{"report_id":"e2ccae7a-ae46-40ed-b2b2-b4d4a453059a","version":6,"status":"done","tags":[],"date":"2026-05-10T05:05:36Z","url":{"schema":"http","addr":"marvelshoes.com","fqdn":"marvelshoes.com","domain":"marvelshoes.com","tld":"com"},"ip":{"addr":"104.21.11.15","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"www.marvelshoes.com/m/#/","fqdn":"www.marvelshoes.com","domain":"marvelshoes.com","tld":"com"},"title":"Crypto","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T07:49:02.787608Z","times_seen":17795775,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"marvelshoes.com","fqdn":"marvelshoes.com","domain":"marvelshoes.com","tld":"com"},"ip":{"addr":"104.21.11.15","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-14T05:05:36Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":8}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"marvelshoes.com","ip":{"addr":"104.21.11.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-05-09T04:47:25.258448Z","last_seen":"2026-05-09T04:47:25.258448Z","alert_count":4,"request_count":1,"received_data":1983,"sent_data":515,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.marvelshoes.com","ip":{"addr":"104.21.11.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-02-25T18:26:50.530515Z","last_seen":"2026-05-04T09:14:34.420476Z","alert_count":196,"request_count":49,"received_data":4025966,"sent_data":37687,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.dcloud.net.cn","ip":{"addr":"124.221.80.91","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"domain_registered":"2013-07-17","domain_rank":296858,"first_seen":"2018-09-15T09:18:08Z","last_seen":"2026-05-07T09:43:31.001296Z","alert_count":0,"request_count":1,"received_data":579,"sent_data":481,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.okcoinus.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2022-09-29","domain_rank":0,"first_seen":"2022-09-29T11:25:34Z","last_seen":"2026-05-04T09:14:32.613069Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":488,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.marvelshoes.com/m/","fqdn":"www.marvelshoes.com","domain":"marvelshoes.com","tld":"com"},"ip":{"addr":"104.21.11.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fc096d94d3da532bfb0b9647325e081a","sha1":"e6f00553fa1c5e0530a8e9999a695ed68f0d7daa","sha256":"78cdcc2086bf8933a033e27bbdb669a9228d47a19ff1a382d13087ea6e98c8fa","sha512":"990f20e8b6fc85843b5f71f4723aa06025d0b345aa76cd23e698b4f4f76904db2503c2a733482f68e8cebffb223635f2877d372086f684898743d973c0d9bcd7","ssdeep":"","tlshash":"cfe068c260b6294c0220801a304ac1035bb608739ec189613c4c77a58fb8f5bc45e899","size":373,"data":"","first_seen":"2025-04-01T12:53:06.668723Z","last_seen":"2026-06-05T03:52:31.718469Z","times_seen":125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.marvelshoes.com/h5/static/js/chunk-vendors.b0b781f6.js","fqdn":"www.marvelshoes.com","domain":"marvelshoes.com","tld":"com"},"ip":{"addr":"104.21.11.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cba26cf12578cdfdbc1c8b44d8b7a872","sha1":"a8959f92ebae338188b833928457e12a4a2d214d","sha256":"71e5bcd7617f253e3461bef16297858e6d1b1d83ba2b8952b8467489ee65a382","sha512":"6a2a012086d5e44cf459d898ad08a18c2371314f3f2fb0d38b8830c49ac1ec7c1c9e15c36a491a5650cc0d9bc7fb39504c85ed5786c12d05f8022a9a88e28bdb","ssdeep":"6144:OzNlRp0utvvX5Bt/t4nxHWtZvmiB4OhEqzYLehDbVOfewzkO2CEFj:rutvP5Bt/tQxHWtJzYqbqeAJMFj","tlshash":"11e4078db282b0750be770b5403f220bb2376959b44a84d8f675e4d4ad7c94e226bf3d","size":717509,"data":"","first_seen":"2023-09-18T10:45:33Z","last_seen":"2026-07-15T09:10:18.138517Z","times_seen":131,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.marvelshoes.com/h5/static/js/index.e879db59.js","fqdn":"www.marvelshoes.com","domain":"marvelshoes.com","tld":"com"},"ip":{"addr":"104.21.11.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b01620bcfdaf5d344f24fd6baada3e05","sha1":"022a05cfe573a84c33d9e133073cbfd93f2a9bd9","sha256":"44cceb0c699b7459cba46c0d5ae15b661aac1186de9e85ae172b6ebc4eb6a223","sha512":"2c1fce655a51d1c45a100ddaadb9a163b53444567d8428494a96c66f03e4bfb1f187ed982cccc5f9a016459afd63eb990955abb6ad3b81067cdd4b080901bb33","ssdeep":"12288:RlCzVokZzwR0KcWLyzBl3yz/bvFeYoV/LR3QHq5H6:RlCzzzANcWOXO/5eYoVzm","tlshash":"c8f4e71aabe520a04187f019a46f59367225543f4f497d287b9c92e49f4e83f82f1fbc","size":786051,"data":"","first_seen":"2026-05-09T04:47:31.236642Z","last_seen":"2026-07-15T09:10:18.176047Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.marvelshoes.com/h5/static/js/pages-home-home.3e768df9.js","fqdn":"www.marvelshoes.com","domain":"marvelshoes.com","tld":"com"},"ip":{"addr":"104.21.11.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cf1a2c5fd7e710111bc4c09a51623110","sha1":"b131b4eb9c385075ed0fb028ee679d3329195d70","sha256":"987b35d304a0c48ff174fe830431db1d20417b1356a26fe64974dd16f14eca44","sha512":"8ea4179aead5db7b326b12d9028d1c18ceca795d98d2f354715067dcfd559b31135ae16d18dc2979566ec3b4e08e5ce9eee4c2d9167a84eb30dd86064c4d0d3d","ssdeep":"768:VaEHA6Sgyv6R06l3COuiMLaLUskYkSpDUC:NHOP6R06XUlYjN","tlshash":"02131f0e5966a46b8ab3f371a4b70d29f132467b51157d0a7f3f84500f3e80b426afac","size":41614,"data":"","first_seen":"2023-09-18T10:45:33Z","last_seen":"2026-07-15T09:10:18.159645Z","times_seen":131,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"3d5272693eb411e5b8b13a243f76c720","sha1":"6a586ab8e0a4bf12bbc60eea6ca9f2418625a22c","sha256":"9582f31f9eb892b8823a780e579d464d54e26d97d65dc327d2b2bdd92d47c4b8","sha512":"03fc5614f48fc9a2e3c4a30626fdbacde74c1fda09ffa9d1cde0393d31cd5fe1588e270c241f4cedb473c6e5cc224ff16c141468a29519ea6159accf3e3a18f1","ssdeep":"","tlshash":"a4c08c8350e2080c8210861b848880050b8808b04f9308a22cd85b7ecc9ae88c8f804c","size":148,"data":"","first_seen":"2023-03-07T01:10:06Z","last_seen":"2026-06-07T08:18:02.151537Z","times_seen":15899,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"marvelshoes.com/","fqdn":"marvelshoes.com","domain":"marvelshoes.com","tld":"com"},"ip":{"addr":"104.21.11.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-10T05:05:13.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marvelshoes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 09:25:09 GMT","end":"Sun, 21 Jun 2026 10:23:57 GMT"},"fingerprint":{"sha1":"32:6F:33:4D:87:39:F7:19:B1:CA:C7:A0:A5:48:64:41:A8:39:C8:00","sha256":"1C:E1:38:7F:82:0F:7B:45:88:52:E4:2E:C5:5D:6C:4E:16:20:65:B9:50:2E:05:A3:77:09:9A:A4:42:90:A5:57"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: marvelshoes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sun, 10 May 2026 05:05:14 GMT\r\ncontent-type: text/html\r\nlocation: https://www.marvelshoes.com/\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tVtg%2FTjUhlQsNEeHOtDjpT7qi%2FTwesnFHooCYJRWnK6S%2Bzt7ZlCtZoRsRcuAjNlmp9lG3JJ7j9SZCXd6OlWqVcL2Wj7JYX1lbPerjU6PpQ20kHbZ8Yv0vf8vFxZsDRUPGHg%3D\"}]}\r\ncf-ray: 9f96685ce95256c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1355,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T07:49:02.787608Z","times_seen":17795775,"resource_available":true,"data":null}},"time_used":331,"timings":{"blocked":23,"dns":1,"connect":1,"send":0,"wait":284,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.marvelshoes.com/h5/static/index.f4fc78fe.css","fqdn":"www.marvelshoes.com","domain":"marvelshoes.com","tld":"com"},"ip":{"addr":"104.21.11.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.marvelshoes.com/m/","date":"2026-05-10T05:05:15.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marvelshoes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 09:25:09 GMT","end":"Sun, 21 Jun 2026 10:23:57 GMT"},"fingerprint":{"sha1":"32:6F:33:4D:87:39:F7:19:B1:CA:C7:A0:A5:48:64:41:A8:39:C8:00","sha256":"1C:E1:38:7F:82:0F:7B:45:88:52:E4:2E:C5:5D:6C:4E:16:20:65:B9:50:2E:05:A3:77:09:9A:A4:42:90:A5:57"}}},"request":{"raw":"GET /h5/static/index.f4fc78fe.css HTTP/1.1\r\nHost: www.marvelshoes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.marvelshoes.com/m/\r\nCookie: angela_session=eyJpdiI6Ik9lK2d4a0JkRDNBZFNcL3VTZzRiRDJBPT0iLCJ2YWx1ZSI6IjFNd3RIUGRJVkZrN05CaStQUHNOdmVPWHY2WG10SElQZG5zNldIc3Q2Zm84bUZ2S0h2WDVjR2RQb0NRSHBqTHgiLCJtYWMiOiJiNDc3MTI2MWUyZGI3MzBlMzE0MzNhZGI1ZGViNDAyMmNmODBiNTdmOWY4NDJiN2E0NTViMDllNzU3ZTM3MmY5In0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 10 May 2026 05:05:15 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 01 Oct 2021 12:26:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"6156fe7c-17334\"\r\nexpires: Sun, 10 May 2026 17:05:14 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B%2BfWPFa7jaXO7raBncDuPTA62DW8A%2FYIW%2BA3DdTGZJbWonE0ciBDI6Y7kWP55qY5Aje1y8cwx4w6oUp%2BYk1vT5vjeMGU9TKGfmn43Q%2Fb0zUAYsVhWopR7JrX%2FnHhMR1dqolUUchj\"}]}\r\ncf-ray: 9f9668676f52b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":95028,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"e4bcc14a5706ad4a90c101b5bfb9c808","sha1":"cb51349b9091a650ed7d2248c228a765b268f511","sha256":"15ed040cead5b78fbe6ba92bf4469ba3cd9f7bbe57053f2561fc9a9f6e00279e","sha512":"0c0286aaa5b96c29a7c962761c71f302c855b0497c88af833bce283adb2cbe01129ba572785e742fe74f5099c3dcbdf8f948418d64d1b9436ce6a4dd161841e3","ssdeep":"1536:8lIUpuK7hmVmg26uUH3xdynf7yhgnOhlNbc:xUpuK7hmVpuUH3im6nOPa","tlshash":"9c93083719012e3ae52bcd16b6c1ab5a1e60c133e15307adfbb876188bcf9c9167b345","first_seen":"2023-07-05T21:49:27Z","last_seen":"2026-07-15T09:10:18.144229Z","times_seen":154,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.marvelshoes.com/h5/static/image/jp.png","fqdn":"www.marvelshoes.com","domain":"marvelshoes.com","tld":"com"},"ip":{"addr":"104.21.11.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.marvelshoes.com/m/","date":"2026-05-10T05:05:15.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marvelshoes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 09:25:09 GMT","end":"Sun, 21 Jun 2026 10:23:57 GMT"},"fingerprint":{"sha1":"32:6F:33:4D:87:39:F7:19:B1:CA:C7:A0:A5:48:64:41:A8:39:C8:00","sha256":"1C:E1:38:7F:82:0F:7B:45:88:52:E4:2E:C5:5D:6C:4E:16:20:65:B9:50:2E:05:A3:77:09:9A:A4:42:90:A5:57"}}},"request":{"raw":"GET /h5/static/image/jp.png HTTP/1.1\r\nHost: www.marvelshoes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.marvelshoes.com/m/\r\nCookie: angela_session=eyJpdiI6Ik9lK2d4a0JkRDNBZFNcL3VTZzRiRDJBPT0iLCJ2YWx1ZSI6IjFNd3RIUGRJVkZrN05CaStQUHNOdmVPWHY2WG10SElQZG5zNldIc3Q2Zm84bUZ2S0h2WDVjR2RQb0NRSHBqTHgiLCJtYWMiOiJiNDc3MTI2MWUyZGI3MzBlMzE0MzNhZGI1ZGViNDAyMmNmODBiNTdmOWY4NDJiN2E0NTViMDllNzU3ZTM3MmY5In0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 10 May 2026 05:05:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 1260\r\nlast-modified: Fri, 01 Oct 2021 12:26:36 GMT\r\npriority: u=4,i=?0\r\netag: \"6156fe7c-4ec\"\r\nexpires: Mon, 08 Jun 2026 04:47:07 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 87487\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yKnUv4evlCnUqEoFiwCM%2B60aRNwiL%2FXHK5GlWlK9h6kZj16EINyCvcj69KJbHy1Psu4kiiCh52APzrBOB6FgkZPfSOO1hak%2FQVVlzafxajzwtL23J9364YyvIaPzp6UASxzRCGzf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f96686a9f86b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1260,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 32, 16-bit/color RGBA, non-interlaced","md5":"2ae746493820e82075bc8d320d1a5631","sha1":"9785c05e05be1e7ab2a7f4f1234af4d9f10f9da9","sha256":"33af3236be5d4c21418afbf43f36266e03f581fe2aa4203b4bb46370289cb8e0","sha512":"de59c603d743d42c8bb773d4f9e753a28fdcbabbbebf7db2ae3a68e82a99ada82e8a2fb855c1afbbcd4d4670a86acc389201254eaa9f157d0202d4d3bac7db27","ssdeep":"","tlshash":"1121bafaf6511299c00df829bd38161871b5c691123db0ad6640e24d922c4f833c7ef1","first_seen":"2023-05-06T18:37:16Z","last_seen":"2026-08-01T17:32:58.176778Z","times_seen":313,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.marvelshoes.com/h5/static/image/zh.png","fqdn":"www.marvelshoes.com","domain":"marvelshoes.com","tld":"com"},"ip":{"addr":"104.21.11.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.marvelshoes.com/m/","date":"2026-05-10T05:05:15.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marvelshoes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 09:25:09 GMT","end":"Sun, 21 Jun 2026 10:23:57 GMT"},"fingerprint":{"sha1":"32:6F:33:4D:87:39:F7:19:B1:CA:C7:A0:A5:48:64:41:A8:39:C8:00","sha256":"1C:E1:38:7F:82:0F:7B:45:88:52:E4:2E:C5:5D:6C:4E:16:20:65:B9:50:2E:05:A3:77:09:9A:A4:42:90:A5:57"}}},"request":{"raw":"GET /h5/static/image/zh.png HTTP/1.1\r\nHost: www.marvelshoes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.marvelshoes.com/m/\r\nCookie: angela_session=eyJpdiI6Ik9lK2d4a0JkRDNBZFNcL3VTZzRiRDJBPT0iLCJ2YWx1ZSI6IjFNd3RIUGRJVkZrN05CaStQUHNOdmVPWHY2WG10SElQZG5zNldIc3Q2Zm84bUZ2S0h2WDVjR2RQb0NRSHBqTHgiLCJtYWMiOiJiNDc3MTI2MWUyZGI3MzBlMzE0MzNhZGI1ZGViNDAyMmNmODBiNTdmOWY4NDJiN2E0NTViMDllNzU3ZTM3MmY5In0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 10 May 2026 05:05:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 574\r\nlast-modified: Fri, 01 Oct 2021 12:26:36 GMT\r\npriority: u=4,i=?0\r\netag: \"6156fe7c-23e\"\r\nexpires: Mon, 08 Jun 2026 04:47:07 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 87488\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gotSywfEd7xp2W8RQYoluEe3spuldLc6AJ%2BhcZNPaRCYEViJRNOLhvI97Ty2OdKsIayWaEWhQvzqFCninLOFJceQvZaw%2FMekaC1e4TMIZ5dlwuylES55I3gtnDWRREGQY8cVQWvm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f96686a9f89b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":574,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 32, 8-bit/color RGBA, non-interlaced","md5":"09029b827b228c61914d429e5f098372","sha1":"2607dcd4c11f5518ca031ef5f053427ba64bce87","sha256":"d4b56d87fd85cde734c00c125f652f584523cf19d167948bf5c97fde047ed706","sha512":"22d7e76c58ff6d021495f9fb65c695f1a5a9f376d8c190982e0e40d03bf89478c1f9f154ee4739c896cd14cd345e0b5dd7febf1a5f2df46f73745bf6d5d9cdba","ssdeep":"","tlshash":"e4f09606628b7c142f1f9db3e2326430ac3eeccb91ca9436900c146153a0764f734547","first_seen":"2023-05-07T20:12:38Z","last_seen":"2026-08-07T11:15:24.537213Z","times_seen":302,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.marvelshoes.com/h5/static/footer/gang0.png","fqdn":"www.marvelshoes.com","domain":"marvelshoes.com","tld":"com"},"ip":{"addr":"104.21.11.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.marvelshoes.com/m/","date":"2026-05-10T05:05:15.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marvelshoes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 09:25:09 GMT","end":"Sun, 21 Jun 2026 10:23:57 GMT"},"fingerprint":{"sha1":"32:6F:33:4D:87:39:F7:19:B1:CA:C7:A0:A5:48:64:41:A8:39:C8:00","sha256":"1C:E1:38:7F:82:0F:7B:45:88:52:E4:2E:C5:5D:6C:4E:16:20:65:B9:50:2E:05:A3:77:09:9A:A4:42:90:A5:57"}}},"request":{"raw":"GET /h5/static/footer/gang0.png HTTP/1.1\r\nHost: www.marvelshoes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.marvelshoes.com/m/\r\nCookie: angela_session=eyJpdiI6Ik9lK2d4a0JkRDNBZFNcL3VTZzRiRDJBPT0iLCJ2YWx1ZSI6IjFNd3RIUGRJVkZrN05CaStQUHNOdmVPWHY2WG10SElQZG5zNldIc3Q2Zm84bUZ2S0h2WDVjR2RQb0NRSHBqTHgiLCJtYWMiOiJiNDc3MTI2MWUyZGI3MzBlMzE0MzNhZGI1ZGViNDAyMmNmODBiNTdmOWY4NDJiN2E0NTViMDllNzU3ZTM3MmY5In0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 10 May 2026 05:05:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 497\r\nlast-modified: Fri, 01 Oct 2021 12:26:36 GMT\r\npriority: u=4,i=?0\r\netag: \"6156fe7c-1f1\"\r\nexpires: Mon, 08 Jun 2026 04:47:07 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 87488\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fQVVysLTnlz3E9fNgnAhza6vj4hm%2BgVQMeCCD0ly5lHt2NsEyiIWg3gHLyQhE88Wdl%2FBFkB34mPhxks2VsF%2FJ6EpVJ4XV1CejAwlgLx9kwjWRlkqk8G3ybQNR1L6liImtAv06A1x\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f966869af73b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":497,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 78 x 78, 8-bit colormap, non-interlaced","md5":"5f32114b2c2eef750a1402dcfd5c430e","sha1":"8fe008b191837e853fd9ab79b8b7a081ac12803a","sha256":"103c431185f5f14c3292904b81071a6ef2a474cc38b3cdc2ed0a8bf8177b667b","sha512":"f8e4ad7fb68a3542715a43f11e58eaef3fea6bde3515725cd39c4ce0346d62e094ca1c2b9a368bfadf153e0a16ec8bea94bd2164d295c619a9fca4ebb7ce11c7","ssdeep":"","tlshash":"06f0f8c3804ecc74a6e4c823700813f94c9a1938b7fa43a2c09086584aca22382e0333","first_seen":"2023-08-09T23:12:25Z","last_seen":"2026-08-01T17:32:58.156159Z","times_seen":181,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.marvelshoes.com/h5/static/image/receivables.png","fqdn":"www.marvelshoes.com","domain":"marvelshoes.com","tld":"com"},"ip":{"addr":"104.21.11.