{"report_id":"b37d57aa-3c82-4db2-8b7e-1e424b172858","version":0,"status":"done","tags":[],"date":"2026-09-09T19:04:16Z","url":{"schema":"http","addr":"bienfashion.live/","fqdn":"bienfashion.live","domain":"bienfashion.live","tld":"live"},"ip":{"addr":"104.21.46.229","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"bienfashion.live/","fqdn":"bienfashion.live","domain":"bienfashion.live","tld":"live"},"title":"Bien Fashion – eleganckie sukienki, kombinezony i bluzki na wyjątkowe okazje","dom":{"size":985,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (984), with no line terminators","md5":"3bbd03f8aa89580d88e9943a69a2204a","sha1":"842e42fd9847ae525deb8d740d20d0dbe9e1c6e7","sha256":"36b1abe68cce09528bd8afe14dc29c7a81dddf2ecece3a2c7acbbf00b2c0b00d","sha512":"8d4426aa8e94d120d9acd73e3d14dd88a88fa519e52a0ac22d6bf576f6e4e20db435be7bccc9606d6bfd3d8a51a33357cb60165bdaff4bfd586fe8d94a397eb4","ssdeep":"","tlshash":"2a1125729094141ec362d1d8e0e1373da3c2c40cc9529cd27b6d15b3f1c4b3658575f8","dom_hash":"domhashdda2f72fae377190c818cc3070d0de92","first_seen":"2026-08-21T21:11:13.72638Z","last_seen":"2026-09-21T18:39:18.173233Z","times_seen":20,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"bienfashion.live/","fqdn":"bienfashion.live","domain":"bienfashion.live","tld":"live"},"ip":{"addr":"104.21.46.229","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-14T19:04:16Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bienfashion.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-09-06T22:44:31.282543Z","alert_count":0,"request_count":7,"received_data":2971142,"sent_data":3411,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"access.eye-able.com","ip":{"addr":"195.181.166.158","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2019-05-29","domain_rank":3044690,"first_seen":"2024-12-13T07:13:13.943132Z","last_seen":"2026-09-05T20:21:52.927162Z","alert_count":0,"request_count":1,"received_data":883,"sent_data":478,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"translate.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":6317,"first_seen":"2012-05-31T07:21:21Z","last_seen":"2026-09-07T17:39:59.201815Z","alert_count":0,"request_count":6,"received_data":296969,"sent_data":3545,"comment":"","tags":null,"fingerprints":null},{"fqdn":"graph.instagram.com","ip":{"addr":"157.240.200.63","port":443,"asn":32934,"as":"FACEBOOK","country":"Denmark","country_code":"DK"},"domain_registered":"2004-06-04","domain_rank":3195,"first_seen":"2017-01-30T05:00:01Z","last_seen":"2026-09-01T18:14:02.717736Z","alert_count":0,"request_count":1,"received_data":2398,"sent_data":730,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"challenges.cloudflare.com","ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":11393,"first_seen":"2021-10-20T05:02:03Z","last_seen":"2026-09-06T23:42:44.867262Z","alert_count":0,"request_count":2,"received_data":87493,"sent_data":967,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-06T22:43:29.090385Z","alert_count":0,"request_count":5,"received_data":182377,"sent_data":2809,"comment":"","tags":null,"fingerprints":null},{"fqdn":"credit-widget-config.payu.com","ip":{"addr":"3.164.230.116","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2002-07-03","domain_rank":0,"first_seen":"2022-12-07T12:18:09Z","last_seen":"2026-06-25T09:56:50.026782Z","alert_count":0,"request_count":1,"received_data":3145,"sent_data":494,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"translate.google.com","ip":{"addr":"142.250.178.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":609,"first_seen":"2012-05-30T01:30:32Z","last_seen":"2026-09-08T00:40:24.487466Z","alert_count":0,"request_count":2,"received_data":5292,"sent_data":1090,"comment":"","tags":null,"fingerprints":null},{"fqdn":"translate-pa.googleapis.com","ip":{"addr":"172.217.113.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":8472,"first_seen":"2021-11-04T06:37:42Z","last_seen":"2026-09-09T00:17:40.433858Z","alert_count":0,"request_count":1,"received_data":32469,"sent_data":572,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.com","ip":{"addr":"142.251.153.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-09-06T23:00:37.993111Z","alert_count":0,"request_count":2,"received_data":1434,"sent_data":1096,"comment":"","tags":null,"fingerprints":null},{"fqdn":"static.payu.com","ip":{"addr":"108.157.214.87","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2002-07-03","domain_rank":2787939,"first_seen":"2013-01-25T16:18:11Z","last_seen":"2026-09-03T03:06:47.7136Z","alert_count":0,"request_count":2,"received_data":262064,"sent_data":980,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-06T22:43:29.329928Z","alert_count":0,"request_count":1,"received_data":3048,"sent_data":509,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-09-06T23:33:22.473656Z","alert_count":0,"request_count":5,"received_data":68155,"sent_data":3095,"comment":"","tags":null,"fingerprints":null},{"fqdn":"bienfashion.live","ip":{"addr":"172.67.142.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":310,"request_count":62,"received_data":9088205,"sent_data":37477,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PayU Payment","description":"PayU is a provider of financial solutions for ecommerce, facilitating online payments and related transaction services.","website":"https://corporate.payu.com","common_platform_enumeration":"","icon":"PayU.svg","categories":["Payment processors"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"PrestaShop","description":"PrestaShop is a freemium, open-source ecommerce solution, written in the PHP programming language with support for the MySQL database management system.","website":"https://www.prestashop.com","common_platform_enumeration":"cpe:2.3:a:prestashop:prestashop:*:*:*:*:*:*:*:*","icon":"PrestaShop.svg","categories":["Ecommerce","CMS"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bienfashion.live/","fqdn":"bienfashion.live","domain":"bienfashion.live","tld":"live"},"ip":{"addr":"172.67.142.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a8fec1e088fdbb4b1fb9d6af7a038cdb","sha1":"01a1c91ebef4e4807257d12bb457f381c00c30c1","sha256":"b63399d1ce9abd0df8873275d023574bd2cffb79079c226b44199207d647fbc5","sha512":"5244168ffc5fc9f15466f20d12d8d1bbfd4d3626188b24271f34f7cca7334724ba25ea84d730104ef4a27166b0c6e577438937f5ddd7b2ee5f4e3e431fa16c92","ssdeep":"","tlshash":"dde0a31d2c1fb82117b41968e737851934d51202254626a5c7c7c5643d71cc658c6b4c","size":423,"data":"","first_seen":"2026-09-09T19:04:34.989146Z","last_seen":"2026-09-09T19:04:34.989146Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bienfashion.live/","fqdn":"bienfashion.live","domain":"bienfashion.live","tld":"live"},"ip":{"addr":"172.67.142.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"10f428f59d120bf8adbc39b86d547a2f","sha1":"fe92af104d1ca10761ec932fdd2da77f759286d4","sha256":"e0a244f4ace8e695c3aa03697b9dd349f5f1abbae8974d87e879274808305595","sha512":"3bafcd76864c4c246fa0b9727c6f1ced4f54f4b82fd5c8009924f2049e4f713661df77aa52727e4f7da1459713ceea1b0b7467e9ef3905cdc479d0a828cba3cd","ssdeep":"384:D1mxyUdZTo/ApwEN8vrISE3cXwfFWUDjZgTwTK+pYq1s0X37keYuL79+9fNMze5l:apwEN8wcXwfFWUDj26pi27keYgcR","tlshash":"f2d2f8dfea264c6280532142d3f589162219c977fe326fda37e9d0b505d301e22fbd9a","size":29070,"data":"","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-10-14T23:15:50.976378Z","times_seen":4089,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bienfashion.live/themes/warehouse/assets/cache/bottom-c3d9e81086.js","fqdn":"bienfashion.live","domain":"bienfashion.live","tld":"live"},"ip":{"addr":"172.67.142.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"483bf082bd3284f83ea8f7b332f7bdd8","sha1":"fe447a680c74b16357a978550d1c3559424bc877","sha256":"990ffae112803b2c6396791e4108063a3a0c156a0332cc887a182a77cb0d59e2","sha512":"96b4d7b85611369fc8ef9f568ee8241feeca300d475eb608f383874335806ff408fabdf6aa3454856370a8d9b4132a83c3f9818666b6d95b22bdc5814b82434d","ssdeep":"24576:84a76dfrU54EaPQeq/7bGdt5BCowCcOVJkPYHy7kgN:84a76dfrU54EaPhq/7bGdt5SCcOVJkPz","tlshash":"30056d8db260747242e77176907f010b72336d69a40a8468f169d8f92ebcd89237bf7d","size":832271,"data":"","first_seen":"2026-09-09T19:04:34.948949Z","last_seen":"2026-09-09T19:04:34.948949Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d39a8679ed70005ee063ea62886141a2","sha1":"52b556cb7bdbe59b9b1ab9415ff905b561b8399e","sha256":"b33ed8fd08f8cf0138f219167d4bb5817f1b09c1d9ac7431e833899ecfff40f1","sha512":"c65e2fe579412ea8ef38d29185f47dec1f4fb871ec28767c104821f1c3368793c4ff577ed58971d27a9bbac97fee734093766954f7e9d2fc0ff1cb687a0ab977","ssdeep":"96:A1VdZYqhPnjpsx4/eTe8qSMbqaQd6VL2Jyt9LdJoyayCVPVD5wdBf2PfCHiUr3:AXdZYqNjpm4yPqSMbqaQGL2QfdDayCZa","tlshash":"3ca1ca9929fb50210233b1bd1bafa918b63895236208dd61bd8c9264af94437d7f1bc9","size":4693,"data":"","first_seen":"2026-05-25T14:46:35.360433Z","last_seen":"2026-10-15T00:38:46.373379Z","times_seen":121347,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bienfashion.live/","fqdn":"bienfashion.live","domain":"bienfashion.live","tld":"live"},"ip":{"addr":"172.67.142.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ded004ea2fecb5dfa4df995ba1867410","sha1":"a1a82684d350a8183c83c91bb214ccfabbbb6b39","sha256":"7e1cb0185b698144fe3c3cd6e367460838fb9a068989fdb6ae781a6973645c95","sha512":"450cc0bf6c265a1d3cb99b1ab2944e703889ad421ffc29e3462b3d0c1c359c424b97da7094aaaffbef6d89c1455e10cfd58377bd568dd777f59dcdf657bba3b5","ssdeep":"384:ZSzPnkV5CWrq1ePxVAlcCr/Rd1eVOgXEb/g18C+uL7+81XB1q0dlOqtUoU9glSsX:UkV1wqkteVINuL7+X0y19ESsg7G","tlshash":"cdc2e717f508a8a59459f9d66c9f124033b1bb7ee0048f6069f3f6b81f3cd42225aadd","size":26079,"data":"","first_seen":"2023-03-07T01:41:15Z","last_seen":"2026-10-14T23:15:50.980792Z","times_seen":812,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.I_JCvueZoMU.O/am=BECAAQ/d=1/ed=1/rs=AN8SPfrc5w8aV-LwlIUYYDjgr6xQBvQ_ZA/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"85329d4870159bc7e900edf7e2b7c05c","sha1":"234920705ac8dcf2981953b5f13b44728837a877","sha256":"a9e5563c1f8d367250f59aa144d3ca1deb30eaec35bfdde02c0f0321994b5b40","sha512":"42d3df085c47590b56bf251278681848519bc8dcb42885e7e59e091d9598b408841337a147505fba2ca0cae2056f60cf85990242491fd2cd3a35675100db306c","ssdeep":"3072:UWIky5KjDvQySb00K2jt1YZNSFZruPl7uthwSJKDOodN/W:RDvFrY1ZuDb/W","tlshash":"4054d7dcb29670a79363f4a5513f440ab13b69a5f8484dacb28cd8e26df4909017bf7c","size":290068,"data":"","first_seen":"2026-09-08T20:00:42.674404Z","last_seen":"2026-09-10T19:23:37.045301Z","times_seen":162,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-YWDFSSDBKR","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"256023a701bec7cd0f1d3d3ebbc04482","sha1":"4771ae8389f1d0b8b16ec6df7f96d24fd4214851","sha256":"a78ceed6c5a3c315e48dcca42a170b0e61b6783269f41fa891550116a929b407","sha512":"a2c651c341bbd7fef938239e0d86148aa5b61e0ff34f35c33cb20505225ad79f28cc5c828e4e1425130f35e71e30f4efffe218e19bc7b23b58cedc5291af3271","ssdeep":"6144:w73jawM+AJpPkXV7y5/2gpYhepcYR/ZETH3Uzta7609B+1lGpcEvYfshsCZ:twRAJpPk58za+Y6w4lGWNfs3","tlshash":"d8c408de73c674229396f578903f01cba97b28a2b49cc89af189dce02d3454a5167f7c","size":579559,"data":"","first_seen":"2026-09-09T19:04:34.889568Z","last_seen":"2026-09-09T19:04:34.889568Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bienfashion.live/","fqdn":"bienfashion.live","domain":"bienfashion.live","tld":"live"},"ip":{"addr":"172.67.142.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"7c3c3ddeb80438dcbb3d081d2d00e152","sha1":"5a4016732ee72ec77b4f6ab17047bcea6d2ea34d","sha256":"321b4f657afbf8ba49518e6ab4cbad07ea967d0b4c68f71c7deed05ed09c1187","sha512":"b252f7dc795284fe8ce404711809130d8e16670a8e49b271f9a24b04a542a0fccb7a8c7238c12b37db35fe73a2fbf1cdb374468574db4e6d39975a17dca547a3","ssdeep":"","tlshash":"de6000f0003000000003c30000330cf300000c0f00ccc30cfc0000c000c00000000c03","size":16,"data":"","first_seen":"2023-04-10T15:57:29Z","last_seen":"2026-10-15T00:35:41.645227Z","times_seen":386131,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-G4K5FCB1L5\u0026cx=c\u0026gtm=4e6941","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"46431b7d17fc3d246829dd79f2043caf","sha1":"9cc056209fb0101302979a992b8dc3d5809fe8e5","sha256":"85e4ab43d4933c7e7dda92c39963df7da783c905bf546363c3a51a628fbc01f7","sha512":"416d72866929826239e914c321ce2cedca13e4720f93f3deba87456b4eb3040dc988fe0e61e0c8e784e6022a527a74868ad81f07b632ea625cd079d30f88387b","ssdeep":"6144:KW3jawM+AJpPkXV7y5/yp2MpcYR/ZETH3UztiO09BpPcExLsIQCZ:CwRAJpPk58iDLwpEiso","tlshash":"daa419cdb3c674229392f574903f018ba67b69a2b84cc899f28adcd42d3465a5137f7c","size":464665,"data":"","first_seen":"2026-09-09T19:04:34.974306Z","last_seen":"2026-09-09T19:04:34.974306Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bienfashion.live/","fqdn":"bienfashion.live","domain":"bienfashion.live","tld":"live"},"ip":{"addr":"172.67.142.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-10-15T00:33:18.654764Z","times_seen":772943,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bienfashion.live/","fqdn":"bienfashion.live","domain":"bienfashion.live","tld":"live"},"ip":{"addr":"172.67.142.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"97693c9e323e737267165329b406c0f1","sha1":"967f619064f8bf7d1ffc7d1f0ceb3d977058a574","sha256":"6bef41bae310e2b5698ddf03e4f1dca51078f27ee6dd7bd4c857a755a5c44b7e","sha512":"4b95226cea05deb28c27393d720be9589fe8e2f414a9b06336b467a159a9ceff8b39e0f8358b57c8075735d89085017061c065683a6af7b2aef9eac9ac1208b2","ssdeep":"192:SuN8q7sZ9sfpCfQcwaxXTZTn1WUCfl8YafSutLZgO:qqIypeQsZWqf9","tlshash":"e6f1728460143caf0252a349966680f953fc294c632be8647cff7165085cacd027feee","size":7607,"data":"","first_seen":"2023-03-07T12:02:18Z","last_seen":"2026-10-14T21:33:10.03329Z","times_seen":568,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bienfashion.live/","fqdn":"bienfashion.live","domain":"bienfashion.live","tld":"live"},"ip":{"addr":"172.67.142.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"05ec8fa18732b68a634f95e7c2bebd2e","sha1":"2204916097137e7afe60b7d8a612e04f86496cbc","sha256":"38da5f0c3fd471c5a28d03d7155aba416ae2562ba4a73a2ca3920b19e4b47a63","sha512":"a25006198d3a72d661363fefcba8b21ee0e4a646d66a44866867101a0b4f06966f8341e988f8b599a992755f85f98ac7fdbea3b15e3d3c6fc59bce2829f6d81c","ssdeep":"384:EhOObjBeYJfz3zX3SWcN12H2DFQ9j6IDumFu7jaWIyUBj3RX2E:EIObR3zXpcN12H2DqZ9iA9QE","tlshash":"6ac2a8a976903cab5473667bc16a40b532728a357307ae6078efa6f0057ccd913e7e4c","size":26103,"data":"","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-10-14T21:34:58.869101Z","times_seen":3257,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bienfashion.live/","fqdn":"bienfashion.live","domain":"bienfashion.live","tld":"live"},"ip":{"addr":"172.67.142.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a78982b40bf915f977f2bcb73e907934","sha1":"540b38654ca018e915d4de20f586f7999d5119f2","sha256":"f46438dc69e006684fd2254a035cd58fa8fc9277206bdf0f8c9a278bbfbc8756","sha512":"c2dab6d5e6cf86353a4e81b5257271500d6ead9bf2fa32328b70ee92ec852571e3990258f9ad4844187734454657f5295575a659e34de12f7ff7f7beae1225e2","ssdeep":"1536:AWS34eAk5Pljh5/dNAOQVja8les4DrC0XKxnA7Zz2hSoqadfjLB3lqo:AWS34M5Pljh5/dNAOQVja8lesdWZz2fZ","tlshash":"f643fcc5ed101cf952ab908ad07d456832247e3ce5078691f56af46e1e48e8232bbf7f","size":55809,"data":"","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-10-14T23:15:50.999875Z","times_seen":3690,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-10801989732\u0026cx=c\u0026gtm=4e6980h2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"34a7d05e0dd282afcd98211fca5285ff","sha1":"7cf16a60e8cd681e19ba479671be92889ecb51f5","sha256":"dd12e38045ff1b1edd43591cab18c4a2c2e98ccd184cd17347d0790d8e5e64b1","sha512":"ffaa302a11d84dbf38eae89e33011fb9ccd94691e1b96ad7a941a5fc705b2d952c16d4d0a2d41f24b3208f046c7163ea1838c9f03eb69ab85d05858b191c687f","ssdeep":"6144:vZ1G6gXPyQSa7itv+7c4x7cAaOLESM3jNx2eYsox8e:+1yw7zg92so3","tlshash":"e2940acc73d6741293a3b574903f018ba27a79a2b84cc894f18adcd42d3469a9277f7d","size":424171,"data":"","first_seen":"2026-09-09T19:04:34.978544Z","last_seen":"2026-09-09T19:04:34.978544Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/translate_a/element.js?cb=googleTranslateElementInit","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"002e0653167c9fdd97490e2e350288e1","sha1":"e72ae9ae11f9705e7b89d82f4408b9e6411787d7","sha256":"9253861b4686266a5c05d4f82c4f967dfc5034f98746d24d6d8249b14b902361","sha512":"61456830d07adb5d143ce6621bfab6efab577d6c669e395d52de53caf9206c86cfdd5de9b3cc1efb3eb76aa2b30c045f366fe4169fecf47061507f54c82f329b","ssdeep":"","tlshash":"5051269698b6d0cac4436c69dfafa27931040037ac25ece17ddcd906ffb051ab54d5e8","size":2990,"data":"","first_seen":"2026-09-09T19:04:34.971935Z","last_seen":"2026-09-09T19:36:03.137511Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/api.js","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"332a9735c5b3da5be808f159db2e2ccf","sha1":"2387d1efbcc561ea833aa24836df1c39a1ea799b","sha256":"9a0bbd1d15f8f4938e4e3fcb6ae3b5aa4c9622f2041336256827797c3bd96af8","sha512":"8e0c44566f10d3a1f270c816ef457a2ad8121f763f46cb98a029426138ef5caa95aba0934d9acd56cd90c928d269d365225c1094792ee9a47d6210b10211c615","ssdeep":"1536:DL3dUa2dOjYjUgAmPgU6aKLHXdAU7GMEBvOeTtWGqc3lL:fEOjYhT6zXdGMEBvOehlR","tlshash":"1a831bc8729a787213dac1b4a07f5353b3297d35584c8850e527d8663a7ce878273fba","size":86603,"data":"","first_seen":"2026-09-02T13:37:56.882331Z","last_seen":"2026-10-03T10:56:07.624344Z","times_seen":29188,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.payu.com/res/v2/widget-mini-installments.js","fqdn":"static.payu.com","domain":"payu.com","tld":"com"},"ip":{"addr":"108.157.214.87","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"40f75d21e5c6a5e1ffe20472592f40f8","sha1":"2cb3422836be2d5ee56b746c3fcb6a09a64f044f","sha256":"04a1ed5625988ca32d9838c6a2c42dcd564328574f56049d4bd16b28e9624884","sha512":"067d71f03fe2a9bde5daf31e8f523d86e02eec62be26477504fa20345de67d37b7523335c7dd81d9393623219009adba3276f57b613839f4297d2c1aff2c3ed4","ssdeep":"3072:z7hUzu6zZj56t2HyTukC+Z/hccWH1PtieJoVlNyk5Utx3YFnte:BP0ZRyTukPZ/W/6ZlNDUtate","tlshash":"8c340bc97992f0b45ff21ae4c43f480af21b6a34640d98e1ebe7c8948469e4f5137b39","size":250169,"data":"","first_seen":"2026-09-09T19:04:34.894834Z","last_seen":"2026-10-12T10:18:27.487269Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-101338987-1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2941befd6b970983d41021bb1ca8ee93","sha1":"5d4142006fc9c864cfa92bdc946f36f9f03bd531","sha256":"b61ace10a205c927e0e70e23379ef2baff0a702d75b68926a8074ceceadc2f1b","sha512":"b86c24c0c33fb465c703570eaa771f627e59db2e8a36a367b68fe9383750296f62c8d1b3169d12b619647d98ea34548acb713be05701bbfca14766abd61f5eb1","ssdeep":"6144:73ja9+jPkYc7yco3wFcYR/ZETH3UztzH9BxedCvZ:60jPkv5TzLxkQ","tlshash":"9b8408ccb3d6742283a3b574503f018bb27a7992b84cc898f286d9d42e3465a5277f7d","size":381034,"data":"","first_seen":"2026-09-09T19:04:34.884426Z","last_seen":"2026-09-09T19:04:34.884426Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bienfashion.live/","fqdn":"bienfashion.live","domain":"bienfashion.live","tld":"live"},"ip":{"addr":"172.67.142.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"261d036ff4d77e01fbca0b39e05b3321","sha1":"17c763757d51ca8dce4c3709acf87e061189d862","sha256":"aa3a395c27bfaf020ed08d80d44b8470d2279339c2864d4b99c1c51520fc78e0","sha512":"062a5ccdff8146a2d224ba34d3a1217d54dd8c927fb4b64b46f224e59d64f214187705eeb99b99e0d206b52f6cc3339d66775bcd81f0ec9ebfa5908d19acf3de","ssdeep":"","tlshash":"4d7142d220166c5e4ca3a39295ef17c663f1ed2835039c1c9772b5802eccd1e28bbb5d","size":3754,"data":"","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-10-14T21:33:09.923052Z","times_seen":873,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bienfashion.live/","fqdn":"bienfashion.live","domain":"bienfashion.live","tld":"live"},"ip":{"addr":"172.67.142.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5af695fc2f9242677472d46c921b407e","sha1":"7ee73735c7b0e0c8b4ebaccac77ab3268a3ef00a","sha256":"dd831ed9e0bf5acd44bcdaa92f5d357f65ba9fb8b839e60a9d0af23dfd0b68f7","sha512":"9d0e277adb83263afdb50024b0332f54e7def1d689c2b92eb6ca9980ab5a816374bbfd64ccee92fc4cbd3d8b1f9f9d1fece469a4725e8b76fdbc923546721a24","ssdeep":"192:OcLK1q1e1XfU9dciEK5FKw0Vm7Wgput9mHJnGN82PbZ7:I1q1e1Xf4+KL6m7WgpAmHUNVPbZ7","tlshash":"fa32d95a6e2028f640f3132cf9ad45d273228572e5068d41f9e6f9b9566ce9c037abcc","size":10931,"data":"","first_seen":"2023-03-07T01:26:05Z","last_seen":"2026-10-14T23:15:51.070106Z","times_seen":1833,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-207992682-1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2cd71495facf5216f21a0aa7269f60a3","sha1":"6c64e2ca0f63fef5e408a5f3a04c28578d077690","sha256":"be6b013a1895f17728f1a78d85e313fc3f633879cd257c8c9d0d88f239a5a584","sha512":"23a89f7d9ed718b3add44724c2259c8ae595fb48bc3736ae3e43c7f7ac505396703c73905fb4b4fba8bdcb9b48ae12374a0d81e4f360b896af2fad01e1cb30b5","ssdeep":"6144:23ja9+jPkYc7yco3wFcYR/ZETH3Uzt+H9BxeF4vZ:B0jPkv5T+LxQa","tlshash":"078408ccb3d6742283a3b574503f018bb27a7992b84cc898f286d9d42e3465a5277f7d","size":377850,"data":"","first_seen":"2026-09-09T19:04:34.943711Z","last_seen":"2026-09-09T19:04:34.943711Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bienfashion.live/","fqdn":"bienfashion.live","domain":"bienfashion.live","tld":"live"},"ip":{"addr":"172.67.142.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1e23424880dfdb9e886fcff2f0aae6ee","sha1":"8acaff02a625c997cbbb7ed8843e7cf610bf2b5b","sha256":"0fc4db12b0d589fd17b3e43c3ba4cdca64183916637624bfe59aad7299284284","sha512":"6f6431f89495db3ec4a9efe7f1fa9a44d62e856b99136368ddeb62dfc332347991c62336066fab1ad1b7612c0c7c3455e0f8c78fa9572567c75440bcce882670","ssdeep":"192:CHe3syiqiihWp2xgyhK1/l+zWJc2VJS/gkBVl1p:uMS/2f7R","tlshash":"9002a646f1016cff44a765aee83702d2b1b1b59c560aa9b4f06bf1a82d3cb5105c77ec","size":8329,"data":"","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-10-14T23:15:50.966905Z","times_seen":1742,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-5Q8B6RD","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a44d3ca9c73b3eaca562c820ea8dba37","sha1":"9407570cbefcf0c28bf3b8e0b17faf436d0d040b","sha256":"8765af92cdf9ee996a01ea1312d48f74303ace997e95698b056e24b9b042f858","sha512":"572083e36db4b330ab7aad9e29d7ff34ffaca1a3c6ffc57cdf46377e4f307f23e0ee4f55c6df8e5567b783d8785c814e3414ac71ee47edb2f88ed762f21e0a01","ssdeep":"6144:nZ1G6gyPwQz3iiiBxvcAaOLESM3jNQ2mWSkZpe:m4wUiJ2mkM","tlshash":"13741accb7d6b02283a3b574903f014bb23a7992b84cd894f286d9d42d7466a5237f7d","size":361586,"data":"","first_seen":"2026-09-09T19:04:34.8853Z","last_seen":"2026-09-09T19:04:34.8853Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-207992682-1\u0026cx=c\u0026gtm=4e6980h2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d6b765e9dce7144c447c62e443e6c51c","sha1":"a6e603497882513116e84885c40aa4524c227c0f","sha256":"73a0a914c2f77dda96f2eb77b1d33b9c3df58c21a29560c8eb5c56f57b9a02ad","sha512":"a5c36e3baaf60e51a52909f5174da8971166db139fe8fdb757370d059d56c276b31b82c0cf6be83b5e0ad82ac4a89534be13719ea4852e9fb8f5d2ef2ed0dc61","ssdeep":"6144:JZ1G6gXPwQx3iiiBxvcAaOLESM3jNehYsSWGe:k1wei3LSU","tlshash":"578419ccb3d6742283a3b574903f018bb27a7992b84cc894f286d9d42d3469a9177f7d","size":377945,"data":"","first_seen":"2026-09-09T19:04:34.939251Z","last_seen":"2026-09-09T19:04:34.939251Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bienfashion.live/","fqdn":"bienfashion.live","domain":"bienfashion.live","tld":"live"},"ip":{"addr":"172.67.142.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cde1a648c60fb251fbdb31ec9618238d","sha1":"0b3d9313d481ed6baa56ef882b1a9306b15a7c83","sha256":"4f35ba1ef3d618029765fac92a5eb3b9cd7cf6f087eb6c0108ebd738c06d55e6","sha512":"0ffe7cff4670189d91ec617d7c5b710436de3f26267ec0e692f98bd28b47bbd3aa07ca08ff29260b0bdd3127f7698c268d4fa77f90272de69d97d603a63528d4","ssdeep":"96:Fw19yqWTfu+UnCAkzn4rI3Mbg1YDVJn1nekj+l30mRaVyPEfPr9:GV1nnNkj4btBqaVyPO","tlshash":"65f1fe5095e42d01a5b36a93c2cc69d0ffabf11b1a0214e6721dbe1c4f3d89067e6fad","size":7862,"data":"","first_seen":"2023-03-07T12:02:18Z","last_seen":"2026-10-13T04:31:13.756237Z","times_seen":152,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"JQMIGRATE: Migrate is installed, version 3.1.0","filename":"https://bienfashion.live/themes/warehouse/assets/cache/bottom-c3d9e81086.js","line_number":2,"column_number":36482},{"level":"warn","text":"Google Analytics and Tag Manager is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1713687 for details.","filename":"sandbox eval code","line_number":1,"column_number":9},{"level":"warn","text":"jQuery.Deferred exception: PluginDetect is not defined@https://bienfashion.live/:5739:7\nl@https://bienfashion.live/themes/warehouse/assets/cache/bottom-c3d9e81086.js:2:77222\n339/i/Deferred/then/s/\u003c/d\u003c@https://bienfashion.live/themes/warehouse/assets/cache/bottom-c3d9e81086.js:2:77521\nsetTimeout handler*339/i/Deferred/then/s/\u003c@https://bienfashion.live/themes/warehouse/assets/cache/bottom-c3d9e81086.js:2:77730\nu@https://bienfashion.live/themes/warehouse/assets/cache/bottom-c3d9e81086.js:2:75504\nfireWith@https://bienfashion.live/themes/warehouse/assets/cache/bottom-c3d9e81086.js:2:76252\nfire@https://bienfashion.live/themes/warehouse/assets/cache/bottom-c3d9e81086.js:2:76288\nu@https://bienfashion.live/themes/warehouse/assets/cache/bottom-c3d9e81086.js:2:75504\nfireWith@https://bienfashion.live/themes/warehouse/assets/cache/bottom-c3d9e81086.js:2:76252\nready@https://bienfashion.live/themes/warehouse/assets/cache/bottom-c3d9e81086.js:2:79235\nz@https://bienfashion.live/themes/warehouse/assets/cache/bottom-c3d9e81086.js:2:79013\nEventListener.handleEvent*i@https://bienfashion.live/themes/warehouse/assets/cache/bottom-c3d9e81086.js:2:79384\n339@https://bienfashion.live/themes/warehouse/assets/cache/bottom-c3d9e81086.js:2:136763\nn@https://bienfashion.live/themes/warehouse/assets/cache/bottom-c3d9e81086.js:2:140313\n@https://bienfashion.live/themes/warehouse/assets/cache/bottom-c3d9e81086.js:2:140417\n@https://bienfashion.live/themes/warehouse/assets/cache/bottom-c3d9e81086.js:2:140813\n@https://bienfashion.live/themes/warehouse/assets/cache/bottom-c3d9e81086.js:2:140817\nmap[type:undefined]","filename":"https://bienfashion.live/themes/warehouse/assets/cache/bottom-c3d9e81086.js","line_number":2,"column_number":78780},{"level":"error","text":"api request error: 190 Error validating application","filename":"https://bienfashion.live/themes/warehouse/assets/cache/bottom-c3d9e81086.js","line_number":458,"column_number":11007},{"level":"warn","text":"Google Analytics and Tag Manager is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1713687 for details.","filename":"sandbox eval code","line_number":1,"column_number":9},{"level":"warn","text":"Google Analytics and Tag Manager is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1713687 for details.","filename":"sandbox eval code","line_number":1,"column_number":9}]},"http":[{"url":{"schema":"https","addr":"static.payu.com/res/v2/layout/style.css","fqdn":"static.payu.com","domain":"payu.com","tld":"com"},"ip":{"addr":"108.157.214.87","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:33.503Z","timestamp":1788980613503,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.payu.com","organization":""},"issuer":{"commonName":"DigiCert G2 TLS EU RSA4096 SHA384 2022 CA1","organization":"DigiCert Ireland Limited"},"validity":{"start":"Fri, 13 Mar 2026 00:00:00 GMT","end":"Sun, 27 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"70:82:91:84:08:EF:A4:8A:5A:8C:A8:A1:09:F2:2B:ED:6D:8A:AD:1E","sha256":"E8:27:75:F3:B1:A1:5E:6D:AD:3D:D0:A4:02:E1:07:9D:F3:92:DB:CF:60:E6:32:1D:4B:45:92:B1:06:1C:F4:39"}}},"request":{"raw":"GET /res/v2/layout/style.css HTTP/1.1\r\nHost: static.payu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css\r\ncontent-length: 2323\r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 18:59:01 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nlast-modified: Thu, 27 Aug 2026 08:07:54 GMT\r\netag: \"913-65a02d546b95a\"\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: max-age=600\r\nexpires: Wed, 09 Sep 2026 19:09:01 GMT\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 9fde400234236c10982fe8b8a3ca9eb2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P1\r\nx-amz-cf-id: zEMVN-OcNNX8VRjApdpKGb71yasf6Dlcftqq4caT36ACJLmnClsEmg==\r\nage: 272\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":10619,"size_decoded":2968,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"111217ebf8baeedae18bda7f8e9b4766","sha1":"f571cfbd97c5e4168bf0981d55c1f0f7d2fa2fea","sha256":"fc7bc3b4b0e84d2236a877a9fb545a089bcb71509e393b90cce2834baf62e9c0","sha512":"f779c9bd8d124ebe0795afce1830c45aa37932f54a473756c8ca49b63e451f9072ebf9a978d9354778c065ebd7fea99e0305d0189fae3d5a4c89a5b8fe232960","ssdeep":"192:VuB6UFGsOdW93+8381E8884C4KYHP5Wj2i5xDw98Y:E6UFGp+35K4BPoY","tlshash":"a42273d3c6e31853bc67c5622bbfe279923aa4039d09ccdabbdd7144cf0685a057274a","first_seen":"2023-08-03T13:57:07Z","last_seen":"2026-10-12T10:18:27.458586Z","times_seen":31,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":31,"connect":9,"send":0,"wait":20,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Work+Sans:400,700","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:33.542Z","timestamp":1788980613542,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css?family=Work+Sans:400,700 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 09 Sep 2026 19:03:33 GMT\r\ndate: Wed, 09 Sep 2026 19:03:33 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2364,"size_decoded":1164,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"fd72aade81dc9e8547622481d22ec3bd","sha1":"caaef19cbf02f3c79281a3342f7537e23ad55104","sha256":"b48d2ac3557fa2a94b983a53e58b54b04855bbaa55a97ada9b2b86a60a6ad264","sha512":"d9c296f58b715b59fbb56d55c1e379ab1e7a60af0e8980c21618cd5c34be391c1a780afb85216263dddedb9d77c1404ba4de362568d4f23ae94adbe6a41ea194","ssdeep":"","tlshash":"ee41ef51043aa11497431dd673de3d339eaea194b084d435bffe2c89ec6ac2aa37670d","first_seen":"2025-09-27T16:37:22.045773Z","last_seen":"2026-10-04T10:27:51.73952Z","times_seen":334,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":3,"connect":16,"send":0,"wait":33,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_68x28dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:34.900Z","timestamp":1788980614900,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /images/branding/googlelogo/1x/googlelogo_color_68x28dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 1597\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 02 Sep 2026 20:23:37 GMT\r\nexpires: Thu, 02 Sep 2027 20:23:37 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Fri, 30 Jun 2023 18:58:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nage: 599997\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1597,"size_decoded":2271,"mime_type":"image/png","magic":"PNG image data, 68 x 28, 8-bit/color RGBA, non-interlaced","md5":"c4a931d597decd2553aac6634b766cf2","sha1":"6ec84fb4a2745b4b71520241be77db1fd1013830","sha256":"f56402b127698db4b4dc611a97a6f081d04c4691c60522c5912d189e37c94a9e","sha512":"4932e0f7f38085a7c52539bdd5c7f470740e560a4471bea30d12ef9e3efe77f6bbfac28d26c62a245c43d98ebf74c824b2b414843080a27edf1563a5f874ac84","ssdeep":"","tlshash":"7c310afff39e8cec419e764069ba5965a362cd68233e928f14499592e4d007710f5f41","first_seen":"2023-04-05T08:27:37Z","last_seen":"2026-10-14T23:45:54.296232Z","times_seen":38690,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bienfashion.live/modules/revsliderprestashop/public/assets/js/extensions/revolution.extension.parallax.min.js?version=5.4.8","fqdn":"bienfashion.live","domain":"bienfashion.live","tld":"live"},"ip":{"addr":"172.67.142.