| sc-static.net/scevent.min.js |  54.230.82.240 | 200 OK | 19 kB |
URL GET HTTP/2sc-static.net/scevent.min.js IP54.230.82.240:443
Requested byhttps://toysalesstore.com/ CertificateIssuerAmazon Subjectsc-static.net FingerprintE4:8A:DF:2D:95:33:E5:93:D4:43:8A:14:06:EA:EA:E8:AD:29:20:0F ValidityThu, 21 Dec 2023 00:00:00 GMT - Sat, 18 Jan 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (28360) Hashb63285518f1bc28f01cfe8bfb4e6ca47 850cf5957261d3d7bc5484797f5ea6f32630f52f dac99c71e943d58b4fac29e7bed45da2fc55ceec4d6627ecce863dec95a520aa
GET /scevent.min.js HTTP/1.1
Host: sc-static.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://toysalesstore.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
content-length: 19396
server: CloudFront
date: Thu, 02 May 2024 20:02:05 GMT
access-control-allow-headers: Content-Type
access-control-allow-origin: *
content-encoding: gzip
cache-control: private, s-maxage=0, max-age=600
set-cookie: X-AB=24b5be485c2747719f2dadcc8288a94b;max-age=86400;expires=Fri, 03 May 2024 20:02:05 GMT;Path=/scevent.min.js;Secure;SameSite=None
x-cache: Miss from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: sBbb67Xy5XoEXlsNfWXy5wLl6vMta8W1MGTD16tsk2fFWnl2uwutQw==
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/concertone/v12/VEM1Ro9xs5PjtzCu-srDqSTijP4.woff2 | 216.58.207.227 | 200 OK | 24 kB |
URL GET HTTP/2fonts.gstatic.com/s/concertone/v12/VEM1Ro9xs5PjtzCu-srDqSTijP4.woff2 IP216.58.207.227:443
Requested byhttps://toysalesstore.com/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint93:EC:35:60:8A:5B:23:EA:C0:36:D7:AE:03:0C:C3:77:17:5A:20:33 ValidityMon, 08 Apr 2024 07:31:57 GMT - Mon, 01 Jul 2024 07:31:56 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 24308, version 1.0 Hashb26313145d22461c7e4d26325dd7d53e e739cde7f91e5f1875b4f3757580e7b54472500d 6d11209d1442b020864f7c35c777ecb20a359c743121536d5e2c0a0c7557c0d6
GET /s/concertone/v12/VEM1Ro9xs5PjtzCu-srDqSTijP4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://toysalesstore.com
DNT: 1
Connection: keep-alive
Referer: https://toysalesstore.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 24308
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 07:21:57 GMT
expires: Fri, 02 May 2025 07:21:57 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 29 Jun 2021 23:09:16 GMT
content-type: font/woff2
age: 45608
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/didactgothic/v14/ahcfv8qz1zt6hCC5G4F_P4ASlUuYpg.woff2 | 216.58.207.227 | 200 OK | 17 kB |
URL GET HTTP/2fonts.gstatic.com/s/didactgothic/v14/ahcfv8qz1zt6hCC5G4F_P4ASlUuYpg.woff2 IP216.58.207.227:443
Requested byhttps://toysalesstore.com/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint93:EC:35:60:8A:5B:23:EA:C0:36:D7:AE:03:0C:C3:77:17:5A:20:33 ValidityMon, 08 Apr 2024 07:31:57 GMT - Mon, 01 Jul 2024 07:31:56 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 16812, version 1.0 Hash96ae2bdadfc6d96a7d8a966e6c3245e8 d3c3afc81f5470ecebd724cc40397e094d37084e f4f686558e91f9d8b396d13a42e218e7a33ef391c97fb68de337af804592169c
GET /s/didactgothic/v14/ahcfv8qz1zt6hCC5G4F_P4ASlUuYpg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://toysalesstore.com
DNT: 1
Connection: keep-alive
Referer: https://toysalesstore.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 16812
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 04:49:25 GMT
expires: Fri, 02 May 2025 04:49:25 GMT
cache-control: public, max-age=31536000
age: 54760
last-modified: Tue, 01 Sep 2020 05:24:31 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| cdn.staticswin.com/uploads/0/theme/default/assets/collect.js?v=96afd8ae933a668f3daf26bd95bc95a6 |  104.18.169.76 | 200 OK | 7.8 kB |