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.marvelshoes.com/m/","date":"2026-05-10T05:05:16.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marvelshoes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 09:25:09 GMT","end":"Sun, 21 Jun 2026 10:23:57 GMT"},"fingerprint":{"sha1":"32:6F:33:4D:87:39:F7:19:B1:CA:C7:A0:A5:48:64:41:A8:39:C8:00","sha256":"1C:E1:38:7F:82:0F:7B:45:88:52:E4:2E:C5:5D:6C:4E:16:20:65:B9:50:2E:05:A3:77:09:9A:A4:42:90:A5:57"}}},"request":{"raw":"GET /h5/static/image/receivables.png HTTP/1.1\r\nHost: www.marvelshoes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.marvelshoes.com/m/\r\nCookie: angela_session=eyJpdiI6Ik9lK2d4a0JkRDNBZFNcL3VTZzRiRDJBPT0iLCJ2YWx1ZSI6IjFNd3RIUGRJVkZrN05CaStQUHNOdmVPWHY2WG10SElQZG5zNldIc3Q2Zm84bUZ2S0h2WDVjR2RQb0NRSHBqTHgiLCJtYWMiOiJiNDc3MTI2MWUyZGI3MzBlMzE0MzNhZGI1ZGViNDAyMmNmODBiNTdmOWY4NDJiN2E0NTViMDllNzU3ZTM3MmY5In0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 10 May 2026 05:05:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 2373\r\nlast-modified: Fri, 01 Oct 2021 12:26:36 GMT\r\npriority: u=4,i=?0\r\netag: \"6156fe7c-945\"\r\nexpires: Mon, 08 Jun 2026 04:47:07 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 87488\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bHDhE2MAZ2Iuc7ZrZc8M%2F7kek0bD6P%2BREEfjT%2B%2BnP9Dc0kYKbuxuca0W0xOXFVFidAhWvtll8v%2FvayltktXZ3d2myAH5mFK%2FG2Ehm51pljkSMvQuI4EkpuIG%2Fgh1AtZpOzvvqpc%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f96686b0f9bb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2373,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 42, 8-bit/color RGBA, non-interlaced","md5":"b362b2bd105c8d03fcde1c1ec50ec951","sha1":"a96524fde3e842a8b1e74550a821f95b129726c7","sha256":"e36a4500b18ca3ae2a9966f1052cd7beadc0708ec6fe3010f7e1a503713dd628","sha512":"6e8874b4b7f0ab99dc08c0c45a31141253311e6640456802bf96c15b59d6943893f29c770f3ecaa21fd04e92e546990ae65a7740049fa54e30f17b6f56c27689","ssdeep":"","tlshash":"e7411d6fd6cd24415b41894238d601779a2f0880e72879fb1d9ae42744b15f358556c7","first_seen":"2023-09-18T10:45:34Z","last_seen":"2026-07-27T13:45:14.688648Z","times_seen":173,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.marvelshoes.com/api/currency/quotation_new","fqdn":"www.marvelshoes.com","domain":"marvelshoes.com","tld":"com"},"ip":{"addr":"104.21.11.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.marvelshoes.com/m/","date":"2026-05-10T05:05:18.845Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marvelshoes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 09:25:09 GMT","end":"Sun, 21 Jun 2026 10:23:57 GMT"},"fingerprint":{"sha1":"32:6F:33:4D:87:39:F7:19:B1:CA:C7:A0:A5:48:64:41:A8:39:C8:00","sha256":"1C:E1:38:7F:82:0F:7B:45:88:52:E4:2E:C5:5D:6C:4E:16:20:65:B9:50:2E:05:A3:77:09:9A:A4:42:90:A5:57"}}},"request":{"raw":"GET /api/currency/quotation_new HTTP/1.1\r\nHost: www.marvelshoes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/x-www-form-urlencoded\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.marvelshoes.com/m/\r\nCookie: angela_session=eyJpdiI6IkFhcGFGUXVIRlVRRU1TNUphVEFPS1E9PSIsInZhbHVlIjoiWGFBclkyWUp5RVdpdHI5c0t5WHl2Q0Z4N2R4REZ4eEZFdjVCTE1ydXJScXNvbEJTZHRQUGZhQTN5d3FzZ1l4VCIsIm1hYyI6IjhkZjA0Yzk3NTBkYmJjNDI1ZTM0Y2YwZGU0MjRhMTAxNTc1NGNlNWI0ZTcwNjVlNTYyOTQ5ZmIzNGJmZDg5ZDIifQ%3D%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iktiYaLPaljxCoFM7FsUuqV1qb%2B5RRsyx7gNnPzUOrTk7soo9P5B%2B61a5ATqqmkjP%2BJK9AmDX6AO4MEfzdxJUgOy9efCViC8VsY8GgHanYL7qumHjTzjVtYtgDj5yH8Q1KtyY5Jl\"}]}\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST,GET,OPTIONS,DELETE\r\naccess-control-allow-headers: x-requested-with,content-type,Authorization\r\ncache-control: no-cache, private\r\ndate: Sun, 10 May 2026 05:05:19 GMT\r\nset-cookie: angela_session=eyJpdiI6IlBaNUpPOXpXeDF2Y3RQU1wvdWdOZEtnPT0iLCJ2YWx1ZSI6IlZuRGMyTWRWbFR6XC9qUFFBNHZFaU5rNU5tMnRPQ25sbTBTM3dLR012WFZiWjNvN1FkTnE0WGlhM0FTUXdubEFKIiwibWFjIjoiNmVkODRmODhhZjQyZWRkOGI1NDdkOTIzMTgyMDhiZWE2NTQ3MmExMzg4ZGJhNjgwYTQ0MGVjYzIyY2JmYzJmMCJ9; expires=Tue, 09-Jun-2026 05:05:19 GMT; Max-Age=2592000; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f96687cc8b2b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15411,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"49926a665ba49bb688043e86a72fc555","sha1":"5736e1dbda814641c9ae0cd7de984f5722e139ac","sha256":"e49c5c265819a007de50c046d7b86f8f9bc07e245209226b357af22fbd56ecdb","sha512":"372a4bab266f06959208eb80cee8a4f111731baf4cd4bdfbf30b6e62a4d8cbf5aa29d63d05f967af4cbaa5b7954208abedb65a50547b54be7592e60fe1abfb76","ssdeep":"192:1WzAmBnX/AUZalbAmcdT9AV+yIA3cY1nAVrIoAyT7VoA9+fUk+A5Zgf6A5GLHy6r:API+CHNaUy4HynUsdlhghOE/lj","tlshash":"c062bf8d722c8a78c6f6aec2eede31ad7554700badc24f41d3dd5f8c439552ae10b612","first_seen":"2026-05-10T05:05:41.988647Z","last_seen":"2026-05-10T05:05:41.988647Z","times_seen":1,"resource_available":false,"data":null}},"time_used":779,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":476,"receive":303,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.marvelshoes.com/api/currency/quotation_new","fqdn":"www.marvelshoes.com","domain":"marvelshoes.com","tld":"com"},"ip":{"addr":"104.21.11.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.marvelshoes.com/m/","date":"2026-05-10T05:05:24.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marvelshoes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 09:25:09 GMT","end":"Sun, 21 Jun 2026 10:23:57 GMT"},"fingerprint":{"sha1":"32:6F:33:4D:87:39:F7:19:B1:CA:C7:A0:A5:48:64:41:A8:39:C8:00","sha256":"1C:E1:38:7F:82:0F:7B:45:88:52:E4:2E:C5:5D:6C:4E:16:20:65:B9:50:2E:05:A3:77:09:9A:A4:42:90:A5:57"}}},"request":{"raw":"GET /api/currency/quotation_new HTTP/1.1\r\nHost: www.marvelshoes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/x-www-form-urlencoded\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.marvelshoes.com/m/\r\nCookie: angela_session=eyJpdiI6IjVnckhlbWVGUVwvQUIzaWk5ZUpscGtnPT0iLCJ2YWx1ZSI6IlwvMlZJM1ZnQ0RuWmxcL2cweERPdElkQVFSd1poVTg5ZzdiYVZkQWEyWEErbUh6dnhYOG9NQjZFcVJHNVpGMlQzZCIsIm1hYyI6ImVkY2ViNDYzZGRlOWEzNGRiZDI2OWJlZmFlYjg5MTJkNDRiY2Q2YzE1NDViNmEwOTY4NWY0ZmUzNTI0NTE1N2IifQ%3D%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QLkBrL8LhrarjKVaAnBXvmF7VgOiWNJfJhZ%2BrIZ26qQoX2UY9ui7ZUmjySNNW5VK%2BsJ2SRtzjHzR2y817w7ggFRvG%2FdGS5AN%2FKOd4EMl%2Bhuei0LCTyoMF5YJC3yxJqN2Q8oWuAsY\"}]}\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST,GET,OPTIONS,DELETE\r\naccess-control-allow-headers: x-requested-with,content-type,Authorization\r\ncache-control: no-cache, private\r\ndate: Sun, 10 May 2026 05:05:25 GMT\r\nset-cookie: angela_session=eyJpdiI6ImRId1NMMDV1VkUzTEw1YnErUE9kbGc9PSIsInZhbHVlIjoidFg2YTJBU1ZwcDRpMVcrODM5QTJyUmg3S01KWEN1bDljdU1vdGpiSkRvWXBxZWNPSHdnZTFCMElROWlIbFZpcCIsIm1hYyI6ImYyNDZmNDAzOWNlYTliYjVkYjJhZWFjMzMyYzJjMTM1ZTJkMDUzZDY5ZGExODk4MmY4NGVkYjI1NmRiZjJhMDUifQ%3D%3D; expires=Tue, 09-Jun-2026 05:05:25 GMT; Max-Age=2592000; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f9668a25ac4b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15411,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"56fc7bbc3589195681a0286b4db26be9","sha1":"6b5bcf7d12a3511714405552c3d007656e071237","sha256":"70624740f7ea1dd1ece6e22c5a85a711bbeafb6bca600772422373acc594cfa1","sha512":"c77321b6ae30dc159610312976e0fc016dccf2bd5a97fad46e18e5a5d99fa454b3dbbeadf5c8d13dfc94104fc3c326212b91d788026be5b01b9c096ab6e3a155","ssdeep":"192:1WzAmBnX/AUZalbAmcdT9AV+yIA3cY1nAVrIoAyT7VoA9+fj+A5Zgf6A5GLHy6AM:API+CHNaMy4HynUsLlhghOSVlj","tlshash":"2262be8d722c8a78c6f6aec2eede31ad7554700badc24f42d3dd5f8c439552ae10b612","first_seen":"2026-05-10T05:05:41.558981Z","last_seen":"2026-05-10T05:05:41.990171Z","times_seen":2,"resource_available":false,"data":null}},"time_used":646,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":415,"receive":231,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.marvelshoes.com/","fqdn":"www.marvelshoes.com","domain":"marvelshoes.com","tld":"com"},"ip":{"addr":"104.21.11.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-10T05:05:14.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marvelshoes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 09:25:09 GMT","end":"Sun, 21 Jun 2026 10:23:57 GMT"},"fingerprint":{"sha1":"32:6F:33:4D:87:39:F7:19:B1:CA:C7:A0:A5:48:64:41:A8:39:C8:00","sha256":"1C:E1:38:7F:82:0F:7B:45:88:52:E4:2E:C5:5D:6C:4E:16:20:65:B9:50:2E:05:A3:77:09:9A:A4:42:90:A5:57"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.marvelshoes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sun, 10 May 2026 05:05:14 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: http://www.marvelshoes.com/m\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-cache, private\r\nset-cookie: angela_session=eyJpdiI6Ik9lK2d4a0JkRDNBZFNcL3VTZzRiRDJBPT0iLCJ2YWx1ZSI6IjFNd3RIUGRJVkZrN05CaStQUHNOdmVPWHY2WG10SElQZG5zNldIc3Q2Zm84bUZ2S0h2WDVjR2RQb0NRSHBqTHgiLCJtYWMiOiJiNDc3MTI2MWUyZGI3MzBlMzE0MzNhZGI1ZGViNDAyMmNmODBiNTdmOWY4NDJiN2E0NTViMDllNzU3ZTM3MmY5In0%3D; expires=Tue, 09-Jun-2026 05:05:14 GMT; Max-Age=2592000; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x7iW8zOn9dlgvZ9ReyJ18L4b05tra6v7WyEYZqA02JSz1dcdLJhBLaECesOhunFhSWHDmDz8NOPeit4e5pvm0AKdQKGaLjpFAYYJIKuX29XLih8o0It8TUcRZ20i%2BWzf1gavgKb3\"}]}\r\ncf-ray: 9f96685eba2156c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1355,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T07:49:02.787608Z","times_seen":17795775,"resource_available":true,"data":null}},"time_used":306,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":305,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.marvelshoes.com/h5/static/js/chunk-vendors.b0b781f6.js","fqdn":"www.marvelshoes.com","domain":"marvelshoes.com","tld":"com"},"ip":{"addr":"104.21.11.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.marvelshoes.com/m/","date":"2026-05-10T05:05:15.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marvelshoes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 09:25:09 GMT","end":"Sun, 21 Jun 2026 10:23:57 GMT"},"fingerprint":{"sha1":"32:6F:33:4D:87:39:F7:19:B1:CA:C7:A0:A5:48:64:41:A8:39:C8:00","sha256":"1C:E1:38:7F:82:0F:7B:45:88:52:E4:2E:C5:5D:6C:4E:16:20:65:B9:50:2E:05:A3:77:09:9A:A4:42:90:A5:57"}}},"request":{"raw":"GET /h5/static/js/chunk-vendors.b0b781f6.js HTTP/1.1\r\nHost: www.marvelshoes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.marvelshoes.com/m/\r\nCookie: angela_session=eyJpdiI6Ik9lK2d4a0JkRDNBZFNcL3VTZzRiRDJBPT0iLCJ2YWx1ZSI6IjFNd3RIUGRJVkZrN05CaStQUHNOdmVPWHY2WG10SElQZG5zNldIc3Q2Zm84bUZ2S0h2WDVjR2RQb0NRSHBqTHgiLCJtYWMiOiJiNDc3MTI2MWUyZGI3MzBlMzE0MzNhZGI1ZGViNDAyMmNmODBiNTdmOWY4NDJiN2E0NTViMDllNzU3ZTM3MmY5In0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 10 May 2026 05:05:15 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 01 Oct 2021 12:26:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: \"6156fe7c-af2c5\"\r\nexpires: Sun, 10 May 2026 17:05:14 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3%2BhctVEUH%2FmtwN9TbkyDjLcjmpusCe79PC%2BiOSPShWUFV8uUO6KYGEgF42hBpo4qs%2BEhpMHD68sTa9Hmfq9t7Uq81eZm74WJVF%2BMedd8T5bF769evCwnLa637%2BQODM1OJJeIf0iA\"}]}\r\ncf-ray: 9f9668676f53b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":717509,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65011), with no line terminators","md5":"cba26cf12578cdfdbc1c8b44d8b7a872","sha1":"a8959f92ebae338188b833928457e12a4a2d214d","sha256":"71e5bcd7617f253e3461bef16297858e6d1b1d83ba2b8952b8467489ee65a382","sha512":"6a2a012086d5e44cf459d898ad08a18c2371314f3f2fb0d38b8830c49ac1ec7c1c9e15c36a491a5650cc0d9bc7fb39504c85ed5786c12d05f8022a9a88e28bdb","ssdeep":"6144:OzNlRp0utvvX5Bt/t4nxHWtZvmiB4OhEqzYLehDbVOfewzkO2CEFj:rutvP5Bt/tQxHWtJzYqbqeAJMFj","tlshash":"11e4078db282b0750be770b5403f220bb2376959b44a84d8f675e4d4ad7c94e226bf3d","first_seen":"2023-09-18T10:45:33Z","last_seen":"2026-07-15T09:10:18.138517Z","times_seen":131,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.marvelshoes.com/h5/static/favicon.png","fqdn":"www.marvelshoes.com","domain":"marvelshoes.com","tld":"com"},"ip":{"addr":"104.21.11.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.marvelshoes.com/m/","date":"2026-05-10T05:05:15.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marvelshoes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 09:25:09 GMT","end":"Sun, 21 Jun 2026 10:23:57 GMT"},"fingerprint":{"sha1":"32:6F:33:4D:87:39:F7:19:B1:CA:C7:A0:A5:48:64:41:A8:39:C8:00","sha256":"1C:E1:38:7F:82:0F:7B:45:88:52:E4:2E:C5:5D:6C:4E:16:20:65:B9:50:2E:05:A3:77:09:9A:A4:42:90:A5:57"}}},"request":{"raw":"GET /h5/static/favicon.png HTTP/1.1\r\nHost: www.marvelshoes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.marvelshoes.com/m/\r\nCookie: angela_session=eyJpdiI6Ik9lK2d4a0JkRDNBZFNcL3VTZzRiRDJBPT0iLCJ2YWx1ZSI6IjFNd3RIUGRJVkZrN05CaStQUHNOdmVPWHY2WG10SElQZG5zNldIc3Q2Zm84bUZ2S0h2WDVjR2RQb0NRSHBqTHgiLCJtYWMiOiJiNDc3MTI2MWUyZGI3MzBlMzE0MzNhZGI1ZGViNDAyMmNmODBiNTdmOWY4NDJiN2E0NTViMDllNzU3ZTM3MmY5In0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 10 May 2026 05:05:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 9165\r\nlast-modified: Fri, 28 Jul 2023 14:03:00 GMT\r\npriority: u=6,i=?0\r\netag: \"64c3ca94-23cd\"\r\nexpires: Mon, 08 Jun 2026 04:47:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 87486\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TEmss1E1T5y4GFmliuKQ32N8eP5bARs1sB5fPfi%2FpkjzDIDMgvCWu8oPeF9b390lUwG4Xe%2BuDPd0vZ7ogH2eVoufA0UCmSSp%2BCM15rP21kqMaJAh%2B9IzhrBOLX%2FKbcsD0y2Ct7UP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f966869ef75b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9165,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, baseline, precision 8, 320x320, components 3","md5":"b1a2105a0c51a76f7daa28744c2a2cef","sha1":"f53d1531c95bf7d7038f617607e53493e3643e29","sha256":"21973d26844dc510f3be9dc41c98ea9f0b043abbf495d31c5a96a0d77da5d64a","sha512":"298930410a3ef9b6f01797c89d8483fe7f562d55ab8d338cac7322150e3cfa977c30047b24a89d62772b4b4d3e178ed1736d34fdd8e6b6ef3d71a99f4df9b64c","ssdeep":"192:VdEsDR+OETenmBODhqd9r/mS00mKG+VToepju6YKtRZLYipjSk1GViPU:V26QOEzBODhOTmSzmKGWToQjur0cip2D","tlshash":"3212af6ef86f831b3d7c9a351b264a9178ea8f0e9502267110718d87f2e48c8910fdcb","first_seen":"2023-09-18T10:45:34Z","last_seen":"2026-07-15T09:10:18.145689Z","times_seen":132,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.marvelshoes.com/api/set/lang","fqdn":"www.marvelshoes.com","domain":"marvelshoes.com","tld":"com"},"ip":{"addr":"104.21.11.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.marvelshoes.com/m/","date":"2026-05-10T05:05:15.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marvelshoes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 09:25:09 GMT","end":"Sun, 21 Jun 2026 10:23:57 GMT"},"fingerprint":{"sha1":"32:6F:33:4D:87:39:F7:19:B1:CA:C7:A0:A5:48:64:41:A8:39:C8:00","sha256":"1C:E1:38:7F:82:0F:7B:45:88:52:E4:2E:C5:5D:6C:4E:16:20:65:B9:50:2E:05:A3:77:09:9A:A4:42:90:A5:57"}}},"request":{"raw":"POST /api/set/lang HTTP/1.1\r\nHost: www.marvelshoes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/x-www-form-urlencoded\r\nContent-Length: 7\r\nOrigin: https://www.marvelshoes.