| cdn.staticsoe.com/uploads/0/theme/default/assets/empty_loading.png?v=51ba92483a4282450a82bd1e58a7b541 |  104.18.169.76 | 200 OK | 6.9 kB |
URL GET HTTP/2cdn.staticsoe.com/uploads/0/theme/default/assets/empty_loading.png?v=51ba92483a4282450a82bd1e58a7b541 IP104.18.169.76:443
Requested byhttps://4f-onlineshop.com/ CertificateIssuerCloudflare, Inc. Subjectcdn.staticsoe.com Fingerprint81:12:7B:A0:28:A4:6D:E5:44:00:F3:A3:14:8C:B8:2C:42:34:DA:CD ValidityWed, 14 Feb 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typePNG image data, 1020 x 1020, 8-bit/color RGB, non-interlaced Hash51ba92483a4282450a82bd1e58a7b541 0a9c0f2bdd7f801733f8c07e7f8d41e172701263 900803e3916a6a75d3c2e39f033ec970387de83a5b91385030e620fe7623d6ff
GET /uploads/0/theme/default/assets/empty_loading.png?v=51ba92483a4282450a82bd1e58a7b541 HTTP/1.1
Host: cdn.staticsoe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4f-onlineshop.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 06:09:16 GMT
content-type: image/png
content-length: 6857
x-oss-request-id: 656825957484AD32327E925F
vary: Origin, Accept-Encoding
etag: "51BA92483A4282450A82BD1E58A7B541"
last-modified: Thu, 30 Nov 2023 06:02:58 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 12169997832694763196
x-oss-storage-class: Standard
content-md5: UbqSSDpCgkUKgr0eWKe1QQ==
x-oss-server-time: 3
cf-cache-status: HIT
age: 42945
expires: Fri, 26 Apr 2024 06:09:16 GMT
cache-control: public, max-age=691200
accept-ranges: bytes
server: cloudflare
cf-ray: 87627c2e5a2a56a5-OSL
X-Firefox-Spdy: h2
|
|
| cdn.staticsoe.com/uploads/0/theme/default/assets/banner_loading.png?v=7fe39bdcdcabdc30d14d1f99c308db2b | 104.18.169.76 | 200 OK | 23 kB |
URL GET HTTP/2cdn.staticsoe.com/uploads/0/theme/default/assets/banner_loading.png?v=7fe39bdcdcabdc30d14d1f99c308db2b IP104.18.169.76:443
Requested byhttps://4f-onlineshop.com/ CertificateIssuerCloudflare, Inc. Subjectcdn.staticsoe.com Fingerprint81:12:7B:A0:28:A4:6D:E5:44:00:F3:A3:14:8C:B8:2C:42:34:DA:CD ValidityWed, 14 Feb 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typePNG image data, 3840 x 1600, 8-bit/color RGB, non-interlaced Hash7fe39bdcdcabdc30d14d1f99c308db2b 1d355213e4346ff9d06274c93523fc4d98b583c0 a290c6c3053dc46eb4c6632cebcea32eea7da4274d3931d4c703f2ba6c916af7
GET /uploads/0/theme/default/assets/banner_loading.png?v=7fe39bdcdcabdc30d14d1f99c308db2b HTTP/1.1
Host: cdn.staticsoe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4f-onlineshop.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 06:09:16 GMT
content-type: image/png
content-length: 23352
x-oss-request-id: 654CD917F488A53136B93DF7
vary: Origin, Accept-Encoding
etag: "7FE39BDCDCABDC30D14D1F99C308DB2B"
last-modified: Thu, 09 Nov 2023 06:27:19 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 7125506954030682244
x-oss-storage-class: Standard
content-md5: f+Ob3Nyr3DDRTR+ZwwjbKw==
x-oss-server-time: 1
cf-cache-status: HIT
age: 30010
expires: Fri, 26 Apr 2024 06:09:16 GMT
cache-control: public, max-age=691200
accept-ranges: bytes
server: cloudflare
cf-ray: 87627c2e5a2756a5-OSL
X-Firefox-Spdy: h2
|
|
| cdn.staticsoe.com/uploads/61353/cart/resources/20231027/d824ccda1f5d2aabdeaf4008c56e2762.png | 104.18.169.76 | 200 OK | 3.8 kB |
URL GET HTTP/2cdn.staticsoe.com/uploads/61353/cart/resources/20231027/d824ccda1f5d2aabdeaf4008c56e2762.png IP104.18.169.76:443
Requested byhttps://4f-onlineshop.com/ CertificateIssuerCloudflare, Inc. Subjectcdn.staticsoe.com Fingerprint81:12:7B:A0:28:A4:6D:E5:44:00:F3:A3:14:8C:B8:2C:42:34:DA:CD ValidityWed, 14 Feb 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typePNG image data, 200 x 97, 8-bit/color RGBA, non-interlaced Hashd358c2728d38b73d0785b2193560965f bfc392fb46731b82d1a961244772e84a731a099c 0acf18507c12cc96723558cd9705ad40af5d328cb9365d097682ba2b8a550643
GET /uploads/61353/cart/resources/20231027/d824ccda1f5d2aabdeaf4008c56e2762.png HTTP/1.1
Host: cdn.staticsoe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4f-onlineshop.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 06:09:16 GMT
content-type: image/png
content-length: 3821
x-oss-request-id: 660B3079D5610430357AF518
vary: Origin, Accept-Encoding
etag: "D358C2728D38B73D0785B2193560965F"
last-modified: Fri, 27 Oct 2023 03:26:25 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 572407742235419303
