GET www.buckcamp.shop/uploads/p/25/07/intentionally-blank-heels-bica-wedge-sandal--women_x350.jpg
172.67.223.108200 OK 9.9 kB URL GET HTTPS
www.buckcamp.shop/uploads/p/25/07/intentionally-blank-heels-bica-wedge-sandal--women_x350.jpg
IP / ASN
172.67.223.108
#13335 CLOUDFLARENET
Requested by https://www.buckcamp.shop/
Resource Info
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality", baseline, precision 8, 350x525, components 3
First Seen 2025-08-06
Last Seen 2025-08-06
Times Seen 1
Size 9.9 kB (9851 bytes)
MD5 995eccdc270741f2ec9e714721e40860
SHA1 4cf42f4d7fee1b8b11f8dacc82b231613170246e
SHA256 ef348d8b2b6d717091335ab6ea2d3fcbfbaeee4fa1918c45c756a2d115b34e99
Certificate Info
Issuer Google Trust Services
Subject buckcamp.shop
Fingerprint 14:20:40:4A:96:E9:4B:EB:AA:51:F0:3D:59:DD:2D:DA:2A:79:F9:AF
Validity Sun, 27 Jul 2025 06:36:05 GMT - Sat, 25 Oct 2025 07:33:53 GMT
Technology Fingerprints
Cloudflare (CDN) Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /uploads/p/25/07/intentionally-blank-heels-bica-wedge-sandal--women_x350.jpg HTTP/1.1
Host: www.buckcamp.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.buckcamp.shop/
Cookie: PHPSESSID=8nfr49u714kj1lellcq6didoot
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 06 Aug 2025 12:46:01 GMT
content-type: image/jpeg
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: Accept-Encoding
last-modified: Fri, 18 Jul 2025 00:49:43 GMT
etag: W/"68799a27-267b"
expires: Fri, 05 Sep 2025 12:46:01 GMT
cache-control: max-age=2592000
content-encoding: gzip
cf-cache-status: MISS
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=qAyx5SshORsUOyyeuKj4xQ9lnj06htf2RNP%2FNy7ca59F3Pkonwdm5jVOatmPh69BcMxVOWLmjSoZEAHatSSShmtbj8jl5rVsTISXjRqmFg%3D%3D"}]}
cf-ray: 96aea277fe1a56a4-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET www.buckcamp.shop/images/search_black.svg
172.67.223.108200 OK 1.2 kB URL GET HTTPS
www.buckcamp.shop/images/search_black.svg
IP / ASN
172.67.223.108
#13335 CLOUDFLARENET
Requested by https://www.buckcamp.shop/
Resource Info
File type SVG Scalable Vector Graphics image
First Seen 2025-01-06
Last Seen 2025-08-08
Times Seen 323
Size 1.2 kB (1209 bytes)
MD5 a1ed64183932bcc70b9fc98875e1e866
SHA1 58f19632f6aef162e67efb4e3f1386bbc19d55fc
SHA256 74400765f7ee7e7a4ac7920e0174f940e08eb79d8fe098f4c9114987de3f006e
Certificate Info
Issuer Google Trust Services
Subject buckcamp.shop
Fingerprint 14:20:40:4A:96:E9:4B:EB:AA:51:F0:3D:59:DD:2D:DA:2A:79:F9:AF
Validity Sun, 27 Jul 2025 06:36:05 GMT - Sat, 25 Oct 2025 07:33:53 GMT
Technology Fingerprints
Cloudflare (CDN) Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /images/search_black.svg HTTP/1.1
Host: www.buckcamp.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.buckcamp.shop/storePress/css/style.css?ver=1
Cookie: PHPSESSID=8nfr49u714kj1lellcq6didoot
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 06 Aug 2025 12:46:01 GMT
content-type: image/svg+xml
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sCTWutjpu1W90Jc79KiYj6mGolWH1tYlPyMu2uraEB0lC37cLd%2B1QqL0agJmmjfjNvWFo1x2dWoDCa7Uc4TDxq3E7YjLcOI6GLuPJZmpbsORwS36FmxS0gsW2J7%2BPaoL5R0VrA%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Mon, 21 Apr 2025 15:55:46 GMT
vary: Accept-Encoding
etag: W/"68066a82-4b9"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 96aea27b8eb97129-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1757&min_rtt=0&rtt_var=1655&sent=126&recv=85&lost=0&retrans=0&sent_bytes=94391&recv_bytes=6099&delivery_rate=18795006&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=30666&unsent_bytes=0&cid=314d94df0544b6a9&ts=1270&inflight_dur=53&x=40"
GET fonts.gstatic.com/s/poppins/v23/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2
142.250.74.35200 OK 8.0 kB URL GET HTTPS
fonts.gstatic.com/s/poppins/v23/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2
IP / ASN
142.250.74.35
#15169 GOOGLE
Requested by https://www.buckcamp.shop/
Resource Info
File type Web Open Font Format (Version 2), TrueType, length 8000, version 1.0
First Seen 2023-04-05
Last Seen 2025-08-09
Times Seen 59857
Size 8.0 kB (8000 bytes)
MD5 72993dddf88a63e8f226656f7de88e57
SHA1 179f97ec0275f09603a8db94d4380eb584d81cd5
SHA256 f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149
Certificate Info
Issuer Google Trust Services
Subject *.gstatic.com
Fingerprint 43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD
Validity Mon, 07 Jul 2025 08:35:11 GMT - Mon, 29 Sep 2025 08:35:10 GMT
GET /s/poppins/v23/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.buckcamp.shop
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 8000
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 31 Jul 2025 10:12:42 GMT
expires: Fri, 31 Jul 2026 10:12:42 GMT
cache-control: public, max-age=31536000
age: 527599
last-modified: Wed, 23 Apr 2025 16:07:17 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET www.buckcamp.shop/uploads/25/07/2.png
172.67.223.108200 OK 1.8 kB URL GET HTTPS
www.buckcamp.shop/uploads/25/07/2.png
IP / ASN
172.67.223.108
#13335 CLOUDFLARENET
Requested by https://www.buckcamp.shop/
Resource Info
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
First Seen 2025-08-05
Last Seen 2025-08-08