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.marvelshoes.com/m/\r\nCookie: angela_session=eyJpdiI6Ik9lK2d4a0JkRDNBZFNcL3VTZzRiRDJBPT0iLCJ2YWx1ZSI6IjFNd3RIUGRJVkZrN05CaStQUHNOdmVPWHY2WG10SElQZG5zNldIc3Q2Zm84bUZ2S0h2WDVjR2RQb0NRSHBqTHgiLCJtYWMiOiJiNDc3MTI2MWUyZGI3MzBlMzE0MzNhZGI1ZGViNDAyMmNmODBiNTdmOWY4NDJiN2E0NTViMDllNzU3ZTM3MmY5In0%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":7,"data":"lang=en"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MZ9jJA%2B%2BOr9Id%2Bf7n34ve1ZxqRc9DuQRUMVtjqRdQtZhmdpnKgKHeXYCi%2BFIgNiyPhQZxWzPST2r0b%2B3uMAeJtMadG7nQnCoJZta2gVcpFg%2BgUu%2FENuFq4FlkqfiLodSBiIRHY9K\"}]}\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST,GET,OPTIONS,DELETE\r\naccess-control-allow-headers: x-requested-with,content-type,Authorization\r\ncache-control: no-cache, private\r\ndate: Sun, 10 May 2026 05:05:16 GMT\r\nset-cookie: angela_session=eyJpdiI6IlBzZUZ4TE5yYmM5enFrYXBQU09yUnc9PSIsInZhbHVlIjoiNXZ5eEtBU0toMHV6T2NlRXYxbUNSM2U4VTNkSXQ0R2QreGNzbDhaY0FGV1wvNDNzRStUVHVhQmd2T3VKZ202Rk8iLCJtYWMiOiIyMTBmY2FhYTI0ZGZlYTAxYTVlMjQ0YmY2ZGI0YmViNjIzYTgzZDg0MDI2ZTA2Y2I0M2IzNjllZmM0Yzg0OTRlIn0%3D; expires=Tue, 09-Jun-2026 05:05:16 GMT; Max-Age=2592000; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f96686a0f78b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8d911e4df0952bc061c65d9f9365b249","sha1":"02d2f9efd2f2ee6a1e95c721f8fa4f6c35a51bd4","sha256":"0e193a34dcb2ea79094c89f2b3b31ea0eda5d82da41d4abf83b4e45cf6ef9f4c","sha512":"11de0c2e0f3d4479577ae86331459ed3a6150fd989d58d5cf78cf06d9920fb08e2ff60f629947241a4b8594cb7457566745850f44d58043d9a87a4a6c64053de","ssdeep":"","tlshash":"eb8000000208ac3a2302030238882c00888e0082c0c22202a808aa28c30f8a0203232e","first_seen":"2023-05-23T12:42:48Z","last_seen":"2026-07-27T13:45:14.679709Z","times_seen":210,"resource_available":false,"data":null}},"time_used":359,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":358,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.marvelshoes.com/h5/static/image/spain.png","fqdn":"www.marvelshoes.com","domain":"marvelshoes.com","tld":"com"},"ip":{"addr":"104.21.11.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.marvelshoes.com/m/","date":"2026-05-10T05:05:15.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marvelshoes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 09:25:09 GMT","end":"Sun, 21 Jun 2026 10:23:57 GMT"},"fingerprint":{"sha1":"32:6F:33:4D:87:39:F7:19:B1:CA:C7:A0:A5:48:64:41:A8:39:C8:00","sha256":"1C:E1:38:7F:82:0F:7B:45:88:52:E4:2E:C5:5D:6C:4E:16:20:65:B9:50:2E:05:A3:77:09:9A:A4:42:90:A5:57"}}},"request":{"raw":"GET /h5/static/image/spain.png HTTP/1.1\r\nHost: www.marvelshoes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.marvelshoes.com/m/\r\nCookie: angela_session=eyJpdiI6Ik9lK2d4a0JkRDNBZFNcL3VTZzRiRDJBPT0iLCJ2YWx1ZSI6IjFNd3RIUGRJVkZrN05CaStQUHNOdmVPWHY2WG10SElQZG5zNldIc3Q2Zm84bUZ2S0h2WDVjR2RQb0NRSHBqTHgiLCJtYWMiOiJiNDc3MTI2MWUyZGI3MzBlMzE0MzNhZGI1ZGViNDAyMmNmODBiNTdmOWY4NDJiN2E0NTViMDllNzU3ZTM3MmY5In0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 10 May 2026 05:05:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 12321\r\nlast-modified: Fri, 01 Oct 2021 12:26:36 GMT\r\npriority: u=4,i=?0\r\netag: \"6156fe7c-3021\"\r\nexpires: Mon, 08 Jun 2026 04:47:07 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 87487\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eTH9bbf0Utf0NiRveAsB3nn%2FhXZefhnZI0T7cpWPPLreMVxKncf6RBIP4JKsS0T%2BbGsh16M6zyluFKSP04hONRRnXzIyS9baQP57%2FJ7%2BNEpmbPZ3zoKahH0evY2vWPVghJe0JwPh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f96686aaf8fb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12321,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 232 x 154, 8-bit/color RGBA, non-interlaced","md5":"2e72fd827fb8c3ab65c19f04c0487f8b","sha1":"23509ba4991aa1400f3d80dbad7ace9e79898a92","sha256":"35b3624a7a5cc922d7f3687f429b8445b2ab77839d74ecbe61801f03a93a776d","sha512":"299172af13dea6d8b39ed76e67cc8b63ab36ad4c2d3c49297276144bf89ae948d7722a7738d331b8ad7b98f18a08914c928726e5595f0110b8a32a157cb637be","ssdeep":"192:4hpoY1JVxoLmu/MeP/W64TewM53VkaKXJvVZqBpT6mVLplneVhcLJtGmlr/Pn9f:4hpokipwMRVkaKszrLn2EJn","tlshash":"1b42cffb140cdbda4867564b002fe0e6f73de44a8ca96455340a40e73942b9e7b96ba2","first_seen":"2023-06-16T23:26:12Z","last_seen":"2026-07-27T13:45:14.762572Z","times_seen":171,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.marvelshoes.com/h5/static/image/italy.png","fqdn":"www.marvelshoes.com","domain":"marvelshoes.com","tld":"com"},"ip":{"addr":"104.21.11.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.marvelshoes.com/m/","date":"2026-05-10T05:05:15.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marvelshoes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 09:25:09 GMT","end":"Sun, 21 Jun 2026 10:23:57 GMT"},"fingerprint":{"sha1":"32:6F:33:4D:87:39:F7:19:B1:CA:C7:A0:A5:48:64:41:A8:39:C8:00","sha256":"1C:E1:38:7F:82:0F:7B:45:88:52:E4:2E:C5:5D:6C:4E:16:20:65:B9:50:2E:05:A3:77:09:9A:A4:42:90:A5:57"}}},"request":{"raw":"GET /h5/static/image/italy.png HTTP/1.1\r\nHost: www.marvelshoes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.marvelshoes.com/m/\r\nCookie: angela_session=eyJpdiI6Ik9lK2d4a0JkRDNBZFNcL3VTZzRiRDJBPT0iLCJ2YWx1ZSI6IjFNd3RIUGRJVkZrN05CaStQUHNOdmVPWHY2WG10SElQZG5zNldIc3Q2Zm84bUZ2S0h2WDVjR2RQb0NRSHBqTHgiLCJtYWMiOiJiNDc3MTI2MWUyZGI3MzBlMzE0MzNhZGI1ZGViNDAyMmNmODBiNTdmOWY4NDJiN2E0NTViMDllNzU3ZTM3MmY5In0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 10 May 2026 05:05:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 4911\r\nlast-modified: Tue, 06 Jun 2023 08:37:35 GMT\r\npriority: u=4,i=?0\r\netag: \"647ef04f-132f\"\r\nexpires: Mon, 08 Jun 2026 04:47:07 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 87487\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=39747%2B8aHg0RpFAGwp68DlSI7%2BOh4sDCsvhMA67fKTl8LpnQZzsHwlLVfUjjYO2K2FCGL5WUbt8qHdjvWXrjVu8pwBpUI7BW3UzhBZ1F5ceQ80ZGnmNgx0%2FNaRttrZu2xL5QbmBI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f96686abf90b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4911,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 231 x 154, 8-bit/color RGB, non-interlaced","md5":"61e762fd632468a1b281858bfc2870bb","sha1":"257d6220898bfc9dcbba23679f2785c2776e1569","sha256":"6e7816e672ae7beb6cebdd3458f08cb51e165b779d1b4c2226171559c2f2c82d","sha512":"e1d009258ed5b426e64f5619350ce41b65662aa91b81443983301df4d957cd2964f9914bb8b02e49c85e841fb7154d2499da05b738229f1eabfe50841d535a96","ssdeep":"96:wSUbKAb9svZyAeyltuTZuZ9LnXuXzAj3HV9hMMMMUbMMMX2F5AH:wSUbP+vo60m9qjA7V9hMMMMUbMMMX2Fu","tlshash":"6ca16e6d47d56b334d4e0c2cca0863206eb135d5b0b84e059d5fbae1b4bb945693c1fa","first_seen":"2023-09-18T10:45:33Z","last_seen":"2026-07-15T09:10:18.140925Z","times_seen":131,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.marvelshoes.com/api/news/list","fqdn":"www.marvelshoes.com","domain":"marvelshoes.com","tld":"com"},"ip":{"addr":"104.21.11.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.marvelshoes.com/m/","date":"2026-05-10T05:05:16.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marvelshoes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 09:25:09 GMT","end":"Sun, 21 Jun 2026 10:23:57 GMT"},"fingerprint":{"sha1":"32:6F:33:4D:87:39:F7:19:B1:CA:C7:A0:A5:48:64:41:A8:39:C8:00","sha256":"1C:E1:38:7F:82:0F:7B:45:88:52:E4:2E:C5:5D:6C:4E:16:20:65:B9:50:2E:05:A3:77:09:9A:A4:42:90:A5:57"}}},"request":{"raw":"POST /api/news/list HTTP/1.1\r\nHost: www.marvelshoes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/x-www-form-urlencoded\r\nContent-Length: 6\r\nOrigin: https://www.marvelshoes.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.marvelshoes.com/m/\r\nCookie: angela_session=eyJpdiI6IlBzZUZ4TE5yYmM5enFrYXBQU09yUnc9PSIsInZhbHVlIjoiNXZ5eEtBU0toMHV6T2NlRXYxbUNSM2U4VTNkSXQ0R2QreGNzbDhaY0FGV1wvNDNzRStUVHVhQmd2T3VKZ202Rk8iLCJtYWMiOiIyMTBmY2FhYTI0ZGZlYTAxYTVlMjQ0YmY2ZGI0YmViNjIzYTgzZDg0MDI2ZTA2Y2I0M2IzNjllZmM0Yzg0OTRlIn0%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":6,"data":"c_id=5"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zm%2Fs8V1wbQNY%2BrroKXv4mzLApwump6RhfJZbqbZPjg8ROfqfeEKWyph1aLRHjJQ9fZ7sa01ZmAqkVVeDNLmRFT8XXg6jzldOeh9CgTG%2F3K%2Fl9SJpbGSugCLjwf9JVCdpoyx%2FcbyN\"}]}\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST,GET,OPTIONS,DELETE\r\naccess-control-allow-headers: x-requested-with,content-type,Authorization\r\ncache-control: no-cache, private\r\ndate: Sun, 10 May 2026 05:05:16 GMT\r\nset-cookie: angela_session=eyJpdiI6IlJCUFdPa29mNHFaTmVhVkxxeGhCa2c9PSIsInZhbHVlIjoieTlGNW5YS1wvUmVLTHBYNnVkSVhFb3pmZGFXbVRoUzNYZGNFVDhmNWdVcVwvTDcrSHRRRk44MEpLdVlZR0p3b041IiwibWFjIjoiMDA5MmRiMTIwYTc3OTc4YmU0ZjZmYWRjNTAwODAxNDdmMzUzYzQyZjJlNzUzOGEyODViZjUxOGNlNmNmMGZlOCJ9; expires=Tue, 09-Jun-2026 05:05:16 GMT; Max-Age=2592000; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f96686c6fa9b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":898,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"eba9ae0d6a673638933ac45bf4ca6c47","sha1":"c25e80331f232cdbc73dc94574758322643bb3af","sha256":"aa55e552c7096cc11352bfe2777e89f80e7f5d6c2580c09ed9e7b619485df59e","sha512":"46507f1e77ed30e9827085544bfd4bb731f2a185d461a53cc8dc925f4ef95bcd184b8a47db042eaff59b028d4a78065c8ba8ba15d016204aff4e949399201d30","ssdeep":"","tlshash":"c911e5beaec488bbe2d546c290cbf80967ce2203d7412a5a6ed04cc8c67cbda041b153","first_seen":"2026-02-25T18:26:56.631961Z","last_seen":"2026-07-15T09:10:18.139107Z","times_seen":22,"resource_available":false,"data":null}},"time_used":358,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":358,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.marvelshoes.com/h5/static/image/account_about_image.png","fqdn":"www.marvelshoes.com","domain":"marvelshoes.com","tld":"com"},"ip":{"addr":"104.21.11.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.marvelshoes.com/m/","date":"2026-05-10T05:05:16.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marvelshoes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 09:25:09 GMT","end":"Sun, 21 Jun 2026 10:23:57 GMT"},"fingerprint":{"sha1":"32:6F:33:4D:87:39:F7:19:B1:CA:C7:A0:A5:48:64:41:A8:39:C8:00","sha256":"1C:E1:38:7F:82:0F:7B:45:88:52:E4:2E:C5:5D:6C:4E:16:20:65:B9:50:2E:05:A3:77:09:9A:A4:42:90:A5:57"}}},"request":{"raw":"GET /h5/static/image/account_about_image.png HTTP/1.1\r\nHost: www.marvelshoes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.marvelshoes.com/m/\r\nCookie: angela_session=eyJpdiI6Ik9lK2d4a0JkRDNBZFNcL3VTZzRiRDJBPT0iLCJ2YWx1ZSI6IjFNd3RIUGRJVkZrN05CaStQUHNOdmVPWHY2WG10SElQZG5zNldIc3Q2Zm84bUZ2S0h2WDVjR2RQb0NRSHBqTHgiLCJtYWMiOiJiNDc3MTI2MWUyZGI3MzBlMzE0MzNhZGI1ZGViNDAyMmNmODBiNTdmOWY4NDJiN2E0NTViMDllNzU3ZTM3MmY5In0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 10 May 2026 05:05:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 2139\r\nlast-modified: Fri, 01 Oct 2021 12:26:36 GMT\r\npriority: u=4,i=?0\r\netag: \"6156fe7c-85b\"\r\nexpires: Mon, 08 Jun 2026 04:47:07 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 87487\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZQmzUKFnFrCca%2FCIT45qcyfc1d%2FN1aaHeJn9W9Etu8xISVijGeWY9kyWBlxANsM9J7wre9MxG2KuSA33K2caLvD%2BxQSYvonvQmyAOLWTwio%2BzbW1kNqqYR3wEvSCskbUZbfMo3%2FJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f96686b1f9cb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2139,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 51 x 52, 8-bit/color RGBA, non-interlaced","md5":"2bf44584d1f172ff001d3495090b4c60","sha1":"a3a87c174a56a39d0422b8e1a1ce0669b5f7d947","sha256":"143465d0af689c99df324081dc2891bb612f179939c618e0ad5bdb1ba42f2036","sha512":"fcb026da62e1376eff873f6581db8651b91e992b732888e82ef162c076d3145550910aeca97e0a190e9a90befe636b17beb7ff998c9617991d9368214b86f875","ssdeep":"","tlshash":"bc41d76de75928204f4dddc018e2572ba87a088456f8d5265bffcc176d387aac02bbc7","first_seen":"2023-08-09T23:12:25Z","last_seen":"2026-08-01T17:32:58.164487Z","times_seen":211,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.marvelshoes.com/h5/static/image/germany.png","fqdn":"www.marvelshoes.com","domain":"marvelshoes.com","tld":"com"},"ip":{"addr":"104.21.11.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.marvelshoes.com/m/","date":"2026-05-10T05:05:15.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marvelshoes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 09:25:09 GMT","end":"Sun, 21 Jun 2026 10:23:57 GMT"},"fingerprint":{"sha1":"32:6F:33:4D:87:39:F7:19:B1:CA:C7:A0:A5:48:64:41:A8:39:C8:00","sha256":"1C:E1:38:7F:82:0F:7B:45:88:52:E4:2E:C5:5D:6C:4E:16:20:65:B9:50:2E:05:A3:77:09:9A:A4:42:90:A5:57"}}},"request":{"raw":"GET /h5/static/image/germany.png HTTP/1.1\r\nHost: www.marvelshoes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.marvelshoes.com/m/\r\nCookie: angela_session=eyJpdiI6Ik9lK2d4a0JkRDNBZFNcL3VTZzRiRDJBPT0iLCJ2YWx1ZSI6IjFNd3RIUGRJVkZrN05CaStQUHNOdmVPWHY2WG10SElQZG5zNldIc3Q2Zm84bUZ2S0h2WDVjR2RQb0NRSHBqTHgiLCJtYWMiOiJiNDc3MTI2MWUyZGI3MzBlMzE0MzNhZGI1ZGViNDAyMmNmODBiNTdmOWY4NDJiN2E0NTViMDllNzU3ZTM3MmY5In0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 10 May 2026 05:05:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 1622\r\nlast-modified: Fri, 01 Oct 2021 12:26:36 GMT\r\npriority: u=4,i=?0\r\netag: \"6156fe7c-656\"\r\nexpires: Mon, 08 Jun 2026 04:47:07 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 87487\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FQaIOqDg5a4a0VqbtKS%2BFUqG%2Ba10r%2B0n0q4Cpr6wrJf3DDe%2BspHPWLtEEFFai4Su2cSzFMP8goVfnOQCULwzrN6NOmehS4Tfyay%2FDIfsiQ8Ceh%2FXsuf2MYBKtaurw4%2BSYyTRwZuK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f96686aaf8db1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1622,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 249 x 149, 8-bit/color RGBA, non-interlaced","md5":"d6b756e4c0c083d2ac168979eacf0d13","sha1":"ca6c2a9c8a644a38f1eaf127aae05a442f27c90e","sha256":"2bbbfff1911f556adb6246883b32351ebe8c2ccde44b6b9b28ddb62dd83a3956","sha512":"6ec570d51c6921adb4d54a6028bd92db375a322375a36c712d8d41a99691241e0defedb2a6a5be4db447930397cd10392dba9a029c03d824335ae817f5eabeea","ssdeep":"","tlshash":"233160b2d03b9e3e80dd0c38c0a1932c921a9cfbeb887b74390885e4b404056db4cd5a","first_seen":"2023-09-18T10:45:33Z","last_seen":"2026-07-27T13:45:14.671414Z","times_seen":171,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.marvelshoes.com/h5/static/footer/index1.png","fqdn":"www.marvelshoes.com","domain":"marvelshoes.com","tld":"com"},"ip":{"addr":"104.21.11.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.marvelshoes.com/m/","date":"2026-05-10T05:05:15.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marvelshoes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 09:25:09 GMT","end":"Sun, 21 Jun 2026 10:23:57 GMT"},"fingerprint":{"sha1":"32:6F:33:4D:87:39:F7:19:B1:CA:C7:A0:A5:48:64:41:A8:39:C8:00","sha256":"1C:E1:38:7F:82:0F:7B:45:88:52:E4:2E:C5:5D:6C:4E:16:20:65:B9:50:2E:05:A3:77:09:9A:A4:42:90:A5:57"}}},"request":{"raw":"GET /h5/static/footer/index1.png HTTP/1.1\r\nHost: www.marvelshoes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.marvelshoes.com/m/\r\nCookie: angela_session=eyJpdiI6Ik9lK2d4a0JkRDNBZFNcL3VTZzRiRDJBPT0iLCJ2YWx1ZSI6IjFNd3RIUGRJVkZrN05CaStQUHNOdmVPWHY2WG10SElQZG5zNldIc3Q2Zm84bUZ2S0h2WDVjR2RQb0NRSHBqTHgiLCJtYWMiOiJiNDc3MTI2MWUyZGI3MzBlMzE0MzNhZGI1ZGViNDAyMmNmODBiNTdmOWY4NDJiN2E0NTViMDllNzU3ZTM3MmY5In0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 10 May 2026 05:05:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 2277\r\nlast-modified: Fri, 01 Oct 2021 12:26:36 GMT\r\npriority: u=4,i=?0\r\netag: \"6156fe7c-8e5\"\r\nexpires: Mon, 08 Jun 2026 04:47:07 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 87488\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4M%2B6iBuKrtVNmlI86I3C%2FOkozk%2Bf3szbZbHe5P6pIQ2wnMp0KmzPUVS0zobLCu1yxiM6VoowtRFuCn1u1CdFEMvyr8a86gcaOzG3RxGEAcGxYuQpL4FJNGLtUaWBGJGwbz%2F0Tv8X\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f9668699f6fb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2277,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 78 x 78, 8-bit/color RGBA, non-interlaced","md5":"70eda83bf7de9438882ee030fff4ac46","sha1":"1d4c3d86354ee196abeb2ed9ccba70d7c827eb33","sha256":"5eccc9f6c8641a057d543958d433b201b8ce31caf784e5270df0032c9f7af031","sha512":"279a6373cfe0a2a9922f1531bc226519215d83f163cc4b510a8dc126896521d1059fa796303a84f5046db4afa20c64d188839b27e8fca774feee0743d623248d","ssdeep":"","tlshash":"fb410cc8ed061e61917a94d135f1f1460a356d98eaf8e039048bd44be5593f785fe0cf","first_seen":"2023-08-09T23:12:25Z","last_seen":"2026-07-15T09:10:18.144697Z","times_seen":179,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.marvelshoes.com/api/news/list","fqdn":"www.marvelshoes.com","domain":"marvelshoes.com","tld":"com"},"ip":{"addr":"104.21.11.