{"report_id":"8a36e3ba-bc1f-4d9f-971b-871e4baa8199","version":6,"status":"done","tags":[],"date":"2026-01-04T14:58:39Z","url":{"schema":"http","addr":"makeup-fx-shop.com","fqdn":"makeup-fx-shop.com","domain":"makeup-fx-shop.com","tld":"com"},"ip":{"addr":"67.209.117.37","port":0,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"makeup-fx-shop.com/","fqdn":"makeup-fx-shop.com","domain":"makeup-fx-shop.com","tld":"com"},"title":"Makeup-FX Shop wigs, prosthetics, beards, moustaches, mustaches - Makeup-FX Shop","dom":{"size":3101,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3094), with no line terminators","md5":"fa7c938e11c2d7d6608c2aec2ff4957e","sha1":"2728beb5c3a513a9b4041768607ce9ad37bf0e93","sha256":"5402a3cdbc128bcc2380d97014e54a3ad82547a26d4e350b540a2a2968b0823d","sha512":"5d2eee4559557c13ef44b214ac9b645e6c32792ce41def379cb8df3e297fd3787a907fe4140596ce2d5568d250269c34a8a1c6bd11b9793cc4e176cdfc84493b","ssdeep":"","tlshash":"af51ffa1608c501b9213d5c0e9923adeb0ee015cc73158d07e1c26df96daeb718a717d","dom_hash":"domhashe267eb60b27890093658a64c7f1c1597","first_seen":"2025-12-12T00:46:13.655887Z","last_seen":"2026-02-01T20:25:22.151953Z","times_seen":156,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"makeup-fx-shop.com","fqdn":"makeup-fx-shop.com","domain":"makeup-fx-shop.com","tld":"com"},"ip":{"addr":"67.209.117.37","port":0,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-08T14:58:39Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-04","alert":"Phishing Block","trigger":"makeup-fx-shop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"translate.google.com","ip":{"addr":"142.250.178.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":609,"first_seen":"2012-05-30T01:30:32Z","last_seen":"2025-12-29T04:43:20.372575Z","alert_count":0,"request_count":2,"received_data":81868,"sent_data":948,"comment":"","tags":null,"fingerprints":null},{"fqdn":"translate.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":6317,"first_seen":"2012-05-31T07:21:21Z","last_seen":"2025-12-29T04:06:08.859823Z","alert_count":0,"request_count":3,"received_data":372337,"sent_data":1714,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2025-12-28T22:24:05.936453Z","alert_count":0,"request_count":5,"received_data":916370,"sent_data":2730,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.com","ip":{"addr":"142.251.157.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2025-12-28T22:22:31.188277Z","alert_count":0,"request_count":2,"received_data":2436,"sent_data":868,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-12-28T22:17:10.032556Z","alert_count":0,"request_count":1,"received_data":12274,"sent_data":454,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"makeup-fx-shop.com","ip":{"addr":"67.209.117.37","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"domain_registered":"2017-12-05","domain_rank":0,"first_seen":"2026-01-04T07:19:55.331829Z","last_seen":"2026-01-04T07:19:55.33183Z","alert_count":175,"request_count":44,"received_data":2620968,"sent_data":22906,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"bxSlider","description":"Add a respsonsive image slider to any website.","website":"https://bxslider.com/","common_platform_enumeration":"","icon":"bxSlider.png","categories":["Photo galleries","JavaScript libraries"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"ZURB Foundation","description":"Zurb Foundation is used to prototype in the browser. Allows rapid creation of websites or applications while leveraging mobile and responsive technology. The front end framework is the collection of HTML, CSS, and Javascript containing design patterns.","website":"https://foundation.zurb.com","common_platform_enumeration":"","icon":"ZURB Foundation.png","categories":["UI frameworks"]},{"name":"CubeCart","description":"CubeCart is a free ecommerce platform that businesses can use to build, manage, and market their online stores.","website":"https://www.cubecart.com","common_platform_enumeration":"cpe:2.3:a:cubecart:cubecart:*:*:*:*:*:*:*:*","icon":"CubeCart.png","categories":["Ecommerce"]},{"name":"Modernizr","description":"Modernizr is a JavaScript library that detects the features available in a user's browser.","website":"https://modernizr.com","common_platform_enumeration":"","icon":"Modernizr.svg","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Chosen","description":"Chosen is a jQuery plugin that makes long, unwieldy select boxes much more user-friendly.","website":"https://harvesthq.github.io/chosen/","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-12-28T22:14:05.525046Z","alert_count":0,"request_count":4,"received_data":141366,"sent_data":2148,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"makeup-fx-shop.com/skins/fx_foundation/js/3.cubecart.validate.js","fqdn":"makeup-fx-shop.com","domain":"makeup-fx-shop.com","tld":"com"},"ip":{"addr":"67.209.117.37","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"535f9702240c49513aa6793f9200907a","sha1":"e9edfdd3c3196fef0d66b11778f324dcb1fbfc44","sha256":"21161a30d2e5f00c0379a5813d8e206ef3bf21a45397a1643eeec30631695c49","sha512":"43231ef627b375658f1d110380fb8d2df709aabfb88e634ce88e37a0ce1a8c8ca1a028c4ef232eb6d507419725c9c05c90316587e704f8e35e5b757249aed166","ssdeep":"192:ZN6ytkU3CVyi+mU3qwCVytRVxc3Cw+VyB3ww+VyZ+yafU6SQ+crm+2NhDI+yav8E:/WUQqqEI","tlshash":"e6724a089bfb26661937f07c58afd142a571c06b1d1a6e30b92c11f82fcaf5875f93a0","size":17009,"data":"","first_seen":"2026-01-04T14:58:49.805888Z","last_seen":"2026-01-04T14:58:49.805888Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"makeup-fx-shop.com/","fqdn":"makeup-fx-shop.com","domain":"makeup-fx-shop.com","tld":"com"},"ip":{"addr":"67.209.117.37","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"0ed1b7c945a003197f8b415d7a2d4db1","sha1":"28f8710fa1b6fdb682fc663f0c88755d3b8937e4","sha256":"54b2566ca87a6cefb2dca57fa16fffbe35ee9b35faf8d6f88cbe9bc9df32545e","sha512":"374129cbe05f66b044c8c3b74d224d4fbbf23a4bed07d124881acc79ad4fce21c3e77774fc9a204064f8d16cf18eb37fd7959aa77553d389f813fc2269282153","ssdeep":"","tlshash":"26a01260f4f202500c781435057f00805d042441b01c090000445bd03fb4958c203e1c","size":85,"data":"","first_seen":"2026-01-04T14:58:49.826011Z","last_seen":"2026-01-04T14:58:49.826011Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"makeup-fx-shop.com/skins/fx_foundation/js/vendor/jquery.chosen.min.js","fqdn":"makeup-fx-shop.com","domain":"makeup-fx-shop.com","tld":"com"},"ip":{"addr":"67.209.117.37","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"63fec16cd0e784db67058f42d5637241","sha1":"3e3efe146d09a13491e70236cc03725aa7b66d1a","sha256":"e0f1ea0baec721fea28e0fca582f3b96275cad8d6269d59eb6edd62f331b63f4","sha512":"f3adbfa946196d77061e0097b54f964cd9622b51210b033603ff518389c7ebabb6dc4e3bf98e6db69c19b332cac984d9017e5323b4770074807142802198033a","ssdeep":"768:HdAhKE5Eym+7af0WEaw94/uZvwI4Nb9aDTkYmC6ENj6bA:HOvxPWEaw94/u/4Nb9aP3OENj6bA","tlshash":"bed24184bbf1a22141ba54eea45e61c5a337a4dcd80c89dcfe6ddde25868c0d712fb34","size":28456,"data":"","first_seen":"2023-03-07T12:57:18Z","last_seen":"2026-08-05T17:15:34.567276Z","times_seen":492,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"makeup-fx-shop.com/skins/fx_foundation/js/2.cubecart.js","fqdn":"makeup-fx-shop.com","domain":"makeup-fx-shop.com","tld":"com"},"ip":{"addr":"67.209.117.37","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c7bd5ab18e0e5637fc6f4febbb726f55","sha1":"e09ee5b93ef6b1da85ddf014a36a4e0ef6704c0c","sha256":"2f747a4e543999fd34c394fd5fb0be90c5396aa4f50e28a0dd40d5ac3f636956","sha512":"6de8e5d542f5c96d3b8e80cdee748379fe54e79da3960ee9cbc6882b1ee6cc3c7eb8705ba16782b8b2e6ce9fe8128ed78b608d216a23f094e6b44aca945705fe","ssdeep":"384:41yeQU7vfC34OAGTo5tn0IXOIJL14jqGErYX9rZqdAumi6ojC8YG5IiJc9:41uULtOA/FOIxGqGErYX9rZqr9C6Ii29","tlshash":"7ba20c18f6f765b060b7307b5f7f42007639405b5109ce04bd8caee44fa4639aab6bad","size":23088,"data":"","first_seen":"2026-01-04T14:58:49.758477Z","last_seen":"2026-01-04T14:58:49.758477Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"makeup-fx-shop.com/modules/plugins/absolute_option_matrix_prices/js/script.js","fqdn":"makeup-fx-shop.com","domain":"makeup-fx-shop.com","tld":"com"},"ip":{"addr":"67.209.117.37","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8595b2f27e0c3bdab34a094fb6beb787","sha1":"c8036ac2ffcdf3d9e621b0bb42bcceeca141afab","sha256":"3a78509c440fd15cad6abda8d71c9f6903054aac5de5f291a86aab51f37e49f4","sha512":"ba0404901a8e6329a356d85e44691aae6b8a4ee29e8b7d7c4f32177f8d5c9da1e2f22998ade62ce51fd1ef7da68e2efba781253d00ed43a625cc229ae69049e7","ssdeep":"","tlshash":"8651e0f0b64d236a81df33a4983916845e7cc172a37204fdb40dfac845609b5e3ab76e","size":2681,"data":"","first_seen":"2026-01-04T14:58:49.762289Z","last_seen":"2026-01-04T14:58:49.762289Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"makeup-fx-shop.com/skins/fx_foundation/js/1.foundation.min.js","fqdn":"makeup-fx-shop.com","domain":"makeup-fx-shop.com","tld":"com"},"ip":{"addr":"67.209.117.37","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"17cdbd200df53243fdbcda45c6fc847d","sha1":"420d8cca6daa0e8f88dc2bc2d1854891eb09b99c","sha256":"3135df204efb9e4aa571287908de9f101bffa2f335f6857a77e2d47a2c407618","sha512":"b6081a4e9ada2884c8990335e13206f3ddc5a0083d5c13fb9ff9fbfd0d0f8286799bb8c898a50ff345b95e8dcfa5c38bbaa196c6170fc2bf9fb171d5473b89cb","ssdeep":"1536:Wo6E1fD4TQ0jpssWHlVhe/VLrTsF6SYfEZ2St48nwwWIrgmGg1jf1OloajxeZYSJ:nSJ5TsF6SYMZwmGg1jfwiajx3h+uy","tlshash":"2f144d0a76f3206a8567707a8faf52057232440b590aee297d7c83849fd097856f2ffd","size":195055,"data":"","first_seen":"2026-01-04T14:58:49.787662Z","last_seen":"2026-01-04T14:58:49.787662Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"makeup-fx-shop.com/","fqdn":"makeup-fx-shop.com","domain":"makeup-fx-shop.com","tld":"com"},"ip":{"addr":"67.209.117.37","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ea77678a8eae74f0c070767e7e923b11","sha1":"fdb80620b497ff597d0081a057e2cd849a0d1c4f","sha256":"4a7d8f7908f18fcb8115772a49ea01f23b79053feb75d205a7e3e4e2a41ceb66","sha512":"c38623a2f48a7b57fd92fa5218f0cc329bf5118c3a7277abc1096994f1ca138b543cc123b400a2b4d6580404660b87308674d24387a7f2bb673b96a7101088fc","ssdeep":"","tlshash":"10d01257f130100e0496b21ae3856dcc7674844a053e0c2a7652908f3cf2fac370d5a4","size":207,"data":"","first_seen":"2026-01-04T14:58:49.827368Z","last_seen":"2026-01-04T14:58:49.827368Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"makeup-fx-shop.com/skins/fx_foundation/js/vendor/jquery.validate.min.js","fqdn":"makeup-fx-shop.com","domain":"makeup-fx-shop.com","tld":"com"},"ip":{"addr":"67.209.117.37","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"41dca229d87ea9182e37fb89389f0e2e","sha1":"8722d4e8189f4eb7667df93f11de766e142e26ac","sha256":"b5d68e883b0d01a29c6066e2f888976b364526756440aeb57883dae84d8ca165","sha512":"66ebb6f8e7a9e161f16f50dfb4de2dea59f2f7f0c07da606c1f0a137835d4cb3460b68b77d3d00ee47b84a847ea134024e4277062d8edef588c1778aa5323bac","ssdeep":"384:QvpjCy+Jx6UtHYlHUdS2L7wQ548NsOAN/tllEny+Ww5MQPN3txwV/vtPx+OLDEoG:U+Jx6U2lHUdS2QQ54R7/1Eny+WwhqxVs","tlshash":"0192b68d77d670065a9630f4a05b660760b669a0a008e83cb5b8e4c1bef8fcc50f7f78","size":21089,"data":"","first_seen":"2023-04-05T04:11:10Z","last_seen":"2026-08-06T10:43:01.18757Z","times_seen":2424,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"makeup-fx-shop.com/skins/fx_foundation/js/vendor/jquery.js","fqdn":"makeup-fx-shop.com","domain":"makeup-fx-shop.com","tld":"com"},"ip":{"addr":"67.209.117.37","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f5d547e5b88bd3a9b94df8c4dd1cd638","sha1":"2ada42c8fd78888a0d0c8ec0dd08e58fe136b0d2","sha256":"12ccaa063cdecf7fa7c7822978a7fd98bd2063ec2ad9150353b8271ae09e1803","sha512":"d78ac3194a6e93a912a59355307379f1071516dd8cadf4548de127b1a5fe947faebce6c60ff557bcc935da093d47f768a82693178903809b6cd282bc1ecb1349","ssdeep":"1536:qm241ek/SRSMO20RALjoRzSdXEs3PIwzwwqA+ACLS6sLJ1t5ZLoq33oTxxlRBQer:FrjRh51lSz1t5idxlfXa98HrZ","tlshash":"8283d7d8b2d6b062967730b890bf510bf17a98dab44c4ca4f058c8e47db4a9d507bf2d","size":84732,"data":"","first_seen":"2023-03-12T20:42:23Z","last_seen":"2026-08-06T07:48:45.540728Z","times_seen":96,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"makeup-fx-shop.com/skins/fx_foundation/js/vendor/jquery.bxslider.min.js","fqdn":"makeup-fx-shop.com","domain":"makeup-fx-shop.com","tld":"com"},"ip":{"addr":"67.209.117.37","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"370a22246b0aa9a521c4320c31827b13","sha1":"d1719dbe5b6e6ddc3402a05c992901553c7c2e30","sha256":"fd948cb8920f84d2442be62c0287c1501ebf40d09ebf6e4ff5633e60ebad41c9","sha512":"9fce40a1773926771021306f5829a856d1c60b751892f3e52e250b63f35f080f865265d755c71b207df2a17fe4513ff90c301c5d5e0f35d8dd01a84162c1e0e3","ssdeep":"384:oIXkTa6UedpUNruAfPmLQJl5kjGAulz+tbrJwg:rrDmsl51A5brJwg","tlshash":"5fb26006b13139be16b621b6f3decb045177845a9427fcf4a4b5c9481eeb8c8311fae6","size":23701,"data":"","first_seen":"2023-03-12T20:42:23Z","last_seen":"2026-05-07T02:21:59.27985Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"makeup-fx-shop.com/modules/plugins/file_upload/js/file_upload.js","fqdn":"makeup-fx-shop.com","domain":"makeup-fx-shop.com","tld":"com"},"ip":{"addr":"67.209.117.37","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dd62571f229b2f7d18db473331d17910","sha1":"a8ed64858f8d2dd26488d4def629fa07e1f22a81","sha256":"bc1c2943f84c737c4750a26e30d0556f092d026c8689c4ccac40a9bd8f8436b2","sha512":"095a4f4c8a8134ab193dcb8cf8141ebd96f9b770a792bc6c783d99e3cf1bac0941cde6c76107d7fb56e496e63337f374c68c67275c6343b3ee1bef92199249b3","ssdeep":"96:JE4VYnRnz2Zmxz/d3zSKOJlfz0/+N1lNU9iBT:JvAz8Jts+N1iw","tlshash":"f6912e813dad1abd019b1196593cac11ce3cc6b7035850e4b179a9a9ddb471063c7bff","size":4273,"data":"","first_seen":"2026-01-04T14:58:49.813118Z","last_seen":"2026-01-04T14:58:49.813118Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"makeup-fx-shop.com/_/translate_http/_/js/k=translate_http.tr.no.mmVVB70FM2U.O/am=AAQD/d=1/rs=AN8SPfqdbvrPGDnzqQCWUSu0aJPm8SZ0Kw/m=el_conf","fqdn":"makeup-fx-shop.com","domain":"makeup-fx-shop.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b0ab0e315f27e9df9c2366529d0eb88","sha1":"75ca3ccd85602c457bac4b6b63851ac54e6ab653","sha256":"d43006fca4e3f8913fb56941176aa3cdba47f43982487ac0d765d122fcf1fdf8","sha512":"6fbc51fabf785dc46e41b4c9998af2deb311360a37814bd8a8c0af060a60945d13cdf7ac6015f33039b5ed931ccb01ebdd7da2791c1b12a3df2383d059621187","ssdeep":"1536:XNHbUV8ZV7mgU1l4C0KGY8D60nKucbR7ChiVwNWrh:Xt7C0KGmehilh","tlshash":"3773b7ccb6a675618263f5b5513f000fb27b599af8084cadb288d8e1adb494c413bf7d","size":79553,"data":"","first_seen":"2026-01-04T14:02:48.624602Z","last_seen":"2026-01-04T14:58:49.751323Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.mmVVB70FM2U.O/am=AAAQ/d=1/exm=el_conf/ed=1/rs=AN8SPfqcR1qT4BSvrMxg-3GOnhIc-0oBXw/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c2913f7c52060069da6acc84c392a4dc","sha1":"decffbb3f4e2addf2cfbb2d518986630091cc0dc","sha256":"380a7fdd97951f66163f9480d41090539e8e23ff8f6fc30512914ea8dae8055b","sha512":"e8a0f4321ddaaad0a2b2b15ddceee37e5035631baacadc55667664ce66d8d6952ef2bc591eac248a8acf80d434edd50aca289a72235bb7fc1f4e87acb6902cad","ssdeep":"3072:RNomCx0ijmbUgg15sxjMrGu5YCZVXxCTxDwo9uXtIjfwgD+NKXqYPFI8G4h:j0RDZexHvDXqYPbh","tlshash":"a174d9c9b26634529262f8a1d07f0087b93eac57b4484c6cb24decea5df484941b7f7b","size":370395,"data":"","first_seen":"2025-12-15T20:30:21.355048Z","last_seen":"2026-07-26T06:14:57.460652Z","times_seen":3802,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.157.