29f1828b4d738d48aa08df9712f20e0374dd5433558803d49ab0a16d6f2b7c1ea6c306c63f14fdc8424f6312a741d","ssdeep":"3072:vR8ah6+5ykJS7p3900KQv2IL9rD64coPFcjOVRUMkG+ki7OpusNbc7TVO7EBFyuO:vlciS75RKQv2ILg431hkjOgsF5CFveR","tlshash":"cc34220f67921e770e98d7d04ba60a3b5fecf7f826e19c4a52ce72e194a3d50b097805","first_seen":"2026-02-07T00:39:12.171751Z","last_seen":"2026-02-07T09:50:53.838896Z","times_seen":3,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":118,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/assets/horiz-Dj1_qxqR.css","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:30.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.tiktokpropp.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 13:40:30 GMT","end":"Mon, 04 May 2026 13:40:29 GMT"},"fingerprint":{"sha1":"7F:66:7F:4D:16:40:F2:BB:67:54:E3:04:98:4E:27:FF:AC:99:5C:DE","sha256":"7B:A6:B6:EA:A6:99:D6:2F:9C:45:7E:39:93:41:5C:EE:62:8C:3A:9E:C5:D0:4A:63:46:DA:B6:99:25:49:4F:A2"}}},"request":{"raw":"GET /assets/horiz-Dj1_qxqR.css HTTP/1.1\r\nHost: h5.tiktokshop.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 00:47:30 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 04 Feb 2026 12:44:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69833f40-452\"\r\nexpires: Sat, 07 Feb 2026 12:47:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1106,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1105)","md5":"1761d1acd4cc5229644a1bf4440ceabe","sha1":"879918688d77da2418777a0e91d64a67f7ca66d2","sha256":"b858ae85cb5746f8119b716265fad9f5656a9c48b8dbc9063fb145298283f03d","sha512":"ed7dee2e9b0b49cc4bf5360e8b5c7e51fdb3148f95138c112f12af723098b978898410fcb8ca6a2606952bbb2f4d0f1875538606a5771431b3d974cd509d21d7","ssdeep":"","tlshash":"9c11c188e5b65970b43ac93d64427b893d00b43ec1969a28d523fd14d4c2763376365e","first_seen":"2026-02-07T00:39:12.261442Z","last_seen":"2026-06-08T22:23:27.688099Z","times_seen":7,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/assets/home-board-CjvF8wsq.js","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:30.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.tiktokpropp.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 13:40:30 GMT","end":"Mon, 04 May 2026 13:40:29 GMT"},"fingerprint":{"sha1":"7F:66:7F:4D:16:40:F2:BB:67:54:E3:04:98:4E:27:FF:AC:99:5C:DE","sha256":"7B:A6:B6:EA:A6:99:D6:2F:9C:45:7E:39:93:41:5C:EE:62:8C:3A:9E:C5:D0:4A:63:46:DA:B6:99:25:49:4F:A2"}}},"request":{"raw":"GET /assets/home-board-CjvF8wsq.js HTTP/1.1\r\nHost: h5.tiktokshop.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://h5.tiktokshop.buzz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 00:47:30 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 58\r\nlast-modified: Wed, 04 Feb 2026 12:44:48 GMT\r\netag: \"69833f40-3a\"\r\nexpires: Sat, 07 Feb 2026 12:47:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"21b915e0c04de9ac3a59c5dfb0ef6a43","sha1":"6b5e4550b0bf20b9b1737c8aa8c3b41dad21ca90","sha256":"af8840c7e778afa665ecc2e18354a91e3a4843d1edd89f1370129a72615d590a","sha512":"7b49dd2e77e58649828a2836f359e43bc64a9158dd5fa04285af8faa01983f8fba67ffea86512b84c874e4f78a402a878b1eaf3335dbea6807aac31fa3cf6b0f","ssdeep":"","tlshash":"4aa00231862504b8c46434555195a49048a1151c7517b26dc41459c9b67645d894ec2a","first_seen":"2025-10-17T22:05:01.327231Z","last_seen":"2026-06-08T22:23:27.711206Z","times_seen":8,"resource_available":true,"data":null}},"time_used":450,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":450,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/9be7817d84a4402e9612264079225948/990-990/gym-rings-wooden-gymnastic-rings-fitness-heavy-duty-gym-training-ring.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:34.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/9be7817d84a4402e9612264079225948/990-990/gym-rings-wooden-gymnastic-rings-fitness-heavy-duty-gym-training-ring.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5V5k0nfoAaqgF1IKYStdh7YTieQAqHTruuJYCv5zvwI_6QTf79nkf0OY1mACyyPZ5SKCGgQXxE\r\nx-goog-generation: 1714186124783060\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 81219\r\nx-goog-hash: crc32c=hTrD1A==, md5=TshlvueIsODgnTLCtJpOHg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 81219\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Sat, 27 Apr 2024 02:48:44 GMT\r\netag: \"4ec865bee788b0e0e09d32c2b49a4e1e\"\r\ncontent-type: image/jpeg\r\nage: 546\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":81219,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"4ec865bee788b0e0e09d32c2b49a4e1e","sha1":"b3e4a99a77216fe28ba356a3ee32fe64770b7c9a","sha256":"65b81ad06821b557e24437789b17078859c1743ea7a052cadfa8142f60710bd2","sha512":"47e70e8d3303393743c8e7456a4289da937ad87d6cfc530cb09200eec2de27c877d843db92fefa010ea28ac6d87854e6e94428bc330077b1c761a16ab5de6ae3","ssdeep":"1536:MDQeV3yD3Xm+RDI5jnPcwdoBVgD0E1Y0TkJDCkPt3XSQNcZyfGUE+UME:MBQD32E2Ew4ObN4NwyfGUE+U5","tlshash":"448302ef9579edbdd38d233058478804779bd536a1bce18aeb4631e65cac38028558fc","first_seen":"2026-02-07T00:39:12.144517Z","last_seen":"2026-06-08T22:23:27.819878Z","times_seen":6,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":82,"dns":0,"connect":0,"send":0,"wait":23,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/assets/index-CX7p4Hmx.js","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:30.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.tiktokpropp.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 13:40:30 GMT","end":"Mon, 04 May 2026 13:40:29 GMT"},"fingerprint":{"sha1":"7F:66:7F:4D:16:40:F2:BB:67:54:E3:04:98:4E:27:FF:AC:99:5C:DE","sha256":"7B:A6:B6:EA:A6:99:D6:2F:9C:45:7E:39:93:41:5C:EE:62:8C:3A:9E:C5:D0:4A:63:46:DA:B6:99:25:49:4F:A2"}}},"request":{"raw":"GET /assets/index-CX7p4Hmx.js HTTP/1.1\r\nHost: h5.tiktokshop.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://h5.tiktokshop.buzz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 00:47:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 04 Feb 2026 12:44:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69833f40-251b\"\r\nexpires: Sat, 07 Feb 2026 12:47:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9499,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9498)","md5":"dee952d4cbb74e8706ed371a187657c3","sha1":"0088ed5d6cf71f923f97ab495bef5d1b5fe160c2","sha256":"d8d821b4eda17599f1335aed671f05dad817bcd64d3ec9f010fe28ec7b07b170","sha512":"5f5430b700505706ef2b322dd0ff4d06a90c884bd68be840b1687955a57ad70e211de4e06393d74de8b19b4d9fda6d81f17f2a8cf934166d8eb1ee8bc50e95b5","ssdeep":"192:TcyE8HFsmgmBlk5bkQNnNhA9Gih6zQPZaG/70b:M8HFPlcbkQNnNhAGih69G/70b","tlshash":"7c12e785f5c591729bab64d5b0e68050e55e0f48e01a80e1f07f9d143beeec0b9b9f2d","first_seen":"2026-02-07T00:39:12.097506Z","last_seen":"2026-02-07T09:50:53.875461Z","times_seen":3,"resource_available":true,"data":null}},"time_used":452,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":452,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/assets/product-BC8WZLBv.js","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:30.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.tiktokpropp.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 13:40:30 GMT","end":"Mon, 04 May 2026 13:40:29 GMT"},"fingerprint":{"sha1":"7F:66:7F:4D:16:40:F2:BB:67:54:E3:04:98:4E:27:FF:AC:99:5C:DE","sha256":"7B:A6:B6:EA:A6:99:D6:2F:9C:45:7E:39:93:41:5C:EE:62:8C:3A:9E:C5:D0:4A:63:46:DA:B6:99:25:49:4F:A2"}}},"request":{"raw":"GET /assets/product-BC8WZLBv.js HTTP/1.1\r\nHost: h5.tiktokshop.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://h5.tiktokshop.buzz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 00:47:30 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 526\r\nlast-modified: Wed, 04 Feb 2026 12:44:48 GMT\r\netag: \"69833f40-20e\"\r\nexpires: Sat, 07 Feb 2026 12:47:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":526,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (525)","md5":"c194acf9ef80e6c493c0cd34616af121","sha1":"3dbfab242999257a9af65d07ebd6b9a48973322b","sha256":"4fc4d9469a365e15a703820523d07a7e2ffb2388c4a88bc2335842735c1c650d","sha512":"4bc1f9ab08883d786acc51a192da9720007e13cac1644169377a60a7b8edc3bbc6c3a22dbe9977b956b0a0ef3df49ba6302aa187fc047cc6f5f931475a5a774a","ssdeep":"","tlshash":"53f0bb89e673f4630316c03594de257ba9bd82929cfd0d21ad00d1977c78d79722a9cd","first_seen":"2026-02-07T00:39:12.069033Z","last_seen":"2026-02-07T09:50:53.895103Z","times_seen":3,"resource_available":true,"data":null}},"time_used":453,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":453,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/favicon.ico","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:31.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.tiktokpropp.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 13:40:30 GMT","end":"Mon, 04 May 2026 13:40:29 GMT"},"fingerprint":{"sha1":"7F:66:7F:4D:16:40:F2:BB:67:54:E3:04:98:4E:27:FF:AC:99:5C:DE","sha256":"7B:A6:B6:EA:A6:99:D6:2F:9C:45:7E:39:93:41:5C:EE:62:8C:3A:9E:C5:D0:4A:63:46:DA:B6:99:25:49:4F:A2"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: h5.tiktokshop.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 00:47:31 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 4286\r\nlast-modified: Mon, 06 May 2024 10:19:32 GMT\r\netag: \"6638aeb4-10be\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"1ba2ae710d927f13d483fd5d1e548c9b","sha1":"c0605efed936ee2600284e6480521d06fa64f872","sha256":"db74ab0b78338c1f778f8398c45f4103c99aea0e845a3118a7750b4eeafd3445","sha512":"f933cd352eaba92f509b3863353ddfefadfada26a4152ecdc4727d450bbf35e7b10fb3038fe8db340d5c63d74e608c1560ec84d0f6ffc8ccd940c9e0d7533544","ssdeep":"48:i3H5R5hLOR4kt38PduMoglJrd6qTrp9hweFC0+6Ga:ipHFUs4MLBvuyCda","tlshash":"ee9175df61c388d9c1b1977f78c449a14f6fd951ba28351f55cf30622e5d75818c1c46","first_seen":"2023-04-18T17:42:03Z","last_seen":"2026-08-13T13:16:18.076063Z","times_seen":6517,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":245,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65ba83c130075/990-990/1000pcs-5mm-y-education-toy.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:34.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65ba83c130075/990-990/1000pcs-5mm-y-education-toy.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5XeDp9w5-V1M8zV6yq5g95e9JcBQKj4kPTGEG84HNA71yMKIgpm1L-sOqck76Je8vm89e_KNZY\r\nx-goog-generation: 1706722261817659\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 297047\r\nx-goog-hash: crc32c=ndNmmQ==, md5=Tm73R9EMQO4M0ASTeU61Zg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 297047\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Wed, 31 Jan 2024 17:31:01 GMT\r\netag: \"4e6ef747d10c40ee0cd00493794eb566\"\r\ncontent-type: image/jpeg\r\nage: 546\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":297047,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"4e6ef747d10c40ee0cd00493794eb566","sha1":"09adf55601110ae88d01f78b39904fdfc15990da","sha256":"36cae3389c44667c464c30290795918908df55ec97fc97c9f2a5283c1b748bd1","sha512":"87c1a2ec74ec73f9f0815a11daecab526fd30b4d96e8318371309ea72061c7d9affb12f0f1c3e6266f319d577f1dbae0968ae0f7b929ff1db3df468b1b90fbbf","ssdeep":"6144:GE+EJTWS1xSJnw1WVmJGRkkSUNdgOoR3S9g1gZM:GE+GThan848GRkktNdihSkgZM","tlshash":"f35412be2bdb392329b31d1267e12267700429376b8ad158101d3dcfbc6dc83da7635a","first_seen":"2026-02-07T00:39:12.2132Z","last_seen":"2026-06-08T22:23:27.719929Z","times_seen":6,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":55,"dns":0,"connect":0,"send":0,"wait":85,"receive":121,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/9b7712bf979a4a21a4b98803329984d4/990-990/ovwanren-yoga-headstand-bench-stand-yoga-chair-for-family-gym-wood-and-pu.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:34.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/9b7712bf979a4a21a4b98803329984d4/990-990/ovwanren-yoga-headstand-bench-stand-yoga-chair-for-family-gym-wood-and-pu.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5XxtmrwksE5FUk5CLILW9w-eDApRSvN-MM-_f9OVXAWC7gspS8B9nnLDchIAq79DyR2\r\nx-goog-generation: 1709357182192517\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 80652\r\nx-goog-hash: crc32c=VcJdRg==, md5=YMsxbtP4AnB3rjMxKXKw5w==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 80652\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Sat, 02 Mar 2024 05:26:22 GMT\r\netag: \"60cb316ed3f8027077ae33312972b0e7\"\r\ncontent-type: image/jpeg\r\nage: 546\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":80652,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"60cb316ed3f8027077ae33312972b0e7","sha1":"a59413fb0d5f1f72c10b7a5b2c485bbd536b7403","sha256":"45ca6df7bd2fd989fc5e9b164fc55989ef06e435b7ee9f44f22f656225cac392","sha512":"1f443a0af52366b120461093497d47b5bf8c919a1b0fadc1247286bfbb5aaad888e67f75657ba9ee77fa64cc9e53eb41dfe77c61df5c77c3ff38c9c00c581324","ssdeep":"1536:Tp3Y+4wCvO78FbpK07Bm71T2heMyXiflAijzyhE8/0PGd5tf2eBWg:ZYcCW78Fz46D51PGdXJv","tlshash":"6873f172b21618d7c44d2b38c6777f8939a3cd489d630b191ae655782870a78fc7fe88","first_seen":"2026-02-07T00:39:12.315855Z","last_seen":"2026-03-05T08:37:15.249109Z","times_seen":4,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":39,"dns":0,"connect":0,"send":0,"wait":87,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65b298859c1ff/990-990/durable-dog-chew-toys-rubber-bone-toy-aggressive-chewers-dog-toothb.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:34.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65b298859c1ff/990-990/durable-dog-chew-toys-rubber-bone-toy-aggressive-chewers-dog-toothb.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5US2PV9p5oWRlyQRi6xaU1ynQm2x79GDerm9fmn6nCz4jY6zyUZqfBcvj7eYF09Wpcq\r\nx-goog-generation: 1706203274570776\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 243179\r\nx-goog-hash: crc32c=fX622w==, md5=RTjMDmg0ald9htORurtsmw==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 243179\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Thu, 25 Jan 2024 17:21:14 GMT\r\netag: \"4538cc0e68346a577d86d391babb6c9b\"\r\ncontent-type: image/jpeg\r\nage: 546\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":243179,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"4538cc0e68346a577d86d391babb6c9b","sha1":"ce71d728ed1d5fedc5b2e7d68fa2e8606ce076fd","sha256":"ae2c4ed5a5ff01dbb763a1f9ad281fb00aac080245850194c8f627b005bde5a0","sha512":"994a413966e220459ab2377a5fe29a862c409136db80ad15c06ffb7ce4c3ca8ddaac2850968bdd9e29ba8cd4d5b548fb1dc86336b2dd6bdc8cbaa427df2f4d05","ssdeep":"3072:eEUKWMSuP2Ugd5BK5Q9VnKi6wLMtxg67K9giwJNGyCNjLqpOsUuJl/viBIiDG8do:kM8UgdfK5MKibQQsxxCNgOsU+pmjEX","tlshash":"6f341229a961fb9fdfef6827662fc3b5f4a940707876c10bad8c94db9d181422d31b40","first_seen":"2026-02-07T00:39:12.295802Z","last_seen":"2026-06-08T22:23:27.827214Z","times_seen":6,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65b4e14d1b83f/990-990/lego-41745-friends-autumns-horse-stable.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:35.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65b4e14d1b83f/990-990/lego-41745-friends-autumns-horse-stable.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5XMSzPlJWr2aXJpcQ8OQDPscsNq9NTaeYhCtNOgYvMzC6m5bzq20h68NTntcqY_KtcT\r\nx-goog-generation: 1706352979287283\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 283907\r\nx-goog-hash: crc32c=w4dBhQ==, md5=3mf9n3zkeIA0+9WOzQMt3g==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 283907\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Sat, 27 Jan 2024 10:56:19 GMT\r\netag: \"de67fd9f7ce4788034fbd58ecd032dde\"\r\ncontent-type: image/jpeg\r\nage: 547\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":283907,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"de67fd9f7ce4788034fbd58ecd032dde","sha1":"c24aa7907d18b763210b5a525afd3d354ac21616","sha256":"9986e7564c86981ba27038a7e796f8551e9e1ff2562edab32aee9523bd416372","sha512":"de38dae2f4866d4e4a20fb01c802e10f5670d7056adf76a844374062d48ba8aa687b4394a8ddcc2a3a7491c7550976d0dde94457d509a414a0d858b7238a01a3","ssdeep":"6144:yWPOCP0CqhVLuYqMPaznl2on8N1zYirksxVM2EQxHEcnrp8WU:yWPl0CAVEEaLl2o27ks3nEUEcnVU","tlshash":"cb5412c9a751b29eef0f2c035213eb31f4da10783c78d2385eee58cb4da5295676439a","first_seen":"2026-02-07T00:39:12.179271Z","last_seen":"2026-02-07T09:50:53.950012Z","times_seen":3,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65b195436e9aa/990-990/aloe-vera-10000mg-x-240-tablets-skincare-colon-cleanse-digestion-detox.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:36.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65b195436e9aa/990-990/aloe-vera-10000mg-x-240-tablets-skincare-colon-cleanse-digestion-detox.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5U0Z-7gwqK8xenkz-0AcCS7QCAN4Kv0hm9cJs9ObpqzdiuVJZAGZjmnvez5D-Yc7h2B\r\nx-goog-generation: 1706136907563274\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 95666\r\nx-goog-hash: crc32c=6RzTZg==, md5=IzfE7dHP8B7/iu33EYt6vQ==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 95666\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Wed, 24 Jan 2024 22:55:07 GMT\r\netag: \"2337c4edd1cff01eff8aedf7118b7abd\"\r\ncontent-type: image/jpeg\r\nage: 547\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":95666,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"2337c4edd1cff01eff8aedf7118b7abd","sha1":"ea0db3c8c5fa7db09f6d16e94cdfb77f11110736","sha256":"18c444c4e442be065e1642a3c43926c126f798163988c904408aabf697163cec","sha512":"db212c2dfb0b385a3d9ec4c3b16082b8c6dd339d46692ac3bd163bd9fcd4523efa970bf696196a60369110a016e56645552983c3a45e62456d2dc4cca295ee17","ssdeep":"1536:cBRAZ0YuT5miOLi/drHkOEEewMXECLhS1Lid35MmQH9W6Q3bsA4GQP:cBRAiYq9EYyOLWXHgipgdW6Q3bsAK","tlshash":"1f931201b89652d3fd60291d91416866bff8410cb628f8f630f25af7681b84d3ff955b","first_seen":"2026-02-07T00:39:12.082304Z","last_seen":"2026-06-08T22:23:27.653747Z","times_seen":6,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/assets/use-id-JUQTbi8i.js","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:31.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.tiktokpropp.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 13:40:30 GMT","end":"Mon, 04 May 2026 13:40:29 GMT"},"fingerprint":{"sha1":"7F:66:7F:4D:16:40:F2:BB:67:54:E3:04:98:4E:27:FF:AC:99:5C:DE","sha256":"7B:A6:B6:EA:A6:99:D6:2F:9C:45:7E:39:93:41:5C:EE:62:8C:3A:9E:C5:D0:4A:63:46:DA:B6:99:25:49:4F:A2"}}},"request":{"raw":"GET /assets/use-id-JUQTbi8i.js HTTP/1.1\r\nHost: h5.tiktokshop.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/assets/index-Sgi5eB1f.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 00:47:31 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 151\r\nlast-modified: Wed, 04 Feb 2026 12:44:48 GMT\r\netag: \"69833f40-97\"\r\nexpires: Sat, 07 Feb 2026 12:47:31 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":151,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"6d5d195633b510a7044f5991cc75c89b","sha1":"7cf64c51f54daf5e86ca7dad3757d187830a9a72","sha256":"10ba6246b18a568f0544a4682862d99d6f3986810e40129c0409404881793850","sha512":"03599e1aaea02243037907f1616846227e01fbf8c00f3d5ce5e39cb777764e0c7348e21786a37c5e8ac3200e9ae607785ce6b9f4c5cb734db67d1ae3e5e65d07","ssdeep":"","tlshash":"82c02b4e7c4810f126190cf4e22b47aac22b3c10136a99f0f178071705f136ab3baf00","first_seen":"2026-02-07T00:39:12.114596Z","last_seen":"2026-02-07T09:50:53.842291Z","times_seen":3,"resource_available":true,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/assets/index-CX7p4Hmx.js","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:31.279Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.tiktokpropp.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 13:40:30 GMT","end":"Mon, 04 May 2026 13:40:29 GMT"},"fingerprint":{"sha1":"7F:66:7F:4D:16:40:F2:BB:67:54:E3:04:98:4E:27:FF:AC:99:5C:DE","sha256":"7B:A6:B6:EA:A6:99:D6:2F:9C:45:7E:39:93:41:5C:EE:62:8C:3A:9E:C5:D0:4A:63:46:DA:B6:99:25:49:4F:A2"}}},"request":{"raw":"GET /assets/index-CX7p4Hmx.js HTTP/1.1\r\nHost: h5.tiktokshop.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/assets/index-Sgi5eB1f.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 00:47:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 04 Feb 2026 12:44:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69833f40-251b\"\r\nexpires: Sat, 07 Feb 2026 12:47:31 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9499,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9498)","md5":"dee952d4cbb74e8706ed371a187657c3","sha1":"0088ed5d6cf71f923f97ab495bef5d1b5fe160c2","sha256":"d8d821b4eda17599f1335aed671f05dad817bcd64d3ec9f010fe28ec7b07b170","sha512":"5f5430b700505706ef2b322dd0ff4d06a90c884bd68be840b1687955a57ad70e211de4e06393d74de8b19b4d9fda6d81f17f2a8cf934166d8eb1ee8bc50e95b5","ssdeep":"192:TcyE8HFsmgmBlk5bkQNnNhA9Gih6zQPZaG/70b:M8HFPlcbkQNnNhAGih69G/70b","tlshash":"7c12e785f5c591729bab64d5b0e68050e55e0f48e01a80e1f07f9d143beeec0b9b9f2d","first_seen":"2026-02-07T00:39:12.097506Z","last_seen":"2026-02-07T09:50:53.875461Z","times_seen":3,"resource_available":true,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65b423cc084e1/990-990/12-inch-aluminum-pizza-screen-pizza-pan-with-holes-pizza-panbaking-tray-for-round-pizza-crisper-tray-pizza-baking-tray.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:34.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65b423cc084e1/990-990/12-inch-aluminum-pizza-screen-pizza-pan-with-holes-pizza-panbaking-tray-for-round-pizza-crisper-tray-pizza-baking-tray.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5XF64-3DIVi5slRzw122pEoEaBlOfAtYPHI7rIm7h7wbFPnDWFOkyWuXOCBQOSUURnS\r\nx-goog-generation: 1706304474606906\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 188909\r\nx-goog-hash: crc32c=PmyaSw==, md5=FnpO4zDeIxHae7pdYRHSvA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 188909\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Fri, 26 Jan 2024 21:27:54 GMT\r\netag: \"167a4ee330de2311da7bba5d6111d2bc\"\r\ncontent-type: image/jpeg\r\nage: 546\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":188909,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 1","md5":"167a4ee330de2311da7bba5d6111d2bc","sha1":"57da42707ece8d0e2bb564be54b34bde7c36c8cf","sha256":"4b0a0f7e1916618b5d8d98f153b0d033d539a54f58a194a71396d09c5198f212","sha512":"d05cdaa2fcaeef3f7d1bf0a8ce022732f80383ff52364c57628c77303343a443f5a84b16a55e918f559c208ef36f3e5db203c53d2123da9bfb991b8d7a07a663","ssdeep":"3072:X5NtY2MCdMaWqMzUX/+v0wgwLfdhD3zuJTyXL+7HG+gtVgdXa6vaJRm3r9CusrvG:JNWOzWqMAk0wgwrDjuCL+qbuFa6i279D","tlshash":"7e04126cb8932ba4009c710836b38ba5722b5f544253f77ac29e9f19587ddbfcadc601","first_seen":"2026-02-07T00:39:12.24129Z","last_seen":"2026-02-07T09:50:53.915611Z","times_seen":3,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":88,"dns":0,"connect":0,"send":0,"wait":31,"receive":93,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65bac781d98de/990-990/navy-s-men-long-sleeve-stripe-cable-knited-cricket-jumper.