x-oss-storage-class: Standard
content-md5: 01jCco04tz0HhbIZNWCWXw==
x-oss-server-time: 19
cf-cache-status: REVALIDATED
expires: Fri, 26 Apr 2024 06:09:16 GMT
cache-control: public, max-age=691200
accept-ranges: bytes
server: cloudflare
cf-ray: 87627c2e5a2e56a5-OSL
X-Firefox-Spdy: h2
|
|
| sc-static.net/scevent.min.js |  54.230.82.240 | 200 OK | 19 kB |
URL GET HTTP/2sc-static.net/scevent.min.js IP54.230.82.240:443
Requested byhttps://4f-onlineshop.com/ CertificateIssuerAmazon Subjectsc-static.net FingerprintE4:8A:DF:2D:95:33:E5:93:D4:43:8A:14:06:EA:EA:E8:AD:29:20:0F ValidityThu, 21 Dec 2023 00:00:00 GMT - Sat, 18 Jan 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (27992) Hash264bae03f1d598bca141e0840046b194 721f3a0714d44e5cb641fc99ad12b955130a88e3 f563aec552103867adcb967e41b1699c9d15e1aa257c7a210f70f5cd71e6a0ef
GET /scevent.min.js HTTP/1.1
Host: sc-static.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4f-onlineshop.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
content-length: 19297
server: CloudFront
date: Thu, 18 Apr 2024 06:09:16 GMT
access-control-allow-headers: Content-Type
access-control-allow-origin: *
content-encoding: gzip
cache-control: private, s-maxage=0, max-age=600
set-cookie: X-AB=38b33afdb36f494aa03f175381ce5c1b;max-age=86400;expires=Fri, 19 Apr 2024 06:09:16 GMT;Path=/scevent.min.js;Secure;SameSite=None
x-cache: Miss from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: wFVP-ACug9kMGONQQhX_IpnmeFVlWlEPXgemAwMglycXmfkaJtHnog==
X-Firefox-Spdy: h2
|
|
| cdn.staticsoe.com/uploads/61353/cart/resources/20240105/77287b03262c5f36972b4d772a5d4858.jpg | 104.18.169.76 | 200 OK | 112 kB |
URL GET HTTP/2cdn.staticsoe.com/uploads/61353/cart/resources/20240105/77287b03262c5f36972b4d772a5d4858.jpg IP104.18.169.76:443
Requested byhttps://4f-onlineshop.com/ CertificateIssuerCloudflare, Inc. Subjectcdn.staticsoe.com Fingerprint81:12:7B:A0:28:A4:6D:E5:44:00:F3:A3:14:8C:B8:2C:42:34:DA:CD ValidityWed, 14 Feb 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1000x200, components 3 Size112 kB (112549 bytes) Hashc8c820a4c0b08f5ac19513b8fd2e0c75 61406cef065021393ffcaeef79b44b6495b8e8d8 863014270e470fda452a889b82b82447b47eab1615190d8c9197bc15d01bf87c
GET /uploads/61353/cart/resources/20240105/77287b03262c5f36972b4d772a5d4858.jpg HTTP/1.1
Host: cdn.staticsoe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4f-onlineshop.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 06:09:16 GMT
content-type: image/jpeg
content-length: 112549
cf-bgj: h2pri
content-md5: yMggpMCwj1rBlRO4/S4MdQ==
etag: "C8C820A4C0B08F5AC19513B8FD2E0C75"
last-modified: Fri, 05 Jan 2024 08:29:53 GMT
vary: Origin, Accept-Encoding
x-oss-hash-crc64ecma: 3546909521613634464
x-oss-object-type: Normal
x-oss-request-id: 661CB4D390AF513237A16DC2
x-oss-server-time: 53
x-oss-storage-class: Standard
cf-cache-status: REVALIDATED
expires: Fri, 26 Apr 2024 06:09:16 GMT
cache-control: public, max-age=691200
accept-ranges: bytes
server: cloudflare
cf-ray: 87627c2e5a2d56a5-OSL
X-Firefox-Spdy: h2
|
|
| 4f-onlineshop.com/app-assets/searchbox/61353/index.js?var=1703576531 | 104.16.198.133 | 200 OK | 30 kB |
URL GET HTTP/24f-onlineshop.com/app-assets/searchbox/61353/index.js?var=1703576531 IP104.16.198.133:443
Requested byhttps://4f-onlineshop.com/ CertificateIssuerGoogle Trust Services LLC Subject4f-onlineshop.com Fingerprint47:CC:0D:E1:A0:25:7F:A2:83:8B:12:C7:49:BC:5B:FB:B3:69:3E:16 ValiditySat, 16 Mar 2024 13:58:38 GMT - Fri, 14 Jun 2024 13:58:37 GMT
File typegzip compressed data, from Unix Hash9e4ede2fca7fdfaebac39619e02c434f 6bfd04ea2a8aaa878ec717eb75dcac632e96ef5f aa52610af14b21c70db13ca2130c8fb571f552c7ab38722b1dcec757cd30e10d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /app-assets/searchbox/61353/index.js?var=1703576531 HTTP/1.1
Host: 4f-onlineshop.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4f-onlineshop.com/
DNT: 1
Connection: keep-alive
Cookie: _fbs_fbp=fb.1.1713420555809.1616014724; oemsaas_global_visit_id=CC9249FA-8468-E1F2-3793-C32D1488D069; oemsaas_checkout_visit_id=318D8D4C-6DF2-7DDC-5D0B-F60785690063; oemsaas_global_visit_session=DE56FC3E-C4B7-E7FE-E476-886BEF3A5610; utm_source=direct; utm_medium=default; order_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1713420555%2C%22expire_time%22%3A1716012555%7D%5D; landing_page=aHR0cHM6Ly80Zi1vbmxpbmVzaG9wLmNvbS8%3D; oemsaas_keep_alive=001A17CA-59CA-F666-7705-118B770F729D; first_http_referer=null; PHPSESSID=dfc8e5fa9182a96036eed8fc4f8cbcf3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 06:09:16 GMT