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b57455c9a0032c8d67868882258a4a19","sha1":"017f1d5e957af25bc7ee498e8e6104da00835773","sha256":"1aa296f8312ecf0d0959f759affc2850e1ed52b321033a51355cc1f37fd5dc89","sha512":"24db4575be8e92cfb7b408e04e6bee7cc5257a22b46488a3f4e9a8dbc05f75c3f4a465fea59e4ea866c1a9f3afb145f50b60fb5969a61ef7c466d572a7197e57","ssdeep":"","tlshash":"581165731a04f0350b3209d1e1ffc7b5e482b01cf12845dca511ea842f79ccbce04589","size":1017,"data":"","first_seen":"2025-12-15T23:56:17.122996Z","last_seen":"2026-01-20T22:35:06.74886Z","times_seen":7485,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"makeup-fx-shop.com/skins/fx_foundation/js/vendor/jquery.rating.min.js","fqdn":"makeup-fx-shop.com","domain":"makeup-fx-shop.com","tld":"com"},"ip":{"addr":"67.209.117.37","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6f9deccadd13a885ffe026ebf381da95","sha1":"ad5f03fc4bb52495bead3a17c6fe3462121aa5a3","sha256":"11fb6e2b0369f4032fb0621e34b0623a51f7d6d36f98d8bb641d1fd0502d69cd","sha512":"8ab65570672c6893070c994d2a359a25b649bb801c16dac8aa3c8c8160b2134057a1198b1962f9423b297a59fe5878ec76d2bbd938e4dd8812cca3f30ffcb751","ssdeep":"96:OOKWwf8Hoy/WWRJmk+PlZRwSR1pQ8JetvXRV8etfseSOXX8ekJzUlVXKDWzPjf:Yf8IeWWRJmk+NjDR1pQ8Jetv0SsHOcz2","tlshash":"e2b1338132de309c5ab72030242f5347a27a75675285612df07da9a6eebfe449373e3c","size":5324,"data":"","first_seen":"2026-01-04T14:58:49.745824Z","last_seen":"2026-05-07T02:21:59.265925Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"makeup-fx-shop.com/skins/fx_foundation/js/vendor/modernizr.min.js","fqdn":"makeup-fx-shop.com","domain":"makeup-fx-shop.com","tld":"com"},"ip":{"addr":"67.209.117.37","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f442f15d4e875de576901ad919e59d5d","sha1":"36a0a7929594c074682522a3f7755ad9b3a1092d","sha256":"b4e87e1a18902aabe2c8edf4d00d58de9e017a27e8cfcb3f3628c298bbfe011c","sha512":"f6a2141a07ee9070a19bac34e86ea1ccc8266c026dcef8bf40acf3e6c189ba0d204e7741718632fc8450c02c4f35b0dd42a07e82a8fab37ebf391590012ed7fd","ssdeep":"192:ekD1wwvesCOJ6LYtRiJhB8pa+zudiKDFuwGqjVeAQCen:e6esCOpPiJhBmqdBFuwGqYAQCo","tlshash":"d032d78d71a27109539ba077217f420ff27e589869284454e059c8fdfe78dd8823bf6d","size":11518,"data":"","first_seen":"2026-01-04T14:58:49.77819Z","last_seen":"2026-05-07T02:21:59.276483Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"makeup-fx-shop.com/","fqdn":"makeup-fx-shop.com","domain":"makeup-fx-shop.com","tld":"com"},"ip":{"addr":"67.209.117.37","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"a9502303e5ff4afb0d8223a0c15bde71","sha1":"9478410058c28911c85582d23a401d6cf1a9eaed","sha256":"9b237c6daffef703e9a0de73e5a3f32123aee55040cc87ca5d2af058606cb5b0","sha512":"b4b1d22bca0ef0fb46d9db0de5e0571e7f1e05c02170de0be755c5960c81147a60ebe70db18e26eea448725249a8e642b494e70a01ede07e8571d9e29cac23c1","ssdeep":"","tlshash":"81d0a99031c202a485bb11321b3bb020de6b8abf000ac800f08f71848fa06408102c4b","size":266,"data":"","first_seen":"2026-01-04T14:58:49.82865Z","last_seen":"2026-01-04T14:58:49.82865Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"makeup-fx-shop.com/","fqdn":"makeup-fx-shop.com","domain":"makeup-fx-shop.com","tld":"com"},"ip":{"addr":"67.209.117.37","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"eb3b4712cc868f6a0d6ede03fb6edf5c","sha1":"deeeec623e67d8cc8ad2f4c83e4d84d30b3ae25b","sha256":"41845c9e89ebab701d437521ce52753d11784e94346ec4c1c2d68de658aaadcc","sha512":"44e5be6d815402b36e687e032e617ceea11a36a3037317ab3bb959e0d8a7b2218c47255394c64bae1ebd41f6f75fb7aa493a1b9c9d2ec864a6812ba3a09d30f1","ssdeep":"","tlshash":"95b012337d3e4c51afab39936ba9d2d02d845d439403d031740cf8104bc060020bb5c4","size":115,"data":"","first_seen":"2023-03-13T02:36:48Z","last_seen":"2026-05-18T16:57:48.369782Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/7gg7H51Q-naNfhmCP3_R47ho/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ca956219876073e2f13e8fd63f0b9d26","sha1":"230a172e1fcf2036687131567200dee5fd200a09","sha256":"392c00d030e58635abc9339f903f23a2ebf2cc0ac6371363105549689dfe0206","sha512":"4bbbd3cd9f929185245ca260e7a2521763d3d90b47bbb1d1205819b40b84918e552d482ad8db91c9258e2504891a91efa190041d210c5290c63f38014adbf53c","ssdeep":"6144:QmhF4MqL/nL5k0wmjxRqyFF83/p50YFqrnMI74ggRLXal17bRc0wMwVmbIyWHVEI:zlqT1qyOEnMKabwBRIm0Epzax4XssBQ","tlshash":"040528d8b15278a2a332f4f14467241da77f966ed4084d1df29899f03fb4409a0bbeb7","size":849529,"data":"","first_seen":"2025-12-11T19:34:34.525691Z","last_seen":"2026-07-29T13:01:08.040645Z","times_seen":49454,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"makeup-fx-shop.com/skins/fx_foundation/js/vendor/jquery.cookie.min.js","fqdn":"makeup-fx-shop.com","domain":"makeup-fx-shop.com","tld":"com"},"ip":{"addr":"67.209.117.37","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"499ef00e1635d245314e27f29097714e","sha1":"596964c5fc8ad6d76507015c9cf702c3a3ef1ba9","sha256":"79c0044ea70c08ac00f42c5f00044992031a04cfa634703960d62c2649f89933","sha512":"19facdf40b77eed5fe772c961a3d14f1c0830ab089118cbbbec3e3abc778bae4f6684d7d1a3ba9bc4b33965c9c310ecec3a004c774523625eb09be1f14f1e204","ssdeep":"","tlshash":"192144a83249b80b46674b33a67f14abb03cab95a4dd505ac1d1a4d03e708930962ffe","size":1417,"data":"","first_seen":"2026-01-04T14:58:49.770207Z","last_seen":"2026-05-07T02:21:59.434238Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"fce307d16762529d7c7c80bed168de50","sha1":"8d7dd5cea51ce687cb33e16afe76415a20c3459c","sha256":"6937fcd8a895481cb0bc9da27e5a252e85fa92106c0ac34ea6c4220680b57ff0","sha512":"113ea311a563cb420f678ea9476774e3bfcf1c13ce19f9fc2662fc562e911cadb5f9606a21c01fa8bc5df83c0acdde5a072abe328462cd666b9c41a7f4c350b3","ssdeep":"","tlshash":"c5f0dcb30138f929c2828620e6c5a92df243cb0445686caa336810b5f1c865e80efeac","size":470,"data":"","first_seen":"2025-12-11T22:09:49.310107Z","last_seen":"2026-02-02T20:32:03.954669Z","times_seen":1489,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"6c1015c3c6e5d67cd64ecaee63722225","sha1":"46fa20e82d7ec4b6914704bfd5576f848b00732f","sha256":"a0e430c8331f1360d9f393571d5340bb4814c9db813b54e36c9d8c76344620dd","sha512":"3d5691cdb04ae7db9332c3b30738e2d16bf3e19e155e1ebcde07342015f2e33ce00225bb140282b72560353a15dad5188fb08c46ded1ba5dd0e639f696a3127c","ssdeep":"","tlshash":"cf5142a1605ca01b5513d9d1f4923edef0ee0058c77268d07e1c29cfdadae7704a716d","size":3011,"data":"","first_seen":"2025-12-11T22:09:49.31135Z","last_seen":"2026-02-02T20:08:09.126045Z","times_seen":518,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Open+Sans:400,700","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://makeup-fx-shop.com/","date":"2026-01-04T14:58:16.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css?family=Open+Sans:400,700 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://makeup-fx-shop.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 04 Jan 2026 14:58:16 GMT\r\ndate: Sun, 04 Jan 2026 14:58:16 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11588,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"28e0e3d1db179a6b0b454a6a42a382b7","sha1":"637e0ca2efa06fb7bcdadb1ed0cade98aa6f6c08","sha256":"f1251b5aa44c40639d940adcbebe2d7d88573dfac9a2ba63d71ca06ea67bbad9","sha512":"bfe57657f404dacdef4e7bed130a8a739fcc007f9f6d6a9a81d57f10a25776048b664cf58ddc935c6dcecd6fb7ac373b74b03367ae91be7e9ce4badf853fbd3a","ssdeep":"192:wCAAN21/rqbnbqGIwV4Razq4CZZE2s6rqmnbqGIwV4YfzvY:TjXqY4nU8qY4Z","tlshash":"bc322ba00017185067431de623de7e34ee0fa2657044d0766bfd8b9beedad6963b431d","first_seen":"2025-09-17T00:46:50.629094Z","last_seen":"2026-08-06T08:56:50.217955Z","times_seen":11889,"resource_available":false,"data":null}},"time_used":616,"timings":{"blocked":268,"dns":1,"connect":21,"send":0,"wait":17,"receive":0,"ssl":300},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"makeup-fx-shop.com/images/source/slide8.jpg","fqdn":"makeup-fx-shop.com","domain":"makeup-fx-shop.com","tld":"com"},"ip":{"addr":"67.209.117.37","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://makeup-fx-shop.com/","date":"2026-01-04T14:58:16.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.makeup-fx-shop.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Nov 2025 10:45:48 GMT","end":"Thu, 12 Feb 2026 10:45:47 GMT"},"fingerprint":{"sha1":"69:F1:24:86:AF:5B:08:2D:39:BB:60:E0:EF:00:17:7F:8B:E9:21:6F","sha256":"23:40:FA:84:12:AB:C9:A3:7F:2A:99:27:82:32:1A:18:5B:A9:56:05:AC:80:3F:30:B2:FE:E1:E1:F7:F2:2D:58"}}},"request":{"raw":"GET /images/source/slide8.jpg HTTP/1.1\r\nHost: makeup-fx-shop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://makeup-fx-shop.com/\r\nCookie: CCS_BA3DC426B2=f759ae967f445f349abeff8ad444f7bb\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sun, 11 Jan 2026 14:58:16 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 13 Nov 2019 10:07:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 82359\r\ndate: Sun, 04 Jan 2026 14:58:16 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN,SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":82359,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1000x500, components 3","md5":"102ad5113afebebab9393694df32cb65","sha1":"12f55ac23c600f400f5b0313856832fcacc204de","sha256":"747b392602dfe066156e8f9857c06d9d45113601553eac5032ef00545d037463","sha512":"7908601544abfa56825d97cd90ee6feeb5c96b3e3de8143abe4ff50b5d414ddd93f9020f056d74f7e615cea3312f92aa2db449dd9404811b8b310d902d69460d","ssdeep":"1536:RUPGHnsiiyJ04/p1FE2ystcDba7t7SRxp:19104/sba78Rxp","tlshash":"2b8302276d55fd82f56552d8bd670db60aee272850433cfb942f0dc74e200aa4c5a63d","first_seen":"2026-01-04T14:58:49.724426Z","last_seen":"2026-01-04T14:58:49.724426Z","times_seen":1,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-04","alert":"Phishing Block","trigger":"makeup-fx-shop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"makeup-fx-shop.com/images/source/slide13.jpg","fqdn":"makeup-fx-shop.com","domain":"makeup-fx-shop.com","tld":"com"},"ip":{"addr":"67.209.117.37","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://makeup-fx-shop.com/","date":"2026-01-04T14:58:16.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.makeup-fx-shop.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Nov 2025 10:45:48 GMT","end":"Thu, 12 Feb 2026 10:45:47 GMT"},"fingerprint":{"sha1":"69:F1:24:86:AF:5B:08:2D:39:BB:60:E0:EF:00:17:7F:8B:E9:21:6F","sha256":"23:40:FA:84:12:AB:C9:A3:7F:2A:99:27:82:32:1A:18:5B:A9:56:05:AC:80:3F:30:B2:FE:E1:E1:F7:F2:2D:58"}}},"request":{"raw":"GET /images/source/slide13.jpg HTTP/1.1\r\nHost: makeup-fx-shop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://makeup-fx-shop.com/\r\nCookie: CCS_BA3DC426B2=f759ae967f445f349abeff8ad444f7bb\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sun, 11 Jan 2026 14:58:16 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 13 Nov 2019 10:07:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 100235\r\ndate: Sun, 04 Jan 2026 14:58:16 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN,SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":100235,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1000x500, components 3","md5":"9de702b1854b38a84a8f5ae67f333805","sha1":"63df6a417ed4e5187fd5c5a6bed399ecaa9b03e4","sha256":"c781c764a8aa22a6a07024b4888bf76185c8769b18ae3a49a43300ad1d6d8813","sha512":"bf9cee59a7728bd2fa2610c1e84990d20116a06c44f3efafde7538625d9e86239f990930eb7456ceb9645396252f941778c9c92a39feb547b0b2506f1c28014d","ssdeep":"1536:RGKjCeCoWm+tBRt9YyL5lPB0N18knuNtM7gi/MH2yMLTfhxeeiGXXPOT+7a:tjKm++S5JS6BMVUH5MLTffeuWK2","tlshash":"f6a312b731881daead0fc52dbe9ae5284fb7c9a489ddb3c14d81eb87d3c81127c91421","first_seen":"2026-01-04T14:58:49.728856Z","last_seen":"2026-01-04T14:58:49.728856Z","times_seen":1,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-04","alert":"Phishing Block","trigger":"makeup-fx-shop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://makeup-fx-shop.com/","date":"2026-01-04T14:58:16.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://makeup-fx-shop.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 01 Jan 2026 09:55:49 GMT\r\nexpires: Fri, 01 Jan 2027 09:55:49 GMT\r\ncache-control: public, max-age=31536000\r\nage: 277347\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-08-06T11:47:12.573114Z","times_seen":322028,"resource_available":false,"data":null}},"time_used":365,"timings":{"blocked":142,"dns":2,"connect":22,"send":0,"wait":24,"receive":24,"ssl":146},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"makeup-fx-shop.com/","fqdn":"makeup-fx-shop.com","domain":"makeup-fx-shop.com","tld":"com"},"ip":{"addr":"67.209.117.37","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-04T14:58:15.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.makeup-fx-shop.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Nov 2025 10:45:48 GMT","end":"Thu, 12 Feb 2026 10:45:47 GMT"},"fingerprint":{"sha1":"69:F1:24:86:AF:5B:08:2D:39:BB:60:E0:EF:00:17:7F:8B:E9:21:6F","sha256":"23:40:FA:84:12:AB:C9:A3:7F:2A:99:27:82:32:1A:18:5B:A9:56:05:AC:80:3F:30:B2:FE:E1:E1:F7:F2:2D:58"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: makeup-fx-shop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-frame-options: SAMEORIGIN,SAMEORIGIN\r\nset-cookie: CCS_BA3DC426B2=f759ae967f445f349abeff8ad444f7bb; expires=Mon, 05-Jan-2026 14:58:15 GMT; Max-Age=86400; path=/; domain=.makeup-fx-shop.com; secure; HttpOnly; SameSite=None\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 04 Jan 2026 14:58:15 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"bxSlider","description":"Add a respsonsive image slider to any website.","website":"https://bxslider.com/","common_platform_enumeration":"","icon":"bxSlider.png","categories":["Photo galleries","JavaScript libraries"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"ZURB Foundation","description":"Zurb Foundation is used to prototype in the browser. Allows rapid creation of websites or applications while leveraging mobile and responsive technology. The front end framework is the collection of HTML, CSS, and Javascript containing design patterns.","website":"https://foundation.zurb.com","common_platform_enumeration":"","icon":"ZURB Foundation.png","categories":["UI frameworks"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"CubeCart","description":"CubeCart is a free ecommerce platform that businesses can use to build, manage, and market their online stores.","website":"https://www.cubecart.com","common_platform_enumeration":"cpe:2.3:a:cubecart:cubecart:*:*:*:*:*:*:*:*","icon":"CubeCart.png","categories":["Ecommerce"]},{"name":"Modernizr","description":"Modernizr is a JavaScript library that detects the features available in a user's browser.","website":"https://modernizr.com","common_platform_enumeration":"","icon":"Modernizr.svg","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Chosen","description":"Chosen is a jQuery plugin that makes long, unwieldy select boxes much more user-friendly.","website":"https://harvesthq.github.io/chosen/","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks"]}],"data":{"size":62827,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (31921), with CRLF, LF line terminators","md5":"33c0c5563be8faf05f03c1a3af019ab3","sha1":"7b58bcc9987a8d2759f206c153319cb20c772985","sha256":"13c42b91a30df1ca74d3a6c64f8194f042f3d7a6c8cf003ab8aac56523a48021","sha512":"b3c336e2022e15c5fbdc6b7752c972a55708036389eca5061e21d120c8b80bb726bcf83ce3bda8d82b755770564bea1d252faaaa7df4f6d0b7edcd51f81d81c8","ssdeep":"768:oQt5LuqbwTnvfyRrdqdbSZS4kfV5GFCbFplC5F93n3R0+0yAfNyhQTe5:oQt5LJbanvaRrdqdbSZS48o3B0+IT8","tlshash":"0a53f873e0a4123b1f2646d49860278c7317935e8aba9d1c60f88fb45f82fd59e0d9db","first_seen":"2026-01-04T14:58:49.733772Z","last_seen":"2026-01-04T14:58:49.733772Z","times_seen":1,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":52,"dns":9,"connect":17,"send":0,"wait":87,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-04","alert":"Phishing Block","trigger":"makeup-fx-shop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"makeup-fx-shop.com/skins/fx_foundation/css/cubecart.common.css","fqdn":"makeup-fx-shop.com","domain":"makeup-fx-shop.com","tld":"com"},"ip":{"addr":"67.209.117.37","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://makeup-fx-shop.com/","date":"2026-01-04T14:58:16.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.makeup-fx-shop.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Nov 2025 10:45:48 GMT","end":"Thu, 12 Feb 2026 10:45:47 GMT"},"fingerprint":{"sha1":"69:F1:24:86:AF:5B:08:2D:39:BB:60:E0:EF:00:17:7F:8B:E9:21:6F","sha256":"23:40:FA:84:12:AB:C9:A3:7F:2A:99:27:82:32:1A:18:5B:A9:56:05:AC:80:3F:30:B2:FE:E1:E1:F7:F2:2D:58"}}},"request":{"raw":"GET /skins/fx_foundation/css/cubecart.common.css HTTP/1.1\r\nHost: makeup-fx-shop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://makeup-fx-shop.com/\r\nCookie: CCS_BA3DC426B2=f759ae967f445f349abeff8ad444f7bb\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sun, 11 Jan 2026 14:58:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 14 Sep 2019 12:17:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 230\r\ndate: Sun, 04 Jan 2026 14:58:16 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN,SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":230,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"41550aeb2c6cc4fdd732d171654bf488","sha1":"df3cdcfe02210b8592ec53fba47ab72e7a2591d5","sha256":"7214532e7d312dbe4c14697d427013c84376e1e7288cbbaf46c300d3ac31a4d0","sha512":"ae95cfcb7e663cba886809463356b129885337fde65648aa2fdb7232a8871f7ce025e2208ff056af8d59cba43144c574667f5603873cd122d67f2b65a7293bf7","ssdeep":"","tlshash":"41d0c952b818e8022d06c428994ddd7d4fee0c90bc077f3834036c5892810d1f32ee27","first_seen":"2026-01-04T14:58:49.740282Z","last_seen":"2026-01-04T14:58:49.740282Z","times_seen":1,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-04","alert":"Phishing Block","trigger":"makeup-fx-shop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"makeup-fx-shop.com/images/source/slide15.jpg","fqdn":"makeup-fx-shop.com","domain":"makeup-fx-shop.com","tld":"com"},"ip":{"addr":"67.209.117.37","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://makeup-fx-shop.com/","date":"2026-01-04T14:58:16.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.makeup-fx-shop.