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:34.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65bac781d98de/990-990/navy-s-men-long-sleeve-stripe-cable-knited-cricket-jumper.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5WiYgFbmMYbsQcCfFLmt--EDb1492nXZ_81rtbsi5PYCrJK2NqXI8jEtKaHdL2imEvs\r\nx-goog-generation: 1706739613477019\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 340263\r\nx-goog-hash: crc32c=CeImIg==, md5=wwWdfC+chJ8SXZFadqLnpg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 340263\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Wed, 31 Jan 2024 22:20:13 GMT\r\netag: \"c3059d7c2f9c849f125d915a76a2e7a6\"\r\ncontent-type: image/jpeg\r\nage: 546\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":340263,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"c3059d7c2f9c849f125d915a76a2e7a6","sha1":"7bd6db135f037088426fa33a92b49aba6aa67aae","sha256":"5b8f9c7f70641824def558d3748cd766d945065817b5baf19ea3c021204b9c14","sha512":"d1244a36c6984ff5fc57b037b0aff675852e2c58c90023c14c8edaed8969bc8dde9b90f234cb700c4d1cfeaec9b65b6f726e75a8aaa7000ca9490a01ca0d4f99","ssdeep":"6144:4sZ1OSunIXDdYd1iA1DNTIqaSYi+Qh5OzqlhiG9Q2WnHTX2EvDzEyEM6nHSGs:4s/mBhA3izrhiG6vrHnN","tlshash":"3274bc7d0bb0629be0cf8c52903a0ae796379344c99f89b9f196d4d646bb7187358c2c","first_seen":"2025-10-17T22:05:01.307277Z","last_seen":"2026-06-08T22:23:27.66811Z","times_seen":7,"resource_available":false,"data":null}},"time_used":299,"timings":{"blocked":63,"dns":0,"connect":0,"send":0,"wait":85,"receive":151,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65b1c4c5d3826/990-990/lamantop-shoe-socks-for-dancing-strong-by-zumba-accessories-clothes-portable-dance-floor-sole-control-wraps-over-sneakers-shoe-sliders-cize-danc.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:34.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65b1c4c5d3826/990-990/lamantop-shoe-socks-for-dancing-strong-by-zumba-accessories-clothes-portable-dance-floor-sole-control-wraps-over-sneakers-shoe-sliders-cize-danc.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5XPbOgIgqjEBN1LfZVUgLhzT34Jgk3CxaDtMkX7B2cfFxkO5oEcb57CnziOcnbfd_M8\r\nx-goog-generation: 1706149063502769\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 62277\r\nx-goog-hash: crc32c=V49UEw==, md5=NOA9toySzaN2FCFTeXqOhw==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 62277\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Thu, 25 Jan 2024 02:17:43 GMT\r\netag: \"34e03db68c92cda376142153797a8e87\"\r\ncontent-type: image/jpeg\r\nage: 546\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":62277,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"34e03db68c92cda376142153797a8e87","sha1":"674dcabf7ab5ac64202e66156f6c66299577a1c7","sha256":"1475d23f4186c58c258269e46ee5692b94cd97a94f53dc6810d1bf359903ebe6","sha512":"a1d56334121fe9451780f06344966ba0e02083496b5ce13a04a8166b5b4e475956b4234181c31d4061d8c447d36bfa87a804d5ccf143bea4c56fa3afb2a148f5","ssdeep":"768:e8d3nuLZiOkhYNihBJ36B+PyG9mT0VP2KnD4rBMQjfDSWac6zLdorsaTAoXQKI:e8dXuLsZNhBl6IKpqZcDS9/dorsakfKI","tlshash":"2253f20e5ea1a5c8f5e440779fb63f254af1fba8d83b25ab53d07c10edd81582cd8815","first_seen":"2026-02-07T00:39:12.290866Z","last_seen":"2026-02-07T09:50:53.923326Z","times_seen":3,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":89,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65af409cec609/990-990/aloe-pura-aloe-pura-aloe-vera-gentle-action-colon-cleanse-60-tablets.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:34.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65af409cec609/990-990/aloe-pura-aloe-pura-aloe-vera-gentle-action-colon-cleanse-60-tablets.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5W6dx_32bhpYF6BM8Oh_dwX9nUATuFl9XsTsCtw1EKpc13H2yNev3XENLyhwXd9j1UR\r\nx-goog-generation: 1705984160405151\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 171725\r\nx-goog-hash: crc32c=U6oxDQ==, md5=lj2VkjglRcW5/OQm8U/QJw==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 171725\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Tue, 23 Jan 2024 04:29:20 GMT\r\netag: \"963d9592382545c5b9fce426f14fd027\"\r\ncontent-type: image/jpeg\r\nage: 546\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":171725,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"963d9592382545c5b9fce426f14fd027","sha1":"e163b4e2581bc1e4d558435f2ac5137400bca128","sha256":"75e3eb53aa886f94e355d57e080ca09fa89b80c8a613d7e374fd19a8208ee4c7","sha512":"cde8b5d66f5ddecdbe32aa281d0f11e62245085b393df223435bc1e3a78188857e3990d709def18afd4ccee6e5421bfb9e58b726d04d190423d55d1b791d7dd4","ssdeep":"3072:fgJqNI8jdwKz+idH31IqBlLJwejJzp1LXTBxnrOJy3pDBQ4Fv//UgUXW85:frNFr+gFjBlLWy1BpiklBQ4Fvnk","tlshash":"f8f31240f894245bb98d784fac9c691930aa6cff56b5c0c0da2e4fe1dfd8b335978a44","first_seen":"2026-02-07T00:39:12.220945Z","last_seen":"2026-02-07T09:50:53.942461Z","times_seen":3,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65b15890e5580/990-990/jada-32250-supernatural-1967-impala-ss-sport-sedan-with-dean-winchester-figure-124-scale.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:35.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65b15890e5580/990-990/jada-32250-supernatural-1967-impala-ss-sport-sedan-with-dean-winchester-figure-124-scale.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5WL1fn-0A9yeUmmfTeuRgmOf_nwszWdLe8hD_nfcOJBz9bqUasWxLdn4S-yvl4AVmiu\r\nx-goog-generation: 1706121858608469\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 75059\r\nx-goog-hash: crc32c=wLOxqw==, md5=cDU8QFL6lTQUuex6adXFjg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 75059\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Wed, 24 Jan 2024 18:44:18 GMT\r\netag: \"70353c4052fa953414b9ec7a69d5c58e\"\r\ncontent-type: image/jpeg\r\nage: 546\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":75059,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"70353c4052fa953414b9ec7a69d5c58e","sha1":"415a7d0125a0beda88a614731744dfae6f41d0b6","sha256":"8a18b89a28916f1793dd6f4965a82041cde8c7298a874937d636c5ba51c7aa44","sha512":"63159916dd4bc8560df386dc3b0676bc5a2c48268055e2a9b8e7278376dc4d8492283360f942d8954be70680a567eb1134ef86a6583f5ace940a61bcf0255f8f","ssdeep":"1536:sHV5eaDNpUxCsG01JBYJGjeAyysvBD08grNEjppqoFwlZbGxHa:sHVbJpUxx1JSJ+bSJDvgpgjHym6","tlshash":"3b73f1a2f41a90de5384458e7d1e93192be616f0317ad78b74cc2cd2c3e429bf1299e3","first_seen":"2026-02-07T00:39:12.100007Z","last_seen":"2026-02-07T09:50:53.925766Z","times_seen":3,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65b15e9692088/990-990/hyundai-hym560spe-56cm-196cc-4-in-1-electric-start-self-propelled-petrol-lawnmower.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:35.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65b15e9692088/990-990/hyundai-hym560spe-56cm-196cc-4-in-1-electric-start-self-propelled-petrol-lawnmower.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5U4z9TukQB_1Y876Yh48Y8eaTPZL0rp0DDdvhIn9LdhjDf4G2rnxbUofll33atTB8jG\r\nx-goog-generation: 1706123090640899\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 145895\r\nx-goog-hash: crc32c=Q7UdIA==, md5=BwIPNhXWJT4sz8iJOqE34w==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 145895\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Wed, 24 Jan 2024 19:04:50 GMT\r\netag: \"07020f3615d6253e2ccfc8893aa137e3\"\r\ncontent-type: image/jpeg\r\nage: 547\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":145895,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"07020f3615d6253e2ccfc8893aa137e3","sha1":"bc2e75b04d5478051c5737e8681ad5871cb41830","sha256":"86b0a5b54dc777534932223f3c80cd1a5e31b8edf5e819eaf0287317f3acf570","sha512":"e83231ddc9732173762f8775d155eb8225166065e22fe929f1fb0ef27108428a46712eab765e09d926c57998f9b075539d50c4c27f289e7097ac1f35525975b9","ssdeep":"3072:HWzJB8mZdzUE0n1oXe8/wwcgyUCxO2MA3gsAzyHAif//zzZUcV:oBPZ70n1yYwcZO2T3nAWHxvzzZjV","tlshash":"abe3129af61b48d8886751ad0cbcdf5222d1f4f5e172e26032fc9eead3d859384498d2","first_seen":"2026-02-07T00:39:12.211306Z","last_seen":"2026-02-07T09:50:53.886252Z","times_seen":3,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/assets/index-Bcg5zGWv.js","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:31.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.tiktokpropp.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 13:40:30 GMT","end":"Mon, 04 May 2026 13:40:29 GMT"},"fingerprint":{"sha1":"7F:66:7F:4D:16:40:F2:BB:67:54:E3:04:98:4E:27:FF:AC:99:5C:DE","sha256":"7B:A6:B6:EA:A6:99:D6:2F:9C:45:7E:39:93:41:5C:EE:62:8C:3A:9E:C5:D0:4A:63:46:DA:B6:99:25:49:4F:A2"}}},"request":{"raw":"GET /assets/index-Bcg5zGWv.js HTTP/1.1\r\nHost: h5.tiktokshop.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/assets/index-Sgi5eB1f.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 00:47:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 04 Feb 2026 12:44:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69833f40-bdd\"\r\nexpires: Sat, 07 Feb 2026 12:47:31 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3037,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (3036)","md5":"b9c5375b26bec6b387afa8ebe13667f8","sha1":"7e893c8a535800acaf9d6ecee4f2cbee9b80fab3","sha256":"eb434a207ea69bc33957c065d3bfeb7dd768c9801c9ea55ce2b23ec929b2be4b","sha512":"741600f27dad637a53ae4e0f4abced60cdb613be7effc5592eb005bbc7277facf8ed4d72d71c1c58d347727de817d8eb41b7f28195aac5bf93b5cd9814b4ecba","ssdeep":"","tlshash":"fd5194acf4f5f9382b6b5b45550a48f1790a17df99b886d0f4abcc0033a54d8e06871e","first_seen":"2026-02-07T00:39:12.222565Z","last_seen":"2026-02-07T09:50:53.860509Z","times_seen":3,"resource_available":true,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/9be5e32a4254445da146c84d5fb0aea6/990-990/new-gripster-grip-exerciser-strengthener-trainer-fitness-workout-training-new-gripster-grip-exerciser-strengthener-trainer-fitness-workout-training.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:35.143Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/9be5e32a4254445da146c84d5fb0aea6/990-990/new-gripster-grip-exerciser-strengthener-trainer-fitness-workout-training-new-gripster-grip-exerciser-strengthener-trainer-fitness-workout-training.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5U-wPB6Y3eMrsP5VbCqdoin20DdEk9aLZzUYtFIN-MI2x1gxbWCUeps0lMKzivg4Y6R\r\nx-goog-generation: 1714116611998752\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 138341\r\nx-goog-hash: crc32c=NeFIiA==, md5=PB8Wmt3MFmMoGF8y5Jw8ww==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 138341\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Fri, 26 Apr 2024 07:30:12 GMT\r\netag: \"3c1f169addcc166328185f32e49c3cc3\"\r\ncontent-type: image/jpeg\r\nage: 546\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":138341,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"3c1f169addcc166328185f32e49c3cc3","sha1":"01865efd987796a0d8d454d3ef0e169b9614502b","sha256":"77f842acd31589eb46fa24bd5ab19ad175d1f3b936240ebd8e2e9f1af6427591","sha512":"abdf6678fc804678e2fe21dfc47ffa234983d3096fd5a9222b50973c6701d1b28bd0ec4e5c2a3e6023d8262c16bbd0b4ce5786d5a07f83eaece9b23221828124","ssdeep":"3072:xl05AkSJMy1lq6sfj5SrUFSSB4KKsI5+L5ld+pg:xl05IJMyi6E8oFSk4K1akr","tlshash":"2fd31203f55ea990aea716cc9c0d290493c496f056f1c3a6b08d2fc5efd16e3862b99d","first_seen":"2026-02-07T00:39:12.085411Z","last_seen":"2026-06-08T22:23:27.830834Z","times_seen":6,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65b19545a0cb4/990-990/aloe-vera-10000mg-x-30-tablets-skincare-colon-cleanse-digestion-detox.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:35.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65b19545a0cb4/990-990/aloe-vera-10000mg-x-30-tablets-skincare-colon-cleanse-digestion-detox.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5XKalN3VqZaPLzXkMbhBek-nCvGIGv9DaiUymFZRc2K4pVrPyT3vIGGzIf0U-1ZLvSR\r\nx-goog-generation: 1706136907734791\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 95666\r\nx-goog-hash: crc32c=6RzTZg==, md5=IzfE7dHP8B7/iu33EYt6vQ==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 95666\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Wed, 24 Jan 2024 22:55:07 GMT\r\netag: \"2337c4edd1cff01eff8aedf7118b7abd\"\r\ncontent-type: image/jpeg\r\nage: 547\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":95666,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"2337c4edd1cff01eff8aedf7118b7abd","sha1":"ea0db3c8c5fa7db09f6d16e94cdfb77f11110736","sha256":"18c444c4e442be065e1642a3c43926c126f798163988c904408aabf697163cec","sha512":"db212c2dfb0b385a3d9ec4c3b16082b8c6dd339d46692ac3bd163bd9fcd4523efa970bf696196a60369110a016e56645552983c3a45e62456d2dc4cca295ee17","ssdeep":"1536:cBRAZ0YuT5miOLi/drHkOEEewMXECLhS1Lid35MmQH9W6Q3bsA4GQP:cBRAiYq9EYyOLWXHgipgdW6Q3bsAK","tlshash":"1f931201b89652d3fd60291d91416866bff8410cb628f8f630f25af7681b84d3ff955b","first_seen":"2026-02-07T00:39:12.082304Z","last_seen":"2026-06-08T22:23:27.653747Z","times_seen":6,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65b2292bc26a7/990-990/washing-line-hanger-hooks-24-pack-clothes-line-outdoor-retractablerotary-washing-line-hanging-hook-ups-for-coat-hangers-drying-rack-grey.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:35.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65b2292bc26a7/990-990/washing-line-hanger-hooks-24-pack-clothes-line-outdoor-retractablerotary-washing-line-hanging-hook-ups-for-coat-hangers-drying-rack-grey.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5Woy7IkcCglyxSz4I8TU4LS8Jn50QYRx4OD-9iZdisNUUXwTHNiIj53vqkaeuJyiVvM\r\nx-goog-generation: 1706174769540952\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 96605\r\nx-goog-hash: crc32c=jQQPKg==, md5=1Vkxn8zBvUybazc77iqO/A==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 96605\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Thu, 25 Jan 2024 09:26:09 GMT\r\netag: \"d559319fccc1bd4c9b6b373bee2a8efc\"\r\ncontent-type: image/jpeg\r\nage: 547\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":96605,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"d559319fccc1bd4c9b6b373bee2a8efc","sha1":"10b2383df90d967151b6ff5204b6d0454d496d60","sha256":"81c89d0c2512e7abe3cfbc8704ef0814a491281df0dfe09353f18b4565700a6c","sha512":"9fb215927938b01e603d7dd60dc0cadd0e166e7d8cbf9028945c92d783c284c27a24f549fea87f4301fd250d5e1aac4f38927648301d34781495798e09d9c140","ssdeep":"1536:S2zFi8sTCojQxNFZeADrW5GoRG/UBihTVKoTSaQuE/ha6/C6BsE3HQ94dY+BD3Bl:SgcXkT/0XOTVKoMuE/46a6Bsj9OY6jBl","tlshash":"0c930210f79369e63612150e8d9e8dd254dc6bf4ae34d90131dd6fc0ebcb99bc474889","first_seen":"2026-02-07T00:39:12.136993Z","last_seen":"2026-02-07T09:50:53.828748Z","times_seen":3,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65b1fc0dbfa10/990-990/oven-cleaner-oven-pride-oven-cleaner-500-ml-bottle-bags-for-cleaning-oven-racks-gloves-and-instructions-included-complete-oven-cleaning-kit.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:35.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65b1fc0dbfa10/990-990/oven-cleaner-oven-pride-oven-cleaner-500-ml-bottle-bags-for-cleaning-oven-racks-gloves-and-instructions-included-complete-oven-cleaning-kit.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5WuOw4iaQLocPD65dlYCghC3NbWbAl9JlO8vslxM-Qz0O7yOyxvEjtMuogYbUc0l9ZR2FGkKMc\r\nx-goog-generation: 1706163593167314\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 59784\r\nx-goog-hash: crc32c=573leA==, md5=HnXE5Ux+dozYtgvRXe/NxA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 59784\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Thu, 25 Jan 2024 06:19:53 GMT\r\netag: \"1e75c4e54c7e768cd8b60bd15defcdc4\"\r\ncontent-type: image/jpeg\r\nage: 547\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":59784,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"1e75c4e54c7e768cd8b60bd15defcdc4","sha1":"ad8bd8fc0337cc55cd7ca918cfa39ac72c335329","sha256":"752fb962f3ac85932b25686857537fb22bab91b2f0496b000e6dc94f9e1d7fc4","sha512":"0b34c992b420886b71bab42d2864bfe3a40354b45bd4b41a678093f31808259fce55247d436fcba78ba6c189c40d82d8f457cf47418d64d5bcfab77fd5dd85be","ssdeep":"768:2rU1SPBoKHYSLWnxPPlvAyghmrCu4UZzBT08YdEmqGOkAuKbs/vfllkHUn0KX24o:WVeULYHaygh1h8YdDq5uKbmll2dNB","tlshash":"964302fe04c8808afadd96b46922a4b419f1e77042f1f1e9c6ed223814a476d883e755","first_seen":"2026-02-07T00:39:12.088989Z","last_seen":"2026-02-07T09:50:53.946329Z","times_seen":3,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65b06e690be47/990-990/diatomaceous-earth-food-grade-pure-de-fresh-water-sourced-x-250g.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:36.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65b06e690be47/990-990/diatomaceous-earth-food-grade-pure-de-fresh-water-sourced-x-250g.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5W5LKnrpfrSOsHdWqnj3pRRDCfhiKyhMzTFGmW8OT8tv-3yStklCLLLiW1lU1UNty5VlIn92kk\r\nx-goog-generation: 1706061420243008\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 212907\r\nx-goog-hash: crc32c=9IxMJQ==, md5=Ta4TpdVFuk4MCEGwJrQElw==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 212907\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Wed, 24 Jan 2024 01:57:00 GMT\r\netag: \"4dae13a5d545ba4e0c0841b026b40497\"\r\ncontent-type: image/jpeg\r\nage: 547\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":212907,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"4dae13a5d545ba4e0c0841b026b40497","sha1":"892a3dac6dcdb21c01956f91700d1946f9654426","sha256":"7382fffefc5e3b259473c81f72d078f7341a72d02b6b4467b9a8d5c34d6c9503","sha512":"2e4c9e637aa0e31a69a8ab381130ce846174fe87eb13c496bc1826373f329ff4c7d1b057a9e4a80c0fab51b513bd0577ed4a00505090d38fae986744f381a7e1","ssdeep":"6144:1lUW/OwBtr2Hu5WVbvmGE0KLz4gyakSX28pCAFhtRfH7:nUW/OUtr2OcVbvjEEjSX2M7Xj","tlshash":"99241242b2d0f4533270ab5101c8be956a86f0422f1a5ebf558c69a5ef0f14fe58edb8","first_seen":"2026-02-07T00:39:12.06201Z","last_seen":"2026-02-07T09:50:53.929167Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1334,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1327,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/assets/index-DRgSoRHP.css","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:30.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.tiktokpropp.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 13:40:30 GMT","end":"Mon, 04 May 2026 13:40:29 GMT"},"fingerprint":{"sha1":"7F:66:7F:4D:16:40:F2:BB:67:54:E3:04:98:4E:27:FF:AC:99:5C:DE","sha256":"7B:A6:B6:EA:A6:99:D6:2F:9C:45:7E:39:93:41:5C:EE:62:8C:3A:9E:C5:D0:4A:63:46:DA:B6:99:25:49:4F:A2"}}},"request":{"raw":"GET /assets/index-DRgSoRHP.css HTTP/1.1\r\nHost: h5.tiktokshop.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 00:47:30 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 04 Feb 2026 12:44:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69833f40-48f\"\r\nexpires: Sat, 07 Feb 2026 12:47:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1167,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1166)","md5":"06b93771602fedbaaeca00f18811caf7","sha1":"884cb958a064be2e09641de107de8d421324f58f","sha256":"09ccac2b7d89c874fa7e4c18fb8dbd51d7bab4e6cab1dd3df45917ccf7d02dad","sha512":"fe6b29c63bf0964dc93bb052b0a588aaa4345384ce62cfb723813cb9a4b77912f16fcaabcc8c41c7f6055819634130b483de286cd47ff5380d58249ed7e27cf2","ssdeep":"","tlshash":"4d21e7497ee1d2ff3f6aa624365f96c464380e524fd0c754bd00516098cf9723a32385","first_seen":"2025-04-17T21:25:00.075831Z","last_seen":"2026-08-09T06:30:16.448313Z","times_seen":170,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65ad073a5c84b/990-990/intex-dinoland-playcentre-3-years.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:34.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65ad073a5c84b/990-990/intex-dinoland-playcentre-3-years.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5X4Bcj5lFn2wIvAPrAZQ4Z72FdDkLIUHcjHzLRoPYlkPtf3iDvZnCS_TeuaAe8Z3a1r\r\nx-goog-generation: 1705838409035512\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 134976\r\nx-goog-hash: crc32c=TThFCQ==, md5=VFrt2Sv8mWXq8bqe9nIg/w==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 134976\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Sun, 21 Jan 2024 12:00:09 GMT\r\netag: \"545aedd92bfc9965eaf1ba9ef67220ff\"\r\ncontent-type: image/jpeg\r\nage: 546\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":134976,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"545aedd92bfc9965eaf1ba9ef67220ff","sha1":"5ce0c155fd67f899f7d95e0b7f672c771d549dc9","sha256":"e14b1ad4d794d38ee4be7ffa25b7875067dc94ad6e3d764a3a59599061eee1d4","sha512":"73f8ecf97962c6b14064abd7987adc547f7e0b4a154383f28be43fc3d563cc5a27bdc794c817970c995a1c42de273d5fbca3f9a38039b303337d74188b133f9a","ssdeep":"3072:+rphx1T2n2VJFgGZM+9b5uHu71jhsqXSQMUrej5:onq228VwujsIQ","tlshash":"efd30280c498efc479cd3b1a54c39b637e8bd13b161b1950eba71d0861eb63e9297a34","first_seen":"2026-02-07T00:39:12.182774Z","last_seen":"2026-06-08T22:23:27.665247Z","times_seen":6,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":50,"dns":0,"connect":0,"send":0,"wait":86,"receive":78,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65b4e14d55d19/990-990/lego-76957-jurassic-world-velociraptor-escape.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:34.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65b4e14d55d19/990-990/lego-76957-jurassic-world-velociraptor-escape.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5V-F0JEV3qH-s0Sin7RZ3kjv0xN1Gg8Eq3pDwHwgzM7Soq5a7sAu4LGaldJeBYiUZ7J\r\nx-goog-generation: 1706352982774298\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 316811\r\nx-goog-hash: crc32c=Ttzzhg==, md5=rVzYYnlj2NEgB7qrYH1i2A==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 316811\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Sat, 27 Jan 2024 10:56:22 GMT\r\netag: \"ad5cd8627963d8d12007baab607d62d8\"\r\ncontent-type: image/jpeg\r\nage: 546\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":316811,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"ad5cd8627963d8d12007baab607d62d8","sha1":"ea7ebaac05e92baf6ed0ffc0722e593b4ea876a1","sha256":"bc4707f6857b202b58402813e597d8a1842f05f17523b062b0804d57081fe01a","sha512":"249a4b2f7a8f52ef6d067a59d75889050b136e64cb53a7f191c461211d8470f2a5c88d9a5e05c16c789e442dd4bc00cd935b55de5e5053c19fe20756c75dbe1f","ssdeep":"6144:JVIE64wc14emhnoxbHH2k+k6WExAr/wyZen8rE4L6Fiy94l6W:r64zp+nibHH2kyrxAzwyA4Ka3","tlshash":"b5641289c39b217213359c4e70625f722bb7f033b2966a0f64b611c5ad393621679ff4","first_seen":"2026-02-07T00:39:12.254994Z","last_seen":"2026-02-07T09:50:53.88921Z","times_seen":3,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":88,"receive":127,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65b4062a739bd/990-990/9-day-diet-and-detox-package-by-smug-supplements-weight-loss-plan-with-green-tea-garcinia-cambogia-active-blend-aloe-vera-psyllium-husk-and-low.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:35.