Times Seen 3
Size 1.8 kB (1816 bytes)
MD5 8a7effc85cfc490b4e1c1cd3bf25a7e4
SHA1 dbb1272cde1b0902be2fe740723c94732500cf5f
SHA256 6dd2de6942e746b693cb9bb186d75e78a409ea7944bfa76d0fd71cbbf776f12d
Certificate Info
Issuer Google Trust Services
Subject buckcamp.shop
Fingerprint 14:20:40:4A:96:E9:4B:EB:AA:51:F0:3D:59:DD:2D:DA:2A:79:F9:AF
Validity Sun, 27 Jul 2025 06:36:05 GMT - Sat, 25 Oct 2025 07:33:53 GMT
Technology Fingerprints
Cloudflare (CDN) Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /uploads/25/07/2.png HTTP/1.1
Host: www.buckcamp.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.buckcamp.shop/
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=8nfr49u714kj1lellcq6didoot
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 06 Aug 2025 12:46:03 GMT
content-type: image/png
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MhoHfQHjxnjBNLK8IRZkaUTGM25fWg09GjYu4MDEsbs5MIVBr2kiMnlA4gFwI%2FQfvpl30Xp7zp1HlgCynbRw9LniqAhFVrBnaaScHF19%2FCAJvza4XQUXdZtTTvKux%2FHCbr2bAA%3D%3D"}],"group":"cf-nel","max_age":604800}
vary: Accept-Encoding
last-modified: Mon, 21 Jul 2025 06:48:34 GMT
etag: W/"687de2c2-718"
expires: Sun, 31 Aug 2025 19:46:48 GMT
cache-control: max-age=2592000
content-encoding: gzip
cf-cache-status: MISS
cf-ray: 96aea283af0c7129-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1164&min_rtt=0&rtt_var=540&sent=411&recv=112&lost=0&retrans=0&sent_bytes=473624&recv_bytes=7882&delivery_rate=23493874&ss_exit_cwnd=30666&ss_exit_reason=2&cwnd=34959&unsent_bytes=0&cid=314d94df0544b6a9&ts=2528&inflight_dur=119&x=40"
GET fonts.gstatic.com/s/poppins/v23/pxiEyp8kv8JHgFVrJJfecg.woff2
142.250.74.35200 OK 7.9 kB URL GET HTTPS
fonts.gstatic.com/s/poppins/v23/pxiEyp8kv8JHgFVrJJfecg.woff2
IP / ASN
142.250.74.35
#15169 GOOGLE
Requested by https://www.buckcamp.shop/
Resource Info
File type Web Open Font Format (Version 2), TrueType, length 7884, version 1.0
First Seen 2023-04-05
Last Seen 2025-08-09
Times Seen 108021
Size 7.9 kB (7884 bytes)
MD5 9212f6f9860f9fc6c69b02fedf6db8c3
SHA1 ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b
SHA256 7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f
Certificate Info
Issuer Google Trust Services
Subject *.gstatic.com
Fingerprint 43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD
Validity Mon, 07 Jul 2025 08:35:11 GMT - Mon, 29 Sep 2025 08:35:10 GMT
GET /s/poppins/v23/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.buckcamp.shop
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7884
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 31 Jul 2025 10:06:17 GMT
expires: Fri, 31 Jul 2026 10:06:17 GMT
cache-control: public, max-age=31536000
age: 527984
last-modified: Wed, 23 Apr 2025 16:05:59 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET www.buckcamp.shop/css/font-awesome-4.7.0/css/font-awesome.css?ver=1
172.67.223.108200 OK 37 kB URL GET HTTPS
www.buckcamp.shop/css/font-awesome-4.7.0/css/font-awesome.css?ver=1
IP / ASN
172.67.223.108
#13335 CLOUDFLARENET
Requested by https://www.buckcamp.shop/
Resource Info
File type troff or preprocessor input, ASCII text, with very long lines (372)
First Seen 2023-04-05
Last Seen 2025-08-09
Times Seen 70466
Size 37 kB (37414 bytes)
MD5 c495654869785bc3df60216616814ad1
SHA1 0140952c64e3f2b74ef64e050f2fe86eab6624c8
SHA256 36e0a7e08bee65774168528938072c536437669c1b7458ac77976ec788e4439c
Certificate Info
Issuer Google Trust Services
Subject buckcamp.shop
Fingerprint 14:20:40:4A:96:E9:4B:EB:AA:51:F0:3D:59:DD:2D:DA:2A:79:F9:AF
Validity Sun, 27 Jul 2025 06:36:05 GMT - Sat, 25 Oct 2025 07:33:53 GMT
Technology Fingerprints
Cloudflare (CDN) Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /css/font-awesome-4.7.0/css/font-awesome.css?ver=1 HTTP/1.1
Host: www.buckcamp.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.buckcamp.shop/
Cookie: PHPSESSID=8nfr49u714kj1lellcq6didoot
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 06 Aug 2025 12:46:01 GMT
content-type: text/css
server: cloudflare
last-modified: Mon, 21 Apr 2025 15:56:42 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: Accept-Encoding
etag: W/"68066aba-9226"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=XEHCBvQHrJzhr7muDzkG%2FshyWy74qJkgLzGofVTwOLt2RfX%2Bq9dDCXO2ngFGgffvGHS5N8Ig1Ugw7pLWn%2FLuXycImDIHLdDbuT%2B8HRFUNg%3D%3D"}]}
cf-ray: 96aea277bd8256a4-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET www.buckcamp.shop/js/all.js?ver=1
172.67.223.108200 OK 58 kB URL GET HTTPS
www.buckcamp.shop/js/all.js?ver=1
IP / ASN
172.67.223.108
#13335 CLOUDFLARENET
Requested by https://www.buckcamp.shop/
Resource Info
File type JavaScript source, ASCII text
First Seen 2025-05-05
Last Seen 2025-08-08
Times Seen 463
Size 58 kB (57528 bytes)
MD5 d969ea2b9ecd39377d2688699a7b2e28
SHA1 65f5d904cf89c82e6bd4efa3a24bb326c399a8f9
SHA256 526f26c1138df8e3ea782fe0fbd8316c1a9b1514ff1584527496f063bab77074
Certificate Info
Issuer Google Trust Services
Subject buckcamp.shop
Fingerprint 14:20:40:4A:96:E9:4B:EB:AA:51:F0:3D:59:DD:2D:DA:2A:79:F9:AF
Validity Sun, 27 Jul 2025 06:36:05 GMT - Sat, 25 Oct 2025 07:33:53 GMT
Technology Fingerprints
Cloudflare (CDN) Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/all.js?ver=1 HTTP/1.1