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Nov 2025 10:45:48 GMT","end":"Thu, 12 Feb 2026 10:45:47 GMT"},"fingerprint":{"sha1":"69:F1:24:86:AF:5B:08:2D:39:BB:60:E0:EF:00:17:7F:8B:E9:21:6F","sha256":"23:40:FA:84:12:AB:C9:A3:7F:2A:99:27:82:32:1A:18:5B:A9:56:05:AC:80:3F:30:B2:FE:E1:E1:F7:F2:2D:58"}}},"request":{"raw":"GET /images/source/slide15.jpg HTTP/1.1\r\nHost: makeup-fx-shop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://makeup-fx-shop.com/\r\nCookie: CCS_BA3DC426B2=f759ae967f445f349abeff8ad444f7bb\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sun, 11 Jan 2026 14:58:16 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 13 Nov 2019 10:07:25 GMT\r\naccept-ranges: bytes\r\ncontent-length: 72161\r\ndate: Sun, 04 Jan 2026 14:58:16 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN,SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":72161,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1000x500, components 3","md5":"fe6f815d50803735bb6d7ce91d5598c0","sha1":"982c0005bfaa7f39cbd11aa6954412140e4939e3","sha256":"6ca8f66ff294de6aae1f4dd85d342a8281c602076e3483b20c6543ded5efaa6e","sha512":"06d2a4de7377642ee72df5a3640f4a73a7cf0fb2766285bef1a8077e0c9c5dddbfbc9508670298dbd051c6c8e84fc9b542b016fe4e1a5342f76985b87508e05b","ssdeep":"1536:R/vsT7bBTIqB8nM3PeBFqWFlUsI6cwh3nQkE34IC/Gbvr:d+PpIqBfPugWzUsI6H34C+bT","tlshash":"e663f213280dfb9fb6a864f12f160cd2ed43ab8d6d0c3ae904d95a9f7c6e544a8e044d","first_seen":"2026-01-04T14:58:49.743053Z","last_seen":"2026-01-04T14:58:49.743053Z","times_seen":1,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-04","alert":"Phishing Block","trigger":"makeup-fx-shop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"makeup-fx-shop.com/skins/fx_foundation/js/vendor/jquery.rating.min.js","fqdn":"makeup-fx-shop.com","domain":"makeup-fx-shop.com","tld":"com"},"ip":{"addr":"67.209.117.37","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://makeup-fx-shop.com/","date":"2026-01-04T14:58:16.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.makeup-fx-shop.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Nov 2025 10:45:48 GMT","end":"Thu, 12 Feb 2026 10:45:47 GMT"},"fingerprint":{"sha1":"69:F1:24:86:AF:5B:08:2D:39:BB:60:E0:EF:00:17:7F:8B:E9:21:6F","sha256":"23:40:FA:84:12:AB:C9:A3:7F:2A:99:27:82:32:1A:18:5B:A9:56:05:AC:80:3F:30:B2:FE:E1:E1:F7:F2:2D:58"}}},"request":{"raw":"GET /skins/fx_foundation/js/vendor/jquery.rating.min.js HTTP/1.1\r\nHost: makeup-fx-shop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://makeup-fx-shop.com/\r\nCookie: CCS_BA3DC426B2=f759ae967f445f349abeff8ad444f7bb\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sun, 11 Jan 2026 14:58:16 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Sat, 14 Sep 2019 12:17:32 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1684\r\ndate: Sun, 04 Jan 2026 14:58:16 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN,SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5324,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5024)","md5":"6f9deccadd13a885ffe026ebf381da95","sha1":"ad5f03fc4bb52495bead3a17c6fe3462121aa5a3","sha256":"11fb6e2b0369f4032fb0621e34b0623a51f7d6d36f98d8bb641d1fd0502d69cd","sha512":"8ab65570672c6893070c994d2a359a25b649bb801c16dac8aa3c8c8160b2134057a1198b1962f9423b297a59fe5878ec76d2bbd938e4dd8812cca3f30ffcb751","ssdeep":"96:OOKWwf8Hoy/WWRJmk+PlZRwSR1pQ8JetvXRV8etfseSOXX8ekJzUlVXKDWzPjf:Yf8IeWWRJmk+NjDR1pQ8Jetv0SsHOcz2","tlshash":"e2b1338132de309c5ab72030242f5347a27a75675285612df07da9a6eebfe449373e3c","first_seen":"2026-01-04T14:58:49.745824Z","last_seen":"2026-05-07T02:21:59.265925Z","times_seen":2,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-04","alert":"Phishing Block","trigger":"makeup-fx-shop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"makeup-fx-shop.com/skins/fx_foundation/css/cubecart.css","fqdn":"makeup-fx-shop.com","domain":"makeup-fx-shop.com","tld":"com"},"ip":{"addr":"67.209.117.37","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://makeup-fx-shop.com/","date":"2026-01-04T14:58:16.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.makeup-fx-shop.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Nov 2025 10:45:48 GMT","end":"Thu, 12 Feb 2026 10:45:47 GMT"},"fingerprint":{"sha1":"69:F1:24:86:AF:5B:08:2D:39:BB:60:E0:EF:00:17:7F:8B:E9:21:6F","sha256":"23:40:FA:84:12:AB:C9:A3:7F:2A:99:27:82:32:1A:18:5B:A9:56:05:AC:80:3F:30:B2:FE:E1:E1:F7:F2:2D:58"}}},"request":{"raw":"GET /skins/fx_foundation/css/cubecart.css HTTP/1.1\r\nHost: makeup-fx-shop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://makeup-fx-shop.com/\r\nCookie: CCS_BA3DC426B2=f759ae967f445f349abeff8ad444f7bb\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sun, 11 Jan 2026 14:58:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 14 Sep 2019 12:17:32 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2095\r\ndate: Sun, 04 Jan 2026 14:58:16 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN,SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7631,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"de58c3058fd6e211bad5c07e2b67d02d","sha1":"1282521d8143aec1bfa7c4010d66d596b08afa69","sha256":"5d33c77ce50379b207f91b741e240b64fef8d2e55e7514ad87e50fc03e335e11","sha512":"b2fb8141ef9ff25fb4f23715cbb4d041774088493fada0b2daec5e71dfc745072dcdaa598ac42d6399de357fbf8640bd897660324132122ec41b2dd89bf94200","ssdeep":"192:Ofq7m9FcIZbjbv/Px5LI70xW4lviDm6YuhJwtwP:OznZbjb/x5uoK","tlshash":"d4f13142a9e30949f50784241eee4754273d1043ea0f9e6c3f9e76688f8d0d5a8b7b9d","first_seen":"2026-01-04T14:58:49.749204Z","last_seen":"2026-01-04T14:58:49.749204Z","times_seen":1,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-04","alert":"Phishing Block","trigger":"makeup-fx-shop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/translate_a/element.js?cb=googleTranslateElementInit","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://makeup-fx-shop.com/","date":"2026-01-04T14:58:16.090Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:50:09 GMT","end":"Wed, 25 Feb 2026 15:50:08 GMT"},"fingerprint":{"sha1":"70:35:5F:58:F3:50:B0:2A:0E:11:9A:FD:D4:67:00:94:17:0E:03:EF","sha256":"01:93:34:8C:59:AC:52:25:54:81:E8:50:E1:E9:8A:11:1F:3C:82:81:00:B2:90:35:17:5F:25:9C:C2:2D:D2:E2"}}},"request":{"raw":"GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://makeup-fx-shop.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sun, 04 Jan 2026 14:58:16 GMT\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":79553,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2082)","md5":"3b0ab0e315f27e9df9c2366529d0eb88","sha1":"75ca3ccd85602c457bac4b6b63851ac54e6ab653","sha256":"d43006fca4e3f8913fb56941176aa3cdba47f43982487ac0d765d122fcf1fdf8","sha512":"6fbc51fabf785dc46e41b4c9998af2deb311360a37814bd8a8c0af060a60945d13cdf7ac6015f33039b5ed931ccb01ebdd7da2791c1b12a3df2383d059621187","ssdeep":"1536:XNHbUV8ZV7mgU1l4C0KGY8D60nKucbR7ChiVwNWrh:Xt7C0KGmehilh","tlshash":"3773b7ccb6a675618263f5b5513f000fb27b599af8084cadb288d8e1adb494c413bf7d","first_seen":"2026-01-04T14:02:48.624602Z","last_seen":"2026-01-04T14:58:49.751323Z","times_seen":2,"resource_available":true,"data":null}},"time_used":683,"timings":{"blocked":293,"dns":9,"connect":29,"send":0,"wait":55,"receive":0,"ssl":292},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"makeup-fx-shop.com/skins/fx_foundation/js/vendor/jquery.bxslider.min.js","fqdn":"makeup-fx-shop.com","domain":"makeup-fx-shop.com","tld":"com"},"ip":{"addr":"67.209.117.37","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://makeup-fx-shop.com/","date":"2026-01-04T14:58:16.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.makeup-fx-shop.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Nov 2025 10:45:48 GMT","end":"Thu, 12 Feb 2026 10:45:47 GMT"},"fingerprint":{"sha1":"69:F1:24:86:AF:5B:08:2D:39:BB:60:E0:EF:00:17:7F:8B:E9:21:6F","sha256":"23:40:FA:84:12:AB:C9:A3:7F:2A:99:27:82:32:1A:18:5B:A9:56:05:AC:80:3F:30:B2:FE:E1:E1:F7:F2:2D:58"}}},"request":{"raw":"GET /skins/fx_foundation/js/vendor/jquery.bxslider.min.js HTTP/1.1\r\nHost: makeup-fx-shop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://makeup-fx-shop.com/\r\nCookie: CCS_BA3DC426B2=f759ae967f445f349abeff8ad444f7bb\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sun, 11 Jan 2026 14:58:16 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Sat, 14 Sep 2019 12:17:32 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 5886\r\ndate: Sun, 04 Jan 2026 14:58:16 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN,SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":23701,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (23361)","md5":"370a22246b0aa9a521c4320c31827b13","sha1":"d1719dbe5b6e6ddc3402a05c992901553c7c2e30","sha256":"fd948cb8920f84d2442be62c0287c1501ebf40d09ebf6e4ff5633e60ebad41c9","sha512":"9fce40a1773926771021306f5829a856d1c60b751892f3e52e250b63f35f080f865265d755c71b207df2a17fe4513ff90c301c5d5e0f35d8dd01a84162c1e0e3","ssdeep":"384:oIXkTa6UedpUNruAfPmLQJl5kjGAulz+tbrJwg:rrDmsl51A5brJwg","tlshash":"5fb26006b13139be16b621b6f3decb045177845a9427fcf4a4b5c9481eeb8c8311fae6","first_seen":"2023-03-12T20:42:23Z","last_seen":"2026-05-07T02:21:59.27985Z","times_seen":5,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-04","alert":"Phishing Block","trigger":"makeup-fx-shop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"makeup-fx-shop.com/skins/fx_foundation/js/vendor/jquery.chosen.min.js","fqdn":"makeup-fx-shop.com","domain":"makeup-fx-shop.com","tld":"com"},"ip":{"addr":"67.209.117.37","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://makeup-fx-shop.com/","date":"2026-01-04T14:58:16.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.makeup-fx-shop.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Nov 2025 10:45:48 GMT","end":"Thu, 12 Feb 2026 10:45:47 GMT"},"fingerprint":{"sha1":"69:F1:24:86:AF:5B:08:2D:39:BB:60:E0:EF:00:17:7F:8B:E9:21:6F","sha256":"23:40:FA:84:12:AB:C9:A3:7F:2A:99:27:82:32:1A:18:5B:A9:56:05:AC:80:3F:30:B2:FE:E1:E1:F7:F2:2D:58"}}},"request":{"raw":"GET /skins/fx_foundation/js/vendor/jquery.chosen.min.js HTTP/1.1\r\nHost: makeup-fx-shop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://makeup-fx-shop.com/\r\nCookie: CCS_BA3DC426B2=f759ae967f445f349abeff8ad444f7bb\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sun, 11 Jan 2026 14:58:16 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Sat, 14 Sep 2019 12:17:32 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6326\r\ndate: Sun, 04 Jan 2026 14:58:16 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN,SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":28456,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (28335)","md5":"63fec16cd0e784db67058f42d5637241","sha1":"3e3efe146d09a13491e70236cc03725aa7b66d1a","sha256":"e0f1ea0baec721fea28e0fca582f3b96275cad8d6269d59eb6edd62f331b63f4","sha512":"f3adbfa946196d77061e0097b54f964cd9622b51210b033603ff518389c7ebabb6dc4e3bf98e6db69c19b332cac984d9017e5323b4770074807142802198033a","ssdeep":"768:HdAhKE5Eym+7af0WEaw94/uZvwI4Nb9aDTkYmC6ENj6bA:HOvxPWEaw94/u/4Nb9aP3OENj6bA","tlshash":"bed24184bbf1a22141ba54eea45e61c5a337a4dcd80c89dcfe6ddde25868c0d712fb34","first_seen":"2023-03-07T12:57:18Z","last_seen":"2026-08-05T17:15:34.567276Z","times_seen":492,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-04","alert":"Phishing Block","trigger":"makeup-fx-shop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"makeup-fx-shop.com/images/cache/weft/_IMG9151.200.JPG","fqdn":"makeup-fx-shop.com","domain":"makeup-fx-shop.com","tld":"com"},"ip":{"addr":"67.209.117.37","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://makeup-fx-shop.com/","date":"2026-01-04T14:58:16.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.makeup-fx-shop.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Nov 2025 10:45:48 GMT","end":"Thu, 12 Feb 2026 10:45:47 GMT"},"fingerprint":{"sha1":"69:F1:24:86:AF:5B:08:2D:39:BB:60:E0:EF:00:17:7F:8B:E9:21:6F","sha256":"23:40:FA:84:12:AB:C9:A3:7F:2A:99:27:82:32:1A:18:5B:A9:56:05:AC:80:3F:30:B2:FE:E1:E1:F7:F2:2D:58"}}},"request":{"raw":"GET /images/cache/weft/_IMG9151.200.JPG HTTP/1.1\r\nHost: makeup-fx-shop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://makeup-fx-shop.com/\r\nCookie: CCS_BA3DC426B2=f759ae967f445f349abeff8ad444f7bb\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 14:58:16 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 12 Aug 2022 13:12:01 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2047\r\ndate: Sun, 04 Jan 2026 14:58:16 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN,SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2047,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80\", progressive, precision 8, 134x200, components 3","md5":"7e8d1a6a4234e5f5b6f950521329d060","sha1":"fe6c6f28b5bd803a84994da7812e81d241c38f0d","sha256":"7b9c64ebd14a3bd8f54c9e2ca2e57db5cf96f200b5026315c80afeb7b75f0a43","sha512":"5ecdf87051068178b2b0aed9e30d86898794fc77e6090839762efc275a52b3c19a0bbf3bbc76c905bebc2029c1fea71aabb1f4a64ace7fdc2a707a0c5ecf5952","ssdeep":"","tlshash":"a3410adb3762d679d876eb3165ed3525b32cd522cf09430ebae148ae19770c052c13e8","first_seen":"2026-01-04T14:58:49.757187Z","last_seen":"2026-01-04T14:58:49.757187Z","times_seen":1,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-04","alert":"Phishing Block","trigger":"makeup-fx-shop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"makeup-fx-shop.com/skins/fx_foundation/js/2.cubecart.js","fqdn":"makeup-fx-shop.com","domain":"makeup-fx-shop.com","tld":"com"},"ip":{"addr":"67.209.117.37","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://makeup-fx-shop.com/","date":"2026-01-04T14:58:16.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.makeup-fx-shop.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Nov 2025 10:45:48 GMT","end":"Thu, 12 Feb 2026 10:45:47 GMT"},"fingerprint":{"sha1":"69:F1:24:86:AF:5B:08:2D:39:BB:60:E0:EF:00:17:7F:8B:E9:21:6F","sha256":"23:40:FA:84:12:AB:C9:A3:7F:2A:99:27:82:32:1A:18:5B:A9:56:05:AC:80:3F:30:B2:FE:E1:E1:F7:F2:2D:58"}}},"request":{"raw":"GET /skins/fx_foundation/js/2.cubecart.js HTTP/1.1\r\nHost: makeup-fx-shop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://makeup-fx-shop.com/\r\nCookie: CCS_BA3DC426B2=f759ae967f445f349abeff8ad444f7bb\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sun, 11 Jan 2026 14:58:16 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 09 Jul 2020 09:09:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4806\r\ndate: Sun, 04 Jan 2026 14:58:16 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN,SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":23088,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"c7bd5ab18e0e5637fc6f4febbb726f55","sha1":"e09ee5b93ef6b1da85ddf014a36a4e0ef6704c0c","sha256":"2f747a4e543999fd34c394fd5fb0be90c5396aa4f50e28a0dd40d5ac3f636956","sha512":"6de8e5d542f5c96d3b8e80cdee748379fe54e79da3960ee9cbc6882b1ee6cc3c7eb8705ba16782b8b2e6ce9fe8128ed78b608d216a23f094e6b44aca945705fe","ssdeep":"384:41yeQU7vfC34OAGTo5tn0IXOIJL14jqGErYX9rZqdAumi6ojC8YG5IiJc9:41uULtOA/FOIxGqGErYX9rZqr9C6Ii29","tlshash":"7ba20c18f6f765b060b7307b5f7f42007639405b5109ce04bd8caee44fa4639aab6bad","first_seen":"2026-01-04T14:58:49.758477Z","last_seen":"2026-01-04T14:58:49.758477Z","times_seen":1,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-04","alert":"Phishing Block","trigger":"makeup-fx-shop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.mmVVB70FM2U.O/am=AAAQ/d=1/exm=el_conf/ed=1/rs=AN8SPfqcR1qT4BSvrMxg-3GOnhIc-0oBXw/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://makeup-fx-shop.com/","date":"2026-01-04T14:58:17.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"43:D3:3F:93:6C:4F:F7:67:58:9D:D5:48:20:4C:74:A2:69:DB:13:9F","sha256":"8C:DB:D2:85:E1:AB:12:7B:1D:5A:65:A7:EC:22:67:6F:B3:A6:65:01:28:29:FA:D2:3B:01:8D:10:7E:4D:09:52"}}},"request":{"raw":"GET /_/translate_http/_/js/k=translate_http.tr.no.mmVVB70FM2U.O/am=AAAQ/d=1/exm=el_conf/ed=1/rs=AN8SPfqcR1qT4BSvrMxg-3GOnhIc-0oBXw/m=el_main HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://makeup-fx-shop.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 105328\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 29 Dec 2025 19:27:15 GMT\r\nexpires: Tue, 29 Dec 2026 19:27:15 GMT\r\ncache-control: public, max-age=31536000\r\nage: 502262\r\nlast-modified: Sat, 13 Dec 2025 04:11:49 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":370395,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2581)","md5":"c2913f7c52060069da6acc84c392a4dc","sha1":"decffbb3f4e2addf2cfbb2d518986630091cc0dc","sha256":"380a7fdd97951f66163f9480d41090539e8e23ff8f6fc30512914ea8dae8055b","sha512":"e8a0f4321ddaaad0a2b2b15ddceee37e5035631baacadc55667664ce66d8d6952ef2bc591eac248a8acf80d434edd50aca289a72235bb7fc1f4e87acb6902cad","ssdeep":"3072:RNomCx0ijmbUgg15sxjMrGu5YCZVXxCTxDwo9uXtIjfwgD+NKXqYPFI8G4h:j0RDZexHvDXqYPbh","tlshash":"a174d9c9b26634529262f8a1d07f0087b93eac57b4484c6cb24decea5df484941b7f7b","first_seen":"2025-12-15T20:30:21.355048Z","last_seen":"2026-07-26T06:14:57.460652Z","times_seen":3802,"resource_available":true,"data":null}},"time_used":411,"timings":{"blocked":142,"dns":17,"connect":29,"send":0,"wait":39,"receive":68,"ssl":113},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"makeup-fx-shop.com/images/source/slide10.jpg","fqdn":"makeup-fx-shop.com","domain":"makeup-fx-shop.com","tld":"com"},"ip":{"addr":"67.209.117.37","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://makeup-fx-shop.com/","date":"2026-01-04T14:58:16.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.makeup-fx-shop.