content-type: application/javascript
vary: Accept-Encoding, Origin
x-oss-request-id: 6620B90C5A7C843233F7EBF1
last-modified: Wed, 17 Apr 2024 03:05:21 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 12146041782393094799
x-oss-storage-class: Standard
cache-control: public, max-age=14400
x-oss-ec: 0048-00000113
content-disposition: attachment
x-oss-force-download: true
content-md5: riIr/dm3jm5Wi/Dd5gcl7A==
x-oss-server-time: 2
content-encoding: gzip
cf-cache-status: MISS
expires: Thu, 18 Apr 2024 10:09:16 GMT
server: cloudflare
cf-ray: 87627c2e0b29b4fa-OSL
X-Firefox-Spdy: h2
|
|
| cdn.staticsoe.com/uploads/61353/cart/resources/20231027/d824ccda1f5d2aabdeaf4008c56e2762.png?x-oss-process=image/resize,m_lfit,w_130 | 104.18.169.76 | 200 OK | 2.0 kB |
URL GET HTTP/2cdn.staticsoe.com/uploads/61353/cart/resources/20231027/d824ccda1f5d2aabdeaf4008c56e2762.png?x-oss-process=image/resize,m_lfit,w_130 IP104.18.169.76:443
Requested byhttps://4f-onlineshop.com/ CertificateIssuerCloudflare, Inc. Subjectcdn.staticsoe.com Fingerprint81:12:7B:A0:28:A4:6D:E5:44:00:F3:A3:14:8C:B8:2C:42:34:DA:CD ValidityWed, 14 Feb 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typePNG image data, 130 x 63, 8-bit/color RGBA, non-interlaced Hash202449ad6d22b988be03ac1e51076b99 4de889ab5a68933bac9da936150a182ef8630ead c25d61559506af3229815df770a769a854b50129e35e28a029050b060367eb62
GET /uploads/61353/cart/resources/20231027/d824ccda1f5d2aabdeaf4008c56e2762.png?x-oss-process=image/resize,m_lfit,w_130 HTTP/1.1
Host: cdn.staticsoe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4f-onlineshop.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 06:09:17 GMT
content-type: image/png
content-length: 2010
x-oss-request-id: 661E06585EDFF633314B74F2
vary: Origin, Accept-Encoding
etag: "D358C2728D38B73D0785B2193560965F"
last-modified: Fri, 27 Oct 2023 03:26:25 GMT
x-oss-object-type: Normal
x-oss-storage-class: Standard
x-oss-server-time: 7
x-oss-hash-crc64ecma: 10212587430769639730
cf-cache-status: REVALIDATED
expires: Fri, 26 Apr 2024 06:09:17 GMT
cache-control: public, max-age=691200
accept-ranges: bytes
server: cloudflare
cf-ray: 87627c360bca56a5-OSL
X-Firefox-Spdy: h2
|
|
| 4f-onlineshop.com/app-api/searchbox/61353/front/config | 104.16.198.133 | 200 OK | 155 kB |
URL GET HTTP/24f-onlineshop.com/app-api/searchbox/61353/front/config IP104.16.198.133:443
Requested byhttps://4f-onlineshop.com/ CertificateIssuerGoogle Trust Services LLC Subject4f-onlineshop.com Fingerprint47:CC:0D:E1:A0:25:7F:A2:83:8B:12:C7:49:BC:5B:FB:B3:69:3E:16 ValiditySat, 16 Mar 2024 13:58:38 GMT - Fri, 14 Jun 2024 13:58:37 GMT
File typegzip compressed data, from Unix Size155 kB (155326 bytes) Hash140a5affabb76bc115bb00dfd4db7ab4 6099061fe0037133542cb7e97bb6c02486807901 0ee7db9b0d7c7992f4759f5c89c665ed841eead94e4d5b698f263cfcdce01338
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /app-api/searchbox/61353/front/config HTTP/1.1
Host: 4f-onlineshop.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4f-onlineshop.com/
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: _fbs_fbp=fb.1.1713420555809.1616014724; oemsaas_global_visit_id=CC9249FA-8468-E1F2-3793-C32D1488D069; oemsaas_checkout_visit_id=318D8D4C-6DF2-7DDC-5D0B-F60785690063; oemsaas_global_visit_session=DE56FC3E-C4B7-E7FE-E476-886BEF3A5610; utm_source=direct; utm_medium=default; order_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1713420555%2C%22expire_time%22%3A1716012555%7D%5D; landing_page=aHR0cHM6Ly80Zi1vbmxpbmVzaG9wLmNvbS8%3D; oemsaas_keep_alive=001A17CA-59CA-F666-7705-118B770F729D; first_http_referer=null; PHPSESSID=dfc8e5fa9182a96036eed8fc4f8cbcf3; oemcart_client_user_agent=Mozilla%252F5.0%2520(X11%253B%2520Linux%2520x86_64%253B%2520rv%253A96.0)%2520Gecko%252F20100101%2520Firefox%252F96.0; oemcart_client_pre_url=; oemcart_client_timezone=Etc%252FUTC; oemcart_client_screen_size=1280X1024; oemcart_client_broswer_language=en-US; oemcart_client_viewport_size=1280X1024; oemcart_client_broswer_date_time=2024-04-18%2006%3A09%3A16; _scid=ebfcf4e0-6c9f-4782-8731-c678a6daa7a4; _scid_r=ebfcf4e0-6c9f-4782-8731-c678a6daa7a4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 06:09:17 GMT