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:34.180Z","timestamp":1788980614180,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bienfashion.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:59:57 GMT","end":"Tue, 13 Oct 2026 09:57:37 GMT"},"fingerprint":{"sha1":"75:CD:C9:18:49:06:7B:DE:35:8C:74:34:2D:88:9C:66:56:85:39:3F","sha256":"E8:B4:97:2A:13:D1:14:AA:12:54:9C:39:0E:F9:57:49:B8:B3:CD:76:80:55:DF:45:E8:59:6E:3D:25:E3:FE:42"}}},"request":{"raw":"GET /modules/revsliderprestashop/public/assets/js/extensions/revolution.extension.parallax.min.js?version=5.4.8 HTTP/1.1\r\nHost: bienfashion.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nCookie: PHPSESSID=3i417j132cqpnm5obqhji0mns3\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 09 Sep 2026 19:03:34 GMT\r\ncontent-type: text/javascript\r\npriority: u=3,i=?0\r\ncf-ray: a3887426ac6ba264-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nexpires: Wed, 16 Sep 2026 19:03:34 GMT\r\nlast-modified: Thu, 05 Aug 2021 08:16:03 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=604800; includeSubDomains, max-age=3600;\r\nvary: Accept-Encoding\r\ncontent-security-policy: frame-ancestors 'self';\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dntCxIrLz0fcEAjCtoIBWirz2RXCBJtQmGpJs3dumFgE%2FIbGzCo5ahNTv7Fe4vsKx3Z9SR4OhHreOB%2FwsUeKaC8FmkfoApg%2FP0j4whsWjhbtGkVBbafkPQpqe4GnpxKj3nF1\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3240\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10931,"size_decoded":4156,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (10692), with CRLF line terminators","md5":"5af695fc2f9242677472d46c921b407e","sha1":"7ee73735c7b0e0c8b4ebaccac77ab3268a3ef00a","sha256":"dd831ed9e0bf5acd44bcdaa92f5d357f65ba9fb8b839e60a9d0af23dfd0b68f7","sha512":"9d0e277adb83263afdb50024b0332f54e7def1d689c2b92eb6ca9980ab5a816374bbfd64ccee92fc4cbd3d8b1f9f9d1fece469a4725e8b76fdbc923546721a24","ssdeep":"192:OcLK1q1e1XfU9dciEK5FKw0Vm7Wgput9mHJnGN82PbZ7:I1q1e1Xf4+KL6m7WgpAmHUNVPbZ7","tlshash":"fa32d95a6e2028f640f3132cf9ad45d273228572e5068d41f9e6f9b9566ce9c037abcc","first_seen":"2023-03-07T01:26:05Z","last_seen":"2026-10-14T23:15:51.070106Z","times_seen":1833,"resource_available":true,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bienfashion.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/g/330e41bb475c/api.js","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:34.510Z","timestamp":1788980614510,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 21:10:25 GMT","end":"Thu, 12 Nov 2026 22:10:06 GMT"},"fingerprint":{"sha1":"79:90:42:E8:74:20:D2:D0:39:4A:8D:45:CE:B8:4F:AB:BC:6F:44:CB","sha256":"19:83:5B:D3:2C:DF:FE:44:CC:51:73:F6:5E:98:2B:5C:42:6D:3A:01:F4:37:63:E0:EC:11:45:78:B5:24:15:3D"}}},"request":{"raw":"GET /turnstile/v0/g/330e41bb475c/api.js HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bienfashion.live/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 09 Sep 2026 19:03:34 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-content-type-options: nosniff\r\ncache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\npriority: u=3,i=?0\r\netag: W/\"330e41bb475c-api\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a3887428bc300731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86603,"size_decoded":28465,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65501)","md5":"332a9735c5b3da5be808f159db2e2ccf","sha1":"2387d1efbcc561ea833aa24836df1c39a1ea799b","sha256":"9a0bbd1d15f8f4938e4e3fcb6ae3b5aa4c9622f2041336256827797c3bd96af8","sha512":"8e0c44566f10d3a1f270c816ef457a2ad8121f763f46cb98a029426138ef5caa95aba0934d9acd56cd90c928d269d365225c1094792ee9a47d6210b10211c615","ssdeep":"1536:DL3dUa2dOjYjUgAmPgU6aKLHXdAU7GMEBvOeTtWGqc3lL:fEOjYhT6zXdGMEBvOehlR","tlshash":"1a831bc8729a787213dac1b4a07f5353b3297d35584c8850e527d8663a7ce878273fba","first_seen":"2026-09-02T13:37:56.882331Z","last_seen":"2026-10-03T10:56:07.624344Z","times_seen":29188,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bienfashion.live/8384-home_default/komplet-sweter-spodnie-.jpg","fqdn":"bienfashion.live","domain":"bienfashion.live","tld":"live"},"ip":{"addr":"172.67.142.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:44.283Z","timestamp":1788980624283,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bienfashion.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:59:57 GMT","end":"Tue, 13 Oct 2026 09:57:37 GMT"},"fingerprint":{"sha1":"75:CD:C9:18:49:06:7B:DE:35:8C:74:34:2D:88:9C:66:56:85:39:3F","sha256":"E8:B4:97:2A:13:D1:14:AA:12:54:9C:39:0E:F9:57:49:B8:B3:CD:76:80:55:DF:45:E8:59:6E:3D:25:E3:FE:42"}}},"request":{"raw":"GET /8384-home_default/komplet-sweter-spodnie-.jpg HTTP/1.1\r\nHost: bienfashion.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nCookie: PHPSESSID=3i417j132cqpnm5obqhji0mns3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 09 Sep 2026 19:03:44 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3887465dcb0a264-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nlast-modified: Tue, 07 Jul 2026 13:27:49 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=604800; includeSubDomains, max-age=3600;\r\nvary: Accept\r\ncontent-security-policy: frame-ancestors 'self';\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6uQSoO3muvRw5KwHubhkcpry1xKS9cTn1sfkEmqsMhapQMjQpBnQ1Lf1%2BFfWCQFkORvj6zEQNkEy%2FYsw63X84XA3SMlZpFNQR170jGXIj5pKigMwnNplNdke1pFwQy5xICtD\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 58724\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58724,"size_decoded":59557,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 356x458, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"730cfea8b86a4e0dbe01b780b8e9eaff","sha1":"05cb89562cba3a3bc2651ca3ee548b6a8d2aeed3","sha256":"bd53b7fbef4fecf6e9eb5b79a7f9bd19c89b6024a114fce1e0d8477b48551024","sha512":"4f181098d019b0eb9e0aef150949e81165b62772f58601664f4d1529df17f3dc801d704a03b90af04101cf42d513dd81ae4cd0bd02279874bc9a336e753e685b","ssdeep":"1536:oAiJI+R8nTXFLxrgkN3D6aPPqLCcRBldz5e5ry5qt:oAieI8n5xrgQ3m7CcRBr5Cr5t","tlshash":"db4302d6ccca8069b73cdd665efda12e936a142b5b0c930b713a41c3a7764c230f026e","first_seen":"2026-09-09T19:04:34.872612Z","last_seen":"2026-09-09T19:04:34.872612Z","times_seen":1,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bienfashion.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bienfashion.live/img/bienfashion-logo-1628332864.jpg","fqdn":"bienfashion.live","domain":"bienfashion.live","tld":"live"},"ip":{"addr":"172.67.142.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:33.552Z","timestamp":1788980613552,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bienfashion.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:59:57 GMT","end":"Tue, 13 Oct 2026 09:57:37 GMT"},"fingerprint":{"sha1":"75:CD:C9:18:49:06:7B:DE:35:8C:74:34:2D:88:9C:66:56:85:39:3F","sha256":"E8:B4:97:2A:13:D1:14:AA:12:54:9C:39:0E:F9:57:49:B8:B3:CD:76:80:55:DF:45:E8:59:6E:3D:25:E3:FE:42"}}},"request":{"raw":"GET /img/bienfashion-logo-1628332864.jpg HTTP/1.1\r\nHost: bienfashion.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nCookie: PHPSESSID=3i417j132cqpnm5obqhji0mns3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 09 Sep 2026 19:03:33 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3887422cafaa264-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 50\r\ncache-control: max-age=2592000\r\nexpires: Fri, 09 Oct 2026 19:02:42 GMT\r\nlast-modified: Sat, 07 Aug 2021 10:41:04 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=604800; includeSubDomains, max-age=3600;\r\nvary: Accept\r\ncontent-security-policy: frame-ancestors 'self';\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JrH6j2cDPlBzzEiSiQIXvKqmVClDJUSd9k89ZwX%2BjglzHSX50iQlnCUsozfungEMyhs%2FoRpKotWKbaB%2FgbRR4OpZdeshIMXAbWiE4E2kckppomhqnlHDvPLvGqG5A6GjLlU0\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3934\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3934,"size_decoded":4818,"mime_type":"image/jpeg","magic":"PNG image data, 169 x 85, 8-bit/color RGBA, non-interlaced","md5":"23dc364cc2222b9c1c3c0dbc3d2c06ca","sha1":"c2db64200c0d57854eb42c82783b58691cef313c","sha256":"667a48b4ce18981015253316ed64155ceb741f09778491f2f438d78c8935eef4","sha512":"9fadce1248064de4ec720ce5b8edb0434f20522fe8dfc6053580ea4874689efa06e107281460147dbc9798044d6dfc372ff49430dca1f4c0453240e8a9b4983a","ssdeep":"","tlshash":"bd815b00b8453a86d1589db77a081351b41336b3a9ba53ac84e17baf67a4e613d4836e","first_seen":"2026-09-09T19:04:34.873756Z","last_seen":"2026-09-09T19:04:34.873756Z","times_seen":1,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bienfashion.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bienfashion.live/modules/revsliderprestashop/public/assets/js/extensions/revolution.extension.migration.min.js?version=5.4.8","fqdn":"bienfashion.live","domain":"bienfashion.live","tld":"live"},"ip":{"addr":"172.67.142.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:34.179Z","timestamp":1788980614179,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bienfashion.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:59:57 GMT","end":"Tue, 13 Oct 2026 09:57:37 GMT"},"fingerprint":{"sha1":"75:CD:C9:18:49:06:7B:DE:35:8C:74:34:2D:88:9C:66:56:85:39:3F","sha256":"E8:B4:97:2A:13:D1:14:AA:12:54:9C:39:0E:F9:57:49:B8:B3:CD:76:80:55:DF:45:E8:59:6E:3D:25:E3:FE:42"}}},"request":{"raw":"GET /modules/revsliderprestashop/public/assets/js/extensions/revolution.extension.migration.min.js?version=5.4.8 HTTP/1.1\r\nHost: bienfashion.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nCookie: PHPSESSID=3i417j132cqpnm5obqhji0mns3\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 09 Sep 2026 19:03:34 GMT\r\ncontent-type: text/javascript\r\npriority: u=3,i=?0\r\ncf-ray: a3887426ac69a264-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nexpires: Wed, 16 Sep 2026 19:03:34 GMT\r\nlast-modified: Thu, 05 Aug 2021 08:16:03 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=604800; includeSubDomains, max-age=3600;\r\nvary: Accept-Encoding\r\ncontent-security-policy: frame-ancestors 'self';\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cdl14q6FXXbV3VJ2hrnG5o0ENpamazo1wOUDapw6mJM7%2FCQHpgYVV9bsc4vdS1zDGjyEYiXiN%2FLNdfSyp4Rz9cPu1dqoGym3tZDMMno6JIKzciXif4ovlJRUGToZoYVBrIfU\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1902\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7862,"size_decoded":2816,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2016), with CRLF line terminators","md5":"cde1a648c60fb251fbdb31ec9618238d","sha1":"0b3d9313d481ed6baa56ef882b1a9306b15a7c83","sha256":"4f35ba1ef3d618029765fac92a5eb3b9cd7cf6f087eb6c0108ebd738c06d55e6","sha512":"0ffe7cff4670189d91ec617d7c5b710436de3f26267ec0e692f98bd28b47bbd3aa07ca08ff29260b0bdd3127f7698c268d4fa77f90272de69d97d603a63528d4","ssdeep":"96:Fw19yqWTfu+UnCAkzn4rI3Mbg1YDVJn1nekj+l30mRaVyPEfPr9:GV1nnNkj4btBqaVyPO","tlshash":"65f1fe5095e42d01a5b36a93c2cc69d0ffabf11b1a0214e6721dbe1c4f3d89067e6fad","first_seen":"2023-03-07T12:02:18Z","last_seen":"2026-10-13T04:31:13.756237Z","times_seen":152,"resource_available":true,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bienfashion.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/product/2x/translate_24dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:34.714Z","timestamp":1788980614714,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /images/branding/product/2x/translate_24dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BECAAQ/d=0/rs=AN8SPfrzHf-2T7wal-G0YeaqSuEl3yfBrA/m=el_main_css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 1842\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 04 Sep 2026 08:23:17 GMT\r\nexpires: Sat, 04 Sep 2027 08:23:17 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 14 Oct 2021 09:08:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nage: 470418\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1842,"size_decoded":2516,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"c69c796362406f9e11c7f4bf5bb628da","sha1":"e489ce95ab56208090868882113d7416abf46775","sha256":"4dac0026fbfa2615dce30c0af12830863fe885f84387a0147b9e338f548d5d82","sha512":"d3ad560ed0fd29be7d2cc434694f09e5a6fbea8b29c0611aecb54a1b73b4d722c53f42a19dae9e3d5d358444e50fb8fffbc39d67ce751bdbc8c861f6f95d3162","ssdeep":"","tlshash":"4e31f9fd129220437101ade72165eef798347c15f412da60ce65ba389c9fe20ed9a619","first_seen":"2023-04-05T07:39:29Z","last_seen":"2026-10-14T23:45:54.286464Z","times_seen":94825,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bienfashion.live/8131-home_default/kombinezon-z-szerokimi-nogawkami-ecru-vivien.jpg","fqdn":"bienfashion.live","domain":"bienfashion.live","tld":"live"},"ip":{"addr":"172.67.142.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:39.139Z","timestamp":1788980619139,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bienfashion.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:59:57 GMT","end":"Tue, 13 Oct 2026 09:57:37 GMT"},"fingerprint":{"sha1":"75:CD:C9:18:49:06:7B:DE:35:8C:74:34:2D:88:9C:66:56:85:39:3F","sha256":"E8:B4:97:2A:13:D1:14:AA:12:54:9C:39:0E:F9:57:49:B8:B3:CD:76:80:55:DF:45:E8:59:6E:3D:25:E3:FE:42"}}},"request":{"raw":"GET /8131-home_default/kombinezon-z-szerokimi-nogawkami-ecru-vivien.jpg HTTP/1.1\r\nHost: bienfashion.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nCookie: PHPSESSID=3i417j132cqpnm5obqhji0mns3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 09 Sep 2026 19:03:39 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3887445a824a264-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 53\r\ncache-control: max-age=2592000\r\nexpires: Fri, 09 Oct 2026 19:02:45 GMT\r\nlast-modified: Sat, 10 Jan 2026 15:05:38 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=604800; includeSubDomains, max-age=3600;\r\nvary: Accept\r\ncontent-security-policy: frame-ancestors 'self';\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i1NnkXTnL1vZFLzhHRWCY0lGT79LWXg91N8PzsKrp%2F9CuakhjZymmLako%2FrEpWcEcsuwBTwik%2BJW62ktH5xxgSm3YW2QcFehijniZUESY77ZpWtjR5a5KwxKkUTDJOXfJhlE\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 118454\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":118454,"size_decoded":119340,"mime_type":"image/jpeg","magic":"PNG image data, 356 x 458, 8-bit/color RGBA, non-interlaced","md5":"ee1f4242c7a0e507ca48f46b1ad63486","sha1":"5f2ae149177ebfa3a030bd42ce62e68768788604","sha256":"266048091f02e96d9b091f6a7e7aba2375f31d3d9b13a1227e4a49c5658b778d","sha512":"6a69da7de29b38fd3473e083c07d1193086676cef579b4eec4702ae2b6f9838ac7e3a9cd83051a212789bea7c9c304fef23e6fc0d12dd75aa5fd4880cde2d670","ssdeep":"3072:6gUxBatJbHiXILm8q7uzJMcAGTPVJiQVFZSRGG:jUxBatJiN8d+czviQJyGG","tlshash":"dbc3121dc98881be8780b92737fc9cf773b376d271b899738714838e926a06d54973a1","first_seen":"2026-09-09T19:04:34.875878Z","last_seen":"2026-09-09T19:04:34.875878Z","times_seen":1,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bienfashion.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bienfashion.live/5293-home_default/kombinezon-z-szerokimi-nogawkami-bez-vivien-.jpg","fqdn":"bienfashion.live","domain":"bienfashion.live","tld":"live"},"ip":{"addr":"172.67.142.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:44.303Z","timestamp":1788980624303,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bienfashion.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:59:57 GMT","end":"Tue, 13 Oct 2026 09:57:37 GMT"},"fingerprint":{"sha1":"75:CD:C9:18:49:06:7B:DE:35:8C:74:34:2D:88:9C:66:56:85:39:3F","sha256":"E8:B4:97:2A:13:D1:14:AA:12:54:9C:39:0E:F9:57:49:B8:B3:CD:76:80:55:DF:45:E8:59:6E:3D:25:E3:FE:42"}}},"request":{"raw":"GET /5293-home_default/kombinezon-z-szerokimi-nogawkami-bez-vivien-.jpg HTTP/1.1\r\nHost: bienfashion.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nCookie: PHPSESSID=3i417j132cqpnm5obqhji0mns3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 09 Sep 2026 19:03:44 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3887465fcbfa264-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nlast-modified: Tue, 05 Nov 2024 08:02:02 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=604800; includeSubDomains, max-age=3600;\r\nvary: Accept\r\ncontent-security-policy: frame-ancestors 'self';\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xe6PtcqVWSXi%2B29yYVjmX3EiDF6IwRcoSPTd9I47m35NryavP6oXr8FBi9tMpEF%2BJXeokbRVpsPrOHWEoEhNHccoPqnQ1JnWa7hkieaGGdVUNr6EF9bsGUsNATb%2FwYyO5YXn\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 27676\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27676,"size_decoded":28511,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 356x458, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"28ee6fc4ec32c971d1eb6d762c42cb26","sha1":"b4473cde2e9601b6e4e9805590e240343579d1ae","sha256":"51ae1ea83f1a26991a1f40b70ae011f641ccb87a9cdb4519001aa3a70b4624b7","sha512":"29fc43ad8de170d6a2548d9d1b7e71a72007321983ab9bd7ce33fbb5733d0e0f700a24bd8c705d3d1e833ada3615a1b473f6692b349ed789885c190aaec73254","ssdeep":"768:2PGX9yHzWLC0cg6hb+DTEVWNSBjyntmKDdgMsjsFLwNm:fS62JhqHEVWNSBjy5dVsjCUM","tlshash":"76c2e1c2364524edecb0c79e10b0bf64ea24b532c8146a462d11e3df34e2778f9aa9d1","first_seen":"2026-09-09T19:04:34.876971Z","last_seen":"2026-09-09T19:04:34.876971Z","times_seen":1,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bienfashion.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bienfashion.live/5291-home_default/kombinezon-z-szerokimi-nogawkami-bez-vivien-.jpg","fqdn":"bienfashion.live","domain":"bienfashion.live","tld":"live"},"ip":{"addr":"172.67.142.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:44.305Z","timestamp":1788980624305,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bienfashion.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:59:57 GMT","end":"Tue, 13 Oct 2026 09:57:37 GMT"},"fingerprint":{"sha1":"75:CD:C9:18:49:06:7B:DE:35:8C:74:34:2D:88:9C:66:56:85:39:3F","sha256":"E8:B4:97:2A:13:D1:14:AA:12:54:9C:39:0E:F9:57:49:B8:B3:CD:76:80:55:DF:45:E8:59:6E:3D:25:E3:FE:42"}}},"request":{"raw":"GET /5291-home_default/kombinezon-z-szerokimi-nogawkami-bez-vivien-.jpg HTTP/1.1\r\nHost: bienfashion.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nCookie: PHPSESSID=3i417j132cqpnm5obqhji0mns3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 09 Sep 2026 19:03:44 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3887465fcc1a264-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nlast-modified: Tue, 05 Nov 2024 08:00:21 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=604800; includeSubDomains, max-age=3600;\r\nvary: Accept\r\ncontent-security-policy: frame-ancestors 'self';\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2o7Vu8WjqHSsiobHAzb09yJlp5x24j9Bp6eNJcFLivIOJcxWyu8U9LojU%2BWoKgoZ624Y5mg8oEWes8j8lEa81vFdVmTT5ypGbm2Pwo0QFF9PnxwCJvyuJo6QvrUD49edF14z\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 28596\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28596,"size_decoded":29427,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 356x458, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"45e6c90e39300a131af113aed6edd9f0","sha1":"7504466f1943eb9f505224fb24bf1a2f86217e6b","sha256":"54ec5b66dfb983687de0d868a798ff3ef7fa1f3b8c69ea3ecef20402457a8c89","sha512":"cea44afcf317854b8c668e0455bb0200359db4a60d6b21d27a22dd1ccb9c57639ba4c05d7f77df70b517b47c78d9cf2bc079c3ca8890558531180e2a94ffa814","ssdeep":"768:puP/z/5U1XBLXggbptXyX67slEMBujoUK4:puP/uptM64lR85","tlshash":"71d2e2df2f5cf242f7e7ea25056999004251aa27c52a8c0c0ce6df04277d2895cbba8f","first_seen":"2026-09-09T19:04:34.878982Z","last_seen":"2026-09-09T19:04:34.878982Z","times_seen":1,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bienfashion.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bienfashion.live/img/icons/gmap.png","fqdn":"bienfashion.live","domain":"bienfashion.live","tld":"live"},"ip":{"addr":"172.67.142.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:33.567Z","timestamp":1788980613567,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bienfashion.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:59:57 GMT","end":"Tue, 13 Oct 2026 09:57:37 GMT"},"fingerprint":{"sha1":"75:CD:C9:18:49:06:7B:DE:35:8C:74:34:2D:88:9C:66:56:85:39:3F","sha256":"E8:B4:97:2A:13:D1:14:AA:12:54:9C:39:0E:F9:57:49:B8:B3:CD:76:80:55:DF:45:E8:59:6E:3D:25:E3:FE:42"}}},"request":{"raw":"GET /img/icons/gmap.png HTTP/1.1\r\nHost: bienfashion.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nCookie: PHPSESSID=3i417j132cqpnm5obqhji0mns3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 09 Sep 2026 19:03:33 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3887422eb0aa264-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 10 Oct 2022 10:39:33 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=604800; includeSubDomains, max-age=3600;\r\nvary: Accept\r\ncontent-security-policy: frame-ancestors 'self';\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vQv6s5URfIFetdsDCScq9Qz8ChSb%2FFaQMp4mEqV8tESUd6jPbOqLFIXVCVP0uIN8ue4lhNcOCNq9fbTIUbnu1ludSDvHWeyV82ck0nLAlqVlIQJYkq5UR62mSnVK3WqO1O%2FJ\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 990\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":990,"size_decoded":1821,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"00ef04183bd62573b9f09a626dae00f4","sha1":"d7bb74f1ccc048048a0564f9c31fd4b000454e7b","sha256":"e2d1925d7db6c2313f6e6d86d2a5e41397b975e3cfb8f484454b98f932d5853a","sha512":"7bd0bb34095468f21030c30a4b12ebea5d56087ae84d36fd047cbfff839d0a53abfd552140f0f85e8fa2c81320583ed2b97c5a35d0464dc43c0b4cb3bcb43e2f","ssdeep":"","tlshash":"7311c81dd5753da38ee1397dc78cdbecd0538355911011c1dd8a649533c58492be3dab","first_seen":"2026-09-09T19:04:34.8802Z","last_seen":"2026-09-09T19:04:34.8802Z","times_seen":1,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bienfashion.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bienfashion.live/modules/revsliderprestashop/public/assets/js/extensions/revolution.extension.carousel.min.js?version=5.4.8","fqdn":"bienfashion.live","domain":"bienfashion.live","tld":"live"},"ip":{"addr":"172.67.142.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:34.168Z","timestamp":1788980614168,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bienfashion.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:59:57 GMT","end":"Tue, 13 Oct 2026 09:57:37 GMT"},"fingerprint":{"sha1":"75:CD:C9:18:49:06:7B:DE:35:8C:74:34:2D:88:9C:66:56:85:39:3F","sha256":"E8:B4:97:2A:13:D1:14:AA:12:54:9C:39:0E:F9:57:49:B8:B3:CD:76:80:55:DF:45:E8:59:6E:3D:25:E3:FE:42"}}},"request":{"raw":"GET /modules/revsliderprestashop/public/assets/js/extensions/revolution.extension.carousel.min.js?version=5.4.8 HTTP/1.1\r\nHost: bienfashion.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nCookie: PHPSESSID=3i417j132cqpnm5obqhji0mns3\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 09 Sep 2026 19:03:34 GMT\r\ncontent-type: text/javascript\r\npriority: u=3,i=?0\r\ncf-ray: a38874269c60a264-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nexpires: Wed, 16 Sep 2026 19:03:34 GMT\r\nlast-modified: Thu, 05 Aug 2021 08:16:03 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=604800; includeSubDomains, max-age=3600;\r\nvary: Accept-Encoding\r\ncontent-security-policy: frame-ancestors 'self';\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bTETWBDzH1BnD7dL32DSGKvCJXVVI7nWpu1eYAxxkNaMnc2RQXiQ6euLXByJ60cKXHmkHSmy%2FIO3o4VbQzRjed9agaAV9Ca0ixdcFKxEXH4bytxedV1RFVHQP3SezZssv3Qt\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2600\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7607,"size_decoded":3512,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (7370), with CRLF line terminators","md5":"97693c9e323e737267165329b406c0f1","sha1":"967f619064f8bf7d1ffc7d1f0ceb3d977058a574","sha256":"6bef41bae310e2b5698ddf03e4f1dca51078f27ee6dd7bd4c857a755a5c44b7e","sha512":"4b95226cea05deb28c27393d720be9589fe8e2f414a9b06336b467a159a9ceff8b39e0f8358b57c8075735d89085017061c065683a6af7b2aef9eac9ac1208b2","ssdeep":"192:SuN8q7sZ9sfpCfQcwaxXTZTn1WUCfl8YafSutLZgO:qqIypeQsZWqf9","tlshash":"e6f1728460143caf0252a349966680f953fc294c632be8647cff7165085cacd027feee","first_seen":"2023-03-07T12:02:18Z","last_seen":"2026-10-14T21:33:10.03329Z","times_seen":568,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bienfashion.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bienfashion.live/8321-home_default/elegancka-sukienka-malinowa-czerwien-diana-.jpg","fqdn":"bienfashion.live","domain":"bienfashion.live","tld":"live"},"ip":{"addr":"172.67.142.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:39.137Z","timestamp":1788980619137,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bienfashion.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:59:57 GMT","end":"Tue, 13 Oct 2026 09:57:37 GMT"},"fingerprint":{"sha1":"75:CD:C9:18:49:06:7B:DE:35:8C:74:34:2D:88:9C:66:56:85:39:3F","sha256":"E8:B4:97:2A:13:D1:14:AA:12:54:9C:39:0E:F9:57:49:B8:B3:CD:76:80:55:DF:45:E8:59:6E:3D:25:E3:FE:42"}}},"request":{"raw":"GET /8321-home_default/elegancka-sukienka-malinowa-czerwien-diana-.jpg HTTP/1.1\r\nHost: bienfashion.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nCookie: PHPSESSID=3i417j132cqpnm5obqhji0mns3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 09 Sep 2026 19:03:39 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3887445a823a264-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nlast-modified: Wed, 20 May 2026 12:59:08 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=604800; includeSubDomains, max-age=3600;\r\nvary: Accept\r\ncontent-security-policy: frame-ancestors 'self';\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vEE6Sxlgj2eJC55tTKXWEAR%2BBSqs23CqV6Sea%2BId6vTbP%2FZEfMs7FU3vEaTgprWs0fb5ZvT2%2Fsy%2BwDeUaiMDm7hDQ31r881dH7wq5Qz4Jn53BwkPvbBQVZFayufGwgfEPARf\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 56350\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56350,"size_decoded":57189,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cc04c2fe2a8ce67914fb332d3cffe35b","sha1":"8916b2028964e781a9bfb191cccad08b6fb9f3ef","sha256":"d5713c55eac18700fa500ef073fda7daf5389f1c482e37d63875969d677fb5b2","sha512":"8ca16642c2f173a9abeb00d1161ac13055196527162af2a303e1a20e7dc0568ac33ddefbd14198b7464f91681d953d594676bae1cf5c95156dbead68a3446eea","ssdeep":"1536:9gpni8LShlQDrN/CTwqQt6jTpjfQGf/Wf6Y/FXg:98ni8LShlQDrV7Hgrjf/WJg","tlshash":"674302adbed150b918f3df9e4c8d9fe7068e40f91169042091a08eaf6f981ac0f93653","first_seen":"2026-09-09T19:04:34.882528Z","last_seen":"2026-09-09T19:04:34.882528Z","times_seen":1,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bienfashion.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bienfashion.live/5507-home_default/kombinezon-z-szerokimi-nogawkami-malinowa-czerwien-vivien-.jpg","fqdn":"bienfashion.live","domain":"bienfashion.live","tld":"live"},"ip":{"addr":"172.67.142.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:44.300Z","timestamp":1788980624300,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bienfashion.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:59:57 GMT","end":"Tue, 13 Oct 2026 09:57:37 GMT"},"fingerprint":{"sha1":"75:CD:C9:18:49:06:7B:DE:35:8C:74:34:2D:88:9C:66:56:85:39:3F","sha256":"E8:B4:97:2A:13:D1:14:AA:12:54:9C:39:0E:F9:57:49:B8:B3:CD:76:80:55:DF:45:E8:59:6E:3D:25:E3:FE:42"}}},"request":{"raw":"GET /5507-home_default/kombinezon-z-szerokimi-nogawkami-malinowa-czerwien-vivien-.jpg HTTP/1.1\r\nHost: bienfashion.