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Nov 2025 10:45:48 GMT","end":"Thu, 12 Feb 2026 10:45:47 GMT"},"fingerprint":{"sha1":"69:F1:24:86:AF:5B:08:2D:39:BB:60:E0:EF:00:17:7F:8B:E9:21:6F","sha256":"23:40:FA:84:12:AB:C9:A3:7F:2A:99:27:82:32:1A:18:5B:A9:56:05:AC:80:3F:30:B2:FE:E1:E1:F7:F2:2D:58"}}},"request":{"raw":"GET /images/source/slide10.jpg HTTP/1.1\r\nHost: makeup-fx-shop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://makeup-fx-shop.com/\r\nCookie: CCS_BA3DC426B2=f759ae967f445f349abeff8ad444f7bb\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sun, 11 Jan 2026 14:58:16 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 13 Nov 2019 10:07:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 66268\r\ndate: Sun, 04 Jan 2026 14:58:16 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN,SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":66268,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1000x500, components 3","md5":"3027258848ec2f4931cbd2d937d1417c","sha1":"f9826bc5135acbee4a4239219cce819fd4280ea1","sha256":"46ebe0770b6cea6d98a6a87f0e304c0301dbec0d8650adb5ac905af22c0d87d1","sha512":"b71ed628439204c6087a906870941edff644fb3e015d0206a0e8d8b8180c5f581d92654b45311deb678e92dca86c15c103f7ee8c8bab19a363cc5abe7ec2375c","ssdeep":"1536:R5kYvRlIaqlNh1DhmKu3C2WIJPk3mxp97RiD:nvRlZqr5vu3C2WIJMWZ7Rc","tlshash":"c353012bd870ba47dcf0710a936f633f3ca4be8d168272a011252f8970f51a5f19f925","first_seen":"2026-01-04T14:58:49.760587Z","last_seen":"2026-01-04T14:58:49.760587Z","times_seen":1,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-04","alert":"Phishing Block","trigger":"makeup-fx-shop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"makeup-fx-shop.com/modules/plugins/absolute_option_matrix_prices/js/script.js","fqdn":"makeup-fx-shop.com","domain":"makeup-fx-shop.com","tld":"com"},"ip":{"addr":"67.209.117.37","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://makeup-fx-shop.com/","date":"2026-01-04T14:58:16.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.makeup-fx-shop.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Nov 2025 10:45:48 GMT","end":"Thu, 12 Feb 2026 10:45:47 GMT"},"fingerprint":{"sha1":"69:F1:24:86:AF:5B:08:2D:39:BB:60:E0:EF:00:17:7F:8B:E9:21:6F","sha256":"23:40:FA:84:12:AB:C9:A3:7F:2A:99:27:82:32:1A:18:5B:A9:56:05:AC:80:3F:30:B2:FE:E1:E1:F7:F2:2D:58"}}},"request":{"raw":"GET /modules/plugins/absolute_option_matrix_prices/js/script.js HTTP/1.1\r\nHost: makeup-fx-shop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://makeup-fx-shop.com/\r\nCookie: CCS_BA3DC426B2=f759ae967f445f349abeff8ad444f7bb\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sun, 11 Jan 2026 14:58:16 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 23 Jun 2020 07:51:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 839\r\ndate: Sun, 04 Jan 2026 14:58:16 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN,SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2681,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"8595b2f27e0c3bdab34a094fb6beb787","sha1":"c8036ac2ffcdf3d9e621b0bb42bcceeca141afab","sha256":"3a78509c440fd15cad6abda8d71c9f6903054aac5de5f291a86aab51f37e49f4","sha512":"ba0404901a8e6329a356d85e44691aae6b8a4ee29e8b7d7c4f32177f8d5c9da1e2f22998ade62ce51fd1ef7da68e2efba781253d00ed43a625cc229ae69049e7","ssdeep":"","tlshash":"8651e0f0b64d236a81df33a4983916845e7cc172a37204fdb40dfac845609b5e3ab76e","first_seen":"2026-01-04T14:58:49.762289Z","last_seen":"2026-01-04T14:58:49.762289Z","times_seen":1,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-04","alert":"Phishing Block","trigger":"makeup-fx-shop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"makeup-fx-shop.com/skins/fx_foundation/js/vendor/jquery.js","fqdn":"makeup-fx-shop.com","domain":"makeup-fx-shop.com","tld":"com"},"ip":{"addr":"67.209.117.37","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://makeup-fx-shop.com/","date":"2026-01-04T14:58:16.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.makeup-fx-shop.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Nov 2025 10:45:48 GMT","end":"Thu, 12 Feb 2026 10:45:47 GMT"},"fingerprint":{"sha1":"69:F1:24:86:AF:5B:08:2D:39:BB:60:E0:EF:00:17:7F:8B:E9:21:6F","sha256":"23:40:FA:84:12:AB:C9:A3:7F:2A:99:27:82:32:1A:18:5B:A9:56:05:AC:80:3F:30:B2:FE:E1:E1:F7:F2:2D:58"}}},"request":{"raw":"GET /skins/fx_foundation/js/vendor/jquery.js HTTP/1.1\r\nHost: makeup-fx-shop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://makeup-fx-shop.com/\r\nCookie: CCS_BA3DC426B2=f759ae967f445f349abeff8ad444f7bb\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sun, 11 Jan 2026 14:58:16 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Sat, 14 Sep 2019 12:17:32 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 29150\r\ndate: Sun, 04 Jan 2026 14:58:16 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN,SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":84732,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32018)","md5":"f5d547e5b88bd3a9b94df8c4dd1cd638","sha1":"2ada42c8fd78888a0d0c8ec0dd08e58fe136b0d2","sha256":"12ccaa063cdecf7fa7c7822978a7fd98bd2063ec2ad9150353b8271ae09e1803","sha512":"d78ac3194a6e93a912a59355307379f1071516dd8cadf4548de127b1a5fe947faebce6c60ff557bcc935da093d47f768a82693178903809b6cd282bc1ecb1349","ssdeep":"1536:qm241ek/SRSMO20RALjoRzSdXEs3PIwzwwqA+ACLS6sLJ1t5ZLoq33oTxxlRBQer:FrjRh51lSz1t5idxlfXa98HrZ","tlshash":"8283d7d8b2d6b062967730b890bf510bf17a98dab44c4ca4f058c8e47db4a9d507bf2d","first_seen":"2023-03-12T20:42:23Z","last_seen":"2026-08-06T07:48:45.540728Z","times_seen":96,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-04","alert":"Phishing Block","trigger":"makeup-fx-shop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"makeup-fx-shop.com/images/source/slide17.jpg","fqdn":"makeup-fx-shop.com","domain":"makeup-fx-shop.com","tld":"com"},"ip":{"addr":"67.209.117.37","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://makeup-fx-shop.com/","date":"2026-01-04T14:58:16.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.makeup-fx-shop.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Nov 2025 10:45:48 GMT","end":"Thu, 12 Feb 2026 10:45:47 GMT"},"fingerprint":{"sha1":"69:F1:24:86:AF:5B:08:2D:39:BB:60:E0:EF:00:17:7F:8B:E9:21:6F","sha256":"23:40:FA:84:12:AB:C9:A3:7F:2A:99:27:82:32:1A:18:5B:A9:56:05:AC:80:3F:30:B2:FE:E1:E1:F7:F2:2D:58"}}},"request":{"raw":"GET /images/source/slide17.jpg HTTP/1.1\r\nHost: makeup-fx-shop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://makeup-fx-shop.com/\r\nCookie: CCS_BA3DC426B2=f759ae967f445f349abeff8ad444f7bb\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sun, 11 Jan 2026 14:58:16 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 04 Dec 2019 16:14:52 GMT\r\naccept-ranges: bytes\r\ncontent-length: 95727\r\ndate: Sun, 04 Jan 2026 14:58:16 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN,SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":95727,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1000x500, components 3","md5":"5fa3066c559032c9080c8f2432314343","sha1":"2ffb2bbfcf2981bca2dcd6566b9dc0614c0fbca6","sha256":"628a27fdd86fd48fd9923fc1fc327876f092a5a9b7be24b672c6e7e4699d00eb","sha512":"8dd0f912cfe7a9ab0004bf5ebb341eab73d436cf70445f22145ef309d9a67145c39f6a5283c1bb1bf1bdf7915c6bde52cbe72c3caf63ca2b46d03d41822f22c4","ssdeep":"1536:RPGL9iDx5NXeZBR1UB6z4XadoYhDHXG8pGxFV3Cn+F0wbmmdMjmeMAvpAvu6N:9BnNXeZBwB6z4Xad5JZm73i+FHbmmdWa","tlshash":"db9302b76ecd6d4fdceb61acb63c1182d118483bb0d1397db39a2cd9b564a404d824e3","first_seen":"2026-01-04T14:58:49.766621Z","last_seen":"2026-01-04T14:58:49.766621Z","times_seen":1,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-04","alert":"Phishing Block","trigger":"makeup-fx-shop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"makeup-fx-shop.com/images/cache/brushes/Large04.200.JPG","fqdn":"makeup-fx-shop.com","domain":"makeup-fx-shop.com","tld":"com"},"ip":{"addr":"67.209.117.37","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://makeup-fx-shop.com/","date":"2026-01-04T14:58:16.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.makeup-fx-shop.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Nov 2025 10:45:48 GMT","end":"Thu, 12 Feb 2026 10:45:47 GMT"},"fingerprint":{"sha1":"69:F1:24:86:AF:5B:08:2D:39:BB:60:E0:EF:00:17:7F:8B:E9:21:6F","sha256":"23:40:FA:84:12:AB:C9:A3:7F:2A:99:27:82:32:1A:18:5B:A9:56:05:AC:80:3F:30:B2:FE:E1:E1:F7:F2:2D:58"}}},"request":{"raw":"GET /images/cache/brushes/Large04.200.JPG HTTP/1.1\r\nHost: makeup-fx-shop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://makeup-fx-shop.com/\r\nCookie: CCS_BA3DC426B2=f759ae967f445f349abeff8ad444f7bb\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 14:58:16 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 12 Aug 2022 12:06:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2334\r\ndate: Sun, 04 Jan 2026 14:58:16 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN,SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2334,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80\", progressive, precision 8, 200x133, components 3","md5":"25a5d945a14fb30cf8d8345719a6d232","sha1":"5a9b04b6f0d1078914e8a70a17b163de53644181","sha256":"89fa738b3a2e567dd344537f2a497f3ae1747413b9dba659663595c463560829","sha512":"916b8950b4c6dae8bd1da4e2f0c2e3a99b6a2a68a4cc253e875e8b63b595ee513d19a551110f85caad5847f385669488df4b9a312fc7bbfc2b1b3eeac405d974","ssdeep":"","tlshash":"bf41f9293f01c603d539d63301f6925d933c6f046e939a8f1b75495244212e35be85c9","first_seen":"2026-01-04T14:58:49.768263Z","last_seen":"2026-01-04T14:58:49.768263Z","times_seen":1,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-04","alert":"Phishing Block","trigger":"makeup-fx-shop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"makeup-fx-shop.com/skins/fx_foundation/js/vendor/jquery.cookie.min.js","fqdn":"makeup-fx-shop.com","domain":"makeup-fx-shop.com","tld":"com"},"ip":{"addr":"67.209.117.37","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://makeup-fx-shop.com/","date":"2026-01-04T14:58:16.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.makeup-fx-shop.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Nov 2025 10:45:48 GMT","end":"Thu, 12 Feb 2026 10:45:47 GMT"},"fingerprint":{"sha1":"69:F1:24:86:AF:5B:08:2D:39:BB:60:E0:EF:00:17:7F:8B:E9:21:6F","sha256":"23:40:FA:84:12:AB:C9:A3:7F:2A:99:27:82:32:1A:18:5B:A9:56:05:AC:80:3F:30:B2:FE:E1:E1:F7:F2:2D:58"}}},"request":{"raw":"GET /skins/fx_foundation/js/vendor/jquery.cookie.min.js HTTP/1.1\r\nHost: makeup-fx-shop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://makeup-fx-shop.com/\r\nCookie: CCS_BA3DC426B2=f759ae967f445f349abeff8ad444f7bb\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sun, 11 Jan 2026 14:58:16 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Sat, 14 Sep 2019 12:17:32 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 702\r\ndate: Sun, 04 Jan 2026 14:58:16 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN,SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1417,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1266)","md5":"499ef00e1635d245314e27f29097714e","sha1":"596964c5fc8ad6d76507015c9cf702c3a3ef1ba9","sha256":"79c0044ea70c08ac00f42c5f00044992031a04cfa634703960d62c2649f89933","sha512":"19facdf40b77eed5fe772c961a3d14f1c0830ab089118cbbbec3e3abc778bae4f6684d7d1a3ba9bc4b33965c9c310ecec3a004c774523625eb09be1f14f1e204","ssdeep":"","tlshash":"192144a83249b80b46674b33a67f14abb03cab95a4dd505ac1d1a4d03e708930962ffe","first_seen":"2026-01-04T14:58:49.770207Z","last_seen":"2026-05-07T02:21:59.434238Z","times_seen":2,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-04","alert":"Phishing Block","trigger":"makeup-fx-shop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://makeup-fx-shop.com/","date":"2026-01-04T14:58:16.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://makeup-fx-shop.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 01 Jan 2026 09:55:49 GMT\r\nexpires: Fri, 01 Jan 2027 09:55:49 GMT\r\ncache-control: public, max-age=31536000\r\nage: 277347\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-08-06T11:47:12.573114Z","times_seen":322028,"resource_available":false,"data":null}},"time_used":328,"timings":{"blocked":146,"dns":0,"connect":7,"send":0,"wait":8,"receive":13,"ssl":147},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"makeup-fx-shop.com/skins/fx_foundation/images/bxslider/controls.png","fqdn":"makeup-fx-shop.com","domain":"makeup-fx-shop.com","tld":"com"},"ip":{"addr":"67.209.117.37","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://makeup-fx-shop.com/","date":"2026-01-04T14:58:17.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.makeup-fx-shop.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Nov 2025 10:45:48 GMT","end":"Thu, 12 Feb 2026 10:45:47 GMT"},"fingerprint":{"sha1":"69:F1:24:86:AF:5B:08:2D:39:BB:60:E0:EF:00:17:7F:8B:E9:21:6F","sha256":"23:40:FA:84:12:AB:C9:A3:7F:2A:99:27:82:32:1A:18:5B:A9:56:05:AC:80:3F:30:B2:FE:E1:E1:F7:F2:2D:58"}}},"request":{"raw":"GET /skins/fx_foundation/images/bxslider/controls.png HTTP/1.1\r\nHost: makeup-fx-shop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://makeup-fx-shop.com/skins/fx_foundation/css/jquery.bxslider.css\r\nCookie: CCS_BA3DC426B2=f759ae967f445f349abeff8ad444f7bb\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sun, 11 Jan 2026 14:58:17 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 14 Sep 2019 12:17:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2806\r\ndate: Sun, 04 Jan 2026 14:58:17 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN,SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2806,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 63, 8-bit/color RGBA, non-interlaced","md5":"d9d25372f38c6b242b9b51d5841fe86e","sha1":"c4f03d55c33a5e3cb771515689debd6c8875b991","sha256":"257206c4fd6bcee36927eb0ef2ba087b5dfc6c9a18df7f8553878bf847616226","sha512":"86a7019528342eedcb78a481626e85fafa69dae4c4edc7db2efad45392e90fc0403872245c107382d38abef38ea4b17e7247094fd1647b6c7e86e706f318dc04","ssdeep":"","tlshash":"d1514cefbd4360446a84e94d78f5c21504428d408ef46b7b78ffca011a9e5b1cc0d1c6","first_seen":"2023-05-01T03:22:51Z","last_seen":"2026-08-06T10:18:53.459898Z","times_seen":1351,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-04","alert":"Phishing Block","trigger":"makeup-fx-shop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"makeup-fx-shop.com/skins/fx_foundation/css/foundation.css","fqdn":"makeup-fx-shop.com","domain":"makeup-fx-shop.com","tld":"com"},"ip":{"addr":"67.209.117.37","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://makeup-fx-shop.com/","date":"2026-01-04T14:58:16.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.makeup-fx-shop.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Nov 2025 10:45:48 GMT","end":"Thu, 12 Feb 2026 10:45:47 GMT"},"fingerprint":{"sha1":"69:F1:24:86:AF:5B:08:2D:39:BB:60:E0:EF:00:17:7F:8B:E9:21:6F","sha256":"23:40:FA:84:12:AB:C9:A3:7F:2A:99:27:82:32:1A:18:5B:A9:56:05:AC:80:3F:30:B2:FE:E1:E1:F7:F2:2D:58"}}},"request":{"raw":"GET /skins/fx_foundation/css/foundation.css HTTP/1.1\r\nHost: makeup-fx-shop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://makeup-fx-shop.com/\r\nCookie: CCS_BA3DC426B2=f759ae967f445f349abeff8ad444f7bb\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sun, 11 Jan 2026 14:58:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 14 Sep 2019 12:17:32 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 21993\r\ndate: Sun, 04 Jan 2026 14:58:16 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN,SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":193878,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1526)","md5":"26313cb030780a73e8fbf90970f69b54","sha1":"aaf494ed4e8529e4da872d7985af86b10289a5c9","sha256":"30fe2eb91cf3f36b6d937d17bc5e7eb171f85d3be5534637fcb74255c2f102d0","sha512":"a75cfbe84be50272e222ec46d24fe2a61a8e5751413ad75ff45cabefc469c3d4f7563856fa83db7e0d404e80787c9f71f87e4bbfb7ce8ce6e15150361cdc2206","ssdeep":"1536:/omaOv9eXtpHGnjTEt67cqZ1SxNVF8AiOtclp63H5xzPt:o0Tiqroclp6pxR","tlshash":"651452876af22705211386b45aeb6e40333b1443da2ddd38bb8e22f5df4e9c44563ad7","first_seen":"2026-01-04T14:58:49.775356Z","last_seen":"2026-01-04T14:58:49.775356Z","times_seen":1,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-04","alert":"Phishing Block","trigger":"makeup-fx-shop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"makeup-fx-shop.com/skins/fx_foundation/js/vendor/modernizr.min.js","fqdn":"makeup-fx-shop.com","domain":"makeup-fx-shop.com","tld":"com"},"ip":{"addr":"67.209.117.37","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://makeup-fx-shop.com/","date":"2026-01-04T14:58:16.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.makeup-fx-shop.