URL GET HTTP/2cdn.staticswin.com/uploads/0/theme/default/assets/collect.js?v=96afd8ae933a668f3daf26bd95bc95a6 IP104.18.169.76:443
Requested byhttps://toysalesstore.com/ CertificateIssuerCloudflare, Inc. Subjectcdn.staticswin.com Fingerprint9A:72:CA:09:9E:95:9B:EB:7D:7B:26:11:22:54:26:F2:C1:41:C2:FD ValiditySun, 02 Jul 2023 00:00:00 GMT - Sun, 30 Jun 2024 23:59:59 GMT
File typeJavaScript source, Unicode text, UTF-8 text Hash96afd8ae933a668f3daf26bd95bc95a6 4285b6fe54816e3e60f8effc0b396ce1b9848868 5f2c27fd8ce921c5c8663ea491139714306effb9f081505dc5bd09b1de7ce568
GET /uploads/0/theme/default/assets/collect.js?v=96afd8ae933a668f3daf26bd95bc95a6 HTTP/1.1
Host: cdn.staticswin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://toysalesstore.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 02 May 2024 20:02:04 GMT
content-type: application/javascript
vary: Accept-Encoding, Origin
x-oss-request-id: 66319446D31A233331370702
last-modified: Tue, 30 Apr 2024 15:09:07 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 16609357670485251830
x-oss-storage-class: Standard
content-md5: lq/YrpM6Zo89rya9lbyVpg==
x-oss-server-time: 1
cf-cache-status: HIT
age: 2562
expires: Fri, 10 May 2024 20:02:04 GMT
cache-control: public, max-age=691200
server: cloudflare
cf-ray: 87da9b5c9c8b5691-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| toysalesstore.com/favicon.ico | 104.16.198.133 | 200 OK | 6.7 kB |
URL GET HTTP/2toysalesstore.com/favicon.ico IP104.16.198.133:443
Requested byhttps://toysalesstore.com/ CertificateIssuerGoogle Trust Services LLC Subjecttoysalesstore.com FingerprintF9:F1:11:85:B2:C3:88:31:60:9B:D6:0D:97:C6:26:1B:80:7A:4C:07 ValiditySun, 17 Mar 2024 08:26:01 GMT - Sat, 15 Jun 2024 08:26:00 GMT
File typegzip compressed data, from Unix Hashb82375e053140b4dc948afc4dec12f2b 32f4deb0660bc7571d3b70e584252757602638f2 8efc756f53753a2ba373219bad056f73cbb018772bafc7397542a14c8a08f853
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: toysalesstore.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://toysalesstore.com/
DNT: 1
Connection: keep-alive
Cookie: oemsaas_global_visit_id=C77ADF10-35B1-085C-C327-DA724EEC8EFA; oemsaas_checkout_visit_id=A6A9BB34-BE61-EA0A-B9B7-CAED04DE5E6F; oemsaas_global_visit_session=11C21C84-DA40-3CC8-17B5-A40ABEB768A9; PHPSESSID=d04684acb173914729694821d68aab5d; oemcart_client_user_agent=Mozilla%252F5.0%2520(X11%253B%2520Linux%2520x86_64%253B%2520rv%253A96.0)%2520Gecko%252F20100101%2520Firefox%252F96.0; oemcart_client_pre_url=; oemcart_client_timezone=Etc%252FUTC; oemcart_client_screen_size=1280X1024; oemcart_client_broswer_language=en-US; oemcart_client_viewport_size=1280X1024; oemcart_client_broswer_date_time=2024-05-02%2020%3A02%3A04; _scid=67794bbe-10d2-4019-b22b-abe253050f87; _scid_r=67794bbe-10d2-4019-b22b-abe253050f87
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 02 May 2024 20:02:05 GMT
content-type: image/x-icon
last-modified: Sat, 12 Feb 2022 05:23:27 GMT
etag: W/"6207444f-46"
cf-cache-status: REVALIDATED
expires: Fri, 03 May 2024 00:02:05 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 87da9b606877569a-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| cdn.staticswin.com/uploads/0/theme/default/assets/theme.css?v=66eda0dd6672bd051feb0d39b9f9197e | 104.18.169.76 | 200 OK | 25 kB |
URL GET HTTP/2cdn.staticswin.com/uploads/0/theme/default/assets/theme.css?v=66eda0dd6672bd051feb0d39b9f9197e IP104.18.169.76:443