Host: www.buckcamp.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.buckcamp.shop/
Cookie: PHPSESSID=8nfr49u714kj1lellcq6didoot
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 06 Aug 2025 12:46:01 GMT
content-type: application/javascript
server: cloudflare
last-modified: Fri, 16 May 2025 08:50:16 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: Accept-Encoding
etag: W/"6826fc48-e0b8"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=RpfRPa5puENS3EDsuVu0x%2F3ZidDdGZ%2BLj6%2Bu6T29HxzNk4%2FFZcDuMzvDu0Nua0e4MbbxwWe4Bl0Y4uNoVXdn2Vztp%2FZ2P%2BmCa%2B%2FtjPGBKw%3D%3D"}]}
cf-ray: 96aea277cda356a4-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET www.buckcamp.shop/uploads/p/25/07/intentionally-blank-socks-trouser-socks--women_x350.jpg
172.67.223.108200 OK 9.2 kB URL GET HTTPS
www.buckcamp.shop/uploads/p/25/07/intentionally-blank-socks-trouser-socks--women_x350.jpg
IP / ASN
172.67.223.108
#13335 CLOUDFLARENET
Requested by https://www.buckcamp.shop/
Resource Info
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality", baseline, precision 8, 350x525, components 3
First Seen 2025-08-06
Last Seen 2025-08-06
Times Seen 1
Size 9.2 kB (9163 bytes)
MD5 3b4cdcb6532f387da585d6f694b699e1
SHA1 8ed1c11bfc4affde41399c80f3e74c93ed8433bd
SHA256 db23822492ec97ebeb408707fb8ec4ddfcace7080b3a41dd4863bc2e68aebf61
Certificate Info
Issuer Google Trust Services
Subject buckcamp.shop
Fingerprint 14:20:40:4A:96:E9:4B:EB:AA:51:F0:3D:59:DD:2D:DA:2A:79:F9:AF
Validity Sun, 27 Jul 2025 06:36:05 GMT - Sat, 25 Oct 2025 07:33:53 GMT
Technology Fingerprints
Cloudflare (CDN) Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /uploads/p/25/07/intentionally-blank-socks-trouser-socks--women_x350.jpg HTTP/1.1
Host: www.buckcamp.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.buckcamp.shop/
Cookie: PHPSESSID=8nfr49u714kj1lellcq6didoot
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 06 Aug 2025 12:46:01 GMT
content-type: image/jpeg
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: Accept-Encoding
last-modified: Fri, 18 Jul 2025 00:26:23 GMT
etag: W/"687994af-23cb"
expires: Fri, 05 Sep 2025 12:46:01 GMT
cache-control: max-age=2592000
content-encoding: gzip
cf-cache-status: MISS
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=axzExDdgQL9qUOKfhSmKw8CCRneRvFIxncykY3oxvjVetnf16IzXuJTNg7rkNLY8W9E2n%2BFhFh2KaJ0%2FiagNaBG8Bwq8p3jpi8BA4gpWdA%3D%3D"}]}
cf-ray: 96aea277fe1256a4-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET www.buckcamp.shop/uploads/p/25/07/intentionally-blank-heels-near-metallic-heeled-sandal--women_x350.jpg
172.67.223.108200 OK 11 kB URL GET HTTPS
www.buckcamp.shop/uploads/p/25/07/intentionally-blank-heels-near-metallic-heeled-sandal--women_x350.jpg
IP / ASN
172.67.223.108
#13335 CLOUDFLARENET
Requested by https://www.buckcamp.shop/
Resource Info
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality", baseline, precision 8, 350x525, components 3
First Seen 2025-08-06
Last Seen 2025-08-06
Times Seen 1
Size 11 kB (10872 bytes)
MD5 38b433306f69fc5e4dd6fcad9fdc8f6e
SHA1 6973b9b30118992789df6adaed95b6548a302b4a
SHA256 05f4fae1f0ac76398e9ea8848471feff52c105bb48ddf9fd619b9fe9b366f6a7
Certificate Info
Issuer Google Trust Services
Subject buckcamp.shop
Fingerprint 14:20:40:4A:96:E9:4B:EB:AA:51:F0:3D:59:DD:2D:DA:2A:79:F9:AF
Validity Sun, 27 Jul 2025 06:36:05 GMT - Sat, 25 Oct 2025 07:33:53 GMT
Technology Fingerprints
Cloudflare (CDN) Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /uploads/p/25/07/intentionally-blank-heels-near-metallic-heeled-sandal--women_x350.jpg HTTP/1.1
Host: www.buckcamp.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.buckcamp.shop/
Cookie: PHPSESSID=8nfr49u714kj1lellcq6didoot
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 06 Aug 2025 12:46:01 GMT
content-type: image/jpeg
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: Accept-Encoding
last-modified: Fri, 18 Jul 2025 00:50:25 GMT
etag: W/"68799a51-2a78"
expires: Fri, 05 Sep 2025 12:46:01 GMT
cache-control: max-age=2592000
content-encoding: gzip
cf-cache-status: MISS
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=1pDhpLrFMCZilEnB9IjSiUCxIEHfT2mCGvAewoybAxvY7y52aSFqZ%2F%2BnANwaw9sncy6fCrffH1Gs1od5bGSKao0BTU0%2BdspPbmHltelyHw%3D%3D"}]}
cf-ray: 96aea2780e2556a4-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
172.67.223.108200 OK 28 kB URL User Request GET HTTPS
www.buckcamp.shop/
IP / ASN
172.67.223.108
#13335 CLOUDFLARENET
Resource Info
File type HTML document, Unicode text, UTF-8 text, with very long lines (1273)
First Seen 2025-08-06
Last Seen 2025-08-06
Times Seen 1
Size 28 kB (28395 bytes)
MD5 560821690df7505869bcfe593752368c
SHA1 e1499d4166aa22f801ba01e50497c66068e04524
SHA256 40ea293ece4886270fb8fa860d5bfc573055b3f6d63655cc56b345507aa8d9f7
Certificate Info
Issuer Google Trust Services
Subject buckcamp.shop
Fingerprint 14:20:40:4A:96:E9:4B:EB:AA:51:F0:3D:59:DD:2D:DA:2A:79:F9:AF
Validity Sun, 27 Jul 2025 06:36:05 GMT - Sat, 25 Oct 2025 07:33:53 GMT
Technology Fingerprints
Cloudflare (CDN) Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
PHP (Programming languages) PHP is a general-purpose scripting language used for web development.