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.marvelshoes.com/m/","date":"2026-05-10T05:05:15.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marvelshoes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 09:25:09 GMT","end":"Sun, 21 Jun 2026 10:23:57 GMT"},"fingerprint":{"sha1":"32:6F:33:4D:87:39:F7:19:B1:CA:C7:A0:A5:48:64:41:A8:39:C8:00","sha256":"1C:E1:38:7F:82:0F:7B:45:88:52:E4:2E:C5:5D:6C:4E:16:20:65:B9:50:2E:05:A3:77:09:9A:A4:42:90:A5:57"}}},"request":{"raw":"POST /api/news/list HTTP/1.1\r\nHost: www.marvelshoes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/x-www-form-urlencoded\r\nContent-Length: 6\r\nOrigin: https://www.marvelshoes.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.marvelshoes.com/m/\r\nCookie: angela_session=eyJpdiI6Ik9lK2d4a0JkRDNBZFNcL3VTZzRiRDJBPT0iLCJ2YWx1ZSI6IjFNd3RIUGRJVkZrN05CaStQUHNOdmVPWHY2WG10SElQZG5zNldIc3Q2Zm84bUZ2S0h2WDVjR2RQb0NRSHBqTHgiLCJtYWMiOiJiNDc3MTI2MWUyZGI3MzBlMzE0MzNhZGI1ZGViNDAyMmNmODBiNTdmOWY4NDJiN2E0NTViMDllNzU3ZTM3MmY5In0%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":6,"data":"c_id=5"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1WKpWKZ3mjEaTSlpMTv0bT7%2BVZrZTUUjEKwBt1hiR7%2FaId9GllbzJarZcVDFt72vv7ZRvoz9yXPeVC9Rey7N6wHQP782P7l0NjOC3B%2BJSqLHtPKUKZIIMcKogXAWWkR18xgqBY92\"}]}\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST,GET,OPTIONS,DELETE\r\naccess-control-allow-headers: x-requested-with,content-type,Authorization\r\ncache-control: no-cache, private\r\ndate: Sun, 10 May 2026 05:05:22 GMT\r\nset-cookie: angela_session=eyJpdiI6IjVnckhlbWVGUVwvQUIzaWk5ZUpscGtnPT0iLCJ2YWx1ZSI6IlwvMlZJM1ZnQ0RuWmxcL2cweERPdElkQVFSd1poVTg5ZzdiYVZkQWEyWEErbUh6dnhYOG9NQjZFcVJHNVpGMlQzZCIsIm1hYyI6ImVkY2ViNDYzZGRlOWEzNGRiZDI2OWJlZmFlYjg5MTJkNDRiY2Q2YzE1NDViNmEwOTY4NWY0ZmUzNTI0NTE1N2IifQ%3D%3D; expires=Tue, 09-Jun-2026 05:05:22 GMT; Max-Age=2592000; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f96686a0f79b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":898,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"eba9ae0d6a673638933ac45bf4ca6c47","sha1":"c25e80331f232cdbc73dc94574758322643bb3af","sha256":"aa55e552c7096cc11352bfe2777e89f80e7f5d6c2580c09ed9e7b619485df59e","sha512":"46507f1e77ed30e9827085544bfd4bb731f2a185d461a53cc8dc925f4ef95bcd184b8a47db042eaff59b028d4a78065c8ba8ba15d016204aff4e949399201d30","ssdeep":"","tlshash":"c911e5beaec488bbe2d546c290cbf80967ce2203d7412a5a6ed04cc8c67cbda041b153","first_seen":"2026-02-25T18:26:56.631961Z","last_seen":"2026-07-15T09:10:18.139107Z","times_seen":22,"resource_available":false,"data":null}},"time_used":6802,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6802,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.marvelshoes.com/h5/static/image/head.png","fqdn":"www.marvelshoes.com","domain":"marvelshoes.com","tld":"com"},"ip":{"addr":"104.21.11.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.marvelshoes.com/m/","date":"2026-05-10T05:05:15.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marvelshoes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 09:25:09 GMT","end":"Sun, 21 Jun 2026 10:23:57 GMT"},"fingerprint":{"sha1":"32:6F:33:4D:87:39:F7:19:B1:CA:C7:A0:A5:48:64:41:A8:39:C8:00","sha256":"1C:E1:38:7F:82:0F:7B:45:88:52:E4:2E:C5:5D:6C:4E:16:20:65:B9:50:2E:05:A3:77:09:9A:A4:42:90:A5:57"}}},"request":{"raw":"GET /h5/static/image/head.png HTTP/1.1\r\nHost: www.marvelshoes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.marvelshoes.com/m/\r\nCookie: angela_session=eyJpdiI6Ik9lK2d4a0JkRDNBZFNcL3VTZzRiRDJBPT0iLCJ2YWx1ZSI6IjFNd3RIUGRJVkZrN05CaStQUHNOdmVPWHY2WG10SElQZG5zNldIc3Q2Zm84bUZ2S0h2WDVjR2RQb0NRSHBqTHgiLCJtYWMiOiJiNDc3MTI2MWUyZGI3MzBlMzE0MzNhZGI1ZGViNDAyMmNmODBiNTdmOWY4NDJiN2E0NTViMDllNzU3ZTM3MmY5In0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 10 May 2026 05:05:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 5182\r\nlast-modified: Fri, 01 Oct 2021 12:26:36 GMT\r\npriority: u=4,i=?0\r\netag: \"6156fe7c-143e\"\r\nexpires: Mon, 08 Jun 2026 04:47:07 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 87487\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xUtwg7Klp7PuqDXrYqYCOnifmh8kSS2dYULx0vzgSQsOZK65mVdWqeipYUTH59Az18bpaHoTZ50xYs4m0w8D%2Fa7HPc2HaynjCJ%2FBwRHtEnMyTbRkp0rlUh4tSE4V7ffuqckvV8WX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f96686a7f84b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5182,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 52 x 52, 8-bit/color RGBA, non-interlaced","md5":"dba98711bdff990a5f6250c01f53c3d5","sha1":"006c5851806c3c23b22723bb5c155e4f980b1d49","sha256":"329e0cb0896e7b07cb6d67918d3aa5685250ffe855a264c3d0d25f02c163f02a","sha512":"ba2571b04d27f68f1632c5c3d9ebadb1697c3e71eaa770909c4564abc1761f416aff4a1a025f410ccef4fbe7646727113119b590ebc5f11f58d96be70d44d094","ssdeep":"96:ao7F525V5kJ4R6JT3tRuRisSjDfVENSKP+TY3uhogY/iyOE8otJkoCdXIApC:b7FSV5S4R65uor3fVEvPcYVtJodXImC","tlshash":"57b16d08a684b380d02dbd5114f78072eb76b56146fce1dde8cfec524e391d58655cdb","first_seen":"2023-08-09T23:12:25Z","last_seen":"2026-08-01T17:32:58.187567Z","times_seen":169,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.marvelshoes.com/h5/static/image/legal_card.png","fqdn":"www.marvelshoes.com","domain":"marvelshoes.com","tld":"com"},"ip":{"addr":"104.21.11.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.marvelshoes.com/m/","date":"2026-05-10T05:05:15.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marvelshoes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 09:25:09 GMT","end":"Sun, 21 Jun 2026 10:23:57 GMT"},"fingerprint":{"sha1":"32:6F:33:4D:87:39:F7:19:B1:CA:C7:A0:A5:48:64:41:A8:39:C8:00","sha256":"1C:E1:38:7F:82:0F:7B:45:88:52:E4:2E:C5:5D:6C:4E:16:20:65:B9:50:2E:05:A3:77:09:9A:A4:42:90:A5:57"}}},"request":{"raw":"GET /h5/static/image/legal_card.png HTTP/1.1\r\nHost: www.marvelshoes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.marvelshoes.com/m/\r\nCookie: angela_session=eyJpdiI6Ik9lK2d4a0JkRDNBZFNcL3VTZzRiRDJBPT0iLCJ2YWx1ZSI6IjFNd3RIUGRJVkZrN05CaStQUHNOdmVPWHY2WG10SElQZG5zNldIc3Q2Zm84bUZ2S0h2WDVjR2RQb0NRSHBqTHgiLCJtYWMiOiJiNDc3MTI2MWUyZGI3MzBlMzE0MzNhZGI1ZGViNDAyMmNmODBiNTdmOWY4NDJiN2E0NTViMDllNzU3ZTM3MmY5In0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 10 May 2026 05:05:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 3562\r\nlast-modified: Fri, 01 Oct 2021 12:26:36 GMT\r\npriority: u=4,i=?0\r\netag: \"6156fe7c-dea\"\r\nexpires: Mon, 08 Jun 2026 04:47:07 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 87487\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UrgR1GMUW%2B18QU%2FgvHqI5dnNb9elUkMoTbwUU%2FZQ3thydKNEiRcUsEGOd11A8nAv46ZNnFPTlS6WkkTzCanDwGuQpwu2YiMUdRtVsfRi4T%2BfnguqF%2B%2FSpiyMgqxGtMJSfLz6pVgP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f96686acf91b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3562,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 77, 8-bit/color RGBA, non-interlaced","md5":"dc5c5ef1ed04b3547563fb87b04e071b","sha1":"b06904c5dd8a276d1de99f92c2a17a28adc61ad1","sha256":"33ab657d3951cf30513d739794db93480937d83825e12869a812626b9f5c0cf1","sha512":"41ab4f522f1f0a264757fc41bf45ce1eecbdadeb1bd3871e81e4c7cfe65855db2a1c2ec5d7fb8c2c4d7a588bf69319911d82b30eab8aacddd9d7930c859d6e9a","ssdeep":"","tlshash":"ce713d8af7d1e982d937da005c7d9127a61b44c0a5e1d0b9d5df80a2c6e6abb191a0c2","first_seen":"2023-08-09T23:12:25Z","last_seen":"2026-07-15T09:10:18.178492Z","times_seen":177,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.marvelshoes.com/h5/static/js/index.e879db59.js","fqdn":"www.marvelshoes.com","domain":"marvelshoes.com","tld":"com"},"ip":{"addr":"104.21.11.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.marvelshoes.com/m/","date":"2026-05-10T05:05:15.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marvelshoes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 09:25:09 GMT","end":"Sun, 21 Jun 2026 10:23:57 GMT"},"fingerprint":{"sha1":"32:6F:33:4D:87:39:F7:19:B1:CA:C7:A0:A5:48:64:41:A8:39:C8:00","sha256":"1C:E1:38:7F:82:0F:7B:45:88:52:E4:2E:C5:5D:6C:4E:16:20:65:B9:50:2E:05:A3:77:09:9A:A4:42:90:A5:57"}}},"request":{"raw":"GET /h5/static/js/index.e879db59.js HTTP/1.1\r\nHost: www.marvelshoes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.marvelshoes.com/m/\r\nCookie: angela_session=eyJpdiI6Ik9lK2d4a0JkRDNBZFNcL3VTZzRiRDJBPT0iLCJ2YWx1ZSI6IjFNd3RIUGRJVkZrN05CaStQUHNOdmVPWHY2WG10SElQZG5zNldIc3Q2Zm84bUZ2S0h2WDVjR2RQb0NRSHBqTHgiLCJtYWMiOiJiNDc3MTI2MWUyZGI3MzBlMzE0MzNhZGI1ZGViNDAyMmNmODBiNTdmOWY4NDJiN2E0NTViMDllNzU3ZTM3MmY5In0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 10 May 2026 05:05:15 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 06 May 2026 14:28:31 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: \"69fb500f-bfe83\"\r\nexpires: Sun, 10 May 2026 17:05:14 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FXY5Q5PRQwmiWrykTjn22USCsxXeS8lmXEutcx8hqWsNudzbDAq%2B68d1jCh5%2Fkc4C6cbeuBA3kqqGdMYKBdSVgXR2gAW1uh%2FxsxZxR8fWc52AwqVmBnp6pmFyOfpWrnKsZfrEWdQ\"}]}\r\ncf-ray: 9f9668676f54b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":786051,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (824)","md5":"b01620bcfdaf5d344f24fd6baada3e05","sha1":"022a05cfe573a84c33d9e133073cbfd93f2a9bd9","sha256":"44cceb0c699b7459cba46c0d5ae15b661aac1186de9e85ae172b6ebc4eb6a223","sha512":"2c1fce655a51d1c45a100ddaadb9a163b53444567d8428494a96c66f03e4bfb1f187ed982cccc5f9a016459afd63eb990955abb6ad3b81067cdd4b080901bb33","ssdeep":"12288:RlCzVokZzwR0KcWLyzBl3yz/bvFeYoV/LR3QHq5H6:RlCzzzANcWOXO/5eYoVzm","tlshash":"c8f4e71aabe520a04187f019a46f59367225543f4f497d287b9c92e49f4e83f82f1fbc","first_seen":"2026-05-09T04:47:31.236642Z","last_seen":"2026-07-15T09:10:18.176047Z","times_seen":10,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.marvelshoes.com/h5/static/image/hk.png","fqdn":"www.marvelshoes.com","domain":"marvelshoes.com","tld":"com"},"ip":{"addr":"104.21.11.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.marvelshoes.com/m/","date":"2026-05-10T05:05:15.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marvelshoes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 09:25:09 GMT","end":"Sun, 21 Jun 2026 10:23:57 GMT"},"fingerprint":{"sha1":"32:6F:33:4D:87:39:F7:19:B1:CA:C7:A0:A5:48:64:41:A8:39:C8:00","sha256":"1C:E1:38:7F:82:0F:7B:45:88:52:E4:2E:C5:5D:6C:4E:16:20:65:B9:50:2E:05:A3:77:09:9A:A4:42:90:A5:57"}}},"request":{"raw":"GET /h5/static/image/hk.png HTTP/1.1\r\nHost: www.marvelshoes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.marvelshoes.com/m/\r\nCookie: angela_session=eyJpdiI6Ik9lK2d4a0JkRDNBZFNcL3VTZzRiRDJBPT0iLCJ2YWx1ZSI6IjFNd3RIUGRJVkZrN05CaStQUHNOdmVPWHY2WG10SElQZG5zNldIc3Q2Zm84bUZ2S0h2WDVjR2RQb0NRSHBqTHgiLCJtYWMiOiJiNDc3MTI2MWUyZGI3MzBlMzE0MzNhZGI1ZGViNDAyMmNmODBiNTdmOWY4NDJiN2E0NTViMDllNzU3ZTM3MmY5In0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 10 May 2026 05:05:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 1520\r\nlast-modified: Fri, 01 Oct 2021 12:26:36 GMT\r\npriority: u=4,i=?0\r\netag: \"6156fe7c-5f0\"\r\nexpires: Mon, 08 Jun 2026 04:47:07 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 87488\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kCAd%2BOg5wC5hxlil8BTSjJuI2MY0MUZ38o5KT%2BfxcBHow3OD5%2FNM2rHYI43VDMm636ir0QRxiXaMF%2BPNJVCA9Pk2Z%2BTEQOUpGwBliQmr%2Foesi2O5jIDb%2F2N5kg4j3057nrKoKgd%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f96686a9f88b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1520,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 49 x 32, 8-bit/color RGBA, non-interlaced","md5":"199fe88db3fdff594016f2344256f05e","sha1":"e05d0b865be8418dc92a019a2b90e61bbbf315c8","sha256":"417a37b4988d0520ea83dc2c570100c6a7a86dbcd5bf7ca1113659c38d5101d9","sha512":"4992cda3d76d807af483a733d670d7a3b5e866c5b61442462247ecec75bd4e4d416bbed256593e3b58dba94b64b5bd83ef6147aa83275bb986ea2d68e47f2fe4","ssdeep":"","tlshash":"0031f9e7cdb29da0c07b0671383af59dc4331401a5fd0813ea1a056b69a001a7cfeddb","first_seen":"2023-05-07T20:12:38Z","last_seen":"2026-08-07T11:15:24.513602Z","times_seen":324,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.marvelshoes.com/h5/static/image/suocang.png","fqdn":"www.marvelshoes.com","domain":"marvelshoes.com","tld":"com"},"ip":{"addr":"104.21.11.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.marvelshoes.com/m/","date":"2026-05-10T05:05:16.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marvelshoes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 09:25:09 GMT","end":"Sun, 21 Jun 2026 10:23:57 GMT"},"fingerprint":{"sha1":"32:6F:33:4D:87:39:F7:19:B1:CA:C7:A0:A5:48:64:41:A8:39:C8:00","sha256":"1C:E1:38:7F:82:0F:7B:45:88:52:E4:2E:C5:5D:6C:4E:16:20:65:B9:50:2E:05:A3:77:09:9A:A4:42:90:A5:57"}}},"request":{"raw":"GET /h5/static/image/suocang.png HTTP/1.1\r\nHost: www.marvelshoes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.marvelshoes.com/m/\r\nCookie: angela_session=eyJpdiI6Ik9lK2d4a0JkRDNBZFNcL3VTZzRiRDJBPT0iLCJ2YWx1ZSI6IjFNd3RIUGRJVkZrN05CaStQUHNOdmVPWHY2WG10SElQZG5zNldIc3Q2Zm84bUZ2S0h2WDVjR2RQb0NRSHBqTHgiLCJtYWMiOiJiNDc3MTI2MWUyZGI3MzBlMzE0MzNhZGI1ZGViNDAyMmNmODBiNTdmOWY4NDJiN2E0NTViMDllNzU3ZTM3MmY5In0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 10 May 2026 05:05:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 5435\r\nlast-modified: Fri, 01 Oct 2021 12:26:36 GMT\r\npriority: u=4,i=?0\r\netag: \"6156fe7c-153b\"\r\nexpires: Mon, 08 Jun 2026 04:47:07 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 87488\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iYOomv1OtlfC6CirFWn1hm1BNMsRMRDQuFLGP%2BPMQ3XPRJYRfDuscg0rQ2XNf95TiXCyZ2jN1mebEKvwnbpkvbt%2FH5n3SLKhubcPCZWc6Q98NtUNZDjrHwmiTjCBoy1jC4dHVtUr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f96686aff99b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5435,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"58e09c724a8f0c4ba719903788200087","sha1":"ca186ee32aa4da8ca9a236f54e0f06c47d11d195","sha256":"3bf82300ac805ba06412e51703ab9592322642c3d23b68483e387553f3d95a98","sha512":"f8f8c782c6c21c3f7c9f79212ce14712084c3f024669020d6c1f1751cca7131f74a2c192d04d081e8e4002eced22ec2f50f3ac739b18c49f17694ebd1fac1e06","ssdeep":"96:2pGBc7Z17HbNfAIRNsBX5/B3OUTy5Kg2w/gmIsEmzbsNNTWo:2wBsfFAikX5/y5XtzbsNtWo","tlshash":"87b18d36920181bf414895039a0e5ca0f4646cfb1dbce58a8ea84edca4317cd37f8b8a","first_seen":"2023-09-18T10:45:34Z","last_seen":"2026-07-27T13:45:14.651727Z","times_seen":178,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.marvelshoes.com/h5/static/footer/hang0.png","fqdn":"www.marvelshoes.com","domain":"marvelshoes.com","tld":"com"},"ip":{"addr":"104.21.11.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.marvelshoes.com/m/","date":"2026-05-10T05:05:15.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marvelshoes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 09:25:09 GMT","end":"Sun, 21 Jun 2026 10:23:57 GMT"},"fingerprint":{"sha1":"32:6F:33:4D:87:39:F7:19:B1:CA:C7:A0:A5:48:64:41:A8:39:C8:00","sha256":"1C:E1:38:7F:82:0F:7B:45:88:52:E4:2E:C5:5D:6C:4E:16:20:65:B9:50:2E:05:A3:77:09:9A:A4:42:90:A5:57"}}},"request":{"raw":"GET /h5/static/footer/hang0.png HTTP/1.1\r\nHost: www.marvelshoes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.marvelshoes.com/m/\r\nCookie: angela_session=eyJpdiI6Ik9lK2d4a0JkRDNBZFNcL3VTZzRiRDJBPT0iLCJ2YWx1ZSI6IjFNd3RIUGRJVkZrN05CaStQUHNOdmVPWHY2WG10SElQZG5zNldIc3Q2Zm84bUZ2S0h2WDVjR2RQb0NRSHBqTHgiLCJtYWMiOiJiNDc3MTI2MWUyZGI3MzBlMzE0MzNhZGI1ZGViNDAyMmNmODBiNTdmOWY4NDJiN2E0NTViMDllNzU3ZTM3MmY5In0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 10 May 2026 05:05:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 1262\r\nlast-modified: Fri, 01 Oct 2021 12:26:36 GMT\r\npriority: u=4,i=?0\r\netag: \"6156fe7c-4ee\"\r\nexpires: Mon, 08 Jun 2026 04:47:07 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 87488\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Asz8dqKo4H%2F9XWhgjXaIbFTlQDEmorYhpx%2Fw0P2a0j2V%2FHGOUURlImsNfgAJBD3X1efD%2BjX1BxLNPwGRSHMljPr3YhT9hTz%2Bm2YrwF9SnfUIi5Hjlc6tZor%2Fh7b8OZnRGKBLmclb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f9668699f70b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1262,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 78 x 78, 8-bit colormap, non-interlaced","md5":"b6e782d3fe3da1129971fdb0e498e987","sha1":"2145a9e43718c33aa6ce4d63952204834767b109","sha256":"e8443bf002ae3228c8f5d295b3141d594c420d4a50b83af6e2768bcd8aef8b05","sha512":"1c4e47ecc997271a02ad2029be488d7d86fcb0f03f18daf799185c5e894199805ef9322a7fa153417360ce9342e752c532153bd108f4993a981df6b07be1c91a","ssdeep":"","tlshash":"2c21b7a19a717fe4e2c88c43a02c307ccf4ca169b1e176dd8240f28a312165a91dbf71","first_seen":"2023-08-09T23:12:25Z","last_seen":"2026-08-01T17:32:58.157991Z","times_seen":172,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.marvelshoes.com/h5/static/image/news.png","fqdn":"www.marvelshoes.com","domain":"marvelshoes.com","tld":"com"},"ip":{"addr":"104.21.11.