content-type: application/json; charset=utf-8
x-trace-id: 2C3E5AE3-D806-374C-1482-635047DCC877
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-max-age: 1800
access-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS
access-control-allow-headers: *
access-control-request-headers: *
access-control-expose-headers: *
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 87627c32f9c2b4fa-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| cdn.staticsoe.com/uploads/61353/cart/resources/20231025/3076DE5A-9D41-26FA-D522-2AAE07A6C6CC.webp | 104.18.169.76 | 200 OK | 59 kB |
URL GET HTTP/2cdn.staticsoe.com/uploads/61353/cart/resources/20231025/3076DE5A-9D41-26FA-D522-2AAE07A6C6CC.webp IP104.18.169.76:443
Requested byhttps://4f-onlineshop.com/ CertificateIssuerCloudflare, Inc. Subjectcdn.staticsoe.com Fingerprint81:12:7B:A0:28:A4:6D:E5:44:00:F3:A3:14:8C:B8:2C:42:34:DA:CD ValidityWed, 14 Feb 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 1200x1600, Scaling: [none]x[none], YUV color, decoders should clamp Hashce01a02635dba880fcf88d387b332310 84ba4603f41949f732395faf207c338031d6cfe2 df96d78981c6a82a9927b641909920097b3610c9290de1a960659ce75f840d34
GET /uploads/61353/cart/resources/20231025/3076DE5A-9D41-26FA-D522-2AAE07A6C6CC.webp HTTP/1.1
Host: cdn.staticsoe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4f-onlineshop.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 06:09:18 GMT
content-type: image/webp
content-length: 59110
x-oss-request-id: 6614CBC75EDFF63330A1354E
vary: Origin, Accept-Encoding
etag: "CE01A02635DBA880FCF88D387B332310"
last-modified: Wed, 25 Oct 2023 10:17:11 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 7015334483528113473
x-oss-storage-class: Standard
content-md5: zgGgJjXbqID8+I04ezMjEA==
x-oss-server-time: 103
cf-cache-status: MISS
expires: Fri, 26 Apr 2024 06:09:18 GMT
cache-control: public, max-age=691200
accept-ranges: bytes
server: cloudflare
cf-ray: 87627c360bc856a5-OSL
X-Firefox-Spdy: h2
|
|
| cdn.staticsoe.com/uploads/61353/cart/resources/20231025/D19D7256-6CAE-C90C-F623-F6C0B5F60DB9.webp | 104.18.169.76 | 200 OK | 100 kB |
URL GET HTTP/2cdn.staticsoe.com/uploads/61353/cart/resources/20231025/D19D7256-6CAE-C90C-F623-F6C0B5F60DB9.webp IP104.18.169.76:443
Requested byhttps://4f-onlineshop.com/ CertificateIssuerCloudflare, Inc. Subjectcdn.staticsoe.com Fingerprint81:12:7B:A0:28:A4:6D:E5:44:00:F3:A3:14:8C:B8:2C:42:34:DA:CD ValidityWed, 14 Feb 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 1200x1600, Scaling: [none]x[none], YUV color, decoders should clamp Size100 kB (100028 bytes) Hashab7d517716db634e038ea85489b65eed c2a1deae6afc32f811b40e92df7ca86ac31f9532 38d3bbc96c68e2e34f5eedb57614d8fbe25da3f2f3f88dbabb93b16b993f8dbb
GET /uploads/61353/cart/resources/20231025/D19D7256-6CAE-C90C-F623-F6C0B5F60DB9.webp HTTP/1.1
Host: cdn.staticsoe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4f-onlineshop.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 06:09:18 GMT
content-type: image/webp
content-length: 100028
x-oss-request-id: 661E065976EC4B3738B9B81B
vary: Origin, Accept-Encoding
etag: "AB7D517716DB634E038EA85489B65EED"
last-modified: Wed, 25 Oct 2023 10:17:23 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 12250360979182194297
x-oss-storage-class: Standard
content-md5: q31RdxbbY04DjqhUibZe7Q==
x-oss-server-time: 32
cf-cache-status: REVALIDATED
expires: Fri, 26 Apr 2024 06:09:18 GMT
cache-control: public, max-age=691200
accept-ranges: bytes
server: cloudflare
cf-ray: 87627c361bd656a5-OSL
X-Firefox-Spdy: h2
|
|
| cdn.staticsoe.com/uploads/61353/cart/resources/20231025/A58A3D93-8854-30E6-8D09-869F264120DA.webp | 104.18.169.76 | 200 OK | 72 kB |
URL GET HTTP/2cdn.staticsoe.com/uploads/61353/cart/resources/20231025/A58A3D93-8854-30E6-8D09-869F264120DA.webp IP104.18.169.76:443
Requested byhttps://4f-onlineshop.com/ CertificateIssuerCloudflare, Inc. Subjectcdn.staticsoe.com Fingerprint81:12:7B:A0:28:A4:6D:E5:44:00:F3:A3:14:8C:B8:2C:42:34:DA:CD ValidityWed, 14 Feb 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 1200x1600, Scaling: [none]x[none], YUV color, decoders should clamp Hash29781ea5e42860012d5d595305e4c66c b09d852e0fac45dbb7a346eeda486d93c4a8003c 5e1dcd6c3fd7f32f2e6067402ac47c969f737bef8cbcc6f0a4b0062e1cd1b298