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET / HTTP/1.1
Host: www.buckcamp.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 06 Aug 2025 12:46:00 GMT
content-type: text/html; charset=UTF-8
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: Accept-Encoding
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=cqyJmsmIuf8zuIz7diQSQuuk%2BzmHhERdmgumVZFwbBJArjK3iR6GHQoj%2BVVliqtqoJh65rd9wYw8P%2FviQamvVzpb%2FIVHae4Gx6uAY8C8QQ%3D%3D"}]}
cf-cache-status: DYNAMIC
content-encoding: br
set-cookie: PHPSESSID=8nfr49u714kj1lellcq6didoot; Path=/
cf-ray: 96aea2729e7556a4-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET www.buckcamp.shop/uploads/p/25/07/intentionally-blank-mules-honcho-mule-black-sole--women_x350.jpg
172.67.223.108200 OK 12 kB URL GET HTTPS
www.buckcamp.shop/uploads/p/25/07/intentionally-blank-mules-honcho-mule-black-sole--women_x350.jpg
IP / ASN
172.67.223.108
#13335 CLOUDFLARENET
Requested by https://www.buckcamp.shop/
Resource Info
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality", baseline, precision 8, 350x525, components 3
First Seen 2025-08-06
Last Seen 2025-08-06
Times Seen 1
Size 12 kB (11686 bytes)
MD5 5d029c3035ee68791ac0ba8506d34168
SHA1 0b1454d174bb915a2193a84d1b595c62a9444946
SHA256 4633441d54428619be9123d5e6641907d25e8d6eacd81a1574750faa0e99d131
Certificate Info
Issuer Google Trust Services
Subject buckcamp.shop
Fingerprint 14:20:40:4A:96:E9:4B:EB:AA:51:F0:3D:59:DD:2D:DA:2A:79:F9:AF
Validity Sun, 27 Jul 2025 06:36:05 GMT - Sat, 25 Oct 2025 07:33:53 GMT
Technology Fingerprints
Cloudflare (CDN) Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /uploads/p/25/07/intentionally-blank-mules-honcho-mule-black-sole--women_x350.jpg HTTP/1.1
Host: www.buckcamp.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.buckcamp.shop/
Cookie: PHPSESSID=8nfr49u714kj1lellcq6didoot
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 06 Aug 2025 12:46:01 GMT
content-type: image/jpeg
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: Accept-Encoding
last-modified: Fri, 18 Jul 2025 00:25:21 GMT
etag: W/"68799471-2da6"
expires: Fri, 05 Sep 2025 09:48:22 GMT
cache-control: max-age=2592000
content-encoding: gzip
cf-cache-status: MISS
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=Wg%2FtFc6NSUzM4HJrP3BISfQZ1%2BDSBf%2FXVPEaK6xuA8fg%2FOACAkOwpq8rD2yzrANg%2BTgtX%2Ft51Dmzrif1FzjtvnNoH2X7YWvSjuceSzpv6A%3D%3D"}]}
cf-ray: 96aea277fe1c56a4-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET www.buckcamp.shop/uploads/p/25/07/intentionally-blank-leo-zodiac-pullover--women_x150.jpg
172.67.223.108200 OK 4.2 kB URL GET HTTPS
www.buckcamp.shop/uploads/p/25/07/intentionally-blank-leo-zodiac-pullover--women_x150.jpg
IP / ASN
172.67.223.108
#13335 CLOUDFLARENET
Requested by https://www.buckcamp.shop/
Resource Info
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality", baseline, precision 8, 150x225, components 3
First Seen 2025-08-06
Last Seen 2025-08-06
Times Seen 1
Size 4.2 kB (4177 bytes)
MD5 c56de675697b158b76cf3636d781b5a7
SHA1 e50cf6ab5162e55c7ce515fb7f7915d1c4f540ac
SHA256 0d4cc211c7948df65731f9377ec020a0c486ba89203caf65643864b2d09002b8
Certificate Info
Issuer Google Trust Services
Subject buckcamp.shop
Fingerprint 14:20:40:4A:96:E9:4B:EB:AA:51:F0:3D:59:DD:2D:DA:2A:79:F9:AF
Validity Sun, 27 Jul 2025 06:36:05 GMT - Sat, 25 Oct 2025 07:33:53 GMT
Technology Fingerprints
Cloudflare (CDN) Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /uploads/p/25/07/intentionally-blank-leo-zodiac-pullover--women_x150.jpg HTTP/1.1
Host: www.buckcamp.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.buckcamp.shop/
Cookie: PHPSESSID=8nfr49u714kj1lellcq6didoot
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 06 Aug 2025 12:46:01 GMT
content-type: image/jpeg
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: Accept-Encoding
last-modified: Fri, 18 Jul 2025 00:26:50 GMT
etag: W/"687994ca-1051"
expires: Fri, 05 Sep 2025 12:46:01 GMT
cache-control: max-age=2592000
content-encoding: gzip
cf-cache-status: MISS
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=smT0y4qa%2F7JGWruFVD5D2wmOAsZMBzO3jkk9RQzeJCU5QfNlIFGn2zPlbamWzoqeXR3O02RgnlLEDsN7bCpr9tRAWlmyJu5mS4m2zLK6VQ%3D%3D"}]}
cf-ray: 96aea2780e2756a4-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET www.buckcamp.shop/css/font-awesome-4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0
172.67.223.108200 OK 77 kB URL GET HTTPS
www.buckcamp.shop/css/font-awesome-4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0
IP / ASN
172.67.223.108
#13335 CLOUDFLARENET
Requested by https://www.buckcamp.shop/
Resource Info
File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459
First Seen 2023-04-05
Last Seen 2025-08-09
Times Seen 173620
Size 77 kB (77160 bytes)
MD5 af7ae505a9eed503f8b8e6982036873e
SHA1 d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
SHA256 2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
Certificate Info
Issuer Google Trust Services
Subject buckcamp.shop
Fingerprint 14:20:40:4A:96:E9:4B:EB:AA:51:F0:3D:59:DD:2D:DA:2A:79:F9:AF
Validity Sun, 27 Jul 2025 06:36:05 GMT - Sat, 25 Oct 2025 07:33:53 GMT
Technology Fingerprints
Cloudflare (CDN) Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /css/font-awesome-4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: www.buckcamp.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://www.buckcamp.shop/css/font-awesome-4.7.0/css/font-awesome.css?ver=1
Cookie: PHPSESSID=8nfr49u714kj1lellcq6didoot
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 06 Aug 2025 12:46:01 GMT
content-type: font/woff2
content-length: 77160
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GIIxSUYgGtoXnZHqMtYOdzfwN2XpPkEGUVAhK%2BOzg2OWBmmhH3SBNqPRPd5F9gcomrwSGURB3WsAlFAK0X3Rbo8xtzoOE6t%2FEJgpuSXOEAjF9tNk%2F4CpDraJBuaDnVoktCfBHQ%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Mon, 21 Apr 2025 15:56:43 GMT
etag: "68066abb-12d68"
accept-ranges: bytes
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 96aea27bdebc7129-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4008&min_rtt=786&rtt_var=2014&sent=63&recv=74&lost=0&retrans=0&sent_bytes=7762&recv_bytes=5605&delivery_rate=488182&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=18066&unsent_bytes=0&cid=314d94df0544b6a9&ts=1091&inflight_dur=30&x=40"