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nCookie: PHPSESSID=3i417j132cqpnm5obqhji0mns3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 09 Sep 2026 19:03:44 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3887465ecbca264-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nlast-modified: Tue, 05 Nov 2024 10:02:38 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=604800; includeSubDomains, max-age=3600;\r\nvary: Accept\r\ncontent-security-policy: frame-ancestors 'self';\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CxTvDC0wLuIRpFecoQRnWMRwW17zpPRnGPnepJfFU7tY0Q3ICubmrADPl75%2BPVYkIykwtoDc9bsGfLijWDcPCO8q7pfDImMr1qWgTLwv34hG7jqXv00FKDXB5ldLdIS2qCHv\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 28444\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28444,"size_decoded":29275,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 356x458, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4724877041384076ac9721ac2f5c55b9","sha1":"930d96a2913344fa248d2f90a56a53e9405f8c8e","sha256":"d471116066927954e39bd119244210673bad0d33d3b72bc818de74f9328e5557","sha512":"b3d2aa93a6bfdff4da130cd7e288ffb8168ad5a0b2658953cc170444c22c1802829ec623c5a399be7a13deffa2fcd03ddeadc03d350ca57a5667464444b7bed2","ssdeep":"768:+UY0TE9aJTuHzgSVjAjFPAZvzJt7p+vzzs9ZcpCia52nj+AA:+3YE9mTAZVjAjFPATt7pC49OpCifj+AA","tlshash":"86d2f15cb23b44e5542dd42bf71fa1e30306bb649b65f077425dc76e5fcca658a03009","first_seen":"2026-09-09T19:04:34.883462Z","last_seen":"2026-09-09T19:04:34.883462Z","times_seen":1,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bienfashion.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-101338987-1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:33.528Z","timestamp":1788980613528,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:41 GMT","end":"Mon, 02 Nov 2026 08:37:40 GMT"},"fingerprint":{"sha1":"DC:E6:38:9B:82:DB:20:21:19:E7:95:FC:30:E0:F0:F4:BC:CA:9A:1C","sha256":"2C:0E:42:66:EE:BA:84:59:3C:53:EB:87:C0:84:DD:32:F4:42:73:26:47:8C:4E:56:F9:5B:47:6C:AF:BA:C2:F9"}}},"request":{"raw":"GET /gtag/js?id=UA-101338987-1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Wed, 09 Sep 2026 19:03:33 GMT\r\nexpires: Wed, 09 Sep 2026 19:03:33 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Wed, 09 Sep 2026 18:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 134458\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":381034,"size_decoded":135108,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4901)","md5":"2941befd6b970983d41021bb1ca8ee93","sha1":"5d4142006fc9c864cfa92bdc946f36f9f03bd531","sha256":"b61ace10a205c927e0e70e23379ef2baff0a702d75b68926a8074ceceadc2f1b","sha512":"b86c24c0c33fb465c703570eaa771f627e59db2e8a36a367b68fe9383750296f62c8d1b3169d12b619647d98ea34548acb713be05701bbfca14766abd61f5eb1","ssdeep":"6144:73ja9+jPkYc7yco3wFcYR/ZETH3UztzH9BxedCvZ:60jPkv5TzLxkQ","tlshash":"9b8408ccb3d6742283a3b574503f018bb27a7992b84cc898f286d9d42e3465a5277f7d","first_seen":"2026-09-09T19:04:34.884426Z","last_seen":"2026-09-09T19:04:34.884426Z","times_seen":1,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":18,"send":0,"wait":61,"receive":40,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-5Q8B6RD","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:33.579Z","timestamp":1788980613579,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:41 GMT","end":"Mon, 02 Nov 2026 08:37:40 GMT"},"fingerprint":{"sha1":"DC:E6:38:9B:82:DB:20:21:19:E7:95:FC:30:E0:F0:F4:BC:CA:9A:1C","sha256":"2C:0E:42:66:EE:BA:84:59:3C:53:EB:87:C0:84:DD:32:F4:42:73:26:47:8C:4E:56:F9:5B:47:6C:AF:BA:C2:F9"}}},"request":{"raw":"GET /gtm.js?id=GTM-5Q8B6RD HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Wed, 09 Sep 2026 19:03:33 GMT\r\nexpires: Wed, 09 Sep 2026 19:03:33 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Wed, 09 Sep 2026 18:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 127619\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":361586,"size_decoded":128269,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4851)","md5":"a44d3ca9c73b3eaca562c820ea8dba37","sha1":"9407570cbefcf0c28bf3b8e0b17faf436d0d040b","sha256":"8765af92cdf9ee996a01ea1312d48f74303ace997e95698b056e24b9b042f858","sha512":"572083e36db4b330ab7aad9e29d7ff34ffaca1a3c6ffc57cdf46377e4f307f23e0ee4f55c6df8e5567b783d8785c814e3414ac71ee47edb2f88ed762f21e0a01","ssdeep":"6144:nZ1G6gyPwQz3iiiBxvcAaOLESM3jNQ2mWSkZpe:m4wUiJ2mkM","tlshash":"13741accb7d6b02283a3b574903f014bb23a7992b84cd894f286d9d42d7466a5237f7d","first_seen":"2026-09-09T19:04:34.8853Z","last_seen":"2026-09-09T19:04:34.8853Z","times_seen":1,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":56,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BECAAQ/d=0/rs=AN8SPfrzHf-2T7wal-G0YeaqSuEl3yfBrA/m=el_main_css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:33.929Z","timestamp":1788980613929,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BECAAQ/d=0/rs=AN8SPfrzHf-2T7wal-G0YeaqSuEl3yfBrA/m=el_main_css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 3967\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 03 Sep 2026 23:15:29 GMT\r\nexpires: Fri, 03 Sep 2027 23:15:29 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 09 Apr 2026 01:12:55 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 503284\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20284,"size_decoded":4819,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (20284), with no line terminators","md5":"fde4f72b90fe807270db3c332dd058df","sha1":"7ef4d70af01c38a7f80a7650be25f63aff4ba751","sha256":"ab31c9be358d2107fc1158434c7aeaaf15f82e3e405ed67ab236b5ac232ed159","sha512":"9bef39350af557afeb10cb71068426ab28befaf5295359954787be06a5ce0993d69e8f5018a5a17c44311d294dd1a87a6f82edd0f5743df0149b8e4e53061695","ssdeep":"192:nvqx/EhZINcrXsfg0SgG8CqA3uku9SJFzvQVMbnUIfIxIVVpTrecfzPtcmt4v78l:gMF8Sb3i0JFzourUqWMVpTrdfzPtcBG","tlshash":"c492872057aed01967efa82364d36dff71d444db90123eeaaf5a7352cd821f231ea214","first_seen":"2026-04-13T20:43:22.641436Z","last_seen":"2026-10-14T23:45:54.196147Z","times_seen":40899,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":18,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/worksans/v24/QGYsz_wNahGAdqQ43Rh_fKDp.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:34.154Z","timestamp":1788980614154,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/worksans/v24/QGYsz_wNahGAdqQ43Rh_fKDp.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bienfashion.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 50316\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 04 Sep 2026 20:41:08 GMT\r\nexpires: Sat, 04 Sep 2027 20:41:08 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:23:20 GMT\r\ncontent-type: font/woff2\r\nage: 426146\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":50316,"size_decoded":51129,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 50316, version 1.0","md5":"97b33529e13b04b2205144e28a17a1d6","sha1":"9eaf3fe571af16f72a84dbadc1fce0128dff4486","sha256":"1dd49afc07fb2231b2ff686cbf007725fb2742271bb1f28ebd98f22a0d817343","sha512":"ce731a26fac8fd5583137450138d71fc36a9a0c4b79257a5af74be21cc2773b6e3a1ead61055411ec1c2cc857b8b0e6cbc94971f5f0b51820b458d9146af89bf","ssdeep":"768:etWz8e4bJ7xYqUBOYPc1NmWL7TDGrAZrIzcbWomWEjoyW6Md/AE1wBje34U:eZdhUQN5ToAZrIz7uEjR7udw5e34U","tlshash":"a33301e2882ca65cfe1ba7f8c422cc65e3336044f63d461d5766ff6ee470605e83a016","first_seen":"2025-09-12T00:12:40.161531Z","last_seen":"2026-10-15T00:19:48.452288Z","times_seen":25915,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":43,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/api.js","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:33.519Z","timestamp":1788980613519,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 21:10:25 GMT","end":"Thu, 12 Nov 2026 22:10:06 GMT"},"fingerprint":{"sha1":"79:90:42:E8:74:20:D2:D0:39:4A:8D:45:CE:B8:4F:AB:BC:6F:44:CB","sha256":"19:83:5B:D3:2C:DF:FE:44:CC:51:73:F6:5E:98:2B:5C:42:6D:3A:01:F4:37:63:E0:EC:11:45:78:B5:24:15:3D"}}},"request":{"raw":"GET /turnstile/v0/api.js HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\ndate: Wed, 09 Sep 2026 19:03:34 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public\r\ncross-origin-resource-policy: cross-origin\r\nlocation: /turnstile/v0/g/330e41bb475c/api.js\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a38874286b350731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T00:38:37.114452Z","times_seen":19109993,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":4,"connect":9,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"access.eye-able.com/configs/bienfashion.live.js","fqdn":"access.eye-able.com","domain":"eye-able.com","tld":"com"},"ip":{"addr":"195.181.166.158","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:33.520Z","timestamp":1788980613520,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /configs/bienfashion.live.js HTTP/1.1\r\nHost: access.eye-able.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ndate: Wed, 09 Sep 2026 19:03:33 GMT\r\ncontent-type: text/html\r\nserver: BunnyCDN-SE1-725\r\ncdn-pullzone: 2448051\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding, Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: no-cache\r\ncdn-storagebalancer: SE-582\r\ncdn-storageserver: DE-1141\r\ncdn-proxyver: 1.70\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 404\r\ncdn-cachedat: 09/09/2026 19:03:33\r\ncdn-edgestorageid: 725\r\ncdn-requestid: c888428ee79c1421b82f262cce93341b\r\ncdn-cache: MISS\r\ncdn-status: 404\r\ncdn-requesttime: 0\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T00:38:37.114452Z","times_seen":19109993,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-YWDFSSDBKR","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:33.525Z","timestamp":1788980613525,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:41 GMT","end":"Mon, 02 Nov 2026 08:37:40 GMT"},"fingerprint":{"sha1":"DC:E6:38:9B:82:DB:20:21:19:E7:95:FC:30:E0:F0:F4:BC:CA:9A:1C","sha256":"2C:0E:42:66:EE:BA:84:59:3C:53:EB:87:C0:84:DD:32:F4:42:73:26:47:8C:4E:56:F9:5B:47:6C:AF:BA:C2:F9"}}},"request":{"raw":"GET /gtag/js?id=G-YWDFSSDBKR HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Wed, 09 Sep 2026 19:03:33 GMT\r\nexpires: Wed, 09 Sep 2026 19:03:33 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 190404\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":579559,"size_decoded":191008,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6698)","md5":"256023a701bec7cd0f1d3d3ebbc04482","sha1":"4771ae8389f1d0b8b16ec6df7f96d24fd4214851","sha256":"a78ceed6c5a3c315e48dcca42a170b0e61b6783269f41fa891550116a929b407","sha512":"a2c651c341bbd7fef938239e0d86148aa5b61e0ff34f35c33cb20505225ad79f28cc5c828e4e1425130f35e71e30f4efffe218e19bc7b23b58cedc5291af3271","ssdeep":"6144:w73jawM+AJpPkXV7y5/2gpYhepcYR/ZETH3Uzta7609B+1lGpcEvYfshsCZ:twRAJpPk58za+Y6w4lGWNfs3","tlshash":"d8c408de73c674229396f578903f01cba97b28a2b49cc89af189dce02d3454a5167f7c","first_seen":"2026-09-09T19:04:34.889568Z","last_seen":"2026-09-09T19:04:34.889568Z","times_seen":1,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":41,"receive":60,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.I_JCvueZoMU.O/am=BECAAQ/d=1/ed=1/rs=AN8SPfrc5w8aV-LwlIUYYDjgr6xQBvQ_ZA/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:33.931Z","timestamp":1788980613931,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /_/translate_http/_/js/k=translate_http.tr.no.I_JCvueZoMU.O/am=BECAAQ/d=1/ed=1/rs=AN8SPfrc5w8aV-LwlIUYYDjgr6xQBvQ_ZA/m=el_main HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 100688\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 08 Sep 2026 19:21:09 GMT\r\nexpires: Wed, 08 Sep 2027 19:21:09 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Sun, 06 Sep 2026 18:14:02 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 85345\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":290068,"size_decoded":101548,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2553)","md5":"85329d4870159bc7e900edf7e2b7c05c","sha1":"234920705ac8dcf2981953b5f13b44728837a877","sha256":"a9e5563c1f8d367250f59aa144d3ca1deb30eaec35bfdde02c0f0321994b5b40","sha512":"42d3df085c47590b56bf251278681848519bc8dcb42885e7e59e091d9598b408841337a147505fba2ca0cae2056f60cf85990242491fd2cd3a35675100db306c","ssdeep":"3072:UWIky5KjDvQySb00K2jt1YZNSFZruPl7uthwSJKDOodN/W:RDvFrY1ZuDb/W","tlshash":"4054d7dcb29670a79363f4a5513f440ab13b69a5f8484dacb28cd8e26df4909017bf7c","first_seen":"2026-09-08T20:00:42.674404Z","last_seen":"2026-09-10T19:23:37.045301Z","times_seen":162,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":2,"connect":16,"send":0,"wait":18,"receive":36,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"graph.instagram.com/me/media?fields=caption,id,media_type,media_url,permalink,thumbnail_url,timestamp,username\u0026access_token=IGQWRPUTdNT2lyc0JtS3RuN041cmlXYmNkV2QyMnJWRE5lUDNMYTVOQWdRVWNyM0FVWlhCdHViWXZAaWHFiOTFZASUhuQXhQSEp5SlpBYXpHenlWd2xfZAU1oZADRTQkxtM2xXbkpwdGpIaWVJVjQ3anZAvem53eUQwNWMZD\u0026limit=10","fqdn":"graph.instagram.com","domain":"instagram.com","tld":"com"},"ip":{"addr":"157.240.200.63","port":443,"asn":32934,"as":"FACEBOOK","country":"Denmark","country_code":"DK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:34.644Z","timestamp":1788980614644,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.graph.instagram.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 19 Jun 2026 00:00:00 GMT","end":"Thu, 17 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EB:AE:40:F8:96:3D:46:50:F7:41:BA:A3:96:5D:76:65:FB:AE:26:C9","sha256":"C9:FE:3B:FB:BF:7C:BF:97:60:3A:E0:5F:78:9A:E4:7B:96:79:47:8A:D7:90:06:2F:0E:79:2E:80:69:47:98:75"}}},"request":{"raw":"GET /me/media?fields=caption,id,media_type,media_url,permalink,thumbnail_url,timestamp,username\u0026access_token=IGQWRPUTdNT2lyc0JtS3RuN041cmlXYmNkV2QyMnJWRE5lUDNMYTVOQWdRVWNyM0FVWlhCdHViWXZAaWHFiOTFZASUhuQXhQSEp5SlpBYXpHenlWd2xfZAU1oZADRTQkxtM2xXbkpwdGpIaWVJVjQ3anZAvem53eUQwNWMZD\u0026limit=10 HTTP/1.1\r\nHost: graph.instagram.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bienfashion.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 400 \r\ndebug-link: https://www.meta.com/debug/?mid=e6ebf95b2612adef8727b4652ab29a1a\r\nerror-mid: e6ebf95b2612adef8727b4652ab29a1a\r\nvary: Origin\r\ncontent-type: application/json; charset=UTF-8\r\nwww-authenticate: OAuth \"Facebook Platform\" \"invalid_token\" \"Error validating application\"\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; preload; includeSubDomains\r\npragma: no-cache\r\ncache-control: no-store\r\nexpires: Sat, 01 Jan 2000 00:00:00 GMT\r\nx-fb-request-id: AgxjFD3no5y24G5cQPZFv_A\r\nx-fb-trace-id: Ef0ZOvi5HRd\r\nx-fb-rev: 1047098005\r\nx-stack: www\r\nx-fb-debug: mxn4alawiTw8WYFZxYR3C3fHEB0IviVIT3SVQc0+abhu/sp/M8gCRoOcFmq4hFGioBtj4Mix4gQelVFefvJyKQ==\r\ncontent-length: 168\r\ndate: Wed, 09 Sep 2026 19:03:34 GMT\r\nproxy-status: http_request_error; e_proxy=\"AcTSStz6oDe1jUd9aEBPX6V1KbR0QAU9MzoX7dmM7686t9CCFrGRH_dwcX29oEzcKrct0wo1TnuONWcoL1o\"; e_fb_twtaskhandle=\"AcTVPJE-S12yF32nFNJ5aomcNR0GtWImRogZqh9FKVJR68-XLrLmjRD2NAB6y-hUnz67IzkN3jEU7zR1rEtHl75zZzj1I1mIc3np4P4ICA\"; e_upip=\"AcRFuXpnXWWRFiTQpD1efD4J4jEL8HaOkDC9-1lk3_M41w1uXAbc6fha669qpGLAZvG-Hjip_I0RvuSiNlkSJYa34SM3MtTnxDUYd1g2-dk\"; e_fb_zone=\"AcTOwUr2SsUNgxWhrLmqE-lmzr60sH1czuEqJS0wqe6cJzh5qoOPd1ha5U9Id0_N\"; e_clientaddr=\"AcSkZaV9hFXHlfFdVIYpYcoT6Bg-QEZe77eSfzd52slGeVJ504n6dh8CIDj0-3qb98-0hR1oRhzn1vO9zGCF2imvU0EjmxaJmEUEy1IFlWO5IKkMdw\"; e_fb_vipaddr=\"AcTudBmZD4F6qo-iutVg-uBf3NfiSZXAfVqkyWzAs6kla8dQ8o20Z1sHvI5h-DtoejLUufkJGcBkDrzpU7jx4HRxjr14l4YowpHNmPw6\", http_request_error; e_proxy=\"AcRs24IRzn0qcswIJaHSTvM72KYWS_dxIL4V4V_7uhLvJPzDze9Xiiip-KAb6NWtyDMahOoImWL6F8E\"; e_fb_twtaskhandle=\"AcSMGirLevCsRbtdrv-N3k4tCp1UnSR-dkjrhcLYid1GoNg3cw4sPAwf7bwxEyOp6TpuNQ4iX55T0wJNvsIWFuIlKdYJv_e06wVU\"; e_upip=\"AcSlBXXQdgitJ1QbfGN2mIPW6ltmOhLa3lLu8k3JYude5tCJVrIzN6wRJ3h3V5J1FIpzPkF55xmPPaE7X0PynHgiOSgrEOew8MR3emUs\"; e_fb_zone=\"AcS8S1Ab2iYpbVI56ryZSQbc2Jm9afaLMKp1v9NOuVAwMuehgYgN-ps-aBNEKA\"; e_clientaddr=\"AcTd9763ZaYEbGzTIKLEs0qMKYQqTe7gVakg4H1EnXL9MsQhLifTCcxN4xhovx8tkPymhuqf98E-b8eYn1o\"; e_fb_vipaddr=\"AcSteMTO-ELf7S6j7PSFofJO7hsITJIMaT_wYyx0PX4fM6-VwP91UpBHlBGbm-rwBE7-INr_cUw\"\r\nx-fb-connection-quality: EXCELLENT; q=0.9, rtt=16, rtx=0, c=34, mss=1232, tbw=5019, tp=9, tpl=0, uplat=122, ullat=0\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":168,"size_decoded":2398,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"b5f51842da30fba0cb3336b75643c85c","sha1":"ae4db378aafdc262f2edfff16f1a15e922ac54c5","sha256":"bc51254945299f1a8ef6773b827156f8966acf284832c1b83434b75244466431","sha512":"5a75ab27f95fd50c210d2ca075f0304ff56070b0e9b3b3f0a0eda5daf549ec5421f26e99376b1bb77e3354e0a37084c45f3e2189b68c688d20d47c1fefe19fe7","ssdeep":"","tlshash":"c7c08c61c2884cc303d342597098e290e1e100570c25685abe0c822c9fced6d853214e","first_seen":"2026-09-09T19:04:34.891268Z","last_seen":"2026-09-09T19:04:34.891268Z","times_seen":1,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":0,"dns":6,"connect":19,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bienfashion.live/8371-home_default/sweter-czarny-z-aplikacja-.jpg","fqdn":"bienfashion.live","domain":"bienfashion.live","tld":"live"},"ip":{"addr":"172.67.142.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:39.127Z","timestamp":1788980619127,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bienfashion.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:59:57 GMT","end":"Tue, 13 Oct 2026 09:57:37 GMT"},"fingerprint":{"sha1":"75:CD:C9:18:49:06:7B:DE:35:8C:74:34:2D:88:9C:66:56:85:39:3F","sha256":"E8:B4:97:2A:13:D1:14:AA:12:54:9C:39:0E:F9:57:49:B8:B3:CD:76:80:55:DF:45:E8:59:6E:3D:25:E3:FE:42"}}},"request":{"raw":"GET /8371-home_default/sweter-czarny-z-aplikacja-.jpg HTTP/1.1\r\nHost: bienfashion.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nCookie: PHPSESSID=3i417j132cqpnm5obqhji0mns3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 09 Sep 2026 19:03:39 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3887445981ba264-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 06 Jul 2026 12:18:58 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=604800; includeSubDomains, max-age=3600;\r\nvary: Accept\r\ncontent-security-policy: frame-ancestors 'self';\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AjN%2FV%2FMfGMQCnueE3qpWAqUkzcAm3JIZwVUUaDXD%2BilxqE9x%2Fr6ZnLDkaaUkGjjKaOrFnnvQamBL%2Bl%2FR5Sw606DP085AaYac6IvWTxmdE3Lwsi4IGx88l81T6uo5%2BtuK2Oj8\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 51918\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":51918,"size_decoded":52761,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 356x458, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ee497d6c6c62c85d66e64b03db37be12","sha1":"b94698551a1b702affadd7d281d083e63273879d","sha256":"2cff8d61a0c656475dceef437fc9a8fb279d26cec1f6cca9556cd12e82416d8b","sha512":"9df91db0b010d216ec099c5198047dec58ceafb147f851cd934c34b74cb730cb90040f5fc9a53d113b60901e51ef9c890dc48d0c9f97e5ee9e216b5f81abdd82","ssdeep":"768:VG7ZAhaTaxfpVS9gL+4LlDLWeVXTRfqGelZTNA10lxw+NIOVxJlZqP/Hvzbi9buO:VG7ZwTuEtL9XNMZTC0M+5jWvvv4u5RGb","tlshash":"2433f1193085c9c3bcdeb393baa19eed44a4252503ff19693d533d004d9fcb88754e6a","first_seen":"2026-09-09T19:04:34.892541Z","last_seen":"2026-09-09T19:04:34.892541Z","times_seen":1,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bienfashion.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bienfashion.live/8382-home_default/polo-fioletowe-z-aplikacja-.jpg","fqdn":"bienfashion.live","domain":"bienfashion.live","tld":"live"},"ip":{"addr":"172.67.142.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:44.285Z","timestamp":1788980624285,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bienfashion.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:59:57 GMT","end":"Tue, 13 Oct 2026 09:57:37 GMT"},"fingerprint":{"sha1":"75:CD:C9:18:49:06:7B:DE:35:8C:74:34:2D:88:9C:66:56:85:39:3F","sha256":"E8:B4:97:2A:13:D1:14:AA:12:54:9C:39:0E:F9:57:49:B8:B3:CD:76:80:55:DF:45:E8:59:6E:3D:25:E3:FE:42"}}},"request":{"raw":"GET /8382-home_default/polo-fioletowe-z-aplikacja-.jpg HTTP/1.1\r\nHost: bienfashion.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nCookie: PHPSESSID=3i417j132cqpnm5obqhji0mns3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 09 Sep 2026 19:03:44 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3887465dcb1a264-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nlast-modified: Tue, 07 Jul 2026 12:26:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=604800; includeSubDomains, max-age=3600;\r\nvary: Accept\r\ncontent-security-policy: frame-ancestors 'self';\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SvtAkfl04kK4EraggYZ%2BrN8bhn8HiANgNAtFhTEtnS42ib7WAUXVkHtoSAvIp2d9vZYEknijE%2FgxiIGYExdIxKTmjsT4m0BLElSLAqXq%2F8U%2Fz37h92YNL%2BN8Vmyrdvnrtk0t\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 45854\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45854,"size_decoded":46693,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 356x458, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"111cd315781beb65c016fc19d85d1c25","sha1":"d957e6cf971e5a500cbc0b8c42be9799dd58649c","sha256":"04464bcb309e5ed312dc8eb5a40b4a184384dab88f1952d35b392727a9e2bdec","sha512":"629b2d2b0de4f331a48cf9c3322ab7c0cfb2c69f33fc6b17fcf8a361368b775e5f3ad05f80c1d040272122e210595009755b9149a137bfbb7718c6bbb37e6d77","ssdeep":"768:vub1MG5kR8TsekdIPSTb0babdl09hudIYdf+rycvwcc5CwJeSO:KBORw2dLXqGIxrycvwDvJM","tlshash":"4223f1d67539eeb34859995830edaebbb40c80b2282b7dde659c51f1eb4ca740f4dc02","first_seen":"2026-09-09T19:04:34.893582Z","last_seen":"2026-09-09T19:04:34.893582Z","times_seen":1,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bienfashion.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.payu.com/res/v2/widget-mini-installments.js","fqdn":"static.payu.com","domain":"payu.com","tld":"com"},"ip":{"addr":"108.157.214.87","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:33.539Z","timestamp":1788980613539,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.payu.com","organization":""},"issuer":{"commonName":"DigiCert G2 TLS EU RSA4096 SHA384 2022 CA1","organization":"DigiCert Ireland Limited"},"validity":{"start":"Fri, 13 Mar 2026 00:00:00 GMT","end":"Sun, 27 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"70:82:91:84:08:EF:A4:8A:5A:8C:A8:A1:09:F2:2B:ED:6D:8A:AD:1E","sha256":"E8:27:75:F3:B1:A1:5E:6D:AD:3D:D0:A4:02:E1:07:9D:F3:92:DB:CF:60:E6:32:1D:4B:45:92:B1:06:1C:F4:39"}}},"request":{"raw":"GET /res/v2/widget-mini-installments.js HTTP/1.1\r\nHost: static.payu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\ndate: Wed, 09 Sep 2026 19:02:00 GMT\r\ncontent-encoding: br\r\netag: W/\"3d139-65a02d53b2480\"\r\nlast-modified: Thu, 27 Aug 2026 08:07:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\ncache-control: max-age=600\r\nexpires: Wed, 09 Sep 2026 19:12:00 GMT\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 9fde400234236c10982fe8b8a3ca9eb2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P1\r\nx-amz-cf-id: ALxq7q3a2qTcXJrQRg9Qp11ATPw7N1s-lJBpNxW3_9QsjTEfA5blaw==\r\nage: 93\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":250169,"size_decoded":77225,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65295)","md5":"40f75d21e5c6a5e1ffe20472592f40f8","sha1":"2cb3422836be2d5ee56b746c3fcb6a09a64f044f","sha256":"04a1ed5625988ca32d9838c6a2c42dcd564328574f56049d4bd16b28e9624884","sha512":"067d71f03fe2a9bde5daf31e8f523d86e02eec62be26477504fa20345de67d37b7523335c7dd81d9393623219009adba3276f57b613839f4297d2c1aff2c3ed4","ssdeep":"3072:z7hUzu6zZj56t2HyTukC+Z/hccWH1PtieJoVlNyk5Utx3YFnte:BP0ZRyTukPZ/W/6ZlNDUtate","tlshash":"8c340bc97992f0b45ff21ae4c43f480af21b6a34640d98e1ebe7c8948469e4f5137b39","first_seen":"2026-09-09T19:04:34.894834Z","last_seen":"2026-10-12T10:18:27.487269Z","times_seen":4,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":10,"send":0,"wait":16,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bienfashion.live/img/cms/kafel.JPG","fqdn":"bienfashion.live","domain":"bienfashion.live","tld":"live"},"ip":{"addr":"172.67.142.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:34.064Z","timestamp":1788980614064,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bienfashion.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:59:57 GMT","end":"Tue, 13 Oct 2026 09:57:37 GMT"},"fingerprint":{"sha1":"75:CD:C9:18:49:06:7B:DE:35:8C:74:34:2D:88:9C:66:56:85:39:3F","sha256":"E8:B4:97:2A:13:D1:14:AA:12:54:9C:39:0E:F9:57:49:B8:B3:CD:76:80:55:DF:45:E8:59:6E:3D:25:E3:FE:42"}}},"request":{"raw":"GET /img/cms/kafel.JPG HTTP/1.1\r\nHost: bienfashion.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nCookie: PHPSESSID=3i417j132cqpnm5obqhji0mns3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 09 Sep 2026 19:03:34 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3887425fbf1a264-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Fri, 09 Oct 2026 19:03:34 GMT\r\nlast-modified: Mon, 20 Jul 2026 11:28:17 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=604800; includeSubDomains, max-age=3600;\r\ncontent-security-policy: frame-ancestors 'self';\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=URdH9CGV%2BW0RNR2WMNH050KcUva1GY0PX0NSgl3CpcsZ6Fsib4qmFCukk8%2FC%2F13xZfUZzwszBH0G4ajkIsyRupYrjcYq5%2BNquSpsMQC0XguS9lvqh3vs2OAg%2FPERyWeWr4ej\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 87081\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":87081,"size_decoded":87948,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T00:38:37.114452Z","times_seen":19109993,"resource_available":true,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bienfashion.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"credit-widget-config.payu.com/v2_0/65-4119842.json","fqdn":"credit-widget-config.payu.com","domain":"payu.com","tld":"com"},"ip":{"addr":"3.164.230.116","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:34.184Z","timestamp":1788980614184,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"credit-widget-config.payu.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sat, 04 Oct 2025 00:00:00 GMT","end":"Mon, 02 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"58:21:3A:01:38:BB:AD:D9:67:E2:B9:F8:BC:11:A2:53:3F:4F:B0:58","sha256":"33:43:ED:2A:01:7B:4B:7C:0F:83:11:B9:DB:A1:F8:C2:C7:57:A9:27:5C:CF:7A:B2:66:9A:FF:A8:07:08:C7:A5"}}},"request":{"raw":"GET /v2_0/65-4119842.json HTTP/1.1\r\nHost: credit-widget-config.payu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bienfashion.live/\r\nOrigin: https://bienfashion.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json\r\ndate: Wed, 09 Sep 2026 18:24:30 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\nlast-modified: Thu, 16 Jul 2026 13:25:49 GMT\r\netag: W/\"78f83210d657308ad79a0018e57e583d\"\r\nx-amz-server-side-encryption: AES256\r\nserver: AmazonS3\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 1cc96dfa269d8f804027fd4df8ad9ab2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P1\r\nx-amz-cf-id: LAZhK5LNjSpALLqQ8utlu9pzV9cOEKO9yTCiFmMarE91GPVdtBL25Q==\r\nage: 2345\r\ncache-control: max-age=3600\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":2541,"size_decoded":977,"mime_type":"application/json","magic":"JSON text data","md5":"78f83210d657308ad79a0018e57e583d","sha1":"44a0e2f443b0464db2a5e5290f3acecf2c584337","sha256":"aefe60c5ca1d1184cf706afde418cb4d4152358740429c0543c9103e13ff4b6a","sha512":"dc47e5381e2abc18a0e123a73cf8cb4bd26fcce3cf1aff0ad7244d043fab3996365f8848d0827479b018e2ddf33e668dc09ef21d65107e65e2e6cce3910bf3b4","ssdeep":"","tlshash":"525106a2281b0b3abc99473129b7225f98f7b2d65fd081fb04d282398357854da07f53","first_seen":"2026-09-09T19:04:34.895782Z","last_seen":"2026-09-09T19:04:34.895782Z","times_seen":1,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":31,"connect":8,"send":0,"wait":33,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/worksans/v24/QGYsz_wNahGAdqQ43Rh_cqDpp_k.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:34.153Z","timestamp":1788980614153,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/worksans/v24/QGYsz_wNahGAdqQ43Rh_cqDpp_k.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bienfashion.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 35716\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 09 Sep 2026 10:36:08 GMT\r\nexpires: Thu, 09 Sep 2027 10:36:08 GMT\r\ncache-control: public, max-age=31536000\r\nage: 30446\r\nlast-modified: Wed, 10 Sep 2025 16:23:36 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35716,"size_decoded":36528,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35716, version 1.0","md5":"9c3fdbf06f3b05e362bde7235e6e415c","sha1":"79db18a3dd6388f9efb5f8f5c60b4f4698e1294a","sha256":"2aa17fc7b072e46652e84bbe3dbba9ec57cdea320d89e8c951ed7cf3218c300b","sha512":"edad0357803afbddf8630a3ab569f64b8086f7dd794dc7d4c2f2359f38d008d65d0e3b725fbb194ad01ad170a9c01eb3feeb54187f08e8476afbb42186568083","ssdeep":"768:kDl5vZD7LSoDX/yEnXiBEeQu7lpWXPSWEHSXeB:kDfJx/y8iI6lpWXKMuB","tlshash":"90f2e196337991f3e13af3aba208d0d722d742556e86af63c84815b1226d072f27df1c","first_seen":"2025-09-13T05:51:50.562267Z","last_seen":"2026-10-15T00:05:57.540798Z","times_seen":1272,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":18,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bienfashion.live/8369-home_default/komplet-brazowy-z-aplikacja-.jpg","fqdn":"bienfashion.live","domain":"bienfashion.live","tld":"live"},"ip":{"addr":"172.67.142.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:39.131Z","timestamp":1788980619131,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bienfashion.