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.marvelshoes.com/m/","date":"2026-05-10T05:05:16.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marvelshoes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 09:25:09 GMT","end":"Sun, 21 Jun 2026 10:23:57 GMT"},"fingerprint":{"sha1":"32:6F:33:4D:87:39:F7:19:B1:CA:C7:A0:A5:48:64:41:A8:39:C8:00","sha256":"1C:E1:38:7F:82:0F:7B:45:88:52:E4:2E:C5:5D:6C:4E:16:20:65:B9:50:2E:05:A3:77:09:9A:A4:42:90:A5:57"}}},"request":{"raw":"GET /h5/static/image/news.png HTTP/1.1\r\nHost: www.marvelshoes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.marvelshoes.com/m/\r\nCookie: angela_session=eyJpdiI6Ik9lK2d4a0JkRDNBZFNcL3VTZzRiRDJBPT0iLCJ2YWx1ZSI6IjFNd3RIUGRJVkZrN05CaStQUHNOdmVPWHY2WG10SElQZG5zNldIc3Q2Zm84bUZ2S0h2WDVjR2RQb0NRSHBqTHgiLCJtYWMiOiJiNDc3MTI2MWUyZGI3MzBlMzE0MzNhZGI1ZGViNDAyMmNmODBiNTdmOWY4NDJiN2E0NTViMDllNzU3ZTM3MmY5In0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 10 May 2026 05:05:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 4752\r\nlast-modified: Fri, 01 Oct 2021 12:26:36 GMT\r\npriority: u=4,i=?0\r\netag: \"6156fe7c-1290\"\r\nexpires: Mon, 08 Jun 2026 04:47:07 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 87488\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wFPnagzeMFzvi%2F8zUKcr8n8dDEM6T%2BsaNUdPuneeUU4cttta6IxyR0qmh5jOJPfPOhP1E4zL%2Bx1tTOUMCVNKX9SDclXvwjhPu4o4InBsI%2FqaKjcU0GEn3IjoyB9Q0XL%2BP3XxaVzI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f96686acf93b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4752,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced","md5":"c97d16a29867ca698f5a727c1df7f2c4","sha1":"6470daef60d50b052f28c4db9db92c639bb35a23","sha256":"61b497de3e125faa101394e7e78ff3167ce9545a8654499ba67107b17fa922c9","sha512":"629415eaf57f30812b07519105cff4bae6bcb4a539590929b16e2529962e5917a85ecf41790a7626418c7c5623f63b3107606fa3fb6e8aae5df4f40277ce85a7","ssdeep":"96:RuvFte9BTjTSXGuObds8iYvAtPr2H31QM8Bnuy0Bx36JF9ogwA1Td9Pw1v9:MtY9cViq8mtPiX1QMPyUxqJQeTdtQ","tlshash":"21a15d7f893caf1cb5c4416bec297d42686a109597f61b0890e1c856bb91af902cb1bb","first_seen":"2023-08-09T23:12:25Z","last_seen":"2026-07-15T09:10:18.187012Z","times_seen":160,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.marvelshoes.com//upload/162488904172575.jpg","fqdn":"www.marvelshoes.com","domain":"marvelshoes.com","tld":"com"},"ip":{"addr":"104.21.11.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.marvelshoes.com/m/","date":"2026-05-10T05:05:16.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marvelshoes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 09:25:09 GMT","end":"Sun, 21 Jun 2026 10:23:57 GMT"},"fingerprint":{"sha1":"32:6F:33:4D:87:39:F7:19:B1:CA:C7:A0:A5:48:64:41:A8:39:C8:00","sha256":"1C:E1:38:7F:82:0F:7B:45:88:52:E4:2E:C5:5D:6C:4E:16:20:65:B9:50:2E:05:A3:77:09:9A:A4:42:90:A5:57"}}},"request":{"raw":"GET //upload/162488904172575.jpg HTTP/1.1\r\nHost: www.marvelshoes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.marvelshoes.com/m/\r\nCookie: angela_session=eyJpdiI6IlJCUFdPa29mNHFaTmVhVkxxeGhCa2c9PSIsInZhbHVlIjoieTlGNW5YS1wvUmVLTHBYNnVkSVhFb3pmZGFXbVRoUzNYZGNFVDhmNWdVcVwvTDcrSHRRRk44MEpLdVlZR0p3b041IiwibWFjIjoiMDA5MmRiMTIwYTc3OTc4YmU0ZjZmYWRjNTAwODAxNDdmMzUzYzQyZjJlNzUzOGEyODViZjUxOGNlNmNmMGZlOCJ9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 10 May 2026 05:05:16 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 134015\r\nlast-modified: Mon, 28 Jun 2021 14:04:02 GMT\r\npriority: u=4,i=?0\r\netag: \"60d9d6d2-20b7f\"\r\nexpires: Mon, 08 Jun 2026 04:47:08 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 87488\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iP8kQuGmfGIXt0o%2FT7NYkap45A9Pgz%2B8PgHsLIJnfN9ho5qDx1j4XpMHLCFHvMVDL7YyxYpRVMDm16h0liMPNw5lgEiLXZGZk%2F1njKDeB5Pr7dsvjFBgG8aP5ngfqinqhpI04HCv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f96686edfe3b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":134015,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS5 Windows, datetime=2021:06:27 01:11:23], baseline, precision 8, 1720x640, components 3","md5":"92be04119b9d6c958abec8b48865bd54","sha1":"0b9c0578b09c970a29a5760e60ed399ab8343e76","sha256":"713ba809c168d8c3a974dab8a19b21dcf5964c50fc29cf5b08592887b5ea47d4","sha512":"43c34e988841a6677cf8a2b7f99970a7802ebef5bdf1562c1ca764c05c1eba22c3f75735e21c4bd9fe78c097d50c644bc119fd3b173a521d0d868efa0a04af15","ssdeep":"3072:0GbG4h2eQ0WDxCyOTDLwCNL8DqukiwKIWyqNCM1LVm4Xgl3F1R:eelWDA7/Dt8DiRe1bnXgl3F1R","tlshash":"b8d315369b7e5bc2e8c229774751deb1d2304f90276623e7fe7c230827adc55886426b","first_seen":"2023-08-07T05:38:51Z","last_seen":"2026-07-15T09:10:18.181283Z","times_seen":117,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.dcloud.net.cn/img/shadow-grey.png","fqdn":"cdn.dcloud.net.cn","domain":"dcloud.net.cn","tld":"net.cn"},"ip":{"addr":"124.221.80.91","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.marvelshoes.com/m/","date":"2026-05-10T05:05:18.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dcloud.net.cn","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 26 Aug 2025 11:47:17 GMT","end":"Fri, 25 Sep 2026 11:47:16 GMT"},"fingerprint":{"sha1":"47:A7:6C:09:6B:1D:CA:2D:7D:39:2E:C1:7F:15:DE:5D:F2:C4:0F:77","sha256":"EA:73:37:83:D0:38:44:D9:3C:0B:26:F0:DD:D1:22:2F:36:F7:F2:86:A1:B0:58:52:DE:4E:0A:21:D6:89:E7:3E"}}},"request":{"raw":"GET /img/shadow-grey.png HTTP/1.1\r\nHost: cdn.dcloud.net.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.marvelshoes.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 10 May 2026 05:05:19 GMT\r\ncontent-type: image/png\r\ncontent-length: 136\r\nlast-modified: Thu, 06 Jun 2019 06:42:07 GMT\r\netag: \"5cf8b5bf-88\"\r\nexpires: Sun, 10 May 2026 15:05:19 GMT\r\ncache-control: max-age=36000\r\nset-cookie: __uni__uid=rBEQVWoAEg9k/wWcAxTMAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dcloud.net.cn; path=/; secure; httponly; samesite=none\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":136,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 6, 4-bit colormap, non-interlaced","md5":"5a962adf74d92ae702467b3f47976547","sha1":"36f74049375584e3fa69b5ef87e9572336ff9e7a","sha256":"ad4ebea1c3496dd2924789ee009174a2c6289d1200e9811f458fd46f172d1d6f","sha512":"4ace23fe7ec6c7271710030fd423aace13eafac68ac3e76366ce4ce9bdc702caf71c9bdc2fb6a32c8e9791546098617cc0259decd8bb8489afdbce43e1b53a73","ssdeep":"","tlshash":"47c09bf3a615dc754a0d153b42e98271f429511e07046d0e5a13c216741e3448d56793","first_seen":"2023-04-15T10:50:30Z","last_seen":"2026-08-09T03:22:31.867288Z","times_seen":20170,"resource_available":false,"data":null}},"time_used":2056,"timings":{"blocked":620,"dns":1,"connect":265,"send":0,"wait":816,"receive":0,"ssl":350},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.marvelshoes.com/h5/static/footer/trade0.png","fqdn":"www.marvelshoes.com","domain":"marvelshoes.com","tld":"com"},"ip":{"addr":"104.21.11.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.marvelshoes.com/m/","date":"2026-05-10T05:05:15.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marvelshoes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 09:25:09 GMT","end":"Sun, 21 Jun 2026 10:23:57 GMT"},"fingerprint":{"sha1":"32:6F:33:4D:87:39:F7:19:B1:CA:C7:A0:A5:48:64:41:A8:39:C8:00","sha256":"1C:E1:38:7F:82:0F:7B:45:88:52:E4:2E:C5:5D:6C:4E:16:20:65:B9:50:2E:05:A3:77:09:9A:A4:42:90:A5:57"}}},"request":{"raw":"GET /h5/static/footer/trade0.png HTTP/1.1\r\nHost: www.marvelshoes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.marvelshoes.com/m/\r\nCookie: angela_session=eyJpdiI6Ik9lK2d4a0JkRDNBZFNcL3VTZzRiRDJBPT0iLCJ2YWx1ZSI6IjFNd3RIUGRJVkZrN05CaStQUHNOdmVPWHY2WG10SElQZG5zNldIc3Q2Zm84bUZ2S0h2WDVjR2RQb0NRSHBqTHgiLCJtYWMiOiJiNDc3MTI2MWUyZGI3MzBlMzE0MzNhZGI1ZGViNDAyMmNmODBiNTdmOWY4NDJiN2E0NTViMDllNzU3ZTM3MmY5In0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 10 May 2026 05:05:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 1712\r\nlast-modified: Fri, 01 Oct 2021 12:26:36 GMT\r\npriority: u=4,i=?0\r\netag: \"6156fe7c-6b0\"\r\nexpires: Mon, 08 Jun 2026 04:47:07 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 87488\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AVsOIkv41WLtR2xuAV4ERwsVHSzipkb5AszPwngNg0eDgCdr5pKJ9lIvVrZpdcPGuo4lU7OmgdHAJX8Vncb%2FvGzBaLWHXPp7414aD7Q8SdDxu95oyBVlN8hmluB5gAGe%2BfKLlfg%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f966869af72b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1712,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 78 x 78, 8-bit colormap, non-interlaced","md5":"265606b2f0d15d309ceb561a0d120f4c","sha1":"58ba90a24ffd5beeccc3257bb1b874ea065c7e07","sha256":"c03f74504e4118235d434f4f8076e47b47addc0eb930539cadb0ab6e6b286fc2","sha512":"2307f9a7bf7ac2c9a823d17b09f612158b96b501d2dc7ef4e66d01715bdb94ed19f18976b23885bc9e3f096feff3a06f18eabe9b75f722fbc66b8f57e3a07217","ssdeep":"","tlshash":"fd31d6418fb38cd576a4df4b000d307aee5e584361ab15ddd674fb506a2160c0af7c70","first_seen":"2023-08-09T23:12:25Z","last_seen":"2026-08-01T17:32:58.185215Z","times_seen":176,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.marvelshoes.com/h5/static/footer/mine0.png","fqdn":"www.marvelshoes.com","domain":"marvelshoes.com","tld":"com"},"ip":{"addr":"104.21.11.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.marvelshoes.com/m/","date":"2026-05-10T05:05:15.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marvelshoes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 09:25:09 GMT","end":"Sun, 21 Jun 2026 10:23:57 GMT"},"fingerprint":{"sha1":"32:6F:33:4D:87:39:F7:19:B1:CA:C7:A0:A5:48:64:41:A8:39:C8:00","sha256":"1C:E1:38:7F:82:0F:7B:45:88:52:E4:2E:C5:5D:6C:4E:16:20:65:B9:50:2E:05:A3:77:09:9A:A4:42:90:A5:57"}}},"request":{"raw":"GET /h5/static/footer/mine0.png HTTP/1.1\r\nHost: www.marvelshoes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.marvelshoes.com/m/\r\nCookie: angela_session=eyJpdiI6Ik9lK2d4a0JkRDNBZFNcL3VTZzRiRDJBPT0iLCJ2YWx1ZSI6IjFNd3RIUGRJVkZrN05CaStQUHNOdmVPWHY2WG10SElQZG5zNldIc3Q2Zm84bUZ2S0h2WDVjR2RQb0NRSHBqTHgiLCJtYWMiOiJiNDc3MTI2MWUyZGI3MzBlMzE0MzNhZGI1ZGViNDAyMmNmODBiNTdmOWY4NDJiN2E0NTViMDllNzU3ZTM3MmY5In0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 10 May 2026 05:05:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 488\r\nlast-modified: Fri, 01 Oct 2021 12:26:36 GMT\r\npriority: u=4,i=?0\r\netag: \"6156fe7c-1e8\"\r\nexpires: Mon, 08 Jun 2026 04:47:07 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 87488\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8NwFQKWcI60cPykmaRAxdzVuj12Zm%2FGcBfq%2B7rlROM4JpHOcLR84akZIEFI8LP13sFoTNMwaqSOCbvoTGAWP0mw%2BNPHzSqdufNAHat7tF0qA04fLtA%2F68EBqWpAzmNSJpdA6yuj7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f966869bf74b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":488,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 78 x 78, 8-bit colormap, non-interlaced","md5":"32aedebb56d1ace381a815e659f3c007","sha1":"40473cae63b693219888e217ff66efbfc4652654","sha256":"45a8e7f70a1847b3528cde3e9c90c7aee8209157dfa26441121eb655e5a52656","sha512":"a705c9e963150eca8025a057bfb5cf19e5a553c0edfd310d4190d0925906894f13c21fb8bda16772babe6d9a24a5b83cdcf119a6efc4db06dcae4d125b58400f","ssdeep":"","tlshash":"9af054c387562f10d7b0463326647a7e0fa4903cf4833ce050f6b785ba1416a03f3624","first_seen":"2023-08-09T23:12:25Z","last_seen":"2026-08-01T17:32:58.147155Z","times_seen":183,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.marvelshoes.com/api/news/list","fqdn":"www.marvelshoes.com","domain":"marvelshoes.com","tld":"com"},"ip":{"addr":"104.21.11.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.marvelshoes.com/m/","date":"2026-05-10T05:05:15.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marvelshoes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 09:25:09 GMT","end":"Sun, 21 Jun 2026 10:23:57 GMT"},"fingerprint":{"sha1":"32:6F:33:4D:87:39:F7:19:B1:CA:C7:A0:A5:48:64:41:A8:39:C8:00","sha256":"1C:E1:38:7F:82:0F:7B:45:88:52:E4:2E:C5:5D:6C:4E:16:20:65:B9:50:2E:05:A3:77:09:9A:A4:42:90:A5:57"}}},"request":{"raw":"POST /api/news/list HTTP/1.1\r\nHost: www.marvelshoes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/x-www-form-urlencoded\r\nContent-Length: 6\r\nOrigin: https://www.marvelshoes.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.marvelshoes.com/m/\r\nCookie: angela_session=eyJpdiI6Ik9lK2d4a0JkRDNBZFNcL3VTZzRiRDJBPT0iLCJ2YWx1ZSI6IjFNd3RIUGRJVkZrN05CaStQUHNOdmVPWHY2WG10SElQZG5zNldIc3Q2Zm84bUZ2S0h2WDVjR2RQb0NRSHBqTHgiLCJtYWMiOiJiNDc3MTI2MWUyZGI3MzBlMzE0MzNhZGI1ZGViNDAyMmNmODBiNTdmOWY4NDJiN2E0NTViMDllNzU3ZTM3MmY5In0%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":6,"data":"c_id=4"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XnUqhpIIrwQ%2BjJjiHxXmUndbHE6400g0lDUQy7d00qWby%2BCLqnzR77qH2s5egEkvPk%2B1AH2oV3tX6jOK1WcQPmZyl%2BUjgpC4dhFFdA5dECtthxiTfy1OGy997kCmuUFD%2BkvAhqrU\"}]}\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST,GET,OPTIONS,DELETE\r\naccess-control-allow-headers: x-requested-with,content-type,Authorization\r\ncache-control: no-cache, private\r\ndate: Sun, 10 May 2026 05:05:16 GMT\r\nset-cookie: angela_session=eyJpdiI6IjBtZW9SYmtjN3ZPTTJUZWtObnBsckE9PSIsInZhbHVlIjoiZVAxOXF2cDRYNUtMeGxVdVNPYmx1WGczUXVyZHNQQWJ1dk5ZQXlJUWJHM2xEc2FpOXlMZG41elE0NTdOdHpFSiIsIm1hYyI6ImRkZjgzOTc3MjEzNGJmZGE0NmU4NjY0ZWUzZGEyMmRkM2RjZmU1MzQ1OWZmN2JhNjYyMWU5OWFiNWNjNDI1Y2QifQ%3D%3D; expires=Tue, 09-Jun-2026 05:05:16 GMT; Max-Age=2592000; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f96686a0f7bb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":264,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7afc1247b2b8276fb124cb943e47c400","sha1":"f1989d90e6db60919223c7b467ba125a79174f45","sha256":"02b71b3835c52b6f8217e36ab6a9861d20e2e3c7e9dc5cb2a05d4c3d827b277a","sha512":"c43fcdf86fe46b53a6ae19a05cedcda6a9e7f752f9bf5d76d23100eb4ef9ad6e0e09377695fa06c3b8125190937360113bb0d63c52ab7acbdb95c47945279187","ssdeep":"","tlshash":"e4d05eba26955cfb9ad512c638caba14eccf1052ca02ab5a0dc89c6ed3182d4001a237","first_seen":"2023-09-18T10:45:34Z","last_seen":"2026-07-15T09:10:18.167478Z","times_seen":114,"resource_available":false,"data":null}},"time_used":716,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":716,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.marvelshoes.com/h5/static/image/en.png","fqdn":"www.marvelshoes.com","domain":"marvelshoes.com","tld":"com"},"ip":{"addr":"104.21.11.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.marvelshoes.com/m/","date":"2026-05-10T05:05:15.