GET www.buckcamp.shop/favicon.ico
172.67.223.108301 Moved Permanently 1.8 kB URL GET HTTPS
www.buckcamp.shop/favicon.ico
IP / ASN
172.67.223.108
#13335 CLOUDFLARENET
Requested by https://www.buckcamp.shop/
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-09
Times Seen 5738900
Size 1.8 kB (1816 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Google Trust Services
Subject buckcamp.shop
Fingerprint 14:20:40:4A:96:E9:4B:EB:AA:51:F0:3D:59:DD:2D:DA:2A:79:F9:AF
Validity Sun, 27 Jul 2025 06:36:05 GMT - Sat, 25 Oct 2025 07:33:53 GMT
Technology Fingerprints
Cloudflare (CDN) Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /favicon.ico HTTP/1.1
Host: www.buckcamp.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.buckcamp.shop/
Cookie: PHPSESSID=8nfr49u714kj1lellcq6didoot
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 301 Moved Permanently
date: Wed, 06 Aug 2025 12:46:02 GMT
content-type: text/html; charset=UTF-8
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IXeryiuwtu8Jh8xDq0wNpfds72o%2BzneDCASeYYJXF%2FhLEKE%2FA8iayyCjEktENDQoG8TRhoY5fy%2FM3g0%2BCsMshSpuFGviGLyEG7XfMX9b0dB6yznvHlQKjT%2Fd1IiNcImvpE85Cg%3D%3D"}],"group":"cf-nel","max_age":604800}
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
location: /uploads/25/07/2.png
cf-cache-status: BYPASS
cf-ray: 96aea2810f007129-OSL
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1190&min_rtt=0&rtt_var=651&sent=409&recv=110&lost=0&retrans=0&sent_bytes=472859&recv_bytes=7525&delivery_rate=23493874&ss_exit_cwnd=30666&ss_exit_reason=2&cwnd=34959&unsent_bytes=0&cid=314d94df0544b6a9&ts=2159&inflight_dur=98&x=40"
GET www.buckcamp.shop/uploads/25/07/1-2.png
172.67.223.108200 OK 6.6 kB URL GET HTTPS
www.buckcamp.shop/uploads/25/07/1-2.png
IP / ASN
172.67.223.108
#13335 CLOUDFLARENET
Requested by https://www.buckcamp.shop/
Resource Info
File type PNG image data, 250 x 60, 8-bit/color RGBA, non-interlaced
First Seen 2025-08-06
Last Seen 2025-08-06
Times Seen 1
Size 6.6 kB (6553 bytes)
MD5 aa22a67f29bd2f18b3afb264befeff71
SHA1 638b6ba828416f46c937fd623a324c9fa1c02c3a
SHA256 e8cc8bd5c73500f0defc013c87e256f4d377072f696689e62e4f9b2e1e9150d7
Certificate Info
Issuer Google Trust Services
Subject buckcamp.shop
Fingerprint 14:20:40:4A:96:E9:4B:EB:AA:51:F0:3D:59:DD:2D:DA:2A:79:F9:AF
Validity Sun, 27 Jul 2025 06:36:05 GMT - Sat, 25 Oct 2025 07:33:53 GMT
Technology Fingerprints
Cloudflare (CDN) Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /uploads/25/07/1-2.png HTTP/1.1
Host: www.buckcamp.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.buckcamp.shop/
Cookie: PHPSESSID=8nfr49u714kj1lellcq6didoot
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 06 Aug 2025 12:46:01 GMT
content-type: image/png
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: Accept-Encoding
last-modified: Mon, 21 Jul 2025 06:48:30 GMT
etag: W/"687de2be-1999"
expires: Thu, 04 Sep 2025 05:19:42 GMT
cache-control: max-age=2592000
content-encoding: gzip
cf-cache-status: MISS
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=kKf8s2LtkgpYC8uRq4%2Bko9fwy2GPAZRbtUQ%2FoQanuw11ZWr%2Bh6BX5WZbjJE8sngK3Kpx8JzrX3WaFgaiyNo9XWJ3HWZtbnnnSYVkib6Gkg%3D%3D"}]}
cf-ray: 96aea277cda956a4-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET www.buckcamp.shop/uploads/p/25/07/intentionally-blank-heels-margie-heel--women_x350.jpg
172.67.223.108200 OK 7.7 kB URL GET HTTPS
www.buckcamp.shop/uploads/p/25/07/intentionally-blank-heels-margie-heel--women_x350.jpg
IP / ASN
172.67.223.108
#13335 CLOUDFLARENET
Requested by https://www.buckcamp.shop/
Resource Info
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality", baseline, precision 8, 350x525, components 3
First Seen 2025-08-06
Last Seen 2025-08-06
Times Seen 1
Size 7.7 kB (7746 bytes)
MD5 687b0e313081d66c57676122ef015787
SHA1 ec2c9d20c26c3d5aaa68a6fc193e3c54a7508bdb
SHA256 ef253090b844f804314ea139e4e1fe56252bd021ab6b2ed153cb67308ad8e448
Certificate Info
Issuer Google Trust Services
Subject buckcamp.shop
Fingerprint 14:20:40:4A:96:E9:4B:EB:AA:51:F0:3D:59:DD:2D:DA:2A:79:F9:AF
Validity Sun, 27 Jul 2025 06:36:05 GMT - Sat, 25 Oct 2025 07:33:53 GMT
Technology Fingerprints
Cloudflare (CDN) Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /uploads/p/25/07/intentionally-blank-heels-margie-heel--women_x350.jpg HTTP/1.1
Host: www.buckcamp.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.buckcamp.shop/
Cookie: PHPSESSID=8nfr49u714kj1lellcq6didoot
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 06 Aug 2025 12:46:01 GMT
content-type: image/jpeg
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: Accept-Encoding
last-modified: Fri, 18 Jul 2025 00:47:37 GMT
etag: W/"687999a9-1e42"
expires: Fri, 05 Sep 2025 12:46:01 GMT
cache-control: max-age=2592000
content-encoding: gzip
cf-cache-status: MISS
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=24dlO7cst%2FVWbnEYymG5ZjlP5J22i4sD%2BozUpg%2FPzWWfd4s0%2BCQah7oa3UKZVprVhAI4CSAhOIzBxIE309kb%2FYH1q5Tv71PGPNrtXaijig%3D%3D"}]}
cf-ray: 96aea277fe1556a4-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET www.buckcamp.shop/storePress/images/footer_bg.jpg
172.67.223.108200 OK 226 kB URL GET HTTPS
www.buckcamp.shop/storePress/images/footer_bg.jpg
IP / ASN
172.67.223.108
#13335 CLOUDFLARENET
Requested by https://www.buckcamp.shop/
Resource Info
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x719, components 1
First Seen 2024-07-05
Last Seen 2025-08-08
Times Seen 821
Size 226 kB (226031 bytes)
MD5 5c78854fd911e32df333cd65acbad309
SHA1 eedd80e1bc194358cba5095ff25cc5182234e623
SHA256 0bd297812671b50d62756535e8385bdcb4e7a435024ff643d6bda54060d3221f
Certificate Info
Issuer Google Trust Services
Subject buckcamp.shop
Fingerprint 14:20:40:4A:96:E9:4B:EB:AA:51:F0:3D:59:DD:2D:DA:2A:79:F9:AF
Validity Sun, 27 Jul 2025 06:36:05 GMT - Sat, 25 Oct 2025 07:33:53 GMT
Technology Fingerprints
Cloudflare (CDN) Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /storePress/images/footer_bg.jpg HTTP/1.1
Host: www.buckcamp.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.buckcamp.shop/storePress/css/style.css?ver=1