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:59:57 GMT","end":"Tue, 13 Oct 2026 09:57:37 GMT"},"fingerprint":{"sha1":"75:CD:C9:18:49:06:7B:DE:35:8C:74:34:2D:88:9C:66:56:85:39:3F","sha256":"E8:B4:97:2A:13:D1:14:AA:12:54:9C:39:0E:F9:57:49:B8:B3:CD:76:80:55:DF:45:E8:59:6E:3D:25:E3:FE:42"}}},"request":{"raw":"GET /8369-home_default/komplet-brazowy-z-aplikacja-.jpg HTTP/1.1\r\nHost: bienfashion.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nCookie: PHPSESSID=3i417j132cqpnm5obqhji0mns3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 09 Sep 2026 19:03:39 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3887445a81ea264-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 06 Jul 2026 11:47:36 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=604800; includeSubDomains, max-age=3600;\r\nvary: Accept\r\ncontent-security-policy: frame-ancestors 'self';\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KhuRaHpzUhDupG7Zz%2BBmzPpHR4UGdkxpZE4uO4ptBtyCNqxWY0VvT6sANWrM%2BNvmbqnhA%2B%2FS5tDue%2B5E%2FBbUbL17pssYhKi%2FXXPx%2Ft8%2BJ3I58VRF%2FqtH2B8hZYiJDNXIYLXb\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 42666\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42666,"size_decoded":43515,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 356x458, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"199641ec16c2d1789b60c71c270741d8","sha1":"5ef18559fa0ffca9762a3108ed0241fa2a4203d7","sha256":"f72176a30a4385fbb5ffa90f66206695f388997f5077a9a22ef4781e0fa085ce","sha512":"37050b204dded2e0080000d75d9e4b136df0d08df880b669d5a852f67d5d779f3c092b87ffc32538104ea997a2451232ea931c86607dffa9ed03ac49288fc013","ssdeep":"768:WaihQAcN1ulP5rA1btkDY0HulP3VJ6ol7K7YV0i6fa/jrFghkz9oIB7HcAxJTsqa:gcNMlP5rA5tIY0HWPTpl7K70MQi+z9RE","tlshash":"241302100d5172b5163929ddc902ca1e3ab80d925fb771db1a57f7a6fc3f0e5e6a0a80","first_seen":"2026-09-09T19:04:34.898198Z","last_seen":"2026-09-09T19:04:34.898198Z","times_seen":1,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bienfashion.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bienfashion.live/8318-home_default/elegancka-sukienka-malinowa-czerwien-diana-.jpg","fqdn":"bienfashion.live","domain":"bienfashion.live","tld":"live"},"ip":{"addr":"172.67.142.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:39.135Z","timestamp":1788980619135,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bienfashion.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:59:57 GMT","end":"Tue, 13 Oct 2026 09:57:37 GMT"},"fingerprint":{"sha1":"75:CD:C9:18:49:06:7B:DE:35:8C:74:34:2D:88:9C:66:56:85:39:3F","sha256":"E8:B4:97:2A:13:D1:14:AA:12:54:9C:39:0E:F9:57:49:B8:B3:CD:76:80:55:DF:45:E8:59:6E:3D:25:E3:FE:42"}}},"request":{"raw":"GET /8318-home_default/elegancka-sukienka-malinowa-czerwien-diana-.jpg HTTP/1.1\r\nHost: bienfashion.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nCookie: PHPSESSID=3i417j132cqpnm5obqhji0mns3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 09 Sep 2026 19:03:39 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3887445a820a264-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nlast-modified: Wed, 20 May 2026 10:55:54 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=604800; includeSubDomains, max-age=3600;\r\nvary: Accept\r\ncontent-security-policy: frame-ancestors 'self';\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TXK5JRXg6mEkDnMiijPEDSfGFWOBd4BaepYAiWKfg0hNUheQkmSRjpbQIUeYggllkMatBZkR47OLZpAWt5u81poyjgxTkqSIH4i3%2FjtjT%2BKs6NyEoqLcCE0xz8FYt%2Bv9Rawp\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 58672\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58672,"size_decoded":59507,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3c228dddbdcb097024f3d91e849fc641","sha1":"3766c76004ecd43234aea0fd327004a10caebcfb","sha256":"adb2ade6c3761433868dbf285b18fed110a29be6951f55b43c809f36835ff050","sha512":"5943cb4da5ad24f91286c9c03637706ad3041ed3c3214716ed132d10bea14c84c8d6b361071d17bc6894c6db1279e580a97ea66aea92c3bfb00aa9903165b306","ssdeep":"1536:Kuyi7jnjjWkVwcj3pHdGG3IbTTDOOhg0evQGcvCTjbbKXD:Kuyi7jjbTlHdGG4Pbgn9c6bGXD","tlshash":"1843f1b5200b2141c749f84ce4c67721c256aee197c172a2da32ef5edebe94b7b0d244","first_seen":"2026-09-09T19:04:34.899525Z","last_seen":"2026-09-09T19:04:34.899525Z","times_seen":1,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bienfashion.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bienfashion.live/modules/revsliderprestashop/admin/assets/images/dummy.png","fqdn":"bienfashion.live","domain":"bienfashion.live","tld":"live"},"ip":{"addr":"172.67.142.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:33.553Z","timestamp":1788980613553,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bienfashion.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:59:57 GMT","end":"Tue, 13 Oct 2026 09:57:37 GMT"},"fingerprint":{"sha1":"75:CD:C9:18:49:06:7B:DE:35:8C:74:34:2D:88:9C:66:56:85:39:3F","sha256":"E8:B4:97:2A:13:D1:14:AA:12:54:9C:39:0E:F9:57:49:B8:B3:CD:76:80:55:DF:45:E8:59:6E:3D:25:E3:FE:42"}}},"request":{"raw":"GET /modules/revsliderprestashop/admin/assets/images/dummy.png HTTP/1.1\r\nHost: bienfashion.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nCookie: PHPSESSID=3i417j132cqpnm5obqhji0mns3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 09 Sep 2026 19:03:33 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3887422cafca264-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 10 Oct 2022 10:14:39 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=604800; includeSubDomains, max-age=3600;\r\nvary: Accept\r\ncontent-security-policy: frame-ancestors 'self';\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N82FJ20mjHaYzYOnaq0XnELqfBixdbEQtosivYvhlzgRpnCxBCJzH13uSn1urt%2B0ZP2OYOBu7cSnPPF%2FnY9m50npRDG6NHePSyj5EaN%2FVXhDHiG5%2FpUC1k%2FLMxVvYs9KNyXi\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 34\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34,"size_decoded":870,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cda661faf5e60e281e5f56067e7909db","sha1":"324a0323af79f3142387d4761198f9ace2d78b3d","sha256":"86be52bdb7547413cafb3ed175a806a798c65de98b40849e0b974c47d187de65","sha512":"0aafb51004529f0c0bce5edf61235ba8da9eddc9be7e7395647bc307049fe820f20848bbb9b4e4370440eadfc70bf6d0412af95db230d4c54999c22d5b85e8c5","ssdeep":"","tlshash":"5780041c437044054d151c1f115007d1c01500041041c5c11451045d0750714333453d","first_seen":"2023-04-07T00:29:15Z","last_seen":"2026-10-14T23:04:39.407026Z","times_seen":4065,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bienfashion.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bienfashion.live/5329-home_default/czarna-sukienka-.jpg","fqdn":"bienfashion.live","domain":"bienfashion.live","tld":"live"},"ip":{"addr":"172.67.142.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:44.298Z","timestamp":1788980624298,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bienfashion.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:59:57 GMT","end":"Tue, 13 Oct 2026 09:57:37 GMT"},"fingerprint":{"sha1":"75:CD:C9:18:49:06:7B:DE:35:8C:74:34:2D:88:9C:66:56:85:39:3F","sha256":"E8:B4:97:2A:13:D1:14:AA:12:54:9C:39:0E:F9:57:49:B8:B3:CD:76:80:55:DF:45:E8:59:6E:3D:25:E3:FE:42"}}},"request":{"raw":"GET /5329-home_default/czarna-sukienka-.jpg HTTP/1.1\r\nHost: bienfashion.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nCookie: PHPSESSID=3i417j132cqpnm5obqhji0mns3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 09 Sep 2026 19:03:44 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3887465ecbba264-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nlast-modified: Tue, 05 Nov 2024 08:27:10 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=604800; includeSubDomains, max-age=3600;\r\nvary: Accept\r\ncontent-security-policy: frame-ancestors 'self';\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9je87d7sOBf6GRPtOmB58jwqmrx4GY1wa9CahIEGMU6HV9s%2FcysbY4Mf4LruyKtKuMroXMVQy47JDrKZU0mLo%2FYeWhPRLf3seiI6hFs6awBy7YNNUKqgCW3%2BNEjfUjOO%2Bequ\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 24374\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24374,"size_decoded":25211,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 356x458, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9a3ed001f0b16d9815c68629474c5d76","sha1":"3c03b632fff8289ced862f2e3f8e1e8330000a78","sha256":"9d9abf40ffe54818bbc282c2f8a81ad8001d06890f5c702bd47665499135f026","sha512":"b3c914ca872a26563d8d614041b59efa700baf0a943a678215eb2976fbb52c4935b3ea4d512141b1bb53d814beafee6b9d61830596e29f1fad28d8bf301b5328","ssdeep":"384:2yCVq2uOx6i5cfMlXj1/yNqekz7fD2ObZ0tNdHmfHtndz7VSpw38wJ02nNQNvDwW:qVqRg6i5cfM116/kz7qOGo/tn1VS63Za","tlshash":"7ab2d0d0c03b31cebe2f66dd7943d3f43a8dc64d254896778089995cb28276f2e0ad58","first_seen":"2026-09-09T19:04:34.902243Z","last_seen":"2026-09-09T19:04:34.902243Z","times_seen":1,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bienfashion.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/worksans/v24/QGYsz_wNahGAdqQ43Rh_fKDp.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:34.151Z","timestamp":1788980614151,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/worksans/v24/QGYsz_wNahGAdqQ43Rh_fKDp.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bienfashion.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 50316\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 04 Sep 2026 20:41:08 GMT\r\nexpires: Sat, 04 Sep 2027 20:41:08 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:23:20 GMT\r\ncontent-type: font/woff2\r\nage: 426146\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":50316,"size_decoded":51129,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 50316, version 1.0","md5":"97b33529e13b04b2205144e28a17a1d6","sha1":"9eaf3fe571af16f72a84dbadc1fce0128dff4486","sha256":"1dd49afc07fb2231b2ff686cbf007725fb2742271bb1f28ebd98f22a0d817343","sha512":"ce731a26fac8fd5583137450138d71fc36a9a0c4b79257a5af74be21cc2773b6e3a1ead61055411ec1c2cc857b8b0e6cbc94971f5f0b51820b458d9146af89bf","ssdeep":"768:etWz8e4bJ7xYqUBOYPc1NmWL7TDGrAZrIzcbWomWEjoyW6Md/AE1wBje34U:eZdhUQN5ToAZrIz7uEjR7udw5e34U","tlshash":"a33301e2882ca65cfe1ba7f8c422cc65e3336044f63d461d5766ff6ee470605e83a016","first_seen":"2025-09-12T00:12:40.161531Z","last_seen":"2026-10-15T00:19:48.452288Z","times_seen":25915,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":30,"send":0,"wait":36,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/element/log?format=json\u0026hasfast=true\u0026authuser=0","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:44.692Z","timestamp":1788980624692,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"POST /element/log?format=json\u0026hasfast=true\u0026authuser=0 HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bienfashion.live/\r\nX-Goog-AuthUser: 0\r\nContent-Encoding: gzip\r\nContent-Type: application/binary\r\nContent-Length: 292\r\nOrigin: https://bienfashion.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":438,"data":"\u001f‹\b\u0000\u0000\u0000\u0000\u0000\u0000\u0003íTËnà \u0010ü\u0017ÎvÃÓàÜ\u0012'ý\tŒ,ªÐ\u0018\ta+¦9ôë\u000bVíÆ©û8WE«‘v\u00191°Ë®”(ó/Îý\u001aäZ\u0010ô\u000e¬³i\u0006•R\u0019\u0012\u001ceR\".D)`h!ø\u000fB`UéÏC\r|W¯'ó\u001f¾û—(¦.˜˜º\u001a`¶‡ÇÝ¡Ê!£ûœŠ\u001dÏËã#É\u000bL0ƒ\u0007ˆ*QE¢¬A\u001bB?l7›'kü³\u001eZÛù\u0007g¯fª@¤$¢Jv£\u0015‹¤¯ö¬C䏊-žiÉF\u0016æp\\“OŠ¥\u0011¼\u000f 9@2ŽÈÝ6™\u0003SoaöÁIÞ¬H\u0018\u0011\"\"Lˆcە±\tãµÃEûÁé`¶½\u003e›ÆuúԄ®±Þ\u0006«}5§ôŽÅQ1±”Ñ¥²Jëö“~\u001a\"ðëJ¡4\u000fÞ\u0007\u0001Žƒ ToqÊܕ…\u0004\u0000\u0000"}},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: https://bienfashion.live\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: X-Playlog-Web\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-encoding: gzip\r\ndate: Wed, 09 Sep 2026 19:03:44 GMT\r\nserver: Playlog\r\ncontent-length: 131\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":131,"size_decoded":577,"mime_type":"text/plain; charset=UTF-8","magic":"JSON text data","md5":"ca0b7e866005f6774d284b9f438ebfd2","sha1":"53644f5ee3640189bdb223473ba6a2d46606c556","sha256":"502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358","sha512":"939c4526c623db033ad40bfdc6c8848a1dcd0ca797f17fbbd89fbec1b49dededc16e89084b3759e62fa0ffc8fe896980b10a1ff8daee22736a70b08f1ee13e2f","ssdeep":"","tlshash":"58c08c50330469e1080e82c8c0026858228c903b46708cf10bbd68125d3234a1004854","first_seen":"2023-04-05T03:14:56Z","last_seen":"2026-10-15T00:38:36.882771Z","times_seen":616719,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bienfashion.live/8370-home_default/sweter-czarny-z-aplikacja-.jpg","fqdn":"bienfashion.live","domain":"bienfashion.live","tld":"live"},"ip":{"addr":"172.67.142.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:39.124Z","timestamp":1788980619124,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bienfashion.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:59:57 GMT","end":"Tue, 13 Oct 2026 09:57:37 GMT"},"fingerprint":{"sha1":"75:CD:C9:18:49:06:7B:DE:35:8C:74:34:2D:88:9C:66:56:85:39:3F","sha256":"E8:B4:97:2A:13:D1:14:AA:12:54:9C:39:0E:F9:57:49:B8:B3:CD:76:80:55:DF:45:E8:59:6E:3D:25:E3:FE:42"}}},"request":{"raw":"GET /8370-home_default/sweter-czarny-z-aplikacja-.jpg HTTP/1.1\r\nHost: bienfashion.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nCookie: PHPSESSID=3i417j132cqpnm5obqhji0mns3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 09 Sep 2026 19:03:39 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a38874459819a264-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 06 Jul 2026 12:18:08 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=604800; includeSubDomains, max-age=3600;\r\nvary: Accept\r\ncontent-security-policy: frame-ancestors 'self';\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B%2BSXXX1%2FHh7N8Y%2B0Ia1vcIR%2BRRZnAYGt3qRlJtjoHvJmPKF7OvB%2BpVQ%2FlPOOGJiZ4LZzLuh%2B9NQNdyhDa29zoyZIqWCmPKeSr76s08lXX%2F%2BZUAPjfdCfqXft7rBNbkHcdIKN\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 57202\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57202,"size_decoded":58051,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 356x458, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"42a4fc549e7d6112e24bf1edf34d7a99","sha1":"0e7525437a10d972c2c7b11417f6395b9b60b5c9","sha256":"61eb9d9e95d407a6a0e18aad8ff6a328b4aebc168a92fdf3a4580ef610395bac","sha512":"194d11a5f263a749cf35eab53b0cec6c12bd0f43a14e1d3460e4bf38689673d56f33d726b2e9317afef2e0acf9855fbed9a22cd23f22f6d9f61e191a69e1693e","ssdeep":"1536:+IlQN+cihjM2qjMD93MmPfrS8ZHKdnTCMSnqjb5:+Ia+c2MCD1MmQOMSm5","tlshash":"5343017bfac8c29a1c35446cdb52169e253f94be75786826cdf0b0ed2088092fc78789","first_seen":"2026-09-09T19:04:34.913346Z","last_seen":"2026-09-09T19:04:34.913346Z","times_seen":1,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bienfashion.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bienfashion.live/5591-home_default/bluzka-czerwona-z-satyny-roz.jpg","fqdn":"bienfashion.live","domain":"bienfashion.live","tld":"live"},"ip":{"addr":"172.67.142.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:39.144Z","timestamp":1788980619144,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bienfashion.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:59:57 GMT","end":"Tue, 13 Oct 2026 09:57:37 GMT"},"fingerprint":{"sha1":"75:CD:C9:18:49:06:7B:DE:35:8C:74:34:2D:88:9C:66:56:85:39:3F","sha256":"E8:B4:97:2A:13:D1:14:AA:12:54:9C:39:0E:F9:57:49:B8:B3:CD:76:80:55:DF:45:E8:59:6E:3D:25:E3:FE:42"}}},"request":{"raw":"GET /5591-home_default/bluzka-czerwona-z-satyny-roz.jpg HTTP/1.1\r\nHost: bienfashion.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nCookie: PHPSESSID=3i417j132cqpnm5obqhji0mns3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 09 Sep 2026 19:03:39 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3887445b829a264-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nlast-modified: Tue, 05 Nov 2024 10:14:19 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=604800; includeSubDomains, max-age=3600;\r\nvary: Accept\r\ncontent-security-policy: frame-ancestors 'self';\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XrpzQ8s6whcAwe5v2khfwZ84c4RyEEGfA736qPRqEPcPY4aIIkXCDo%2BtzBgTGS1CCPezLKAfDSEN1x4xUeugP83qmxVkwTfkDVuRvjuRs4OFIHCNtIRP2clx7HMXTFWuXyo5\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 29392\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29392,"size_decoded":30223,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 356x458, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f4ae46024d1bcd294e64a953f39da2d8","sha1":"5c45bdb3e9075b28814da3fce19ec3c3e89d5955","sha256":"d1accd7dcd3efe714eaac31b4899315c80662a047f2afd1c0b9d7ad06b8ac198","sha512":"1e1720f783d5b59be7105ec54a7a825907cca0212531e7bb0f8de76f1fd49577b15a3563803c5f814921a0da69c6b55c7e96201d003d8814d83e9bebdb26327d","ssdeep":"384:ZbXE1WAYh/F6zp+ndQvTpBh3Rm1uENoJe4k7ZK5p44WiLwG7hRLTEKl/tAAnEbyD:Zb00PhwzcuFBfpEWJev7WUGL0ylD","tlshash":"0cd2f18a1f0212ca52509dff5281ed36d653ca82fadcde912485b1d4f4196af0f0b56f","first_seen":"2026-09-09T19:04:34.914644Z","last_seen":"2026-09-09T19:04:34.914644Z","times_seen":1,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bienfashion.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bienfashion.live/5285-home_default/kombinezon-z-szerokimi-nogawkami-czarny-vivien-.jpg","fqdn":"bienfashion.live","domain":"bienfashion.live","tld":"live"},"ip":{"addr":"172.67.142.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:44.306Z","timestamp":1788980624306,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bienfashion.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:59:57 GMT","end":"Tue, 13 Oct 2026 09:57:37 GMT"},"fingerprint":{"sha1":"75:CD:C9:18:49:06:7B:DE:35:8C:74:34:2D:88:9C:66:56:85:39:3F","sha256":"E8:B4:97:2A:13:D1:14:AA:12:54:9C:39:0E:F9:57:49:B8:B3:CD:76:80:55:DF:45:E8:59:6E:3D:25:E3:FE:42"}}},"request":{"raw":"GET /5285-home_default/kombinezon-z-szerokimi-nogawkami-czarny-vivien-.jpg HTTP/1.1\r\nHost: bienfashion.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nCookie: PHPSESSID=3i417j132cqpnm5obqhji0mns3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 09 Sep 2026 19:03:44 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3887465fcc3a264-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nlast-modified: Tue, 05 Nov 2024 07:56:33 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=604800; includeSubDomains, max-age=3600;\r\nvary: Accept\r\ncontent-security-policy: frame-ancestors 'self';\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jXYjuObmiXBMzZa%2BVv1nqnM7GuQ7%2Fguz%2BMGo4juY9jlStVPR50wNOIWkiutqcx4YH6iDBG0GUTchV%2Bel%2FZ71oA86FwQozPw0SZg4q%2FzFxV8edfgZYctkkAfBreD7kjONSpif\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 23990\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23990,"size_decoded":24831,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 356x458, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"49957f941af792ce9136e6ac73d19f69","sha1":"8e764e007674b26eab02c0d4844e8ee4c6c1bff6","sha256":"260a5d118fc95e0598285c9361fa4befeea85b09dd9d9c84ceaf213a16b35f13","sha512":"774c0e963ab4969e30715296a68f79329cf556013817a3b97cfa78f0cf4da3a8bc01bdb9468a6d15d697bcc1922684c7ac803a6dbf991661be98ab4fcb1a370c","ssdeep":"384:GnOXhSSNdGeIdN6WMy2gxPf3ffT+zdEiKiRHJdpkD8lG2wWXFF244/LMfxup:GnXgdFIniy2gxPfv7AdH1RH7w9HE/AMG","tlshash":"deb2e1a3b27bd9a5c56b76014d903288816a4952eb566f3a70f0c61b1d313dfea82d03","first_seen":"2026-09-09T19:04:34.915689Z","last_seen":"2026-09-09T19:04:34.915689Z","times_seen":1,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bienfashion.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bienfashion.live/themes/warehouse/assets/css/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0","fqdn":"bienfashion.live","domain":"bienfashion.live","tld":"live"},"ip":{"addr":"172.67.142.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:33.515Z","timestamp":1788980613515,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bienfashion.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:59:57 GMT","end":"Tue, 13 Oct 2026 09:57:37 GMT"},"fingerprint":{"sha1":"75:CD:C9:18:49:06:7B:DE:35:8C:74:34:2D:88:9C:66:56:85:39:3F","sha256":"E8:B4:97:2A:13:D1:14:AA:12:54:9C:39:0E:F9:57:49:B8:B3:CD:76:80:55:DF:45:E8:59:6E:3D:25:E3:FE:42"}}},"request":{"raw":"GET /themes/warehouse/assets/css/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1\r\nHost: bienfashion.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bienfashion.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=3i417j132cqpnm5obqhji0mns3\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 09 Sep 2026 19:03:33 GMT\r\ncontent-type: font/woff2\r\npriority: u=2,i=?0\r\ncf-ray: a38874228aeaa264-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000\r\nexpires: Thu, 09 Sep 2027 19:03:33 GMT\r\nlast-modified: Thu, 05 Aug 2021 08:16:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=604800; includeSubDomains, max-age=3600;\r\ncontent-security-policy: frame-ancestors 'self';\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1aiyemaRwmo5CGtfobCPmdZLbgiexGVds3hmYUG%2BYAUZpPlt9utI9DRPwBQNZT3QQORB0CEuQcUVFGlI%2Fd9JIdum5Q3zpR4V4mOHLOgTOAYxm4M5UiPcg3UicAZhelRLVKri\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 77160\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77160,"size_decoded":78057,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 77160, version 4.459","md5":"af7ae505a9eed503f8b8e6982036873e","sha1":"d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c","sha256":"2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe","sha512":"838fefdbc14901f41edf995a78fdac55764cd4912ccb734b8bea4909194582904d8f2afdf2b6c428667912ce4d65681a1044d045d1bc6de2b14113f0315fc892","ssdeep":"1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2","tlshash":"7d7302e63b6c4943e03d6460708abe9f104b3ab42fe057e5c876db7f2722992b71552c","first_seen":"2023-04-05T03:30:47Z","last_seen":"2026-10-15T00:25:18.410386Z","times_seen":554197,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bienfashion.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:34.730Z","timestamp":1788980614730,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/i/productlogos/translate/v14/24px.svg HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ncontent-length: 3340\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 04 Sep 2026 08:23:15 GMT\r\nexpires: Sat, 04 Sep 2027 08:23:15 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 20 Apr 2022 14:24:23 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nage: 470420\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6225,"size_decoded":4178,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2bd5c073a88b83ed74db88282a56ddfb","sha1":"d0ebfc376f8c6a44a8d4cd216817dcd7d0c33650","sha256":"ab5c23a05e39deed14d9d8262b0dce9f024f86105a27196cad37d14a3f516e09","sha512":"5c6c4a92e93fc0f6a675658cc84f6187fdebd3eee94efd07e24658736cba598f3bc7156b19834b13fb44c1d43fcb7df9fcca7f0a453037e30da76ba8f4b23b89","ssdeep":"96:+R2K3Z4n7tyVwip82hezk6227gLFoXhu1XuE20ot+pVY3YptWDzOzgXK3Zx:ql3KnxyGGMzb7noR20NTww33","tlshash":"c1d1e6f19309d815cd6a83d8cd9b8002aa1f25ddd50ac6cc7639fb3bd1a50eb1d2d7a4","first_seen":"2023-04-06T21:34:37Z","last_seen":"2026-10-14T23:45:54.205804Z","times_seen":100233,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bienfashion.live/5590-home_default/bluzka-czerwona-z-satyny-roz.jpg","fqdn":"bienfashion.live","domain":"bienfashion.live","tld":"live"},"ip":{"addr":"172.67.142.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:39.146Z","timestamp":1788980619146,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bienfashion.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:59:57 GMT","end":"Tue, 13 Oct 2026 09:57:37 GMT"},"fingerprint":{"sha1":"75:CD:C9:18:49:06:7B:DE:35:8C:74:34:2D:88:9C:66:56:85:39:3F","sha256":"E8:B4:97:2A:13:D1:14:AA:12:54:9C:39:0E:F9:57:49:B8:B3:CD:76:80:55:DF:45:E8:59:6E:3D:25:E3:FE:42"}}},"request":{"raw":"GET /5590-home_default/bluzka-czerwona-z-satyny-roz.jpg HTTP/1.1\r\nHost: bienfashion.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nCookie: PHPSESSID=3i417j132cqpnm5obqhji0mns3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 09 Sep 2026 19:03:39 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3887445b82ca264-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nlast-modified: Tue, 05 Nov 2024 10:13:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=604800; includeSubDomains, max-age=3600;\r\nvary: Accept\r\ncontent-security-policy: frame-ancestors 'self';\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WdKrSNY%2BqOd3ljw0hmS%2FRkvmHEI2aszABpUDpi7eD5tfZ8D18h%2BkYJ5V3hRGRnvjEM52D7%2BUwCDY15XhRkeWR0NKRkD9Jw49I528iPKQow29693aNrxNAEgxS8jPfC%2FLaqUM\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 40912\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40912,"size_decoded":41751,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 356x458, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f668545dc1874b38db7c204159fb4fe3","sha1":"75d415605e8d886c2f5dbdd83ffd6a34430e585e","sha256":"444045ff7f23c0b28b3fbf761f73cf5197baec9c858ef63c2a06c132bf95f83b","sha512":"f21278e0efbf01f282aca2cb22764f578725c715837f2182a371ae5e94a1a5b7374a818ca9ca9e69f13c9f3fc950a70ed52cc0e4595c813dd44ecb08294d35a3","ssdeep":"768:LwgSUB4M7ND1IlQLu5hfKq+9WG93tFgSg/7cxPvl9S5fI8A615dTs89tREr+JL4g:LwTUqM7F1UXSoWdFg/YLY9AC5dT9kr+L","tlshash":"12030208952ebc851486a313844abbf57214096ff12a7e5b404e974acfcf7339d76d31","first_seen":"2026-09-09T19:04:34.917965Z","last_seen":"2026-09-09T19:04:34.917965Z","times_seen":1,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bienfashion.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bienfashion.live/themes/warehouse/assets/css/font-awesome/css/font-awesome-preload.css","fqdn":"bienfashion.live","domain":"bienfashion.live","tld":"live"},"ip":{"addr":"172.67.142.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:33.543Z","timestamp":1788980613543,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bienfashion.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:59:57 GMT","end":"Tue, 13 Oct 2026 09:57:37 GMT"},"fingerprint":{"sha1":"75:CD:C9:18:49:06:7B:DE:35:8C:74:34:2D:88:9C:66:56:85:39:3F","sha256":"E8:B4:97:2A:13:D1:14:AA:12:54:9C:39:0E:F9:57:49:B8:B3:CD:76:80:55:DF:45:E8:59:6E:3D:25:E3:FE:42"}}},"request":{"raw":"GET /themes/warehouse/assets/css/font-awesome/css/font-awesome-preload.css HTTP/1.1\r\nHost: bienfashion.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nCookie: PHPSESSID=3i417j132cqpnm5obqhji0mns3\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iMmKwXH0N66kXOKCQyVFcAagPa1QMUegckOinkxW%2Bi4kKENejiy53ci7Ce24YFV%2FSZKNXNgHpTxATatIA6VwGnrMGnNutCq%2FSkzrWsTI9EjLHjL%2BjRvvKCw65fhEjc98vnor\"}]}\r\ndate: Wed, 09 Sep 2026 19:03:33 GMT\r\ncontent-type: text/css\r\npriority: u=0,i=?0\r\ncf-ray: a3887422caf9a264-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nexpires: Wed, 16 Sep 2026 19:03:33 GMT\r\nlast-modified: Thu, 05 Aug 2021 08:16:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=604800; includeSubDomains, max-age=3600;\r\nvary: Accept-Encoding\r\ncontent-security-policy: frame-ancestors 'self';\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":41054,"size_decoded":8067,"mime_type":"text/css","magic":"troff or preprocessor input, ASCII text, with CRLF line terminators","md5":"1a83b75f8f55c72c027b5f257a343381","sha1":"f7c989ef7a10c197bc9be7483976d439fb72b614","sha256":"762655e66ed1524d18b5e01b0d721314b59afba51a99aea6bc043505bbac6b26","sha512":"8950a780cdb0d2aecc2b6539d444b1a1317374778648503f2c2a8d71ccde11235c9be09f8085b03b4665854e6eb978bcd45a38ffb94652dddf64f8c0e59f37fb","ssdeep":"384:SD/b8sHp58iK1yIdkxbTsbOvinZHwhBg2/AzVz7Fi7Ek:2b8sHv8iK19d0bT4OqpwhK2YzVz7FI","tlshash":"fd0300bcd91f00d24322dae197436242bb25763efe410c5df2a6a78c9be1126b185fdd","first_seen":"2023-05-05T22:34:04Z","last_seen":"2026-10-14T12:23:20.829872Z","times_seen":264,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bienfashion.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bienfashion.live/modules/iqitthemeeditor/views/css/iconfont/MaterialIcons-Regular.woff2","fqdn":"bienfashion.live","domain":"bienfashion.live","tld":"live"},"ip":{"addr":"172.67.142.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:33.909Z","timestamp":1788980613909,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bienfashion.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:59:57 GMT","end":"Tue, 13 Oct 2026 09:57:37 GMT"},"fingerprint":{"sha1":"75:CD:C9:18:49:06:7B:DE:35:8C:74:34:2D:88:9C:66:56:85:39:3F","sha256":"E8:B4:97:2A:13:D1:14:AA:12:54:9C:39:0E:F9:57:49:B8:B3:CD:76:80:55:DF:45:E8:59:6E:3D:25:E3:FE:42"}}},"request":{"raw":"GET /modules/iqitthemeeditor/views/css/iconfont/MaterialIcons-Regular.woff2 HTTP/1.1\r\nHost: bienfashion.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/themes/warehouse/assets/cache/theme-56b3501087.css\r\nCookie: PHPSESSID=3i417j132cqpnm5obqhji0mns3\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 09 Sep 2026 19:03:34 GMT\r\ncontent-type: font/woff2\r\npriority: u=3,i=?0\r\ncf-ray: a3887424fbaba264-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000\r\nexpires: Thu, 09 Sep 2027 19:03:34 GMT\r\nlast-modified: Thu, 05 Aug 2021 08:15:58 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=604800; includeSubDomains, max-age=3600;\r\ncontent-security-policy: frame-ancestors 'self';\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7Dfv%2BN256yUoET5bgFLCYhRyAeBOm6jX04x735bCYF%2BcgjAsEL3E0q4xoG053yRPzot9eILylnEzkre%2FXnrYHTDihNx0w3H7f8YC2rzRaWkquH6gs8uZGgEu5FaXy%2BVdKmYZ\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 42284\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42284,"size_decoded":43185,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 42284, version 1.524","md5":"81025269949a562d06d5e316f733b140","sha1":"ca9be93b6361611d5c8d50b6b2f80e54ca897243","sha256":"15b67505885b83b369db6a3b186026ca36f37cf0f3800f0daab994fd7120da90","sha512":"5db102a517b437b611d38fe1b024b23cf2b1eca7959620645f30f01da1da6cdeffe0afe0d33ac0ab95d65364047ecce77be95fae0122a8424b2d5ded8bd86ba3","ssdeep":"768:eWkK/zwP21jYhP9W572ZUq7Ls/aAunA240cGKoTdEAg4P5XqOFlqSwQ5Afkhj:eWcdi7yHC/unu0cnoxEOP4O2SSfkB","tlshash":"2f130195863d82afaf7890fc00692f376657c81596b99397f7c1f66809107b72038d4d","first_seen":"2023-04-24T09:21:36Z","last_seen":"2026-10-04T12:12:51.420763Z","times_seen":203,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bienfashion.