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65b4062a739bd/990-990/9-day-diet-and-detox-package-by-smug-supplements-weight-loss-plan-with-green-tea-garcinia-cambogia-active-blend-aloe-vera-psyllium-husk-and-low.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5WBbu4d0gJSrVaGWvhVD92xvC-wU49yj3CBVHujydWpK1RZQqPSU1lBueUAbt-f_V0A\r\nx-goog-generation: 1706296881526123\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 84945\r\nx-goog-hash: crc32c=czN/OQ==, md5=vwLgZH8nrvKdu3nRZVoIcA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 84945\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Fri, 26 Jan 2024 19:21:21 GMT\r\netag: \"bf02e0647f27aef29dbb79d1655a0870\"\r\ncontent-type: image/jpeg\r\nage: 546\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":84945,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"bf02e0647f27aef29dbb79d1655a0870","sha1":"e151b1cced5f5692e53368952b5768d367830420","sha256":"d706aca4dfd23ab3af5ab7601f83c14f8c49f96724adaca32394f7bdb2b278a4","sha512":"b305944eeba4456d16501fb91b3d167fcf95385d0a41902c1e93c861c006fa1c17371c50f6dcc6bd7d05d19757da35e0b38d5fd5e7785424aac763fd5b9d64b4","ssdeep":"1536:xUNQvY7QKJJv2ipKwCFfhUmIqh74eiXLgdvJQLc/oWx3Tn:xUNhTJJv26KddheGkeOwB+qx3Tn","tlshash":"8083013cf21299c42ed0582e1cbd9e6841e6fdf9a5b4c264b94f6cc6d3d4a274c8ac42","first_seen":"2026-02-07T00:39:12.207578Z","last_seen":"2026-02-07T09:50:53.94347Z","times_seen":3,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65b32a0809fa5/990-990/5pcs-40-more-numbing-tattoo-numbing-cream-body-piercing-aftercare-cream-pain-relief-tattoo-tool.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:35.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65b32a0809fa5/990-990/5pcs-40-more-numbing-tattoo-numbing-cream-body-piercing-aftercare-cream-pain-relief-tattoo-tool.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5ViJfNdl86EpbwQFVp8tPu1ftJ-JGALXoWw7GEH2r5SdpHAH-tsca_5X8wck2aLw2Me\r\nx-goog-generation: 1706240688343469\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 184244\r\nx-goog-hash: crc32c=7lJP4Q==, md5=tPDmeZs3cuxzbX8OYuPsUA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 184244\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Fri, 26 Jan 2024 03:44:48 GMT\r\netag: \"b4f0e6799b3772ec736d7f0e62e3ec50\"\r\ncontent-type: image/jpeg\r\nage: 547\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":184244,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"b4f0e6799b3772ec736d7f0e62e3ec50","sha1":"880ed833ea69b93f24ab9e08aef5d54424482805","sha256":"6500857ddd6f691124222afe1844339df7499796270978a92a5c780fb95e9959","sha512":"c01645109d83e1493489854451f732402bf78bbdd832ebf5cf3d3b19af0fe5cc6b0898bb3bbe105accf45bec0367745dcaba565db8d62589cdcba77005950f95","ssdeep":"3072:Xu4hmS3Hg8me0NkvydSmEg9o8WykvcdJTluDkDHNrPXH/TdgFHXDKp/k:Xu4j3HlzNmEg9oenTTrNzGFHXDf","tlshash":"4c041219e601cfd1b1edab5924f39b233683c93b595b8416dae76c01e1c773c00a7ab6","first_seen":"2026-02-07T00:39:12.301341Z","last_seen":"2026-02-07T09:50:53.93405Z","times_seen":3,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65b7de1c1d03c/990-990/2x-replacement-cooling-fan-17-blades-replacement-internal-cooling-fan-cooler-for-3-ps3-slim.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:35.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65b7de1c1d03c/990-990/2x-replacement-cooling-fan-17-blades-replacement-internal-cooling-fan-cooler-for-3-ps3-slim.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5V61CvZYUnHm4zlEuGN4LH5LRGMB_YMokln75NSeSE7uRZ4G8_qWEcpCBG4yr3xFiEH3CY_85g\r\nx-goog-generation: 1706548831994296\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 71596\r\nx-goog-hash: crc32c=4ori+A==, md5=6rtfJOg5tDUbH7AlenkKKA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 71596\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Mon, 29 Jan 2024 17:20:32 GMT\r\netag: \"eabb5f24e839b4351b1fb0257a790a28\"\r\ncontent-type: image/jpeg\r\nage: 547\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":71596,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"eabb5f24e839b4351b1fb0257a790a28","sha1":"726ebbff3a9b3660493a2ddb9e0d9cdbe511468e","sha256":"0e0b5c91feeb7fe3357370ceecedf48f6b1ed8652cb65a014d01ea7e522bbe08","sha512":"9a8f07ad05849fceb6fec96988802e1d07b2b736deb145e1731ab439c9ec8ffc891fdd42e2ef28b7a52779ff09f53d55826950e2df766eec79bba75dabf0f7c3","ssdeep":"768:hciVY/rDPbdoUWY30fx+oCILCdFmS7JEhYktKHK6id57unF93Q2nlkT8R1HryJn1:hcM0r7JkLtCj7mY3HrNF9XnlKONCnNj","tlshash":"6e63f1abae40e9ffc61702f0e30652b6b5826778bc95f04d537c6ea09675c7dbc20248","first_seen":"2026-02-07T00:39:12.059845Z","last_seen":"2026-02-07T09:50:53.928366Z","times_seen":3,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65ab1d8d4b23b/990-990/disney-pixar-cars-polly-pocket-tiny-is-mighty-theme-park-backpack.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:36.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65ab1d8d4b23b/990-990/disney-pixar-cars-polly-pocket-tiny-is-mighty-theme-park-backpack.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-guploader-uploadid: AJRbA5XFMGKS4PhBqtpsYlfGofms9BCuk4pe3WhrCDy4kngEbi3-kzNoe4p-HHwhSIiyX5vZ\r\nx-goog-generation: 1705713056281612\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 99720\r\nx-goog-hash: crc32c=PzWOew==, md5=eERD73mTN54YrGYYRG+cgQ==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 99720\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Sat, 20 Jan 2024 01:10:56 GMT\r\netag: \"784443ef7993379e18ac6618446f9c81\"\r\ncontent-type: image/jpeg\r\nage: 549\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":99720,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"784443ef7993379e18ac6618446f9c81","sha1":"f37d1896c9e5f8facb758658041677301859627e","sha256":"68e914a2a999e7d8d68832a8d9ed86b772a7a9bb622aee3737444cd6606b70e0","sha512":"bce911b6206520d71b9671a59fdaef2d73883d7bcd3674c731f7c9b4cc656e8787738793be439a2bd554868e6c6846507e55eab16bb9b7e0e3dc61a90e31309d","ssdeep":"1536:xilHD35w8SV5Glt9yDdk8nDd9R0wspEzxAID6DnNSbvdabC:xoH68SV5Gf92+2DRysxDUNSvg+","tlshash":"eaa301dafcacec809ae8419c2fdc898a19e896f77dbad151315c1ed8f3d69630464c07","first_seen":"2026-02-07T00:39:12.267669Z","last_seen":"2026-02-07T09:50:53.846694Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1184,"timings":{"blocked":1003,"dns":0,"connect":0,"send":0,"wait":112,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65b01f5005ea9/990-990/2tb-hdd-480gb-ssd-4gb-nvidia-gtx-1050ti-ultra-fast-gaming-pc-computer-i7-10th-gen-32gb-2tb960gb-6gb-nvidia-gtx-1660.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:36.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65b01f5005ea9/990-990/2tb-hdd-480gb-ssd-4gb-nvidia-gtx-1050ti-ultra-fast-gaming-pc-computer-i7-10th-gen-32gb-2tb960gb-6gb-nvidia-gtx-1660.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-guploader-uploadid: AJRbA5Xd-DQiC03Esc5hYcaoYh6uIqElDSE5pQOe5ScBBm2NmYudVSaIGMAhO2sc8a3IRl1c\r\nx-goog-generation: 1706041170885587\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 103763\r\nx-goog-hash: crc32c=D5/C8g==, md5=8+U0++C1so72ynGVXbIW9w==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 103763\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Tue, 23 Jan 2024 20:19:30 GMT\r\netag: \"f3e534fbe0b5b28ef6ca71955db216f7\"\r\ncontent-type: image/jpeg\r\nage: 549\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":103763,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"f3e534fbe0b5b28ef6ca71955db216f7","sha1":"e9d4595da9e470a46c878108fc9b59d4d075dd84","sha256":"c5cac6b77dab23183ad2b1bae1d95e6d51e7f2a50f47e25762173ed42e1c01f7","sha512":"67f549f0fc8a893c309e6eda9ed4da122391ab00af53024fda9d460c9c2b282948f0b734315bc65ef7164f803859b010f23c82b3cac689302b0733b4396b1282","ssdeep":"3072:5xrTt0Iw88XHchLuFEp+Fq9HjQd6f0jnHx5V:r10TBMhLuFg+Fq6AIHxr","tlshash":"f5a30246f12f82c35464546f7e6ca965248912f52ebdcbc274ac8fedc7cdb9314128ac","first_seen":"2026-02-07T00:39:12.101224Z","last_seen":"2026-03-05T08:37:15.320242Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1132,"timings":{"blocked":957,"dns":0,"connect":0,"send":0,"wait":110,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/assets/index-DK-_bQDv.css","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:30.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.tiktokpropp.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 13:40:30 GMT","end":"Mon, 04 May 2026 13:40:29 GMT"},"fingerprint":{"sha1":"7F:66:7F:4D:16:40:F2:BB:67:54:E3:04:98:4E:27:FF:AC:99:5C:DE","sha256":"7B:A6:B6:EA:A6:99:D6:2F:9C:45:7E:39:93:41:5C:EE:62:8C:3A:9E:C5:D0:4A:63:46:DA:B6:99:25:49:4F:A2"}}},"request":{"raw":"GET /assets/index-DK-_bQDv.css HTTP/1.1\r\nHost: h5.tiktokshop.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 00:47:30 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 04 Feb 2026 12:44:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69833f40-410\"\r\nexpires: Sat, 07 Feb 2026 12:47:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1040,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1039)","md5":"6c89e66735dfa95a149eee5490eb53ed","sha1":"b9ed3de43927e0ce82ce7618d100146193075d4b","sha256":"cf35880b6592d870a7e8a773fa20d83166a8fb9294c4f4c8d9f0f70ebc7ff7fa","sha512":"8b757f36fbbcb5059f59f2cba024152141418b832ff4075607640db1cf1a027c1b40cdd345f4b3303dc6151aacb30e54f0698337f35fa6095949a78fa293f2b3","ssdeep":"","tlshash":"1811ae453e52e1b4bf5af958af1785ccf53f1aa0da00c2d1a881851048cf3f66b2b2a4","first_seen":"2025-06-22T21:43:27.208405Z","last_seen":"2026-07-20T04:32:23.612021Z","times_seen":50,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/assets/filter-B2uSLGeZ.js","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:31.280Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.tiktokpropp.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 13:40:30 GMT","end":"Mon, 04 May 2026 13:40:29 GMT"},"fingerprint":{"sha1":"7F:66:7F:4D:16:40:F2:BB:67:54:E3:04:98:4E:27:FF:AC:99:5C:DE","sha256":"7B:A6:B6:EA:A6:99:D6:2F:9C:45:7E:39:93:41:5C:EE:62:8C:3A:9E:C5:D0:4A:63:46:DA:B6:99:25:49:4F:A2"}}},"request":{"raw":"GET /assets/filter-B2uSLGeZ.js HTTP/1.1\r\nHost: h5.tiktokshop.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/assets/index-Sgi5eB1f.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 00:47:31 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 87\r\nlast-modified: Wed, 04 Feb 2026 12:44:48 GMT\r\netag: \"69833f40-57\"\r\nexpires: Sat, 07 Feb 2026 12:47:31 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":87,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"cf4ab7c5993ad7e1c3f0b7a7858035b7","sha1":"d7c1edb99c8fd1065433f3518778c6252345943b","sha256":"aee8289dc882c12ec0e0c69482ba9392c85f5a25e05439f921fa40201cc61f62","sha512":"c22765557daffcbcbece9922407a3a6989cd9b28f8fde8cf47be7f8d5814f5d52801a3f64106c5d97e0e67242814a451717ac0afde931b7bc6271fb3a8fc2320","ssdeep":"","tlshash":"72b01245315021520200301880566836c264caa0037a4f32c913a19317304242045f89","first_seen":"2025-10-17T22:05:01.117066Z","last_seen":"2026-06-08T22:23:27.753022Z","times_seen":7,"resource_available":true,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/9be05e1b8808434d95692cbe349214d3/990-990/grip-strength-tester-396lbs180kg-digital-hand-grip-strength-meter.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:34.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/9be05e1b8808434d95692cbe349214d3/990-990/grip-strength-tester-396lbs180kg-digital-hand-grip-strength-meter.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5VP-A3Rjc6JIfe6IMqR8XXUUbyoCCjeQvIlmPFtOybbfXocm-aRoYSlAwtPblF2FyYR\r\nx-goog-generation: 1713879540305349\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 212223\r\nx-goog-hash: crc32c=b+ncfg==, md5=El3M/vF1JZeU45AunZzoDw==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 212223\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Tue, 23 Apr 2024 13:39:00 GMT\r\netag: \"125dccfef175259794e3902e9d9ce80f\"\r\ncontent-type: image/jpeg\r\nage: 546\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":212223,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"125dccfef175259794e3902e9d9ce80f","sha1":"dae0df0fade427435f0da79ffe31e4bea0f6929b","sha256":"75e589fc66c1e5c666527edde6a87f22b5f08f4697a00ef391cf3c6ef7da82c7","sha512":"1a2d8b3d5de40c90bd0f8dc12a01f936cb8fc61efd719ea1698fa3d017c5a47b50f254ca92f7563d0d9b34da9e2519b81ba7ec40eb99d2bd780ca2b2596833f1","ssdeep":"6144:Xooa/pJZNbExsQBuoGOfJsHJzLdfwAPdSda:YL/3Pbu3BNGOwzoAPdSg","tlshash":"6b24125e46046ab7f3d9ce64bbc3c45f552fc21e83b01d19da6f90c77068e6cc468aa2","first_seen":"2026-02-07T00:39:12.229386Z","last_seen":"2026-03-05T08:37:15.257137Z","times_seen":4,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65b1ab5e234eb/990-990/summit-funny-face-super-bouncy-balls-24-ball-merchandiser-pack.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:35.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65b1ab5e234eb/990-990/summit-funny-face-super-bouncy-balls-24-ball-merchandiser-pack.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5WwvYoXL-1TK38y-m5580npM4grU2pQL2wVi-CTBnX61SaRXohVz4f_1-vN_v54NuLz5CThmts\r\nx-goog-generation: 1706142745865715\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 196454\r\nx-goog-hash: crc32c=w51ABQ==, md5=jQyYBDYw7AwFqjV5S6qgLQ==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 196454\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Thu, 25 Jan 2024 00:32:25 GMT\r\netag: \"8d0c98043630ec0c05aa35794baaa02d\"\r\ncontent-type: image/jpeg\r\nage: 547\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":196454,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"8d0c98043630ec0c05aa35794baaa02d","sha1":"2967993ae30e1676a701cd5184a5dcc291b28524","sha256":"32c91b383692f981cd32c5ad494c8fafb5accf92e5a4f89ee4417adb3e5f6dba","sha512":"dc38d93710a2713fbe1b9da806814ef677f05956321047bcb1ddec670dbac42f6091d1339c79b9a5bf6ef2536d3324186a89d95c84786d8625422bb70f359eba","ssdeep":"3072:bht4cUIahf1Jg4OUk5QZCnBxNosA3mxAKBQfTZs9kdG9WdOap6x9udNQ+pS:NOcUIaj3YQIfWssE9kN3Uap6x9udNdS","tlshash":"e314126a6a23cfe8f9dd1399e0cb171b74abc8772d2b5470125b451292c7b7e8b07834","first_seen":"2026-02-07T00:39:12.264965Z","last_seen":"2026-06-08T22:23:27.808302Z","times_seen":6,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65bac7869f94e/990-990/cream-l-men-long-sleeve-stripe-cable-knited-cricket-jumper.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:36.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65bac7869f94e/990-990/cream-l-men-long-sleeve-stripe-cable-knited-cricket-jumper.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5X1lQBBPNzJVetMsjkoOVvg5LaRI2L5SfvEsl1dVJO14SjFbFqPiL002skohQYG0GbP5ZzXHBQ\r\nx-goog-generation: 1706739616790730\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 409231\r\nx-goog-hash: crc32c=6G5KNg==, md5=tGAlh7yneIhDpvioNbaFRA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 409231\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sun, 01 Feb 2026 02:52:51 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Wed, 31 Jan 2024 22:20:16 GMT\r\netag: \"b4602587bca7788843a6f8a835b68544\"\r\ncontent-type: image/jpeg\r\nage: 510884\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":409231,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"b4602587bca7788843a6f8a835b68544","sha1":"26b8acc0adbcf65a34421b2c89b9843c273b3d9c","sha256":"ff23caa45ac587f6750d9bee33cfe2f9411d5d0c20ff3cb8068f57c3f4351c16","sha512":"cf57336145efdd68a58eff46af3e7bc92f56b22b9f289596903f094943a2b998ccdcaaaa3d6e681c22148d1f069a92a48abc13a142fc66c2a92e27bc004d99c1","ssdeep":"12288:v21Wy65eXbzNY6uaZAjf/B6IHAQ1riACvg:v8WDeXbzi6u3jh4QYJg","tlshash":"6c94efd0d7b921eab7ea2a6eeffbfe183c712507c358375b2d066074e65d0466782012","first_seen":"2026-02-07T00:39:12.05471Z","last_seen":"2026-06-08T22:23:27.669032Z","times_seen":6,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/assets/product-BC8WZLBv.js","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:31.274Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.tiktokpropp.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 13:40:30 GMT","end":"Mon, 04 May 2026 13:40:29 GMT"},"fingerprint":{"sha1":"7F:66:7F:4D:16:40:F2:BB:67:54:E3:04:98:4E:27:FF:AC:99:5C:DE","sha256":"7B:A6:B6:EA:A6:99:D6:2F:9C:45:7E:39:93:41:5C:EE:62:8C:3A:9E:C5:D0:4A:63:46:DA:B6:99:25:49:4F:A2"}}},"request":{"raw":"GET /assets/product-BC8WZLBv.js HTTP/1.1\r\nHost: h5.tiktokshop.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/assets/index-Sgi5eB1f.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 00:47:31 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 526\r\nlast-modified: Wed, 04 Feb 2026 12:44:48 GMT\r\netag: \"69833f40-20e\"\r\nexpires: Sat, 07 Feb 2026 12:47:31 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":526,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (525)","md5":"c194acf9ef80e6c493c0cd34616af121","sha1":"3dbfab242999257a9af65d07ebd6b9a48973322b","sha256":"4fc4d9469a365e15a703820523d07a7e2ffb2388c4a88bc2335842735c1c650d","sha512":"4bc1f9ab08883d786acc51a192da9720007e13cac1644169377a60a7b8edc3bbc6c3a22dbe9977b956b0a0ef3df49ba6302aa187fc047cc6f5f931475a5a774a","ssdeep":"","tlshash":"53f0bb89e673f4630316c03594de257ba9bd82929cfd0d21ad00d1977c78d79722a9cd","first_seen":"2026-02-07T00:39:12.069033Z","last_seen":"2026-02-07T09:50:53.895103Z","times_seen":3,"resource_available":true,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/9bacbb250f4e4f35ba075f11ed698444/990-990/flymo-simplimow-320v-wheeled-electric-lawnmower.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:34.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/9bacbb250f4e4f35ba075f11ed698444/990-990/flymo-simplimow-320v-wheeled-electric-lawnmower.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5XoLleBtzpvP84nRN-JvplSfgNeygyDq-r3xe34IvCJ_LDvy-3d4J-91MdyeKW9dpNq\r\nx-goog-generation: 1711661768530494\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 66390\r\nx-goog-hash: crc32c=Zstt4Q==, md5=AV/O619G7rqyq4n7u6trLg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 66390\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Thu, 28 Mar 2024 21:36:08 GMT\r\netag: \"015fceeb5f46eebab2ab89fbbbab6b2e\"\r\ncontent-type: image/jpeg\r\nage: 546\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":66390,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"015fceeb5f46eebab2ab89fbbbab6b2e","sha1":"1261cbdadb7c24e9c51ea384b889fb786b6964e9","sha256":"99ad3ddf9ba15c7f9a77f435de109b4a9db6ab1d75dabdb3fd12c4e99bd95180","sha512":"0115740239a63f66ca05c667de7d43556cf5a6996a080805aa277f61ae949de909dabde8f9c73ca6852084a5f919855e72ef2c4d123c4de27fdf682270788f44","ssdeep":"1536:Znyyp2PwWsWJelg/6fphr8nT7HgMhzF324iTxnb:ZyfPckupinT7P/32BTZb","tlshash":"3153f1b1a3e5d03df76ed97aaf205321ddaf3114fe8d588b23d4292d201e915a88e318","first_seen":"2026-02-07T00:39:12.193723Z","last_seen":"2026-02-07T09:50:53.920245Z","times_seen":3,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":60,"dns":0,"connect":0,"send":0,"wait":86,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65b36bccb9705/990-990/lego-friends-vacation-beach-house-set-41709.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:35.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65b36bccb9705/990-990/lego-friends-vacation-beach-house-set-41709.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5VOkbR-xTWs2Dr-mU91qxZQnaCIqQfAZhC1-K-0Y581qefsXrq-T-ZFWPuQq2IMAXKX\r\nx-goog-generation: 1706257371303488\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 298747\r\nx-goog-hash: crc32c=0W9Gmg==, md5=uKvXpCh/P/3esPXP7hBKNg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 298747\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Fri, 26 Jan 2024 08:22:51 GMT\r\netag: \"b8abd7a4287f3ffddeb0f5cfee104a36\"\r\ncontent-type: image/jpeg\r\nage: 546\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":298747,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"b8abd7a4287f3ffddeb0f5cfee104a36","sha1":"f7a75844da9dbd96e935ed6dda014f01bc3e5e23","sha256":"3b9ad1c4b738c2653929472fcdce947db99b6d4b4e4ddbb24a15699310f45a94","sha512":"87e5527ce8063db15ecc4a528c6411350dedab674514364514a285d5d50673bc032ad0ff9cdc1dddb389d5e032f2dd7efb059be9727dd4b01e9fe326436347e6","ssdeep":"6144:LFTKq7ayXtC2ww/Lqu5OYUDRx65GGANjEL8Tk9Dq/:xlWy9C2MgOYyPGojq8/","tlshash":"1f54131507235ef7a1ea3a695e1c1a90f5a3ecbeeed88c1101e3b534b2d772542c2739","first_seen":"2026-02-07T00:39:12.1357Z","last_seen":"2026-06-08T22:23:27.745157Z","times_seen":6,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65b29884d3d6b/990-990/zysd-puppy-toy-with-heartbeat-puppies-separation-anxiety-dog-toy-soft-plush.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:35.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65b29884d3d6b/990-990/zysd-puppy-toy-with-heartbeat-puppies-separation-anxiety-dog-toy-soft-plush.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5UDJQRs_ggjk8ZlAebbN4IsVEDQhBFu3AJ1bJsIw9FC-p3Bx0n_mE7IpPYaw9qEx6vvqX6KP5g\r\nx-goog-generation: 1706203273883341\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 114883\r\nx-goog-hash: crc32c=VB/zGQ==, md5=uoV6bd+AZz3aJVpi2zY5sw==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 114883\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Thu, 25 Jan 2024 17:21:13 GMT\r\netag: \"ba857a6ddf80673dda255a62db3639b3\"\r\ncontent-type: image/jpeg\r\nage: 546\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":114883,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"ba857a6ddf80673dda255a62db3639b3","sha1":"cb9074439d0c5e710e2a5f56ebe1725f7ebfea85","sha256":"e9dd7e1fe32cf99f7edbb2205eec1c519cd7af35b1f04a3bbe8e4442172fd35e","sha512":"99ac331f07e5187bc251dde80c697295e30ca87bda48dd76f25a3ec491420ef02d0cd825e84dd0bcd7cfb715d986ce2d369394e29cd1e359e4f18d66d1a5cf5a","ssdeep":"3072:J75PQF01EOyKT0QNKw4rb9VvUL65k+YdHM:ZOGaOhgM6vV2HM","tlshash":"0bb301aef4011994b460904d6c1d36ac23bedaf98a3fc58537ec1efcd7de45b891806a","first_seen":"2026-02-07T00:39:12.18955Z","last_seen":"2026-06-08T22:23:27.742947Z","times_seen":6,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65b628d802b3a/990-990/white-samsung-galaxy-s22-ultra-5g-dual-sim-128gb-8gb-ram.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:35.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65b628d802b3a/990-990/white-samsung-galaxy-s22-ultra-5g-dual-sim-128gb-8gb-ram.