GET /uploads/61353/cart/resources/20231025/A58A3D93-8854-30E6-8D09-869F264120DA.webp HTTP/1.1
Host: cdn.staticsoe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4f-onlineshop.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 06:09:18 GMT
content-type: image/webp
content-length: 71684
x-oss-request-id: 6614CBC7C3F24535326CFB6A
vary: Origin, Accept-Encoding
etag: "29781EA5E42860012D5D595305E4C66C"
last-modified: Wed, 25 Oct 2023 10:17:10 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 9520531100170390138
x-oss-storage-class: Standard
content-md5: KXgepeQoYAEtXVlTBeTGbA==
x-oss-server-time: 76
cf-cache-status: MISS
expires: Fri, 26 Apr 2024 06:09:18 GMT
cache-control: public, max-age=691200
accept-ranges: bytes
server: cloudflare
cf-ray: 87627c360bce56a5-OSL
X-Firefox-Spdy: h2
|
|
| 4f-onlineshop.com/app-api/recentproductbrowsetool/61353/products?visit_id=604ddff613c2028eb4333370a78304f4 | 104.16.198.133 | 200 OK | 2.3 kB |
URL GET HTTP/24f-onlineshop.com/app-api/recentproductbrowsetool/61353/products?visit_id=604ddff613c2028eb4333370a78304f4 IP104.16.198.133:443
Requested byhttps://4f-onlineshop.com/ CertificateIssuerGoogle Trust Services LLC Subject4f-onlineshop.com Fingerprint47:CC:0D:E1:A0:25:7F:A2:83:8B:12:C7:49:BC:5B:FB:B3:69:3E:16 ValiditySat, 16 Mar 2024 13:58:38 GMT - Fri, 14 Jun 2024 13:58:37 GMT
File typegzip compressed data, from Unix Hash5c9fdd4bcc932f947da4e3e09cb1def6 5e9c96cdd4024621ad18ded296930212d1251e5c e6c9fc5a47c289ccb06e3a055bbd8882e7c7b1e0f4b5071dcc29077faf76481c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /app-api/recentproductbrowsetool/61353/products?visit_id=604ddff613c2028eb4333370a78304f4 HTTP/1.1
Host: 4f-onlineshop.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4f-onlineshop.com/
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: _fbs_fbp=fb.1.1713420555809.1616014724; oemsaas_global_visit_id=CC9249FA-8468-E1F2-3793-C32D1488D069; oemsaas_checkout_visit_id=318D8D4C-6DF2-7DDC-5D0B-F60785690063; oemsaas_global_visit_session=DE56FC3E-C4B7-E7FE-E476-886BEF3A5610; utm_source=direct; utm_medium=default; order_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1713420555%2C%22expire_time%22%3A1716012555%7D%5D; landing_page=aHR0cHM6Ly80Zi1vbmxpbmVzaG9wLmNvbS8%3D; oemsaas_keep_alive=001A17CA-59CA-F666-7705-118B770F729D; first_http_referer=null; PHPSESSID=dfc8e5fa9182a96036eed8fc4f8cbcf3; oemcart_client_user_agent=Mozilla%252F5.0%2520(X11%253B%2520Linux%2520x86_64%253B%2520rv%253A96.0)%2520Gecko%252F20100101%2520Firefox%252F96.0; oemcart_client_pre_url=; oemcart_client_timezone=Etc%252FUTC; oemcart_client_screen_size=1280X1024; oemcart_client_broswer_language=en-US; oemcart_client_viewport_size=1280X1024; oemcart_client_broswer_date_time=2024-04-18%2006%3A09%3A16; _scid=ebfcf4e0-6c9f-4782-8731-c678a6daa7a4; _scid_r=ebfcf4e0-6c9f-4782-8731-c678a6daa7a4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 06:09:17 GMT
content-type: application/json; charset=utf-8
x-trace-id: 9955A131-B8AD-DE8B-C8D3-290851669D8F
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-max-age: 1800
access-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS
access-control-allow-headers: *
access-control-request-headers: *
access-control-expose-headers: *
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 87627c35cd46b4fa-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| cdn.staticsoe.com/uploads/61353/cart/resources/20231025/60A6D948-8375-A133-8E87-BF6996967418.webp | 104.18.169.76 | 200 OK | 94 kB |
URL GET HTTP/2cdn.staticsoe.com/uploads/61353/cart/resources/20231025/60A6D948-8375-A133-8E87-BF6996967418.webp IP104.18.169.76:443
Requested byhttps://4f-onlineshop.com/ CertificateIssuerCloudflare, Inc. Subjectcdn.staticsoe.com Fingerprint81:12:7B:A0:28:A4:6D:E5:44:00:F3:A3:14:8C:B8:2C:42:34:DA:CD ValidityWed, 14 Feb 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 1200x1600, Scaling: [none]x[none], YUV color, decoders should clamp Hashff15f7fcfd6b2ae71e6cc1d9177a02f5 4898b23739186e4c86f01f4c486d006e15b5440d 14d40adc28c68e0c5125748d1a1382929e4a71e39e18be0dc2736308a85db502
GET /uploads/61353/cart/resources/20231025/60A6D948-8375-A133-8E87-BF6996967418.webp HTTP/1.1
Host: cdn.staticsoe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4f-onlineshop.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 06:09:18 GMT