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bienfashion.live/modules/revsliderprestashop/uploads/BESTSELLER-VIVIEN-slider.png","fqdn":"bienfashion.live","domain":"bienfashion.live","tld":"live"},"ip":{"addr":"172.67.142.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:34.804Z","timestamp":1788980614804,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bienfashion.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:59:57 GMT","end":"Tue, 13 Oct 2026 09:57:37 GMT"},"fingerprint":{"sha1":"75:CD:C9:18:49:06:7B:DE:35:8C:74:34:2D:88:9C:66:56:85:39:3F","sha256":"E8:B4:97:2A:13:D1:14:AA:12:54:9C:39:0E:F9:57:49:B8:B3:CD:76:80:55:DF:45:E8:59:6E:3D:25:E3:FE:42"}}},"request":{"raw":"GET /modules/revsliderprestashop/uploads/BESTSELLER-VIVIEN-slider.png HTTP/1.1\r\nHost: bienfashion.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nCookie: PHPSESSID=3i417j132cqpnm5obqhji0mns3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 09 Sep 2026 19:03:34 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a388742a9de5a264-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Fri, 09 Oct 2026 19:03:34 GMT\r\nlast-modified: Thu, 18 Jun 2026 10:30:05 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=604800; includeSubDomains, max-age=3600;\r\nvary: Accept\r\ncontent-security-policy: frame-ancestors 'self';\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FXn%2BvXfwypz9R53NRu47PBJ85%2B1G3FJDOiwIVai68oH%2BDew7f1JHxFnDR%2FOBm6ItGXEy1I3wRntYvQg1IXdjo7%2FbWZprVWDvK563RBu91AmbpVDT5Yc5HXcIga19uYfeKoIB\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2744023\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2744023,"size_decoded":2744905,"mime_type":"image/png","magic":"PNG image data, 1920 x 768, 8-bit/color RGB, non-interlaced","md5":"a9dd53b4d0062b76a044a224e2ca6731","sha1":"ffea695184c4bac1e45f5bb4a4b9b3ff145f3e6a","sha256":"c5de7409229da1c6575366bb1b5ff8c6b37cdccf93482e6aa86b867aea98e3a6","sha512":"5cf9fe44754eb2b282ea2b38d5e496e5d9c3d23604239be2b971ffdb07a340bf378edd9465673afb9bf319a5abe15cfdb8792c991839ccbbb85f45e7fe6ab466","ssdeep":"24576:9BZFrw7+pm0WC9k/2zAzqWBvPc7E9nGHzZFJFoGJCrdoURyeIvU:9Frwqp/q+RSvPc7EQzHJR0ZoBvU","tlshash":"312523e157d9ca89f94f31fd75813964a9a394ec822a18ce03f0c5f2a85fcd3942c57a","first_seen":"2026-09-09T19:04:34.920612Z","last_seen":"2026-09-09T19:04:34.920612Z","times_seen":1,"resource_available":false,"data":null}},"time_used":582,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":165,"receive":417,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bienfashion.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bienfashion.live/img/cms/vivien%20kavel.PNG","fqdn":"bienfashion.live","domain":"bienfashion.live","tld":"live"},"ip":{"addr":"172.67.142.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:34.067Z","timestamp":1788980614067,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bienfashion.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:59:57 GMT","end":"Tue, 13 Oct 2026 09:57:37 GMT"},"fingerprint":{"sha1":"75:CD:C9:18:49:06:7B:DE:35:8C:74:34:2D:88:9C:66:56:85:39:3F","sha256":"E8:B4:97:2A:13:D1:14:AA:12:54:9C:39:0E:F9:57:49:B8:B3:CD:76:80:55:DF:45:E8:59:6E:3D:25:E3:FE:42"}}},"request":{"raw":"GET /img/cms/vivien%20kavel.PNG HTTP/1.1\r\nHost: bienfashion.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nCookie: PHPSESSID=3i417j132cqpnm5obqhji0mns3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 09 Sep 2026 19:03:34 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a3887425fbf4a264-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Fri, 09 Oct 2026 19:03:34 GMT\r\nlast-modified: Mon, 20 Jul 2026 11:50:18 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=604800; includeSubDomains, max-age=3600;\r\ncontent-security-policy: frame-ancestors 'self';\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OV4Gcr78UKoBs%2Bk6WXdwSyOF1NxUWpz2KuahsFP1JSwkA7HmrO3fI9d4BMFCzLRt699etIm1e%2ButgbScCP8v9DKgCDDNSgXkFSDqEmDp9lHs40ufXK1wIl5xX4c4plGaPyFj\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 788803\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":788803,"size_decoded":789664,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T00:38:37.114452Z","times_seen":19109993,"resource_available":true,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":272,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bienfashion.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bienfashion.live/5288-home_default/kombinezon-z-szerokimi-nogawkami-czarny-vivien-.jpg","fqdn":"bienfashion.live","domain":"bienfashion.live","tld":"live"},"ip":{"addr":"172.67.142.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:44.307Z","timestamp":1788980624307,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bienfashion.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:59:57 GMT","end":"Tue, 13 Oct 2026 09:57:37 GMT"},"fingerprint":{"sha1":"75:CD:C9:18:49:06:7B:DE:35:8C:74:34:2D:88:9C:66:56:85:39:3F","sha256":"E8:B4:97:2A:13:D1:14:AA:12:54:9C:39:0E:F9:57:49:B8:B3:CD:76:80:55:DF:45:E8:59:6E:3D:25:E3:FE:42"}}},"request":{"raw":"GET /5288-home_default/kombinezon-z-szerokimi-nogawkami-czarny-vivien-.jpg HTTP/1.1\r\nHost: bienfashion.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nCookie: PHPSESSID=3i417j132cqpnm5obqhji0mns3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 09 Sep 2026 19:03:44 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3887465fcc7a264-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nlast-modified: Tue, 05 Nov 2024 07:57:54 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=604800; includeSubDomains, max-age=3600;\r\nvary: Accept\r\ncontent-security-policy: frame-ancestors 'self';\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t8BhKG8LP7SWaMmrI%2Frs316yTQ8OPiDizA33i6nCXe6iEh7Xne8XBSEoHtoonmfTvrhmqPKiTLsQhQwRBGiqG3ptlLsnnnXugOc3xNkuSp60vgYCeyb6go5dr0YZna7kU%2FrP\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 23638\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23638,"size_decoded":24471,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 356x458, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0f33877fd8c9bd55ed08e23d4419cc54","sha1":"00f623d72b77db8f4aa8fdd6ab33cfd05660a9c0","sha256":"d428e7c1a2a6cd285835d7eb4435c7e56230ed04edf82bc1c9f9825a7a652790","sha512":"314d4e3690fbca9999da68af672c911d3d504871e6cff10f41b7038621c1ac786b98d829ffdf672ffc8cdf2fdbd649f75980e4fdd7c026e6f388edab208a20b6","ssdeep":"384:uwG0ypnfL6QN6Wd5QdLF58norGH9imvxJvySZLleRfgN5c88jnWVDjvi8gkOxnP:uwzypf2QDydB598iCTvySZ5eaNe8qUDY","tlshash":"08b2d188c1f03a110c8efb17ae6245c94053375289ad86e323593f95de522ed7db97e8","first_seen":"2026-09-09T19:04:34.921644Z","last_seen":"2026-09-09T19:04:34.921644Z","times_seen":1,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bienfashion.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bienfashion.live/modules/revsliderprestashop/public/assets/js/extensions/revolution.extension.slideanims.min.js?version=5.4.8","fqdn":"bienfashion.live","domain":"bienfashion.live","tld":"live"},"ip":{"addr":"172.67.142.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:34.170Z","timestamp":1788980614170,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bienfashion.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:59:57 GMT","end":"Tue, 13 Oct 2026 09:57:37 GMT"},"fingerprint":{"sha1":"75:CD:C9:18:49:06:7B:DE:35:8C:74:34:2D:88:9C:66:56:85:39:3F","sha256":"E8:B4:97:2A:13:D1:14:AA:12:54:9C:39:0E:F9:57:49:B8:B3:CD:76:80:55:DF:45:E8:59:6E:3D:25:E3:FE:42"}}},"request":{"raw":"GET /modules/revsliderprestashop/public/assets/js/extensions/revolution.extension.slideanims.min.js?version=5.4.8 HTTP/1.1\r\nHost: bienfashion.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nCookie: PHPSESSID=3i417j132cqpnm5obqhji0mns3\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 09 Sep 2026 19:03:34 GMT\r\ncontent-type: text/javascript\r\npriority: u=3,i=?0\r\ncf-ray: a3887426ac63a264-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nexpires: Wed, 16 Sep 2026 19:03:34 GMT\r\nlast-modified: Thu, 05 Aug 2021 08:16:03 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=604800; includeSubDomains, max-age=3600;\r\nvary: Accept-Encoding\r\ncontent-security-policy: frame-ancestors 'self';\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JOvsmVs%2FA5km1ZA7rK63m5FwWTwVshESFb2ijswtBUH5v8CmVyJAbpEQZ6iIhEPDGps%2FGioGA8jXDGSoGLktEPwyo3TdKhG3kuUcH4d59seakdmVSUebXqzItZkGbB9UK21M\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6880\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29070,"size_decoded":7794,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (28818), with CRLF line terminators","md5":"10f428f59d120bf8adbc39b86d547a2f","sha1":"fe92af104d1ca10761ec932fdd2da77f759286d4","sha256":"e0a244f4ace8e695c3aa03697b9dd349f5f1abbae8974d87e879274808305595","sha512":"3bafcd76864c4c246fa0b9727c6f1ced4f54f4b82fd5c8009924f2049e4f713661df77aa52727e4f7da1459713ceea1b0b7467e9ef3905cdc479d0a828cba3cd","ssdeep":"384:D1mxyUdZTo/ApwEN8vrISE3cXwfFWUDjZgTwTK+pYq1s0X37keYuL79+9fNMze5l:apwEN8wcXwfFWUDj26pi27keYgcR","tlshash":"f2d2f8dfea264c6280532142d3f589162219c977fe326fda37e9d0b505d301e22fbd9a","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-10-14T23:15:50.976378Z","times_seen":4089,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bienfashion.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bienfashion.live/img/cms/kafel%20komplet%20.JPG","fqdn":"bienfashion.live","domain":"bienfashion.live","tld":"live"},"ip":{"addr":"172.67.142.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:34.063Z","timestamp":1788980614063,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bienfashion.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:59:57 GMT","end":"Tue, 13 Oct 2026 09:57:37 GMT"},"fingerprint":{"sha1":"75:CD:C9:18:49:06:7B:DE:35:8C:74:34:2D:88:9C:66:56:85:39:3F","sha256":"E8:B4:97:2A:13:D1:14:AA:12:54:9C:39:0E:F9:57:49:B8:B3:CD:76:80:55:DF:45:E8:59:6E:3D:25:E3:FE:42"}}},"request":{"raw":"GET /img/cms/kafel%20komplet%20.JPG HTTP/1.1\r\nHost: bienfashion.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nCookie: PHPSESSID=3i417j132cqpnm5obqhji0mns3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 09 Sep 2026 19:03:34 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3887425fbf0a264-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Fri, 09 Oct 2026 19:03:34 GMT\r\nlast-modified: Mon, 20 Jul 2026 11:42:36 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=604800; includeSubDomains, max-age=3600;\r\ncontent-security-policy: frame-ancestors 'self';\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lyrg%2Bj3zGRMLe6fVcJyxTWoRGTNd8fgolEPIL1oS67amSSdmo27T3h3YwODo754bDKMeRsijjK2lnU1MkUOJh%2BcOfKHEwlxwoBB3bbf0QsnLtDSXRJIE7ZfUJKpqC248ZLjb\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 80407\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80407,"size_decoded":81268,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T00:38:37.114452Z","times_seen":19109993,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bienfashion.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BECAAQ/d=0/rs=AN8SPfrzHf-2T7wal-G0YeaqSuEl3yfBrA/m=el_main_css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:34.728Z","timestamp":1788980614728,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BECAAQ/d=0/rs=AN8SPfrzHf-2T7wal-G0YeaqSuEl3yfBrA/m=el_main_css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 3967\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 03 Sep 2026 23:15:29 GMT\r\nexpires: Fri, 03 Sep 2027 23:15:29 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 09 Apr 2026 01:12:55 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 503285\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20284,"size_decoded":4799,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (20284), with no line terminators","md5":"fde4f72b90fe807270db3c332dd058df","sha1":"7ef4d70af01c38a7f80a7650be25f63aff4ba751","sha256":"ab31c9be358d2107fc1158434c7aeaaf15f82e3e405ed67ab236b5ac232ed159","sha512":"9bef39350af557afeb10cb71068426ab28befaf5295359954787be06a5ce0993d69e8f5018a5a17c44311d294dd1a87a6f82edd0f5743df0149b8e4e53061695","ssdeep":"192:nvqx/EhZINcrXsfg0SgG8CqA3uku9SJFzvQVMbnUIfIxIVVpTrecfzPtcmt4v78l:gMF8Sb3i0JFzourUqWMVpTrdfzPtcBG","tlshash":"c492872057aed01967efa82364d36dff71d444db90123eeaaf5a7352cd821f231ea214","first_seen":"2026-04-13T20:43:22.641436Z","last_seen":"2026-10-14T23:45:54.196147Z","times_seen":40899,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bienfashion.live/","fqdn":"bienfashion.live","domain":"bienfashion.live","tld":"live"},"ip":{"addr":"172.67.142.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-09T19:03:29.007Z","timestamp":1788980609007,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bienfashion.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:59:57 GMT","end":"Tue, 13 Oct 2026 09:57:37 GMT"},"fingerprint":{"sha1":"75:CD:C9:18:49:06:7B:DE:35:8C:74:34:2D:88:9C:66:56:85:39:3F","sha256":"E8:B4:97:2A:13:D1:14:AA:12:54:9C:39:0E:F9:57:49:B8:B3:CD:76:80:55:DF:45:E8:59:6E:3D:25:E3:FE:42"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bienfashion.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 09 Sep 2026 19:03:33 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncf-ray: a388741d5a945c52-CPH\r\ncf-cache-status: DYNAMIC\r\ncache-control: no-store, no-cache, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nserver: cloudflare\r\nset-cookie: PHPSESSID=3i417j132cqpnm5obqhji0mns3; expires=Tue, 08-Jun-2083 14:07:05 GMT; Max-Age=1790708612; path=/; secure; HttpOnly; SameSite=Lax\nPrestaShop-174b0bddf27351720ac335367f2907ba=def5020073b6b7eb15494fec80c76868d2e4d3c442b34bfe854af7b23c86c4a58ff245e3a2195603b860d04ae0eea53a5c45ba2209e43c1707eac9bac71de775e4b9ada6322b7c149c2a932493a205a3f67c42ec1a4743190d2fb0b4d47fd1bf5904b97b842e95a6c646401ad8b020de5cc42e19f00bc967996cb54d194b0d4cd3a49b1f44a37066267014e06ae59edaaf4713ba7aecc7599b45c3dd153b0fd1f145503c8b179c192421e02e13c11b1b9c45139d00fa9ea88d0ef7e4019a95b75ae67cab1924a68f5a434de114d6414ddf75236ed5; expires=Tue, 29-Sep-2026 19:03:32 GMT; Max-Age=1727999; path=/; domain=bienfashion.pl; secure; HttpOnly; SameSite=Lax\nPrestaShop-174b0bddf27351720ac335367f2907ba=def50200ea452cb35b3e0ea016dc102c4dfdd953f4d278f71c1fc37ffc7a73d975e63f76198456de23570f29559968c8fd39fbdbe9afbe12261c0fe2380ee581a99f476b9b22c47d9fd4b9d5c3a2403b26efcbf11a85b9551353d343083664c37ae4512d8f7bb8dfad704646ef9c40c9cc7b4cfad285d43e4caeba6d8cb48026ae7f4655c7597803c5f0b66d925c9f535f69ad95c6b608502df6ec971569b892323b311f9d9e3082e7778a4e2ed2371853f3e81d4f6bb1ae73a319c882fa25142f590ad0b77ad24c0aa2439bb6386fa5f14177e0901f30ff996fbaec83de1bcf82; expires=Tue, 29-Sep-2026 19:03:32 GMT; Max-Age=1727999; path=/; domain=bienfashion.pl; secure; HttpOnly; SameSite=Lax\r\nstrict-transport-security: max-age=604800; includeSubDomains, max-age=3600;\r\nvary: Accept-Encoding\r\npragma: no-cache\r\ncontent-security-policy: frame-ancestors 'self';\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NLSapZ3ty4gfxoa8ZIM7Hq6TmLcVUoiebYQfK66hmRyPf7g42oUhpFERpsLh4Cxh7rP%2BbcLf%2Fe6tupXHLCS9eehZd4r0dWFCMq4TQcawX6caJesk5qBQyq9N%2FcKu%2BfhdU2go\"}]}\r\ncontent-encoding: zstd\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"3i417j132cqpnm5obqhji0mns3","quoted":false,"path":"/","expires":"2083-06-08T14:07:05Z","raw_expires":"Tue, 08-Jun-2083 14:07:05 GMT","max_age":1790708612,"secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"PHPSESSID=3i417j132cqpnm5obqhji0mns3; expires=Tue, 08-Jun-2083 14:07:05 GMT; Max-Age=1790708612; path=/; secure; HttpOnly; SameSite=Lax"},{"name":"PrestaShop-174b0bddf27351720ac335367f2907ba","value":"def5020073b6b7eb15494fec80c76868d2e4d3c442b34bfe854af7b23c86c4a58ff245e3a2195603b860d04ae0eea53a5c45ba2209e43c1707eac9bac71de775e4b9ada6322b7c149c2a932493a205a3f67c42ec1a4743190d2fb0b4d47fd1bf5904b97b842e95a6c646401ad8b020de5cc42e19f00bc967996cb54d194b0d4cd3a49b1f44a37066267014e06ae59edaaf4713ba7aecc7599b45c3dd153b0fd1f145503c8b179c192421e02e13c11b1b9c45139d00fa9ea88d0ef7e4019a95b75ae67cab1924a68f5a434de114d6414ddf75236ed5","quoted":false,"path":"/","domain":"bienfashion.pl","expires":"2026-09-29T19:03:32Z","raw_expires":"Tue, 29-Sep-2026 19:03:32 GMT","max_age":1727999,"secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"PrestaShop-174b0bddf27351720ac335367f2907ba=def5020073b6b7eb15494fec80c76868d2e4d3c442b34bfe854af7b23c86c4a58ff245e3a2195603b860d04ae0eea53a5c45ba2209e43c1707eac9bac71de775e4b9ada6322b7c149c2a932493a205a3f67c42ec1a4743190d2fb0b4d47fd1bf5904b97b842e95a6c646401ad8b020de5cc42e19f00bc967996cb54d194b0d4cd3a49b1f44a37066267014e06ae59edaaf4713ba7aecc7599b45c3dd153b0fd1f145503c8b179c192421e02e13c11b1b9c45139d00fa9ea88d0ef7e4019a95b75ae67cab1924a68f5a434de114d6414ddf75236ed5; expires=Tue, 29-Sep-2026 19:03:32 GMT; Max-Age=1727999; path=/; domain=bienfashion.pl; secure; HttpOnly; SameSite=Lax"},{"name":"PrestaShop-174b0bddf27351720ac335367f2907ba","value":"def50200ea452cb35b3e0ea016dc102c4dfdd953f4d278f71c1fc37ffc7a73d975e63f76198456de23570f29559968c8fd39fbdbe9afbe12261c0fe2380ee581a99f476b9b22c47d9fd4b9d5c3a2403b26efcbf11a85b9551353d343083664c37ae4512d8f7bb8dfad704646ef9c40c9cc7b4cfad285d43e4caeba6d8cb48026ae7f4655c7597803c5f0b66d925c9f535f69ad95c6b608502df6ec971569b892323b311f9d9e3082e7778a4e2ed2371853f3e81d4f6bb1ae73a319c882fa25142f590ad0b77ad24c0aa2439bb6386fa5f14177e0901f30ff996fbaec83de1bcf82","quoted":false,"path":"/","domain":"bienfashion.pl","expires":"2026-09-29T19:03:32Z","raw_expires":"Tue, 29-Sep-2026 19:03:32 GMT","max_age":1727999,"secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"PrestaShop-174b0bddf27351720ac335367f2907ba=def50200ea452cb35b3e0ea016dc102c4dfdd953f4d278f71c1fc37ffc7a73d975e63f76198456de23570f29559968c8fd39fbdbe9afbe12261c0fe2380ee581a99f476b9b22c47d9fd4b9d5c3a2403b26efcbf11a85b9551353d343083664c37ae4512d8f7bb8dfad704646ef9c40c9cc7b4cfad285d43e4caeba6d8cb48026ae7f4655c7597803c5f0b66d925c9f535f69ad95c6b608502df6ec971569b892323b311f9d9e3082e7778a4e2ed2371853f3e81d4f6bb1ae73a319c882fa25142f590ad0b77ad24c0aa2439bb6386fa5f14177e0901f30ff996fbaec83de1bcf82; expires=Tue, 29-Sep-2026 19:03:32 GMT; Max-Age=1727999; path=/; domain=bienfashion.pl; secure; HttpOnly; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"PayU Payment","description":"PayU is a provider of financial solutions for ecommerce, facilitating online payments and related transaction services.","website":"https://corporate.payu.com","common_platform_enumeration":"","icon":"PayU.svg","categories":["Payment processors"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"PrestaShop","description":"PrestaShop is a freemium, open-source ecommerce solution, written in the PHP programming language with support for the MySQL database management system.","website":"https://www.prestashop.com","common_platform_enumeration":"cpe:2.3:a:prestashop:prestashop:*:*:*:*:*:*:*:*","icon":"PrestaShop.svg","categories":["Ecommerce","CMS"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]}],"data":{"size":321789,"size_decoded":37295,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (7056)","md5":"1a3fb55438758730c2198ac7397b256d","sha1":"830356ec61eb0626b52e38bca283c702644e10c5","sha256":"a406102c70cac08ac63d15d58a08b72ceb692cc3f56cd2081a0ad3af91c30e0c","sha512":"1cad3434eb4ceaa5fe36fef5c3c11f031158f5aabfbe96d4a30c0070d0dd7faf93994cea9042b019321fb9c8430062f9eb482d0e757d63c33f24c23469893de0","ssdeep":"3072:tCI5TPnRlAwk2EgnDIry1e30iR3wB0BtxhB6IxyE6pfPUs:wI5rnRlAN+DOy1e3btUX","tlshash":"9264b462b8f62432019f01fb94677a1cfa82e69bd6822c80b5fc53516fb2e527f5704d","first_seen":"2026-09-09T19:04:34.923117Z","last_seen":"2026-09-09T19:04:34.923117Z","times_seen":1,"resource_available":true,"data":null}},"time_used":4218,"timings":{"blocked":-1,"dns":175,"connect":23,"send":0,"wait":540,"receive":0,"ssl":3479},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bienfashion.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bienfashion.live/themes/warehouse/assets/css/font-awesome/fonts/fontawesome-webfont.woff?v=4.7.0","fqdn":"bienfashion.live","domain":"bienfashion.live","tld":"live"},"ip":{"addr":"172.67.142.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:33.514Z","timestamp":1788980613514,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bienfashion.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:59:57 GMT","end":"Tue, 13 Oct 2026 09:57:37 GMT"},"fingerprint":{"sha1":"75:CD:C9:18:49:06:7B:DE:35:8C:74:34:2D:88:9C:66:56:85:39:3F","sha256":"E8:B4:97:2A:13:D1:14:AA:12:54:9C:39:0E:F9:57:49:B8:B3:CD:76:80:55:DF:45:E8:59:6E:3D:25:E3:FE:42"}}},"request":{"raw":"GET /themes/warehouse/assets/css/font-awesome/fonts/fontawesome-webfont.woff?v=4.7.0 HTTP/1.1\r\nHost: bienfashion.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bienfashion.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=3i417j132cqpnm5obqhji0mns3\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FXVpE9BO7pPHULMXEZs8dyDy40j6GuNkF94ItEA1bh799utbORSEiBWkMjlgsa%2FDwJXX1wgeYeAMPiI4tuzmWD5g35LDykLBLXCl21JPc%2FCmbTUskeH7OndNTioJ1RnLC3yP\"}]}\r\ndate: Wed, 09 Sep 2026 19:03:33 GMT\r\ncontent-type: application/font-woff\r\ncontent-encoding: zstd\r\ncf-ray: a38874228ae3a264-CPH\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000\r\nexpires: Thu, 09 Sep 2027 19:03:33 GMT\r\nlast-modified: Thu, 05 Aug 2021 08:16:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=604800; includeSubDomains, max-age=3600;\r\ncontent-security-policy: frame-ancestors 'self';\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":98024,"size_decoded":98940,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 98024, version 4.7","md5":"fee66e712a8a08eef5805a46892932ad","sha1":"28b782240b3e76db824e12c02754a9731a167527","sha256":"ba0c59deb5450f5cb41b3f93609ee2d0d995415877ddfa223e8a8a7533474f07","sha512":"9c776dea55a01fd854ea23b3463d9ac716077d406ecbe8ed0c9b6120ff7e60357f0521ab3e3bf9d4e17ca2c44a5d63ee58a4e7a37a3d3f26415a98d11c99e04f","ssdeep":"1536:Te9lM9ITKMpPtandzpLwETpNfdFj2yExmni83X3t4MCWzSBE2RM5RgUAkzm7zl+b:VWKQta9pBNT1n3X3BnmBI5Wx7zlvKfF","tlshash":"c2a312845ab5133bf704b97043bf87704a5a711ebeadad7158c3618d7faa39834006ee","first_seen":"2023-04-05T07:45:03Z","last_seen":"2026-10-15T00:02:40.912908Z","times_seen":40436,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bienfashion.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bienfashion.live/img/cms/Photoroom_20251005_155003.png","fqdn":"bienfashion.live","domain":"bienfashion.live","tld":"live"},"ip":{"addr":"172.67.142.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:33.562Z","timestamp":1788980613562,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bienfashion.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:59:57 GMT","end":"Tue, 13 Oct 2026 09:57:37 GMT"},"fingerprint":{"sha1":"75:CD:C9:18:49:06:7B:DE:35:8C:74:34:2D:88:9C:66:56:85:39:3F","sha256":"E8:B4:97:2A:13:D1:14:AA:12:54:9C:39:0E:F9:57:49:B8:B3:CD:76:80:55:DF:45:E8:59:6E:3D:25:E3:FE:42"}}},"request":{"raw":"GET /img/cms/Photoroom_20251005_155003.png HTTP/1.1\r\nHost: bienfashion.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nCookie: PHPSESSID=3i417j132cqpnm5obqhji0mns3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 09 Sep 2026 19:03:33 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a3887422db01a264-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Fri, 09 Oct 2026 19:03:33 GMT\r\nlast-modified: Fri, 24 Oct 2025 12:43:26 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=604800; includeSubDomains, max-age=3600;\r\nvary: Accept\r\ncontent-security-policy: frame-ancestors 'self';\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Er7%2B7KbYKaaFsbOC%2Fhxyx1UdKNHX8dg%2F2Vs%2Fk4Mh1Ki%2B%2FT9lrGmMYi2lCvTsLJJc4yOtoPTaZf3pb8WW6H5ZdDIlxjoavxclIdKoqwednq01F5%2BAfao6o%2BgEDdwUY7C%2BUrun\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 91923\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":91923,"size_decoded":92811,"mime_type":"image/png","magic":"PNG image data, 400 x 600, 8-bit colormap, non-interlaced","md5":"130ceada57ff8450e7d9d68871a0efe4","sha1":"d12e96f8300bfa3fd41f200abe321a3f544eeff7","sha256":"32846d3a454a1a964aac2b3f265a273bb3581b50324fdc4fa3a006f72654b4d6","sha512":"6192da9cc27e69056ffddcdb0ad9281b1c4068a819ecbf69254d8cf633ac4d10a3873c78f99cf13dc98a6085553a9076788898c2bcbfa378239f211593ebb1f9","ssdeep":"1536:lIyPbiHFXx2hZ3LON7b3Qr1tPQCwq1Y3s5Nh8LktTecjijJ4yMcdMkFan:OlXCh4b3QrUw1n5NqLkl3i94yM+s","tlshash":"0c9312d4e35704592c5fe8d1f1cb5a2ec7bb96980e8385228dd201dd0a6bfb4dde2a90","first_seen":"2026-09-09T19:04:34.924603Z","last_seen":"2026-09-09T19:04:34.924603Z","times_seen":1,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bienfashion.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bienfashion.live/8126-home_default/kombinezon-z-szerokimi-nogawkami-ecru-vivien.jpg","fqdn":"bienfashion.live","domain":"bienfashion.live","tld":"live"},"ip":{"addr":"172.67.142.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:39.141Z","timestamp":1788980619141,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bienfashion.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:59:57 GMT","end":"Tue, 13 Oct 2026 09:57:37 GMT"},"fingerprint":{"sha1":"75:CD:C9:18:49:06:7B:DE:35:8C:74:34:2D:88:9C:66:56:85:39:3F","sha256":"E8:B4:97:2A:13:D1:14:AA:12:54:9C:39:0E:F9:57:49:B8:B3:CD:76:80:55:DF:45:E8:59:6E:3D:25:E3:FE:42"}}},"request":{"raw":"GET /8126-home_default/kombinezon-z-szerokimi-nogawkami-ecru-vivien.jpg HTTP/1.1\r\nHost: bienfashion.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nCookie: PHPSESSID=3i417j132cqpnm5obqhji0mns3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 09 Sep 2026 19:03:39 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3887445b828a264-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nlast-modified: Sat, 10 Jan 2026 10:13:51 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=604800; includeSubDomains, max-age=3600;\r\nvary: Accept\r\ncontent-security-policy: frame-ancestors 'self';\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SS23PBk0tLwiR9Ny4Cr3YgAHsscnqgUaZ06nhQ8QGT0DbRMyWJ6kU3jrewOjy2WlXES9h0j6LYtGabeUgNuRtoRWVdHwh6LYbV3iP%2BvW7GouT1lLmp7CgHBFRhuG7xpZ4N9%2B\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 55192\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":55192,"size_decoded":56025,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f37e230c2a5f26a3d61d7d73f799dd78","sha1":"73f9f1595ddd8934eb3fb373979884d832878048","sha256":"85f8fc2ffdff3c050e9a1290f581d2b3691a15fed3560b597fae7e691306fdc7","sha512":"9ef96ab00be302f1b86526ff98ceae067f72a18293875689bf19ead377cc05ea019be702ef1e9c30b076c58926ec4dd6fd9706abbb3cc7aff2a46727cea170d1","ssdeep":"1536:vD4ABozM7SWN66+RwpmHbZw6Ao2KH3F/H5V9EmH:vzoz2MrRI8bq672KHVRV9z","tlshash":"c8430274221467da31dd3958b003fbe6b88fc35ab80b4595fd4e42b03b67d793920e4a","first_seen":"2026-09-09T19:04:34.925516Z","last_seen":"2026-09-09T19:04:34.925516Z","times_seen":1,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bienfashion.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bienfashion.live/modules/revsliderprestashop/public/assets/js/extensions/revolution.extension.kenburn.min.js?version=5.4.8","fqdn":"bienfashion.live","domain":"bienfashion.live","tld":"live"},"ip":{"addr":"172.67.142.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:34.175Z","timestamp":1788980614175,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bienfashion.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:59:57 GMT","end":"Tue, 13 Oct 2026 09:57:37 GMT"},"fingerprint":{"sha1":"75:CD:C9:18:49:06:7B:DE:35:8C:74:34:2D:88:9C:66:56:85:39:3F","sha256":"E8:B4:97:2A:13:D1:14:AA:12:54:9C:39:0E:F9:57:49:B8:B3:CD:76:80:55:DF:45:E8:59:6E:3D:25:E3:FE:42"}}},"request":{"raw":"GET /modules/revsliderprestashop/public/assets/js/extensions/revolution.extension.kenburn.min.js?version=5.4.8 HTTP/1.1\r\nHost: bienfashion.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nCookie: PHPSESSID=3i417j132cqpnm5obqhji0mns3\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 09 Sep 2026 19:03:34 GMT\r\ncontent-type: text/javascript\r\npriority: u=3,i=?0\r\ncf-ray: a3887426ac66a264-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nexpires: Wed, 16 Sep 2026 19:03:34 GMT\r\nlast-modified: Thu, 05 Aug 2021 08:16:03 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=604800; includeSubDomains, max-age=3600;\r\nvary: Accept-Encoding\r\ncontent-security-policy: frame-ancestors 'self';\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wYPKekJySApBz2CVCFodcHg4rd%2By3Rc0zMlwrl84H5J6UfT%2F0S6HzF%2BTD1EFjbI1VUWx%2FfSsDjzXj6SCdQ2Oxzezmq5KKmspR9hTdcnKIavc2RMXQZ5IoXpcuLu4VKUfvRrU\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1560\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3754,"size_decoded":2478,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3515), with CRLF line terminators","md5":"261d036ff4d77e01fbca0b39e05b3321","sha1":"17c763757d51ca8dce4c3709acf87e061189d862","sha256":"aa3a395c27bfaf020ed08d80d44b8470d2279339c2864d4b99c1c51520fc78e0","sha512":"062a5ccdff8146a2d224ba34d3a1217d54dd8c927fb4b64b46f224e59d64f214187705eeb99b99e0d206b52f6cc3339d66775bcd81f0ec9ebfa5908d19acf3de","ssdeep":"","tlshash":"4d7142d220166c5e4ca3a39295ef17c663f1ed2835039c1c9772b5802eccd1e28bbb5d","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-10-14T21:33:09.923052Z","times_seen":873,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bienfashion.