Cookie: PHPSESSID=8nfr49u714kj1lellcq6didoot
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 06 Aug 2025 12:46:01 GMT
content-type: image/jpeg
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hujJjJgqRnZHBCma9c2sHVaVQt%2BqFk7%2BtIqq%2FfTyq7s9xfTOdMmS%2BYaH9Myb%2Bnx%2FPVGQzrn7EwowDUIWLnl50LDr9KBgQxQT0H6QgT3oKNUWXvOLP%2FAh4Sas6tia0UwDu95M0A%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Mon, 21 Apr 2025 15:56:41 GMT
vary: Accept-Encoding
etag: W/"68066ab9-372ef"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 96aea27b9eba7129-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1792&min_rtt=0&rtt_var=2115&sent=115&recv=84&lost=0&retrans=0&sent_bytes=79232&recv_bytes=6052&delivery_rate=18795006&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=30666&unsent_bytes=0&cid=314d94df0544b6a9&ts=1262&inflight_dur=50&x=40"
GET fonts.googleapis.com/css2?family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap
142.250.178.106200 OK 22 kB URL GET HTTPS
fonts.googleapis.com/css2?family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap
IP / ASN
142.250.178.106
#15169 GOOGLE
Requested by https://www.buckcamp.shop/
Resource Info
File type ASCII text
First Seen 2025-04-23
Last Seen 2025-08-09
Times Seen 4647
Size 22 kB (21659 bytes)
MD5 f8b6d1f6c077ecbdaba0183c9b8fa3cf
SHA1 86c68f1a57f90d2013988d6e4ee9f4784ddc0efb
SHA256 1ab555f803063374ff56fc4b6bf339a3076a8b82d9c4a6c3dc1b0c52a176affd
Certificate Info
Issuer Google Trust Services
Subject upload.video.google.com
Fingerprint DF:A1:DB:1F:BC:5E:31:D7:F8:FE:26:E3:B9:B3:02:98:B1:C8:50:EC
Validity Mon, 07 Jul 2025 08:35:11 GMT - Mon, 29 Sep 2025 08:35:10 GMT
GET /css2?family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.buckcamp.shop/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 06 Aug 2025 12:46:01 GMT
date: Wed, 06 Aug 2025 12:46:01 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET www.buckcamp.shop/uploads/p/25/07/intentionally-blank-slogan-caps-gayyyyyy-dad-cap--women_x150.jpg
172.67.223.108200 OK 2.5 kB URL GET HTTPS
www.buckcamp.shop/uploads/p/25/07/intentionally-blank-slogan-caps-gayyyyyy-dad-cap--women_x150.jpg
IP / ASN
172.67.223.108
#13335 CLOUDFLARENET
Requested by https://www.buckcamp.shop/
Resource Info
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality", baseline, precision 8, 150x225, components 3
First Seen 2025-08-06
Last Seen 2025-08-06
Times Seen 1
Size 2.5 kB (2452 bytes)
MD5 227175ce8786a1c7c74bc800f6c92045
SHA1 2558827dc9f03d067943f4ab33609970dc0485c1
SHA256 1e6afca53dae560a3ab993164f22c26e4f3f9c9f762d4867000790dc2ff75ea5
Certificate Info
Issuer Google Trust Services
Subject buckcamp.shop
Fingerprint 14:20:40:4A:96:E9:4B:EB:AA:51:F0:3D:59:DD:2D:DA:2A:79:F9:AF
Validity Sun, 27 Jul 2025 06:36:05 GMT - Sat, 25 Oct 2025 07:33:53 GMT
Technology Fingerprints
Cloudflare (CDN) Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /uploads/p/25/07/intentionally-blank-slogan-caps-gayyyyyy-dad-cap--women_x150.jpg HTTP/1.1
Host: www.buckcamp.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.buckcamp.shop/
Cookie: PHPSESSID=8nfr49u714kj1lellcq6didoot
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 06 Aug 2025 12:46:01 GMT
content-type: image/jpeg
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: Accept-Encoding
last-modified: Fri, 18 Jul 2025 00:44:07 GMT
etag: W/"687998d7-994"
expires: Fri, 05 Sep 2025 12:46:01 GMT
cache-control: max-age=2592000
content-encoding: gzip
cf-cache-status: MISS
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=FBKvXeHzYXIVNQZLL%2FaxCmGltVjD%2B1alWpP7DnPTlxTo946CgTb1tTKyEkc5Oy%2BVfswCJKeO0ws5mhPcjMKbtOOVoeaDc2vnepc%2BqZcvIw%3D%3D"}]}
cf-ray: 96aea2780e3256a4-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET www.buckcamp.shop/storePress/css/style.css?ver=1
172.67.223.108200 OK 71 kB URL GET HTTPS
www.buckcamp.shop/storePress/css/style.css?ver=1
IP / ASN
172.67.223.108
#13335 CLOUDFLARENET
Requested by https://www.buckcamp.shop/
Resource Info
File type ASCII text, with very long lines (939)
First Seen 2025-07-22
Last Seen 2025-08-08
Times Seen 25
Size 71 kB (70790 bytes)
MD5 eb0c6fb7147d892e0e995a1269eb2aad
SHA1 2404e2c5aa4ce064e98e57bb250f85c88e8c1b33
SHA256 4459ff42e79e475644e6f2ea1ca623e8b98d53f9492a096abc59870a9db02932
Certificate Info
Issuer Google Trust Services
Subject buckcamp.shop
Fingerprint 14:20:40:4A:96:E9:4B:EB:AA:51:F0:3D:59:DD:2D:DA:2A:79:F9:AF
Validity Sun, 27 Jul 2025 06:36:05 GMT - Sat, 25 Oct 2025 07:33:53 GMT
Technology Fingerprints
Cloudflare (CDN) Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /storePress/css/style.css?ver=1 HTTP/1.1
Host: www.buckcamp.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.buckcamp.shop/
Cookie: PHPSESSID=8nfr49u714kj1lellcq6didoot
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 06 Aug 2025 12:46:01 GMT
content-type: text/css
server: cloudflare
last-modified: Mon, 21 Apr 2025 15:56:41 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: Accept-Encoding
etag: W/"68066ab9-11486"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=eLCgQzDYJmSveQ84XwAB9fkopsDhhA1aM31GWTPcoIOEiYbegpLGqAY3odJ7iERvyBpjJ63Mi5Zprb3UyiV5KvzqJT3gNvX3LlZMgutqqA%3D%3D"}]}
cf-ray: 96aea277cd9b56a4-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET www.buckcamp.shop/uploads/25/07/3.jpg
172.67.223.108200 OK 770 kB URL GET HTTPS
www.buckcamp.shop/uploads/25/07/3.jpg
IP / ASN
172.67.223.108
#13335 CLOUDFLARENET
Requested by https://www.buckcamp.shop/
Resource Info
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 22.1 (Windows), datetime=2025:07:21 14:51:50], baseline, precision 8, 1440x900, components 3
First Seen 2025-08-06
Last Seen 2025-08-06
Times Seen 1
Size 770 kB (769797 bytes)
MD5 3e7b1e32276cacd8f5b47e40064e1a14
SHA1 26ecaba71448911385b98642b62c8393cd8fee96
SHA256 cb2a06d1e545aa2a877f38e233f2e5b5a0e7461e8f43be81dbcf6a396335b33d
Certificate Info
Issuer Google Trust Services
Subject buckcamp.shop
Fingerprint 14:20:40:4A:96:E9:4B:EB:AA:51:F0:3D:59:DD:2D:DA:2A:79:F9:AF
Validity Sun, 27 Jul 2025 06:36:05 GMT - Sat, 25 Oct 2025 07:33:53 GMT
Technology Fingerprints