content-type: image/webp
content-length: 93920
x-oss-request-id: 6620B90D8BAF6733373E2C6B
vary: Origin, Accept-Encoding
etag: "FF15F7FCFD6B2AE71E6CC1D9177A02F5"
last-modified: Wed, 25 Oct 2023 10:17:17 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 12927719686473964969
x-oss-storage-class: Standard
content-md5: /xX3/P1rKucebMHZF3oC9Q==
x-oss-server-time: 79
cf-cache-status: MISS
expires: Fri, 26 Apr 2024 06:09:18 GMT
cache-control: public, max-age=691200
accept-ranges: bytes
server: cloudflare
cf-ray: 87627c361bdc56a5-OSL
X-Firefox-Spdy: h2
|
|
| 4f-onlineshop.com/app-api/trusttool/61353/config?&route=index/index | 104.16.198.133 | 200 OK | 3.1 kB |
URL GET HTTP/24f-onlineshop.com/app-api/trusttool/61353/config?&route=index/index IP104.16.198.133:443
Requested byhttps://4f-onlineshop.com/ CertificateIssuerGoogle Trust Services LLC Subject4f-onlineshop.com Fingerprint47:CC:0D:E1:A0:25:7F:A2:83:8B:12:C7:49:BC:5B:FB:B3:69:3E:16 ValiditySat, 16 Mar 2024 13:58:38 GMT - Fri, 14 Jun 2024 13:58:37 GMT
File typegzip compressed data, from Unix Hash44b2a1c0379d48caa99d0c610c1b5d7b e9eb26e1d09d2bd5614013581adef940631bd23c 885615a7389ef61a5dabe26e465599c0bb8dd4f0d66849cc62f6ef74cebc130e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /app-api/trusttool/61353/config?&route=index/index HTTP/1.1
Host: 4f-onlineshop.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4f-onlineshop.com/
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: _fbs_fbp=fb.1.1713420555809.1616014724; oemsaas_global_visit_id=CC9249FA-8468-E1F2-3793-C32D1488D069; oemsaas_checkout_visit_id=318D8D4C-6DF2-7DDC-5D0B-F60785690063; oemsaas_global_visit_session=DE56FC3E-C4B7-E7FE-E476-886BEF3A5610; utm_source=direct; utm_medium=default; order_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1713420555%2C%22expire_time%22%3A1716012555%7D%5D; landing_page=aHR0cHM6Ly80Zi1vbmxpbmVzaG9wLmNvbS8%3D; oemsaas_keep_alive=001A17CA-59CA-F666-7705-118B770F729D; first_http_referer=null; PHPSESSID=dfc8e5fa9182a96036eed8fc4f8cbcf3; oemcart_client_user_agent=Mozilla%252F5.0%2520(X11%253B%2520Linux%2520x86_64%253B%2520rv%253A96.0)%2520Gecko%252F20100101%2520Firefox%252F96.0; oemcart_client_pre_url=; oemcart_client_timezone=Etc%252FUTC; oemcart_client_screen_size=1280X1024; oemcart_client_broswer_language=en-US; oemcart_client_viewport_size=1280X1024; oemcart_client_broswer_date_time=2024-04-18%2006%3A09%3A16; _scid=ebfcf4e0-6c9f-4782-8731-c678a6daa7a4; _scid_r=ebfcf4e0-6c9f-4782-8731-c678a6daa7a4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 06:09:17 GMT
content-type: application/json; charset=utf-8
x-trace-id: 4A4C0B30-47BD-804E-5654-DE17EB68CE74
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-max-age: 1800
access-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS
access-control-allow-headers: *
access-control-request-headers: *
access-control-expose-headers: *
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 87627c34cc17b4fa-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| cdn.staticsoe.com/uploads/61353/cart/resources/20231206/61353_4647d06ee552dde6979165c97fab5d74.jpg | 104.18.169.76 | 200 OK | 74 kB |
URL GET HTTP/2cdn.staticsoe.com/uploads/61353/cart/resources/20231206/61353_4647d06ee552dde6979165c97fab5d74.jpg IP104.18.169.76:443
Requested byhttps://4f-onlineshop.com/ CertificateIssuerCloudflare, Inc. Subjectcdn.staticsoe.com Fingerprint81:12:7B:A0:28:A4:6D:E5:44:00:F3:A3:14:8C:B8:2C:42:34:DA:CD ValidityWed, 14 Feb 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 688x448, components 3 Hashfaeb0375cbf723d696836d34ab6b7cc5 e877824578c0709d19878ea3c515b06d266b13d6 a3c43de3a5a48d15f73eac0bc7b64ac5b170183d6c826e9e4fe0cc19991ec5e8
GET /uploads/61353/cart/resources/20231206/61353_4647d06ee552dde6979165c97fab5d74.jpg HTTP/1.1
Host: cdn.staticsoe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4f-onlineshop.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 06:09:18 GMT
content-type: image/jpeg
content-length: 73531
cf-bgj: h2pri
content-md5: +usDdcv3I9aWg200q2t8xQ==
etag: "FAEB0375CBF723D696836D34AB6B7CC5"
last-modified: Wed, 06 Dec 2023 02:59:20 GMT
vary: Origin, Accept-Encoding
x-oss-hash-crc64ecma: 475658653454908626
x-oss-object-type: Normal
x-oss-request-id: 660B30FF9979C73331450D50
x-oss-server-time: 120
x-oss-storage-class: Standard
cf-cache-status: MISS