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marvelshoes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 09:25:09 GMT","end":"Sun, 21 Jun 2026 10:23:57 GMT"},"fingerprint":{"sha1":"32:6F:33:4D:87:39:F7:19:B1:CA:C7:A0:A5:48:64:41:A8:39:C8:00","sha256":"1C:E1:38:7F:82:0F:7B:45:88:52:E4:2E:C5:5D:6C:4E:16:20:65:B9:50:2E:05:A3:77:09:9A:A4:42:90:A5:57"}}},"request":{"raw":"GET /h5/static/image/en.png HTTP/1.1\r\nHost: www.marvelshoes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.marvelshoes.com/m/\r\nCookie: angela_session=eyJpdiI6Ik9lK2d4a0JkRDNBZFNcL3VTZzRiRDJBPT0iLCJ2YWx1ZSI6IjFNd3RIUGRJVkZrN05CaStQUHNOdmVPWHY2WG10SElQZG5zNldIc3Q2Zm84bUZ2S0h2WDVjR2RQb0NRSHBqTHgiLCJtYWMiOiJiNDc3MTI2MWUyZGI3MzBlMzE0MzNhZGI1ZGViNDAyMmNmODBiNTdmOWY4NDJiN2E0NTViMDllNzU3ZTM3MmY5In0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 10 May 2026 05:05:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 1856\r\nlast-modified: Fri, 01 Oct 2021 12:26:36 GMT\r\npriority: u=4,i=?0\r\netag: \"6156fe7c-740\"\r\nexpires: Mon, 08 Jun 2026 04:47:07 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 87487\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TAaADzWVgS6Sg18MwTD1hF7v3vbeLgMDQehJuqu87WrO2nHcJ79ZA2pJXvLMLrI1ufQS15RWnyca9GL1DuaXC%2BectbZ1FntFbpOz8zhWKtFmBoblW71GCB31uqovNxvEexRNgOvG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f96686a7f85b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1856,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 49 x 32, 8-bit/color RGBA, non-interlaced","md5":"19e8aa640b1d129c94e299dfd580f210","sha1":"ccfa030c16120a11d224fa1ba72afd55f0776523","sha256":"7385aee2de7d89a525b33e6ff1e8c1246de9234fcc7346f5877ee7d3301f8ca1","sha512":"6ca9e3f44d4ce8a0f7734c8f814138fe54c3224f08905a6e0634f36f1c4de6ecef43281df8a7b29f473300a1096565b148ced5e51fb23b050457c63714af11c3","ssdeep":"","tlshash":"e4311bb469a26052fa5e2ad4be1045df4ef89c0605d89251e60645e13c9eef19f0c437","first_seen":"2023-05-06T18:37:16Z","last_seen":"2026-08-07T11:15:24.567541Z","times_seen":456,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.marvelshoes.com/h5/static/footer/gang1.png","fqdn":"www.marvelshoes.com","domain":"marvelshoes.com","tld":"com"},"ip":{"addr":"104.21.11.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.marvelshoes.com/m/","date":"2026-05-10T05:05:16.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marvelshoes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 09:25:09 GMT","end":"Sun, 21 Jun 2026 10:23:57 GMT"},"fingerprint":{"sha1":"32:6F:33:4D:87:39:F7:19:B1:CA:C7:A0:A5:48:64:41:A8:39:C8:00","sha256":"1C:E1:38:7F:82:0F:7B:45:88:52:E4:2E:C5:5D:6C:4E:16:20:65:B9:50:2E:05:A3:77:09:9A:A4:42:90:A5:57"}}},"request":{"raw":"GET /h5/static/footer/gang1.png HTTP/1.1\r\nHost: www.marvelshoes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.marvelshoes.com/m/\r\nCookie: angela_session=eyJpdiI6Ik9lK2d4a0JkRDNBZFNcL3VTZzRiRDJBPT0iLCJ2YWx1ZSI6IjFNd3RIUGRJVkZrN05CaStQUHNOdmVPWHY2WG10SElQZG5zNldIc3Q2Zm84bUZ2S0h2WDVjR2RQb0NRSHBqTHgiLCJtYWMiOiJiNDc3MTI2MWUyZGI3MzBlMzE0MzNhZGI1ZGViNDAyMmNmODBiNTdmOWY4NDJiN2E0NTViMDllNzU3ZTM3MmY5In0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 10 May 2026 05:05:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 1418\r\nlast-modified: Fri, 01 Oct 2021 12:26:36 GMT\r\npriority: u=4,i=?0\r\netag: \"6156fe7c-58a\"\r\nexpires: Mon, 08 Jun 2026 04:47:07 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 87487\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nPeGWcEP3oVMh0c0cotInGjcNP0LuVQ8XfnnNd5Oi5i%2BX6kj%2FTSk%2FGD0KhqEPRLsy1aX4y3kIIhNZgI2CGmxLDAdTTDVBlgAmmm4og8YHmaDCtJxX6%2FD1T8j4Xy677U7N0KaVKSe\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f96686acf94b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1418,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 78 x 78, 8-bit/color RGBA, non-interlaced","md5":"383d7dda8fc6e7f3e92114d5f00f2184","sha1":"072c1ef4b4bf51f6200ef91b1921e40d86e12158","sha256":"8e485382fdd4377d5b4f7a6afcfbcc62f2b76e877e32c4f51c238891fcc78e54","sha512":"447aaae2126c0b1de9c76264736b071010f173a7ea2a46b68466885219f6ef5deca953a9a95242fb7e4a8be4b981ab95e1c30ebc435b196a7163773c2c8f0450","ssdeep":"","tlshash":"a821d80ad5805b419922d1612cf25037ab338da195e0a01dbec5dc9f1c3d1f8c6447f3","first_seen":"2023-09-10T17:47:20Z","last_seen":"2026-07-15T09:10:18.141437Z","times_seen":150,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.marvelshoes.com/api/currency/quotation_new","fqdn":"www.marvelshoes.com","domain":"marvelshoes.com","tld":"com"},"ip":{"addr":"104.21.11.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.marvelshoes.com/m/","date":"2026-05-10T05:05:30.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marvelshoes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 09:25:09 GMT","end":"Sun, 21 Jun 2026 10:23:57 GMT"},"fingerprint":{"sha1":"32:6F:33:4D:87:39:F7:19:B1:CA:C7:A0:A5:48:64:41:A8:39:C8:00","sha256":"1C:E1:38:7F:82:0F:7B:45:88:52:E4:2E:C5:5D:6C:4E:16:20:65:B9:50:2E:05:A3:77:09:9A:A4:42:90:A5:57"}}},"request":{"raw":"GET /api/currency/quotation_new HTTP/1.1\r\nHost: www.marvelshoes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/x-www-form-urlencoded\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.marvelshoes.com/m/\r\nCookie: angela_session=eyJpdiI6IkdCMVRDZG9oem5mREUzYmdweUttOVE9PSIsInZhbHVlIjoiMUorMTY2cSs0ZUtiQXVaNnhwRG9sQ1RYN0cyUlRwcW05WHRDVVRTOGRNd2R2Q1hDTXoxQlV2ZlZPbDYxODhkYyIsIm1hYyI6IjI1NGVhZTg4Yzc3YWUyYTMzODY5M2ExZDE1MGE1YmNiNDNhODA5NjM1YWEzYjMxNDhlMjFiMzA5YzdjMWQzYjMifQ%3D%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m9v3nBVqU8yDCCyhLia%2BmmxdPLWo2d3UgRCcH53hf7KWt6lnM2LeDzq6%2FcfrOgFLnEKvnXQn7jRNLxD%2BuSV%2FryLLFgDPyUMu%2BfbxkL9GHRidMQYwGAk6hVc8exd7ISzbPTrn%2Fbte\"}]}\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST,GET,OPTIONS,DELETE\r\naccess-control-allow-headers: x-requested-with,content-type,Authorization\r\ncache-control: no-cache, private\r\ndate: Sun, 10 May 2026 05:05:31 GMT\r\nset-cookie: angela_session=eyJpdiI6ImFBZlwvMERLT2dFa2tWRDRneCtERjR3PT0iLCJ2YWx1ZSI6IjJSVzRKbHVxbnhjYUQ2WlJEdFNMV0ZBbnhPZ2VRT1ZabmhzazhJSFdLNUZzVUVHekFrcFpcL2hxdUt2NnJWQitEIiwibWFjIjoiNjNkMDc3ZTAzODExZGQ3NmZkYWNkYjAxMjFhM2VlMzUwMWFmOTVmYzIzYmQxMmVkZmVmNzBkNjAwMDBmNDRiZCJ9; expires=Tue, 09-Jun-2026 05:05:31 GMT; Max-Age=2592000; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f9668c7ccb5b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15411,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"456f5f22cf55ab2dc744b181fba7c8ee","sha1":"cddcab42cf17a8c4aa03a2a3f2783894e1a18b1f","sha256":"0a623f159df3cbdb6179a87cf06f234a4d13710e3d2deb52d1859a974cd06b1e","sha512":"1e3d5125b830e0a279a803ce3d0bdf698560de44f517334e2046a070e906aa8ce6d8ad35035765abb87d0dfc1daff9b032224a5819702d2aecf117cd068968fd","ssdeep":"192:1WzAmBnX/AUZalbAmcdT9AV+yIA3cY1nAVrIoAyT7VoA9+fj+A5Zgf6A5GLHy6AI:API+CHNaMy4HynUsPlhghOSVlj","tlshash":"2962be8d722c8a78c6f6aec2eede31ad7554700badc24f42d3dd5f8c439552ae10b612","first_seen":"2026-05-10T05:05:41.572247Z","last_seen":"2026-05-10T05:05:42.020179Z","times_seen":2,"resource_available":false,"data":null}},"time_used":780,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":477,"receive":303,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.marvelshoes.com/h5/static/image/banner.png","fqdn":"www.marvelshoes.com","domain":"marvelshoes.com","tld":"com"},"ip":{"addr":"104.21.11.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.marvelshoes.com/m/","date":"2026-05-10T05:05:16.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marvelshoes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 09:25:09 GMT","end":"Sun, 21 Jun 2026 10:23:57 GMT"},"fingerprint":{"sha1":"32:6F:33:4D:87:39:F7:19:B1:CA:C7:A0:A5:48:64:41:A8:39:C8:00","sha256":"1C:E1:38:7F:82:0F:7B:45:88:52:E4:2E:C5:5D:6C:4E:16:20:65:B9:50:2E:05:A3:77:09:9A:A4:42:90:A5:57"}}},"request":{"raw":"GET /h5/static/image/banner.png HTTP/1.1\r\nHost: www.marvelshoes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.marvelshoes.com/m/\r\nCookie: angela_session=eyJpdiI6Ik9lK2d4a0JkRDNBZFNcL3VTZzRiRDJBPT0iLCJ2YWx1ZSI6IjFNd3RIUGRJVkZrN05CaStQUHNOdmVPWHY2WG10SElQZG5zNldIc3Q2Zm84bUZ2S0h2WDVjR2RQb0NRSHBqTHgiLCJtYWMiOiJiNDc3MTI2MWUyZGI3MzBlMzE0MzNhZGI1ZGViNDAyMmNmODBiNTdmOWY4NDJiN2E0NTViMDllNzU3ZTM3MmY5In0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 10 May 2026 05:05:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 49950\r\nlast-modified: Fri, 01 Oct 2021 12:26:36 GMT\r\npriority: u=4,i=?0\r\netag: \"6156fe7c-c31e\"\r\nexpires: Mon, 08 Jun 2026 04:47:07 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 87487\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BHF6zpM6QgM3finkXkdqjyXk2t3kmSTTTi8XO%2F1ag4K1%2BjnXp9lxridZ8RKOnq29UZvQUdOaOK4jkUBztiEDiZyc6oyZU6OnpUQq0kVQIdxdI9vh5qveCyzKZl47UcZm3uCJaKbN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f96686adf95b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49950,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 690 x 148, 8-bit/color RGBA, non-interlaced","md5":"4f8a29da26b9b37a6e821882dfbf1308","sha1":"3d9c8d7a04f96992bd9cfff0f94767015f2eb4b6","sha256":"333be06a57101a51f7a443844883a03b51d76eb817f594c13855a153fbde6a74","sha512":"425fb0f4af76e96a0cd4f77c146bea9ab88a2f82d48812673348d754212af46985bc9c50203c99aca0724df566fa0d28a09448cd709a15b5acd27c0096b47043","ssdeep":"768:mHhr3dJKu5vSLZpzlf+Vxs3sGWJ4K1BYDowgwyfcDzKh8c1XcrLLciENnXm:gdJTQJf+g3Y7Yt4fcKhF1XIB4m","tlshash":"952302f1bec5e346f56a9c5351c5e3b211d0bb8909a0c6c30776c68a1f5797a920ca8e","first_seen":"2023-08-07T05:38:51Z","last_seen":"2026-07-15T09:10:18.168886Z","times_seen":143,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.marvelshoes.com/upload/1768463551578071.jpg","fqdn":"www.marvelshoes.com","domain":"marvelshoes.com","tld":"com"},"ip":{"addr":"104.21.11.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.marvelshoes.com/m/","date":"2026-05-10T05:05:16.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marvelshoes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 09:25:09 GMT","end":"Sun, 21 Jun 2026 10:23:57 GMT"},"fingerprint":{"sha1":"32:6F:33:4D:87:39:F7:19:B1:CA:C7:A0:A5:48:64:41:A8:39:C8:00","sha256":"1C:E1:38:7F:82:0F:7B:45:88:52:E4:2E:C5:5D:6C:4E:16:20:65:B9:50:2E:05:A3:77:09:9A:A4:42:90:A5:57"}}},"request":{"raw":"GET /upload/1768463551578071.jpg HTTP/1.1\r\nHost: www.marvelshoes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.marvelshoes.com/m/\r\nCookie: angela_session=eyJpdiI6IlJCUFdPa29mNHFaTmVhVkxxeGhCa2c9PSIsInZhbHVlIjoieTlGNW5YS1wvUmVLTHBYNnVkSVhFb3pmZGFXbVRoUzNYZGNFVDhmNWdVcVwvTDcrSHRRRk44MEpLdVlZR0p3b041IiwibWFjIjoiMDA5MmRiMTIwYTc3OTc4YmU0ZjZmYWRjNTAwODAxNDdmMzUzYzQyZjJlNzUzOGEyODViZjUxOGNlNmNmMGZlOCJ9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 10 May 2026 05:05:16 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 56978\r\nlast-modified: Thu, 15 Jan 2026 07:52:31 GMT\r\npriority: u=4,i=?0\r\netag: \"69689cbf-de92\"\r\nexpires: Mon, 08 Jun 2026 04:47:08 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 87488\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LT14FCgcGCN9X3d%2Buco48wdQFpF3BKQgHQ83JQnkGA5rmNLbJlKj5HJFX4cPpc%2BrbIDuxNQU6VUTgdVSwn14GC%2BEAWhOoHIiaQQkLejN55EsREQFukRQV4BHDYsqp%2BIU1UGmhz5p\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f96686edfe4b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56978,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1280x510, components 3","md5":"ed5e991404633b0cd7fc92cd5472cec6","sha1":"75c9d62b77e5db28374b81345c8d89e843468fd8","sha256":"29e279164fd3ecfaa6deae8ee712df45ad7db60ede1aaa4991cd939e4fa5621b","sha512":"7db10e9b480988cdb2e8dc285c63c3bf2ca159f496dd8fa964927a5a21ce2569926ca76c9aad7aad257201b22d3b3275c8547b81410b58f8690cfb912bb159a8","ssdeep":"1536:dJxVY65yu+0F0neCCNE480s8wWOzYPmwDUKEEeL:dJxVY65yw6euywWOSLEEeL","tlshash":"6143f197e4f046b3c38c9325969de066b8ba7c8d371851943ceb3d9a376ef82b9405d0","first_seen":"2026-02-25T18:26:56.646046Z","last_seen":"2026-07-15T09:10:18.187911Z","times_seen":22,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.marvelshoes.com/h5/static/image/kor.jpg","fqdn":"www.marvelshoes.com","domain":"marvelshoes.com","tld":"com"},"ip":{"addr":"104.21.11.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.marvelshoes.com/m/","date":"2026-05-10T05:05:15.940Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marvelshoes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 09:25:09 GMT","end":"Sun, 21 Jun 2026 10:23:57 GMT"},"fingerprint":{"sha1":"32:6F:33:4D:87:39:F7:19:B1:CA:C7:A0:A5:48:64:41:A8:39:C8:00","sha256":"1C:E1:38:7F:82:0F:7B:45:88:52:E4:2E:C5:5D:6C:4E:16:20:65:B9:50:2E:05:A3:77:09:9A:A4:42:90:A5:57"}}},"request":{"raw":"GET /h5/static/image/kor.jpg HTTP/1.1\r\nHost: www.marvelshoes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.marvelshoes.com/m/\r\nCookie: angela_session=eyJpdiI6Ik9lK2d4a0JkRDNBZFNcL3VTZzRiRDJBPT0iLCJ2YWx1ZSI6IjFNd3RIUGRJVkZrN05CaStQUHNOdmVPWHY2WG10SElQZG5zNldIc3Q2Zm84bUZ2S0h2WDVjR2RQb0NRSHBqTHgiLCJtYWMiOiJiNDc3MTI2MWUyZGI3MzBlMzE0MzNhZGI1ZGViNDAyMmNmODBiNTdmOWY4NDJiN2E0NTViMDllNzU3ZTM3MmY5In0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 10 May 2026 05:05:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 4035\r\nlast-modified: Fri, 01 Oct 2021 12:26:36 GMT\r\npriority: u=4,i=?0\r\netag: \"6156fe7c-fc3\"\r\nexpires: Mon, 08 Jun 2026 04:47:07 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 87488\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MSQxnUA2CGs6C2Zvr3OWtwz4wvypKcL1HMQ%2BSdcfoGEdQQCHSuqgjOpVhhaqDzVNrJw1g81XvSAKcvWGLOyFwqbrTwb1GB5IiGVkHZq9jvO%2F7%2FzOZowlJM9ecYq%2FMj%2FqnacxAthQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f96686a9f87b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4035,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 200x133, components 3","md5":"08db97ed0363573d61eaa015088a2559","sha1":"ef309a9c508819cad0ff80619210513f9671c441","sha256":"386bb37ce7c7097716e95618a789d011a08ff3dbc519d34a5642c5dd0c398eca","sha512":"8ac9d23f79a5c7aaa8e52a84c68f63857fb4bd93860c42d0b12364f19f169e83292bb765f22af092242b29ec61901f56e01daba863acc433998d58e9b3798685","ssdeep":"","tlshash":"f9815d937a97ce83ff28da7540a3106027da405262d787755aaeb47fb1acfb59812420","first_seen":"2023-05-07T20:12:38Z","last_seen":"2026-07-27T13:45:14.651002Z","times_seen":233,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.marvelshoes.com/h5/static/image/sucerty.png","fqdn":"www.marvelshoes.com","domain":"marvelshoes.com","tld":"com"},"ip":{"addr":"104.21.11.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.marvelshoes.com/m/","date":"2026-05-10T05:05:16.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marvelshoes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 09:25:09 GMT","end":"Sun, 21 Jun 2026 10:23:57 GMT"},"fingerprint":{"sha1":"32:6F:33:4D:87:39:F7:19:B1:CA:C7:A0:A5:48:64:41:A8:39:C8:00","sha256":"1C:E1:38:7F:82:0F:7B:45:88:52:E4:2E:C5:5D:6C:4E:16:20:65:B9:50:2E:05:A3:77:09:9A:A4:42:90:A5:57"}}},"request":{"raw":"GET /h5/static/image/sucerty.png HTTP/1.1\r\nHost: www.marvelshoes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.marvelshoes.com/m/\r\nCookie: angela_session=eyJpdiI6Ik9lK2d4a0JkRDNBZFNcL3VTZzRiRDJBPT0iLCJ2YWx1ZSI6IjFNd3RIUGRJVkZrN05CaStQUHNOdmVPWHY2WG10SElQZG5zNldIc3Q2Zm84bUZ2S0h2WDVjR2RQb0NRSHBqTHgiLCJtYWMiOiJiNDc3MTI2MWUyZGI3MzBlMzE0MzNhZGI1ZGViNDAyMmNmODBiNTdmOWY4NDJiN2E0NTViMDllNzU3ZTM3MmY5In0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 10 May 2026 05:05:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 1567\r\nlast-modified: Fri, 01 Oct 2021 12:26:36 GMT\r\npriority: u=4,i=?0\r\netag: \"6156fe7c-61f\"\r\nexpires: Mon, 08 Jun 2026 04:47:07 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 87488\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mK3ngGv3IH2JkjOndvMnJhI2fhKtauh1yAq10ypz3WDxidI1V6LQxT1pbLcVYf3cgex7HGEyCR2LJrfvoV%2F8NBJSWg4O84Q5%2BkkmHPSh7FANc84M2oF4aex0yDjprryvvdng4CGz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f96686aff98b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1567,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 46 x 52, 8-bit/color RGBA, non-interlaced","md5":"ebf697517ba45578234659402ddc5166","sha1":"32f16a23620699ae20c779ea5bb7989def4fbb54","sha256":"ef6a9bd4eb66bd449654bf7f57dc3b3eb523a9e3f0fb2e93f7188940c9efc268","sha512":"a164343d8fc40e413a7e59629fb19733e9ec6c9c5a13ce3d12eddd69c7046f286d81824eb90bd9893df10a0ba9e36c81db653836220a50436e3b085f52e5854b","ssdeep":"","tlshash":"b431930dea80ad81564ce0c028f6d0328b3b56801da4f857bdcbf8151cba0baca1d9da","first_seen":"2023-08-09T23:12:25Z","last_seen":"2026-08-01T17:32:58.189647Z","times_seen":222,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.marvelshoes.com//upload/1624889156650410.png","fqdn":"www.marvelshoes.com","domain":"marvelshoes.com","tld":"com"},"ip":{"addr":"104.21.11.