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Nov 2025 10:45:48 GMT","end":"Thu, 12 Feb 2026 10:45:47 GMT"},"fingerprint":{"sha1":"69:F1:24:86:AF:5B:08:2D:39:BB:60:E0:EF:00:17:7F:8B:E9:21:6F","sha256":"23:40:FA:84:12:AB:C9:A3:7F:2A:99:27:82:32:1A:18:5B:A9:56:05:AC:80:3F:30:B2:FE:E1:E1:F7:F2:2D:58"}}},"request":{"raw":"GET /skins/fx_foundation/js/vendor/modernizr.min.js HTTP/1.1\r\nHost: makeup-fx-shop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://makeup-fx-shop.com/\r\nCookie: CCS_BA3DC426B2=f759ae967f445f349abeff8ad444f7bb\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sun, 11 Jan 2026 14:58:16 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Sat, 14 Sep 2019 12:17:32 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4492\r\ndate: Sun, 04 Jan 2026 14:58:16 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN,SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11518,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5110)","md5":"f442f15d4e875de576901ad919e59d5d","sha1":"36a0a7929594c074682522a3f7755ad9b3a1092d","sha256":"b4e87e1a18902aabe2c8edf4d00d58de9e017a27e8cfcb3f3628c298bbfe011c","sha512":"f6a2141a07ee9070a19bac34e86ea1ccc8266c026dcef8bf40acf3e6c189ba0d204e7741718632fc8450c02c4f35b0dd42a07e82a8fab37ebf391590012ed7fd","ssdeep":"192:ekD1wwvesCOJ6LYtRiJhB8pa+zudiKDFuwGqjVeAQCen:e6esCOpPiJhBmqdBFuwGqYAQCo","tlshash":"d032d78d71a27109539ba077217f420ff27e589869284454e059c8fdfe78dd8823bf6d","first_seen":"2026-01-04T14:58:49.77819Z","last_seen":"2026-05-07T02:21:59.276483Z","times_seen":2,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-04","alert":"Phishing Block","trigger":"makeup-fx-shop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"makeup-fx-shop.com/modules/plugins/file_upload/css/style.css","fqdn":"makeup-fx-shop.com","domain":"makeup-fx-shop.com","tld":"com"},"ip":{"addr":"67.209.117.37","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://makeup-fx-shop.com/","date":"2026-01-04T14:58:16.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.makeup-fx-shop.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Nov 2025 10:45:48 GMT","end":"Thu, 12 Feb 2026 10:45:47 GMT"},"fingerprint":{"sha1":"69:F1:24:86:AF:5B:08:2D:39:BB:60:E0:EF:00:17:7F:8B:E9:21:6F","sha256":"23:40:FA:84:12:AB:C9:A3:7F:2A:99:27:82:32:1A:18:5B:A9:56:05:AC:80:3F:30:B2:FE:E1:E1:F7:F2:2D:58"}}},"request":{"raw":"GET /modules/plugins/file_upload/css/style.css HTTP/1.1\r\nHost: makeup-fx-shop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://makeup-fx-shop.com/\r\nCookie: CCS_BA3DC426B2=f759ae967f445f349abeff8ad444f7bb\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sun, 11 Jan 2026 14:58:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 19 Jun 2023 07:42:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 278\r\ndate: Sun, 04 Jan 2026 14:58:16 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN,SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":739,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"f31ce57a5248dd72096337caf9d2d3a4","sha1":"46392aada52700fe3dcb61299efdf8c3e836aff1","sha256":"680e5e7f80321354225fcdd1c44aeb5850bd35561ab38b8891b34a4ea802ca45","sha512":"a80badb92fadb1ac042619a775a4bc63a019b5e49d6fff01576d24b2fc1e1c48891b1f0bbe8bbec72bfc432eb2ea83ba118379232bd5cd63a7cfcba406502590","ssdeep":"","tlshash":"9b01d005d710915a7037487c67306692d33980db8907936cfbb6b5a18f76ae47a327c4","first_seen":"2026-01-04T14:58:49.781505Z","last_seen":"2026-01-04T14:58:49.781505Z","times_seen":1,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-04","alert":"Phishing Block","trigger":"makeup-fx-shop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"makeup-fx-shop.com/images/source/slide12.jpg","fqdn":"makeup-fx-shop.com","domain":"makeup-fx-shop.com","tld":"com"},"ip":{"addr":"67.209.117.37","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://makeup-fx-shop.com/","date":"2026-01-04T14:58:16.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.makeup-fx-shop.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Nov 2025 10:45:48 GMT","end":"Thu, 12 Feb 2026 10:45:47 GMT"},"fingerprint":{"sha1":"69:F1:24:86:AF:5B:08:2D:39:BB:60:E0:EF:00:17:7F:8B:E9:21:6F","sha256":"23:40:FA:84:12:AB:C9:A3:7F:2A:99:27:82:32:1A:18:5B:A9:56:05:AC:80:3F:30:B2:FE:E1:E1:F7:F2:2D:58"}}},"request":{"raw":"GET /images/source/slide12.jpg HTTP/1.1\r\nHost: makeup-fx-shop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://makeup-fx-shop.com/\r\nCookie: CCS_BA3DC426B2=f759ae967f445f349abeff8ad444f7bb\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sun, 11 Jan 2026 14:58:16 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 13 Nov 2019 10:07:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 70068\r\ndate: Sun, 04 Jan 2026 14:58:16 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN,SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":70068,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1000x500, components 3","md5":"0269121a57059cb0f16ca8024cc3dea4","sha1":"a7be12028f3c6d79bb98ff276506907edf37b2cb","sha256":"0f71c6d8b06927ea8e2d79fd84f2daa261a8e3260b51cbfebdb00918bb06f81a","sha512":"4d6f828f4e79f56c3cf4df1f50ebf4c47657ef41be5b29b65f8c74c40b735e791171e90cc12f477af815d981be3cd4f61351603b7f8dd5298d080983a35f5873","ssdeep":"1536:RyvMRHFkmjN8OXQCW36N3o9qVD+tUCGrGoQ/ogR:XlR+OACWqN30Z6Aok","tlshash":"2d63f1031d9aa2a6643de3edbe431f9c2e897f1cc48619f702170f523e792675d8e648","first_seen":"2026-01-04T14:58:49.783444Z","last_seen":"2026-01-04T14:58:49.783444Z","times_seen":1,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-04","alert":"Phishing Block","trigger":"makeup-fx-shop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"makeup-fx-shop.com/skins/fx_foundation/js/vendor/jquery.validate.min.js","fqdn":"makeup-fx-shop.com","domain":"makeup-fx-shop.com","tld":"com"},"ip":{"addr":"67.209.117.37","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://makeup-fx-shop.com/","date":"2026-01-04T14:58:16.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.makeup-fx-shop.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Nov 2025 10:45:48 GMT","end":"Thu, 12 Feb 2026 10:45:47 GMT"},"fingerprint":{"sha1":"69:F1:24:86:AF:5B:08:2D:39:BB:60:E0:EF:00:17:7F:8B:E9:21:6F","sha256":"23:40:FA:84:12:AB:C9:A3:7F:2A:99:27:82:32:1A:18:5B:A9:56:05:AC:80:3F:30:B2:FE:E1:E1:F7:F2:2D:58"}}},"request":{"raw":"GET /skins/fx_foundation/js/vendor/jquery.validate.min.js HTTP/1.1\r\nHost: makeup-fx-shop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://makeup-fx-shop.com/\r\nCookie: CCS_BA3DC426B2=f759ae967f445f349abeff8ad444f7bb\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sun, 11 Jan 2026 14:58:16 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Sat, 14 Sep 2019 12:17:32 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6547\r\ndate: Sun, 04 Jan 2026 14:58:16 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN,SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":21090,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (20951)","md5":"41dca229d87ea9182e37fb89389f0e2e","sha1":"8722d4e8189f4eb7667df93f11de766e142e26ac","sha256":"b5d68e883b0d01a29c6066e2f888976b364526756440aeb57883dae84d8ca165","sha512":"66ebb6f8e7a9e161f16f50dfb4de2dea59f2f7f0c07da606c1f0a137835d4cb3460b68b77d3d00ee47b84a847ea134024e4277062d8edef588c1778aa5323bac","ssdeep":"384:QvpjCy+Jx6UtHYlHUdS2L7wQ548NsOAN/tllEny+Ww5MQPN3txwV/vtPx+OLDEoG:U+Jx6U2lHUdS2QQ54R7/1Eny+WwhqxVs","tlshash":"0192b68d77d670065a9630f4a05b660760b669a0a008e83cb5b8e4c1bef8fcc50f7f78","first_seen":"2023-04-05T04:11:10Z","last_seen":"2026-08-06T10:43:01.18757Z","times_seen":2424,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-04","alert":"Phishing Block","trigger":"makeup-fx-shop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://makeup-fx-shop.com/","date":"2026-01-04T14:58:17.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/i/productlogos/translate/v14/24px.svg HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://makeup-fx-shop.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ncontent-length: 3340\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 03 Jan 2026 10:57:46 GMT\r\nexpires: Sun, 03 Jan 2027 10:57:46 GMT\r\ncache-control: public, max-age=31536000\r\nage: 100831\r\nlast-modified: Wed, 20 Apr 2022 14:24:23 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6225,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2bd5c073a88b83ed74db88282a56ddfb","sha1":"d0ebfc376f8c6a44a8d4cd216817dcd7d0c33650","sha256":"ab5c23a05e39deed14d9d8262b0dce9f024f86105a27196cad37d14a3f516e09","sha512":"5c6c4a92e93fc0f6a675658cc84f6187fdebd3eee94efd07e24658736cba598f3bc7156b19834b13fb44c1d43fcb7df9fcca7f0a453037e30da76ba8f4b23b89","ssdeep":"96:+R2K3Z4n7tyVwip82hezk6227gLFoXhu1XuE20ot+pVY3YptWDzOzgXK3Zx:ql3KnxyGGMzb7noR20NTww33","tlshash":"c1d1e6f19309d815cd6a83d8cd9b8002aa1f25ddd50ac6cc7639fb3bd1a50eb1d2d7a4","first_seen":"2023-04-06T21:34:37Z","last_seen":"2026-08-06T10:55:19.280088Z","times_seen":79058,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"makeup-fx-shop.com/skins/fx_foundation/js/1.foundation.min.js","fqdn":"makeup-fx-shop.com","domain":"makeup-fx-shop.com","tld":"com"},"ip":{"addr":"67.209.117.37","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://makeup-fx-shop.com/","date":"2026-01-04T14:58:16.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.makeup-fx-shop.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Nov 2025 10:45:48 GMT","end":"Thu, 12 Feb 2026 10:45:47 GMT"},"fingerprint":{"sha1":"69:F1:24:86:AF:5B:08:2D:39:BB:60:E0:EF:00:17:7F:8B:E9:21:6F","sha256":"23:40:FA:84:12:AB:C9:A3:7F:2A:99:27:82:32:1A:18:5B:A9:56:05:AC:80:3F:30:B2:FE:E1:E1:F7:F2:2D:58"}}},"request":{"raw":"GET /skins/fx_foundation/js/1.foundation.min.js HTTP/1.1\r\nHost: makeup-fx-shop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://makeup-fx-shop.com/\r\nCookie: CCS_BA3DC426B2=f759ae967f445f349abeff8ad444f7bb\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sun, 11 Jan 2026 14:58:16 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Sat, 14 Sep 2019 12:17:32 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 39475\r\ndate: Sun, 04 Jan 2026 14:58:16 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN,SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":195055,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"17cdbd200df53243fdbcda45c6fc847d","sha1":"420d8cca6daa0e8f88dc2bc2d1854891eb09b99c","sha256":"3135df204efb9e4aa571287908de9f101bffa2f335f6857a77e2d47a2c407618","sha512":"b6081a4e9ada2884c8990335e13206f3ddc5a0083d5c13fb9ff9fbfd0d0f8286799bb8c898a50ff345b95e8dcfa5c38bbaa196c6170fc2bf9fb171d5473b89cb","ssdeep":"1536:Wo6E1fD4TQ0jpssWHlVhe/VLrTsF6SYfEZ2St48nwwWIrgmGg1jf1OloajxeZYSJ:nSJ5TsF6SYMZwmGg1jfwiajx3h+uy","tlshash":"2f144d0a76f3206a8567707a8faf52057232440b590aee297d7c83849fd097856f2ffd","first_seen":"2026-01-04T14:58:49.787662Z","last_seen":"2026-01-04T14:58:49.787662Z","times_seen":1,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-04","alert":"Phishing Block","trigger":"makeup-fx-shop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"makeup-fx-shop.com/skins/fx_foundation/images/bxslider/bx_loader.gif","fqdn":"makeup-fx-shop.com","domain":"makeup-fx-shop.com","tld":"com"},"ip":{"addr":"67.209.117.37","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://makeup-fx-shop.com/","date":"2026-01-04T14:58:17.123Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.makeup-fx-shop.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Nov 2025 10:45:48 GMT","end":"Thu, 12 Feb 2026 10:45:47 GMT"},"fingerprint":{"sha1":"69:F1:24:86:AF:5B:08:2D:39:BB:60:E0:EF:00:17:7F:8B:E9:21:6F","sha256":"23:40:FA:84:12:AB:C9:A3:7F:2A:99:27:82:32:1A:18:5B:A9:56:05:AC:80:3F:30:B2:FE:E1:E1:F7:F2:2D:58"}}},"request":{"raw":"GET /skins/fx_foundation/images/bxslider/bx_loader.gif HTTP/1.1\r\nHost: makeup-fx-shop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://makeup-fx-shop.com/skins/fx_foundation/css/jquery.bxslider.css\r\nCookie: CCS_BA3DC426B2=f759ae967f445f349abeff8ad444f7bb\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sun, 11 Jan 2026 14:58:17 GMT\r\ncontent-type: image/gif\r\nlast-modified: Sat, 14 Sep 2019 12:17:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 8581\r\ndate: Sun, 04 Jan 2026 14:58:17 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN,SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8581,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 32 x 32","md5":"931bdb6b50816b03206c66921760b246","sha1":"f67f91dafbe0f846c8f8f67a005497d8bdea188a","sha256":"6d46e2cf165a5a0584afba7bc9663da292ee08c97cfc7613de6013ed05be892a","sha512":"860812e9616ebdb45a65a8477f8f6e122f657d9f9719906cdaff13d73ff5f7ac88d6f7794701f477cde22068bc2faf45ff20dd95f273a94eead6531e621f7add","ssdeep":"192:Y8fyxYZS1+ms5zNSFhJHPX3SPmJlU6txqjZLXs:Yi++ms5YFh5PXiitk+","tlshash":"37025c37550c4640d98f28753bac1aac85e8d3f0639c3e8db5ee7314591b23972a97cc","first_seen":"2023-04-09T16:33:08Z","last_seen":"2026-08-06T10:18:53.458516Z","times_seen":7483,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-04","alert":"Phishing Block","trigger":"makeup-fx-shop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/product/2x/translate_24dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://makeup-fx-shop.com/","date":"2026-01-04T14:58:17.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /images/branding/product/2x/translate_24dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.Qrtd5lGlzn4.L.F4.O/am=AAQD/d=0/rs=AN8SPfo9mDPo5pOm0HC4yPcwcdDdHSiNXw/m=el_main_css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 1842\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 04 Jan 2026 07:41:14 GMT\r\nexpires: Mon, 04 Jan 2027 07:41:14 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 14 Oct 2021 09:08:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nage: 26223\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1842,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"c69c796362406f9e11c7f4bf5bb628da","sha1":"e489ce95ab56208090868882113d7416abf46775","sha256":"4dac0026fbfa2615dce30c0af12830863fe885f84387a0147b9e338f548d5d82","sha512":"d3ad560ed0fd29be7d2cc434694f09e5a6fbea8b29c0611aecb54a1b73b4d722c53f42a19dae9e3d5d358444e50fb8fffbc39d67ce751bdbc8c861f6f95d3162","ssdeep":"","tlshash":"4e31f9fd129220437101ade72165eef798347c15f412da60ce65ba389c9fe20ed9a619","first_seen":"2023-04-05T07:39:29Z","last_seen":"2026-08-06T10:55:19.25352Z","times_seen":74104,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"makeup-fx-shop.com/images/logos/maillogo.gif","fqdn":"makeup-fx-shop.com","domain":"makeup-fx-shop.com","tld":"com"},"ip":{"addr":"67.209.117.37","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://makeup-fx-shop.com/","date":"2026-01-04T14:58:16.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.makeup-fx-shop.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Nov 2025 10:45:48 GMT","end":"Thu, 12 Feb 2026 10:45:47 GMT"},"fingerprint":{"sha1":"69:F1:24:86:AF:5B:08:2D:39:BB:60:E0:EF:00:17:7F:8B:E9:21:6F","sha256":"23:40:FA:84:12:AB:C9:A3:7F:2A:99:27:82:32:1A:18:5B:A9:56:05:AC:80:3F:30:B2:FE:E1:E1:F7:F2:2D:58"}}},"request":{"raw":"GET /images/logos/maillogo.gif HTTP/1.1\r\nHost: makeup-fx-shop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://makeup-fx-shop.com/\r\nCookie: CCS_BA3DC426B2=f759ae967f445f349abeff8ad444f7bb\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sun, 11 Jan 2026 14:58:16 GMT\r\ncontent-type: image/gif\r\nlast-modified: Sat, 23 May 2020 10:33:02 GMT\r\naccept-ranges: bytes\r\ncontent-length: 15080\r\ndate: Sun, 04 Jan 2026 14:58:16 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN,SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15080,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 300 x 150","md5":"eeb19081df80ec93b38a2caa995dd541","sha1":"366dc15a7b1c2b834abb40bae6eaf86c9e9160d3","sha256":"9d8f1e887aa226c483c440561c152d8a57f78abc56c3390657b9e56fd2b8125f","sha512":"6e0bc294e23b27e91c82c6edbc5f4d1df93baacf834e9cea87fa9a99541c8fe09b20c70109500dee716d590598079f6be0586a6d875950ff699370888f626d89","ssdeep":"384:hnnnSN0d555lY9KmyTdgQixtJbTKX2qBmAyLt4YFP:hnvPlYUmxQixtJbuX2AyL2SP","tlshash":"4262d0228499e49b0f206ff2f8b08ec1dc4c2d2f8e535e9bf6078f3625d96936405153","first_seen":"2026-01-04T14:58:49.791261Z","last_seen":"2026-01-04T14:58:49.791261Z","times_seen":1,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-04","alert":"Phishing Block","trigger":"makeup-fx-shop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"makeup-fx-shop.com/images/source/slide19.jpg","fqdn":"makeup-fx-shop.com","domain":"makeup-fx-shop.com","tld":"com"},"ip":{"addr":"67.209.117.37","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://makeup-fx-shop.com/","date":"2026-01-04T14:58:16.101Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.makeup-fx-shop.