Requested byhttps://toysalesstore.com/ CertificateIssuerCloudflare, Inc. Subjectcdn.staticswin.com Fingerprint9A:72:CA:09:9E:95:9B:EB:7D:7B:26:11:22:54:26:F2:C1:41:C2:FD ValiditySun, 02 Jul 2023 00:00:00 GMT - Sun, 30 Jun 2024 23:59:59 GMT
Hash66eda0dd6672bd051feb0d39b9f9197e fce0d05f5389afdf45501d1ca44b13b4edbbd1e6 ccfdc21df473396a2dd78496fd4c04b5703ab0f516959898c75cdeb668c2c97f
GET /uploads/0/theme/default/assets/theme.css?v=66eda0dd6672bd051feb0d39b9f9197e HTTP/1.1
Host: cdn.staticswin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://toysalesstore.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 02 May 2024 20:02:04 GMT
content-type: text/css
vary: Accept-Encoding, Origin
x-oss-request-id: 66322A93342C483536FF4EED
last-modified: Tue, 30 Apr 2024 15:09:07 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 3603105492076268374
x-oss-storage-class: Standard
content-md5: Zu2g3WZyvQUf6w05ufkZfg==
x-oss-server-time: 2
cf-cache-status: HIT
age: 2562
expires: Fri, 10 May 2024 20:02:04 GMT
cache-control: public, max-age=691200
server: cloudflare
cf-ray: 87da9b5c9c8e5691-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| | 104.16.198.133 | 200 OK | 209 kB |
URL User Request GET HTTP/2IP104.16.198.133:443
CertificateIssuerGoogle Trust Services LLC Subjecttoysalesstore.com FingerprintF9:F1:11:85:B2:C3:88:31:60:9B:D6:0D:97:C6:26:1B:80:7A:4C:07 ValiditySun, 17 Mar 2024 08:26:01 GMT - Sat, 15 Jun 2024 08:26:00 GMT
Size209 kB (209141 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: toysalesstore.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 02 May 2024 20:02:03 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
execution-time: 0.0432939529
trace_id: 0582C40D-5253-F5A1-A362-E704D391F75A
set-cookie: oemsaas_global_visit_id=C77ADF10-35B1-085C-C327-DA724EEC8EFA; expires=Sun, 30-Apr-2034 20:02:03 GMT; Max-Age=315360000; path=/
oemsaas_checkout_visit_id=A6A9BB34-BE61-EA0A-B9B7-CAED04DE5E6F; expires=Sun, 30-Apr-2034 20:02:03 GMT; Max-Age=315360000; path=/
oemsaas_global_visit_session=11C21C84-DA40-3CC8-17B5-A40ABEB768A9; expires=Fri, 03-May-2024 20:02:03 GMT; Max-Age=86400; path=/
PHPSESSID=d04684acb173914729694821d68aab5d; path=/
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 87da9b532cc1569a-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| toysalesstore.com/homeapi/collect | 104.16.198.133 | 200 OK | 9 B |
URL POST HTTP/2toysalesstore.com/homeapi/collect IP104.16.198.133:443
Requested byhttps://toysalesstore.com/ CertificateIssuerGoogle Trust Services LLC Subjecttoysalesstore.com FingerprintF9:F1:11:85:B2:C3:88:31:60:9B:D6:0D:97:C6:26:1B:80:7A:4C:07 ValiditySun, 17 Mar 2024 08:26:01 GMT - Sat, 15 Jun 2024 08:26:00 GMT
File typeASCII text, with no line terminators Hash311486df619d42e069bcdc41e73f335d b3f9153ae3eef9847a707e36b7f54f989d4a4235 587b05cd8d59f9820d2cf168b07d46b1519d12ee7a2f7062a2490da0a99ccb50
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /homeapi/collect HTTP/1.1
Host: toysalesstore.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://toysalesstore.com/
Content-Type: application/json
Content-Length: 548
Origin: https://toysalesstore.com
DNT: 1
Connection: keep-alive
Cookie: oemsaas_global_visit_id=C77ADF10-35B1-085C-C327-DA724EEC8EFA; oemsaas_checkout_visit_id=A6A9BB34-BE61-EA0A-B9B7-CAED04DE5E6F; oemsaas_global_visit_session=11C21C84-DA40-3CC8-17B5-A40ABEB768A9; PHPSESSID=d04684acb173914729694821d68aab5d; oemcart_client_user_agent=Mozilla%252F5.0%2520(X11%253B%2520Linux%2520x86_64%253B%2520rv%253A96.0)%2520Gecko%252F20100101%2520Firefox%252F96.0; oemcart_client_pre_url=; oemcart_client_timezone=Etc%252FUTC; oemcart_client_screen_size=1280X1024; oemcart_client_broswer_language=en-US; oemcart_client_viewport_size=1280X1024; oemcart_client_broswer_date_time=2024-05-02%2020%3A02%3A04