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.marvelshoes.com/m/","date":"2026-05-10T05:05:16.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marvelshoes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 09:25:09 GMT","end":"Sun, 21 Jun 2026 10:23:57 GMT"},"fingerprint":{"sha1":"32:6F:33:4D:87:39:F7:19:B1:CA:C7:A0:A5:48:64:41:A8:39:C8:00","sha256":"1C:E1:38:7F:82:0F:7B:45:88:52:E4:2E:C5:5D:6C:4E:16:20:65:B9:50:2E:05:A3:77:09:9A:A4:42:90:A5:57"}}},"request":{"raw":"GET //upload/1624889156650410.png HTTP/1.1\r\nHost: www.marvelshoes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.marvelshoes.com/m/\r\nCookie: angela_session=eyJpdiI6IlJCUFdPa29mNHFaTmVhVkxxeGhCa2c9PSIsInZhbHVlIjoieTlGNW5YS1wvUmVLTHBYNnVkSVhFb3pmZGFXbVRoUzNYZGNFVDhmNWdVcVwvTDcrSHRRRk44MEpLdVlZR0p3b041IiwibWFjIjoiMDA5MmRiMTIwYTc3OTc4YmU0ZjZmYWRjNTAwODAxNDdmMzUzYzQyZjJlNzUzOGEyODViZjUxOGNlNmNmMGZlOCJ9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 10 May 2026 05:05:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 997639\r\nlast-modified: Mon, 28 Jun 2021 14:05:56 GMT\r\npriority: u=4,i=?0\r\netag: \"60d9d744-f3907\"\r\nexpires: Mon, 08 Jun 2026 04:47:08 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 87488\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PyxqLnZOa%2FRVKX59xffOE7iciwwAH%2FK%2ByVFcknqxQBo0CXukTCFV3gujH1jkZ%2FmNSSUGLSpOkiPqdF9HiNcuCTvaijfZIPMnciwiBUumiQw99j5wMwUf9hV%2BpbVas6Ycz1nbR2SO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f96686ecfe2b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":997639,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 600, 8-bit/color RGBA, non-interlaced","md5":"28afe8043f22bfc40d5422e0337789e6","sha1":"8d5d6ddc7972b4330563bd8c22ea94ff86ce2d30","sha256":"190349f65626a29791eefc52322f7ea79df6d313cd1577d471505437eebb710f","sha512":"cc8f7b03c6c22e0d095972decf5bdae51dee8fb47417b4728f164281b8fb79f8f08c918a3d49a9146ae9f9188f1996b9da0d4ecf6ba08f9fb63767937ac5767e","ssdeep":"12288:gE9sxXzumOsEcIDJTnMJ3W9vkxrXgU4E5xo8hs9M/e7Sk0ecEf55xCIzkV5HsRh7:X6/EztmEvGrXdbhlkfRjrala1N59x","tlshash":"162533f245824ac967e52757b2b3d6f1b786ed80a4b09134a761b0d33c5babc5dc0c63","first_seen":"2023-08-07T05:38:51Z","last_seen":"2026-07-15T09:10:18.184405Z","times_seen":117,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":88,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.marvelshoes.com/api/currency/quotation_new","fqdn":"www.marvelshoes.com","domain":"marvelshoes.com","tld":"com"},"ip":{"addr":"104.21.11.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.marvelshoes.com/m/","date":"2026-05-10T05:05:21.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marvelshoes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 09:25:09 GMT","end":"Sun, 21 Jun 2026 10:23:57 GMT"},"fingerprint":{"sha1":"32:6F:33:4D:87:39:F7:19:B1:CA:C7:A0:A5:48:64:41:A8:39:C8:00","sha256":"1C:E1:38:7F:82:0F:7B:45:88:52:E4:2E:C5:5D:6C:4E:16:20:65:B9:50:2E:05:A3:77:09:9A:A4:42:90:A5:57"}}},"request":{"raw":"GET /api/currency/quotation_new HTTP/1.1\r\nHost: www.marvelshoes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/x-www-form-urlencoded\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.marvelshoes.com/m/\r\nCookie: angela_session=eyJpdiI6IlBaNUpPOXpXeDF2Y3RQU1wvdWdOZEtnPT0iLCJ2YWx1ZSI6IlZuRGMyTWRWbFR6XC9qUFFBNHZFaU5rNU5tMnRPQ25sbTBTM3dLR012WFZiWjNvN1FkTnE0WGlhM0FTUXdubEFKIiwibWFjIjoiNmVkODRmODhhZjQyZWRkOGI1NDdkOTIzMTgyMDhiZWE2NTQ3MmExMzg4ZGJhNjgwYTQ0MGVjYzIyY2JmYzJmMCJ9\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SIKRqEQ4G0MFpuoL5d0dQG3dr38Q1EOwXb5YzNTsgouSqzkbkroQa7Rv1MY%2BK6BIQLGEZpHg9UZhAiDzBq5in9eSZNABuuybTkBr4tZ%2F001selwxbD88Uf7bIucmDdz3dK0bMPWD\"}]}\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST,GET,OPTIONS,DELETE\r\naccess-control-allow-headers: x-requested-with,content-type,Authorization\r\ncache-control: no-cache, private\r\ndate: Sun, 10 May 2026 05:05:22 GMT\r\nset-cookie: angela_session=eyJpdiI6IklQSUFiY0J3MXl3UHhaallOVmJDdEE9PSIsInZhbHVlIjoiNVA4XC9BT0IwbzNMaVwvVzlpaGR0YzRsQkVXUkcyRmZOWUdvSHFONFRjQW4xZTM0cFwvU3cyZXBDam5mNEJFc0pHcyIsIm1hYyI6Ijk0ZTc2MjFjMGFlNTQwMTJlNjc3MzdjZTQzNjliZWVjZWFjNTllM2U1NDdhM2U1ZWNkYzJiNjZlMWM3YjlmYWQifQ%3D%3D; expires=Tue, 09-Jun-2026 05:05:22 GMT; Max-Age=2592000; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f96688f89bfb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15411,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"541a77432af6761f781c590342f9220d","sha1":"30fd4579c6dc9af4764d11724a86d4506b2afcca","sha256":"6bde18641b1546710c42e701c0f7a0b79aad4759a8637919a86ddff53704b5ce","sha512":"645980b7c8bc793988817710c7becdbc893575fabfb7c2e45964c885be06d78de8d0ad611aabb84a5ec9296f40e03ca6f47f13578f90cb61145a94535d7a8e30","ssdeep":"192:1WzAmBnX/AUZalbAmcdT9AV+yIA3cY1nAVrIoAyT7VoA9+fj+A5Zgf6A5GLHy6AQ:API+CHNaMy4HynUs1lhghOEVlj","tlshash":"a762be8d622c8a78c6f6aec2eede31ad7554700badc24f42d3dd5f8c439552ae10b612","first_seen":"2026-05-10T05:05:41.542294Z","last_seen":"2026-05-10T05:05:42.02514Z","times_seen":2,"resource_available":false,"data":null}},"time_used":822,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":554,"receive":268,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.marvelshoes.com/api/currency/quotation_new","fqdn":"www.marvelshoes.com","domain":"marvelshoes.com","tld":"com"},"ip":{"addr":"104.21.11.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.marvelshoes.com/m/","date":"2026-05-10T05:05:27.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marvelshoes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 09:25:09 GMT","end":"Sun, 21 Jun 2026 10:23:57 GMT"},"fingerprint":{"sha1":"32:6F:33:4D:87:39:F7:19:B1:CA:C7:A0:A5:48:64:41:A8:39:C8:00","sha256":"1C:E1:38:7F:82:0F:7B:45:88:52:E4:2E:C5:5D:6C:4E:16:20:65:B9:50:2E:05:A3:77:09:9A:A4:42:90:A5:57"}}},"request":{"raw":"GET /api/currency/quotation_new HTTP/1.1\r\nHost: www.marvelshoes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/x-www-form-urlencoded\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.marvelshoes.com/m/\r\nCookie: angela_session=eyJpdiI6ImRId1NMMDV1VkUzTEw1YnErUE9kbGc9PSIsInZhbHVlIjoidFg2YTJBU1ZwcDRpMVcrODM5QTJyUmg3S01KWEN1bDljdU1vdGpiSkRvWXBxZWNPSHdnZTFCMElROWlIbFZpcCIsIm1hYyI6ImYyNDZmNDAzOWNlYTliYjVkYjJhZWFjMzMyYzJjMTM1ZTJkMDUzZDY5ZGExODk4MmY4NGVkYjI1NmRiZjJhMDUifQ%3D%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3dEDFPlubkq%2FrgVX2NkHpWjjwcSCfqhwOIFFIY7Txri6LK4zv3i1wzC2VNgfLEqGN%2FbFtgbIdkMo7vF9DEHvpj1M7yGhGM6IKE7%2BdZ5YRMX7cg16gjf6SLvr7bh1BNG2y9pPpdjD\"}]}\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST,GET,OPTIONS,DELETE\r\naccess-control-allow-headers: x-requested-with,content-type,Authorization\r\ncache-control: no-cache, private\r\ndate: Sun, 10 May 2026 05:05:28 GMT\r\nset-cookie: angela_session=eyJpdiI6IkdCMVRDZG9oem5mREUzYmdweUttOVE9PSIsInZhbHVlIjoiMUorMTY2cSs0ZUtiQXVaNnhwRG9sQ1RYN0cyUlRwcW05WHRDVVRTOGRNd2R2Q1hDTXoxQlV2ZlZPbDYxODhkYyIsIm1hYyI6IjI1NGVhZTg4Yzc3YWUyYTMzODY5M2ExZDE1MGE1YmNiNDNhODA5NjM1YWEzYjMxNDhlMjFiMzA5YzdjMWQzYjMifQ%3D%3D; expires=Tue, 09-Jun-2026 05:05:28 GMT; Max-Age=2592000; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f9668b51ba9b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15411,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"56fc7bbc3589195681a0286b4db26be9","sha1":"6b5bcf7d12a3511714405552c3d007656e071237","sha256":"70624740f7ea1dd1ece6e22c5a85a711bbeafb6bca600772422373acc594cfa1","sha512":"c77321b6ae30dc159610312976e0fc016dccf2bd5a97fad46e18e5a5d99fa454b3dbbeadf5c8d13dfc94104fc3c326212b91d788026be5b01b9c096ab6e3a155","ssdeep":"192:1WzAmBnX/AUZalbAmcdT9AV+yIA3cY1nAVrIoAyT7VoA9+fj+A5Zgf6A5GLHy6AM:API+CHNaMy4HynUsLlhghOSVlj","tlshash":"2262be8d722c8a78c6f6aec2eede31ad7554700badc24f42d3dd5f8c439552ae10b612","first_seen":"2026-05-10T05:05:41.558981Z","last_seen":"2026-05-10T05:05:41.990171Z","times_seen":2,"resource_available":false,"data":null}},"time_used":602,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":382,"receive":220,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.marvelshoes.com/h5/static/js/pages-home-home.3e768df9.js","fqdn":"www.marvelshoes.com","domain":"marvelshoes.com","tld":"com"},"ip":{"addr":"104.21.11.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.marvelshoes.com/m/","date":"2026-05-10T05:05:15.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marvelshoes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 09:25:09 GMT","end":"Sun, 21 Jun 2026 10:23:57 GMT"},"fingerprint":{"sha1":"32:6F:33:4D:87:39:F7:19:B1:CA:C7:A0:A5:48:64:41:A8:39:C8:00","sha256":"1C:E1:38:7F:82:0F:7B:45:88:52:E4:2E:C5:5D:6C:4E:16:20:65:B9:50:2E:05:A3:77:09:9A:A4:42:90:A5:57"}}},"request":{"raw":"GET /h5/static/js/pages-home-home.3e768df9.js HTTP/1.1\r\nHost: www.marvelshoes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.marvelshoes.com/m/\r\nCookie: angela_session=eyJpdiI6Ik9lK2d4a0JkRDNBZFNcL3VTZzRiRDJBPT0iLCJ2YWx1ZSI6IjFNd3RIUGRJVkZrN05CaStQUHNOdmVPWHY2WG10SElQZG5zNldIc3Q2Zm84bUZ2S0h2WDVjR2RQb0NRSHBqTHgiLCJtYWMiOiJiNDc3MTI2MWUyZGI3MzBlMzE0MzNhZGI1ZGViNDAyMmNmODBiNTdmOWY4NDJiN2E0NTViMDllNzU3ZTM3MmY5In0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 10 May 2026 05:05:15 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 28 Jul 2023 14:01:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: \"64c3ca25-a28e\"\r\nexpires: Sun, 10 May 2026 17:05:15 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bQKqayX0mHu3Mumwa3xPCKSj9TjOG4msl6jV%2Fl8H%2BePUE7F%2Be81bWgOpnUMVeYKAO%2F%2BDD2Pklrwg8pvAcWMKQDx6%2BWiEVsTZMW2A6GFHjPeYRuJpkpIyd208bEg7pnot458xa1ZY\"}]}\r\ncf-ray: 9f9668698f6eb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":41614,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3780), with CRLF line terminators","md5":"cf1a2c5fd7e710111bc4c09a51623110","sha1":"b131b4eb9c385075ed0fb028ee679d3329195d70","sha256":"987b35d304a0c48ff174fe830431db1d20417b1356a26fe64974dd16f14eca44","sha512":"8ea4179aead5db7b326b12d9028d1c18ceca795d98d2f354715067dcfd559b31135ae16d18dc2979566ec3b4e08e5ce9eee4c2d9167a84eb30dd86064c4d0d3d","ssdeep":"768:VaEHA6Sgyv6R06l3COuiMLaLUskYkSpDUC:NHOP6R06XUlYjN","tlshash":"02131f0e5966a46b8ab3f371a4b70d29f132467b51157d0a7f3f84500f3e80b426afac","first_seen":"2023-09-18T10:45:33Z","last_seen":"2026-07-15T09:10:18.159645Z","times_seen":131,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.marvelshoes.com/h5/static/favicon.png","fqdn":"www.marvelshoes.com","domain":"marvelshoes.com","tld":"com"},"ip":{"addr":"104.21.11.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.marvelshoes.com/m/","date":"2026-05-10T05:05:15.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marvelshoes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 09:25:09 GMT","end":"Sun, 21 Jun 2026 10:23:57 GMT"},"fingerprint":{"sha1":"32:6F:33:4D:87:39:F7:19:B1:CA:C7:A0:A5:48:64:41:A8:39:C8:00","sha256":"1C:E1:38:7F:82:0F:7B:45:88:52:E4:2E:C5:5D:6C:4E:16:20:65:B9:50:2E:05:A3:77:09:9A:A4:42:90:A5:57"}}},"request":{"raw":"GET /h5/static/favicon.png HTTP/1.1\r\nHost: www.marvelshoes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.marvelshoes.com/m/\r\nCookie: angela_session=eyJpdiI6Ik9lK2d4a0JkRDNBZFNcL3VTZzRiRDJBPT0iLCJ2YWx1ZSI6IjFNd3RIUGRJVkZrN05CaStQUHNOdmVPWHY2WG10SElQZG5zNldIc3Q2Zm84bUZ2S0h2WDVjR2RQb0NRSHBqTHgiLCJtYWMiOiJiNDc3MTI2MWUyZGI3MzBlMzE0MzNhZGI1ZGViNDAyMmNmODBiNTdmOWY4NDJiN2E0NTViMDllNzU3ZTM3MmY5In0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 10 May 2026 05:05:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 9165\r\nlast-modified: Fri, 28 Jul 2023 14:03:00 GMT\r\npriority: u=6,i=?0\r\netag: \"64c3ca94-23cd\"\r\nexpires: Mon, 08 Jun 2026 04:47:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 87486\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L8vjT72NZoL%2FQNIFbUp94X6udyDnahArdpM2wWaKvSxN24FeOua4qfaCwrCIGnvzXtLFCCgwvzPU2fhgiW2nJARTDwx0bv3coe5vPKZod178YL1bDoGUzcnpEMnKHr3Hz6sg4U21\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f966869ef76b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9165,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, baseline, precision 8, 320x320, components 3","md5":"b1a2105a0c51a76f7daa28744c2a2cef","sha1":"f53d1531c95bf7d7038f617607e53493e3643e29","sha256":"21973d26844dc510f3be9dc41c98ea9f0b043abbf495d31c5a96a0d77da5d64a","sha512":"298930410a3ef9b6f01797c89d8483fe7f562d55ab8d338cac7322150e3cfa977c30047b24a89d62772b4b4d3e178ed1736d34fdd8e6b6ef3d71a99f4df9b64c","ssdeep":"192:VdEsDR+OETenmBODhqd9r/mS00mKG+VToepju6YKtRZLYipjSk1GViPU:V26QOEzBODhOTmSzmKGWToQjur0cip2D","tlshash":"3212af6ef86f831b3d7c9a351b264a9178ea8f0e9502267110718d87f2e48c8910fdcb","first_seen":"2023-09-18T10:45:34Z","last_seen":"2026-07-15T09:10:18.145689Z","times_seen":132,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.marvelshoes.com/h5/static/image/mores.png","fqdn":"www.marvelshoes.com","domain":"marvelshoes.com","tld":"com"},"ip":{"addr":"104.21.11.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.marvelshoes.com/m/","date":"2026-05-10T05:05:16.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marvelshoes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 09:25:09 GMT","end":"Sun, 21 Jun 2026 10:23:57 GMT"},"fingerprint":{"sha1":"32:6F:33:4D:87:39:F7:19:B1:CA:C7:A0:A5:48:64:41:A8:39:C8:00","sha256":"1C:E1:38:7F:82:0F:7B:45:88:52:E4:2E:C5:5D:6C:4E:16:20:65:B9:50:2E:05:A3:77:09:9A:A4:42:90:A5:57"}}},"request":{"raw":"GET /h5/static/image/mores.png HTTP/1.1\r\nHost: www.marvelshoes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.marvelshoes.com/m/\r\nCookie: angela_session=eyJpdiI6Ik9lK2d4a0JkRDNBZFNcL3VTZzRiRDJBPT0iLCJ2YWx1ZSI6IjFNd3RIUGRJVkZrN05CaStQUHNOdmVPWHY2WG10SElQZG5zNldIc3Q2Zm84bUZ2S0h2WDVjR2RQb0NRSHBqTHgiLCJtYWMiOiJiNDc3MTI2MWUyZGI3MzBlMzE0MzNhZGI1ZGViNDAyMmNmODBiNTdmOWY4NDJiN2E0NTViMDllNzU3ZTM3MmY5In0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 10 May 2026 05:05:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 509\r\nlast-modified: Fri, 01 Oct 2021 12:26:36 GMT\r\npriority: u=4,i=?0\r\netag: \"6156fe7c-1fd\"\r\nexpires: Mon, 08 Jun 2026 04:47:07 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 87488\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sA%2F5w%2FNXyyJ31jkYKZ7a%2Bjg5o7ELH8NjUHRjZA8vRbjEF2Ohzu5kYcIykKb%2FKiwpAFK3OHMpSnE%2BdG0BZvYe3KJp3naGFINUv7I%2BbyFDVLmA43tHenRwhL1cDz57LuiMADr%2Bh0ap\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f96686adf96b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":509,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"49dcb5bfae28accc065141bcbceba65b","sha1":"a69cb142a860ea96c680b37770263046f98fe612","sha256":"1dcd47fe3403f53080acee25bb1bf2af5fc6d185f24b4ff267da43432c1558cd","sha512":"f6024e581fb40ad09022a34a9d0a8e29632355e697741d4bf46e39f43206319116b20b0cd69d6c1624947aa87367dd17fa00d049e5a08a065834c3753b5ddcda","ssdeep":"","tlshash":"17f020c2228a8231d62f72e2327a6874947e2e14c1800e100021f2e5b1024a779d0ac2","first_seen":"2023-06-11T17:08:27Z","last_seen":"2026-08-01T17:32:58.177567Z","times_seen":252,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.marvelshoes.com/api/news/list","fqdn":"www.marvelshoes.com","domain":"marvelshoes.com","tld":"com"},"ip":{"addr":"104.21.11.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.marvelshoes.com/m/","date":"2026-05-10T05:05:16.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marvelshoes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 09:25:09 GMT","end":"Sun, 21 Jun 2026 10:23:57 GMT"},"fingerprint":{"sha1":"32:6F:33:4D:87:39:F7:19:B1:CA:C7:A0:A5:48:64:41:A8:39:C8:00","sha256":"1C:E1:38:7F:82:0F:7B:45:88:52:E4:2E:C5:5D:6C:4E:16:20:65:B9:50:2E:05:A3:77:09:9A:A4:42:90:A5:57"}}},"request":{"raw":"POST /api/news/list HTTP/1.1\r\nHost: www.marvelshoes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/x-www-form-urlencoded\r\nContent-Length: 6\r\nOrigin: https://www.marvelshoes.