expires: Fri, 26 Apr 2024 06:09:18 GMT
cache-control: public, max-age=691200
accept-ranges: bytes
server: cloudflare
cf-ray: 87627c38bf4b56a5-OSL
X-Firefox-Spdy: h2
|
|
| cdn.staticsoe.com/uploads/61353/cart/resources/20231027/61353_03bca9f8ed4e264769167decfa93cff2.png | 104.18.169.76 | 200 OK | 2.8 kB |
URL GET HTTP/2cdn.staticsoe.com/uploads/61353/cart/resources/20231027/61353_03bca9f8ed4e264769167decfa93cff2.png IP104.18.169.76:443
Requested byhttps://4f-onlineshop.com/ CertificateIssuerCloudflare, Inc. Subjectcdn.staticsoe.com Fingerprint81:12:7B:A0:28:A4:6D:E5:44:00:F3:A3:14:8C:B8:2C:42:34:DA:CD ValidityWed, 14 Feb 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typePNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced Hash0fc5a56b308fed7bbfe73c6cbf4b9af5 08d3cc02c5f2b773ff921f1c53cd2ee672082f72 65eba46b9e65d70840938828dd2871058f1cb31cfc1cf73e2b7ffe8eacd7886b
GET /uploads/61353/cart/resources/20231027/61353_03bca9f8ed4e264769167decfa93cff2.png HTTP/1.1
Host: cdn.staticsoe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4f-onlineshop.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 06:09:18 GMT
content-type: image/png
content-length: 2786
x-oss-request-id: 6557739B8083E737353E4066
vary: Origin, Accept-Encoding
etag: "0FC5A56B308FED7BBFE73C6CBF4B9AF5"
last-modified: Fri, 27 Oct 2023 06:10:04 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 952959149060134187
x-oss-storage-class: Standard
content-md5: D8WlazCP7Xu/5zxsv0ua9Q==
x-oss-server-time: 37
cf-cache-status: HIT
expires: Fri, 26 Apr 2024 06:09:18 GMT
cache-control: public, max-age=691200
accept-ranges: bytes
server: cloudflare
cf-ray: 87627c3b6aa356a5-OSL
X-Firefox-Spdy: h2
|
|
| www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.TpYxICw8iG4.L.F4.O/am=wA/d=0/rs=AN8SPfpVjmduEbJeaKDPJmqpx8swJVpW8A/m=el_main_css | 142.250.74.35 | 200 OK | 4.0 kB |
URL GET HTTP/2www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.TpYxICw8iG4.L.F4.O/am=wA/d=0/rs=AN8SPfpVjmduEbJeaKDPJmqpx8swJVpW8A/m=el_main_css IP142.250.74.35:443
Requested byhttps://4f-onlineshop.com/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typeASCII text, with very long lines (20367), with no line terminators Hash72d3a735ccca1027f6b3afba2c93e3a7 67f8eff8d17334c59c28fc1753bf451527c7490d c8c845f55e2346b89894ce0df8185ee182359e096bf29987d5cf1f8a7391bef1
GET /_/translate_http/_/ss/k=translate_http.tr.TpYxICw8iG4.L.F4.O/am=wA/d=0/rs=AN8SPfpVjmduEbJeaKDPJmqpx8swJVpW8A/m=el_main_css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4f-onlineshop.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 3960
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 02:44:30 GMT
expires: Fri, 18 Apr 2025 02:44:30 GMT
cache-control: public, max-age=31536000
age: 12288
last-modified: Sat, 15 Jul 2023 01:09:03 GMT
content-type: text/css; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| cdn.staticsoe.com/uploads/61353/cart/resources/20240105/172da11f95475d6b1c20c807c330cf55.jpg?x-oss-process=image/resize,m_lfit,w_1920 | 104.18.169.76 | 200 OK | 292 kB |
URL GET HTTP/2cdn.staticsoe.com/uploads/61353/cart/resources/20240105/172da11f95475d6b1c20c807c330cf55.jpg?x-oss-process=image/resize,m_lfit,w_1920 IP104.18.169.76:443
Requested byhttps://4f-onlineshop.com/ CertificateIssuerCloudflare, Inc. Subjectcdn.staticsoe.com Fingerprint81:12:7B:A0:28:A4:6D:E5:44:00:F3:A3:14:8C:B8:2C:42:34:DA:CD ValidityWed, 14 Feb 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1920x630, components 3 Size292 kB (291450 bytes) Hashd9c38c9f654a2b8a5b52b820e9b319a1 a88aea433da2fc243dcf3c8eb5b3bb96578ac562 96b20062f1ed094bb9cefbefd30f8739b10d1123fd84bbf29ce787ca26cf1a1e
GET /uploads/61353/cart/resources/20240105/172da11f95475d6b1c20c807c330cf55.jpg?x-oss-process=image/resize,m_lfit,w_1920 HTTP/1.1
Host: cdn.staticsoe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4f-onlineshop.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 06:09:18 GMT
content-type: image/jpeg
content-length: 291450
x-oss-request-id: 6620B90E9EAA1A3437C26643
vary: Origin, Accept-Encoding
etag: "2B1DC3FC9003FFE5D4AB59BAB019E765"
last-modified: Fri, 05 Jan 2024 08:09:12 GMT
x-oss-object-type: Normal
x-oss-storage-class: Standard
x-oss-server-time: 130
x-oss-hash-crc64ecma: 17771640114148012585
cf-cache-status: MISS
expires: Fri, 26 Apr 2024 06:09:18 GMT