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Nov 2025 10:45:48 GMT","end":"Thu, 12 Feb 2026 10:45:47 GMT"},"fingerprint":{"sha1":"69:F1:24:86:AF:5B:08:2D:39:BB:60:E0:EF:00:17:7F:8B:E9:21:6F","sha256":"23:40:FA:84:12:AB:C9:A3:7F:2A:99:27:82:32:1A:18:5B:A9:56:05:AC:80:3F:30:B2:FE:E1:E1:F7:F2:2D:58"}}},"request":{"raw":"GET /images/source/slide19.jpg HTTP/1.1\r\nHost: makeup-fx-shop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://makeup-fx-shop.com/\r\nCookie: CCS_BA3DC426B2=f759ae967f445f349abeff8ad444f7bb\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sun, 11 Jan 2026 14:58:16 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 26 May 2020 18:06:25 GMT\r\naccept-ranges: bytes\r\ncontent-length: 76560\r\ndate: Sun, 04 Jan 2026 14:58:16 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN,SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":76560,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1000x500, components 3","md5":"e1b4390ecd9cbf06905908166bbae5af","sha1":"6766446a4287351debd3a260fad3e2936c5a8e82","sha256":"ad21dba6fbb5ca7625b085eaeb683d8d32d1100613e33c05a41cafe79d6fd87b","sha512":"f93c81887a3d06ed84aea320bf805f29c13e0a473e6ad8f47ca14c8d26a64c97934ad5e7a0a6c2cf4e203bea922e8feea6802c4b9d66b4ce6f4c9b1eca49a213","ssdeep":"1536:evRZUmmKeeXtWYK3AB3JV83hFiFmTRLJnEJsR94n1bim8UvTT3lKIJ:0RZUMeeBK3AB3JW/99n9mnldLTEIJ","tlshash":"9673be071c69cbc2695d42e8be135ed46e4b8b08e9567eeb50512f9f3e498132dca02f","first_seen":"2026-01-04T14:58:49.793099Z","last_seen":"2026-01-04T14:58:49.793099Z","times_seen":1,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":148,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-04","alert":"Phishing Block","trigger":"makeup-fx-shop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"makeup-fx-shop.com/images/cache/hairwax/745110014_max.200.jpg","fqdn":"makeup-fx-shop.com","domain":"makeup-fx-shop.com","tld":"com"},"ip":{"addr":"67.209.117.37","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://makeup-fx-shop.com/","date":"2026-01-04T14:58:16.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.makeup-fx-shop.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Nov 2025 10:45:48 GMT","end":"Thu, 12 Feb 2026 10:45:47 GMT"},"fingerprint":{"sha1":"69:F1:24:86:AF:5B:08:2D:39:BB:60:E0:EF:00:17:7F:8B:E9:21:6F","sha256":"23:40:FA:84:12:AB:C9:A3:7F:2A:99:27:82:32:1A:18:5B:A9:56:05:AC:80:3F:30:B2:FE:E1:E1:F7:F2:2D:58"}}},"request":{"raw":"GET /images/cache/hairwax/745110014_max.200.jpg HTTP/1.1\r\nHost: makeup-fx-shop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://makeup-fx-shop.com/\r\nCookie: CCS_BA3DC426B2=f759ae967f445f349abeff8ad444f7bb\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sun, 11 Jan 2026 14:58:16 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 25 Jan 2024 20:52:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6764\r\ndate: Sun, 04 Jan 2026 14:58:16 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN,SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6764,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80\", progressive, precision 8, 200x200, components 3","md5":"57a76117020d3530c46ebac832270533","sha1":"a5f0f65a91fefccf755147d94f45ee2da584b371","sha256":"49f47bfe24d1a7dd5a70eb90b63040e67279c2669b525d5658a98122b99a438e","sha512":"bc57dc5d571b5eb45231e836e15b29f23ece59f1d8184713a5a54b79a456bb65ddbe1727d72382ba9aff16b3c39f09f6ce38da73f54e17ba9062a00a35bb9280","ssdeep":"192:XPB6rxRvki+o0wJY6K2giah2hNWSz+aEVN2K:p6vP+F6K/D2hNWSztEVYK","tlshash":"bfd19e13356eff14e0d7c7350b62a9067fa18881f6525cdfd3d51280ae624ec4ba30d8","first_seen":"2026-01-04T14:58:49.794684Z","last_seen":"2026-01-04T14:58:49.794684Z","times_seen":1,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-04","alert":"Phishing Block","trigger":"makeup-fx-shop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/images/cleardot.gif","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.157.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://makeup-fx-shop.com/","date":"2026-01-04T14:58:17.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"47:99:FB:97:02:C2:03:A6:B6:60:07:03:D3:B7:37:4B:99:D1:7F:1F","sha256":"01:72:D6:C3:FA:E5:7E:F5:EF:15:83:1F:EE:A5:BF:37:4C:78:02:B4:CD:BF:8D:EF:62:9F:53:B1:B3:1A:B6:EB"}}},"request":{"raw":"GET /images/cleardot.gif HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://makeup-fx-shop.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-type: image/gif\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 43\r\ndate: Sun, 04 Jan 2026 14:58:17 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\nlast-modified: Tue, 22 Oct 2019 18:30:00 GMT\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"fc94fb0c3ed8a8f909dbc7630a0987ff","sha1":"56d45f8a17f5078a20af9962c992ca4678450765","sha256":"2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363","sha512":"c87bf81fd70cf6434ca3a6c05ad6e9bd3f1d96f77dddad8d45ee043b126b2cb07a5cf23b4137b9d8462cd8a9adf2b463ab6de2b38c93db72d2d511ca60e3b57e","ssdeep":"","tlshash":"cb900003cac8c022c2a2c0300a0c03002bbaa8300228030ec0bc30fcec2a3a38c02000","first_seen":"2023-04-05T02:54:04Z","last_seen":"2026-08-06T11:33:52.663563Z","times_seen":82550,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.157.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://makeup-fx-shop.com/","date":"2026-01-04T14:58:16.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:57:20 GMT","end":"Wed, 25 Feb 2026 15:57:19 GMT"},"fingerprint":{"sha1":"13:5B:80:5A:23:15:61:AE:98:37:1B:0A:3C:F6:E2:BD:63:8E:3B:D6","sha256":"22:03:24:94:F7:E3:5F:66:1B:39:CE:18:75:20:3D:01:AC:FE:93:AA:1A:73:8C:D5:34:98:AB:2B:E5:19:37:12"}}},"request":{"raw":"GET /recaptcha/api.js HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://makeup-fx-shop.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Sun, 04 Jan 2026 14:58:16 GMT\r\ndate: Sun, 04 Jan 2026 14:58:16 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1017,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1017), with no line terminators","md5":"b57455c9a0032c8d67868882258a4a19","sha1":"017f1d5e957af25bc7ee498e8e6104da00835773","sha256":"1aa296f8312ecf0d0959f759affc2850e1ed52b321033a51355cc1f37fd5dc89","sha512":"24db4575be8e92cfb7b408e04e6bee7cc5257a22b46488a3f4e9a8dbc05f75c3f4a465fea59e4ea866c1a9f3afb145f50b60fb5969a61ef7c466d572a7197e57","ssdeep":"","tlshash":"581165731a04f0350b3209d1e1ffc7b5e482b01cf12845dca511ea842f79ccbce04589","first_seen":"2025-12-15T23:56:17.122996Z","last_seen":"2026-01-20T22:35:06.74886Z","times_seen":7485,"resource_available":true,"data":null}},"time_used":683,"timings":{"blocked":302,"dns":9,"connect":22,"send":0,"wait":35,"receive":0,"ssl":310},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"makeup-fx-shop.com/images/cache/mixcup/2024-03-29_17.46.07.200.jpg","fqdn":"makeup-fx-shop.com","domain":"makeup-fx-shop.com","tld":"com"},"ip":{"addr":"67.209.117.37","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://makeup-fx-shop.com/","date":"2026-01-04T14:58:16.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.makeup-fx-shop.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Nov 2025 10:45:48 GMT","end":"Thu, 12 Feb 2026 10:45:47 GMT"},"fingerprint":{"sha1":"69:F1:24:86:AF:5B:08:2D:39:BB:60:E0:EF:00:17:7F:8B:E9:21:6F","sha256":"23:40:FA:84:12:AB:C9:A3:7F:2A:99:27:82:32:1A:18:5B:A9:56:05:AC:80:3F:30:B2:FE:E1:E1:F7:F2:2D:58"}}},"request":{"raw":"GET /images/cache/mixcup/2024-03-29_17.46.07.200.jpg HTTP/1.1\r\nHost: makeup-fx-shop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://makeup-fx-shop.com/\r\nCookie: CCS_BA3DC426B2=f759ae967f445f349abeff8ad444f7bb\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sun, 11 Jan 2026 14:58:16 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 31 Mar 2024 10:18:51 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4746\r\ndate: Sun, 04 Jan 2026 14:58:16 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN,SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4746,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80\", progressive, precision 8, 200x150, components 3","md5":"9f16116b047ae4e941bbfba73ae368a0","sha1":"73e5df9b806f583501ad70d484359c45e39a510e","sha256":"e538958bc0a1583e7fa274ff985d1af7ff947237f32148eca521a22915d68961","sha512":"a95cfef362cb541f1b697061d401d92cb10780a7e5bd01043517828649c712bb6bbea6094b1a518ceb79eb63c30cbe19e8f8802538ebf1cb57eaee346f1f551e","ssdeep":"96:ky3hxHAzt1AqWGbSZH5wGG+Yc0eIslWOKYAx5YeAA962:9wXAqWgSbwtEgOrAU3AN","tlshash":"14a16ca37b834821ffdacc358fd9c09035a8dd325a095fbf62406e28a5674da57c58b0","first_seen":"2026-01-04T14:58:49.797808Z","last_seen":"2026-01-04T14:58:49.797808Z","times_seen":1,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-04","alert":"Phishing Block","trigger":"makeup-fx-shop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"makeup-fx-shop.com/favicon.ico","fqdn":"makeup-fx-shop.com","domain":"makeup-fx-shop.com","tld":"com"},"ip":{"addr":"67.209.117.37","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://makeup-fx-shop.com/","date":"2026-01-04T14:58:17.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.makeup-fx-shop.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Nov 2025 10:45:48 GMT","end":"Thu, 12 Feb 2026 10:45:47 GMT"},"fingerprint":{"sha1":"69:F1:24:86:AF:5B:08:2D:39:BB:60:E0:EF:00:17:7F:8B:E9:21:6F","sha256":"23:40:FA:84:12:AB:C9:A3:7F:2A:99:27:82:32:1A:18:5B:A9:56:05:AC:80:3F:30:B2:FE:E1:E1:F7:F2:2D:58"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: makeup-fx-shop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://makeup-fx-shop.com/\r\nCookie: CCS_BA3DC426B2=f759ae967f445f349abeff8ad444f7bb\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sun, 11 Jan 2026 14:58:17 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Sat, 14 Sep 2019 12:11:25 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5430\r\ndate: Sun, 04 Jan 2026 14:58:17 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN,SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5430,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"773a7dc28e10910df29168247554186e","sha1":"c42b3947b4044e622ceb3e46aad43a9db81e655b","sha256":"591588d835f8487fe78141bf99bfcdc1375b25fe24f422988bb9afe77dfe20d6","sha512":"3922007162ae36f23f42442dcd0c43d4dee9f98d8ff2a14dd6110a370a5c968baf4fa7970dfc2622449fb45042f85c3af913c0d10a8a4ab15646af75830c16a4","ssdeep":"48:+tYFH0v04usd7ArVUM1VTNi5VHtEL6sTeJ112vx0Vdejw:+tiH084usKiac51tELZTeJf2vyVdec","tlshash":"bcb12dcef904eb6bc82b67f581c9c67632319c182b8362129af57d37b9973065e42194","first_seen":"2026-01-04T07:19:58.584561Z","last_seen":"2026-01-04T14:58:49.799499Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-04","alert":"Phishing Block","trigger":"makeup-fx-shop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/gen204?sl=en\u0026nca=te_ap\u0026client=te\u0026logld=vTE_20251215","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://makeup-fx-shop.com/","date":"2026-01-04T14:58:17.901Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:50:09 GMT","end":"Wed, 25 Feb 2026 15:50:08 GMT"},"fingerprint":{"sha1":"70:35:5F:58:F3:50:B0:2A:0E:11:9A:FD:D4:67:00:94:17:0E:03:EF","sha256":"01:93:34:8C:59:AC:52:25:54:81:E8:50:E1:E9:8A:11:1F:3C:82:81:00:B2:90:35:17:5F:25:9C:C2:2D:D2:E2"}}},"request":{"raw":"GET /gen204?sl=en\u0026nca=te_ap\u0026client=te\u0026logld=vTE_20251215 HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://makeup-fx-shop.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: image/gif; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sun, 04 Jan 2026 14:58:17 GMT\r\ncross-origin-resource-policy: cross-origin\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncontent-security-policy: script-src 'nonce-VKVNKYXeNpJ7NMzP1NrsFw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/TranslateApiHttp/cspreport;worker-src 'self', require-trusted-types-for 'script';report-uri /_/TranslateApiHttp/cspreport\r\ncross-origin-opener-policy: same-origin\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\nreporting-endpoints: default=\"/_/TranslateApiHttp/web-reports?context=eJzj4tDikmJw1JBiEOLh6Gx4dYpN4MCFXVuZlZSS8gvjS4oS84pzEktSi1OLylKL4o0MjEwNjQxN9Qws4gsMABuYEq8\"\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nset-cookie: __Secure-ENID=30.SE=cRYUfAJ3Gq6AMh8Ec7FIHeWoV5M2wvQ4WEwpXl1PzoDxfVANaq6RInpLqYsLhp0kjFbcRpcfiTgESa-j3ypWofYY3r1NhwC7gooJduV6IS3CLgIo5XK7xW5bz4c30uXDNDHF2apqVSodBIQFnmeMsqWJvs9_MNpwobIeF9jeqvqrqbTK_vG-uolNKUN7EynPRw5Xn-rwH0QpgJ84pLybM0PWgMtT1IOGeMXWvhypoEGwc7JIfO-U; expires=Thu, 04-Feb-2027 07:16:35 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/gif; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T11:49:18.179709Z","times_seen":17741993,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"makeup-fx-shop.com/images/source/slide11.jpg","fqdn":"makeup-fx-shop.com","domain":"makeup-fx-shop.com","tld":"com"},"ip":{"addr":"67.209.117.37","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://makeup-fx-shop.com/","date":"2026-01-04T14:58:16.123Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.makeup-fx-shop.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Nov 2025 10:45:48 GMT","end":"Thu, 12 Feb 2026 10:45:47 GMT"},"fingerprint":{"sha1":"69:F1:24:86:AF:5B:08:2D:39:BB:60:E0:EF:00:17:7F:8B:E9:21:6F","sha256":"23:40:FA:84:12:AB:C9:A3:7F:2A:99:27:82:32:1A:18:5B:A9:56:05:AC:80:3F:30:B2:FE:E1:E1:F7:F2:2D:58"}}},"request":{"raw":"GET /images/source/slide11.jpg HTTP/1.1\r\nHost: makeup-fx-shop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://makeup-fx-shop.com/\r\nCookie: CCS_BA3DC426B2=f759ae967f445f349abeff8ad444f7bb\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sun, 11 Jan 2026 14:58:16 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 13 Nov 2019 10:07:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 110965\r\ndate: Sun, 04 Jan 2026 14:58:16 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN,SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":110965,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1000x500, components 3","md5":"caa899a03b73a35ea216dd033070a720","sha1":"37a79d9f857c428627ea6cb582bc8725f78758a3","sha256":"a470c8b7c60de4c5e595f0672c763302386707e90552a95139db5a13605ef017","sha512":"858693b46337482d466d348a576b0e6775b8bc1a107578c55a13e12e8c817a97d7adcb0a286f786dfd0be553e08b4b5220462f3ae83e8a5317f22b81c49d4834","ssdeep":"3072:ZrlZxbmp+u0IaDOPY9Ab17saSa7Fz5v42YIxIZaYz1j:V9SPaCPn57tRz5v8","tlshash":"06b3127abc71e72510121df5f0cb3ac40eb77d3bc6a21089e6649a14acd376c1ee65ac","first_seen":"2026-01-04T14:58:49.802113Z","last_seen":"2026-01-04T14:58:49.802113Z","times_seen":1,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-04","alert":"Phishing Block","trigger":"makeup-fx-shop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"makeup-fx-shop.com/images/source/slide16.jpg","fqdn":"makeup-fx-shop.com","domain":"makeup-fx-shop.com","tld":"com"},"ip":{"addr":"67.209.117.37","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://makeup-fx-shop.com/","date":"2026-01-04T14:58:16.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.makeup-fx-shop.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Nov 2025 10:45:48 GMT","end":"Thu, 12 Feb 2026 10:45:47 GMT"},"fingerprint":{"sha1":"69:F1:24:86:AF:5B:08:2D:39:BB:60:E0:EF:00:17:7F:8B:E9:21:6F","sha256":"23:40:FA:84:12:AB:C9:A3:7F:2A:99:27:82:32:1A:18:5B:A9:56:05:AC:80:3F:30:B2:FE:E1:E1:F7:F2:2D:58"}}},"request":{"raw":"GET /images/source/slide16.jpg HTTP/1.1\r\nHost: makeup-fx-shop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://makeup-fx-shop.com/\r\nCookie: CCS_BA3DC426B2=f759ae967f445f349abeff8ad444f7bb\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sun, 11 Jan 2026 14:58:16 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 13 Nov 2019 10:39:39 GMT\r\naccept-ranges: bytes\r\ncontent-length: 70849\r\ndate: Sun, 04 Jan 2026 14:58:16 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN,SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":70849,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1000x500, components 3","md5":"d28aa13d686814f6933a26f8d4959f78","sha1":"1fd22724fac078cafe5b075738cfd2e94531bd17","sha256":"19888a9375e3e2609f6d132379762cffe251cb7a7ad71a2c8c94890fbf2cd867","sha512":"e205cfed793bab4afd2bbc5a9e706c49e3ac29b56dafdd70d052779f3569ea6e9a29f267f500a64ef316452ea38bfbc87256a67dfcee52ef4c0dd3e14db922e9","ssdeep":"1536:ROkF4I6TRzk7zqm2JHStnGXTgwv8KpIQlmWs/bL5/ejtASG:LF4Tz1HSBwv8KpIQlrsx/ctASG","tlshash":"3a63f10b181e7081e8a757bdf075a2014ab97a38fecbf5204da9dccabd27f116f045a1","first_seen":"2026-01-04T14:58:49.803959Z","last_seen":"2026-01-04T14:58:49.803959Z","times_seen":1,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-04","alert":"Phishing Block","trigger":"makeup-fx-shop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"makeup-fx-shop.com/skins/fx_foundation/js/3.cubecart.validate.js","fqdn":"makeup-fx-shop.com","domain":"makeup-fx-shop.com","tld":"com"},"ip":{"addr":"67.209.117.37","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://makeup-fx-shop.com/","date":"2026-01-04T14:58:16.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.makeup-fx-shop.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Nov 2025 10:45:48 GMT","end":"Thu, 12 Feb 2026 10:45:47 GMT"},"fingerprint":{"sha1":"69:F1:24:86:AF:5B:08:2D:39:BB:60:E0:EF:00:17:7F:8B:E9:21:6F","sha256":"23:40:FA:84:12:AB:C9:A3:7F:2A:99:27:82:32:1A:18:5B:A9:56:05:AC:80:3F:30:B2:FE:E1:E1:F7:F2:2D:58"}}},"request":{"raw":"GET /skins/fx_foundation/js/3.cubecart.validate.js HTTP/1.1\r\nHost: makeup-fx-shop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://makeup-fx-shop.com/\r\nCookie: CCS_BA3DC426B2=f759ae967f445f349abeff8ad444f7bb\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sun, 11 Jan 2026 14:58:16 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Sat, 14 Sep 2019 12:17:32 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1705\r\ndate: Sun, 04 Jan 2026 14:58:16 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN,SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":17009,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"535f9702240c49513aa6793f9200907a","sha1":"e9edfdd3c3196fef0d66b11778f324dcb1fbfc44","sha256":"21161a30d2e5f00c0379a5813d8e206ef3bf21a45397a1643eeec30631695c49","sha512":"43231ef627b375658f1d110380fb8d2df709aabfb88e634ce88e37a0ce1a8c8ca1a028c4ef232eb6d507419725c9c05c90316587e704f8e35e5b757249aed166","ssdeep":"192:ZN6ytkU3CVyi+mU3qwCVytRVxc3Cw+VyB3ww+VyZ+yafU6SQ+crm+2NhDI+yav8E:/WUQqqEI","tlshash":"e6724a089bfb26661937f07c58afd142a571c06b1d1a6e30b92c11f82fcaf5875f93a0","first_seen":"2026-01-04T14:58:49.805888Z","last_seen":"2026-01-04T14:58:49.805888Z","times_seen":1,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-04","alert":"Phishing Block","trigger":"makeup-fx-shop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.Qrtd5lGlzn4.L.F4.O/am=AAQD/d=0/rs=AN8SPfo9mDPo5pOm0HC4yPcwcdDdHSiNXw/m=el_main_css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://makeup-fx-shop.com/","date":"2026-01-04T14:58:16.