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.marvelshoes.com/m/\r\nCookie: angela_session=eyJpdiI6IlBzZUZ4TE5yYmM5enFrYXBQU09yUnc9PSIsInZhbHVlIjoiNXZ5eEtBU0toMHV6T2NlRXYxbUNSM2U4VTNkSXQ0R2QreGNzbDhaY0FGV1wvNDNzRStUVHVhQmd2T3VKZ202Rk8iLCJtYWMiOiIyMTBmY2FhYTI0ZGZlYTAxYTVlMjQ0YmY2ZGI0YmViNjIzYTgzZDg0MDI2ZTA2Y2I0M2IzNjllZmM0Yzg0OTRlIn0%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":6,"data":"c_id=4"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xPhdlB2OUKeak0Mb6i9ow1mxFpORD01woGw9giWhtp%2B%2BVbFiWN4kTUAYUszCoKZWpxwwLof84OxNql%2B8UHhvvcpKvcsMY%2FazZuoy3ReNAHLDVrkk1XOoJxsaaH1mQvgwgU8wPf6N\"}]}\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST,GET,OPTIONS,DELETE\r\naccess-control-allow-headers: x-requested-with,content-type,Authorization\r\ncache-control: no-cache, private\r\ndate: Sun, 10 May 2026 05:05:16 GMT\r\nset-cookie: angela_session=eyJpdiI6IkFhcGFGUXVIRlVRRU1TNUphVEFPS1E9PSIsInZhbHVlIjoiWGFBclkyWUp5RVdpdHI5c0t5WHl2Q0Z4N2R4REZ4eEZFdjVCTE1ydXJScXNvbEJTZHRQUGZhQTN5d3FzZ1l4VCIsIm1hYyI6IjhkZjA0Yzk3NTBkYmJjNDI1ZTM0Y2YwZGU0MjRhMTAxNTc1NGNlNWI0ZTcwNjVlNTYyOTQ5ZmIzNGJmZDg5ZDIifQ%3D%3D; expires=Tue, 09-Jun-2026 05:05:16 GMT; Max-Age=2592000; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f96686c6faab1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":264,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7afc1247b2b8276fb124cb943e47c400","sha1":"f1989d90e6db60919223c7b467ba125a79174f45","sha256":"02b71b3835c52b6f8217e36ab6a9861d20e2e3c7e9dc5cb2a05d4c3d827b277a","sha512":"c43fcdf86fe46b53a6ae19a05cedcda6a9e7f752f9bf5d76d23100eb4ef9ad6e0e09377695fa06c3b8125190937360113bb0d63c52ab7acbdb95c47945279187","ssdeep":"","tlshash":"e4d05eba26955cfb9ad512c638caba14eccf1052ca02ab5a0dc89c6ed3182d4001a237","first_seen":"2023-09-18T10:45:34Z","last_seen":"2026-07-15T09:10:18.167478Z","times_seen":114,"resource_available":false,"data":null}},"time_used":533,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":533,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.marvelshoes.com/m","fqdn":"www.marvelshoes.com","domain":"marvelshoes.com","tld":"com"},"ip":{"addr":"104.21.11.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-10T05:05:14.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marvelshoes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 09:25:09 GMT","end":"Sun, 21 Jun 2026 10:23:57 GMT"},"fingerprint":{"sha1":"32:6F:33:4D:87:39:F7:19:B1:CA:C7:A0:A5:48:64:41:A8:39:C8:00","sha256":"1C:E1:38:7F:82:0F:7B:45:88:52:E4:2E:C5:5D:6C:4E:16:20:65:B9:50:2E:05:A3:77:09:9A:A4:42:90:A5:57"}}},"request":{"raw":"GET /m HTTP/1.1\r\nHost: www.marvelshoes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nCookie: angela_session=eyJpdiI6Ik9lK2d4a0JkRDNBZFNcL3VTZzRiRDJBPT0iLCJ2YWx1ZSI6IjFNd3RIUGRJVkZrN05CaStQUHNOdmVPWHY2WG10SElQZG5zNldIc3Q2Zm84bUZ2S0h2WDVjR2RQb0NRSHBqTHgiLCJtYWMiOiJiNDc3MTI2MWUyZGI3MzBlMzE0MzNhZGI1ZGViNDAyMmNmODBiNTdmOWY4NDJiN2E0NTViMDllNzU3ZTM3MmY5In0%3D\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\nserver: cloudflare\r\ndate: Sun, 10 May 2026 05:05:14 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlocation: http://www.marvelshoes.com/m/\r\npriority: u=1,i=?0\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w%2B8WP8SwdiJKqmKXyLvIQOWTfyUDyWcRUkKTucow1RV%2FZOavGlWB1dqHJ%2BWrzPF2Hpkz9EsxhcBK1DAoXj%2FTplg00ikdaW4U%2FKRAh2iRTddfoaPqG5wS7tz1zClV8aUOGvwskvVy\"}]}\r\ncf-ray: 9f966860af12b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1355,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T07:49:02.787608Z","times_seen":17795775,"resource_available":true,"data":null}},"time_used":553,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":553,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.marvelshoes.com/h5/static/image/france.png","fqdn":"www.marvelshoes.com","domain":"marvelshoes.com","tld":"com"},"ip":{"addr":"104.21.11.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.marvelshoes.com/m/","date":"2026-05-10T05:05:15.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marvelshoes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 09:25:09 GMT","end":"Sun, 21 Jun 2026 10:23:57 GMT"},"fingerprint":{"sha1":"32:6F:33:4D:87:39:F7:19:B1:CA:C7:A0:A5:48:64:41:A8:39:C8:00","sha256":"1C:E1:38:7F:82:0F:7B:45:88:52:E4:2E:C5:5D:6C:4E:16:20:65:B9:50:2E:05:A3:77:09:9A:A4:42:90:A5:57"}}},"request":{"raw":"GET /h5/static/image/france.png HTTP/1.1\r\nHost: www.marvelshoes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.marvelshoes.com/m/\r\nCookie: angela_session=eyJpdiI6Ik9lK2d4a0JkRDNBZFNcL3VTZzRiRDJBPT0iLCJ2YWx1ZSI6IjFNd3RIUGRJVkZrN05CaStQUHNOdmVPWHY2WG10SElQZG5zNldIc3Q2Zm84bUZ2S0h2WDVjR2RQb0NRSHBqTHgiLCJtYWMiOiJiNDc3MTI2MWUyZGI3MzBlMzE0MzNhZGI1ZGViNDAyMmNmODBiNTdmOWY4NDJiN2E0NTViMDllNzU3ZTM3MmY5In0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 10 May 2026 05:05:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 9273\r\nlast-modified: Fri, 01 Oct 2021 12:26:36 GMT\r\npriority: u=4,i=?0\r\netag: \"6156fe7c-2439\"\r\nexpires: Mon, 08 Jun 2026 04:47:07 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 87487\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m0IfxZpGTa59R8q7Lm2SNF8NXFExsvky6yf88ekhvwEMhBw%2F0DecupohaWDsk7UE0dOtY2II%2FdYvNFTxF4cCuK0uOG1HTLnxDjLBZNnXif5VgI2kUpusYx0zs8QT9Mn3SB7ClWzh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f96686aaf8cb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9273,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 231 x 154, 8-bit/color RGBA, non-interlaced","md5":"b15c867d381eebb2413c80f1cc059cf9","sha1":"f79e767155ee1fd0b03a4ee5dc5cc8e10257c706","sha256":"06d30eaadb3f5e240e84816f7f894b74b31c04e18f95193be9f38361ff66841b","sha512":"feaf2ffcf9e940b9ac62a888606c2aa4a207f5b489bbe7c5ba54d1e25b10b6ba113efc377f8d45448ad27ecc17c93ae33a81f776d38fe28527fb7f83d53d8e72","ssdeep":"192:JggMH3gYR35yTZq+/VG3qE7IYUWzuPfFwYB:KgErJyNq+/I6E0v5nFwC","tlshash":"0812156488807a7636a85dc79a7155ca1deada6f7a5b4c21084333f1f0f23036b1e35f","first_seen":"2023-09-18T10:45:33Z","last_seen":"2026-07-27T13:45:14.803604Z","times_seen":171,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.marvelshoes.com//upload/1624889111751335.png","fqdn":"www.marvelshoes.com","domain":"marvelshoes.com","tld":"com"},"ip":{"addr":"104.21.11.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.marvelshoes.com/m/","date":"2026-05-10T05:05:16.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marvelshoes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 09:25:09 GMT","end":"Sun, 21 Jun 2026 10:23:57 GMT"},"fingerprint":{"sha1":"32:6F:33:4D:87:39:F7:19:B1:CA:C7:A0:A5:48:64:41:A8:39:C8:00","sha256":"1C:E1:38:7F:82:0F:7B:45:88:52:E4:2E:C5:5D:6C:4E:16:20:65:B9:50:2E:05:A3:77:09:9A:A4:42:90:A5:57"}}},"request":{"raw":"GET //upload/1624889111751335.png HTTP/1.1\r\nHost: www.marvelshoes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.marvelshoes.com/m/\r\nCookie: angela_session=eyJpdiI6IlJCUFdPa29mNHFaTmVhVkxxeGhCa2c9PSIsInZhbHVlIjoieTlGNW5YS1wvUmVLTHBYNnVkSVhFb3pmZGFXbVRoUzNYZGNFVDhmNWdVcVwvTDcrSHRRRk44MEpLdVlZR0p3b041IiwibWFjIjoiMDA5MmRiMTIwYTc3OTc4YmU0ZjZmYWRjNTAwODAxNDdmMzUzYzQyZjJlNzUzOGEyODViZjUxOGNlNmNmMGZlOCJ9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 10 May 2026 05:05:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 907229\r\nlast-modified: Mon, 28 Jun 2021 14:05:12 GMT\r\npriority: u=4,i=?0\r\netag: \"60d9d718-dd7dd\"\r\nexpires: Mon, 08 Jun 2026 04:47:08 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 87488\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ovNCsHrAFRgB4yOtBZSuy2uWNRnRmHVaYxfLj62HRECvYyoi0Q5YUlueSwGw82pE3l595hA3clyNy03etv1UriXPmOHoEE6X2172kF9SdiZzcIzLxHuFOHbeWjBsxsYnGqzlalsR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f96686ecfe1b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":907229,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2268 x 540, 8-bit/color RGBA, non-interlaced","md5":"3cd0e79ebedac965c885614f950c3dab","sha1":"e4fa7cfc8591e7925d783176ef5ae0b3253ca834","sha256":"150a65a547ed2bde5c5712f70328b9c681fe44fd6d6062bcc811bfef28903e8b","sha512":"8e071b20b7d50b5fc3a7d6f0a261493281ea66d860c9cb556ae01b1dab0d1d575383e0ce0d00ba23416cccee03906806b50f6704730aed8e462eab8b447f7f46","ssdeep":"12288:7aq+WdFqT84oud95WR5JWtJF2hwbXcv3oO4cOl4mQNI4bS5rg9YBgHbmzAGIcqzh:71IfdIRLq9wfB4JINI4mbsmsXznT9","tlshash":"9415334b96f34d01d9a01c11da2db51003cd4421bd83b9dba42fdab262f98eb67799b3","first_seen":"2023-08-07T05:38:51Z","last_seen":"2026-07-15T09:10:18.169475Z","times_seen":116,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.marvelshoes.com/m/","fqdn":"www.marvelshoes.com","domain":"marvelshoes.com","tld":"com"},"ip":{"addr":"104.21.11.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-10T05:05:14.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marvelshoes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 09:25:09 GMT","end":"Sun, 21 Jun 2026 10:23:57 GMT"},"fingerprint":{"sha1":"32:6F:33:4D:87:39:F7:19:B1:CA:C7:A0:A5:48:64:41:A8:39:C8:00","sha256":"1C:E1:38:7F:82:0F:7B:45:88:52:E4:2E:C5:5D:6C:4E:16:20:65:B9:50:2E:05:A3:77:09:9A:A4:42:90:A5:57"}}},"request":{"raw":"GET /m/ HTTP/1.1\r\nHost: www.marvelshoes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nCookie: angela_session=eyJpdiI6Ik9lK2d4a0JkRDNBZFNcL3VTZzRiRDJBPT0iLCJ2YWx1ZSI6IjFNd3RIUGRJVkZrN05CaStQUHNOdmVPWHY2WG10SElQZG5zNldIc3Q2Zm84bUZ2S0h2WDVjR2RQb0NRSHBqTHgiLCJtYWMiOiJiNDc3MTI2MWUyZGI3MzBlMzE0MzNhZGI1ZGViNDAyMmNmODBiNTdmOWY4NDJiN2E0NTViMDllNzU3ZTM3MmY5In0%3D\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 10 May 2026 05:05:15 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 28 Jul 2023 14:02:10 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E0NRRwe3ICKJNRXKJl%2BIc3PBZo4UryIh9I7fq7WxEf8o0orqaELe8EwDWDnWAvDiHnOlNbf5QS0CWkGRjKo8tAspFyFtCYDQCSMqkFTK3QALM3%2BX0oBK66Z9PzrpAhqQGNybInvc\"}]}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9f9668642f31b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1355,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"de681f6252ef26b9c718dc0a9d588ef6","sha1":"93b53ad310ae3c85211777241374ec755ca2b731","sha256":"9a1ec077b8a66efae2cef53c48db67abc53c453aa30abf25069c17ebe831e25e","sha512":"efdf616801906b53ff0ea2f7aec3be9221355d11fdd5d580c60ac4661184f99195ff05e983f6f03be64583742b96cfd70a1915034a32444f4cf85e992b7725a7","ssdeep":"","tlshash":"d52132824cf1f9093710c4157da2f429cdd5847795808941b4cca6b98fd3fc5c9db839","first_seen":"2024-08-19T17:30:40.218292Z","last_seen":"2026-07-15T09:10:18.170883Z","times_seen":127,"resource_available":true,"data":null}},"time_used":276,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":276,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.marvelshoes.com/api/currency/quotation_new","fqdn":"www.marvelshoes.com","domain":"marvelshoes.com","tld":"com"},"ip":{"addr":"104.21.11.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.marvelshoes.com/m/","date":"2026-05-10T05:05:15.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marvelshoes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 09:25:09 GMT","end":"Sun, 21 Jun 2026 10:23:57 GMT"},"fingerprint":{"sha1":"32:6F:33:4D:87:39:F7:19:B1:CA:C7:A0:A5:48:64:41:A8:39:C8:00","sha256":"1C:E1:38:7F:82:0F:7B:45:88:52:E4:2E:C5:5D:6C:4E:16:20:65:B9:50:2E:05:A3:77:09:9A:A4:42:90:A5:57"}}},"request":{"raw":"GET /api/currency/quotation_new HTTP/1.1\r\nHost: www.marvelshoes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/x-www-form-urlencoded\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.marvelshoes.com/m/\r\nCookie: angela_session=eyJpdiI6Ik9lK2d4a0JkRDNBZFNcL3VTZzRiRDJBPT0iLCJ2YWx1ZSI6IjFNd3RIUGRJVkZrN05CaStQUHNOdmVPWHY2WG10SElQZG5zNldIc3Q2Zm84bUZ2S0h2WDVjR2RQb0NRSHBqTHgiLCJtYWMiOiJiNDc3MTI2MWUyZGI3MzBlMzE0MzNhZGI1ZGViNDAyMmNmODBiNTdmOWY4NDJiN2E0NTViMDllNzU3ZTM3MmY5In0%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s6cU%2BSC4nX41gJbhMLY8pBB9tBGDV101cb2VedXhDL%2B5EKZXlAyI3%2FPUpbBqO%2BVwCVMVRrakljeZrzP9w5CtkVi0S5KtOWRLMc0FLlHBl24xF%2BuXtu5jFPBrpNSV71bWjtySsplB\"}]}\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST,GET,OPTIONS,DELETE\r\naccess-control-allow-headers: x-requested-with,content-type,Authorization\r\ncache-control: no-cache, private\r\ndate: Sun, 10 May 2026 05:05:16 GMT\r\nset-cookie: angela_session=eyJpdiI6InRWbUI3and5Rkl2bVB1eFg5NE4raWc9PSIsInZhbHVlIjoiQzc4aTB3RjRoUUZRUnhNUk1HUXVucWNjRm5PM2krTHdMMllzd2tIMVlEenp4dFR2U0hTVzVtb01KMXhtZnllTiIsIm1hYyI6ImI3N2ZkZTYxM2JjYTY2YzZiYTliMzYzOWRmMTVmNmFkZWJiMTA0ZjE3NTEyZWY2ZDUwYmRjZmU1MTZhZWU5YzUifQ%3D%3D; expires=Tue, 09-Jun-2026 05:05:16 GMT; Max-Age=2592000; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f96686a1f7cb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15411,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"bbaec1e9ac9a83ac560d1697544ed8c0","sha1":"6e923ce204957c8af64f074b764c7e89b7b11b8b","sha256":"9d0f019d2da72412042ec47f08c39056cac20c7923c7fc850f756e74d76a71b0","sha512":"d8ee4d8889b73284adac1b34169355c39d8d691c5341e704b4ab1a0f54a180400a36c1a0de75009a62308de8f90c2763879e9431ed135961b1742811d0fa0d4d","ssdeep":"192:1WzAmBnX/AUZaxbAmcdT9AV+yIA3cY1nAVrIoAyT7VoA9+fUk+A5Zgf6A5GLHy6i:AP8+CHNaUy4HynUsA7lhghVE12j","tlshash":"9762ce8d322c8a78c6f6aec2eede31ad7554700badc24f41d3de5f8c439552ae10b612","first_seen":"2026-05-10T05:05:41.552245Z","last_seen":"2026-05-10T05:05:42.035104Z","times_seen":2,"resource_available":false,"data":null}},"time_used":905,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":672,"receive":233,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.marvelshoes.com/h5/static/image/ieo.png","fqdn":"www.marvelshoes.com","domain":"marvelshoes.com","tld":"com"},"ip":{"addr":"104.21.11.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.marvelshoes.com/m/","date":"2026-05-10T05:05:16.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marvelshoes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 09:25:09 GMT","end":"Sun, 21 Jun 2026 10:23:57 GMT"},"fingerprint":{"sha1":"32:6F:33:4D:87:39:F7:19:B1:CA:C7:A0:A5:48:64:41:A8:39:C8:00","sha256":"1C:E1:38:7F:82:0F:7B:45:88:52:E4:2E:C5:5D:6C:4E:16:20:65:B9:50:2E:05:A3:77:09:9A:A4:42:90:A5:57"}}},"request":{"raw":"GET /h5/static/image/ieo.png HTTP/1.1\r\nHost: www.marvelshoes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.marvelshoes.com/m/\r\nCookie: angela_session=eyJpdiI6Ik9lK2d4a0JkRDNBZFNcL3VTZzRiRDJBPT0iLCJ2YWx1ZSI6IjFNd3RIUGRJVkZrN05CaStQUHNOdmVPWHY2WG10SElQZG5zNldIc3Q2Zm84bUZ2S0h2WDVjR2RQb0NRSHBqTHgiLCJtYWMiOiJiNDc3MTI2MWUyZGI3MzBlMzE0MzNhZGI1ZGViNDAyMmNmODBiNTdmOWY4NDJiN2E0NTViMDllNzU3ZTM3MmY5In0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 10 May 2026 05:05:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 9026\r\nlast-modified: Fri, 01 Oct 2021 12:26:36 GMT\r\npriority: u=4,i=?0\r\netag: \"6156fe7c-2342\"\r\nexpires: Mon, 08 Jun 2026 04:47:07 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 87487\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fJpx4p6rhJtEE635Kkkv4VNBbG023RJRiJD3C2U91vGcw8tOqWVL0LIafFrvTPgpqIfIrgEiFUtMn59kgdDxHBmMsi%2Fdteoc5AH8mAQsQTkmh6Y6AdttJiRowSvfjMxIivu6Z8Sl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f96686b0f9ab1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9026,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"dd55809c62e674c2753cd204db0893c4","sha1":"0b32d02dcf4245aab321240c3b0b04617145c04c","sha256":"c1bcb4f560dff5046ee0e356854d1ec68dd8d72bc29b701597e77152112dba13","sha512":"e6ca113db2b09602f62de4c618f97f643b3b10476621cb4b2f05740d6e6ec20da13ad8b9cffa8c9fcf8bfdee84029fec53fdebd014ddaf6e37346bde6da113d9","ssdeep":"192:08K7Mg81T4/F2S1ltvhMouQFr0Pp21iRmoxfHm3YYn1F4tKpGBy:24g8Z4/Fd1lvMoVeV3fG3z4tJQ","tlshash":"9512af55e0a3dc7b996cc211569006b023c2af3d9b4e42f8ddc5922d7a0eb203cad73d","first_seen":"2023-09-18T10:45:34Z","last_seen":"2026-07-15T09:10:18.142313Z","times_seen":137,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"www.marvelshoes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.okcoinus.com/upload/1668256710226856.jpg","fqdn":"www.okcoinus.com","domain":"okcoinus.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.marvelshoes.com/m/","date":"2026-05-10T05:05:16.620Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/1668256710226856.jpg HTTP/1.1\r\nHost: www.okcoinus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.marvelshoes.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T07:49:02.787608Z","times_seen":17795775,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}