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bienfashion.live/modules/revsliderprestashop/public/assets/js/extensions/revolution.extension.navigation.min.js?version=5.4.8","fqdn":"bienfashion.live","domain":"bienfashion.live","tld":"live"},"ip":{"addr":"172.67.142.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:34.177Z","timestamp":1788980614177,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bienfashion.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:59:57 GMT","end":"Tue, 13 Oct 2026 09:57:37 GMT"},"fingerprint":{"sha1":"75:CD:C9:18:49:06:7B:DE:35:8C:74:34:2D:88:9C:66:56:85:39:3F","sha256":"E8:B4:97:2A:13:D1:14:AA:12:54:9C:39:0E:F9:57:49:B8:B3:CD:76:80:55:DF:45:E8:59:6E:3D:25:E3:FE:42"}}},"request":{"raw":"GET /modules/revsliderprestashop/public/assets/js/extensions/revolution.extension.navigation.min.js?version=5.4.8 HTTP/1.1\r\nHost: bienfashion.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nCookie: PHPSESSID=3i417j132cqpnm5obqhji0mns3\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 09 Sep 2026 19:03:34 GMT\r\ncontent-type: text/javascript\r\npriority: u=3,i=?0\r\ncf-ray: a3887426ac68a264-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nexpires: Wed, 16 Sep 2026 19:03:34 GMT\r\nlast-modified: Thu, 05 Aug 2021 08:16:03 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=604800; includeSubDomains, max-age=3600;\r\nvary: Accept-Encoding\r\ncontent-security-policy: frame-ancestors 'self';\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q%2FUoH2KmerbBr5QAIXvMIYOR9v4%2FWaJ50OmD8vHZ1stxgCxRXbiLgiZdRfLGNUHYwV%2BXep6qSbVU5knzQIQ0oGu7ct4Jl%2FvteOyPfzvFuftkf4PXXdrmpGO97XPNzw%2FFh641\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7041\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26103,"size_decoded":7961,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (25862), with CRLF line terminators","md5":"05ec8fa18732b68a634f95e7c2bebd2e","sha1":"2204916097137e7afe60b7d8a612e04f86496cbc","sha256":"38da5f0c3fd471c5a28d03d7155aba416ae2562ba4a73a2ca3920b19e4b47a63","sha512":"a25006198d3a72d661363fefcba8b21ee0e4a646d66a44866867101a0b4f06966f8341e988f8b599a992755f85f98ac7fdbea3b15e3d3c6fc59bce2829f6d81c","ssdeep":"384:EhOObjBeYJfz3zX3SWcN12H2DFQ9j6IDumFu7jaWIyUBj3RX2E:EIObR3zXpcN12H2DqZ9iA9QE","tlshash":"6ac2a8a976903cab5473667bc16a40b532728a357307ae6078efa6f0057ccd913e7e4c","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-10-14T21:34:58.869101Z","times_seen":3257,"resource_available":true,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bienfashion.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-207992682-1\u0026cx=c\u0026gtm=4e6980h2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:34.250Z","timestamp":1788980614250,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:41 GMT","end":"Mon, 02 Nov 2026 08:37:40 GMT"},"fingerprint":{"sha1":"DC:E6:38:9B:82:DB:20:21:19:E7:95:FC:30:E0:F0:F4:BC:CA:9A:1C","sha256":"2C:0E:42:66:EE:BA:84:59:3C:53:EB:87:C0:84:DD:32:F4:42:73:26:47:8C:4E:56:F9:5B:47:6C:AF:BA:C2:F9"}}},"request":{"raw":"GET /gtag/js?id=UA-207992682-1\u0026cx=c\u0026gtm=4e6980h2 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Wed, 09 Sep 2026 19:03:34 GMT\r\nexpires: Wed, 09 Sep 2026 19:03:34 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Wed, 09 Sep 2026 18:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 133407\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":377945,"size_decoded":134037,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4912)","md5":"d6b765e9dce7144c447c62e443e6c51c","sha1":"a6e603497882513116e84885c40aa4524c227c0f","sha256":"73a0a914c2f77dda96f2eb77b1d33b9c3df58c21a29560c8eb5c56f57b9a02ad","sha512":"a5c36e3baaf60e51a52909f5174da8971166db139fe8fdb757370d059d56c276b31b82c0cf6be83b5e0ad82ac4a89534be13719ea4852e9fb8f5d2ef2ed0dc61","ssdeep":"6144:JZ1G6gXPwQx3iiiBxvcAaOLESM3jNehYsSWGe:k1wei3LSU","tlshash":"578419ccb3d6742283a3b574903f018bb27a7992b84cc894f286d9d42d3469a9177f7d","first_seen":"2026-09-09T19:04:34.939251Z","last_seen":"2026-09-09T19:04:34.939251Z","times_seen":1,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/gen204?sl=pl\u0026nca=te_ap\u0026client=te\u0026logld=vTE_20260908","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:34.899Z","timestamp":1788980614899,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:42 GMT","end":"Mon, 02 Nov 2026 08:37:41 GMT"},"fingerprint":{"sha1":"CB:38:34:2F:7D:9E:35:93:25:09:7C:BC:CF:D5:8B:CD:34:CD:70:E7","sha256":"50:17:03:01:AA:C0:DB:75:43:0B:A6:DC:1F:27:C3:AA:1E:93:2F:67:A7:8C:54:7D:FE:7B:6A:E6:F1:9F:C7:FF"}}},"request":{"raw":"GET /gen204?sl=pl\u0026nca=te_ap\u0026client=te\u0026logld=vTE_20260908 HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 \r\ncontent-type: image/gif; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Wed, 09 Sep 2026 19:03:35 GMT\r\ncross-origin-resource-policy: cross-origin\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\ncontent-security-policy: script-src 'nonce-3hd-mWNtM8SXiiX-6CIq2Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/TranslateApiHttp/cspreport;worker-src 'self', require-trusted-types-for 'script';report-uri /_/TranslateApiHttp/cspreport\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncross-origin-opener-policy: same-origin\r\nreporting-endpoints: default=\"/_/TranslateApiHttp/web-reports?context=eJzj4tDikmII0JBiEOLmaL_ddpVN4MH39apKSkn5hfElRYl5xTmJJanFqUVlqUXxRgZGZgaWBuZ6BsbxBQYADDUSaQ\"\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nset-cookie: __Secure-ENID=36.SE=QCEFu1_vRvqeOEFAqFcT-S4bV9YIAym6SdUvwIHIqNkI_fFlKRg6OZ1EQ7Y9ybfPc8wwvh8FgZIfIR3UNn_UYGE6pDSGybqzjbtxvQNY55hwjWD-JEmtKjj0x4ykLX1GAR0-Y3UFz0slmjT-3WWT5Gj0wUaKzKFVMJJ9Aemq7b60cZ1Agz87MKHVNI6w1rmZlZhL_O9c0XkE73ip4r_sM0-yB_39FZYLKfHmic1GR8uHZzu5MKbW; expires=Sun, 10-Oct-2027 11:21:53 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":[{"name":"__Secure-ENID","value":"36.SE=QCEFu1_vRvqeOEFAqFcT-S4bV9YIAym6SdUvwIHIqNkI_fFlKRg6OZ1EQ7Y9ybfPc8wwvh8FgZIfIR3UNn_UYGE6pDSGybqzjbtxvQNY55hwjWD-JEmtKjj0x4ykLX1GAR0-Y3UFz0slmjT-3WWT5Gj0wUaKzKFVMJJ9Aemq7b60cZ1Agz87MKHVNI6w1rmZlZhL_O9c0XkE73ip4r_sM0-yB_39FZYLKfHmic1GR8uHZzu5MKbW","quoted":false,"path":"/","domain":".google.com","expires":"2027-10-10T11:21:53Z","raw_expires":"Sun, 10-Oct-2027 11:21:53 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"__Secure-ENID=36.SE=QCEFu1_vRvqeOEFAqFcT-S4bV9YIAym6SdUvwIHIqNkI_fFlKRg6OZ1EQ7Y9ybfPc8wwvh8FgZIfIR3UNn_UYGE6pDSGybqzjbtxvQNY55hwjWD-JEmtKjj0x4ykLX1GAR0-Y3UFz0slmjT-3WWT5Gj0wUaKzKFVMJJ9Aemq7b60cZ1Agz87MKHVNI6w1rmZlZhL_O9c0XkE73ip4r_sM0-yB_39FZYLKfHmic1GR8uHZzu5MKbW; expires=Sun, 10-Oct-2027 11:21:53 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax"}],"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/gif; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T00:38:37.114452Z","times_seen":19109993,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/translate_static/img/te_bk.gif","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:35.058Z","timestamp":1788980615058,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /translate_static/img/te_bk.gif HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 848\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 04 Sep 2026 08:23:18 GMT\r\nexpires: Sat, 04 Sep 2027 08:23:18 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Sun, 25 Jun 2023 02:58:00 GMT\r\ncontent-type: image/gif\r\nage: 470417\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":848,"size_decoded":1507,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 59","md5":"daf9b48977041ac85a62dc9b7c16b38d","sha1":"049dcb061470572d06fd83b287ebd1d96e6bb870","sha256":"cb1fd0e051209c32622e91cdeda967e50d80a184b185ac6a656a807986e8eb75","sha512":"99f5f27990b6b5559c751a92c04037f5d42e848a966893484af66d3f66828c29a2dddc8788d7dd4cd835e8ab6d834e74fb3eaa4e2cd72d55b2813d7aab990af2","ssdeep":"","tlshash":"1c018c0cc8700a19e3422fb0ca5b6e0429675b465d88b20fb6aa22c27d04ba48049b1c","first_seen":"2023-04-05T23:29:53Z","last_seen":"2026-10-14T21:39:04.709064Z","times_seen":29239,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bienfashion.live/8381-home_default/koszula-zielona-.jpg","fqdn":"bienfashion.live","domain":"bienfashion.live","tld":"live"},"ip":{"addr":"172.67.142.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:39.116Z","timestamp":1788980619116,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bienfashion.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:59:57 GMT","end":"Tue, 13 Oct 2026 09:57:37 GMT"},"fingerprint":{"sha1":"75:CD:C9:18:49:06:7B:DE:35:8C:74:34:2D:88:9C:66:56:85:39:3F","sha256":"E8:B4:97:2A:13:D1:14:AA:12:54:9C:39:0E:F9:57:49:B8:B3:CD:76:80:55:DF:45:E8:59:6E:3D:25:E3:FE:42"}}},"request":{"raw":"GET /8381-home_default/koszula-zielona-.jpg HTTP/1.1\r\nHost: bienfashion.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nCookie: PHPSESSID=3i417j132cqpnm5obqhji0mns3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 09 Sep 2026 19:03:39 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a38874458811a264-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 06 Jul 2026 14:27:42 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=604800; includeSubDomains, max-age=3600;\r\nvary: Accept\r\ncontent-security-policy: frame-ancestors 'self';\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OnZp2%2BsMORBOgUM8RsAbhuW01BnzbBoxQY2HxTnLZCq6A%2BJyuWPzzyMU3WlZ8OypWWsvhHN1HkpmsgeXISa9l01LBDzlasjezZ%2FmYtltqyC5gz6gQXdFrC4MG7orjwSDdURW\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 48144\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48144,"size_decoded":48979,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 356x458, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"836f75277e3ad413b36a7de38dd2f856","sha1":"06049676b2eb8c0771b18da138a905e0b0e684d4","sha256":"c1bd4fe6c9453f1dd75660cffc996eb024caef6219b64b45af8e29681ade285b","sha512":"95b31a6f1244bb22ac96e1fac6d9b48256cb88bb362f3a5ea5d27cf2094b52ad937ba8a64f06dd0b2eea0a82f4a88c2c2243ca9c1eca1a53f6e8a15444069816","ssdeep":"768:qXZfd4srwcQldTRbjspV1uWtEsMecL5ljprXfSvufZNcN1wXGkTijzsfIyE9ECiQ:qwsMcQTRbjGtEsMfPhqGfXXtaofIyyE8","tlshash":"5523021b0372f9cb1d790d092b6d7d4a7ae3a1907de29d1427da31ef08b40e54b26f92","first_seen":"2026-09-09T19:04:34.940708Z","last_seen":"2026-09-09T19:04:34.940708Z","times_seen":1,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bienfashion.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bienfashion.live/8368-home_default/komplet-brazowy-z-aplikacja-.jpg","fqdn":"bienfashion.live","domain":"bienfashion.live","tld":"live"},"ip":{"addr":"172.67.142.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:39.129Z","timestamp":1788980619129,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bienfashion.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:59:57 GMT","end":"Tue, 13 Oct 2026 09:57:37 GMT"},"fingerprint":{"sha1":"75:CD:C9:18:49:06:7B:DE:35:8C:74:34:2D:88:9C:66:56:85:39:3F","sha256":"E8:B4:97:2A:13:D1:14:AA:12:54:9C:39:0E:F9:57:49:B8:B3:CD:76:80:55:DF:45:E8:59:6E:3D:25:E3:FE:42"}}},"request":{"raw":"GET /8368-home_default/komplet-brazowy-z-aplikacja-.jpg HTTP/1.1\r\nHost: bienfashion.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nCookie: PHPSESSID=3i417j132cqpnm5obqhji0mns3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 09 Sep 2026 19:03:39 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3887445981ca264-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 06 Jul 2026 11:46:41 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=604800; includeSubDomains, max-age=3600;\r\nvary: Accept\r\ncontent-security-policy: frame-ancestors 'self';\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q%2BceVWA8cl8j7oZSNBxpAHhakOBBXFrrm32jQf8rGD%2FaNLIfS8zPHxlTD0qWzeSoMvqxIpMYcWhPzxbzx%2BGLYv09SCTnsOEslGlDu%2FDe6WJ%2FkuFORERxTebViNGx23bcSrg3\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 55228\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55228,"size_decoded":56067,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 356x458, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"21c929b52a94224b1e714b0a6f94fda4","sha1":"c5615ecfd2cfada13888985b91dafb403cb78112","sha256":"327e2f8a5e24567d9054ab462df5dd1fd0046fbfd4241bf6c823980cab4180a9","sha512":"2a1681d767ed195f5b301b82c3da13f061415fe5f0db8324195dbedf87fb8e73ca62612e8495288c343b2f90b3b104822a34017da62e51690e60d89ddd55b21f","ssdeep":"1536:iyG8TzmS7E5bm4mSGpheEu2lZXgKv15Ck:ikH77QjUheEu2/vvz","tlshash":"744302fac766c9dcd546d38009f429d08b8c9fd8663a7bce46945e036c32b995b93f02","first_seen":"2026-09-09T19:04:34.941886Z","last_seen":"2026-09-09T19:04:34.941886Z","times_seen":1,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bienfashion.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate-pa.googleapis.com/v1/supportedLanguages?client=te\u0026display_language=no\u0026key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4\u0026callback=callback","fqdn":"translate-pa.googleapis.com","domain":"translate-pa.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.113.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"moz-nullprincipal:{07f3074d-87ed-4598-a489-a20b5bb7b80c}?https://bienfashion.live","date":"2026-09-09T19:03:34.764Z","timestamp":1788980614764,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:04 GMT","end":"Mon, 02 Nov 2026 08:39:03 GMT"},"fingerprint":{"sha1":"DB:16:C1:37:8D:6C:67:F5:7B:69:A5:CC:5A:E4:14:86:68:68:28:08","sha256":"7C:9F:DC:87:45:B2:79:1B:26:C3:F9:27:4E:6A:13:97:FF:C5:A0:2C:69:69:31:D1:9D:3F:8D:E7:2F:66:1C:15"}}},"request":{"raw":"GET /v1/supportedLanguages?client=te\u0026display_language=no\u0026key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4\u0026callback=callback HTTP/1.1\r\nHost: translate-pa.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncross-origin-resource-policy: cross-origin\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: gzip\r\ndate: Wed, 09 Sep 2026 19:03:34 GMT\r\nserver: ESF\r\ncontent-length: 2635\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nset-cookie: NID=CoICCAEStAEBp2sxrv20RXfoxyMcfib2W2aslpB1WGLLOvG5a3vgO-c6Db2cikHq6_s8NabAOYw4sQEIq7UNBmsqby6z_miT0TL5t7AgONHUf37j1QXACw2WIsgwunqptMB3Z7xl8SZoc3ARzC9DPcx0KoKjl456gtvIVSk1_xLcWHBTAFuaN4-M5rFmhFt02HLs3ffGIwzml0JwK5Ez0XK_XcO4fZlha2wUo2KjDc8wLvukneFm8Z8PBAcoATJFAQ4r3hF5cIg3Hoof5sN4rzSDCLotqeGhxV1mBEdHMC7Myb_gQndrGGqLserTmkZNKq8tTM5nLiLHDTEpX6rmF8GvcfcC; expires=Thu, 11-Mar-2027 19:03:34 GMT; path=/; domain=.translate-pa.googleapis.com; HttpOnly\r\nexpires: Wed, 09 Sep 2026 19:03:34 GMT\r\ncache-control: private\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"NID","value":"CoICCAEStAEBp2sxrv20RXfoxyMcfib2W2aslpB1WGLLOvG5a3vgO-c6Db2cikHq6_s8NabAOYw4sQEIq7UNBmsqby6z_miT0TL5t7AgONHUf37j1QXACw2WIsgwunqptMB3Z7xl8SZoc3ARzC9DPcx0KoKjl456gtvIVSk1_xLcWHBTAFuaN4-M5rFmhFt02HLs3ffGIwzml0JwK5Ez0XK_XcO4fZlha2wUo2KjDc8wLvukneFm8Z8PBAcoATJFAQ4r3hF5cIg3Hoof5sN4rzSDCLotqeGhxV1mBEdHMC7Myb_gQndrGGqLserTmkZNKq8tTM5nLiLHDTEpX6rmF8GvcfcC","quoted":false,"path":"/","domain":".translate-pa.googleapis.com","expires":"2027-03-11T19:03:34Z","raw_expires":"Thu, 11-Mar-2027 19:03:34 GMT","secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"NID=CoICCAEStAEBp2sxrv20RXfoxyMcfib2W2aslpB1WGLLOvG5a3vgO-c6Db2cikHq6_s8NabAOYw4sQEIq7UNBmsqby6z_miT0TL5t7AgONHUf37j1QXACw2WIsgwunqptMB3Z7xl8SZoc3ARzC9DPcx0KoKjl456gtvIVSk1_xLcWHBTAFuaN4-M5rFmhFt02HLs3ffGIwzml0JwK5Ez0XK_XcO4fZlha2wUo2KjDc8wLvukneFm8Z8PBAcoATJFAQ4r3hF5cIg3Hoof5sN4rzSDCLotqeGhxV1mBEdHMC7Myb_gQndrGGqLserTmkZNKq8tTM5nLiLHDTEpX6rmF8GvcfcC; expires=Thu, 11-Mar-2027 19:03:34 GMT; path=/; domain=.translate-pa.googleapis.com; HttpOnly"}],"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31482,"size_decoded":3622,"mime_type":"text/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text","md5":"91115de97ad1a90076e130223cdd90ad","sha1":"f3ad22e4fa892dfbff0d083bc0465fc3a2240317","sha256":"816e9881b1955d8beff3011d93481dad4c4de71bbd80b50ac267e7e45d4c3bad","sha512":"fbca69c3431240ab374b9ccfb06d76074059cdfe2f153743b292020271a8a3a36885189594a97fd74b43249b1f6359af62dfd0731e7b50e024f37faebdccf620","ssdeep":"192:Z6STcB9aqiD0+52DdKXrWryLxizUSTcB9aqdD0+52DdKXrWryLxG:JTcbaU3KXiMxidTcbah3KXiMxG","tlshash":"d0e267bae8b50d9b6a5e65b416fa2a03306041db4edc3c053b1c1e4c6fdec1e6c7169e","first_seen":"2025-09-02T05:12:23.753308Z","last_seen":"2026-10-14T23:45:54.221571Z","times_seen":30590,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":0,"dns":3,"connect":9,"send":0,"wait":30,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-207992682-1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:33.523Z","timestamp":1788980613523,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:41 GMT","end":"Mon, 02 Nov 2026 08:37:40 GMT"},"fingerprint":{"sha1":"DC:E6:38:9B:82:DB:20:21:19:E7:95:FC:30:E0:F0:F4:BC:CA:9A:1C","sha256":"2C:0E:42:66:EE:BA:84:59:3C:53:EB:87:C0:84:DD:32:F4:42:73:26:47:8C:4E:56:F9:5B:47:6C:AF:BA:C2:F9"}}},"request":{"raw":"GET /gtag/js?id=UA-207992682-1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Wed, 09 Sep 2026 19:03:33 GMT\r\nexpires: Wed, 09 Sep 2026 19:03:33 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Wed, 09 Sep 2026 18:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 133335\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":377850,"size_decoded":133965,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4901)","md5":"2cd71495facf5216f21a0aa7269f60a3","sha1":"6c64e2ca0f63fef5e408a5f3a04c28578d077690","sha256":"be6b013a1895f17728f1a78d85e313fc3f633879cd257c8c9d0d88f239a5a584","sha512":"23a89f7d9ed718b3add44724c2259c8ae595fb48bc3736ae3e43c7f7ac505396703c73905fb4b4fba8bdcb9b48ae12374a0d81e4f360b896af2fad01e1cb30b5","ssdeep":"6144:23ja9+jPkYc7yco3wFcYR/ZETH3Uzt+H9BxeF4vZ:B0jPkv5T+LxQa","tlshash":"078408ccb3d6742283a3b574503f018bb27a7992b84cc898f286d9d42e3465a5277f7d","first_seen":"2026-09-09T19:04:34.943711Z","last_seen":"2026-09-09T19:04:34.943711Z","times_seen":1,"resource_available":true,"data":null}},"time_used":366,"timings":{"blocked":-1,"dns":4,"connect":17,"send":0,"wait":37,"receive":41,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bienfashion.live/img/cms/box-komplety.png","fqdn":"bienfashion.live","domain":"bienfashion.live","tld":"live"},"ip":{"addr":"172.67.142.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:33.558Z","timestamp":1788980613558,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bienfashion.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:59:57 GMT","end":"Tue, 13 Oct 2026 09:57:37 GMT"},"fingerprint":{"sha1":"75:CD:C9:18:49:06:7B:DE:35:8C:74:34:2D:88:9C:66:56:85:39:3F","sha256":"E8:B4:97:2A:13:D1:14:AA:12:54:9C:39:0E:F9:57:49:B8:B3:CD:76:80:55:DF:45:E8:59:6E:3D:25:E3:FE:42"}}},"request":{"raw":"GET /img/cms/box-komplety.png HTTP/1.1\r\nHost: bienfashion.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nCookie: PHPSESSID=3i417j132cqpnm5obqhji0mns3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 09 Sep 2026 19:03:33 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a3887422dafea264-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Fri, 09 Oct 2026 19:03:33 GMT\r\nlast-modified: Fri, 22 May 2026 09:52:58 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=604800; includeSubDomains, max-age=3600;\r\nvary: Accept\r\ncontent-security-policy: frame-ancestors 'self';\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G%2F7MTKF4JriYVB043v3D9Sh3lwqHS4UqV5lNbtRzkwD%2F%2BeUSGQ53QIGaelOmNKQPjs9ApkJ9yqw0RKyQRZwmZiIyQ9%2BSsf4%2BNvlQvwP%2FgiJTN%2F6B7rQfmm9EDxUlTr%2Fu%2BWWt\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 485908\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":485908,"size_decoded":486797,"mime_type":"image/png","magic":"PNG image data, 467 x 640, 8-bit/color RGBA, non-interlaced","md5":"d1a11cff54ac4957867066d40be005db","sha1":"e7ae926081ca41d18a95368b7727866c0dd82de0","sha256":"d6f45da684e3b3e65d69b83e97b04591479c02ed45c08995bcb5ba9b02640f02","sha512":"8ee9708e65480f51baec1029f02cfd6577986e9d9e3f50f24b867763d2ec3282eb5bd9c967dc9dc4cd956e5fbef3e38141b5b1a9b6eae3c5e8fa25d059ae242d","ssdeep":"12288:sAm7kiIBiuagP8n11v2yYLb9lNjaDEml8W:m5gsvnwb9lNjaDT8W","tlshash":"64a423633b29935a71f973237fc41edc4f912188aa04b5eef1658ec267d058c6506f4d","first_seen":"2026-09-09T19:04:34.944654Z","last_seen":"2026-09-09T19:04:34.944654Z","times_seen":1,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":80,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bienfashion.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bienfashion.live/7945-home_default/sukienka-czarna-trapezowa.jpg","fqdn":"bienfashion.live","domain":"bienfashion.live","tld":"live"},"ip":{"addr":"172.67.142.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:39.148Z","timestamp":1788980619148,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bienfashion.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:59:57 GMT","end":"Tue, 13 Oct 2026 09:57:37 GMT"},"fingerprint":{"sha1":"75:CD:C9:18:49:06:7B:DE:35:8C:74:34:2D:88:9C:66:56:85:39:3F","sha256":"E8:B4:97:2A:13:D1:14:AA:12:54:9C:39:0E:F9:57:49:B8:B3:CD:76:80:55:DF:45:E8:59:6E:3D:25:E3:FE:42"}}},"request":{"raw":"GET /7945-home_default/sukienka-czarna-trapezowa.jpg HTTP/1.1\r\nHost: bienfashion.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nCookie: PHPSESSID=3i417j132cqpnm5obqhji0mns3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 09 Sep 2026 19:03:39 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3887445b82fa264-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 41\r\ncache-control: max-age=2592000\r\nexpires: Fri, 09 Oct 2026 19:02:57 GMT\r\nlast-modified: Mon, 14 Oct 2024 08:34:37 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=604800; includeSubDomains, max-age=3600;\r\nvary: Accept\r\ncontent-security-policy: frame-ancestors 'self';\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3UDYWTd54xXtgWXUYiPhri9l%2FexYjbYEotFXdJCcItaPX4q9It03KCweep6AWOOYEZoipV%2BD2bdFqOTpM4Ya4PxQOvG5Ty%2FeqvN3QGIfofCgM2XfV027qXmardKtN7o%2FveE3\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19237\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19237,"size_decoded":20124,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", progressive, precision 8, 356x458, components 3","md5":"0f6a0db0711f21be8a4120cfed2296c3","sha1":"b1f8c61c347a1d71eb2bc89624a96ef16d5cc5fe","sha256":"f35343e3a811c77d0fefe59a9e6e7031447486e5867e4c1617137a241dc38a36","sha512":"5bd265ad3a7247d0529b701109c65547f21458a58052f3277a59614138b9aa18a522a5c934cf09597347b273e0bb494e2145ba26959f98a23e096eb5fe8e5baf","ssdeep":"384:ebbGxQlhnTSHojxMttQ9BMXZ3iZVRHg5Bk2JfnB7vgmEPFcs65+Ch8d:fQlhTSHojxMttporA5Bk2vvgFys61k","tlshash":"3c82d039672a0ec5f8b63173d1ad28485b93a489b1c70a979dd70c3c3978760fc19aca","first_seen":"2026-09-09T19:04:34.945999Z","last_seen":"2026-09-09T19:04:34.945999Z","times_seen":1,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bienfashion.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bienfashion.live/5284-home_default/kombinezon-z-szerokimi-nogawkami-malinowa-czerwien-vivien-.jpg","fqdn":"bienfashion.live","domain":"bienfashion.live","tld":"live"},"ip":{"addr":"172.67.142.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:44.302Z","timestamp":1788980624302,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bienfashion.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:59:57 GMT","end":"Tue, 13 Oct 2026 09:57:37 GMT"},"fingerprint":{"sha1":"75:CD:C9:18:49:06:7B:DE:35:8C:74:34:2D:88:9C:66:56:85:39:3F","sha256":"E8:B4:97:2A:13:D1:14:AA:12:54:9C:39:0E:F9:57:49:B8:B3:CD:76:80:55:DF:45:E8:59:6E:3D:25:E3:FE:42"}}},"request":{"raw":"GET /5284-home_default/kombinezon-z-szerokimi-nogawkami-malinowa-czerwien-vivien-.jpg HTTP/1.1\r\nHost: bienfashion.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nCookie: PHPSESSID=3i417j132cqpnm5obqhji0mns3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 09 Sep 2026 19:03:44 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3887465fcbda264-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nlast-modified: Tue, 05 Nov 2024 07:55:47 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=604800; includeSubDomains, max-age=3600;\r\nvary: Accept\r\ncontent-security-policy: frame-ancestors 'self';\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zs1mHWuiUC3hklMAFj84W4i%2F9YNy%2FmDFmXc%2BCwH264VtNspp5fWm%2FVv14NZCcPl3xJDUR4hYKLBL%2FLHF30g9%2BOT3TjMk0ozzpRIB7vaxynCN68CsZ4QGZONbrUyC5rbaf2Li\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 26224\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26224,"size_decoded":27065,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 356x458, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a86161357775497f24a03afdd6c404a1","sha1":"b9d70d23b66becf40426c6c1250aa854482fa1c6","sha256":"82bd3e44e31d572a7c1f57dfdbafdc2f1b98dc560377eeba2140c512586cab47","sha512":"28f5dff09164a5ce4d702cfa191a946cb7edc8e36ebef431dcf77d82997c7a2075e384d6de6aa92301f0911867783369752bb5a5fa5a0884aaa4a775c10ae5e6","ssdeep":"384:t05rD7CDczWr4yVHdVdtqtUcnncSoU1Cp751runyqSsq4Z9cX0Qi/akrRZXO7dOv:M/CDcs4+VytkVJpt1rqkE9cCU74wJ3o","tlshash":"cdc2e13f72e2953bab6d6debc5e1f2ef21a0795c920065cc295b5c432144bb1cd23ac2","first_seen":"2026-09-09T19:04:34.94731Z","last_seen":"2026-09-09T19:04:34.94731Z","times_seen":1,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bienfashion.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BECAAQ/d=0/rs=AN8SPfrzHf-2T7wal-G0YeaqSuEl3yfBrA/m=el_main_css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:34.896Z","timestamp":1788980614896,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BECAAQ/d=0/rs=AN8SPfrzHf-2T7wal-G0YeaqSuEl3yfBrA/m=el_main_css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 3967\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 03 Sep 2026 23:15:29 GMT\r\nexpires: Fri, 03 Sep 2027 23:15:29 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 09 Apr 2026 01:12:55 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 503285\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20284,"size_decoded":4799,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (20284), with no line terminators","md5":"fde4f72b90fe807270db3c332dd058df","sha1":"7ef4d70af01c38a7f80a7650be25f63aff4ba751","sha256":"ab31c9be358d2107fc1158434c7aeaaf15f82e3e405ed67ab236b5ac232ed159","sha512":"9bef39350af557afeb10cb71068426ab28befaf5295359954787be06a5ce0993d69e8f5018a5a17c44311d294dd1a87a6f82edd0f5743df0149b8e4e53061695","ssdeep":"192:nvqx/EhZINcrXsfg0SgG8CqA3uku9SJFzvQVMbnUIfIxIVVpTrecfzPtcmt4v78l:gMF8Sb3i0JFzourUqWMVpTrdfzPtcBG","tlshash":"c492872057aed01967efa82364d36dff71d444db90123eeaaf5a7352cd821f231ea214","first_seen":"2026-04-13T20:43:22.641436Z","last_seen":"2026-10-14T23:45:54.196147Z","times_seen":40899,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/translate_static/img/loading.gif","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:34.901Z","timestamp":1788980614901,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /translate_static/img/loading.gif HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 702\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 04 Sep 2026 21:38:42 GMT\r\nexpires: Sat, 04 Sep 2027 21:38:42 GMT\r\ncache-control: public, max-age=31536000\r\nage: 422692\r\nlast-modified: Thu, 03 Oct 2019 10:15:00 GMT\r\ncontent-type: image/gif\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":702,"size_decoded":1361,"mime_type":"image/gif","magic":"GIF image data, version 89a, 16 x 16","md5":"eefaa072b284a305c12c06608333abc2","sha1":"58272721ccc1efda26eaa22354022c7c793edbb6","sha256":"fb6b7bcc1ab09f27db17bcbdf5239ce1d52af34f1fc5125b3fc8528a07848d21","sha512":"c5ccfdcd9ce76de85f043a1733c9f0b620e15babbaf2a5639684c7b2bb8e5a66473c9a83f14cb48d9cb6c6a1c6b36f2c5a28e25abaf131fb85ec5eedecbae4ac","ssdeep":"","tlshash":"5d01dd13f3d50473f66d0075a20cc57f010635daaadad7089a48117cfe1983c5239b82","first_seen":"2023-04-05T11:18:23Z","last_seen":"2026-10-14T23:45:54.249346Z","times_seen":38220,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/element/log?format=json\u0026hasfast=true\u0026authuser=0","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:44.694Z","timestamp":1788980624694,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"OPTIONS /element/log?format=json\u0026hasfast=true\u0026authuser=0 HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-encoding,content-type,x-goog-authuser\r\nReferer: https://bienfashion.live/\r\nOrigin: https://bienfashion.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: https://bienfashion.live\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: X-Playlog-Web,authorization,content-encoding,content-type,x-goog-authuser,origin\r\ncontent-type: text/plain; charset=UTF-8\r\ndate: Wed, 09 Sep 2026 19:03:44 GMT\r\nserver: Playlog\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":524,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T00:38:37.114452Z","times_seen":19109993,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bienfashion.live/themes/warehouse/assets/cache/bottom-c3d9e81086.js","fqdn":"bienfashion.live","domain":"bienfashion.live","tld":"live"},"ip":{"addr":"172.67.142.