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 02 May 2024 20:02:05 GMT
content-type: text/html;charset=utf-8
trace_id: 688414C5-AD47-E263-F06E-84862B3578FC
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 87da9b5dfc9c569a-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| toysalesstore.com/homeapi/collect | 104.16.198.133 | 200 OK | 9 B |
URL POST HTTP/2toysalesstore.com/homeapi/collect IP104.16.198.133:443
Requested byhttps://toysalesstore.com/ CertificateIssuerGoogle Trust Services LLC Subjecttoysalesstore.com FingerprintF9:F1:11:85:B2:C3:88:31:60:9B:D6:0D:97:C6:26:1B:80:7A:4C:07 ValiditySun, 17 Mar 2024 08:26:01 GMT - Sat, 15 Jun 2024 08:26:00 GMT
File typeASCII text, with no line terminators Hash311486df619d42e069bcdc41e73f335d b3f9153ae3eef9847a707e36b7f54f989d4a4235 587b05cd8d59f9820d2cf168b07d46b1519d12ee7a2f7062a2490da0a99ccb50
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /homeapi/collect HTTP/1.1
Host: toysalesstore.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://toysalesstore.com/
Content-Type: application/json
Content-Length: 856
Origin: https://toysalesstore.com
DNT: 1
Connection: keep-alive
Cookie: oemsaas_global_visit_id=C77ADF10-35B1-085C-C327-DA724EEC8EFA; oemsaas_checkout_visit_id=A6A9BB34-BE61-EA0A-B9B7-CAED04DE5E6F; oemsaas_global_visit_session=11C21C84-DA40-3CC8-17B5-A40ABEB768A9; PHPSESSID=d04684acb173914729694821d68aab5d; oemcart_client_user_agent=Mozilla%252F5.0%2520(X11%253B%2520Linux%2520x86_64%253B%2520rv%253A96.0)%2520Gecko%252F20100101%2520Firefox%252F96.0; oemcart_client_pre_url=; oemcart_client_timezone=Etc%252FUTC; oemcart_client_screen_size=1280X1024; oemcart_client_broswer_language=en-US; oemcart_client_viewport_size=1280X1024; oemcart_client_broswer_date_time=2024-05-02%2020%3A02%3A04; _scid=67794bbe-10d2-4019-b22b-abe253050f87; _scid_r=67794bbe-10d2-4019-b22b-abe253050f87
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 02 May 2024 20:02:05 GMT
content-type: text/html;charset=utf-8
trace_id: E7EE7BDC-D7A1-64CA-FEC3-B576EEACFFD7
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 87da9b61197f569a-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| cdn.staticswin.com/uploads/0/theme/default/public_assets/public.js?v=6ef0de85294e3deadea6a0b5829f86f8 | 104.18.169.76 | 200 OK | 484 kB |
URL GET HTTP/2cdn.staticswin.com/uploads/0/theme/default/public_assets/public.js?v=6ef0de85294e3deadea6a0b5829f86f8 IP104.18.169.76:443
Requested byhttps://toysalesstore.com/ CertificateIssuerCloudflare, Inc. Subjectcdn.staticswin.com Fingerprint9A:72:CA:09:9E:95:9B:EB:7D:7B:26:11:22:54:26:F2:C1:41:C2:FD ValiditySun, 02 Jul 2023 00:00:00 GMT - Sun, 30 Jun 2024 23:59:59 GMT
Size484 kB (483790 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/0/theme/default/public_assets/public.js?v=6ef0de85294e3deadea6a0b5829f86f8 HTTP/1.1
Host: cdn.staticswin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://toysalesstore.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 02 May 2024 20:02:04 GMT
content-type: application/javascript
vary: Accept-Encoding, Origin
x-oss-request-id: 6631099F91795F3433CB6ED4
last-modified: Tue, 30 Apr 2024 15:09:07 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 13733871732335455998
x-oss-storage-class: Standard
content-md5: O4yy0ajs8AvErbR17Mypfw==
x-oss-server-time: 3
cf-cache-status: HIT
age: 78585
expires: Fri, 10 May 2024 20:02:04 GMT
cache-control: public, max-age=691200
server: cloudflare