Cloudflare (CDN) Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /uploads/25/07/3.jpg HTTP/1.1
Host: www.buckcamp.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.buckcamp.shop/
Cookie: PHPSESSID=8nfr49u714kj1lellcq6didoot
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 06 Aug 2025 12:46:01 GMT
content-type: image/jpeg
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: Accept-Encoding
last-modified: Mon, 21 Jul 2025 06:52:46 GMT
etag: W/"687de3be-bbf05"
expires: Fri, 05 Sep 2025 09:47:29 GMT
cache-control: max-age=2592000
content-encoding: gzip
cf-cache-status: MISS
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=hFyxZUs7jxHmVrXJfh%2FL%2Bd2McStGTuX5Zhq6kbrap199oPxTFoOnZlCVyQtP%2BJfuPh6RKZzhY96v34Mx9Rgq7MutRyIPNto9zQlI49SmDg%3D%3D"}]}
cf-ray: 96aea277ddd756a4-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET www.buckcamp.shop/uploads/p/25/07/intentionally-blank-mules-kowloon-lug-sole-loafer--women_x350.jpg
172.67.223.108200 OK 16 kB URL GET HTTPS
www.buckcamp.shop/uploads/p/25/07/intentionally-blank-mules-kowloon-lug-sole-loafer--women_x350.jpg
IP / ASN
172.67.223.108
#13335 CLOUDFLARENET
Requested by https://www.buckcamp.shop/
Resource Info
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality", baseline, precision 8, 350x525, components 3
First Seen 2025-08-06
Last Seen 2025-08-06
Times Seen 1
Size 16 kB (15522 bytes)
MD5 61a83bbedd7fc03a8ab407258e447790
SHA1 9f8c02a8870f06ca1fe5be48989fa9f22dd7549f
SHA256 d16fd2608ea6d4e35e2945bfc6f296923abc091822c11a35d1cc288af0bbe516
Certificate Info
Issuer Google Trust Services
Subject buckcamp.shop
Fingerprint 14:20:40:4A:96:E9:4B:EB:AA:51:F0:3D:59:DD:2D:DA:2A:79:F9:AF
Validity Sun, 27 Jul 2025 06:36:05 GMT - Sat, 25 Oct 2025 07:33:53 GMT
Technology Fingerprints
Cloudflare (CDN) Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /uploads/p/25/07/intentionally-blank-mules-kowloon-lug-sole-loafer--women_x350.jpg HTTP/1.1
Host: www.buckcamp.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.buckcamp.shop/
Cookie: PHPSESSID=8nfr49u714kj1lellcq6didoot
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 06 Aug 2025 12:46:01 GMT
content-type: image/jpeg
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: Accept-Encoding
last-modified: Fri, 18 Jul 2025 00:41:29 GMT
etag: W/"68799839-3ca2"
expires: Fri, 05 Sep 2025 12:46:01 GMT
cache-control: max-age=2592000
content-encoding: gzip
cf-cache-status: MISS
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=56eELyqAl8KozOLo7P6Xus1n3jX6einp79sC4Yv%2F%2Bl948MP%2BNqmx6n5UcDEeHIUD%2BldBuv5MksTDGiXwSXaqUq1M4Ut5hBMaMB45XBdWsg%3D%3D"}]}
cf-ray: 96aea277fe1d56a4-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET www.buckcamp.shop/uploads/p/25/07/intentionally-blank-sandals-bestfriend-ribbon-sandal--women_x350.jpg
172.67.223.108200 OK 14 kB URL GET HTTPS
www.buckcamp.shop/uploads/p/25/07/intentionally-blank-sandals-bestfriend-ribbon-sandal--women_x350.jpg
IP / ASN
172.67.223.108
#13335 CLOUDFLARENET
Requested by https://www.buckcamp.shop/
Resource Info
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality", baseline, precision 8, 350x525, components 3
First Seen 2025-08-06
Last Seen 2025-08-06
Times Seen 1
Size 14 kB (13701 bytes)
MD5 8b0d9f9c9b30c57a2c7900650d7e51a2
SHA1 e5f6f804ecc20b4e37be636989d5a1adee4b4695
SHA256 475ac7a4ea2bf1e3dda443b7b963c12ff52eadafbc7d3294a997b502e13b048a
Certificate Info
Issuer Google Trust Services
Subject buckcamp.shop
Fingerprint 14:20:40:4A:96:E9:4B:EB:AA:51:F0:3D:59:DD:2D:DA:2A:79:F9:AF
Validity Sun, 27 Jul 2025 06:36:05 GMT - Sat, 25 Oct 2025 07:33:53 GMT
Technology Fingerprints
Cloudflare (CDN) Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /uploads/p/25/07/intentionally-blank-sandals-bestfriend-ribbon-sandal--women_x350.jpg HTTP/1.1
Host: www.buckcamp.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.buckcamp.shop/
Cookie: PHPSESSID=8nfr49u714kj1lellcq6didoot
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 06 Aug 2025 12:46:01 GMT
content-type: image/jpeg
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: Accept-Encoding
last-modified: Fri, 18 Jul 2025 00:30:59 GMT
etag: W/"687995c3-3585"
expires: Fri, 05 Sep 2025 12:46:01 GMT
cache-control: max-age=2592000
content-encoding: gzip
cf-cache-status: MISS
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=jRdBnQLEjVX67ICWJfBChxDGF7t3Jd11htA8kC5zW%2BWnC2BuvwjrCAULBNxvgeme%2FAmDD1Ha2bAUln8REdN3xTVqhUZ7oyeDooaVFlWsBw%3D%3D"}]}
cf-ray: 96aea277fe1856a4-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET www.buckcamp.shop/uploads/25/07/4.jpg
172.67.223.108200 OK 270 kB URL GET HTTPS
www.buckcamp.shop/uploads/25/07/4.jpg
IP / ASN
172.67.223.108
#13335 CLOUDFLARENET
Requested by https://www.buckcamp.shop/
Resource Info
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 22.1 (Windows), datetime=2025:07:21 14:52:34], baseline, precision 8, 1440x468, components 3
First Seen 2025-08-06
Last Seen 2025-08-06
Times Seen 1
Size 270 kB (270499 bytes)
MD5 2478657f9f0c1097146ec5c8e56bbdf7
SHA1 29f80352ee6464b90ebfe00bdfcdca3d093ba2e3
SHA256 a3c6af385e8b8b1f4bed898b1afcbd98e6f6d478ed7a3d8db871990856bde04b
Certificate Info
Issuer Google Trust Services
Subject buckcamp.shop
Fingerprint 14:20:40:4A:96:E9:4B:EB:AA:51:F0:3D:59:DD:2D:DA:2A:79:F9:AF
Validity Sun, 27 Jul 2025 06:36:05 GMT - Sat, 25 Oct 2025 07:33:53 GMT
Technology Fingerprints
Cloudflare (CDN) Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /uploads/25/07/4.jpg HTTP/1.1
Host: www.buckcamp.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.buckcamp.shop/
Cookie: PHPSESSID=8nfr49u714kj1lellcq6didoot
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 06 Aug 2025 12:46:01 GMT
content-type: image/jpeg
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: Accept-Encoding
last-modified: Mon, 21 Jul 2025 06:52:50 GMT
etag: W/"687de3c2-420a3"
expires: Thu, 04 Sep 2025 05:19:46 GMT
cache-control: max-age=2592000
content-encoding: gzip
cf-cache-status: MISS
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=KXud64lXVnJ7bTok65zFF8eyeGXhtRXGTtWnZQyrOHKMKQbhiZHtaI7WpDIst%2BAHY9%2F2h8WkSaTc2esrVtzC4%2BYP74ncYC4iVQPADdynFg%3D%3D"}]}