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5UagEZKAdKN_KmuqT-UN8Gab-vXu61rw7cUHOZG3g1E2840zuHICWS0DBYnKykXO4Gg\r\nx-goog-generation: 1706436843915940\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 155782\r\nx-goog-hash: crc32c=vM21ew==, md5=6W2NLhjaDGin/KtvlqCmPg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 155782\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Sun, 28 Jan 2024 10:14:03 GMT\r\netag: \"e96d8d2e18da0c68a7fcab6f96a0a63e\"\r\ncontent-type: image/jpeg\r\nage: 547\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":155782,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"e96d8d2e18da0c68a7fcab6f96a0a63e","sha1":"7f9ff17f0849930a9b4d0275a92158cc32c63200","sha256":"da90713415e3174a01303754cf711a5822828e4d6f005e5673e3c33561aed61b","sha512":"47ea3d7694a2e531821f275b87f71ca0f6d9375cc030d6312a22e87a305af3c07f1af1f3bec3e89cade92bb9dce1c9fdfd19d1317947cd5fd5dd931305634659","ssdeep":"3072:OAjIgXDsQabpm4B6DW3qAn+nPmYLhwPZPlpSadT5DAfJMydgltgV0P:OEIgKxBmWn+hhMZPlpnhAfey6luV0P","tlshash":"28e30126889112b4f7e5ec15b3c755ab028f672d13302c494b8329cff125f9ce5a59ea","first_seen":"2026-02-07T00:39:12.153686Z","last_seen":"2026-06-08T22:23:27.821836Z","times_seen":6,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65b1f2108529b/990-990/viii-52-intel-i9-11900f-rtx-3070-ti-32gb-ram-1tb-nvme-m2-win-11-wifi-24-monitor-bundle-vibox-viii-gaming-pc.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:36.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65b1f2108529b/990-990/viii-52-intel-i9-11900f-rtx-3070-ti-32gb-ram-1tb-nvme-m2-win-11-wifi-24-monitor-bundle-vibox-viii-gaming-pc.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-guploader-uploadid: AJRbA5UfSd67U2ytsMPanbFDYY3Ha5a09dFwSog__aeKK55LgZKj-GkhDetHrABGcB5hp68c\r\nx-goog-generation: 1706160704577453\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 278859\r\nx-goog-hash: crc32c=tPlMWw==, md5=lZmKM6auaywHuLzzj6ibQg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 278859\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Thu, 25 Jan 2024 05:31:44 GMT\r\netag: \"95998a33a6ae6b2c07b8bcf38fa89b42\"\r\ncontent-type: image/jpeg\r\nage: 549\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":278859,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"95998a33a6ae6b2c07b8bcf38fa89b42","sha1":"75b934bb64dfd090485a28c136bf9fa7dc5b7c83","sha256":"024b5c8bdd084a997ca02e418e23e9efbaed94b6e4cfa2e00b41cabf446f39fd","sha512":"c8d1b93dec1ff4c93c4364772326c9600e08c890f7a74aa916547c0dc66376802d712309ea0fe5265f0f302b01b7339fd971618c3494c64c6d765a7f33f655ef","ssdeep":"6144:Oi7JO19JiSD0xg7NUAOOVYXWW9m8g997qxy40JOOfyuIqewH383I:js5HoOVCWWTg9YMkOfzIyH383I","tlshash":"c554125a672343f3a6c476a1bc6e6920f583ce3cd1c12c6554cffab98657bb223508b4","first_seen":"2026-02-07T00:39:12.102473Z","last_seen":"2026-03-05T08:37:15.304047Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1159,"timings":{"blocked":955,"dns":0,"connect":0,"send":0,"wait":119,"receive":85,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/assets/index-BNtJKrO5.js","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:31.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.tiktokpropp.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 13:40:30 GMT","end":"Mon, 04 May 2026 13:40:29 GMT"},"fingerprint":{"sha1":"7F:66:7F:4D:16:40:F2:BB:67:54:E3:04:98:4E:27:FF:AC:99:5C:DE","sha256":"7B:A6:B6:EA:A6:99:D6:2F:9C:45:7E:39:93:41:5C:EE:62:8C:3A:9E:C5:D0:4A:63:46:DA:B6:99:25:49:4F:A2"}}},"request":{"raw":"GET /assets/index-BNtJKrO5.js HTTP/1.1\r\nHost: h5.tiktokshop.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/assets/index-Sgi5eB1f.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 00:47:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 04 Feb 2026 12:44:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69833f40-1418\"\r\nexpires: Sat, 07 Feb 2026 12:47:31 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5144,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (5143)","md5":"8a4defa93d51aa12b6e7cc8e143be44f","sha1":"c41bc81ff3bf77755d8b543bdd8870f66015a460","sha256":"22dff1e04f3eb90f3777e037643433d1107b3fc5d391f67527de53fb54e0fb67","sha512":"cdc7ba9539c0f8db93072d3aa4e07c0587ec4fdcd8f458f7e63b47b4708bc5ec5d7f4659e186f8c392dd8742c011e2030321b6f8ef8478231b05d3c20f80d080","ssdeep":"96:eTZapIpPWBXa/uhi7VcbHvX25csbPaqUvYMjXf3BOIS07n9uAt6z6Ym5uFV:WZajJagiRUf2bbPDUv7LfQIdt6bm0FV","tlshash":"60b1c6d27080bdb7c339aacc506141e0976e57e03026c6e9b06f5f032509cf8a2faa4a","first_seen":"2026-02-07T00:39:12.204053Z","last_seen":"2026-02-07T09:50:53.926725Z","times_seen":3,"resource_available":true,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/9bd3e9ab6151481abd948572d337b89d/990-990/large-sons-of-anarchy-sweatshirt-mens-grey.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:34.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/9bd3e9ab6151481abd948572d337b89d/990-990/large-sons-of-anarchy-sweatshirt-mens-grey.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5W-Pn61iVio_29kZjJowRGN_TiBtgsxQpX5I1mpKXc4WLm-kYDTjow9BflXxitVBKlK\r\nx-goog-generation: 1713344792500687\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 198560\r\nx-goog-hash: crc32c=2/eJvQ==, md5=KXYQs1C1HCF5Z6lm4XwgEg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 198560\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Wed, 17 Apr 2024 09:06:32 GMT\r\netag: \"297610b350b51c217967a966e17c2012\"\r\ncontent-type: image/jpeg\r\nage: 546\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":198560,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"297610b350b51c217967a966e17c2012","sha1":"ab93ee97fcb0b65966b76411831fed320ace7612","sha256":"3de1414cea1f45ce2f3258b48061f74780818d22991c19afdba26cf08d4c3ff6","sha512":"aac3a94ba200595a324a0e14e146d2795a5d1d50036db0895e14df256cce8699a9ef5452e702963df5d606e17811f6a6025a0ba2063a1b4cbc05085fa56ae107","ssdeep":"6144:NWwh54CHBgawAH/DZmDJbfCDl+v8ZDgVXxdsb/0JG:owh54CHBg+74JbfCQwmhdP4","tlshash":"3714121a55240435f7dceead77e36e478dff19700bb45c682b876ce304a6d2ee086942","first_seen":"2026-02-07T00:39:12.236106Z","last_seen":"2026-02-07T09:50:53.832944Z","times_seen":3,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":89,"receive":94,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/9b96c55a3d174f619299e33976015d6f/990-990/nike-logo-black-mens-long-tube-socks-569851-101-uk.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:35.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/9b96c55a3d174f619299e33976015d6f/990-990/nike-logo-black-mens-long-tube-socks-569851-101-uk.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5W26IbC-WfFB6R0211DFIfOgHLdfJWo2if85c1IzIN-pm4YP2NdOI60YfQHlyJnwkqt\r\nx-goog-generation: 1710718586902075\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 58974\r\nx-goog-hash: crc32c=5MjIxw==, md5=6qoIHRCan4v2K9RZGfXe3w==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 58974\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Sun, 17 Mar 2024 23:36:26 GMT\r\netag: \"eaaa081d109a9f8bf62bd45919f5dedf\"\r\ncontent-type: image/jpeg\r\nage: 547\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":58974,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"eaaa081d109a9f8bf62bd45919f5dedf","sha1":"5dbad111e01dcfd14603a6088d5687dd425d34e2","sha256":"53a3788e1a88173a8125c9a6563521f4f5e2a9c81eaaecd773e401417b8a0699","sha512":"338211505976b8982379737983eb8d5cfbb968491407fdf83eee92766cf1315ce944d07479a781f37f5225045b2a173a7e6086af2193eb79e887d92481751cff","ssdeep":"1536:DNYtagb2rsENt9G8vHJRQufg8GqhrAk5bxJ:Dqtb2rsErvH1fLr1Nv","tlshash":"8843f20627d218dac383937d67a1d5c673d2ac6432efb58e956b503456c2adfbc042b2","first_seen":"2026-02-07T00:39:12.087205Z","last_seen":"2026-02-07T09:50:53.927609Z","times_seen":3,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65b19541a68d2/990-990/aloe-vera-10000mg-x-120-tablets-skincare-colon-cleanse-digestion-detox-vegan-uk-aloe-vera-10000mg-tablets-high-strength.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:36.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65b19541a68d2/990-990/aloe-vera-10000mg-x-120-tablets-skincare-colon-cleanse-digestion-detox-vegan-uk-aloe-vera-10000mg-tablets-high-strength.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5XI6M2vHc69YgJC5wQf5hq7hKHh2ev2ha7tm-BB1TJ1jfddnCk3ybFlWQrx1zAwiGftxcpgvrM\r\nx-goog-generation: 1706136906675580\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 95666\r\nx-goog-hash: crc32c=6RzTZg==, md5=IzfE7dHP8B7/iu33EYt6vQ==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 95666\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Wed, 24 Jan 2024 22:55:06 GMT\r\netag: \"2337c4edd1cff01eff8aedf7118b7abd\"\r\ncontent-type: image/jpeg\r\nage: 547\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":95666,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"2337c4edd1cff01eff8aedf7118b7abd","sha1":"ea0db3c8c5fa7db09f6d16e94cdfb77f11110736","sha256":"18c444c4e442be065e1642a3c43926c126f798163988c904408aabf697163cec","sha512":"db212c2dfb0b385a3d9ec4c3b16082b8c6dd339d46692ac3bd163bd9fcd4523efa970bf696196a60369110a016e56645552983c3a45e62456d2dc4cca295ee17","ssdeep":"1536:cBRAZ0YuT5miOLi/drHkOEEewMXECLhS1Lid35MmQH9W6Q3bsA4GQP:cBRAiYq9EYyOLWXHgipgdW6Q3bsAK","tlshash":"1f931201b89652d3fd60291d91416866bff8410cb628f8f630f25af7681b84d3ff955b","first_seen":"2026-02-07T00:39:12.082304Z","last_seen":"2026-06-08T22:23:27.653747Z","times_seen":6,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65b2ea0a963fb/990-990/iiyama-interaktives-touchscreen-display-prolite-t5562as-b1-140-cm-55-3840-x-2160-4k-ultra-hd.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:36.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65b2ea0a963fb/990-990/iiyama-interaktives-touchscreen-display-prolite-t5562as-b1-140-cm-55-3840-x-2160-4k-ultra-hd.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-guploader-uploadid: AJRbA5VquHhk2MQz0Bz9ODEMD-EO0NOHA8yxnlkMs1OnZTKRcHnnRymsT2NDfjqlxMnyQXeMTc8WK-8\r\nx-goog-generation: 1706224143045937\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 33823\r\nx-goog-hash: crc32c=Eb46zQ==, md5=BR2ctNDgl0k2OTx/VZSdLQ==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 33823\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Thu, 25 Jan 2024 23:09:03 GMT\r\netag: \"051d9cb4d0e0974936393c7f55949d2d\"\r\ncontent-type: image/jpeg\r\nage: 549\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":33823,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"051d9cb4d0e0974936393c7f55949d2d","sha1":"1e5c33ef248b5bba780f71c95477035bede6bb36","sha256":"b1f0f60b95a11b42e5cf2b432fa675ec2d3e72ea942a0b8e53507dae07601ec2","sha512":"8e09c5f6e52262ee1f15674c1b7d11c4f5b7ee8387809c2d332c69719ce19861943a96146189cb2c3ff6966f147a87f9d5bfe8f91adcc27bbd9946069d6bed56","ssdeep":"768:PnEADsGHvT2OGaGvWiZ7o5E4cdSgOhBTujt:PF8OGa+WiZo5E4c7wW","tlshash":"81e2e03117aabad2f57579b6603f5e8090f18f15d2c1cbeb9089ecb027313a53620eb4","first_seen":"2026-02-07T00:39:12.227336Z","last_seen":"2026-03-05T08:37:15.319295Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1105,"timings":{"blocked":956,"dns":0,"connect":0,"send":0,"wait":116,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65b989f17dcdb/990-990/jump-rope-cotton-adjustable-skipping-weighted-jumprope-for-women.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:34.512Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65b989f17dcdb/990-990/jump-rope-cotton-adjustable-skipping-weighted-jumprope-for-women.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5X7bBLQ_uT4wrFSW_jCc_w9OhgJRPrEQuMFBaUwLFTmYmnKcBRT8mnENGETNvapxgaUj5pOLEI\r\nx-goog-generation: 1706658295227495\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 850920\r\nx-goog-hash: crc32c=FI7wsw==, md5=hX3wBEApIP1RWr++udKERw==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 850920\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Tue, 30 Jan 2024 23:44:55 GMT\r\netag: \"857df004402920fd515abfbeb9d28447\"\r\ncontent-type: image/jpeg\r\nage: 546\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":850920,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"857df004402920fd515abfbeb9d28447","sha1":"e0d2346270279a5f5e8272dfb42785003f705a41","sha256":"b2ca8e24a4566abd6852f25df340b9b9369b8b8e9db0431ffbd9e7917bbdb372","sha512":"01ddd0242110585ec007f067c61c07736077a292b1e54dfd6877a41dbc621a1e9b52ef4df3bd9cea4d9816e0d30fdb87814afb7f8134ac6ec3360e4df3e91042","ssdeep":"12288:rZg4nUb9zPU3DrShSTpthd7YUFkV9Jobg/SdSC6qkVc8ktGh0eqE/SD:1g0GPQoS9BYUKH2S9q98ktGhPjo","tlshash":"540501f67bd20ac58c8b2f3247f145d4bc1f69b467e8e643c34068188f8658797389ba","first_seen":"2026-02-07T00:39:12.127478Z","last_seen":"2026-02-07T09:50:53.853621Z","times_seen":3,"resource_available":false,"data":null}},"time_used":401,"timings":{"blocked":69,"dns":0,"connect":0,"send":0,"wait":64,"receive":268,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65b88eeccc119/990-990/grey-k-mart-smart-weighted-hula-hoop-pro-with-counter.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:36.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65b88eeccc119/990-990/grey-k-mart-smart-weighted-hula-hoop-pro-with-counter.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-guploader-uploadid: AJRbA5WUra1kvKFxok7VL3-e_YjFiNOpNvjU87AxgqacYXnyMX-UFRQN3Xk9S6TDqZRGJx9eonG9LWs\r\nx-goog-generation: 1706594037501756\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 116276\r\nx-goog-hash: crc32c=2EO8ew==, md5=JOW8p3URrrwEr24twdL/rg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 116276\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Tue, 30 Jan 2024 05:53:57 GMT\r\netag: \"24e5bca77511aebc04af6e2dc1d2ffae\"\r\ncontent-type: image/jpeg\r\nage: 547\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":116276,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"24e5bca77511aebc04af6e2dc1d2ffae","sha1":"f10334a217909eb1a7f9fca68ee5b80ef77a3a7f","sha256":"cb62dff18258f7b5d9f4c8fd168007d02bdc6f64c02265547546668ef74de06b","sha512":"1cc56862b63bb131a688dff34b83d5cbf50e2ae87005e5187c3061366b6f2a64caca838455d00ae076c95da61e6e330a5a65c3a5d3c9cfe814b3de32c138b661","ssdeep":"3072:39DeOX/qE53fLYqwgQgMAiZmpm4LURzjZeX:NDbJ5PLVwgQyiZmYzSX","tlshash":"61b30249f1a00ad9b2a60f9edd3c5f5566e940f968b4cc41b3ae1dd0ebce0a7494025f","first_seen":"2026-02-07T00:39:12.283035Z","last_seen":"2026-02-07T09:50:53.94093Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1499,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1341,"receive":158,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65aeed22d15af/990-990/ultra-fast-gaming-pc-intel-core-i5-16gb-ram-2tb240gb-hdd-2gb-gt1030-w10.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:36.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65aeed22d15af/990-990/ultra-fast-gaming-pc-intel-core-i5-16gb-ram-2tb240gb-hdd-2gb-gt1030-w10.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-guploader-uploadid: AJRbA5UgP8d-FBzolBR21Mb2UfHjVJcoaRFC61IU_EL9CIxOUPPUc7lSFeyG1KWqSrv0fwUSaPdo9tc\r\nx-goog-generation: 1705962843079811\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 60451\r\nx-goog-hash: crc32c=j5CjhQ==, md5=sYmWoz1+gN7kGQr4kMNTlQ==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 60451\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Mon, 22 Jan 2024 22:34:03 GMT\r\netag: \"b18996a33d7e80dee4190af890c35395\"\r\ncontent-type: image/jpeg\r\nage: 549\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":60451,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"b18996a33d7e80dee4190af890c35395","sha1":"fcb61dc6ed5f4ab4877e8d984600fdea3947ad15","sha256":"83f1fb02845a8f596052f6e43a0124af681947c7a8f42511964786b3f28e1be5","sha512":"d25920a3198b95b1f20b5e6410f60710a3739e945abe9f67be7df88af32f33e75f83a28fd04da2dc53433ed8c63cfe07c7f81cc0a83af383af8dab0a57da75e9","ssdeep":"1536:q8qXGEVj5BMrDyTHhosJwGX6EYQQlpXcJDbQDr:q8QjUrO9ZdcHIDb0","tlshash":"9043f2c8be24b5dbfb0e5a7966277580dced2aec4e41442606f8471e4b44a53bcb18f1","first_seen":"2026-02-07T00:39:12.103709Z","last_seen":"2026-03-05T08:37:15.298675Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1105,"timings":{"blocked":957,"dns":0,"connect":0,"send":0,"wait":114,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65b28fcd8fdc8/990-990/lg-32lq63006la-32-inch-full-1080p-hd-active-hdr-led-smart-tv.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:34.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65b28fcd8fdc8/990-990/lg-32lq63006la-32-inch-full-1080p-hd-active-hdr-led-smart-tv.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5WmqtiLGMeqE3AgThcEVbmoJGRsMg4R6AvhGIRBaC8IQpmZ81W-RqmplcaoAjdApjMu2El1nEE\r\nx-goog-generation: 1706201460715432\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 54637\r\nx-goog-hash: crc32c=zZIRMQ==, md5=uLllkEl0sanylodJqDyVtA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 54637\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Thu, 25 Jan 2024 16:51:00 GMT\r\netag: \"b8b965904974b1a9f2968749a83c95b4\"\r\ncontent-type: image/jpeg\r\nage: 546\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":54637,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"b8b965904974b1a9f2968749a83c95b4","sha1":"67b8d9ece86e3084ea45e1520ae31070bfde455f","sha256":"8e1453d2cb0d0301ec17abeccb7b650d9d2098334721ed53a79ae98da6693069","sha512":"9391f1401c73186581df899b0f087c5db8d9a2861a290f7805abd22da10bd4f9503a57259ebbbab9af1697e3216f8da221162e34adbb9c220e813f90eff525fb","ssdeep":"768:sFC7bjPRxLpFba0tzZaQ5tNEZMfJKR0GncniXbfQsPkpIDLY239kS2NHGk:gWjPRhZ0Q5t+AJKR9ai0r4LntkSSHZ","tlshash":"5c33e121205e245bfd1664fbf01ccdf9b7cd2c686a21287dc4e090bd525eab6bf590c5","first_seen":"2026-02-07T00:39:12.244268Z","last_seen":"2026-03-05T08:37:15.32445Z","times_seen":4,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apisss.tkshto.cyou/api/index/banner","fqdn":"apisss.tkshto.cyou","domain":"tkshto.cyou","tld":"cyou"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:31.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apisss.tkshto.cyou","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 06:22:01 GMT","end":"Mon, 04 May 2026 06:22:00 GMT"},"fingerprint":{"sha1":"32:6C:65:A1:A0:B9:66:0C:2D:29:7E:06:BD:FC:98:8E:96:14:5F:02","sha256":"09:19:64:F5:16:55:B6:C1:7F:61:55:5F:BA:A0:9D:BF:E0:EE:A8:91:54:09:45:26:8F:3A:6C:7F:3B:0B:C7:EA"}}},"request":{"raw":"GET /api/index/banner HTTP/1.1\r\nHost: apisss.tkshto.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://h5.tiktokshop.buzz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 00:47:32 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: https://h5.tiktokshop.buzz\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":236,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"35a06b6210bc2358fbf31f6fbc122960","sha1":"1950de64b2ca70f0719d4f0c9e6955919677ff9b","sha256":"ccc6ef69afbc60dca48bd3495c1ea942b65dc0c1983284fe905b2898b9b29c11","sha512":"41a33989a8d0491ed582513ec1eb484c127436409fe618ccb737608c5c179342e8ceab684335754b5bf7f76ce42dd6f7278524d418f68f42c9e9a86b7fcd79d3","ssdeep":"","tlshash":"62d0a7f23447c5538974c1a451ece4b60a26625b4cc082666ecd65d9c4585be606d177","first_seen":"2026-02-07T00:48:02.93517Z","last_seen":"2026-02-07T00:48:02.93517Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1267,"timings":{"blocked":494,"dns":1,"connect":243,"send":0,"wait":277,"receive":0,"ssl":248},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/assets/index-CIEJj_EE.js","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:30.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.tiktokpropp.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 13:40:30 GMT","end":"Mon, 04 May 2026 13:40:29 GMT"},"fingerprint":{"sha1":"7F:66:7F:4D:16:40:F2:BB:67:54:E3:04:98:4E:27:FF:AC:99:5C:DE","sha256":"7B:A6:B6:EA:A6:99:D6:2F:9C:45:7E:39:93:41:5C:EE:62:8C:3A:9E:C5:D0:4A:63:46:DA:B6:99:25:49:4F:A2"}}},"request":{"raw":"GET /assets/index-CIEJj_EE.js HTTP/1.1\r\nHost: h5.tiktokshop.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://h5.tiktokshop.buzz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 00:47:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 04 Feb 2026 12:44:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69833f40-7d8\"\r\nexpires: Sat, 07 Feb 2026 12:47:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2008,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2007)","md5":"8aa941e15270d4d50072566587cbb48c","sha1":"39a9ee2e127fe64b20b5ce3e9e885e5284bd7b7f","sha256":"3b656f75e31b111284f65c96632879c577db4bbb18c084ad98c3795fbbfe2717","sha512":"2c7d7090048e590b4cfccafa4f3dda34779e732f4d15bf99dd479343ec5d9bd942fc01c7cf2f65e03a305a4896e5ae6dfab54455f37b87c04ef966b7554aba58","ssdeep":"","tlshash":"5341928c75acea7ca376a48455184c29c5051f6b3573c4e6e23a381b4beaa80f936e04","first_seen":"2026-02-07T00:39:12.132779Z","last_seen":"2026-02-07T09:50:53.880189Z","times_seen":3,"resource_available":true,"data":null}},"time_used":452,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":452,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apisss.tkshto.cyou/api/index/category","fqdn":"apisss.tkshto.cyou","domain":"tkshto.cyou","tld":"cyou"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:31.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apisss.tkshto.cyou","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 06:22:01 GMT","end":"Mon, 04 May 2026 06:22:00 GMT"},"fingerprint":{"sha1":"32:6C:65:A1:A0:B9:66:0C:2D:29:7E:06:BD:FC:98:8E:96:14:5F:02","sha256":"09:19:64:F5:16:55:B6:C1:7F:61:55:5F:BA:A0:9D:BF:E0:EE:A8:91:54:09:45:26:8F:3A:6C:7F:3B:0B:C7:EA"}}},"request":{"raw":"GET /api/index/category HTTP/1.1\r\nHost: apisss.tkshto.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://h5.tiktokshop.buzz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 00:47:32 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: https://h5.tiktokshop.buzz\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":653,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"706f5ef626d93469c773738849dafeea","sha1":"ca7cc8fe2895d1af2a2f2c030e339614cc0ed5f6","sha256":"0d1f63cc843fe08437ddb3003e1824e967d2804fce8fba93d1966bb234fb5335","sha512":"71fc475580f0fca105c9908e4fcdf186ed8928b3abdf32dff3681efcad2d916e0574ebc7c60bb1cad1c12c17eb091053dc00b17b22b99e8438cfa2f91aaf2bf0","ssdeep":"","tlshash":"ecf044ed122e9cfd54ea95f512d653cf701179b308ce9d842b36ad04d0ce67a3a18535","first_seen":"2026-02-07T00:48:02.936728Z","last_seen":"2026-02-07T00:48:02.936728Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1275,"timings":{"blocked":492,"dns":0,"connect":244,"send":0,"wait":287,"receive":0,"ssl":249},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65b965788d574/990-990/universal-safety-key-treadmill-magnet-security-lock.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:34.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65b965788d574/990-990/universal-safety-key-treadmill-magnet-security-lock.