cf-ray: 87da9b5c9c955691-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| toysalesstore.com/homeapi/collect | 104.16.198.133 | 200 OK | 9 B |
URL POST HTTP/2toysalesstore.com/homeapi/collect IP104.16.198.133:443
Requested byhttps://toysalesstore.com/ CertificateIssuerGoogle Trust Services LLC Subjecttoysalesstore.com FingerprintF9:F1:11:85:B2:C3:88:31:60:9B:D6:0D:97:C6:26:1B:80:7A:4C:07 ValiditySun, 17 Mar 2024 08:26:01 GMT - Sat, 15 Jun 2024 08:26:00 GMT
File typeASCII text, with no line terminators Hash311486df619d42e069bcdc41e73f335d b3f9153ae3eef9847a707e36b7f54f989d4a4235 587b05cd8d59f9820d2cf168b07d46b1519d12ee7a2f7062a2490da0a99ccb50
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /homeapi/collect HTTP/1.1
Host: toysalesstore.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://toysalesstore.com/
Content-Type: application/json
Content-Length: 367
Origin: https://toysalesstore.com
DNT: 1
Connection: keep-alive
Cookie: oemsaas_global_visit_id=C77ADF10-35B1-085C-C327-DA724EEC8EFA; oemsaas_checkout_visit_id=A6A9BB34-BE61-EA0A-B9B7-CAED04DE5E6F; oemsaas_global_visit_session=11C21C84-DA40-3CC8-17B5-A40ABEB768A9; PHPSESSID=d04684acb173914729694821d68aab5d; oemcart_client_user_agent=Mozilla%252F5.0%2520(X11%253B%2520Linux%2520x86_64%253B%2520rv%253A96.0)%2520Gecko%252F20100101%2520Firefox%252F96.0; oemcart_client_pre_url=; oemcart_client_timezone=Etc%252FUTC; oemcart_client_screen_size=1280X1024; oemcart_client_broswer_language=en-US; oemcart_client_viewport_size=1280X1024; oemcart_client_broswer_date_time=2024-05-02%2020%3A02%3A04
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 02 May 2024 20:02:05 GMT
content-type: text/html;charset=utf-8
trace_id: 440B66AC-E42D-8826-8C2C-3E4682983A09
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 87da9b5ddc67569a-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| toysalesstore.com/homeapi/facebook | 104.16.198.133 | 200 OK | 86 B |
URL POST HTTP/2toysalesstore.com/homeapi/facebook IP104.16.198.133:443
Requested byhttps://toysalesstore.com/ CertificateIssuerGoogle Trust Services LLC Subjecttoysalesstore.com FingerprintF9:F1:11:85:B2:C3:88:31:60:9B:D6:0D:97:C6:26:1B:80:7A:4C:07 ValiditySun, 17 Mar 2024 08:26:01 GMT - Sat, 15 Jun 2024 08:26:00 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hashaab6a718f96d68b4eed15ff9b5a16a16 de22c01ffda29c42c6d76aae5fafe46bd05c44ff fe13f3b74f70bef9ad788618f163738c9b2dd2d4a8e7c5c04562810857b4db14
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /homeapi/facebook HTTP/1.1
Host: toysalesstore.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://toysalesstore.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 435
Origin: https://toysalesstore.com
DNT: 1
Connection: keep-alive
Cookie: oemsaas_global_visit_id=C77ADF10-35B1-085C-C327-DA724EEC8EFA; oemsaas_checkout_visit_id=A6A9BB34-BE61-EA0A-B9B7-CAED04DE5E6F; oemsaas_global_visit_session=11C21C84-DA40-3CC8-17B5-A40ABEB768A9; PHPSESSID=d04684acb173914729694821d68aab5d; oemcart_client_user_agent=Mozilla%252F5.0%2520(X11%253B%2520Linux%2520x86_64%253B%2520rv%253A96.0)%2520Gecko%252F20100101%2520Firefox%252F96.0; oemcart_client_pre_url=; oemcart_client_timezone=Etc%252FUTC; oemcart_client_screen_size=1280X1024; oemcart_client_broswer_language=en-US; oemcart_client_viewport_size=1280X1024; oemcart_client_broswer_date_time=2024-05-02%2020%3A02%3A04
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 02 May 2024 20:02:05 GMT
content-type: application/json
trace-id: D53B97B6-D1B1-63B4-5D38-889BEB19C55C
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 87da9b5ddc7e569a-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|