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:33.537Z","timestamp":1788980613537,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bienfashion.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:59:57 GMT","end":"Tue, 13 Oct 2026 09:57:37 GMT"},"fingerprint":{"sha1":"75:CD:C9:18:49:06:7B:DE:35:8C:74:34:2D:88:9C:66:56:85:39:3F","sha256":"E8:B4:97:2A:13:D1:14:AA:12:54:9C:39:0E:F9:57:49:B8:B3:CD:76:80:55:DF:45:E8:59:6E:3D:25:E3:FE:42"}}},"request":{"raw":"GET /themes/warehouse/assets/cache/bottom-c3d9e81086.js HTTP/1.1\r\nHost: bienfashion.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nCookie: PHPSESSID=3i417j132cqpnm5obqhji0mns3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LUxAgQmC%2BjP3Q6qJxyGNhaoH97%2FmfG9FknECy%2FF5cgefB6aBryzfVHHecG2fTo7bupHwcNODR0lgaaq4RDQZVkXv0V1ytQ8aJWTP16eSua6IuZK0ech10okmM1qB3GduU1Ok\"}]}\r\ndate: Wed, 09 Sep 2026 19:03:33 GMT\r\ncontent-type: text/javascript\r\npriority: u=3,i=?0\r\ncf-ray: a3887422aaf4a264-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nexpires: Wed, 16 Sep 2026 19:03:33 GMT\r\nlast-modified: Thu, 09 Jul 2026 12:42:15 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=604800; includeSubDomains, max-age=3600;\r\nvary: Accept-Encoding\r\ncontent-security-policy: frame-ancestors 'self';\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":832271,"size_decoded":235225,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65472)","md5":"483bf082bd3284f83ea8f7b332f7bdd8","sha1":"fe447a680c74b16357a978550d1c3559424bc877","sha256":"990ffae112803b2c6396791e4108063a3a0c156a0332cc887a182a77cb0d59e2","sha512":"96b4d7b85611369fc8ef9f568ee8241feeca300d475eb608f383874335806ff408fabdf6aa3454856370a8d9b4132a83c3f9818666b6d95b22bdc5814b82434d","ssdeep":"24576:84a76dfrU54EaPQeq/7bGdt5BCowCcOVJkPYHy7kgN:84a76dfrU54EaPhq/7bGdt5SCcOVJkPz","tlshash":"30056d8db260747242e77176907f010b72336d69a40a8468f169d8f92ebcd89237bf7d","first_seen":"2026-09-09T19:04:34.948949Z","last_seen":"2026-09-09T19:04:34.948949Z","times_seen":1,"resource_available":true,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":73,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bienfashion.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bienfashion.live/img/icons/fb-icon.png","fqdn":"bienfashion.live","domain":"bienfashion.live","tld":"live"},"ip":{"addr":"172.67.142.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:33.565Z","timestamp":1788980613565,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bienfashion.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:59:57 GMT","end":"Tue, 13 Oct 2026 09:57:37 GMT"},"fingerprint":{"sha1":"75:CD:C9:18:49:06:7B:DE:35:8C:74:34:2D:88:9C:66:56:85:39:3F","sha256":"E8:B4:97:2A:13:D1:14:AA:12:54:9C:39:0E:F9:57:49:B8:B3:CD:76:80:55:DF:45:E8:59:6E:3D:25:E3:FE:42"}}},"request":{"raw":"GET /img/icons/fb-icon.png HTTP/1.1\r\nHost: bienfashion.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nCookie: PHPSESSID=3i417j132cqpnm5obqhji0mns3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 09 Sep 2026 19:03:33 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3887422db03a264-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 10 Oct 2022 10:39:37 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=604800; includeSubDomains, max-age=3600;\r\nvary: Accept\r\ncontent-security-policy: frame-ancestors 'self';\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=glfPN3yD3J9uHQyEJ%2BsAQ2eQPjJUXsXc8gLpM7iJF8FLZ6l5X0tlwztvUWHCmfrOt9VbtezOHqXJ%2BLa5NtTqdaqC71RCmHOy2VWxUN8uJJmogv6vmXyN3eHszmvS0akH2Y1J\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 274\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":274,"size_decoded":1105,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"96c7429df55a6be511232b18fc1be9b3","sha1":"6b019e6eb5e6c80f01123de17079008ce4b1491e","sha256":"89f3285ba4ef5255a383b1a14b6d410498e7a35358829c51c462715382da0ac7","sha512":"3549cecef12695efae008f5b57eae2cc6b5b2868d21fc47de3299bb6820d7631cd97ca9f487b5d349e62237ad4a858309a2552d19b4e1f497bd7c5826ae8a92c","ssdeep":"","tlshash":"97d0eb6cc8c32ec046c0af2776d06889180c112b112b6c23f0b339a0c078780b3e3290","first_seen":"2026-08-14T08:37:06.069515Z","last_seen":"2026-09-09T19:04:34.950143Z","times_seen":2,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bienfashion.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bienfashion.live/img/cms/kafel%20diana.PNG","fqdn":"bienfashion.live","domain":"bienfashion.live","tld":"live"},"ip":{"addr":"172.67.142.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:34.066Z","timestamp":1788980614066,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bienfashion.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:59:57 GMT","end":"Tue, 13 Oct 2026 09:57:37 GMT"},"fingerprint":{"sha1":"75:CD:C9:18:49:06:7B:DE:35:8C:74:34:2D:88:9C:66:56:85:39:3F","sha256":"E8:B4:97:2A:13:D1:14:AA:12:54:9C:39:0E:F9:57:49:B8:B3:CD:76:80:55:DF:45:E8:59:6E:3D:25:E3:FE:42"}}},"request":{"raw":"GET /img/cms/kafel%20diana.PNG HTTP/1.1\r\nHost: bienfashion.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nCookie: PHPSESSID=3i417j132cqpnm5obqhji0mns3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 09 Sep 2026 19:03:34 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a3887425fbf2a264-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Fri, 09 Oct 2026 19:03:34 GMT\r\nlast-modified: Mon, 20 Jul 2026 11:38:42 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=604800; includeSubDomains, max-age=3600;\r\ncontent-security-policy: frame-ancestors 'self';\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yWfsSYmHlwKB0JUZtB9qvVG7oV%2FCZlUQORkjfSJfJuZitTcO1n62nBP6Sh0f2qdUEkMtnjQSDueHzYa%2BMq1bT%2BSSceQhnSrUsMv%2FQUL1rlQnHa0JZaaaNmTihWtJcJn0cAaW\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 827633\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":827633,"size_decoded":828498,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T00:38:37.114452Z","times_seen":19109993,"resource_available":true,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bienfashion.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bienfashion.live/img/favicon.ico?1628332864","fqdn":"bienfashion.live","domain":"bienfashion.live","tld":"live"},"ip":{"addr":"172.67.142.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:34.456Z","timestamp":1788980614456,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bienfashion.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:59:57 GMT","end":"Tue, 13 Oct 2026 09:57:37 GMT"},"fingerprint":{"sha1":"75:CD:C9:18:49:06:7B:DE:35:8C:74:34:2D:88:9C:66:56:85:39:3F","sha256":"E8:B4:97:2A:13:D1:14:AA:12:54:9C:39:0E:F9:57:49:B8:B3:CD:76:80:55:DF:45:E8:59:6E:3D:25:E3:FE:42"}}},"request":{"raw":"GET /img/favicon.ico?1628332864 HTTP/1.1\r\nHost: bienfashion.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nCookie: PHPSESSID=3i417j132cqpnm5obqhji0mns3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FNIL8xoZJGdYpNhgRPxKQnJXTIfqd4BqmIz4D00JYcIkD2c4txK1pn0fgjzGhRuhyyOvTu1I1kc9Ji6r0UIRDerpfurNWYfX%2FB10bS5M7UtcN5s%2F46nDlLlJ%2BB0DthF4mjuB\"}]}\r\ndate: Wed, 09 Sep 2026 19:03:34 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\ncontent-encoding: zstd\r\ncf-ray: a38874286d15a264-CPH\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\ncache-control: max-age=31536000\r\nexpires: Thu, 09 Sep 2027 19:03:34 GMT\r\nlast-modified: Sat, 07 Aug 2021 10:41:04 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=604800; includeSubDomains, max-age=3600;\r\ncontent-security-policy: frame-ancestors 'self';\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15406,"size_decoded":2827,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"2f80a4beb30abaf7e1ed192c92758a8a","sha1":"371ac2d4afd5b5d397aab7fd2f4e1cc4501ca68e","sha256":"ad9e5f04df174016cde6ef95207e569b5888a43c5b775d886b90ce86185dcebb","sha512":"4eacf1ae311816be76a6d9be8c4379f6cdce12dbb8078c0843ada5529ac5efb8c10b0a07994761eeb379ad988323c4ad3b1992a8eaf85560e620d786e0d079b5","ssdeep":"48:THH6GKcZHh69HHpM28LSv9d6KxhWFaKDfYSt2llPTh+uzzFEb2cH6tLDUXfBUV:pJtSqchWdDfYvFpzJEXatHUmV","tlshash":"5e6268c97673a027f530c37386f24a7fe27c9163afc2922e8048cd78d94bb44258695e","first_seen":"2026-09-09T19:04:34.951146Z","last_seen":"2026-09-09T19:04:34.951146Z","times_seen":1,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":180,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bienfashion.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bienfashion.live/themes/warehouse/assets/cache/theme-56b3501087.css","fqdn":"bienfashion.live","domain":"bienfashion.live","tld":"live"},"ip":{"addr":"172.67.142.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:33.511Z","timestamp":1788980613511,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bienfashion.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:59:57 GMT","end":"Tue, 13 Oct 2026 09:57:37 GMT"},"fingerprint":{"sha1":"75:CD:C9:18:49:06:7B:DE:35:8C:74:34:2D:88:9C:66:56:85:39:3F","sha256":"E8:B4:97:2A:13:D1:14:AA:12:54:9C:39:0E:F9:57:49:B8:B3:CD:76:80:55:DF:45:E8:59:6E:3D:25:E3:FE:42"}}},"request":{"raw":"GET /themes/warehouse/assets/cache/theme-56b3501087.css HTTP/1.1\r\nHost: bienfashion.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nCookie: PHPSESSID=3i417j132cqpnm5obqhji0mns3\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bdNJaSIlmra6d9g9jGIUKScsYsyUKnTrpQgc6HzvJH6oTlFfhAyJA8CeYeEBpM2EjZInN5VxPADzfD5p0n%2B%2B20UOlA99onNDCzTdeS%2FK0c6FP5N0HVYo8bqeRZXrdxNKs%2FZA\"}]}\r\ndate: Wed, 09 Sep 2026 19:03:33 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a38874228ae0a264-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nexpires: Wed, 16 Sep 2026 19:03:33 GMT\r\nlast-modified: Thu, 09 Jul 2026 12:41:45 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=604800; includeSubDomains, max-age=3600;\r\nvary: Accept-Encoding\r\ncontent-security-policy: frame-ancestors 'self';\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":509076,"size_decoded":95611,"mime_type":"text/css","magic":"ASCII text, with very long lines (64665)","md5":"c71b53975f20191bba362a71cffd108c","sha1":"7fd6cdbe4e476a9c7da34f39f19bd4efa6b9ea57","sha256":"141ed559c5ebe92e571286d6408cf26fdb108d6e1961a81dfb2641b73b20c8f0","sha512":"c5acc87076a74a7635105d838ef3a9151ba3dfe7a908327b5079d282f49392d1e1e9d1ae46444b75b12aed3af2de7f8ec0b6bee53bb1c1278a131405adf437db","ssdeep":"6144:i/eGrq3SYiLENM6HN26YQvLYzj4zgv8Wx0Kd/l+v+Sf65WCXX/tejqObSQ41g78X:NyQvLYzj4xxjR2gsGd4q/HF/Hq","tlshash":"08b419a6f972206c6127ca3690c1bbed692ad581d7130beff427b724878d5c61b7390c","first_seen":"2026-09-09T19:04:34.952142Z","last_seen":"2026-09-09T19:04:34.952142Z","times_seen":1,"resource_available":true,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bienfashion.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/worksans/v24/QGYsz_wNahGAdqQ43Rh_cqDpp_k.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:34.160Z","timestamp":1788980614160,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/worksans/v24/QGYsz_wNahGAdqQ43Rh_cqDpp_k.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bienfashion.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 35716\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 09 Sep 2026 10:36:08 GMT\r\nexpires: Thu, 09 Sep 2027 10:36:08 GMT\r\ncache-control: public, max-age=31536000\r\nage: 30446\r\nlast-modified: Wed, 10 Sep 2025 16:23:36 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35716,"size_decoded":36528,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35716, version 1.0","md5":"9c3fdbf06f3b05e362bde7235e6e415c","sha1":"79db18a3dd6388f9efb5f8f5c60b4f4698e1294a","sha256":"2aa17fc7b072e46652e84bbe3dbba9ec57cdea320d89e8c951ed7cf3218c300b","sha512":"edad0357803afbddf8630a3ab569f64b8086f7dd794dc7d4c2f2359f38d008d65d0e3b725fbb194ad01ad170a9c01eb3feeb54187f08e8476afbb42186568083","ssdeep":"768:kDl5vZD7LSoDX/yEnXiBEeQu7lpWXPSWEHSXeB:kDfJx/y8iI6lpWXKMuB","tlshash":"90f2e196337991f3e13af3aba208d0d722d742556e86af63c84815b1226d072f27df1c","first_seen":"2025-09-13T05:51:50.562267Z","last_seen":"2026-10-15T00:05:57.540798Z","times_seen":1272,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":27,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bienfashion.live/modules/revsliderprestashop/public/assets/js/extensions/revolution.extension.video.min.js?version=5.4.8","fqdn":"bienfashion.live","domain":"bienfashion.live","tld":"live"},"ip":{"addr":"172.67.142.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:34.169Z","timestamp":1788980614169,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bienfashion.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:59:57 GMT","end":"Tue, 13 Oct 2026 09:57:37 GMT"},"fingerprint":{"sha1":"75:CD:C9:18:49:06:7B:DE:35:8C:74:34:2D:88:9C:66:56:85:39:3F","sha256":"E8:B4:97:2A:13:D1:14:AA:12:54:9C:39:0E:F9:57:49:B8:B3:CD:76:80:55:DF:45:E8:59:6E:3D:25:E3:FE:42"}}},"request":{"raw":"GET /modules/revsliderprestashop/public/assets/js/extensions/revolution.extension.video.min.js?version=5.4.8 HTTP/1.1\r\nHost: bienfashion.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nCookie: PHPSESSID=3i417j132cqpnm5obqhji0mns3\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 09 Sep 2026 19:03:34 GMT\r\ncontent-type: text/javascript\r\npriority: u=3,i=?0\r\ncf-ray: a38874269c62a264-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nexpires: Wed, 16 Sep 2026 19:03:34 GMT\r\nlast-modified: Thu, 05 Aug 2021 08:16:03 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=604800; includeSubDomains, max-age=3600;\r\nvary: Accept-Encoding\r\ncontent-security-policy: frame-ancestors 'self';\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ov%2FOfEVUGaxaRwKbDUaIMCGNKtykE8k52jDew%2FNJFPHJ85WhwUiTetjouRqz417jSbIJI3ROEbBIzs2C6XxCxcRTsjbK0jfWB8Gi%2Fzecjoz7efchWzXTPCY%2Bp%2FXQ76xd1OuE\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7056\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26079,"size_decoded":7976,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (25833), with CRLF line terminators","md5":"ded004ea2fecb5dfa4df995ba1867410","sha1":"a1a82684d350a8183c83c91bb214ccfabbbb6b39","sha256":"7e1cb0185b698144fe3c3cd6e367460838fb9a068989fdb6ae781a6973645c95","sha512":"450cc0bf6c265a1d3cb99b1ab2944e703889ad421ffc29e3462b3d0c1c359c424b97da7094aaaffbef6d89c1455e10cfd58377bd568dd777f59dcdf657bba3b5","ssdeep":"384:ZSzPnkV5CWrq1ePxVAlcCr/Rd1eVOgXEb/g18C+uL7+81XB1q0dlOqtUoU9glSsX:UkV1wqkteVINuL7+X0y19ESsg7G","tlshash":"cdc2e717f508a8a59459f9d66c9f124033b1bb7ee0048f6069f3f6b81f3cd42225aadd","first_seen":"2023-03-07T01:41:15Z","last_seen":"2026-10-14T23:15:50.980792Z","times_seen":812,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bienfashion.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bienfashion.live/modules/revsliderprestashop/public/assets/js/extensions/revolution.extension.actions.min.js?version=5.4.8","fqdn":"bienfashion.live","domain":"bienfashion.live","tld":"live"},"ip":{"addr":"172.67.142.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:34.171Z","timestamp":1788980614171,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bienfashion.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:59:57 GMT","end":"Tue, 13 Oct 2026 09:57:37 GMT"},"fingerprint":{"sha1":"75:CD:C9:18:49:06:7B:DE:35:8C:74:34:2D:88:9C:66:56:85:39:3F","sha256":"E8:B4:97:2A:13:D1:14:AA:12:54:9C:39:0E:F9:57:49:B8:B3:CD:76:80:55:DF:45:E8:59:6E:3D:25:E3:FE:42"}}},"request":{"raw":"GET /modules/revsliderprestashop/public/assets/js/extensions/revolution.extension.actions.min.js?version=5.4.8 HTTP/1.1\r\nHost: bienfashion.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nCookie: PHPSESSID=3i417j132cqpnm5obqhji0mns3\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 09 Sep 2026 19:03:34 GMT\r\ncontent-type: text/javascript\r\npriority: u=3,i=?0\r\ncf-ray: a3887426ac64a264-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nexpires: Wed, 16 Sep 2026 19:03:34 GMT\r\nlast-modified: Thu, 05 Aug 2021 08:16:03 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=604800; includeSubDomains, max-age=3600;\r\nvary: Accept-Encoding\r\ncontent-security-policy: frame-ancestors 'self';\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k1JAybylFTWSOuQj8cxLFZLQzYItyurWXkPdqsiBUKyIKFZFGyvZpjgcxlxHQGECFSuWxci%2Fqk1he1EcfmNZAz83mMzTfK0cExEta%2F4qxrBZ5JnL3TbIbiLCY%2BuMSjiIg9aF\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2572\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8329,"size_decoded":3488,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (8089), with CRLF line terminators","md5":"1e23424880dfdb9e886fcff2f0aae6ee","sha1":"8acaff02a625c997cbbb7ed8843e7cf610bf2b5b","sha256":"0fc4db12b0d589fd17b3e43c3ba4cdca64183916637624bfe59aad7299284284","sha512":"6f6431f89495db3ec4a9efe7f1fa9a44d62e856b99136368ddeb62dfc332347991c62336066fab1ad1b7612c0c7c3455e0f8c78fa9572567c75440bcce882670","ssdeep":"192:CHe3syiqiihWp2xgyhK1/l+zWJc2VJS/gkBVl1p:uMS/2f7R","tlshash":"9002a646f1016cff44a765aee83702d2b1b1b59c560aa9b4f06bf1a82d3cb5105c77ec","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-10-14T23:15:50.966905Z","times_seen":1742,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bienfashion.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bienfashion.live/modules/revsliderprestashop/public/assets/fonts/revicons/revicons.woff?5510888","fqdn":"bienfashion.live","domain":"bienfashion.live","tld":"live"},"ip":{"addr":"172.67.142.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:34.798Z","timestamp":1788980614798,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bienfashion.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:59:57 GMT","end":"Tue, 13 Oct 2026 09:57:37 GMT"},"fingerprint":{"sha1":"75:CD:C9:18:49:06:7B:DE:35:8C:74:34:2D:88:9C:66:56:85:39:3F","sha256":"E8:B4:97:2A:13:D1:14:AA:12:54:9C:39:0E:F9:57:49:B8:B3:CD:76:80:55:DF:45:E8:59:6E:3D:25:E3:FE:42"}}},"request":{"raw":"GET /modules/revsliderprestashop/public/assets/fonts/revicons/revicons.woff?5510888 HTTP/1.1\r\nHost: bienfashion.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/themes/warehouse/assets/cache/theme-56b3501087.css\r\nCookie: PHPSESSID=3i417j132cqpnm5obqhji0mns3\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 09 Sep 2026 19:03:34 GMT\r\ncontent-type: application/font-woff\r\npriority: u=3,i=?0\r\ncf-ray: a388742a8de4a264-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000\r\nexpires: Thu, 09 Sep 2027 19:03:34 GMT\r\nlast-modified: Thu, 05 Aug 2021 08:16:03 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=604800; includeSubDomains, max-age=3600;\r\ncontent-security-policy: frame-ancestors 'self';\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ujUjdyrrP5eYaacUUOQtd1p0%2F39KSu2YZb4jPf9kMsv60MWvsK1ARFBpiABsG%2FUfVnbUcO1sg0IsAKhzqv91mMj6dB%2FGlu%2FPxmmeldnvpl6qeMG1WNEwV%2F0N2Ed%2BRC7N6Z%2B2\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7536\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7536,"size_decoded":8453,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 7536, version 1.0","md5":"04eb8fc57f27498e5ae37523e3bfb2c7","sha1":"d942ae11706c3f7e511e3c49b0e4574d7ad199c4","sha256":"f7b9c3065e55fa3b9e320093612e7b30dcb14355a44ec461247b495a3e729686","sha512":"fa6508c8a1a822794036174b0b9dbc6e91b5afc1fd340381b868ede6d928dd0f3e66b5a91308d2c0c4c4c64b27dab7761a904c0b6e6b3c0e3e736e5d6342f365","ssdeep":"192:340F/mM4Oa0wA2jPOf2X62xqpjjjaT64iSNizw:34sxBwCujqpj/aT6nSYzw","tlshash":"20f18e14fec0f56dfd8f52702780e6f6b2646de260560dc52d48e65c14e291ae27d47c","first_seen":"2023-04-05T13:50:09Z","last_seen":"2026-10-14T23:37:39.519694Z","times_seen":33876,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bienfashion.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bienfashion.live/8378-home_default/sweter-ecru-kamelia-.jpg","fqdn":"bienfashion.live","domain":"bienfashion.live","tld":"live"},"ip":{"addr":"172.67.142.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:39.120Z","timestamp":1788980619120,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bienfashion.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:59:57 GMT","end":"Tue, 13 Oct 2026 09:57:37 GMT"},"fingerprint":{"sha1":"75:CD:C9:18:49:06:7B:DE:35:8C:74:34:2D:88:9C:66:56:85:39:3F","sha256":"E8:B4:97:2A:13:D1:14:AA:12:54:9C:39:0E:F9:57:49:B8:B3:CD:76:80:55:DF:45:E8:59:6E:3D:25:E3:FE:42"}}},"request":{"raw":"GET /8378-home_default/sweter-ecru-kamelia-.jpg HTTP/1.1\r\nHost: bienfashion.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nCookie: PHPSESSID=3i417j132cqpnm5obqhji0mns3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 09 Sep 2026 19:03:39 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a38874458812a264-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 06 Jul 2026 14:03:26 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=604800; includeSubDomains, max-age=3600;\r\nvary: Accept\r\ncontent-security-policy: frame-ancestors 'self';\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IdkAvZ4eZ0w7TwKn1ty6tJjOIRKqSGLoPsuxERCE0dn%2BaSJxiFFPFuQr29IGWe6P9NaRWF4QVoBRDH1L8VgEtya1JsugRXIOnKnKb%2FoKWAkyXxBAHxUfdqMRypzWOApwCmI5\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 54860\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":54860,"size_decoded":55693,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 356x458, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5d9eefacbd73ac57116eaffad6eda616","sha1":"342b02bdae05a464120bf82514aaeae9b8963167","sha256":"89e19bc76971f7e015befd33087c62c92dbeadf1a5e54f395b5fb63a84a7bdf7","sha512":"65ebc392eab41938923dfe194027a6e143d374418899537614d6a6af92c5174e2f8656b12de7bb407647a5f7e3e10ab44b2abb8f3fc03a1983006d69894781d4","ssdeep":"1536:6o/AF+n00OXcGA0woYYP5H93S9f1QzAXkS3l:RqFB09fOEXkS3l","tlshash":"6b3312a7ea21db684651539e2a1fcc27c85e92b260c34efc2b5532497314e7cc7d286f","first_seen":"2026-09-09T19:04:34.969768Z","last_seen":"2026-09-09T19:04:34.969768Z","times_seen":1,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bienfashion.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bienfashion.live/8388-home_default/komplet-fango-sweter-i-spodnie-.jpg","fqdn":"bienfashion.live","domain":"bienfashion.live","tld":"live"},"ip":{"addr":"172.67.142.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:44.280Z","timestamp":1788980624280,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bienfashion.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:59:57 GMT","end":"Tue, 13 Oct 2026 09:57:37 GMT"},"fingerprint":{"sha1":"75:CD:C9:18:49:06:7B:DE:35:8C:74:34:2D:88:9C:66:56:85:39:3F","sha256":"E8:B4:97:2A:13:D1:14:AA:12:54:9C:39:0E:F9:57:49:B8:B3:CD:76:80:55:DF:45:E8:59:6E:3D:25:E3:FE:42"}}},"request":{"raw":"GET /8388-home_default/komplet-fango-sweter-i-spodnie-.jpg HTTP/1.1\r\nHost: bienfashion.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nCookie: PHPSESSID=3i417j132cqpnm5obqhji0mns3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 09 Sep 2026 19:03:44 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3887465ccada264-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nlast-modified: Wed, 29 Jul 2026 14:40:07 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=604800; includeSubDomains, max-age=3600;\r\nvary: Accept\r\ncontent-security-policy: frame-ancestors 'self';\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1Ybqiz%2BMAm7VnZiknTJcg2ddV0t6Tv%2BG%2BK0JVDGOnKTYZPuim74WYgVGpeoScZyFfqYBDC1LovtKw8VM1cERb3PDmDWDoSwf4VvFs2lITmuEWa1ZENDtR4O1ofmlFFbHPuiV\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 54032\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54032,"size_decoded":54867,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 356x458, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1ea2e9347d84a64dc586fc3e4e6edfe8","sha1":"a96d0128c4eeb46e7dd4c7c00789b50e23aa8d45","sha256":"be86b9f97ac286d1d4978f52d4405c5a889dcb22964c9ac764ac7c6d5b423f14","sha512":"723aa8f3e53cd997514ca04961db60d32549e97aea0f8c22733646b06d714ae5d20cbab546829c3c981709ad7e1ce2241140125c92e0e819c13aaf1649fdea87","ssdeep":"1536:nxmd7KBybKsziCh8TrATxMxSgo2jFy+iUOL0wMH+8Xm:xM+LChWqx0v5IUb+82","tlshash":"4c330188b9e19654f1553218ee8f89c1479df993ae8179317f318cb3e90e26e57387c0","first_seen":"2026-09-09T19:04:34.971107Z","last_seen":"2026-09-09T19:04:34.971107Z","times_seen":1,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bienfashion.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/translate_a/element.js?cb=googleTranslateElementInit","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:33.534Z","timestamp":1788980613534,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:42 GMT","end":"Mon, 02 Nov 2026 08:37:41 GMT"},"fingerprint":{"sha1":"CB:38:34:2F:7D:9E:35:93:25:09:7C:BC:CF:D5:8B:CD:34:CD:70:E7","sha256":"50:17:03:01:AA:C0:DB:75:43:0B:A6:DC:1F:27:C3:AA:1E:93:2F:67:A7:8C:54:7D:FE:7B:6A:E6:F1:9F:C7:FF"}}},"request":{"raw":"GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Wed, 09 Sep 2026 19:03:33 GMT\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2990,"size_decoded":1577,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1825)","md5":"002e0653167c9fdd97490e2e350288e1","sha1":"e72ae9ae11f9705e7b89d82f4408b9e6411787d7","sha256":"9253861b4686266a5c05d4f82c4f967dfc5034f98746d24d6d8249b14b902361","sha512":"61456830d07adb5d143ce6621bfab6efab577d6c669e395d52de53caf9206c86cfdd5de9b3cc1efb3eb76aa2b30c045f366fe4169fecf47061507f54c82f329b","ssdeep":"","tlshash":"5051269698b6d0cac4436c69dfafa27931040037ac25ece17ddcd906ffb051ab54d5e8","first_seen":"2026-09-09T19:04:34.971935Z","last_seen":"2026-09-09T19:36:03.137511Z","times_seen":3,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":4,"connect":15,"send":0,"wait":38,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bienfashion.live/7946-home_default/sukienka-czarna-trapezowa.jpg","fqdn":"bienfashion.live","domain":"bienfashion.live","tld":"live"},"ip":{"addr":"172.67.142.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:39.147Z","timestamp":1788980619147,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bienfashion.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:59:57 GMT","end":"Tue, 13 Oct 2026 09:57:37 GMT"},"fingerprint":{"sha1":"75:CD:C9:18:49:06:7B:DE:35:8C:74:34:2D:88:9C:66:56:85:39:3F","sha256":"E8:B4:97:2A:13:D1:14:AA:12:54:9C:39:0E:F9:57:49:B8:B3:CD:76:80:55:DF:45:E8:59:6E:3D:25:E3:FE:42"}}},"request":{"raw":"GET /7946-home_default/sukienka-czarna-trapezowa.jpg HTTP/1.1\r\nHost: bienfashion.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nCookie: PHPSESSID=3i417j132cqpnm5obqhji0mns3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 09 Sep 2026 19:03:39 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3887445b82ea264-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nlast-modified: Thu, 07 Nov 2024 13:32:30 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=604800; includeSubDomains, max-age=3600;\r\nvary: Accept\r\ncontent-security-policy: frame-ancestors 'self';\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c2xVAuq%2BUnAZLIlRW8Gnh%2Fi7Xr%2FSXvZUnVy4NJraVoKAVvARK6DplXrpl6zsryAFPSeFX%2FF5MMjSEKWwb8pstdTEw2Uadn1dzScHaPqfiFklv%2Br3MMijRgWppaSAPvIJYu2w\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 20090\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20090,"size_decoded":20929,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 356x458, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7aa1710abe2a54de31137d3948a1a4eb","sha1":"8c1e2e39a73e7b25a1636548965cd24a3628830a","sha256":"88127f07634d8be6b3826416995f402ac4c526591e22f145980782879b169b86","sha512":"ff461de2f6150b328213574ac889094336320b5518b94b15a8776ccc3df91f897a9e2a1d65ec3287142b6ae3bd5288f306f0590b28c988a1c50fa75b27fe0e9a","ssdeep":"384:8S2Q/dMrxrlMBCQkuqqiEUltNywHENStNdFXTFdk7bj137veXNnOT:8S2WMrVlCRZWltNy+EMdZFI37vGMT","tlshash":"b592e1e7a10f44ae5b59fb00b18a3d12bb722de74a1f5cc2b290fd4636d52d0c78568e","first_seen":"2026-09-09T19:04:34.973029Z","last_seen":"2026-09-09T19:04:34.973029Z","times_seen":1,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bienfashion.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-G4K5FCB1L5\u0026cx=c\u0026gtm=4e6941","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:34.287Z","timestamp":1788980614287,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:41 GMT","end":"Mon, 02 Nov 2026 08:37:40 GMT"},"fingerprint":{"sha1":"DC:E6:38:9B:82:DB:20:21:19:E7:95:FC:30:E0:F0:F4:BC:CA:9A:1C","sha256":"2C:0E:42:66:EE:BA:84:59:3C:53:EB:87:C0:84:DD:32:F4:42:73:26:47:8C:4E:56:F9:5B:47:6C:AF:BA:C2:F9"}}},"request":{"raw":"GET /gtag/js?id=G-G4K5FCB1L5\u0026cx=c\u0026gtm=4e6941 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Wed, 09 Sep 2026 19:03:34 GMT\r\nexpires: Wed, 09 Sep 2026 19:03:34 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 159620\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":464665,"size_decoded":160204,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6033)","md5":"46431b7d17fc3d246829dd79f2043caf","sha1":"9cc056209fb0101302979a992b8dc3d5809fe8e5","sha256":"85e4ab43d4933c7e7dda92c39963df7da783c905bf546363c3a51a628fbc01f7","sha512":"416d72866929826239e914c321ce2cedca13e4720f93f3deba87456b4eb3040dc988fe0e61e0c8e784e6022a527a74868ad81f07b632ea625cd079d30f88387b","ssdeep":"6144:KW3jawM+AJpPkXV7y5/yp2MpcYR/ZETH3UztiO09BpPcExLsIQCZ:CwRAJpPk58iDLwpEiso","tlshash":"daa419cdb3c674229392f574903f018ba67b69a2b84cc899f28adcd42d3465a5137f7c","first_seen":"2026-09-09T19:04:34.974306Z","last_seen":"2026-09-09T19:04:34.974306Z","times_seen":1,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":98,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/images/cleardot.gif","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.153.