cf-ray: 96aea277fe1b56a4-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET www.buckcamp.shop/uploads/p/25/07/intentionally-blank-heels-limo-heeled-sandal--women_x350.jpg
172.67.223.108200 OK 10 kB URL GET HTTPS
www.buckcamp.shop/uploads/p/25/07/intentionally-blank-heels-limo-heeled-sandal--women_x350.jpg
IP / ASN
172.67.223.108
#13335 CLOUDFLARENET
Requested by https://www.buckcamp.shop/
Resource Info
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality", baseline, precision 8, 350x525, components 3
First Seen 2025-08-06
Last Seen 2025-08-06
Times Seen 1
Size 10 kB (10175 bytes)
MD5 2685dedeef48d88e06a3a650aa7adb0f
SHA1 8e39c721dda8d4bea34975e4bdf88d74e1286aa6
SHA256 edc0b4f9346efad4613fccef30282dcdbcbcc2ee580dd24150421de056f1de75
Certificate Info
Issuer Google Trust Services
Subject buckcamp.shop
Fingerprint 14:20:40:4A:96:E9:4B:EB:AA:51:F0:3D:59:DD:2D:DA:2A:79:F9:AF
Validity Sun, 27 Jul 2025 06:36:05 GMT - Sat, 25 Oct 2025 07:33:53 GMT
Technology Fingerprints
Cloudflare (CDN) Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /uploads/p/25/07/intentionally-blank-heels-limo-heeled-sandal--women_x350.jpg HTTP/1.1
Host: www.buckcamp.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.buckcamp.shop/
Cookie: PHPSESSID=8nfr49u714kj1lellcq6didoot
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 06 Aug 2025 12:46:01 GMT
content-type: image/jpeg
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: Accept-Encoding
last-modified: Fri, 18 Jul 2025 00:27:29 GMT
etag: W/"687994f1-27bf"
expires: Fri, 05 Sep 2025 12:46:01 GMT
cache-control: max-age=2592000
content-encoding: gzip
cf-cache-status: MISS
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=xWTdWMUyDMeJEyStpauuuti%2FtJyl0%2F0Py%2ByU89Clk1MMtrjEFN%2Fg3Y53uXcWHdnPNBj%2Fvr6Oez%2BBCVfj%2FjKwOBWludGrmret8A%2BBxot03A%3D%3D"}]}
cf-ray: 96aea2780e1f56a4-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET www.buckcamp.shop/storePress/images/breadcrumb.jpg
172.67.223.108200 OK 149 kB URL GET HTTPS
www.buckcamp.shop/storePress/images/breadcrumb.jpg
IP / ASN
172.67.223.108
#13335 CLOUDFLARENET
Requested by https://www.buckcamp.shop/
Resource Info
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x180, components 3
First Seen 2024-08-30
Last Seen 2025-08-08
Times Seen 818
Size 149 kB (148722 bytes)
MD5 031cbbdd7c9af60551001c9fe9bcc68f
SHA1 4e8a9bc95bb06f160327f7b27ec08314e3bd7b93
SHA256 605adb089c8c9d6fde66eb9aee40b4b12ad89acef63efbec5b72aac9e1eb4f8f
Certificate Info
Issuer Google Trust Services
Subject buckcamp.shop
Fingerprint 14:20:40:4A:96:E9:4B:EB:AA:51:F0:3D:59:DD:2D:DA:2A:79:F9:AF
Validity Sun, 27 Jul 2025 06:36:05 GMT - Sat, 25 Oct 2025 07:33:53 GMT
Technology Fingerprints
Cloudflare (CDN) Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /storePress/images/breadcrumb.jpg HTTP/1.1
Host: www.buckcamp.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.buckcamp.shop/storePress/css/style.css?ver=1
Cookie: PHPSESSID=8nfr49u714kj1lellcq6didoot
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 06 Aug 2025 12:46:01 GMT
content-type: image/jpeg
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WILLrsmtdugm8%2FEqvtc54v8p1tX3W1DhJUTiWaBFDpIfTLGsoOE1TF1aumdlGbaOOHwOT8UI78SGOH44Q2pzJaam%2F2hmWq2czAViigR5KL1q3RSU85ZTKhvklRRxiSykOURIXg%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Mon, 21 Apr 2025 15:56:41 GMT
vary: Accept-Encoding
etag: W/"68066ab9-244f2"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 96aea27b8eb87129-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1660&min_rtt=0&rtt_var=1436&sent=128&recv=86&lost=0&retrans=0&sent_bytes=95753&recv_bytes=6145&delivery_rate=18795006&ss_exit_cwnd=30666&ss_exit_reason=2&cwnd=24877&unsent_bytes=0&cid=314d94df0544b6a9&ts=1299&inflight_dur=54&x=40"
GET fonts.gstatic.com/s/poppins/v23/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2
142.250.74.35200 OK 7.7 kB URL GET HTTPS
fonts.gstatic.com/s/poppins/v23/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2
IP / ASN
142.250.74.35
#15169 GOOGLE
Requested by https://www.buckcamp.shop/
Resource Info
File type Web Open Font Format (Version 2), TrueType, length 7748, version 1.0
First Seen 2023-04-05
Last Seen 2025-08-09
Times Seen 57727
Size 7.7 kB (7748 bytes)
MD5 a09f2fccfee35b7247b08a1a266f0328
SHA1 0da2d17e738f46d2a09e6fb7969da451719a9820
SHA256 cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446
Certificate Info
Issuer Google Trust Services
Subject *.gstatic.com
Fingerprint 43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD
Validity Mon, 07 Jul 2025 08:35:11 GMT - Mon, 29 Sep 2025 08:35:10 GMT
GET /s/poppins/v23/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.buckcamp.shop
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7748
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Jul 2025 20:17:34 GMT
expires: Thu, 30 Jul 2026 20:17:34 GMT
cache-control: public, max-age=31536000
age: 577707
last-modified: Wed, 23 Apr 2025 16:07:32 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/poppins/v23/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2
142.250.74.35200 OK 7.8 kB URL GET HTTPS
fonts.gstatic.com/s/poppins/v23/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2
IP / ASN
142.250.74.35
#15169 GOOGLE
Requested by https://www.buckcamp.shop/
Resource Info
File type Web Open Font Format (Version 2), TrueType, length 7816, version 1.0
First Seen 2023-04-05
Last Seen 2025-08-09
Times Seen 74770
Size 7.8 kB (7816 bytes)
MD5 25b0e113ca7cce3770d542736db26368
SHA1 cb726212d5d525021752a1d8470a0fb593e0c49e
SHA256 9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526
Certificate Info
Issuer Google Trust Services
Subject *.gstatic.com
Fingerprint 43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD
Validity Mon, 07 Jul 2025 08:35:11 GMT - Mon, 29 Sep 2025 08:35:10 GMT
GET /s/poppins/v23/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.buckcamp.shop
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7816
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 31 Jul 2025 10:13:27 GMT
expires: Fri, 31 Jul 2026 10:13:27 GMT
cache-control: public, max-age=31536000
age: 527554
last-modified: Wed, 23 Apr 2025 16:07:25 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2