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /_/translate_http/_/ss/k=translate_http.tr.Qrtd5lGlzn4.L.F4.O/am=AAQD/d=0/rs=AN8SPfo9mDPo5pOm0HC4yPcwcdDdHSiNXw/m=el_main_css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://makeup-fx-shop.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 3969\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 03 Jan 2026 11:04:00 GMT\r\nexpires: Sun, 03 Jan 2027 11:04:00 GMT\r\ncache-control: public, max-age=31536000\r\nage: 100457\r\nlast-modified: Wed, 15 Oct 2025 01:09:54 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20298,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (20298), with no line terminators","md5":"183cb263396f0b39789db1ae3f1e1b20","sha1":"502fcf18fa8d865213e282824ab2dfaadb9b8beb","sha256":"6a91c12a6fd1664f4d594040374fda61fe5b02fd3aee5f0c877ccbfc49488ec5","sha512":"ef280b60fa9f4bcb446d952f59a9b89442b6da6737bddc20a8fb38fcf0b4083170c09c008d7d221cf205084c8342da1f995bdd99ce907d70e8e14fc62d827acf","ssdeep":"192:nvqx/EhNINclXsfg0S0Q8CqA3ukLzSJFzvQVMZnUIfIxIRhpTpeuHjPtcmx4v78l:gM78Sr3fWJFzouRUqWQhpTpdHjPtc5G","tlshash":"bf92972047aed01967efa82364d36dff71d444db90523eeaaf5a7352cd821f231ea214","first_seen":"2025-06-11T00:07:11.687997Z","last_seen":"2026-07-27T10:36:14.980644Z","times_seen":37906,"resource_available":false,"data":null}},"time_used":618,"timings":{"blocked":298,"dns":1,"connect":21,"send":0,"wait":9,"receive":1,"ssl":274},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/element/log?format=json\u0026hasfast=true\u0026authuser=0","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://makeup-fx-shop.com/","date":"2026-01-04T14:58:27.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"43:D3:3F:93:6C:4F:F7:67:58:9D:D5:48:20:4C:74:A2:69:DB:13:9F","sha256":"8C:DB:D2:85:E1:AB:12:7B:1D:5A:65:A7:EC:22:67:6F:B3:A6:65:01:28:29:FA:D2:3B:01:8D:10:7E:4D:09:52"}}},"request":{"raw":"OPTIONS /element/log?format=json\u0026hasfast=true\u0026authuser=0 HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: x-goog-authuser\r\nReferer: https://makeup-fx-shop.com/\r\nOrigin: https://makeup-fx-shop.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: https://makeup-fx-shop.com\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser\r\ncontent-type: text/plain; charset=UTF-8\r\ndate: Sun, 04 Jan 2026 14:58:27 GMT\r\nserver: Playlog\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T11:49:18.179709Z","times_seen":17741993,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":72,"dns":1,"connect":0,"send":0,"wait":45,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/element/log?format=json\u0026hasfast=true\u0026authuser=0","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://makeup-fx-shop.com/","date":"2026-01-04T14:58:27.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"43:D3:3F:93:6C:4F:F7:67:58:9D:D5:48:20:4C:74:A2:69:DB:13:9F","sha256":"8C:DB:D2:85:E1:AB:12:7B:1D:5A:65:A7:EC:22:67:6F:B3:A6:65:01:28:29:FA:D2:3B:01:8D:10:7E:4D:09:52"}}},"request":{"raw":"POST /element/log?format=json\u0026hasfast=true\u0026authuser=0 HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://makeup-fx-shop.com/\r\nX-Goog-AuthUser: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1182\r\nOrigin: https://makeup-fx-shop.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1182,"data":"[[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,\"en-GB\",null,\"TE_20251215\",null,null,[4,0]]],1871,[[\"1767538697556\",null,null,null,null,null,null,\"[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,\\\"no\\\",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,[1,\\\"te\\\",\\\"A42CB5EC-8ECD-433D-B2E6-97D50632CE7F\\\",[\\\"https://makeup-fx-shop.com\\\",null,[\\\"\\\",[],[],null,null,[\\\"navigation\\\",\\\"h2\\\",[],[],[],[null,31000000],[null,33000000],[null,41000000],[null,42000000],[null,86000000],[null,63000000],null,[null,172000000],[null,173000000],15570,14786,62827]],[\\\"translate:page_load_to_initialized\\\",[null,173000000],[1,772000000],null,[]]]]]\",null,null,1,null,null,null,0,null,null,null,null,null,1]],\"1767538707557\"]"}},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: https://makeup-fx-shop.com\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: X-Playlog-Web\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-encoding: gzip\r\ndate: Sun, 04 Jan 2026 14:58:27 GMT\r\nserver: Playlog\r\ncontent-length: 131\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":131,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"JSON text data","md5":"ca0b7e866005f6774d284b9f438ebfd2","sha1":"53644f5ee3640189bdb223473ba6a2d46606c556","sha256":"502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358","sha512":"939c4526c623db033ad40bfdc6c8848a1dcd0ca797f17fbbd89fbec1b49dededc16e89084b3759e62fa0ffc8fe896980b10a1ff8daee22736a70b08f1ee13e2f","ssdeep":"","tlshash":"58c08c50330469e1080e82c8c0026858228c903b46708cf10bbd68125d3234a1004854","first_seen":"2023-04-05T03:14:56Z","last_seen":"2026-08-06T11:47:37.138872Z","times_seen":585154,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"makeup-fx-shop.com/skins/fx_foundation/css/cubecart.helpers.css","fqdn":"makeup-fx-shop.com","domain":"makeup-fx-shop.com","tld":"com"},"ip":{"addr":"67.209.117.37","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://makeup-fx-shop.com/","date":"2026-01-04T14:58:16.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.makeup-fx-shop.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Nov 2025 10:45:48 GMT","end":"Thu, 12 Feb 2026 10:45:47 GMT"},"fingerprint":{"sha1":"69:F1:24:86:AF:5B:08:2D:39:BB:60:E0:EF:00:17:7F:8B:E9:21:6F","sha256":"23:40:FA:84:12:AB:C9:A3:7F:2A:99:27:82:32:1A:18:5B:A9:56:05:AC:80:3F:30:B2:FE:E1:E1:F7:F2:2D:58"}}},"request":{"raw":"GET /skins/fx_foundation/css/cubecart.helpers.css HTTP/1.1\r\nHost: makeup-fx-shop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://makeup-fx-shop.com/\r\nCookie: CCS_BA3DC426B2=f759ae967f445f349abeff8ad444f7bb\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sun, 11 Jan 2026 14:58:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 14 Sep 2019 12:17:32 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 334\r\ndate: Sun, 04 Jan 2026 14:58:16 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN,SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2264,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"8ce58042ce2e99e5038c2267d106796e","sha1":"52c5d004483b0308940b6ab9bf2fedf81ec3eb9d","sha256":"c45babb3a2b33779c99ecc8ec865903a8a867d0df7ca8c0a6924694b1630b07e","sha512":"7b822da02b260a3c335d8ccd8dfd500a7cd23e49dbb4a8585f74e7727cdfd868c3e3ecd88a2868c4a6c2af5dba9aaa8ac4ea9723660acb1b081c1c68756ebe78","ssdeep":"","tlshash":"8a417584ebf12e04891e55d1d897f09af66d28c06a8f58dfacb065f9f800cf954f1e16","first_seen":"2026-01-04T14:58:49.808746Z","last_seen":"2026-01-04T14:58:49.808746Z","times_seen":1,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-04","alert":"Phishing Block","trigger":"makeup-fx-shop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"makeup-fx-shop.com/images/source/slide14.jpg","fqdn":"makeup-fx-shop.com","domain":"makeup-fx-shop.com","tld":"com"},"ip":{"addr":"67.209.117.37","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://makeup-fx-shop.com/","date":"2026-01-04T14:58:16.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.makeup-fx-shop.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Nov 2025 10:45:48 GMT","end":"Thu, 12 Feb 2026 10:45:47 GMT"},"fingerprint":{"sha1":"69:F1:24:86:AF:5B:08:2D:39:BB:60:E0:EF:00:17:7F:8B:E9:21:6F","sha256":"23:40:FA:84:12:AB:C9:A3:7F:2A:99:27:82:32:1A:18:5B:A9:56:05:AC:80:3F:30:B2:FE:E1:E1:F7:F2:2D:58"}}},"request":{"raw":"GET /images/source/slide14.jpg HTTP/1.1\r\nHost: makeup-fx-shop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://makeup-fx-shop.com/\r\nCookie: CCS_BA3DC426B2=f759ae967f445f349abeff8ad444f7bb\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sun, 11 Jan 2026 14:58:16 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 13 Nov 2019 10:07:25 GMT\r\naccept-ranges: bytes\r\ncontent-length: 85345\r\ndate: Sun, 04 Jan 2026 14:58:16 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN,SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":85345,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1000x500, components 3","md5":"d3de8ac38b34e3b18ab58e2c04f8aa59","sha1":"9fc190ddb6b9eaf1d6db7e3915f20735b4dbb8fa","sha256":"fb074e1c56ade72b6234de5d2924d4d816e1a94cd9693c731680c2424e5a614c","sha512":"a8968d43247e782c605086da188a651e685feccf6cc90a8e55600d01cf405627eacd75025e3874629941ec599abf88ccfb4b5d93f6651c13e6ab2ff06dc380eb","ssdeep":"1536:RoZCklVrm+tN2s+tYUO217WOq5pYS3SnaXzD6gLhg5rc5BaT46wO:ICklVL6g0S3YS3nXzjLh6aMT9B","tlshash":"f38312932f5c745136a83405fc14bdbfbd8a822d4e5d6e0d9816a9e6fd8f5190c07837","first_seen":"2026-01-04T14:58:49.810124Z","last_seen":"2026-01-04T14:58:49.810124Z","times_seen":1,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-04","alert":"Phishing Block","trigger":"makeup-fx-shop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/7gg7H51Q-naNfhmCP3_R47ho/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://makeup-fx-shop.com/","date":"2026-01-04T14:58:17.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /recaptcha/releases/7gg7H51Q-naNfhmCP3_R47ho/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://makeup-fx-shop.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://makeup-fx-shop.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 362552\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 04 Jan 2026 05:43:51 GMT\r\nexpires: Mon, 04 Jan 2027 05:43:51 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 08 Dec 2025 05:00:52 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 33266\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":849529,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (553)","md5":"ca956219876073e2f13e8fd63f0b9d26","sha1":"230a172e1fcf2036687131567200dee5fd200a09","sha256":"392c00d030e58635abc9339f903f23a2ebf2cc0ac6371363105549689dfe0206","sha512":"4bbbd3cd9f929185245ca260e7a2521763d3d90b47bbb1d1205819b40b84918e552d482ad8db91c9258e2504891a91efa190041d210c5290c63f38014adbf53c","ssdeep":"6144:QmhF4MqL/nL5k0wmjxRqyFF83/p50YFqrnMI74ggRLXal17bRc0wMwVmbIyWHVEI:zlqT1qyOEnMKabwBRIm0Epzax4XssBQ","tlshash":"040528d8b15278a2a332f4f14467241da77f966ed4084d1df29899f03fb4409a0bbeb7","first_seen":"2025-12-11T19:34:34.525691Z","last_seen":"2026-07-29T13:01:08.040645Z","times_seen":49454,"resource_available":true,"data":null}},"time_used":280,"timings":{"blocked":65,"dns":31,"connect":21,"send":0,"wait":25,"receive":93,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"makeup-fx-shop.com/skins/fx_foundation/css/jquery.chosen.min.css","fqdn":"makeup-fx-shop.com","domain":"makeup-fx-shop.com","tld":"com"},"ip":{"addr":"67.209.117.37","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://makeup-fx-shop.com/","date":"2026-01-04T14:58:16.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.makeup-fx-shop.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Nov 2025 10:45:48 GMT","end":"Thu, 12 Feb 2026 10:45:47 GMT"},"fingerprint":{"sha1":"69:F1:24:86:AF:5B:08:2D:39:BB:60:E0:EF:00:17:7F:8B:E9:21:6F","sha256":"23:40:FA:84:12:AB:C9:A3:7F:2A:99:27:82:32:1A:18:5B:A9:56:05:AC:80:3F:30:B2:FE:E1:E1:F7:F2:2D:58"}}},"request":{"raw":"GET /skins/fx_foundation/css/jquery.chosen.min.css HTTP/1.1\r\nHost: makeup-fx-shop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://makeup-fx-shop.com/\r\nCookie: CCS_BA3DC426B2=f759ae967f445f349abeff8ad444f7bb\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sun, 11 Jan 2026 14:58:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 14 Sep 2019 12:17:32 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1969\r\ndate: Sun, 04 Jan 2026 14:58:16 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN,SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11042,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (10918), with CRLF line terminators","md5":"6c4150ddef41d6d900c8131983a4972d","sha1":"2f1212ff49325642d18ca757308d43b36dc6a36f","sha256":"ab08a1b6f153b2062ec915378f6e8acbcb857aa41d5d1f625484317ebf6f9599","sha512":"f07dc0d34acff584ab160da3e04dec7ae3b7851d726defbe790a30289c1ac47942ab6e21ffdcd8516dd7baf14f4df6cb0cc3c0100ee6dc0846500a54af5fc1ef","ssdeep":"192:Lt12LrAfDDLnbAUpNDpEXjy6LedBaEMuawTw03:h1kGDbz5uEbx","tlshash":"c532ce6aebe12a2db4f385fca45121cd6730c4e2d6090fac7e6b75e4d6c58d20053e5d","first_seen":"2023-06-17T07:49:57Z","last_seen":"2026-08-04T10:31:55.981258Z","times_seen":68,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-04","alert":"Phishing Block","trigger":"makeup-fx-shop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"makeup-fx-shop.com/modules/plugins/file_upload/js/file_upload.js","fqdn":"makeup-fx-shop.com","domain":"makeup-fx-shop.com","tld":"com"},"ip":{"addr":"67.209.117.37","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://makeup-fx-shop.com/","date":"2026-01-04T14:58:16.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.makeup-fx-shop.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Nov 2025 10:45:48 GMT","end":"Thu, 12 Feb 2026 10:45:47 GMT"},"fingerprint":{"sha1":"69:F1:24:86:AF:5B:08:2D:39:BB:60:E0:EF:00:17:7F:8B:E9:21:6F","sha256":"23:40:FA:84:12:AB:C9:A3:7F:2A:99:27:82:32:1A:18:5B:A9:56:05:AC:80:3F:30:B2:FE:E1:E1:F7:F2:2D:58"}}},"request":{"raw":"GET /modules/plugins/file_upload/js/file_upload.js HTTP/1.1\r\nHost: makeup-fx-shop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://makeup-fx-shop.com/\r\nCookie: CCS_BA3DC426B2=f759ae967f445f349abeff8ad444f7bb\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sun, 11 Jan 2026 14:58:16 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 29 Dec 2025 13:37:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1256\r\ndate: Sun, 04 Jan 2026 14:58:16 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN,SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4273,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"dd62571f229b2f7d18db473331d17910","sha1":"a8ed64858f8d2dd26488d4def629fa07e1f22a81","sha256":"bc1c2943f84c737c4750a26e30d0556f092d026c8689c4ccac40a9bd8f8436b2","sha512":"095a4f4c8a8134ab193dcb8cf8141ebd96f9b770a792bc6c783d99e3cf1bac0941cde6c76107d7fb56e496e63337f374c68c67275c6343b3ee1bef92199249b3","ssdeep":"96:JE4VYnRnz2Zmxz/d3zSKOJlfz0/+N1lNU9iBT:JvAz8Jts+N1iw","tlshash":"f6912e813dad1abd019b1196593cac11ce3cc6b7035850e4b179a9a9ddb471063c7bff","first_seen":"2026-01-04T14:58:49.813118Z","last_seen":"2026-01-04T14:58:49.813118Z","times_seen":1,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-04","alert":"Phishing Block","trigger":"makeup-fx-shop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"makeup-fx-shop.com/skins/fx_foundation/css/normalize.css","fqdn":"makeup-fx-shop.com","domain":"makeup-fx-shop.com","tld":"com"},"ip":{"addr":"67.209.117.37","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://makeup-fx-shop.com/","date":"2026-01-04T14:58:16.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.makeup-fx-shop.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Nov 2025 10:45:48 GMT","end":"Thu, 12 Feb 2026 10:45:47 GMT"},"fingerprint":{"sha1":"69:F1:24:86:AF:5B:08:2D:39:BB:60:E0:EF:00:17:7F:8B:E9:21:6F","sha256":"23:40:FA:84:12:AB:C9:A3:7F:2A:99:27:82:32:1A:18:5B:A9:56:05:AC:80:3F:30:B2:FE:E1:E1:F7:F2:2D:58"}}},"request":{"raw":"GET /skins/fx_foundation/css/normalize.css HTTP/1.1\r\nHost: makeup-fx-shop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://makeup-fx-shop.com/\r\nCookie: CCS_BA3DC426B2=f759ae967f445f349abeff8ad444f7bb\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sun, 11 Jan 2026 14:58:15 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 14 Sep 2019 12:17:32 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2352\r\ndate: Sun, 04 Jan 2026 14:58:15 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN,SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7708,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"1e9c0f3b13da66012ea079bc1509fef2","sha1":"e58275a588bb631a37a2988145eea231ed23176b","sha256":"69fcf7682b771176634dc54deb0c412cf9ec40df931d56a0480ee51b47ed1598","sha512":"1a5362f940b6b3c1739287e3c50c6a9d8f2cd86d6df8d0ee225e52ff68cfbefafeac7fa5415f087e22359bb9257e935b3750e260dd6d5b1ad433c79032a85490","ssdeep":"96:M7WcvPbk5KgmjDPh+pz7iRenTgnln3o5MeQCsXINE45u4TEd7cR9:MPHbfjD5eLun3oeeQCsXIB5uj7Q","tlshash":"0ef1949a23606b0193b94d7577e7c34533080227823c78eeb4e641ec4e58b46d3bafd9","first_seen":"2023-04-09T15:38:40Z","last_seen":"2026-08-05T09:13:25.924536Z","times_seen":1912,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-04","alert":"Phishing Block","trigger":"makeup-fx-shop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"makeup-fx-shop.com/skins/fx_foundation/css/jquery.bxslider.css","fqdn":"makeup-fx-shop.com","domain":"makeup-fx-shop.com","tld":"com"},"ip":{"addr":"67.209.117.37","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://makeup-fx-shop.com/","date":"2026-01-04T14:58:16.