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:34.731Z","timestamp":1788980614731,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:35 GMT","end":"Mon, 02 Nov 2026 08:37:34 GMT"},"fingerprint":{"sha1":"BC:1F:B5:F8:04:0C:7B:4F:F4:4F:20:30:D3:BA:66:E6:AF:8E:8F:AF","sha256":"8F:95:CC:30:E8:8F:6B:71:EF:35:1F:71:03:32:85:0C:55:44:E7:59:4A:F4:0B:1A:7E:11:9E:18:EF:D6:10:22"}}},"request":{"raw":"GET /images/cleardot.gif HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-type: image/gif\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 43\r\ndate: Wed, 09 Sep 2026 19:03:35 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\nlast-modified: Tue, 22 Oct 2019 18:30:00 GMT\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43,"size_decoded":717,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"fc94fb0c3ed8a8f909dbc7630a0987ff","sha1":"56d45f8a17f5078a20af9962c992ca4678450765","sha256":"2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363","sha512":"c87bf81fd70cf6434ca3a6c05ad6e9bd3f1d96f77dddad8d45ee043b126b2cb07a5cf23b4137b9d8462cd8a9adf2b463ab6de2b38c93db72d2d511ca60e3b57e","ssdeep":"","tlshash":"cb900003cac8c022c2a2c0300a0c03002bbaa8300228030ec0bc30fcec2a3a38c02000","first_seen":"2023-04-05T02:54:04Z","last_seen":"2026-10-15T00:01:39.401304Z","times_seen":103965,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bienfashion.live/8385-home_default/polo-oliwkowe-.jpg","fqdn":"bienfashion.live","domain":"bienfashion.live","tld":"live"},"ip":{"addr":"172.67.142.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:44.282Z","timestamp":1788980624282,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bienfashion.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:59:57 GMT","end":"Tue, 13 Oct 2026 09:57:37 GMT"},"fingerprint":{"sha1":"75:CD:C9:18:49:06:7B:DE:35:8C:74:34:2D:88:9C:66:56:85:39:3F","sha256":"E8:B4:97:2A:13:D1:14:AA:12:54:9C:39:0E:F9:57:49:B8:B3:CD:76:80:55:DF:45:E8:59:6E:3D:25:E3:FE:42"}}},"request":{"raw":"GET /8385-home_default/polo-oliwkowe-.jpg HTTP/1.1\r\nHost: bienfashion.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nCookie: PHPSESSID=3i417j132cqpnm5obqhji0mns3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 09 Sep 2026 19:03:44 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3887465dcaea264-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 61\r\ncache-control: max-age=2592000\r\nexpires: Fri, 09 Oct 2026 19:02:43 GMT\r\nlast-modified: Wed, 29 Jul 2026 13:44:31 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=604800; includeSubDomains, max-age=3600;\r\nvary: Accept\r\ncontent-security-policy: frame-ancestors 'self';\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fpsnejoOMZZzWI9wGSp7Cyb77b58dH3YtVp4Nk2DAbn%2Fi%2BW6CS8tvm2AmZaXF3eq9GupHoZtvUkV7zDLHk45NUKLHDC3yEUi6SzyaxH1tdWojLgg0idT1VEfKoal9TZwYXGu\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 47689\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47689,"size_decoded":48572,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", progressive, precision 8, 356x458, components 3","md5":"85d87a7a03a24613e77b3244cb1b9f79","sha1":"4e025a9e9a5472299a49962e4cb4b7ea0121c0dd","sha256":"07c992d4fc32a5a33ade31f81f03666f4fe78c8bd5c65e75b261dbd113bb6f03","sha512":"b86c432ee579c77ab4aef032f54918d75a8b87fb1eef5de8eb63aa9b07798b38f9ed5aca2f214299bd86c4f5d4060f1d8e0e1113579540eb4fa827f4af242606","ssdeep":"768:vUnmzZKupJK9JxT4ZAQCSCg43BJClrc6HCXmUxJXtswuYobAUQYBxiOPOXAc:vUnm1HK9TkZxK3BSxHCXmUxBtswuXbL8","tlshash":"9b23f1790a18e2dabdfd6b3204104c7760d016ca12129f36dbe5b49f48fb1aff692874","first_seen":"2026-09-09T19:04:34.975782Z","last_seen":"2026-09-09T19:04:34.975782Z","times_seen":1,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bienfashion.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bienfashion.live/8345-home_default/czarna-sukienka-.jpg","fqdn":"bienfashion.live","domain":"bienfashion.live","tld":"live"},"ip":{"addr":"172.67.142.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:44.296Z","timestamp":1788980624296,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bienfashion.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:59:57 GMT","end":"Tue, 13 Oct 2026 09:57:37 GMT"},"fingerprint":{"sha1":"75:CD:C9:18:49:06:7B:DE:35:8C:74:34:2D:88:9C:66:56:85:39:3F","sha256":"E8:B4:97:2A:13:D1:14:AA:12:54:9C:39:0E:F9:57:49:B8:B3:CD:76:80:55:DF:45:E8:59:6E:3D:25:E3:FE:42"}}},"request":{"raw":"GET /8345-home_default/czarna-sukienka-.jpg HTTP/1.1\r\nHost: bienfashion.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nCookie: PHPSESSID=3i417j132cqpnm5obqhji0mns3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 09 Sep 2026 19:03:44 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3887465ecbaa264-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 01 Jun 2026 17:52:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=604800; includeSubDomains, max-age=3600;\r\nvary: Accept\r\ncontent-security-policy: frame-ancestors 'self';\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qh6hAIJPYgmFGHVmraXAduEvEWHCObUcmiyChEGvoqbP1pV8ESy3OLqTehzRPho7X49743eIVRRbdWQAduI8YvS7CC4pC5zfcSN4u%2FIPuA5wrvFH3vTS6g5AcgMLmCaYe%2FYk\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 55602\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":55602,"size_decoded":56435,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d7224d475777bcef952350f8c8edc768","sha1":"1510dbf3f11d6cf8c338eada972d9bae19d5c46d","sha256":"c5a595eb1b73ed6cf7684060d5dc60007a8c6ff939e4480d53c2319e87ad2b6d","sha512":"c3a65cd65823a8fe69fbf5af5f36d2bf19fc26a4aad63701cae910879e9300872543d94d20aca2b65a974766fb91426bec966e6b646200c4fcf8baf8ea88cf1f","ssdeep":"768:DEbJupl9ae+dR5I8nBJpowJXCyPp/Vg+CjVfpW2J7cUrshsaFotLzdjRAv:DAJmXaTdR5rBX/jPpEjVJ5cUrYsaF+z8","tlshash":"d2430211352eb5616f694d67dcae7131031b09e789b02a793f3a4022c315b7a5eeb42f","first_seen":"2026-09-09T19:04:34.976844Z","last_seen":"2026-09-09T19:04:34.976844Z","times_seen":1,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bienfashion.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-10801989732\u0026cx=c\u0026gtm=4e6980h2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:34.253Z","timestamp":1788980614253,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:41 GMT","end":"Mon, 02 Nov 2026 08:37:40 GMT"},"fingerprint":{"sha1":"DC:E6:38:9B:82:DB:20:21:19:E7:95:FC:30:E0:F0:F4:BC:CA:9A:1C","sha256":"2C:0E:42:66:EE:BA:84:59:3C:53:EB:87:C0:84:DD:32:F4:42:73:26:47:8C:4E:56:F9:5B:47:6C:AF:BA:C2:F9"}}},"request":{"raw":"GET /gtag/js?id=AW-10801989732\u0026cx=c\u0026gtm=4e6980h2 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Wed, 09 Sep 2026 19:03:34 GMT\r\nexpires: Wed, 09 Sep 2026 19:03:34 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 148438\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":424171,"size_decoded":149022,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4922)","md5":"34a7d05e0dd282afcd98211fca5285ff","sha1":"7cf16a60e8cd681e19ba479671be92889ecb51f5","sha256":"dd12e38045ff1b1edd43591cab18c4a2c2e98ccd184cd17347d0790d8e5e64b1","sha512":"ffaa302a11d84dbf38eae89e33011fb9ccd94691e1b96ad7a941a5fc705b2d952c16d4d0a2d41f24b3208f046c7163ea1838c9f03eb69ab85d05858b191c687f","ssdeep":"6144:vZ1G6gXPyQSa7itv+7c4x7cAaOLESM3jNx2eYsox8e:+1yw7zg92so3","tlshash":"e2940acc73d6741293a3b574903f018ba27a79a2b84cc894f18adcd42d3469a9277f7d","first_seen":"2026-09-09T19:04:34.978544Z","last_seen":"2026-09-09T19:04:34.978544Z","times_seen":1,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bienfashion.live/img/cms/box-sukienki.png","fqdn":"bienfashion.live","domain":"bienfashion.live","tld":"live"},"ip":{"addr":"172.67.142.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:33.561Z","timestamp":1788980613561,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bienfashion.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:59:57 GMT","end":"Tue, 13 Oct 2026 09:57:37 GMT"},"fingerprint":{"sha1":"75:CD:C9:18:49:06:7B:DE:35:8C:74:34:2D:88:9C:66:56:85:39:3F","sha256":"E8:B4:97:2A:13:D1:14:AA:12:54:9C:39:0E:F9:57:49:B8:B3:CD:76:80:55:DF:45:E8:59:6E:3D:25:E3:FE:42"}}},"request":{"raw":"GET /img/cms/box-sukienki.png HTTP/1.1\r\nHost: bienfashion.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nCookie: PHPSESSID=3i417j132cqpnm5obqhji0mns3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 09 Sep 2026 19:03:33 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a3887422db02a264-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Fri, 09 Oct 2026 19:03:33 GMT\r\nlast-modified: Fri, 22 May 2026 10:11:24 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=604800; includeSubDomains, max-age=3600;\r\nvary: Accept\r\ncontent-security-policy: frame-ancestors 'self';\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yvQ6fs9OStePJHpJnWJAFHZ%2FA54KVBfXoB0vw9hT0s%2B7fROlNdvE1YWGCeaQPGhqa90CSdWlB6LkerPQhUuoK%2BWlad%2Bwn1Dnyd6MFr%2BD%2FuGwAWUv2EFHFvBxS0rxPeijzGSN\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 366231\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":366231,"size_decoded":367114,"mime_type":"image/png","magic":"PNG image data, 442 x 640, 8-bit/color RGB, non-interlaced","md5":"cec2e05de2254fa019d2164ee15ea143","sha1":"992e2383bb137db72b19b5178623a2e3ee43d7be","sha256":"8f819191d0bc05e0228844bfe8060877b3c87889d6d02c15627d1b17a52c2b31","sha512":"cadbc4c3456f14399b5eab09057065c6aae803c5ba50727e7f28e634f96645a6f76f77aa83535fcaf40b3ce7ff8c3c0b4929af323013bf0736e3e836c2ac0626","ssdeep":"6144:WYIohkwOZKzZlTWGBoJEGf1+CTFTrOTIU/3u0vduc8paA3FuFLIL6r8M:u+NCGi+q+wcIdYA3ghIL6F","tlshash":"c0742309ccea5d8f6bd9a0f63c4b5980b0fa48768b38d5917d565dc2e12db292201f2e","first_seen":"2026-09-09T19:04:34.980367Z","last_seen":"2026-09-09T19:04:34.980367Z","times_seen":1,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bienfashion.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bienfashion.live/img/cms/paralaxa.jpg","fqdn":"bienfashion.live","domain":"bienfashion.live","tld":"live"},"ip":{"addr":"172.67.142.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:33.978Z","timestamp":1788980613978,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bienfashion.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:59:57 GMT","end":"Tue, 13 Oct 2026 09:57:37 GMT"},"fingerprint":{"sha1":"75:CD:C9:18:49:06:7B:DE:35:8C:74:34:2D:88:9C:66:56:85:39:3F","sha256":"E8:B4:97:2A:13:D1:14:AA:12:54:9C:39:0E:F9:57:49:B8:B3:CD:76:80:55:DF:45:E8:59:6E:3D:25:E3:FE:42"}}},"request":{"raw":"GET /img/cms/paralaxa.jpg HTTP/1.1\r\nHost: bienfashion.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nCookie: PHPSESSID=3i417j132cqpnm5obqhji0mns3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 09 Sep 2026 19:03:34 GMT\r\ncontent-type: image/webp\r\npriority: u=4,i\r\ncf-ray: a38874256bc8a264-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 10 Oct 2022 10:27:24 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=604800; includeSubDomains, max-age=3600;\r\nvary: Accept\r\ncontent-security-policy: frame-ancestors 'self';\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yIOiSS%2Be5Xu0KvjFL5pjXHV85Rl2BHmJYg%2FuY65UZWSiH4DXgv0EwYS2oP5INeeoioYpINNsIVl7g6mbdxA5eH5XPF15VUmk2gMdgPHkPH%2BHa%2F84DT5k8JTWdeUIMh0Pz8em\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 73558\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":73558,"size_decoded":74395,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x1300, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9bc98530daad32d86166a2d54266aea1","sha1":"0e34d2c3e63caee3ecda38dbd77a6e2ff5de93ad","sha256":"fbe721920ac0987ed26cac441857817e9c3945ddfc8e28eb976a4e7314848c50","sha512":"e815751b5bc22de6aa7d43c07a826fb7de35064906271504e613cf85686fcc452344a5b38755a6cd29ab3e4f93dd32daa0fd45e85ed8b00c95017abb5eccd93d","ssdeep":"1536:Cf2XaGa3yuDO5NfG7wJgSsE4umaHXghOtDCybjwZ:Cf2qGCgjOqxAaHpFbjwZ","tlshash":"a57302eb2c4b40909fe8ee8b6de29317a7d48d14564d33b084201cd584e56ed6f6f5f0","first_seen":"2026-09-09T19:04:34.981926Z","last_seen":"2026-09-09T19:04:34.981926Z","times_seen":1,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":157,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bienfashion.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/images/cleardot.gif","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.153.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:34.901Z","timestamp":1788980614901,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:35 GMT","end":"Mon, 02 Nov 2026 08:37:34 GMT"},"fingerprint":{"sha1":"BC:1F:B5:F8:04:0C:7B:4F:F4:4F:20:30:D3:BA:66:E6:AF:8E:8F:AF","sha256":"8F:95:CC:30:E8:8F:6B:71:EF:35:1F:71:03:32:85:0C:55:44:E7:59:4A:F4:0B:1A:7E:11:9E:18:EF:D6:10:22"}}},"request":{"raw":"GET /images/cleardot.gif HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-type: image/gif\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 43\r\ndate: Wed, 09 Sep 2026 19:03:34 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\nlast-modified: Tue, 22 Oct 2019 18:30:00 GMT\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43,"size_decoded":717,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"fc94fb0c3ed8a8f909dbc7630a0987ff","sha1":"56d45f8a17f5078a20af9962c992ca4678450765","sha256":"2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363","sha512":"c87bf81fd70cf6434ca3a6c05ad6e9bd3f1d96f77dddad8d45ee043b126b2cb07a5cf23b4137b9d8462cd8a9adf2b463ab6de2b38c93db72d2d511ca60e3b57e","ssdeep":"","tlshash":"cb900003cac8c022c2a2c0300a0c03002bbaa8300228030ec0bc30fcec2a3a38c02000","first_seen":"2023-04-05T02:54:04Z","last_seen":"2026-10-15T00:01:39.401304Z","times_seen":103965,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":3,"connect":24,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/translate_static/img/te_ctrl3.gif","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:35.060Z","timestamp":1788980615060,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /translate_static/img/te_ctrl3.gif HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 1412\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 04 Sep 2026 10:13:06 GMT\r\nexpires: Sat, 04 Sep 2027 10:13:06 GMT\r\ncache-control: public, max-age=31536000\r\nage: 463829\r\nlast-modified: Thu, 03 Oct 2019 10:15:00 GMT\r\ncontent-type: image/gif\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1412,"size_decoded":2072,"mime_type":"image/gif","magic":"GIF image data, version 89a, 84 x 19","md5":"9afe50090c0bc612953d081295eab5b1","sha1":"71a4da2a622879c29176ecfa5afe1bbe3e8cfa40","sha256":"d228d0256370863119c043f1e5ca8f3930f6999bd9f250434b6d8935f45dc171","sha512":"d7290b951cec51994f3480c32b70de0faeca433b5d99209b044e1d4c12327768de8c344b6bded806d993251e0ee6f98f0dd64f4480e999fbc06abfe3dd8056fa","ssdeep":"","tlshash":"042182b5cc99114a5be1bd27a334899da8b12c56c38d74595436bdb43470f098422812","first_seen":"2023-04-05T08:27:37Z","last_seen":"2026-10-14T21:39:04.663351Z","times_seen":34957,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bienfashion.live/8383-home_default/polo-fioletowe-z-aplikacja-.jpg","fqdn":"bienfashion.live","domain":"bienfashion.live","tld":"live"},"ip":{"addr":"172.67.142.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:44.286Z","timestamp":1788980624286,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bienfashion.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:59:57 GMT","end":"Tue, 13 Oct 2026 09:57:37 GMT"},"fingerprint":{"sha1":"75:CD:C9:18:49:06:7B:DE:35:8C:74:34:2D:88:9C:66:56:85:39:3F","sha256":"E8:B4:97:2A:13:D1:14:AA:12:54:9C:39:0E:F9:57:49:B8:B3:CD:76:80:55:DF:45:E8:59:6E:3D:25:E3:FE:42"}}},"request":{"raw":"GET /8383-home_default/polo-fioletowe-z-aplikacja-.jpg HTTP/1.1\r\nHost: bienfashion.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nCookie: PHPSESSID=3i417j132cqpnm5obqhji0mns3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 09 Sep 2026 19:03:44 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3887465dcb3a264-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nlast-modified: Tue, 07 Jul 2026 12:27:22 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=604800; includeSubDomains, max-age=3600;\r\nvary: Accept\r\ncontent-security-policy: frame-ancestors 'self';\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Sy0%2FH4CvHi5iVPPFB5zQ%2BIuDUuu1ARQbjJHkxILZoe18tlkp0W3VsmAiotxsgGjhd%2FxnSz5N1CvLwG6azRB4ocrNFhJL1rzQ4hO5IY3cLpUkKyWE026Asv19b%2BvhEWZPIdTR\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 50188\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50188,"size_decoded":51025,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 356x458, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"96deb4661e2cade7f9fbfc1806c1f6f3","sha1":"dc3bcd3fe737968474a0b448eb62b946228918cf","sha256":"8ae635c3f9c53be71299e92336a0c117a98f1676c838154be71e459de3a28fff","sha512":"0d827a0c7a62bbda97603de255733706fced8f9d991f648e57e8788a5276f9b06fa0283784081fb3f3448ed21e2d6571f69a95cb24461f38c5634f42f052d4a8","ssdeep":"1536:qOgSmiS2G18Co9HC3JCbtjUnDLefd8bc9YgewvE/pSzw:qlSmf2g5QtQnQObc9Ygewc/pSk","tlshash":"8233f2e85730888a4273fcf69f7487285281d5f4a82d9c686764489945f6fdce26e3c2","first_seen":"2026-09-09T19:04:34.984112Z","last_seen":"2026-09-09T19:04:34.984112Z","times_seen":1,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bienfashion.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bienfashion.live/img/cms/Photoroom_20251005_085210.png","fqdn":"bienfashion.live","domain":"bienfashion.live","tld":"live"},"ip":{"addr":"172.67.142.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:33.559Z","timestamp":1788980613559,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bienfashion.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:59:57 GMT","end":"Tue, 13 Oct 2026 09:57:37 GMT"},"fingerprint":{"sha1":"75:CD:C9:18:49:06:7B:DE:35:8C:74:34:2D:88:9C:66:56:85:39:3F","sha256":"E8:B4:97:2A:13:D1:14:AA:12:54:9C:39:0E:F9:57:49:B8:B3:CD:76:80:55:DF:45:E8:59:6E:3D:25:E3:FE:42"}}},"request":{"raw":"GET /img/cms/Photoroom_20251005_085210.png HTTP/1.1\r\nHost: bienfashion.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nCookie: PHPSESSID=3i417j132cqpnm5obqhji0mns3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 09 Sep 2026 19:03:33 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a3887422dafda264-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Fri, 09 Oct 2026 19:03:33 GMT\r\nlast-modified: Fri, 24 Oct 2025 12:43:26 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=604800; includeSubDomains, max-age=3600;\r\nvary: Accept\r\ncontent-security-policy: frame-ancestors 'self';\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9DLQ1aCYzxlkglldeWMCTZioJ65JQJCVAdQtzXYcUV6Z%2BZ1LVIcuyQck%2FXxK%2Bag9RBKtDrt%2BosTiLSgn52wpQ4hlN2ooXSsmQ6dP1dfRxzAewfjth3PZA6kWTvfYw8x97RKh\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 99366\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":99366,"size_decoded":100244,"mime_type":"image/png","magic":"PNG image data, 400 x 600, 8-bit colormap, non-interlaced","md5":"bd729ae62dc8ff17ef5f1824cd62feb1","sha1":"fe95a8e7342ddb2692cfe831ca1a26d4656c10e4","sha256":"7a9a2897fb093e1291b3f8e1a2bb3c809f81675c4035da7c54f982644633e315","sha512":"69535a7cea039950ab737efaa993028faed5b7f7de248223f291545b3b76ef9c9ec06bf485e2ee4d0c2c5b4cc6435b53658e43795961612ef7337a92f18e80ff","ssdeep":"3072:6Ns1hsMs8lIiKL0wUtaazuvBYMieag2o7wVqJJ:t1msSutvCZRagd7GW","tlshash":"d2a302956bc4b64f235eac88d5fe2801e5023597ddf32831b43b566e9c9e22746dd038","first_seen":"2026-09-09T19:04:34.985228Z","last_seen":"2026-09-09T19:04:34.985228Z","times_seen":1,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bienfashion.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bienfashion.live/modules/revsliderprestashop/public/assets/js/extensions/revolution.extension.layeranimation.min.js?version=5.4.8","fqdn":"bienfashion.live","domain":"bienfashion.live","tld":"live"},"ip":{"addr":"172.67.142.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:34.174Z","timestamp":1788980614174,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bienfashion.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:59:57 GMT","end":"Tue, 13 Oct 2026 09:57:37 GMT"},"fingerprint":{"sha1":"75:CD:C9:18:49:06:7B:DE:35:8C:74:34:2D:88:9C:66:56:85:39:3F","sha256":"E8:B4:97:2A:13:D1:14:AA:12:54:9C:39:0E:F9:57:49:B8:B3:CD:76:80:55:DF:45:E8:59:6E:3D:25:E3:FE:42"}}},"request":{"raw":"GET /modules/revsliderprestashop/public/assets/js/extensions/revolution.extension.layeranimation.min.js?version=5.4.8 HTTP/1.1\r\nHost: bienfashion.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nCookie: PHPSESSID=3i417j132cqpnm5obqhji0mns3\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 09 Sep 2026 19:03:34 GMT\r\ncontent-type: text/javascript\r\npriority: u=3,i=?0\r\ncf-ray: a3887426ac65a264-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nexpires: Wed, 16 Sep 2026 19:03:34 GMT\r\nlast-modified: Thu, 05 Aug 2021 08:16:03 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=604800; includeSubDomains, max-age=3600;\r\nvary: Accept-Encoding\r\ncontent-security-policy: frame-ancestors 'self';\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g4oHPnud6AkEyXy5PDwACTKObPAQJoc%2BOxGevlfQ33TzNtXz2lpzLnV07KwZ1pt9nnGAvw72o6enYll9x7gzcwGW2mjEPLQrVFZqt%2B4TdM38asi0qPzQqQife60hY2C%2FBVYR\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14302\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55809,"size_decoded":15219,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (55556), with CRLF line terminators","md5":"a78982b40bf915f977f2bcb73e907934","sha1":"540b38654ca018e915d4de20f586f7999d5119f2","sha256":"f46438dc69e006684fd2254a035cd58fa8fc9277206bdf0f8c9a278bbfbc8756","sha512":"c2dab6d5e6cf86353a4e81b5257271500d6ead9bf2fa32328b70ee92ec852571e3990258f9ad4844187734454657f5295575a659e34de12f7ff7f7beae1225e2","ssdeep":"1536:AWS34eAk5Pljh5/dNAOQVja8les4DrC0XKxnA7Zz2hSoqadfjLB3lqo:AWS34M5Pljh5/dNAOQVja8lesdWZz2fZ","tlshash":"f643fcc5ed101cf952ab908ad07d456832247e3ce5078691f56af46e1e48e8232bbf7f","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-10-14T23:15:50.999875Z","times_seen":3690,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bienfashion.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bienfashion.live/#","fqdn":"bienfashion.live","domain":"bienfashion.live","tld":"live"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:34.885Z","timestamp":1788980614885,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bienfashion.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:59:57 GMT","end":"Tue, 13 Oct 2026 09:57:37 GMT"},"fingerprint":{"sha1":"75:CD:C9:18:49:06:7B:DE:35:8C:74:34:2D:88:9C:66:56:85:39:3F","sha256":"E8:B4:97:2A:13:D1:14:AA:12:54:9C:39:0E:F9:57:49:B8:B3:CD:76:80:55:DF:45:E8:59:6E:3D:25:E3:FE:42"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bienfashion.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nCookie: PHPSESSID=3i417j132cqpnm5obqhji0mns3\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T00:38:37.114452Z","times_seen":19109993,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bienfashion.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bienfashion.live/module/pmcookie/cookie?ajax=1\u0026action=getMessage","fqdn":"bienfashion.live","domain":"bienfashion.live","tld":"live"},"ip":{"addr":"172.67.142.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:34.544Z","timestamp":1788980614544,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bienfashion.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:59:57 GMT","end":"Tue, 13 Oct 2026 09:57:37 GMT"},"fingerprint":{"sha1":"75:CD:C9:18:49:06:7B:DE:35:8C:74:34:2D:88:9C:66:56:85:39:3F","sha256":"E8:B4:97:2A:13:D1:14:AA:12:54:9C:39:0E:F9:57:49:B8:B3:CD:76:80:55:DF:45:E8:59:6E:3D:25:E3:FE:42"}}},"request":{"raw":"GET /module/pmcookie/cookie?ajax=1\u0026action=getMessage HTTP/1.1\r\nHost: bienfashion.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nCookie: PHPSESSID=3i417j132cqpnm5obqhji0mns3\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=48TddLc35eALqogKtdHLie9s%2B0vz7VTxY9qRIxlmUMW%2BtqtMBG6GARJJNMZcGob8RPbnAtqn8qub%2FYD0%2B6mJqxfa2%2F5169i28whaRAdy9oLtJsScn%2FaUAneGzZ1s%2F4vNnyQV\"}]}\r\ndate: Wed, 09 Sep 2026 19:03:34 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a3887428fd56a264-CPH\r\ncf-cache-status: DYNAMIC\r\ncache-control: no-store, no-cache, must-revalidate\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nset-cookie: PrestaShop-174b0bddf27351720ac335367f2907ba=def502007ea22cd310b877d084408de4c713564687303d8bac742c62d6e595978fd945fd153f425314b100c5995096c2a9907a9d70a768ecf5820517f5001c37b9f8e364912e2cc02e011bedd153663b9ab10b6574571cb09fb9ec555a80250749a60b0691fce451971264280129c0e07a524e60891381a8aa790f53a5c96174ee99c08f8c8a8e868942a90919701ca1aa96b4abf965997a5c9ca22864a5afed8aaa93ac04023c74992e2760d09e0e818c360f3dd63dbd5333c72323e1e3d1d2c6b0bd905d681e4224a90e51cf2df4e25b4e49d563; expires=Tue, 29-Sep-2026 19:03:34 GMT; Max-Age=1728000; path=/; domain=bienfashion.pl; secure; HttpOnly; SameSite=Lax\r\nstrict-transport-security: max-age=604800; includeSubDomains, max-age=3600;\r\nvary: Accept-Encoding\r\ncontent-security-policy: frame-ancestors 'self';\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"PrestaShop-174b0bddf27351720ac335367f2907ba","value":"def502007ea22cd310b877d084408de4c713564687303d8bac742c62d6e595978fd945fd153f425314b100c5995096c2a9907a9d70a768ecf5820517f5001c37b9f8e364912e2cc02e011bedd153663b9ab10b6574571cb09fb9ec555a80250749a60b0691fce451971264280129c0e07a524e60891381a8aa790f53a5c96174ee99c08f8c8a8e868942a90919701ca1aa96b4abf965997a5c9ca22864a5afed8aaa93ac04023c74992e2760d09e0e818c360f3dd63dbd5333c72323e1e3d1d2c6b0bd905d681e4224a90e51cf2df4e25b4e49d563","quoted":false,"path":"/","domain":"bienfashion.pl","expires":"2026-09-29T19:03:34Z","raw_expires":"Tue, 29-Sep-2026 19:03:34 GMT","max_age":1728000,"secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"PrestaShop-174b0bddf27351720ac335367f2907ba=def502007ea22cd310b877d084408de4c713564687303d8bac742c62d6e595978fd945fd153f425314b100c5995096c2a9907a9d70a768ecf5820517f5001c37b9f8e364912e2cc02e011bedd153663b9ab10b6574571cb09fb9ec555a80250749a60b0691fce451971264280129c0e07a524e60891381a8aa790f53a5c96174ee99c08f8c8a8e868942a90919701ca1aa96b4abf965997a5c9ca22864a5afed8aaa93ac04023c74992e2760d09e0e818c360f3dd63dbd5333c72323e1e3d1d2c6b0bd905d681e4224a90e51cf2df4e25b4e49d563; expires=Tue, 29-Sep-2026 19:03:34 GMT; Max-Age=1728000; path=/; domain=bienfashion.pl; secure; HttpOnly; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1548,"size_decoded":2246,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"d582ac2519643177ea215a920c51f07f","sha1":"edac8002093495edbe50161dd61f55be7ebebc0f","sha256":"ed5afee77a2c768c7963d0344625da9ef06c734d8973c4581f1d49cd701e9f3b","sha512":"817b7b585283a4c4c80e512191fc63f315ec432631b18dec6b42624c2b43bd30525a655096de1552fe33597f473e7e9e840ef58503713b4eef6f7a075e66e37f","ssdeep":"","tlshash":"d031230fb714a66d625dce452c7db32fb17a6341653750ee00bea238c709023ce295da","first_seen":"2026-09-09T19:04:34.986942Z","last_seen":"2026-09-09T19:04:34.986942Z","times_seen":1,"resource_available":true,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bienfashion.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bienfashion.live/8379-home_default/sweter-ecru-kamelia-.jpg","fqdn":"bienfashion.live","domain":"bienfashion.live","tld":"live"},"ip":{"addr":"172.67.142.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bienfashion.live/","date":"2026-09-09T19:03:39.122Z","timestamp":1788980619122,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bienfashion.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 08:59:57 GMT","end":"Tue, 13 Oct 2026 09:57:37 GMT"},"fingerprint":{"sha1":"75:CD:C9:18:49:06:7B:DE:35:8C:74:34:2D:88:9C:66:56:85:39:3F","sha256":"E8:B4:97:2A:13:D1:14:AA:12:54:9C:39:0E:F9:57:49:B8:B3:CD:76:80:55:DF:45:E8:59:6E:3D:25:E3:FE:42"}}},"request":{"raw":"GET /8379-home_default/sweter-ecru-kamelia-.jpg HTTP/1.1\r\nHost: bienfashion.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bienfashion.live/\r\nCookie: PHPSESSID=3i417j132cqpnm5obqhji0mns3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 09 Sep 2026 19:03:39 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a38874459815a264-CPH\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 06 Jul 2026 14:05:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=604800; includeSubDomains, max-age=3600;\r\nvary: Accept\r\ncontent-security-policy: frame-ancestors 'self';\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nUXPpdWRcEqxR6peuddKV5qnXB47F90QoAL3ijHvRYiwh0GnKxQdSL2gwv6iDETDyV3Ks2z5zX91AsCeZnD3tBT%2F%2BzNAqMg3HlyxhKxkDmf0N2hAUZEJ8EfUoMSyCtRjQMYE\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 58308\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58308,"size_decoded":59141,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 356x458, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"fdb41842d09249d1418266a8086da149","sha1":"1e9e2e895e25202dc3e4885befc588719c3cfaae","sha256":"52df9e49619b9014f83e96bfb0dded447317db6ea95229d066ac295613867999","sha512":"91c6521705c2c1964ceedc08b9238bb230d054f293464a099feb067fc3d6f2a0f0acf4e14524b1f5e8b444f8f55038f1cf42372782e51ab94065ae5551b095d0","ssdeep":"1536:DgsD7Iw6DAq8hMD2k3gCrHgjU0zBnxXAZHPWnjItCYVs:yFDAO1wCDgjh9xmHYEi","tlshash":"9043127cb98e324f1e5f50f948b43acf162d0297a722b47105469ca488b4ceae7d79cc","first_seen":"2026-09-09T19:04:34.988067Z","last_seen":"2026-09-09T19:04:34.988067Z","times_seen":1,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bienfashion.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bienfashion.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}