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5V01PUZXjVcLco9_q1PHTK6lgzIcJ8QTZfKKgcGDik7-paAQnf8KbXkYYclYe74G-Rp6jNFpcI\r\nx-goog-generation: 1706648958514696\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 606290\r\nx-goog-hash: crc32c=30OnCg==, md5=JajyTGxyjiCbWxgJTLPA9A==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 606290\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Tue, 30 Jan 2024 21:09:18 GMT\r\netag: \"25a8f24c6c728e209b5b18094cb3c0f4\"\r\ncontent-type: image/jpeg\r\nage: 546\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":606290,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"25a8f24c6c728e209b5b18094cb3c0f4","sha1":"17496dd0845e30635e0c47dc9ccfe49fd9cef234","sha256":"08a0cffb8ca9713458c8808415beda0bcdd147a3409ece97562fb92f11f8a463","sha512":"435eb927cf9563c82186e9b56b23ff0775df041070dd1b758df404d8e1322f03018b6617f42da361291f46cd43672da571f4665890b7cd9993cd6c4963f65388","ssdeep":"12288:kgPyUNIzFNsEwLYBjpZ5MmyWGJfjS8vXxFZj7SwcH:kgPyUcBjDOmzMPxXj7SX","tlshash":"90d4ee1dfd26ec77d42be1a12a618abf457a8253d1a5fc3e0bb6c57018d22fa0b741d0","first_seen":"2026-02-07T00:39:12.186528Z","last_seen":"2026-06-08T22:23:27.833157Z","times_seen":6,"resource_available":false,"data":null}},"time_used":521,"timings":{"blocked":121,"dns":15,"connect":12,"send":0,"wait":46,"receive":238,"ssl":86},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65b36bce14b77/990-990/lego-speed-champions-chevrolet-camaro-zl1-set-75891.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:34.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65b36bce14b77/990-990/lego-speed-champions-chevrolet-camaro-zl1-set-75891.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5UUax7qK68SgnRkah9hM8uadoz6QVeNkR1kJdD4iG6vzIf9pkBSMdqvSpuzbZJrA2jm6Ev3hRM\r\nx-goog-generation: 1706257375199415\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 248652\r\nx-goog-hash: crc32c=nxTdtg==, md5=2C5qTRpV2W4XWuTvHlPaVA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 248652\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Fri, 26 Jan 2024 08:22:55 GMT\r\netag: \"d82e6a4d1a55d96e175ae4ef1e53da54\"\r\ncontent-type: image/jpeg\r\nage: 546\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":248652,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"d82e6a4d1a55d96e175ae4ef1e53da54","sha1":"df62ab917b71c9b2c8f8db9e4b6964ccc545987a","sha256":"543f0d9f7391192fd31857132b946981c7f64a93b5a604c934a018f3149d93fe","sha512":"a5c954da088a5289aeeaa01e05f3c23c307f0d881f9e41b37ebf596fac9fac7cf9e281cd51d7cf3dee5a039d0e7846979c742358bc5799bc07d52d314dcd78cb","ssdeep":"6144:7e32buu3towglPO78jyuUxLHIPpdn81zEKv20rlgznMW/:kQylG7KyumHgKzEKvprlInv","tlshash":"843412ada5a3b59fff4f25834687ef78f283423030b1e1468e6f05e76d459188621798","first_seen":"2026-02-07T00:39:12.093735Z","last_seen":"2026-06-08T22:23:27.664627Z","times_seen":6,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":96,"dns":0,"connect":0,"send":0,"wait":38,"receive":118,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65a9db1bb744d/990-990/little-tikes-totsports-easy-score-basketball-set.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:34.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65a9db1bb744d/990-990/little-tikes-totsports-easy-score-basketball-set.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5X4HPLpChHe3vCgikBypPIrXUgMmaSCRhPunv_Aug2Qr_peaxMlCwCFVzdMzU2gR_zj\r\nx-goog-generation: 1705630512879443\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 65351\r\nx-goog-hash: crc32c=uuy2Sw==, md5=MulJp/wIJ1yUhUMJBwazGQ==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 65351\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Fri, 19 Jan 2024 02:15:12 GMT\r\netag: \"32e949a7fc08275c948543090706b319\"\r\ncontent-type: image/jpeg\r\nage: 546\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":65351,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"32e949a7fc08275c948543090706b319","sha1":"e2058e670e744c2366290141fc80a1786c0c49eb","sha256":"5260db8ac18a812989829adfd6b315b4b2f88a514a1b72660ffe8f86d50d67b0","sha512":"9c776cf3e12fddba1ddac6f2edd7faceaf5c81c26188949f531a097d863caa01f972e324611a1c7ca1ff2770bc601678be8916d0d9a1904c8567b5cdbdb29ba3","ssdeep":"1536:5BVHa0W5ZJYCwl4wLUxSArqqgWPjLt5FoOHEqK:P5VW5ZGl4kgSAr1XbFVK","tlshash":"b553f11b9b6d38e7e1bc127889cb39373fc8a3b1e735415eb5d7241280a2356b84ed52","first_seen":"2026-02-07T00:39:12.194837Z","last_seen":"2026-06-08T22:23:27.748656Z","times_seen":6,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":89,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65b36bcf13a89/990-990/lego-avatar-metkayina-reef-home-set-75578.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:35.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65b36bcf13a89/990-990/lego-avatar-metkayina-reef-home-set-75578.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5Wa23tBro_vUzqPYcQReAq8NEi_ccA98aceUTUataRzcc6JPbElpq-oRp_SQjNhggQs\r\nx-goog-generation: 1706257376497371\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 321338\r\nx-goog-hash: crc32c=GHEqWw==, md5=Up4ussLNA4Fm6om01YVRqw==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 321338\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Fri, 26 Jan 2024 08:22:56 GMT\r\netag: \"529e2eb2c2cd038166ea89b4d58551ab\"\r\ncontent-type: image/jpeg\r\nage: 546\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":321338,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"529e2eb2c2cd038166ea89b4d58551ab","sha1":"ad603bb2d3ec1e6d7bccc6dc171f2e4d1a427778","sha256":"1cfbd8ba3cb847d35c790c85755337cd2f5b8300673b8bfc74f3537d0499d55c","sha512":"03d2b0aa8ae959531fcf3e670687a253f5353e41b151c998f4fb444ba505e228c84dc4ba80ac3dd07b738e83f5358c7e0690acd23804bd7e0cb0a852a8cb0655","ssdeep":"6144:tYjzJ2F/uT+S9/8mGDxep701a9bWRK4FYSsfN3:y0BuT+wWDUp7TaVFYS2N3","tlshash":"0e6412969296356cdfaf521f60a3d334fe8a15b5bafec76c0c9cc8d38da30015929781","first_seen":"2026-02-07T00:39:12.151501Z","last_seen":"2026-02-07T09:50:53.908172Z","times_seen":3,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65bb90c741917/990-990/80-175905-pyjamasques-super-educational-tablet-version-fr.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:35.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65bb90c741917/990-990/80-175905-pyjamasques-super-educational-tablet-version-fr.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5UiwWqi5PrvhgCEVff42N8biRKUALbr1IbwHrPYXo2HDcLhBZSr6IcJneW07ymPbEinkGlYFtc\r\nx-goog-generation: 1706791252992492\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 272840\r\nx-goog-hash: crc32c=mWn8AQ==, md5=4WM4I7eMfGit/AFwbh5eZg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 272840\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sun, 01 Feb 2026 02:54:07 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Thu, 01 Feb 2024 12:40:53 GMT\r\netag: \"e1633823b78c7c68adfc01706e1e5e66\"\r\ncontent-type: image/jpeg\r\nage: 510808\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":272840,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"e1633823b78c7c68adfc01706e1e5e66","sha1":"9cf3eebb89bad5ab4ccdecff1f844ec1de9db06f","sha256":"02cb0912eb442e81cc52b54a112b2e2bfe7add6780fe936c99ba7a36d5eb242f","sha512":"072f91fdce59653b9e78c9a62241270c955155a1a0d44ef65bf3df3a5e0e979a51e997653bee11b13ae50fb826e23033030f00e127dc3f89eeed8c711b32a6d3","ssdeep":"3072:O15cxZqwlaZ4UBcU8zRdUxYbv5joX5u8C+6XQHed+9/XAUvcaxVoQ2wmnKjG6xvi:O15ilDdOo6D9/Am4Q3jpxkT80CnxoMk","tlshash":"7d44027f03c7b46b95371d8529d646abb852593b1b64e290048abccfbcacd8fe274305","first_seen":"2026-02-07T00:39:12.196745Z","last_seen":"2026-06-08T22:23:27.691714Z","times_seen":6,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/assets/index-Sgi5eB1f.js","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:30.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.tiktokpropp.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 13:40:30 GMT","end":"Mon, 04 May 2026 13:40:29 GMT"},"fingerprint":{"sha1":"7F:66:7F:4D:16:40:F2:BB:67:54:E3:04:98:4E:27:FF:AC:99:5C:DE","sha256":"7B:A6:B6:EA:A6:99:D6:2F:9C:45:7E:39:93:41:5C:EE:62:8C:3A:9E:C5:D0:4A:63:46:DA:B6:99:25:49:4F:A2"}}},"request":{"raw":"GET /assets/index-Sgi5eB1f.js HTTP/1.1\r\nHost: h5.tiktokshop.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/assets/index-Dp7_dq1E.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 00:47:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 04 Feb 2026 12:44:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69833f40-15ad\"\r\nexpires: Sat, 07 Feb 2026 12:47:31 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5549,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5548)","md5":"0a4e5cf17aef5abaa63654cd8bd3a0cf","sha1":"f8a825421f7ca5a4e98e44f0395727ea62fde7fd","sha256":"1c7988713e404d7d08a687ba0af17e9c4d57a3a2b7192364d023782dcc67c830","sha512":"8f1a208d201d57743850dc1241c156ec5d97d644f9952a394ab32bafe8718436e7ede4cc62134540e6926b6f0a64f92cf1b7e527d8e0420588fc9ab84e8a68eb","ssdeep":"96:EY3A7TVIRdwfX9eqmR6SuV283O6Byn4j/vGaBp3BjV8FBRT9ReXh/zHR:7oN5mREV283O6B2QHb3Bw9Gh/zHR","tlshash":"ecb1940ef87a85ff947184a4c0586880b0221fbe52e585f1f0fd8e0527a9ded875e77a","first_seen":"2026-02-07T00:39:12.181585Z","last_seen":"2026-02-07T09:50:53.860988Z","times_seen":3,"resource_available":true,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/assets/index-COvtCFcY.js","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:31.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.tiktokpropp.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 13:40:30 GMT","end":"Mon, 04 May 2026 13:40:29 GMT"},"fingerprint":{"sha1":"7F:66:7F:4D:16:40:F2:BB:67:54:E3:04:98:4E:27:FF:AC:99:5C:DE","sha256":"7B:A6:B6:EA:A6:99:D6:2F:9C:45:7E:39:93:41:5C:EE:62:8C:3A:9E:C5:D0:4A:63:46:DA:B6:99:25:49:4F:A2"}}},"request":{"raw":"GET /assets/index-COvtCFcY.js HTTP/1.1\r\nHost: h5.tiktokshop.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/assets/index-Sgi5eB1f.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 00:47:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 04 Feb 2026 12:44:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69833f40-4cc\"\r\nexpires: Sat, 07 Feb 2026 12:47:31 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1228,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1227)","md5":"a505f3e1274f29700ea511662882c795","sha1":"3c08dfc1cceb8751e4ae44ce81ddeabe7b9e0879","sha256":"ef1fd24bca674bd3258e05ec3300a32ce7f4dfb8304bd4dc41693c2620dd8299","sha512":"50e26b03256cb8becbe058973d7a39a0c675edc8e46e3815ebd70081b7b63cb49c22df7dbd387c92efa21e32c1c6bec74106e107212d7403df75d9ab9f89be83","ssdeep":"","tlshash":"4921748939ddf031fb5e0cd5412b0502e4704a0c940de0f9a8ba4f326b4a284969bbfe","first_seen":"2026-02-07T00:39:12.167993Z","last_seen":"2026-02-07T09:50:53.835407Z","times_seen":3,"resource_available":true,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65b36bcebe9c6/990-990/lego-harry-potter-hufflepuff-house-banner-set-76412.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:34.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65b36bcebe9c6/990-990/lego-harry-potter-hufflepuff-house-banner-set-76412.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5UPvXqtTWsg7CDqjmHwCXRJc3ey9ksp6rc_WrLstOhnwg6sL7WJplbs10UtU1ZmJcn3\r\nx-goog-generation: 1706257376067022\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 291412\r\nx-goog-hash: crc32c=eXJX4w==, md5=WvUe7NlWs/+srIyiHEksGA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 291412\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Fri, 26 Jan 2024 08:22:56 GMT\r\netag: \"5af51eecd956b3ffacac8ca21c492c18\"\r\ncontent-type: image/jpeg\r\nage: 546\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":291412,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"5af51eecd956b3ffacac8ca21c492c18","sha1":"b9cd56c91a55315269003ae3f37082271cad4f8a","sha256":"b647eba49161ce551eb22206ff506568aaca64b53da6024c05fe855b39482bde","sha512":"12bef05e8d8a50263a62948f76369b831c85831bfb1047fc04d0888631e74382c4c84780e0d8bcb7896acde8749bd02972b970f620f8f67d7146698abd7b9735","ssdeep":"6144:RA6vrrLnp+x2avZwzCUFQvXGTajCssi41/7OLX7ynoDGB:CYr/n0x1aG1vhId7OLLynv","tlshash":"125412b0f7fbebd2a38b005d89bd3eb39b1195d040d2359b254b1c892509fb6421b53e","first_seen":"2026-02-07T00:39:12.319113Z","last_seen":"2026-02-07T09:50:53.849073Z","times_seen":3,"resource_available":false,"data":null}},"time_used":687,"timings":{"blocked":226,"dns":7,"connect":17,"send":0,"wait":194,"receive":44,"ssl":185},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65b1c4c455430/990-990/xemz-back-bend-assist-trainer-improve-back-and-waist-flexibility-door-flexibility-stretching-strap-home-equipment-for-ballet-dance-yoga-gy.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:35.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65b1c4c455430/990-990/xemz-back-bend-assist-trainer-improve-back-and-waist-flexibility-door-flexibility-stretching-strap-home-equipment-for-ballet-dance-yoga-gy.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5VJN61rSU50yvlsP2Q6loe2uNuNBMNIS7p_Xox89vsK3ZvVUeEfNPrX00MVQ7mb4ml55mkhESQ\r\nx-goog-generation: 1706149062625700\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 81613\r\nx-goog-hash: crc32c=w/oA2w==, md5=V0f6mKBNufLXm5L3wxoi9g==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 81613\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Thu, 25 Jan 2024 02:17:42 GMT\r\netag: \"5747fa98a04db9f2d79b92f7c31a22f6\"\r\ncontent-type: image/jpeg\r\nage: 547\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":81613,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"5747fa98a04db9f2d79b92f7c31a22f6","sha1":"31320f4c0d7ec874dca8dcd7e2e623389337db0f","sha256":"65698f145cb9a94e99f0a953b947eba9b7d1e4450def11fbfdd232c9da8d9397","sha512":"d84478df678a7f0efb6def511e7474741382673397f546398a64f0076bd88489b467f20b6e97fff0142dba790d9d916c6b4e93ccccc7a276562f203b004a87ee","ssdeep":"1536:lrwNP9dYztNIHpbkYENsWsLQQJO5coe5V8sMnFaxMg/byHo3s7x7V2KD:GZ9d+vAxkNssQqQ5VqFK1bYis7RV2KD","tlshash":"6d8302698f8358f8c1ca1c7b65864f0ba1fe9c61e3c71684e4fd52688fad3a95017c0d","first_seen":"2026-02-07T00:39:12.25173Z","last_seen":"2026-02-07T09:50:53.890589Z","times_seen":3,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/assets/basicData-BknPfgPn.js","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:30.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.tiktokpropp.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 13:40:30 GMT","end":"Mon, 04 May 2026 13:40:29 GMT"},"fingerprint":{"sha1":"7F:66:7F:4D:16:40:F2:BB:67:54:E3:04:98:4E:27:FF:AC:99:5C:DE","sha256":"7B:A6:B6:EA:A6:99:D6:2F:9C:45:7E:39:93:41:5C:EE:62:8C:3A:9E:C5:D0:4A:63:46:DA:B6:99:25:49:4F:A2"}}},"request":{"raw":"GET /assets/basicData-BknPfgPn.js HTTP/1.1\r\nHost: h5.tiktokshop.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://h5.tiktokshop.buzz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 00:47:30 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 504\r\nlast-modified: Wed, 04 Feb 2026 12:44:48 GMT\r\netag: \"69833f40-1f8\"\r\nexpires: Sat, 07 Feb 2026 12:47:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":504,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (503)","md5":"9067d54aeb22b87d9d60fa08a8add367","sha1":"294225b0ceb06afc464dc8411d5f6eb000703f1f","sha256":"197221951bf0703da2f8ada5d87526fee1fdf682dd5b75552a3cfe514b192021","sha512":"207958d907c09d837f68347c9c290fa64bb038a07a3b97f1ba1cfc1fc018fc2e0343e322e8ecdee1d04e7a9dece21f9deaa729b9cb604aa68f70f0ae986952d1","ssdeep":"","tlshash":"faf0b41f250d827d316564ecf6d93fc7a32059541e415dfd6758bd44e09af02a0de470","first_seen":"2026-02-07T00:39:12.174003Z","last_seen":"2026-02-07T09:50:53.906747Z","times_seen":3,"resource_available":true,"data":null}},"time_used":453,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":453,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65aef1c27014e/990-990/fast-gaming-pc-computer-bundle-quad-core-i7-8gb-1tb-w10-nvidia-gt-1030.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:34.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65aef1c27014e/990-990/fast-gaming-pc-computer-bundle-quad-core-i7-8gb-1tb-w10-nvidia-gt-1030.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5XWqYSGNhMIgb4rbWk4IxpyZs4VruoGxA-Or_TqHp1WIensi2P5vJTKUgvlohRYhByQVRJ9cUA\r\nx-goog-generation: 1705963977253940\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 207670\r\nx-goog-hash: crc32c=RZkGqg==, md5=rmxZTpSBfQxY6bEItQYASA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 207670\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Mon, 22 Jan 2024 22:52:57 GMT\r\netag: \"ae6c594e94817d0c58e9b108b5060048\"\r\ncontent-type: image/jpeg\r\nage: 546\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":207670,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"ae6c594e94817d0c58e9b108b5060048","sha1":"4cb7d21a004effccf61b29cfe7fb119922b9547f","sha256":"b5fdf9ff249d1a076da6ca836bcd97f9f229fb39be3795096df8840e3a59e9e7","sha512":"a1dee7996ead2b1409ea4d7c30cb9cef99bbee0647c3a506658463c3072efb61e0e43154f7fce7cbcda06744447598c54017a8472a6b0cdbe4c9b104f76db13f","ssdeep":"3072:2IlD2wWnc6aRVIrLmvxMUmfhCTezlCh0ZFnGVADdsTSbRjIJRFHzYl:2twR4LgMUUhG2FGVydbb9IJRFHcl","tlshash":"4014013f7f97b262ac3a5735209d299622c55343b214f2c8cd9913915b7cf2e0b21be5","first_seen":"2026-02-07T00:39:12.278621Z","last_seen":"2026-03-05T08:37:15.250094Z","times_seen":4,"resource_available":false,"data":null}},"time_used":643,"timings":{"blocked":235,"dns":0,"connect":15,"send":0,"wait":144,"receive":44,"ssl":189},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-07T00:47:28.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.tiktokpropp.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 13:40:30 GMT","end":"Mon, 04 May 2026 13:40:29 GMT"},"fingerprint":{"sha1":"7F:66:7F:4D:16:40:F2:BB:67:54:E3:04:98:4E:27:FF:AC:99:5C:DE","sha256":"7B:A6:B6:EA:A6:99:D6:2F:9C:45:7E:39:93:41:5C:EE:62:8C:3A:9E:C5:D0:4A:63:46:DA:B6:99:25:49:4F:A2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: h5.tiktokshop.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 00:47:28 GMT\r\ncontent-type: text/html\r\ncontent-length: 626\r\nlast-modified: Wed, 04 Feb 2026 12:44:48 GMT\r\netag: \"69833f40-272\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":626,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, CR, LF line terminators","md5":"45af5c041e96edbcba781435f0b2814a","sha1":"d26de88c3d088ce295e897499406f1f11ca1b4a2","sha256":"c6fa75d95cb569f4b201daf32c8a11058d946beadf604e5e6f2bf78706dcaa19","sha512":"ce3c505246bc632185b8727f1868978bc1b1103a99b9bbbd289293f3d42152a7ed2c0b2cea6217f8ac4af995913bbeb098aaf3118afee3fcb388939ef10c7cc9","ssdeep":"","tlshash":"5df0ac421cd08c2d43304329acc0e118de929a668b0a6e5039eda2bf1ff9f0acddb458","first_seen":"2026-02-07T00:39:12.274078Z","last_seen":"2026-02-07T09:50:53.941663Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1241,"timings":{"blocked":499,"dns":1,"connect":243,"send":0,"wait":243,"receive":0,"ssl":251},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/assets/index-JzdHzEVz.js","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:31.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.tiktokpropp.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 13:40:30 GMT","end":"Mon, 04 May 2026 13:40:29 GMT"},"fingerprint":{"sha1":"7F:66:7F:4D:16:40:F2:BB:67:54:E3:04:98:4E:27:FF:AC:99:5C:DE","sha256":"7B:A6:B6:EA:A6:99:D6:2F:9C:45:7E:39:93:41:5C:EE:62:8C:3A:9E:C5:D0:4A:63:46:DA:B6:99:25:49:4F:A2"}}},"request":{"raw":"GET /assets/index-JzdHzEVz.js HTTP/1.1\r\nHost: h5.tiktokshop.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/assets/index-Sgi5eB1f.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 00:47:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 04 Feb 2026 12:44:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69833f40-7b6\"\r\nexpires: Sat, 07 Feb 2026 12:47:31 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1974,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1973)","md5":"2086fb25a134ffe35f730ade9eda643d","sha1":"e356ece962baf04c8efd8723c05173fa1207bf6d","sha256":"6e63b5929f6dce5905da55e9eb670052abe6a59b81ad10856cfb1daddf11233c","sha512":"0d6099571c0926a1cd59383be5870ad3916b6d6f25b1da403f84cb4b95a9aab2e9b285cda760ce8f42d7d203ed78404defb0782d4674c8cfb2985d96ed9e62ca","ssdeep":"","tlshash":"5e4186adb421e278d37a568880554490572ccb847021ccceebafb5023655fe9e9cda2c","first_seen":"2026-02-07T00:39:12.049612Z","last_seen":"2026-02-07T09:50:53.822158Z","times_seen":3,"resource_available":true,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65b1a207324a8/990-990/lego-43206-disney-princess-cinderella-and-prince-charmings-castle-doll-house-buildable-toy-with-3-mini-dolls-plus-gus-gus-and-lucifer-figures.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:34.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65b1a207324a8/990-990/lego-43206-disney-princess-cinderella-and-prince-charmings-castle-doll-house-buildable-toy-with-3-mini-dolls-plus-gus-gus-and-lucifer-figures.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5XKEeUm0pjx2MAQQhI5sEVpDw4sZQH9zTHUQ7cShh1fv1ByB05K-b6aJSzD2PzlzaBK\r\nx-goog-generation: 1706140186700470\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 256198\r\nx-goog-hash: crc32c=FlY5Cg==, md5=XGzLW9tVxKpEBPabze+BUA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 256198\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Wed, 24 Jan 2024 23:49:46 GMT\r\netag: \"5c6ccb5bdb55c4aa4404f69bcdef8150\"\r\ncontent-type: image/jpeg\r\nage: 546\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":256198,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"5c6ccb5bdb55c4aa4404f69bcdef8150","sha1":"f6e2273eaf9a339baf679653a0728c9b88adccb2","sha256":"0cf874eeba2242255ed1d5f5a0cb6aeb31c46f4dacac3694db48d247ec968101","sha512":"f4cd42c5f5c252ff9b89b522e7d8a0e5c8d2aa5b9a482ce40531861256de6f19285b091493ba06e1047bb72cf5c9b93e8e778dfa72f3bed70ded6b233499bd36","ssdeep":"6144:7+gLcyyJlWXqbIXmqAC/hL8qLE1dL5bbiIlS:ygLcyUWXqbIXm/CJAqLEhLo","tlshash":"0444124998503cbccf5f1e4b49abe375fb21a079f731d0952dec26cbaca448d2569b20","first_seen":"2026-02-07T00:39:12.147202Z","last_seen":"2026-06-08T22:23:27.674827Z","times_seen":6,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":76,"dns":0,"connect":0,"send":0,"wait":41,"receive":119,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65bac78733583/990-990/cream-xl-men-long-sleeve-stripe-cable-knited-cricket-jumper.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:35.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65bac78733583/990-990/cream-xl-men-long-sleeve-stripe-cable-knited-cricket-jumper.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5UAqKr1YGyb3Ro3ySTZOGeK001_0d1xi05NSS3FEUe1OL1UKB6B3S-dh8sSiPcucX6ttYWIO5M\r\nx-goog-generation: 1706739620237882\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 409231\r\nx-goog-hash: crc32c=6G5KNg==, md5=tGAlh7yneIhDpvioNbaFRA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 409231\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Wed, 31 Jan 2024 22:20:20 GMT\r\netag: \"b4602587bca7788843a6f8a835b68544\"\r\ncontent-type: image/jpeg\r\nage: 546\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":409231,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"b4602587bca7788843a6f8a835b68544","sha1":"26b8acc0adbcf65a34421b2c89b9843c273b3d9c","sha256":"ff23caa45ac587f6750d9bee33cfe2f9411d5d0c20ff3cb8068f57c3f4351c16","sha512":"cf57336145efdd68a58eff46af3e7bc92f56b22b9f289596903f094943a2b998ccdcaaaa3d6e681c22148d1f069a92a48abc13a142fc66c2a92e27bc004d99c1","ssdeep":"12288:v21Wy65eXbzNY6uaZAjf/B6IHAQ1riACvg:v8WDeXbzi6u3jh4QYJg","tlshash":"6c94efd0d7b921eab7ea2a6eeffbfe183c712507c358375b2d066074e65d0466782012","first_seen":"2026-02-07T00:39:12.05471Z","last_seen":"2026-06-08T22:23:27.669032Z","times_seen":6,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":80,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65b3753ba9e8e/990-990/samsung-ue50cu8000-50-crystal-uhd-4k-hdr-smart-tv.