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.makeup-fx-shop.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Nov 2025 10:45:48 GMT","end":"Thu, 12 Feb 2026 10:45:47 GMT"},"fingerprint":{"sha1":"69:F1:24:86:AF:5B:08:2D:39:BB:60:E0:EF:00:17:7F:8B:E9:21:6F","sha256":"23:40:FA:84:12:AB:C9:A3:7F:2A:99:27:82:32:1A:18:5B:A9:56:05:AC:80:3F:30:B2:FE:E1:E1:F7:F2:2D:58"}}},"request":{"raw":"GET /skins/fx_foundation/css/jquery.bxslider.css HTTP/1.1\r\nHost: makeup-fx-shop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://makeup-fx-shop.com/\r\nCookie: CCS_BA3DC426B2=f759ae967f445f349abeff8ad444f7bb\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sun, 11 Jan 2026 14:58:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 14 Sep 2019 12:17:32 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1160\r\ndate: Sun, 04 Jan 2026 14:58:16 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN,SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4255,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"ed2dace6c7f197ac12841c6439702469","sha1":"47405252e22de4c64ef478daa8c93905f21178ba","sha256":"ee568e3d03cb3254613e56272416993678138970dae0080cc6299e1a33551da4","sha512":"f409d5b8f117d4a8bb11c1e9706a0cd0121aa353c23d55c1ccb9eb9923d69798d50c7fd775c260d6daf57ee3aede1e12db96f295d4993efec9467660c4723480","ssdeep":"96:Vf2Q/1vNk7EPyc9/F6FemhMh0q3lWIIreUYYnN/:V2Q/l5/F6FeaMa/","tlshash":"3e91a9d117b26a6a691ed06c3d45c39d967c8013af0fd8bdeae1a4bc9fcdbc14223640","first_seen":"2026-01-04T14:58:49.815317Z","last_seen":"2026-01-04T14:58:49.815317Z","times_seen":1,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-04","alert":"Phishing Block","trigger":"makeup-fx-shop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"makeup-fx-shop.com/images/source/slide20.jpg","fqdn":"makeup-fx-shop.com","domain":"makeup-fx-shop.com","tld":"com"},"ip":{"addr":"67.209.117.37","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://makeup-fx-shop.com/","date":"2026-01-04T14:58:16.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.makeup-fx-shop.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Nov 2025 10:45:48 GMT","end":"Thu, 12 Feb 2026 10:45:47 GMT"},"fingerprint":{"sha1":"69:F1:24:86:AF:5B:08:2D:39:BB:60:E0:EF:00:17:7F:8B:E9:21:6F","sha256":"23:40:FA:84:12:AB:C9:A3:7F:2A:99:27:82:32:1A:18:5B:A9:56:05:AC:80:3F:30:B2:FE:E1:E1:F7:F2:2D:58"}}},"request":{"raw":"GET /images/source/slide20.jpg HTTP/1.1\r\nHost: makeup-fx-shop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://makeup-fx-shop.com/\r\nCookie: CCS_BA3DC426B2=f759ae967f445f349abeff8ad444f7bb\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sun, 11 Jan 2026 14:58:16 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 26 May 2022 13:16:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 929433\r\ndate: Sun, 04 Jan 2026 14:58:16 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN,SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":929433,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, xresolution=74, yresolution=82, resolutionunit=2, datetime=2022:05:26 15:16:11], baseline, precision 8, 1000x500, components 4","md5":"93b13e5caa2292099aae7bbb5a4c222e","sha1":"1fb5033aa8d7ad6a6bf34e28577a6420ce5ea066","sha256":"ce557df903ed2185d418dca03f6a72c1edfc1cc33f6dd540b3395e68a4faa04f","sha512":"f2fc41cfe3620a95ce56ac5ec251ee74b15b65b6f67791e00af2050cd2b56cc5617b5ac3f6227e182aed870df01a59e8f4cef4bddc29f62edbc44ea547126d9a","ssdeep":"12288:sEBc1RE7PzxnET/ySTy5aSJn2fWw4fz5mL8agm6GwX1Ib9SV3B0zUUaW:styNE7yD5aiT9dh9milIxSVx0zUO","tlshash":"4515120a61d388d1cb95937114e6df3f44e9dc45aea2e61172fe3d5c33fb9806a83229","first_seen":"2026-01-04T14:58:49.81697Z","last_seen":"2026-01-04T14:58:49.81697Z","times_seen":1,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":213,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-04","alert":"Phishing Block","trigger":"makeup-fx-shop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.Qrtd5lGlzn4.L.F4.O/am=AAQD/d=0/rs=AN8SPfo9mDPo5pOm0HC4yPcwcdDdHSiNXw/m=el_main_css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://makeup-fx-shop.com/","date":"2026-01-04T14:58:17.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /_/translate_http/_/ss/k=translate_http.tr.Qrtd5lGlzn4.L.F4.O/am=AAQD/d=0/rs=AN8SPfo9mDPo5pOm0HC4yPcwcdDdHSiNXw/m=el_main_css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://makeup-fx-shop.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 3969\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 03 Jan 2026 11:04:00 GMT\r\nexpires: Sun, 03 Jan 2027 11:04:00 GMT\r\ncache-control: public, max-age=31536000\r\nage: 100457\r\nlast-modified: Wed, 15 Oct 2025 01:09:54 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20298,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (20298), with no line terminators","md5":"183cb263396f0b39789db1ae3f1e1b20","sha1":"502fcf18fa8d865213e282824ab2dfaadb9b8beb","sha256":"6a91c12a6fd1664f4d594040374fda61fe5b02fd3aee5f0c877ccbfc49488ec5","sha512":"ef280b60fa9f4bcb446d952f59a9b89442b6da6737bddc20a8fb38fcf0b4083170c09c008d7d221cf205084c8342da1f995bdd99ce907d70e8e14fc62d827acf","ssdeep":"192:nvqx/EhNINclXsfg0S0Q8CqA3ukLzSJFzvQVMZnUIfIxIRhpTpeuHjPtcmx4v78l:gM78Sr3fWJFzouRUqWQhpTpdHjPtc5G","tlshash":"bf92972047aed01967efa82364d36dff71d444db90523eeaaf5a7352cd821f231ea214","first_seen":"2025-06-11T00:07:11.687997Z","last_seen":"2026-07-27T10:36:14.980644Z","times_seen":37906,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"makeup-fx-shop.com/images/cache/wigfoundation/resize_2024-01-26_10.04.37.200.jpg","fqdn":"makeup-fx-shop.com","domain":"makeup-fx-shop.com","tld":"com"},"ip":{"addr":"67.209.117.37","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://makeup-fx-shop.com/","date":"2026-01-04T14:58:16.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.makeup-fx-shop.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Nov 2025 10:45:48 GMT","end":"Thu, 12 Feb 2026 10:45:47 GMT"},"fingerprint":{"sha1":"69:F1:24:86:AF:5B:08:2D:39:BB:60:E0:EF:00:17:7F:8B:E9:21:6F","sha256":"23:40:FA:84:12:AB:C9:A3:7F:2A:99:27:82:32:1A:18:5B:A9:56:05:AC:80:3F:30:B2:FE:E1:E1:F7:F2:2D:58"}}},"request":{"raw":"GET /images/cache/wigfoundation/resize_2024-01-26_10.04.37.200.jpg HTTP/1.1\r\nHost: makeup-fx-shop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://makeup-fx-shop.com/\r\nCookie: CCS_BA3DC426B2=f759ae967f445f349abeff8ad444f7bb\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sun, 11 Jan 2026 14:58:16 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 26 Jan 2024 13:44:27 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2956\r\ndate: Sun, 04 Jan 2026 14:58:16 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN,SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2956,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80\", progressive, precision 8, 150x200, components 3","md5":"e3bfc4a839ddb6c721d76e18285728c0","sha1":"c71906155312a8c2a1414ff727726d339620ac15","sha256":"ff159b24aed3a9077302f8bb13dd5a0d9705619ede13606b6cdc24e264290504","sha512":"2fc4b7e2fc3c96609fdbc8528eefaf4e687d3a4e7b55be23fb8d3d5b65b13c9e8b73619721bd15f45544a05ac2865c4ea0b753d7fcbe97bf5fa6aaf5d24b4e6f","ssdeep":"","tlshash":"46512a7c3fac8527c713d73563ed1220bf0c5daa952a298f3abc0c44b175295e8a248a","first_seen":"2026-01-04T14:58:49.818935Z","last_seen":"2026-01-04T14:58:49.818935Z","times_seen":1,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-04","alert":"Phishing Block","trigger":"makeup-fx-shop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"makeup-fx-shop.com/images/cache/hairwax/white.200.jpg","fqdn":"makeup-fx-shop.com","domain":"makeup-fx-shop.com","tld":"com"},"ip":{"addr":"67.209.117.37","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://makeup-fx-shop.com/","date":"2026-01-04T14:58:16.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.makeup-fx-shop.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Nov 2025 10:45:48 GMT","end":"Thu, 12 Feb 2026 10:45:47 GMT"},"fingerprint":{"sha1":"69:F1:24:86:AF:5B:08:2D:39:BB:60:E0:EF:00:17:7F:8B:E9:21:6F","sha256":"23:40:FA:84:12:AB:C9:A3:7F:2A:99:27:82:32:1A:18:5B:A9:56:05:AC:80:3F:30:B2:FE:E1:E1:F7:F2:2D:58"}}},"request":{"raw":"GET /images/cache/hairwax/white.200.jpg HTTP/1.1\r\nHost: makeup-fx-shop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://makeup-fx-shop.com/\r\nCookie: CCS_BA3DC426B2=f759ae967f445f349abeff8ad444f7bb\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sun, 11 Jan 2026 14:58:16 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 25 Jan 2024 20:50:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5589\r\ndate: Sun, 04 Jan 2026 14:58:16 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN,SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5589,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80\", progressive, precision 8, 200x161, components 3","md5":"8ec823ce45c1eb2ee71638d912dea14d","sha1":"34caf7e51c4cf80e1a76cceb1d4bc387e1762065","sha256":"c52c1a25ec70fb5387271416c93cf225dcfe41ba19d392ed47e0bd6616e1ba36","sha512":"cdbfb75ad38600a7f6ebf95ae3e833600dc91baadd2e5247763a5dc8eb05767b61bdf59827a10e41d5d5868524d99911fea040de52c90d3e42b034f69b6bb3a2","ssdeep":"96:/00+P7YeiW4t+DlH09e0krfkKzzdsL0QaZ6ZjA7z3ut7QpOdpTiNXo4:/00+DCBtM8e1fVJOqsAv3uVldpkXo4","tlshash":"f5b16d2735909b5af141dcb1c7d02886771a6e190714efbf6bec76114b5b7aaea40330","first_seen":"2026-01-04T14:58:49.820719Z","last_seen":"2026-01-04T14:58:49.820719Z","times_seen":1,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-04","alert":"Phishing Block","trigger":"makeup-fx-shop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://makeup-fx-shop.com/","date":"2026-01-04T14:58:16.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://makeup-fx-shop.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 35156\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 31 Dec 2025 20:59:15 GMT\r\nexpires: Thu, 31 Dec 2026 20:59:15 GMT\r\ncache-control: public, max-age=31536000\r\nage: 323941\r\nlast-modified: Mon, 15 Sep 2025 16:30:01 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35156,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35156, version 1.0","md5":"062c1f2aaf2d4de07ad2a2f21c17ffc0","sha1":"3fd1f07343bd33a53cd374f7f107dbdf9effae03","sha256":"d5bab8e28732fe3d10dcef4f77b9c248605bbb2a87d289a2539251ceafab536a","sha512":"7ab522d8bc41128be5a15f2cb91f851f6dc5e437afbb90e6191bbe63d9b94a35911f04701fb2b291362b2ae0f0cc639dec2d15e53928afc5769590a2937e81cf","ssdeep":"768:is48okTArkNSgZJAf5jkRcaUNt8wrNPCbJktQV+n+NUB/wo8IEH:5hNTtNSgZJMjkRBUMwrNPC9NV+n+o81H","tlshash":"22f2e172c3787192ae0985760d60cec8986bb2098f7658b0143fdd38ee45345a3f6e6c","first_seen":"2025-05-29T19:30:52.507782Z","last_seen":"2026-08-06T09:53:04.233162Z","times_seen":22769,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":136,"dns":0,"connect":0,"send":0,"wait":22,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.Qrtd5lGlzn4.L.F4.O/am=AAQD/d=0/rs=AN8SPfo9mDPo5pOm0HC4yPcwcdDdHSiNXw/m=el_main_css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://makeup-fx-shop.com/","date":"2026-01-04T14:58:17.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /_/translate_http/_/ss/k=translate_http.tr.Qrtd5lGlzn4.L.F4.O/am=AAQD/d=0/rs=AN8SPfo9mDPo5pOm0HC4yPcwcdDdHSiNXw/m=el_main_css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://makeup-fx-shop.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 3969\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 03 Jan 2026 11:04:00 GMT\r\nexpires: Sun, 03 Jan 2027 11:04:00 GMT\r\ncache-control: public, max-age=31536000\r\nage: 100457\r\nlast-modified: Wed, 15 Oct 2025 01:09:54 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20298,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (20298), with no line terminators","md5":"183cb263396f0b39789db1ae3f1e1b20","sha1":"502fcf18fa8d865213e282824ab2dfaadb9b8beb","sha256":"6a91c12a6fd1664f4d594040374fda61fe5b02fd3aee5f0c877ccbfc49488ec5","sha512":"ef280b60fa9f4bcb446d952f59a9b89442b6da6737bddc20a8fb38fcf0b4083170c09c008d7d221cf205084c8342da1f995bdd99ce907d70e8e14fc62d827acf","ssdeep":"192:nvqx/EhNINclXsfg0S0Q8CqA3ukLzSJFzvQVMZnUIfIxIRhpTpeuHjPtcmx4v78l:gM78Sr3fWJFzouRUqWQhpTpdHjPtc5G","tlshash":"bf92972047aed01967efa82364d36dff71d444db90523eeaaf5a7352cd821f231ea214","first_seen":"2025-06-11T00:07:11.687997Z","last_seen":"2026-07-27T10:36:14.980644Z","times_seen":37906,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"makeup-fx-shop.com/skins/fx_foundation/css/cubecart.default.css","fqdn":"makeup-fx-shop.com","domain":"makeup-fx-shop.com","tld":"com"},"ip":{"addr":"67.209.117.37","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://makeup-fx-shop.com/","date":"2026-01-04T14:58:16.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.makeup-fx-shop.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Nov 2025 10:45:48 GMT","end":"Thu, 12 Feb 2026 10:45:47 GMT"},"fingerprint":{"sha1":"69:F1:24:86:AF:5B:08:2D:39:BB:60:E0:EF:00:17:7F:8B:E9:21:6F","sha256":"23:40:FA:84:12:AB:C9:A3:7F:2A:99:27:82:32:1A:18:5B:A9:56:05:AC:80:3F:30:B2:FE:E1:E1:F7:F2:2D:58"}}},"request":{"raw":"GET /skins/fx_foundation/css/cubecart.default.css HTTP/1.1\r\nHost: makeup-fx-shop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://makeup-fx-shop.com/\r\nCookie: CCS_BA3DC426B2=f759ae967f445f349abeff8ad444f7bb\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sun, 11 Jan 2026 14:58:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 14 Sep 2019 12:17:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 52\r\ndate: Sun, 04 Jan 2026 14:58:16 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN,SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":52,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"d7f51e72e3e49c5e48d7fb1d1c2120d2","sha1":"6b05fa93410696af2928f73f154ba1b5bc23297a","sha256":"c47af65099d8e446d97a3595aea2d261c8b711fc09e5b4073b2e2b34d430dd11","sha512":"cbcfeae99a8acababb64e81e9697072db593c78fd9b871db0cea69c79c58923528d34723100a52719738a01a6130981571a19b454a18e04bf92270faa7a61e60","ssdeep":"","tlshash":"e090020167d20042503042309985987012bc706d05960656704342c16a1511a8815a75","first_seen":"2026-01-04T14:58:49.823061Z","last_seen":"2026-01-04T14:58:49.823061Z","times_seen":1,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-04","alert":"Phishing Block","trigger":"makeup-fx-shop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"makeup-fx-shop.com/images/source/slide9.jpg","fqdn":"makeup-fx-shop.com","domain":"makeup-fx-shop.com","tld":"com"},"ip":{"addr":"67.209.117.37","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://makeup-fx-shop.com/","date":"2026-01-04T14:58:16.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.makeup-fx-shop.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Nov 2025 10:45:48 GMT","end":"Thu, 12 Feb 2026 10:45:47 GMT"},"fingerprint":{"sha1":"69:F1:24:86:AF:5B:08:2D:39:BB:60:E0:EF:00:17:7F:8B:E9:21:6F","sha256":"23:40:FA:84:12:AB:C9:A3:7F:2A:99:27:82:32:1A:18:5B:A9:56:05:AC:80:3F:30:B2:FE:E1:E1:F7:F2:2D:58"}}},"request":{"raw":"GET /images/source/slide9.jpg HTTP/1.1\r\nHost: makeup-fx-shop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://makeup-fx-shop.com/\r\nCookie: CCS_BA3DC426B2=f759ae967f445f349abeff8ad444f7bb\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sun, 11 Jan 2026 14:58:16 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 13 Nov 2019 10:07:23 GMT\r\naccept-ranges: bytes\r\ncontent-length: 76407\r\ndate: Sun, 04 Jan 2026 14:58:16 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN,SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":76407,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1000x500, components 3","md5":"f8219654597d86cd1ccdc98ec4142d1b","sha1":"ba5a8f7d4fa1146d6242aec4b4cec9d5bc6211cb","sha256":"56292c507b3e98f04b3da929e53f97a9f7bae6828b3c0cdfe4270f65f2aec2cb","sha512":"f3f865f5303ca711b85a2244a7ee2909ff80b3e16d04574b179a8fb17e00d42e0e3d1e0873fd43204d97b820025196f6780b32ec996a27666bd7de7d35b7c8db","ssdeep":"1536:RJu2fQUeiBFprpVBraiyeEl1OGp33kBNXESIovi7LBdN4lpt6nP:Xu7UrBFp13r/ye2ZpUBbjvi7LcIP","tlshash":"1673021b470831f6f558c652f7025ce30e029da9f4ae48fa1522cec65da19dfab1ac37","first_seen":"2026-01-04T14:58:49.824338Z","last_seen":"2026-01-04T14:58:49.824338Z","times_seen":1,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-04","alert":"Phishing Block","trigger":"makeup-fx-shop.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"makeup-fx-shop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}