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:36.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65b3753ba9e8e/990-990/samsung-ue50cu8000-50-crystal-uhd-4k-hdr-smart-tv.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5UVY3acLqCvCRwqCKMJf5QLS-TEW9ONBtZzs_37KG3meNv3_wdCW5C3rURQbc9Veu0Z\r\nx-goog-generation: 1706259787751089\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 223994\r\nx-goog-hash: crc32c=2ykzoA==, md5=3uQHumUIY2qNbnTIwE7lzQ==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 223994\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Fri, 26 Jan 2024 09:03:07 GMT\r\netag: \"dee407ba6508636a8d6e74c8c04ee5cd\"\r\ncontent-type: image/jpeg\r\nage: 547\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":223994,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"dee407ba6508636a8d6e74c8c04ee5cd","sha1":"8ab527712b72a3525b96011ed297416268d90886","sha256":"79f8ec144d8592dab64224f69b92ea700d89f40baadbd28fb468129ab1c2791a","sha512":"c20106467abe9b83ceb3551cad066427b5a3318a8d8a75855f1fa6090f3729f957be50bdb1b2f8b67a41d5e15a849c979ad87cd8ea04211729a3b1009eb56167","ssdeep":"6144:t2VFKP+6+WFLt/mAU7dRE/uQTLytj9cnQtdT9yWIN9:t2KPl+W6AubtpcQtH9C9","tlshash":"a224121a5295ebdaf8afe72d94c36723b583cb735d134801e2f7481866d187dc04bab8","first_seen":"2026-02-07T00:39:12.242683Z","last_seen":"2026-03-05T08:37:15.325316Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1324,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1308,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65ba3e8b63aac/990-990/500gb-hdd-onboard-graphic-intel-core-i5-gaming-pc-monitor-bundle-1tb-hdd-8gb-gt730.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:36.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65ba3e8b63aac/990-990/500gb-hdd-onboard-graphic-intel-core-i5-gaming-pc-monitor-bundle-1tb-hdd-8gb-gt730.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-guploader-uploadid: AJRbA5UOgYzlF9x64nk5KQPj3cdDlDKNb_bp8o112SyW_5A_rySeJxAQxNPXDcVbhzezpRXDCwsoqjs\r\nx-goog-generation: 1706704531562523\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 642883\r\nx-goog-hash: crc32c=xVi7Mg==, md5=CLxTfAbeAHvaF+ZHGTEgtg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 642883\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Wed, 31 Jan 2024 12:35:31 GMT\r\netag: \"08bc537c06de007bda17e647193120b6\"\r\ncontent-type: image/jpeg\r\nage: 549\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":642883,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"08bc537c06de007bda17e647193120b6","sha1":"414bdedee8b4d94aa2fee1a5f69f91661f3fa1a1","sha256":"43099eb923ccf58fa88aca5a31cb899358a2f4edca3d963c883a4ab8c6bbc087","sha512":"8762af22686090d960fee12319f2ab2b7ff9cb71075bd985d2493587286b90d001660c6f36f844269ddf0b1afe66f52b82ea69a4e3479f73dc68502ca6dcd1c6","ssdeep":"12288:cETIQbh63E/VgW6yaNNVn3sYUAtg8r4dJaTdp9vvs:75R6yed3sCDuJaTZvvs","tlshash":"cfd401cb10264d1244d65bd966dad2795b2fce3a148890cfbf3a37faa5ccc8618ef501","first_seen":"2026-02-07T00:39:12.076749Z","last_seen":"2026-03-05T08:37:15.301654Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1297,"timings":{"blocked":1007,"dns":0,"connect":0,"send":0,"wait":104,"receive":186,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65b298857e5c4/990-990/billes-interactives-de-nourriture-de-chat-de-jouet-de-jouet-de-chat.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:36.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65b298857e5c4/990-990/billes-interactives-de-nourriture-de-chat-de-jouet-de-jouet-de-chat.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-guploader-uploadid: AJRbA5VFbcNMgauETldgcw5fYE2_tk99qq3mk1au0GnyQvOVifKqqDT9DDCzTFPtDq_N6T2M\r\nx-goog-generation: 1706203278464876\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 56285\r\nx-goog-hash: crc32c=i5MnWA==, md5=K+TBoXaW9NQsf+sf2d6j+g==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 56285\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Thu, 25 Jan 2024 17:21:18 GMT\r\netag: \"2be4c1a17696f4d42c7feb1fd9dea3fa\"\r\ncontent-type: image/jpeg\r\nage: 549\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":56285,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"2be4c1a17696f4d42c7feb1fd9dea3fa","sha1":"6a97daf7128d7e5b803e1c4f6860840871722c50","sha256":"efad19f446096c3cada24a9dc0e515001a068519582e042c3efe0a81d1e6ec55","sha512":"9102464be9fa12049818b5c56098bb25b10a24181258d44e734104add2cb03dd892bc533512c11e5828ef65caf0a5ffed62996cc49d2c8b9c67d41d13d3f5cf4","ssdeep":"768:mLVHjutXMVk/ETOV2JG7GG1nbB/w4aAAVUEm/4Me18ZapJqw1rASTHZcpXtEx:mLdu9MVk/GODv/3k9mG8oWuAicpXM","tlshash":"8e43f129654ce1ddf6d52eb3c063d96bb3cba432e9e94c6412da083e0675382480f95e","first_seen":"2026-02-07T00:39:12.269644Z","last_seen":"2026-02-07T09:50:53.958533Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1157,"timings":{"blocked":1002,"dns":0,"connect":0,"send":0,"wait":116,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/assets/PinFang_1-REP3_aue.ttf","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:31.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.tiktokpropp.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 13:40:30 GMT","end":"Mon, 04 May 2026 13:40:29 GMT"},"fingerprint":{"sha1":"7F:66:7F:4D:16:40:F2:BB:67:54:E3:04:98:4E:27:FF:AC:99:5C:DE","sha256":"7B:A6:B6:EA:A6:99:D6:2F:9C:45:7E:39:93:41:5C:EE:62:8C:3A:9E:C5:D0:4A:63:46:DA:B6:99:25:49:4F:A2"}}},"request":{"raw":"GET /assets/PinFang_1-REP3_aue.ttf HTTP/1.1\r\nHost: h5.tiktokshop.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/assets/index-CLDm-2yG.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 00:47:31 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 10646300\r\nlast-modified: Wed, 04 Feb 2026 12:44:48 GMT\r\netag: \"69833f40-a2731c\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10646300,"size_decoded":0,"mime_type":"application/octet-stream","magic":"OpenType font data","md5":"8719f32cb087680983396931ee2792df","sha1":"aedfdc534bc9340415925b53062ae2ef30a6a115","sha256":"c1f540e2fa9560ec65cf4821ab62ebbe0d9fc135cb1fd202c1b448ffeef1e90d","sha512":"5afb85cd8153e9aeb96c022931fa2da6dff60c6b69d96e6749e1860b20e60c7075af8dceb584c2fddd418c4d419f64cc1769b480dcab976af9fb382771edf8d3","ssdeep":"24576:g8RDDAAq80pRZshsBXeIfI1BWpMx0Kk1QIRY:DJDRYRihsBXeIfISLKk13i","tlshash":"8525aee793847d2857a2e1547d52f7bba986080c087de0fcdf632f5325460786ab8f52","first_seen":"2025-09-08T00:39:39.924531Z","last_seen":"2026-06-08T20:49:28.673785Z","times_seen":7,"resource_available":false,"data":null}},"time_used":5560,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":255,"receive":5305,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apisss.tkshto.cyou/api/index/product?category_id=1\u0026page=1\u0026limit=8","fqdn":"apisss.tkshto.cyou","domain":"tkshto.cyou","tld":"cyou"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:32.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apisss.tkshto.cyou","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 06:22:01 GMT","end":"Mon, 04 May 2026 06:22:00 GMT"},"fingerprint":{"sha1":"32:6C:65:A1:A0:B9:66:0C:2D:29:7E:06:BD:FC:98:8E:96:14:5F:02","sha256":"09:19:64:F5:16:55:B6:C1:7F:61:55:5F:BA:A0:9D:BF:E0:EE:A8:91:54:09:45:26:8F:3A:6C:7F:3B:0B:C7:EA"}}},"request":{"raw":"GET /api/index/product?category_id=1\u0026page=1\u0026limit=8 HTTP/1.1\r\nHost: apisss.tkshto.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://h5.tiktokshop.buzz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 00:47:32 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: https://h5.tiktokshop.buzz\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4666,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"1b34134c4a62489758b0598b798e92d6","sha1":"05b7772a4a3a2351ce491daeb7f9ff821ac17f55","sha256":"a77c744b34a2a1eb8505ddd14d3ab1d92a12749d94faef22356603ddb4311ee0","sha512":"7134d7bb9e91fc27a574a1a4e0a3b649eeea55ef5d434f72d825e410bf52c3de5dce93b0340187f2a2ed8dedbcf02baf1a05c676a8c4321343635067614c31eb","ssdeep":"96:Q3GNvqVQBqVQPQIXsQZHrBx0HZXlJ30+LyD0yjU0jqXesn1VN0A1VN0SpWy:RhquBquIIqZZJ1VNz1VNqy","tlshash":"c0a176e9dab84c5223f469ba77adb3c9fcc1510303d1dd2b868ec10315ae579539243b","first_seen":"2026-02-07T00:48:02.955137Z","last_seen":"2026-02-07T00:48:02.955137Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1846,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1846,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65b298845f778/990-990/petgentle-ultrasonic-anti-dog-barking-pet-trainer-led-light-gentle-chaser-style.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:36.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65b298845f778/990-990/petgentle-ultrasonic-anti-dog-barking-pet-trainer-led-light-gentle-chaser-style.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5XdO8SLDQlPjm9oi5gF4ROaF-xYMvH8Czb-S_QSoaop--0BWthzO8UUvTgkCKVo9ovS\r\nx-goog-generation: 1706203273756070\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 367694\r\nx-goog-hash: crc32c=RuTkmg==, md5=gha2VVWGE8MoZzy+303icg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 367694\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Thu, 25 Jan 2024 17:21:13 GMT\r\netag: \"8216b655558613c328673cbedf4de272\"\r\ncontent-type: image/jpeg\r\nage: 547\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":367694,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"8216b655558613c328673cbedf4de272","sha1":"7dd7af84b2b799a8d631a475cf1c4355f1b17da6","sha256":"78d1a15c293c5e5c7ee41b54d7d4ae2ac6e82f57f1c0352b07d17f5601e14f3d","sha512":"6a56570590884cfb74a2645b1784ecf59dbf1195c302e332ad6b77cdeff426bf1a3803e0cc9245925718add982e4c6ce5d51e13a7d6a85b50f2d451ad555717f","ssdeep":"6144:bflXobqWnu/FrbgIKCRlnxgUe/sFSn+UkDO/TkIBqk5WpM6qhiTkJ0I9:9o2Wnu/dbgIKCRrgjsm+xDg80WpA6kJn","tlshash":"ea741224eafc51d180f82d4b9bd51cdc3af3ad48f2894fd766048f762276ea42b85b05","first_seen":"2026-02-07T00:39:12.166378Z","last_seen":"2026-06-08T22:23:27.747656Z","times_seen":6,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/assets/index-Sgi5eB1f.js","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:30.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.tiktokpropp.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 13:40:30 GMT","end":"Mon, 04 May 2026 13:40:29 GMT"},"fingerprint":{"sha1":"7F:66:7F:4D:16:40:F2:BB:67:54:E3:04:98:4E:27:FF:AC:99:5C:DE","sha256":"7B:A6:B6:EA:A6:99:D6:2F:9C:45:7E:39:93:41:5C:EE:62:8C:3A:9E:C5:D0:4A:63:46:DA:B6:99:25:49:4F:A2"}}},"request":{"raw":"GET /assets/index-Sgi5eB1f.js HTTP/1.1\r\nHost: h5.tiktokshop.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://h5.tiktokshop.buzz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 00:47:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 04 Feb 2026 12:44:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69833f40-15ad\"\r\nexpires: Sat, 07 Feb 2026 12:47:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5549,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5548)","md5":"0a4e5cf17aef5abaa63654cd8bd3a0cf","sha1":"f8a825421f7ca5a4e98e44f0395727ea62fde7fd","sha256":"1c7988713e404d7d08a687ba0af17e9c4d57a3a2b7192364d023782dcc67c830","sha512":"8f1a208d201d57743850dc1241c156ec5d97d644f9952a394ab32bafe8718436e7ede4cc62134540e6926b6f0a64f92cf1b7e527d8e0420588fc9ab84e8a68eb","ssdeep":"96:EY3A7TVIRdwfX9eqmR6SuV283O6Byn4j/vGaBp3BjV8FBRT9ReXh/zHR:7oN5mREV283O6B2QHb3Bw9Gh/zHR","tlshash":"ecb1940ef87a85ff947184a4c0586880b0221fbe52e585f1f0fd8e0527a9ded875e77a","first_seen":"2026-02-07T00:39:12.181585Z","last_seen":"2026-02-07T09:50:53.860988Z","times_seen":3,"resource_available":true,"data":null}},"time_used":448,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":448,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/assets/index-JzdHzEVz.js","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:30.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.tiktokpropp.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 13:40:30 GMT","end":"Mon, 04 May 2026 13:40:29 GMT"},"fingerprint":{"sha1":"7F:66:7F:4D:16:40:F2:BB:67:54:E3:04:98:4E:27:FF:AC:99:5C:DE","sha256":"7B:A6:B6:EA:A6:99:D6:2F:9C:45:7E:39:93:41:5C:EE:62:8C:3A:9E:C5:D0:4A:63:46:DA:B6:99:25:49:4F:A2"}}},"request":{"raw":"GET /assets/index-JzdHzEVz.js HTTP/1.1\r\nHost: h5.tiktokshop.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://h5.tiktokshop.buzz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 00:47:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 04 Feb 2026 12:44:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69833f40-7b6\"\r\nexpires: Sat, 07 Feb 2026 12:47:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1974,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1973)","md5":"2086fb25a134ffe35f730ade9eda643d","sha1":"e356ece962baf04c8efd8723c05173fa1207bf6d","sha256":"6e63b5929f6dce5905da55e9eb670052abe6a59b81ad10856cfb1daddf11233c","sha512":"0d6099571c0926a1cd59383be5870ad3916b6d6f25b1da403f84cb4b95a9aab2e9b285cda760ce8f42d7d203ed78404defb0782d4674c8cfb2985d96ed9e62ca","ssdeep":"","tlshash":"5e4186adb421e278d37a568880554490572ccb847021ccceebafb5023655fe9e9cda2c","first_seen":"2026-02-07T00:39:12.049612Z","last_seen":"2026-02-07T09:50:53.822158Z","times_seen":3,"resource_available":true,"data":null}},"time_used":452,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":452,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/assets/index-DoEN14Oe.js","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:31.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.tiktokpropp.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 13:40:30 GMT","end":"Mon, 04 May 2026 13:40:29 GMT"},"fingerprint":{"sha1":"7F:66:7F:4D:16:40:F2:BB:67:54:E3:04:98:4E:27:FF:AC:99:5C:DE","sha256":"7B:A6:B6:EA:A6:99:D6:2F:9C:45:7E:39:93:41:5C:EE:62:8C:3A:9E:C5:D0:4A:63:46:DA:B6:99:25:49:4F:A2"}}},"request":{"raw":"GET /assets/index-DoEN14Oe.js HTTP/1.1\r\nHost: h5.tiktokshop.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/assets/index-Sgi5eB1f.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 00:47:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 04 Feb 2026 12:44:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69833f40-140b\"\r\nexpires: Sat, 07 Feb 2026 12:47:31 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5131,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (5130)","md5":"1e5779e1078d039dc0d34addce8a1976","sha1":"bd2d59fd2a1f54eb73a01bdb8448ce3244aadfc4","sha256":"489de3df23a9ad6a2fbc0a08ed2a1ab7a10d2958424e3afbbc2cd50e7d2f6eb6","sha512":"35235723ec7038d420bf2ce8be5b90bec8d08244aeadadbee93a4bbc525084e31eb374ea11071bfc021fdc7bf802acc3917f6013ba14676b2f696c7a0ebdd125","ssdeep":"96:zxUBqjTmIO2aA5QGZbQsceU5eBRFx31NfRvV0s:4qjS5mQybQscH4RFxFNfRd0s","tlshash":"2cb1421e4f4a84dcd519cdc4868415811aec5bfe321a8481a2cdae59ada1fbc7ebf1f0","first_seen":"2026-02-07T00:39:12.111608Z","last_seen":"2026-02-07T09:50:53.848216Z","times_seen":3,"resource_available":true,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65a7be756e87b/990-990/steiff-32cm-elmar-teddy-bear-golden-brown.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:35.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65a7be756e87b/990-990/steiff-32cm-elmar-teddy-bear-golden-brown.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5XGKKSbUExpyd6afA6Gdbbyb6tbUQOowCwVYihPtz4tISHFsRyqeRuzp9tkjw_62uhMyms6R3k\r\nx-goog-generation: 1705494165308531\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 269589\r\nx-goog-hash: crc32c=xY/Y/A==, md5=/SLaN4GQxFO8TRYvgUbAPw==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 269589\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Wed, 17 Jan 2024 12:22:45 GMT\r\netag: \"fd22da378190c453bc4d162f8146c03f\"\r\ncontent-type: image/jpeg\r\nage: 546\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":269589,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"fd22da378190c453bc4d162f8146c03f","sha1":"e1538d64fbf76bb60e8fd5f144c6b5217f8a1124","sha256":"4e4833e719b1d08caeb0713c9da713735e3d458ec21849164a607d1160a39632","sha512":"600c102021b29a574fc1ed0c19fcf35d43738c4836aba37621725c33be5546fb81b894abfed1ef66c0f8c855340b77ea7137f58e7c1c707fe2bdb798e578d320","ssdeep":"6144:uoOBc3OOCe5KO1E75EW36Ul9BKX8Kkys5wDSE6hedM8iIs5MUPUu4N:ac3/R+5EdmhKkfOSEw8TUF0","tlshash":"3e4412048951359cef5f1283e8abcfbaf28213b73a7ec9749d9d16d39cab5d10155302","first_seen":"2026-02-07T00:39:12.209407Z","last_seen":"2026-06-08T20:49:28.660047Z","times_seen":5,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65bac7a53c528/990-990/cream-4xl-men-long-sleeve-stripe-cable-knited-cricket-jumper.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:35.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65bac7a53c528/990-990/cream-4xl-men-long-sleeve-stripe-cable-knited-cricket-jumper.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5XF40IBM6mPM7R2-Zsu0jc-FZ3GVr-g7fimLtLIixDAlexAKtpzylJ5hWeSkvokH2YON6W0Yn0\r\nx-goog-generation: 1706739627673805\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 409231\r\nx-goog-hash: crc32c=6G5KNg==, md5=tGAlh7yneIhDpvioNbaFRA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 409231\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Wed, 31 Jan 2024 22:20:27 GMT\r\netag: \"b4602587bca7788843a6f8a835b68544\"\r\ncontent-type: image/jpeg\r\nage: 547\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":409231,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"b4602587bca7788843a6f8a835b68544","sha1":"26b8acc0adbcf65a34421b2c89b9843c273b3d9c","sha256":"ff23caa45ac587f6750d9bee33cfe2f9411d5d0c20ff3cb8068f57c3f4351c16","sha512":"cf57336145efdd68a58eff46af3e7bc92f56b22b9f289596903f094943a2b998ccdcaaaa3d6e681c22148d1f069a92a48abc13a142fc66c2a92e27bc004d99c1","ssdeep":"12288:v21Wy65eXbzNY6uaZAjf/B6IHAQ1riACvg:v8WDeXbzi6u3jh4QYJg","tlshash":"6c94efd0d7b921eab7ea2a6eeffbfe183c712507c358375b2d066074e65d0466782012","first_seen":"2026-02-07T00:39:12.05471Z","last_seen":"2026-06-08T22:23:27.669032Z","times_seen":6,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65b8573c7890c/990-990/apple-iphone-15-pro-128gb-black-titanium.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:36.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65b8573c7890c/990-990/apple-iphone-15-pro-128gb-black-titanium.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-guploader-uploadid: AJRbA5XtMb31nHkKpta3Zlhwj2jXz3zWLMNesadCB52JkAxJlgHb1AuhfrGQN7I95RCx75inZYxY2bs\r\nx-goog-generation: 1706579790011672\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 90223\r\nx-goog-hash: crc32c=SxqUnQ==, md5=BOqMLpqzWwm/RivkZeSeeQ==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 90223\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Tue, 30 Jan 2024 01:56:30 GMT\r\netag: \"04ea8c2e9ab35b09bf462be465e49e79\"\r\ncontent-type: image/jpeg\r\nage: 547\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":90223,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"04ea8c2e9ab35b09bf462be465e49e79","sha1":"9c181b23795bf33a8736864be1070b13ae02b638","sha256":"cb3fafe8ca1af654cba528b1fc141de6d040642fcfb9a6492773c327f3fb96ac","sha512":"38fbd1170727f0d646e4dd4dc8ce2309954971151a22b64d1dd114ff1ef2d2b0b451a82ae3f26811892fcca9d31e8704c7ab1f88f74453f96bb2cdc588e44fe2","ssdeep":"1536:UuIkOy22kL7lTuYFQ73tk8X+/9OaySmLVW8y47P5qx/BMySWd9xjQjTlkVC2SWXA:XHc2kLduYFQDt+9OaySmps4zQqm9xjQL","tlshash":"0793f164f1286296747a877f3eedc51ae2c68cf020b4c651768cacd5c3e7aab1c14729","first_seen":"2026-02-07T00:39:12.095038Z","last_seen":"2026-02-07T09:50:53.940082Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1491,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1321,"receive":170,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65b00b24be5f1/990-990/triple-screen-pc-computer-setup-desktop-480-ssd-i5-win-10-pro-wi-fi.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:36.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65b00b24be5f1/990-990/triple-screen-pc-computer-setup-desktop-480-ssd-i5-win-10-pro-wi-fi.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-guploader-uploadid: AJRbA5W85lMYkXwActWfm5tsoOopaZ7bNQrcST2duaGu64_W53JWyRzx158LNb_Hk6DrKXOK\r\nx-goog-generation: 1706036008727633\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 211346\r\nx-goog-hash: crc32c=Md7ewA==, md5=qq/UDmRGtzzE1oauLhLsVA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 211346\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Tue, 23 Jan 2024 18:53:28 GMT\r\netag: \"aaafd40e6446b73cc4d686ae2e12ec54\"\r\ncontent-type: image/jpeg\r\nage: 547\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":211346,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"aaafd40e6446b73cc4d686ae2e12ec54","sha1":"e6cd53835228051e06586dbd83d4e36cb5223cb1","sha256":"e55de3e2a4cfb29fc4b11ee6da4ec99026d8ba6a1bdd1d7dde08875d49d70771","sha512":"98988d2ed21deae08bff1900e77cc63e474341726c2cddee2a8ecc52117fbdc16dde3b1ce2a6540a02e68892d43d3b0b1a45b3625c447b3160d43137d3416eb8","ssdeep":"6144:OpfGhsCUoGlPAvu6ysGt22j569Gd6YEsNED:Op+htUqvfyLb5286YEsNe","tlshash":"a124121b021c1ab5fbd0eca17be72813aabf992903764c544f5309df6429f8dde5a20d","first_seen":"2026-02-07T00:39:12.253255Z","last_seen":"2026-02-07T09:50:53.887115Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1513,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1365,"receive":148,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65ba2b5ee02ca/990-990/500g-korea-numb-cream-skin-numbing-topical-anesthetics-for-tattoo-50.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:36.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65ba2b5ee02ca/990-990/500g-korea-numb-cream-skin-numbing-topical-anesthetics-for-tattoo-50.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-guploader-uploadid: AJRbA5VufBIPi11cS4FgreCvisDKMQp8yiQoyDHWHfOuSdSz8nHCGmAcgJL3xVJMoFdVg3D8uCqUKrY\r\nx-goog-generation: 1706699623007139\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 205978\r\nx-goog-hash: crc32c=FRXapA==, md5=k0BM0hFECrHQD6qGFL775g==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 205978\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Wed, 31 Jan 2024 11:13:43 GMT\r\netag: \"93404cd211440ab1d00faa8614befbe6\"\r\ncontent-type: image/jpeg\r\nage: 549\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":205978,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"93404cd211440ab1d00faa8614befbe6","sha1":"304c0b2b36c1ee3eb9a09224bb99bb2c174dc027","sha256":"799181513f97937237c4570425973883564de8db24d78947ce913a0ff9b6d1f0","sha512":"62f43f01a1bcff7951606a9559c4f0d529f93819b9f2057f5357dc5d6bfd1fce6d6549f082a6ec1b348afdcdccb5bcee41ea09cb5dfcf0ccf31020b9d9ce0cd1","ssdeep":"3072:m4MXmFXuWa60mmFxh1/LKoR/+xtjqVuZ8CaCK3H0wT0/FXVFDtU70R5GuD00RhuL:mmJ0N74Z8d3HF0tFEwRMKRhuKPTE","tlshash":"901401242a88efe1badc176524d7234b3157d1bb2b8f224a85e3981dd6cb57e34e3074","first_seen":"2026-02-07T00:39:12.307879Z","last_seen":"2026-02-07T09:50:53.845797Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1213,"timings":{"blocked":1004,"dns":0,"connect":0,"send":0,"wait":109,"receive":100,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/assets/index-CLDm-2yG.css","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:30.512Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.tiktokpropp.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 13:40:30 GMT","end":"Mon, 04 May 2026 13:40:29 GMT"},"fingerprint":{"sha1":"7F:66:7F:4D:16:40:F2:BB:67:54:E3:04:98:4E:27:FF:AC:99:5C:DE","sha256":"7B:A6:B6:EA:A6:99:D6:2F:9C:45:7E:39:93:41:5C:EE:62:8C:3A:9E:C5:D0:4A:63:46:DA:B6:99:25:49:4F:A2"}}},"request":{"raw":"GET /assets/index-CLDm-2yG.css HTTP/1.1\r\nHost: h5.tiktokshop.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 00:47:30 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 04 Feb 2026 12:44:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69833f40-120e\"\r\nexpires: Sat, 07 Feb 2026 12:47:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4622,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4621)","md5":"d60ca704e97129bc710b182d48062892","sha1":"342b9b53bf6c57b1b53d676146a242198490c485","sha256":"cf3b651586bbdfc52a488d0dcb0ae04fd7be8fe90da9136d13a52109d8031470","sha512":"677163a72536e86a928d1a8c63081f86ecffa2919c6b5ad6c89965a2e4f08cd45bf9119fb8ffb5b66a56cbf5497807487ccdb2b2bb9104e109455ee4b4d2bdff","ssdeep":"48:0Yvgt2g+5/OHajwgVeLbU9VEij9xB+c9hOK6TBEqEkkIqqwqEB2PmHOlRngjcznr:1otHGDkgEoTSTBEAtNw8uurngjcDr","tlshash":"dd910e55fa692838b936d4597a4173cc3509e072c59b75d8bc936b288cc33a33f21a1e","first_seen":"2026-02-07T00:39:12.121967Z","last_seen":"2026-02-07T09:50:53.823155Z","times_seen":3,"resource_available":false,"data":null}},"time_used":450,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":450,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65b3d96539c4c/990-990/white-pore-cleaner-skin-scraper-beauty-instrument.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:34.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65b3d96539c4c/990-990/white-pore-cleaner-skin-scraper-beauty-instrument.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5UiSr7hcaGutuMX2jtVyMQ8rr5f2ILHC-smhtczgM03nkXllfxzI9jfhMhqhEv7qrj7\r\nx-goog-generation: 1706285421643465\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 27109\r\nx-goog-hash: crc32c=0gbvcQ==, md5=TamyK9RPgpo1ohE59Ze/9w==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 27109\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Fri, 26 Jan 2024 16:10:21 GMT\r\netag: \"4da9b22bd44f829a35a21139f597bff7\"\r\ncontent-type: image/jpeg\r\nage: 546\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":27109,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"4da9b22bd44f829a35a21139f597bff7","sha1":"e0712b5e2c61e7e7694d0d95764c78a1e92baf42","sha256":"bbd86cc4760f187fdebc018ba07b3a0c81228962a59992478a16463a1240ec72","sha512":"b5034ca9ad0203a5b8a1ef0723ac573483937938753264098e41aeee43b038c7fbb3c7035524b2ba2d52b62df4e422a3efea5466a558ab778f0010cea65cde3b","ssdeep":"384:VaEhp49aBXECWP3V68Z8VrRGbyILDm3gjE7aMmT:1SzV61rRGbyVWVT","tlshash":"7ec2d08a0e16d7c3f958a97680781f943be61a207bc195ca2efa903401673f6db3d31d","first_seen":"2026-02-07T00:39:12.079013Z","last_seen":"2026-02-07T09:50:53.948992Z","times_seen":3,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":92,"dns":0,"connect":0,"send":0,"wait":14,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/9be6f052be5244a5a967f919e8ba92a8/990-990/liquid-chlorophyll-drops-for-water-high-strength-of-12000mg-per-2x-60ml-bottle-at-4x-concentration-4-month-supply.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:34.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/9be6f052be5244a5a967f919e8ba92a8/990-990/liquid-chlorophyll-drops-for-water-high-strength-of-12000mg-per-2x-60ml-bottle-at-4x-concentration-4-month-supply.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5XU2p9u5pO0mPWY1OGBuNnh_fvUAWosJ4ovCwY-DE1JB8tm7cujWkuT4s84AuFo6e-L\r\nx-goog-generation: 1714162130720931\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 222802\r\nx-goog-hash: crc32c=W5Jkpg==, md5=mp7yxBM60xNHDVSuxKs7yQ==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 222802\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Fri, 26 Apr 2024 20:08:50 GMT\r\netag: \"9a9ef2c4133ad313470d54aec4ab3bc9\"\r\ncontent-type: image/jpeg\r\nage: 546\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":222802,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"9a9ef2c4133ad313470d54aec4ab3bc9","sha1":"93b7c54ae5df7d5d04e88c567e87782be75be2f5","sha256":"62892a4de935d7b96aea0ed1104d96368185aa50ef49c84f42cbbdfadf5c1c48","sha512":"5cdda8a52a4bfd381c7b0b4ec7fc25c7db6b95e9d74c98ef171dace32c373d0ab7b7bf04578ecb6876b9764ffffd61f26dfe50c74dffa4c490a230a4237e78fb","ssdeep":"6144:MSPUdHsIkVfXgwRA7mjReg+fx6dDeiAC4NPaNWWU4:MaUdMZVM8X+fx6diiA9PaNWo","tlshash":"bb241228877711f755ca387aeccc1c15f297dcfed4c29da869d332b8a21b7419292631","first_seen":"2026-02-07T00:39:12.070976Z","last_seen":"2026-02-07T09:50:53.901272Z","times_seen":3,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":89,"receive":94,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65bac7844e4fc/990-990/cream-m-men-long-sleeve-stripe-cable-knited-cricket-jumper.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:34.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65bac7844e4fc/990-990/cream-m-men-long-sleeve-stripe-cable-knited-cricket-jumper.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5X1Ut1J_tz_46z48V9CuUm7z4KVhlJVAsCnWBXXQp4PCwDzxUaRWWK2e_AlKoomYAor\r\nx-goog-generation: 1706739618361026\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 409231\r\nx-goog-hash: crc32c=6G5KNg==, md5=tGAlh7yneIhDpvioNbaFRA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 409231\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Wed, 31 Jan 2024 22:20:18 GMT\r\netag: \"b4602587bca7788843a6f8a835b68544\"\r\ncontent-type: image/jpeg\r\nage: 546\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":409231,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"b4602587bca7788843a6f8a835b68544","sha1":"26b8acc0adbcf65a34421b2c89b9843c273b3d9c","sha256":"ff23caa45ac587f6750d9bee33cfe2f9411d5d0c20ff3cb8068f57c3f4351c16","sha512":"cf57336145efdd68a58eff46af3e7bc92f56b22b9f289596903f094943a2b998ccdcaaaa3d6e681c22148d1f069a92a48abc13a142fc66c2a92e27bc004d99c1","ssdeep":"12288:v21Wy65eXbzNY6uaZAjf/B6IHAQ1riACvg:v8WDeXbzi6u3jh4QYJg","tlshash":"6c94efd0d7b921eab7ea2a6eeffbfe183c712507c358375b2d066074e65d0466782012","first_seen":"2026-02-07T00:39:12.05471Z","last_seen":"2026-06-08T22:23:27.669032Z","times_seen":6,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":131,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65b39427184cc/990-990/7-inch-airfryer-accessories-2-pack-non-stick-bakeware-cake-bucket-pizza-traykitchen-restaurant-tool-set.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:36.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65b39427184cc/990-990/7-inch-airfryer-accessories-2-pack-non-stick-bakeware-cake-bucket-pizza-traykitchen-restaurant-tool-set.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-guploader-uploadid: AJRbA5UBGEs_iLHbR3_c73v2SLyYjLVsK8NPQRpbjhWDpjs7XGi661dDTkm_J3EtDo9QCZ8H\r\nx-goog-generation: 1706267694909682\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 53466\r\nx-goog-hash: crc32c=Y6oBKg==, md5=1ht6UGVYDjmBWMVp7PURlg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 53466\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Fri, 26 Jan 2024 11:14:54 GMT\r\netag: \"d61b7a5065580e398158c569ecf51196\"\r\ncontent-type: image/jpeg\r\nage: 547\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":53466,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"d61b7a5065580e398158c569ecf51196","sha1":"8477493594044a00a5cd4e22bd804be7cb0f3edb","sha256":"1ffe2caa2f3562370fc45377d4542e600573dea1d90a5389101c410c78d35293","sha512":"dc6243d3b7aff9f9df3240fe2323e4bcaf299f00d345ffd3d114231a4c582a8b72985bcfd3871252346e979244a9336c7faa89c528c40a64b5c93d21ebb66ba6","ssdeep":"768:An7+uV5EWIBiHUQ9NLOhQPg8L1jo72ruofElQqIf+8XApIkYOBEeN29ODjkC2:A7+u3EWlHUENL8b72So8xIf6pN2Q6","tlshash":"fb33018e44f05fddea10503b2c0d5ecb4ce621fad6853eea3bd51240db7dbe0889a855","first_seen":"2026-02-07T00:39:12.198273Z","last_seen":"2026-02-07T09:50:53.830839Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1459,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1311,"receive":148,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/assets/index-BaBXOzg8.js","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:31.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.tiktokpropp.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 13:40:30 GMT","end":"Mon, 04 May 2026 13:40:29 GMT"},"fingerprint":{"sha1":"7F:66:7F:4D:16:40:F2:BB:67:54:E3:04:98:4E:27:FF:AC:99:5C:DE","sha256":"7B:A6:B6:EA:A6:99:D6:2F:9C:45:7E:39:93:41:5C:EE:62:8C:3A:9E:C5:D0:4A:63:46:DA:B6:99:25:49:4F:A2"}}},"request":{"raw":"GET /assets/index-BaBXOzg8.js HTTP/1.1\r\nHost: h5.tiktokshop.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/assets/index-Sgi5eB1f.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 00:47:31 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 991\r\nlast-modified: Wed, 04 Feb 2026 12:44:48 GMT\r\netag: \"69833f40-3df\"\r\nexpires: Sat, 07 Feb 2026 12:47:31 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":991,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (988)","md5":"b5d32edb3aca5ebb6a69e6bce1138e77","sha1":"dea43f0f935a647afb6e434aabcb3dd0f6a936ce","sha256":"965248381aae1766680242c08f643d3f56d17106e57ea3aff7e458ae6370389b","sha512":"58e746a5574686c717f77a21d047290a795669936bc3564ed4e0696c68178e86435e4c858e12a52ba7c6daf0dc1a6e1333918087461e82e938e31f5ee9288773","ssdeep":"","tlshash":"9d11e1cddcb8d0b5f17a44ac80190dd13d493b5aa3e091a461a9683433654b9d37db39","first_seen":"2026-02-07T00:39:12.109349Z","last_seen":"2026-02-07T09:50:53.823702Z","times_seen":3,"resource_available":true,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/assets/horiz-4W0iWx_U.js","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:30.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.tiktokpropp.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 13:40:30 GMT","end":"Mon, 04 May 2026 13:40:29 GMT"},"fingerprint":{"sha1":"7F:66:7F:4D:16:40:F2:BB:67:54:E3:04:98:4E:27:FF:AC:99:5C:DE","sha256":"7B:A6:B6:EA:A6:99:D6:2F:9C:45:7E:39:93:41:5C:EE:62:8C:3A:9E:C5:D0:4A:63:46:DA:B6:99:25:49:4F:A2"}}},"request":{"raw":"GET /assets/horiz-4W0iWx_U.js HTTP/1.1\r\nHost: h5.tiktokshop.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://h5.tiktokshop.buzz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 00:47:30 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 920\r\nlast-modified: Wed, 04 Feb 2026 12:44:48 GMT\r\netag: \"69833f40-398\"\r\nexpires: Sat, 07 Feb 2026 12:47:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":920,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (918)","md5":"4e8a752b1f90313bc01ee4cf77bc75b9","sha1":"085ec93afa9ede106281c542f2853f21cd342fc4","sha256":"129be5b9600a5edf4a0e7ba97e571e88feea8edbe2ec2db6a006d564fe94e864","sha512":"98c9666ecd96156f8b7eae8f6507b9169872a696860212740ed46d1f3e260cf84b37fff5d64821ee21328ae3ac850f6a537f4581d9d4ebdd61bce9a4c2d3fa98","ssdeep":"","tlshash":"fa1100cdccb8c0b5b17c50ecc0050d923959367af3e481a591bab83973924ada3b463a","first_seen":"2026-02-07T00:39:12.077951Z","last_seen":"2026-02-07T09:50:53.83594Z","times_seen":3,"resource_available":true,"data":null}},"time_used":452,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":452,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/assets/home-DCkfi4Hc.js","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:30.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.tiktokpropp.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 13:40:30 GMT","end":"Mon, 04 May 2026 13:40:29 GMT"},"fingerprint":{"sha1":"7F:66:7F:4D:16:40:F2:BB:67:54:E3:04:98:4E:27:FF:AC:99:5C:DE","sha256":"7B:A6:B6:EA:A6:99:D6:2F:9C:45:7E:39:93:41:5C:EE:62:8C:3A:9E:C5:D0:4A:63:46:DA:B6:99:25:49:4F:A2"}}},"request":{"raw":"GET /assets/home-DCkfi4Hc.js HTTP/1.1\r\nHost: h5.tiktokshop.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://h5.tiktokshop.buzz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 00:47:30 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 554\r\nlast-modified: Wed, 04 Feb 2026 12:44:48 GMT\r\netag: \"69833f40-22a\"\r\nexpires: Sat, 07 Feb 2026 12:47:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":554,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (553)","md5":"3db649ad7e6dbfd51679b684a6b1e30f","sha1":"6963bd1508f78c63c9c00263f9f20159473db8c9","sha256":"f81f93f23dba598491da3640e3be991e1f1f995e67db5db821849f3e9aecf519","sha512":"f7092f9eb4474e84c3326b084b5a92e3de27484bafd98c14f6fd6700a3441d4c2cf08bc1b01363a7755cebd3d81d453a9f748c228c2220fc1803fc10474674e2","ssdeep":"","tlshash":"81f0cdcfab23e6e341054225d85b3f3ba33a9490b86b0d20bc40f08d396c578615e558","first_seen":"2026-02-07T00:39:12.134189Z","last_seen":"2026-02-07T09:50:53.877594Z","times_seen":3,"resource_available":true,"data":null}},"time_used":453,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":453,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65b2f0a4ea5f9/990-990/toshiba-uf3d-43-inch-smart-fire-tv-1092-cm-4k-ultra-hd-hdr10-freeview-play-prime-video-netflix-alexa-voice-control-hdmi-21-bluetooth.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:34.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65b2f0a4ea5f9/990-990/toshiba-uf3d-43-inch-smart-fire-tv-1092-cm-4k-ultra-hd-hdr10-freeview-play-prime-video-netflix-alexa-voice-control-hdmi-21-bluetooth.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5Xe_nVN5DB8fxyTD-R805Y6GiopUjpxleaumaqIhO0ck4cu5XKMjnwPlb4nsIosFOvx\r\nx-goog-generation: 1706225836444268\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 56071\r\nx-goog-hash: crc32c=cqhi9g==, md5=ZEfp+49k/7If9VaE0wq6Rg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 56071\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Thu, 25 Jan 2024 23:37:16 GMT\r\netag: \"6447e9fb8f64ffb21ff55684d30aba46\"\r\ncontent-type: image/jpeg\r\nage: 546\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":56071,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"6447e9fb8f64ffb21ff55684d30aba46","sha1":"f4d85b8578064da9daa9e132efd11ca677248e9e","sha256":"7ff768f48a6d01c01748da44c17e2d01ff304a80198810ac3420456e08f47626","sha512":"7a053dbb7459bdcf835d95e974133b3796903bd079d15a277937e4d28eaa4f4e699f3737d93115539cd9359e0b8c5575ef7dbfd49d3a915d3ff36bdbfec40bae","ssdeep":"768:/xGgMQ9MO8KLZzW7ocMA4bodRt9MKNLFsEMa0T9gzR5b1BheC9Zhkv:HMO8GzWHTuOLFPd+qzR5pyCLh2","tlshash":"cb43f1c240e9a09cf4275178461f2cb5f28117714b4256fc6bf24ad86e4f867f9e2b36","first_seen":"2026-02-07T00:39:12.083644Z","last_seen":"2026-03-05T08:37:15.294821Z","times_seen":4,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65bc0d36522bb/990-990/hskrcmak4-7-inch-fpv-aerial-camera-unmanned-aerial-vehicle.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:35.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65bc0d36522bb/990-990/hskrcmak4-7-inch-fpv-aerial-camera-unmanned-aerial-vehicle.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5XCwTiv_8NuEpEtQBR4JRZhoseHPbHGRW5ofUmPiNYwlUIBXUqhaJl2zelFGxiS3suOtMf1myA\r\nx-goog-generation: 1706822976655203\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 130477\r\nx-goog-hash: crc32c=uNllsA==, md5=eciwG9Aqu/6vxqhfy7gk/A==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 130477\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Thu, 01 Feb 2024 21:29:36 GMT\r\netag: \"79c8b01bd02abbfeafc6a85fcbb824fc\"\r\ncontent-type: image/jpeg\r\nage: 546\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":130477,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"79c8b01bd02abbfeafc6a85fcbb824fc","sha1":"df5f68c3c48b9505f3cc26f734b7acaf40860005","sha256":"232dcfaa133b7e24df6d8760f741218d97747cafe1ff4fbae8427e568602c304","sha512":"efe77e493fbbf23ca7d7bd8e9db404b9cd9b9a53102dceddfd32ae0aadd9d81369d33e70bd9329c7b78e40adb5e635e7b526acc3f8eeab18a0cf702cdcdb277c","ssdeep":"3072:28uiIAERzv5KeXHPEJp7IOitxbgegZqXXAIp0:iACzvfXHMJ9itGZqnrp0","tlshash":"2bd3ce42155eeff470ee1b6a00c3d74bb1a7edb3428b628d585b018596d3f7c88638b9","first_seen":"2025-10-17T22:05:01.095695Z","last_seen":"2026-03-05T08:37:15.292338Z","times_seen":5,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65b17df80e916/990-990/black-samsung-galaxy-a53-5g-dual-sim-256gb-8gb-ram.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:36.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65b17df80e916/990-990/black-samsung-galaxy-a53-5g-dual-sim-256gb-8gb-ram.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-guploader-uploadid: AJRbA5ULQeUNEVLMDPPOGtezZnVI6_NWfjYxwJ8PbwGO80C0DXr0NUJpaQD-ep3lbKNcdQAHUPezkAI\r\nx-goog-generation: 1706131078331972\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 55779\r\nx-goog-hash: crc32c=9bsFKA==, md5=Gb6RkYiacvzSTql8PBH0xg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 55779\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Wed, 24 Jan 2024 21:17:58 GMT\r\netag: \"19be9191889a72fcd24ea97c3c11f4c6\"\r\ncontent-type: image/jpeg\r\nage: 547\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":55779,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"19be9191889a72fcd24ea97c3c11f4c6","sha1":"71bcfdc42a27497c17d433c2a9631ce978f175ef","sha256":"bd925d174d3084c2f32b13c4bb59ba76ed264b19ac587ce565b539b6631667ac","sha512":"513200f08dd0b7ea59b8ba943492db183a323e56122a394aef55286cc27c6b5738a454399f1adbdd5c53ad09433df7afc62a06d6b0493c94db28f567325f6c93","ssdeep":"1536:ikowhh3+CdPG/K7zBEp6DTqaGKIBcL8K2e:5oQFz70OTqWLr2e","tlshash":"6d43f120fb2665a4f106437096c3e77cc7c98661a60d96a3bbc739323609ab1df1b570","first_seen":"2026-02-07T00:39:12.303556Z","last_seen":"2026-06-08T22:23:27.728455Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1463,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":1430,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/assets/index-Dw_2D7qB.css","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:29.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.tiktokpropp.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 13:40:30 GMT","end":"Mon, 04 May 2026 13:40:29 GMT"},"fingerprint":{"sha1":"7F:66:7F:4D:16:40:F2:BB:67:54:E3:04:98:4E:27:FF:AC:99:5C:DE","sha256":"7B:A6:B6:EA:A6:99:D6:2F:9C:45:7E:39:93:41:5C:EE:62:8C:3A:9E:C5:D0:4A:63:46:DA:B6:99:25:49:4F:A2"}}},"request":{"raw":"GET /assets/index-Dw_2D7qB.css HTTP/1.1\r\nHost: h5.tiktokshop.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 00:47:29 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 04 Feb 2026 12:44:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69833f40-15a97\"\r\nexpires: Sat, 07 Feb 2026 12:47:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":88727,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65006), with no line terminators","md5":"2f9ca13ea62287442c5762ec715aa6d7","sha1":"11b91ebea921936f5349a6a881e2165e18d246eb","sha256":"472746ce6b1634af231389b3553a3b65b2e2eefc7f91de65bab6d17402f01f88","sha512":"59f22b935e9750a8aaa5091a2bbcd509981f8be521f8e402369fcc22762ba4e8ae5caa77386207cf199c1ba4f91e422377c8fe54965d4efd3525d534a228ee2b","ssdeep":"1536:M36YkdytQY5IyNBi3MFYaQj7FCwsBlDOFIxuVoxd/s:eFkdytQYjNIClDsIxuVSm","tlshash":"8e8319e5a9c011fc6f29d5a6cb8736ecb128f5a2cd51dd94f00a411d0fcb7b60663b2a","first_seen":"2026-02-07T00:39:12.190982Z","last_seen":"2026-02-07T09:50:53.857609Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1008,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1008,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/assets/titok-wholesale-CySzbheg.png","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:31.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.tiktokpropp.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 13:40:30 GMT","end":"Mon, 04 May 2026 13:40:29 GMT"},"fingerprint":{"sha1":"7F:66:7F:4D:16:40:F2:BB:67:54:E3:04:98:4E:27:FF:AC:99:5C:DE","sha256":"7B:A6:B6:EA:A6:99:D6:2F:9C:45:7E:39:93:41:5C:EE:62:8C:3A:9E:C5:D0:4A:63:46:DA:B6:99:25:49:4F:A2"}}},"request":{"raw":"GET /assets/titok-wholesale-CySzbheg.png HTTP/1.1\r\nHost: h5.tiktokshop.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T20:51:55.920032Z","times_seen":17875984,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65b1e660ad54c/990-990/hisense-a6b-50-4k-uhd-smart-tv-black-50a6bgtuk.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:34.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65b1e660ad54c/990-990/hisense-a6b-50-4k-uhd-smart-tv-black-50a6bgtuk.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5VFzByZqTPakelxWJD0nIz1x1WCRjf2FICXyAu67kzbXfojHG8LnYIi3g_7b9xB_cp1\r\nx-goog-generation: 1706157901705038\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 182820\r\nx-goog-hash: crc32c=ZEGNgQ==, md5=xcvnXXG2QHKmDUMnGz3xHg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 182820\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Thu, 25 Jan 2024 04:45:01 GMT\r\netag: \"c5cbe75d71b64072a60d43271b3df11e\"\r\ncontent-type: image/jpeg\r\nage: 546\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":182820,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"c5cbe75d71b64072a60d43271b3df11e","sha1":"cb399a46e9885f10ffd3aea044c1cba73d2952ca","sha256":"7ffe2984fe221511a9060ec31c83abc3bbe53f6c05d7ef2c9e4efe8b4805df49","sha512":"74a50b863884ba7cbe5b342e147e5762eef11f78cf366bd7d4e85c84a800e03e8e05a11b145553399dd288a3dd9bca0d242c9841591d98a920dd41cda276e429","ssdeep":"3072:z0vvy2AK7aCfOOz3bIQFuVCRMfsJ7IcrdfCWWjzwDO9zIxfAECcPJKMpsDVrTjUO:z0pAK7dfXzXqKObchfCTdgfFxK3VrSm","tlshash":"be0401ca5036cfe2f2ef875050c343c7355bd8b7845b141e8a5729ea45e79bca29383a","first_seen":"2026-02-07T00:39:12.183968Z","last_seen":"2026-02-07T09:50:53.890096Z","times_seen":3,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":88,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65a9e42c9dab5/990-990/panasonic-ag-cx350-4k-camcorder.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:35.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65a9e42c9dab5/990-990/panasonic-ag-cx350-4k-camcorder.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5VJrj7T7UwFBogjtqihne6ql5TaHwGzVvSvbXZdSNPRWUHaZIBwbAUQLn_2ex9Qw6YgmnQ1vOA\r\nx-goog-generation: 1705632820187420\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 104325\r\nx-goog-hash: crc32c=cc/J/g==, md5=jYdCPcrmPFEFBYsqb2Y5LA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 104325\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Fri, 19 Jan 2024 02:53:40 GMT\r\netag: \"8d87423dcae63c5105058b2a6f66392c\"\r\ncontent-type: image/jpeg\r\nage: 546\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":104325,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"8d87423dcae63c5105058b2a6f66392c","sha1":"5da64b8a979f553d89ca2dac1c4193bc35f97544","sha256":"eb2ee5b148915383bf644d2fc9623f34e99ca23fe6870e6fca22b58c1ea40baf","sha512":"e89220f786f5c90906921efb775f2133eaf9ea8ac2cb3c2bfeff57781201b991074a2f9e22e9cbde00e78b69e6ab7fa4160cb25402e73b5933a53471aaebaca5","ssdeep":"3072:JMKw71uq82i8vNz2sdAn8GYkBPwV5FWd+cY8Dw1:aKw71uq8271z2jZf2rXV/","tlshash":"16a3018ef2c8c80a7199159dfe1e171860c890f870f5e897ba7d1dd8fbd88370859ae1","first_seen":"2026-02-07T00:39:12.185164Z","last_seen":"2026-03-05T08:37:15.317558Z","times_seen":4,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65b2ff794a781/990-990/tudca-liver-support-supplementtauroursodeoxycholic-acid-complex-1000mg-per-servings-bile-salts-for-detox-cleanse-repairkidneygallbladder60.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:35.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65b2ff794a781/990-990/tudca-liver-support-supplementtauroursodeoxycholic-acid-complex-1000mg-per-servings-bile-salts-for-detox-cleanse-repairkidneygallbladder60.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5XqcmkiIigUPx8H8T0JUdpBSpf2MEQiChwh5wV139sHP6JVfjrIJq3S9Ff4DTHG60Wy\r\nx-goog-generation: 1706229629500491\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 76795\r\nx-goog-hash: crc32c=NhYboA==, md5=ZJkx8GOcYMeTCdgYShrjtA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 76795\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Fri, 26 Jan 2024 00:40:29 GMT\r\netag: \"649931f0639c60c79309d8184a1ae3b4\"\r\ncontent-type: image/jpeg\r\nage: 547\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":76795,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"649931f0639c60c79309d8184a1ae3b4","sha1":"7f04d5a8cfe703deb577da8f4047a1782aa48bc6","sha256":"b7e5c2599487d0dc432f72e15d32048fb25ece1674d1a235ada101e66943fc6e","sha512":"3fc301e258fd719a488c228222c70daa2232ca4469d07758259d28d1169fc97b55f114455738181dc5b9c2ea1e41657301c0228be3908f7f06224db589987c34","ssdeep":"1536:qi6gLEXZVjIVpagCza5qtrMazad+wNQWoweyyboDkF0chM:qbBXZVwwgsUqaazMNaUsTs","tlshash":"4473f166f7095840b60cc89eac2edf186ad55af49934ce0b384d6ce8c3dd7bb64a35d0","first_seen":"2026-02-07T00:39:12.110534Z","last_seen":"2026-06-08T22:23:27.690502Z","times_seen":6,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/assets/index-DoEN14Oe.js","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:30.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.tiktokpropp.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 13:40:30 GMT","end":"Mon, 04 May 2026 13:40:29 GMT"},"fingerprint":{"sha1":"7F:66:7F:4D:16:40:F2:BB:67:54:E3:04:98:4E:27:FF:AC:99:5C:DE","sha256":"7B:A6:B6:EA:A6:99:D6:2F:9C:45:7E:39:93:41:5C:EE:62:8C:3A:9E:C5:D0:4A:63:46:DA:B6:99:25:49:4F:A2"}}},"request":{"raw":"GET /assets/index-DoEN14Oe.js HTTP/1.1\r\nHost: h5.tiktokshop.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://h5.tiktokshop.buzz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 00:47:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 04 Feb 2026 12:44:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69833f40-140b\"\r\nexpires: Sat, 07 Feb 2026 12:47:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5131,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (5130)","md5":"1e5779e1078d039dc0d34addce8a1976","sha1":"bd2d59fd2a1f54eb73a01bdb8448ce3244aadfc4","sha256":"489de3df23a9ad6a2fbc0a08ed2a1ab7a10d2958424e3afbbc2cd50e7d2f6eb6","sha512":"35235723ec7038d420bf2ce8be5b90bec8d08244aeadadbee93a4bbc525084e31eb374ea11071bfc021fdc7bf802acc3917f6013ba14676b2f696c7a0ebdd125","ssdeep":"96:zxUBqjTmIO2aA5QGZbQsceU5eBRFx31NfRvV0s:4qjS5mQybQscH4RFxFNfRd0s","tlshash":"2cb1421e4f4a84dcd519cdc4868415811aec5bfe321a8481a2cdae59ada1fbc7ebf1f0","first_seen":"2026-02-07T00:39:12.111608Z","last_seen":"2026-02-07T09:50:53.848216Z","times_seen":3,"resource_available":true,"data":null}},"time_used":450,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":450,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/assets/index-DwDBIbHk.js","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:30.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.tiktokpropp.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 13:40:30 GMT","end":"Mon, 04 May 2026 13:40:29 GMT"},"fingerprint":{"sha1":"7F:66:7F:4D:16:40:F2:BB:67:54:E3:04:98:4E:27:FF:AC:99:5C:DE","sha256":"7B:A6:B6:EA:A6:99:D6:2F:9C:45:7E:39:93:41:5C:EE:62:8C:3A:9E:C5:D0:4A:63:46:DA:B6:99:25:49:4F:A2"}}},"request":{"raw":"GET /assets/index-DwDBIbHk.js HTTP/1.1\r\nHost: h5.tiktokshop.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://h5.tiktokshop.buzz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 00:47:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 04 Feb 2026 12:44:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69833f40-6da\"\r\nexpires: Sat, 07 Feb 2026 12:47:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1754,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1753)","md5":"e7a778285028e3c8884da09a7ffdbd7e","sha1":"bf5592f5423ea9daf0d0fb1adfe13fbec919bd85","sha256":"16ff0c02065fa78d1e65712a76666c50f847a12b95cb5b7ce71577625c96de0d","sha512":"3f71f3d8d6b51effafcd89d8a504ecab58985c55823481d0e64ba1fdc8ef31254048c20ca13e900becc916fb8ee0bdb6ce46a1f17946c99989fa9786888c15f7","ssdeep":"","tlshash":"6231568d7882c4b6217384e455801d88b20d9f9b252c7a94b3ecbe1633d2e95cf55e1a","first_seen":"2026-02-07T00:39:12.161001Z","last_seen":"2026-02-07T09:50:53.892563Z","times_seen":3,"resource_available":true,"data":null}},"time_used":454,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":454,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65bc4a276f264/990-990/ultra-duration-lip-liquid-long-lasting-local-tattoo-cream.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:34.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65bc4a276f264/990-990/ultra-duration-lip-liquid-long-lasting-local-tattoo-cream.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5VghVg3h9baRXiz6K3jy15R8a-4RanX23gjhEsnRcEq1-ImjQCL9qcUhweGAGFu5kY0\r\nx-goog-generation: 1706838581390919\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 167992\r\nx-goog-hash: crc32c=Zx88oA==, md5=RBO3UaqvkAwZ/rYyAEqekA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 167992\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Fri, 02 Feb 2024 01:49:41 GMT\r\netag: \"4413b751aaaf900c19feb632004a9e90\"\r\ncontent-type: image/jpeg\r\nage: 546\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":167992,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"4413b751aaaf900c19feb632004a9e90","sha1":"214a8b5b619b64417e97255afc323c07efccb243","sha256":"56b5e7cefbbdf2414966272f0dbcfe6670459fbccd29bf42226cb3d47ab481da","sha512":"01c832eea0a3a6e8b133fbedab3cb368e363a40d9a6ee9b4107346bfb04a9d5c12500c564215dc94dea2508c74e30a69b5fa8c92108782a904aabc46b8dbacac","ssdeep":"3072:0s1sjVeBhT5jN4GQcN6qOkKr37pGhiEXmxOE8O:b1ker1NZtDtKr7pSiEXmxrP","tlshash":"81f3022242f4efe2f1dcaf9592c71b4b752bd2bb1a47269424139898cdc7c3c06176b6","first_seen":"2026-02-07T00:39:12.214746Z","last_seen":"2026-02-07T09:50:53.922631Z","times_seen":3,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":42,"dns":0,"connect":0,"send":0,"wait":87,"receive":85,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65bc566ce9eec/990-990/8inch-10inch-12inch-3-pcs-pizza-pan-set-stainless-steel-pizza-pan-round-pizza-oven-pans-tray-for-baking-serving.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:34.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65bc566ce9eec/990-990/8inch-10inch-12inch-3-pcs-pizza-pan-set-stainless-steel-pizza-pan-round-pizza-oven-pans-tray-for-baking-serving.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5X5tBNk0AahvKh2sth4-uTdRp-Lxll5352bX0DM681N0AviDSChDeM2Xh3MIca0OY27\r\nx-goog-generation: 1706841724073394\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 588793\r\nx-goog-hash: crc32c=lLLbqQ==, md5=/rBHPGlF4DKV/X2Eb1LbJw==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 588793\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Fri, 02 Feb 2024 02:42:04 GMT\r\netag: \"feb0473c6945e03295fd7d846f52db27\"\r\ncontent-type: image/jpeg\r\nage: 546\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":588793,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"feb0473c6945e03295fd7d846f52db27","sha1":"3b04be58a6da3fb66f3d336aadcf5154c67816ef","sha256":"8581e5ff380262f2a6abb5b1804a30c268e22d6aa7a42cff5eadf408c568b0ea","sha512":"f670b73264c24437ccf1aad0b2a7f83ebce6bc2fe5963c7f5cc5b2c43c04e61155fcf3d5c6cd54abc046fe178a9b0ad21dc12e0f9d8150df52dbe3fa0c0615dc","ssdeep":"12288:oVYVYq7Po84it6vIXz7a34qwmbB8u6zfeNmasqqh7UquXl+NgmfZ1TdH:99Po84Qz7eqmlUeQT7UVXINg4zH","tlshash":"b2c4121fa8ca5ffcd822c891c656ff4d159bcb065f5942032e1a9f94da1ec9843af8c1","first_seen":"2026-02-07T00:39:12.249628Z","last_seen":"2026-02-07T09:50:53.87843Z","times_seen":3,"resource_available":false,"data":null}},"time_used":294,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":205,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65a8758d535a3/990-990/weighted-hula-hoop-for-adults-blue-15kg-from-just-be-padded-wavy-hula-hoop-for-weight-loss-and-core-balance-strength.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:34.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65a8758d535a3/990-990/weighted-hula-hoop-for-adults-blue-15kg-from-just-be-padded-wavy-hula-hoop-for-weight-loss-and-core-balance-strength.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5WmGvpfaj7i8nhtO9_GWPc1OiPx3OO9To3DWDY9YMfkSu96vlgpi3TzK76CjF-sz1In\r\nx-goog-generation: 1705538975940251\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 128141\r\nx-goog-hash: crc32c=7Z1Fwg==, md5=rppCOFBpR/R4RLMcNxuH9g==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 128141\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Thu, 18 Jan 2024 00:49:35 GMT\r\netag: \"ae9a4238506947f47844b31c371b87f6\"\r\ncontent-type: image/jpeg\r\nage: 546\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":128141,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"ae9a4238506947f47844b31c371b87f6","sha1":"d96320b4580b81fbfa30f0337225ea1b6c26f8e3","sha256":"26b2bf14de13469940e6392343dd030dfc683852d8bf807967695e84614fd453","sha512":"f33bc13f05fa6729dee8f7f5fb6d560b63627c765552f0a4a07ae9b0e85dd7b4f34d2e456f8b4bdca358e40a3d474ec7d91e66fabee4f775a517cf6743f32dcd","ssdeep":"3072:ctvMGxq9oo4owBuvsZW5gG0A38v1hbxSr:a09oo+B1YZ8thbxs","tlshash":"69c3f18af597d4543435144cae0e6b388bcaa1f6ccf1d929b9ed0ce5d7ced0b48a462c","first_seen":"2026-02-07T00:39:12.187512Z","last_seen":"2026-06-08T22:23:27.707721Z","times_seen":6,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/assets/index-DdndYs5G.css","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:30.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.tiktokpropp.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 13:40:30 GMT","end":"Mon, 04 May 2026 13:40:29 GMT"},"fingerprint":{"sha1":"7F:66:7F:4D:16:40:F2:BB:67:54:E3:04:98:4E:27:FF:AC:99:5C:DE","sha256":"7B:A6:B6:EA:A6:99:D6:2F:9C:45:7E:39:93:41:5C:EE:62:8C:3A:9E:C5:D0:4A:63:46:DA:B6:99:25:49:4F:A2"}}},"request":{"raw":"GET /assets/index-DdndYs5G.css HTTP/1.1\r\nHost: h5.tiktokshop.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 00:47:30 GMT\r\ncontent-type: text/css\r\ncontent-length: 390\r\nlast-modified: Wed, 04 Feb 2026 12:44:48 GMT\r\netag: \"69833f40-186\"\r\nexpires: Sat, 07 Feb 2026 12:47:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":390,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (389)","md5":"f4ad8f2daf9f8ae37ab0afbcad60e511","sha1":"7771a9dca37af07d05a7474a3948b10223ced2fe","sha256":"5005ec54180605d4aad7693fc428ced15eb1916f49ad95fb2c2703a94569089b","sha512":"d620373a77064f7dca8d07d4b17173491d77ad81ad160a985e46a7dce41e2fd790bbb6abfb3b816dfd0f86f26ce1df2eb3bf7519f922dab05589346a98c7e56d","ssdeep":"","tlshash":"16e01a1221925fac1c7ad9800c9012e6c4d9840db1c739da4516631a0ccfab31bf399d","first_seen":"2025-10-08T06:16:58.552535Z","last_seen":"2026-06-08T22:23:27.829108Z","times_seen":13,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/assets/index-BFldImpd.css","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:30.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.tiktokpropp.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 13:40:30 GMT","end":"Mon, 04 May 2026 13:40:29 GMT"},"fingerprint":{"sha1":"7F:66:7F:4D:16:40:F2:BB:67:54:E3:04:98:4E:27:FF:AC:99:5C:DE","sha256":"7B:A6:B6:EA:A6:99:D6:2F:9C:45:7E:39:93:41:5C:EE:62:8C:3A:9E:C5:D0:4A:63:46:DA:B6:99:25:49:4F:A2"}}},"request":{"raw":"GET /assets/index-BFldImpd.css HTTP/1.1\r\nHost: h5.tiktokshop.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 00:47:30 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 04 Feb 2026 12:44:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69833f40-549\"\r\nexpires: Sat, 07 Feb 2026 12:47:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1353,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1352)","md5":"47eca8094b0571ef5429f0b8b75b90a2","sha1":"79f3ec8023d3944090043a9f30915c48592c537e","sha256":"d365937f9217242c8966e985403b568d8e833be8bb158f2ad9f34290ba8ad14d","sha512":"5711cb8179e0d5adc59a206d3a70f985644eff50984213fc35888e1863691681d86c730237f49c87e1a5b4d76efb3994e93af12578a005e91a4f9a5e2d3b3c8a","ssdeep":"","tlshash":"3821ce35a978993f6f1271251bda06da702eb768cc20f6a5f624a2d009c73fd1633313","first_seen":"2025-04-17T21:25:00.09228Z","last_seen":"2026-07-12T23:26:43.156742Z","times_seen":92,"resource_available":false,"data":null}},"time_used":451,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":451,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65ba20a445732/990-990/3pc-non-stick-pizza-pan-tray-baking-round-oven-tray-crisper-91013in.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:35.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65ba20a445732/990-990/3pc-non-stick-pizza-pan-tray-baking-round-oven-tray-crisper-91013in.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5UHtPnFkjvzrYOIY823O0vVW804dLMqQ71ZygfBxvcioBpNhgJojkFeSO31kC7gIdhz\r\nx-goog-generation: 1706696875179165\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 309575\r\nx-goog-hash: crc32c=eSAmXg==, md5=0GGf/LAsglLwYFR/NupMSA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 309575\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Wed, 31 Jan 2024 10:27:55 GMT\r\netag: \"d0619ffcb02c8252f060547f36ea4c48\"\r\ncontent-type: image/jpeg\r\nage: 546\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":309575,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"d0619ffcb02c8252f060547f36ea4c48","sha1":"06998b12412f272b9b30cae1c2a03677a80cc63d","sha256":"7d00af10a1343f42fc28d2029048d475b359f404f85e62a9b488613521e33137","sha512":"737d4ea2fad37b31e5a784c441e252c2efd5492ddf68adc9243a76b8250008547f5e3adce084426fdf8f3aff4e8112e60e9f08b60ac053feaff7ee9d29188c2a","ssdeep":"6144:A5CkG3G6Cr4ioAWWW2IRPRMu45UzLM/ANmP:A0n3OrSr92GwqzLoA0","tlshash":"0a64783e9329692fc2df4c56e971aa8317b78a89d24b0830f415d6c3633374a739ad4d","first_seen":"2026-02-07T00:39:12.072808Z","last_seen":"2026-02-07T09:50:53.918287Z","times_seen":3,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65b2fddbbfee2/990-990/organic-wormwood-clove-and-black-walnut-gut-support-colon-detox-for-humans-health-intestinal-strong-natural-cleanse-by-flowzuk-capsules.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:35.948Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65b2fddbbfee2/990-990/organic-wormwood-clove-and-black-walnut-gut-support-colon-detox-for-humans-health-intestinal-strong-natural-cleanse-by-flowzuk-capsules.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5Uu7_Kk4AyEKlG1Obh0efY1u5KFI1dkra_6HWKigBW4vKG48n4TCtKPN43fiIAm-IfMwc9oH04\r\nx-goog-generation: 1706229214254381\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 67044\r\nx-goog-hash: crc32c=/49sew==, md5=qqX76yOlb5lgU37WSBOSuQ==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 67044\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Fri, 26 Jan 2024 00:33:34 GMT\r\netag: \"aaa5fbeb23a56f9960537ed6481392b9\"\r\ncontent-type: image/jpeg\r\nage: 547\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":67044,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"aaa5fbeb23a56f9960537ed6481392b9","sha1":"fd06d868d697b79f6059c4e2175a9f8cad68876d","sha256":"4a3ee16b6c8b8cbd30c248ba20675b5e9c1131deed2f7415233e997d49509ae7","sha512":"cd18e38dbcc778d346ac887054ad769c0135bab804f2abd7ee6a333923c84b4bafde2350d72cf671d8bd24fdb10e0a650ca5c744594902b3f1f4a53d30b5f4b2","ssdeep":"1536:LgV3yKXA4Eg+XPiF9XT2a90dxQvNvd0GnivUDe:LWCCA3RX6vXZ907Q3Dic6","tlshash":"316302cd2bc6f688f2234f37c7fb1c543870aacd8e9ca9c90cda65a4ade2bc15561111","first_seen":"2026-02-07T00:39:12.107919Z","last_seen":"2026-02-07T09:50:53.85662Z","times_seen":3,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65aa76700e41b/990-990/hasbro-wolverine-electronic-claw-toy.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:35.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65aa76700e41b/990-990/hasbro-wolverine-electronic-claw-toy.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5VI6nD8Io2cMdx34yMZxae0rFtKAt0LchUQH47DRONR2ffX5cUNCcNeWcVJm4ca5JpyBxbIcT8\r\nx-goog-generation: 1705670282950853\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 71488\r\nx-goog-hash: crc32c=k/3Y+w==, md5=iSBdNqlofYWNIqyWPHG8aA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 71488\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Fri, 19 Jan 2024 13:18:02 GMT\r\netag: \"89205d36a9687d858d22ac963c71bc68\"\r\ncontent-type: image/jpeg\r\nage: 547\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":71488,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"89205d36a9687d858d22ac963c71bc68","sha1":"af673824c7d7dcad41cac3c4d922c7478824a46e","sha256":"deceb141c18b1e529d85eceac89613a6475cbd24d7cfb12d7c3da4279f099eac","sha512":"6428e4a71f91672f06c31f6160944ea21c20716e36511453a80770b3b844ed6548f5206db4fb2b1847a918d1412ac7a9ffdc22a20326c0b319a04ef4d01f7f2f","ssdeep":"1536:P+ubGEHl/An7Zdxu0hVsKNRKOPn6kUbdbpMbp1mY3xTm:P+AXHdAn42sOGclm","tlshash":"326302614f41ba8cf8e86cb5c4f1de27badf2a321627c8581aef1d944d3091cdc869e5","first_seen":"2026-02-07T00:39:12.262956Z","last_seen":"2026-02-07T09:50:53.840603Z","times_seen":3,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onbuy.com/product/65b11d570c44c/990-990/heavy-duty-rolling-grass-lawn-garden-aerator-steel-spike-roller-aluminum-handle.jpg","fqdn":"cdn.onbuy.com","domain":"onbuy.com","tld":"com"},"ip":{"addr":"34.36.186.129","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:36.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.onbuy.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:27:06 GMT","end":"Wed, 22 Apr 2026 21:23:02 GMT"},"fingerprint":{"sha1":"8E:AE:9B:CD:2F:E3:AE:92:F9:09:DF:A6:3D:F4:8E:27:E1:0D:DE:9C","sha256":"55:79:C9:A4:AC:A0:6E:30:A4:6B:A4:66:0E:2E:D4:49:91:B8:8D:9F:4B:80:F1:4A:F4:B2:5B:87:31:53:E8:97"}}},"request":{"raw":"GET /product/65b11d570c44c/990-990/heavy-duty-rolling-grass-lawn-garden-aerator-steel-spike-roller-aluminum-handle.jpg HTTP/1.1\r\nHost: cdn.onbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-guploader-uploadid: AJRbA5Xs3jl4V4sl1eAMAiJlM5z3iGfazVeE2EkRXgGqa1DRy58z2y9AUgXtMyGF-NDPpHed\r\nx-goog-generation: 1706106433783755\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 471067\r\nx-goog-hash: crc32c=g3HemQ==, md5=sLe2mquMC+shr78Riv5r4g==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 471067\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 07 Feb 2026 00:38:28 GMT\r\ncache-control: public,max-age=604800\r\nlast-modified: Wed, 24 Jan 2024 14:27:13 GMT\r\netag: \"b0b7b69aab8c0beb21afbf118afe6be2\"\r\ncontent-type: image/jpeg\r\nage: 549\r\nx-cache-hit: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":471067,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 990x990, components 3","md5":"b0b7b69aab8c0beb21afbf118afe6be2","sha1":"2b4e0e467439ec01769c3f8453af31c69d7649cb","sha256":"0e9b986a8ed6afcbe81da17985f3dc6731f678da01795700b9aafc4c0e7acb36","sha512":"e34601ae958fe2e5ce4e4250f3859cab01c2f12745f26a245a882617d03549e7ae93c488c9ca85bb856c28ca963271831e6c4bd85497ab1b809edcf5f42cafb4","ssdeep":"12288:IfWQx2vEChhEj2PS15T4iXNZX1KN+rZWNOiPXMjW25k0:YX2MQhA2PiKi9Z8N+IPXMR53","tlshash":"b2a423cf9ff0c2a1736b53a5bea66db85d8709403ec04d913b49a25c638648ed590bf3","first_seen":"2026-02-07T00:39:12.237983Z","last_seen":"2026-02-07T09:50:53.844851Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1265,"timings":{"blocked":1033,"dns":0,"connect":0,"send":0,"wait":94,"receive":138,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.tiktokshop.buzz/assets/horiz-4W0iWx_U.js","fqdn":"h5.tiktokshop.buzz","domain":"tiktokshop.buzz","tld":"buzz"},"ip":{"addr":"134.122.138.24","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h5.tiktokshop.buzz/","date":"2026-02-07T00:47:31.271Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.tiktokpropp.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 13:40:30 GMT","end":"Mon, 04 May 2026 13:40:29 GMT"},"fingerprint":{"sha1":"7F:66:7F:4D:16:40:F2:BB:67:54:E3:04:98:4E:27:FF:AC:99:5C:DE","sha256":"7B:A6:B6:EA:A6:99:D6:2F:9C:45:7E:39:93:41:5C:EE:62:8C:3A:9E:C5:D0:4A:63:46:DA:B6:99:25:49:4F:A2"}}},"request":{"raw":"GET /assets/horiz-4W0iWx_U.js HTTP/1.1\r\nHost: h5.tiktokshop.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h5.tiktokshop.buzz/assets/index-Sgi5eB1f.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Feb 2026 00:47:31 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 920\r\nlast-modified: Wed, 04 Feb 2026 12:44:48 GMT\r\netag: \"69833f40-398\"\r\nexpires: Sat, 07 Feb 2026 12:47:31 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":920,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (918)","md5":"4e8a752b1f90313bc01ee4cf77bc75b9","sha1":"085ec93afa9ede106281c542f2853f21cd342fc4","sha256":"129be5b9600a5edf4a0e7ba97e571e88feea8edbe2ec2db6a006d564fe94e864","sha512":"98c9666ecd96156f8b7eae8f6507b9169872a696860212740ed46d1f3e260cf84b37fff5d64821ee21328ae3ac850f6a537f4581d9d4ebdd61bce9a4c2d3fa98","ssdeep":"","tlshash":"fa1100cdccb8c0b5b17c50ecc0050d923959367af3e481a591bab83973924ada3b463a","first_seen":"2026-02-07T00:39:12.077951Z","last_seen":"2026-02-07T09:50:53.83594Z","times_seen":3,"resource_available":true,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"h5.tiktokshop.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}