cache-control: public, max-age=691200
accept-ranges: bytes
server: cloudflare
cf-ray: 87627c361bd256a5-OSL
X-Firefox-Spdy: h2
|
|
| cdn.staticsoe.com/uploads/0/theme/default/assets/collect.js?v=96afd8ae933a668f3daf26bd95bc95a6 | 104.18.169.76 | 200 OK | 7.8 kB |
URL GET HTTP/2cdn.staticsoe.com/uploads/0/theme/default/assets/collect.js?v=96afd8ae933a668f3daf26bd95bc95a6 IP104.18.169.76:443
Requested byhttps://4f-onlineshop.com/ CertificateIssuerCloudflare, Inc. Subjectcdn.staticsoe.com Fingerprint81:12:7B:A0:28:A4:6D:E5:44:00:F3:A3:14:8C:B8:2C:42:34:DA:CD ValidityWed, 14 Feb 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeJavaScript source, Unicode text, UTF-8 text Hash96afd8ae933a668f3daf26bd95bc95a6 4285b6fe54816e3e60f8effc0b396ce1b9848868 5f2c27fd8ce921c5c8663ea491139714306effb9f081505dc5bd09b1de7ce568
GET /uploads/0/theme/default/assets/collect.js?v=96afd8ae933a668f3daf26bd95bc95a6 HTTP/1.1
Host: cdn.staticsoe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4f-onlineshop.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 06:09:16 GMT
content-type: application/javascript
vary: Accept-Encoding, Origin
x-oss-request-id: 661F9E369979C733391343F2
last-modified: Wed, 17 Apr 2024 07:16:50 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 16609357670485251830
x-oss-storage-class: Standard
content-md5: lq/YrpM6Zo89rya9lbyVpg==
x-oss-server-time: 3
cf-cache-status: HIT
age: 42945
expires: Fri, 26 Apr 2024 06:09:16 GMT
cache-control: public, max-age=691200
server: cloudflare
cf-ray: 87627c2e5a3056a5-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.wfkJqv-YmvI.O/am=AAQ/d=1/exm=el_conf/ed=1/rs=AN8SPfpW4EzCeOQOHOPHE_Ws17GobuT70A/m=el_main | 142.250.74.138 | 200 OK | 74 kB |
URL GET HTTP/2translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.wfkJqv-YmvI.O/am=AAQ/d=1/exm=el_conf/ed=1/rs=AN8SPfpW4EzCeOQOHOPHE_Ws17GobuT70A/m=el_main IP142.250.74.138:443
Requested byhttps://4f-onlineshop.com/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT
File typeJavaScript source, ASCII text, with very long lines (2333) Hash4bb91f7d3340c67fbc422fe923cb4ce4 aa81f4daf848d66f92f853be4bb57333694b2712 2244a4c055184acc3ee54d04f44cde9f71829b12a6adc7ad0956e76eb48c072a
GET /_/translate_http/_/js/k=translate_http.tr.no.wfkJqv-YmvI.O/am=AAQ/d=1/exm=el_conf/ed=1/rs=AN8SPfpW4EzCeOQOHOPHE_Ws17GobuT70A/m=el_main HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4f-onlineshop.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 73503
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 17 Apr 2024 17:19:39 GMT
expires: Thu, 17 Apr 2025 17:19:39 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 16 Apr 2024 02:24:49 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 46180
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg | 142.250.74.163 | 200 OK | 3.3 kB |
URL GET HTTP/3fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg IP142.250.74.163:443
Requested byhttps://4f-onlineshop.com/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typeSVG Scalable Vector Graphics image Hash2bd5c073a88b83ed74db88282a56ddfb d0ebfc376f8c6a44a8d4cd216817dcd7d0c33650 ab5c23a05e39deed14d9d8262b0dce9f024f86105a27196cad37d14a3f516e09
GET /s/i/productlogos/translate/v14/24px.svg HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4f-onlineshop.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
content-length: 3340
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 16 Apr 2024 01:43:59 GMT
expires: Wed, 16 Apr 2025 01:43:59 GMT
cache-control: public, max-age=31536000
age: 188720
last-modified: Wed, 20 Apr 2022 14:24:23 GMT
content-type: image/svg+xml
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 4f-onlineshop.com/app-assets/recentproductbrowsetool/61353/index.js?var=1702031713 | 104.16.198.133 | 200 OK | 42 kB |
URL GET HTTP/24f-onlineshop.com/app-assets/recentproductbrowsetool/61353/index.js?var=1702031713 IP104.16.198.133:443
Requested byhttps://4f-onlineshop.com/ CertificateIssuerGoogle Trust Services LLC Subject4f-onlineshop.com Fingerprint47:CC:0D:E1:A0:25:7F:A2:83:8B:12:C7:49:BC:5B:FB:B3:69:3E:16 ValiditySat, 16 Mar 2024 13:58:38 GMT - Fri, 14 Jun 2024 13:58:37 GMT
File typegzip compressed data, from Unix Hashcc92b8e18eddafec3d6889f3959dd7ad 217ca5426a405deed428193ee09f4001ba0f9083 daf1dd8d80d20d43b7f5b99cdfa2efe2f4059154a87fa20fa3b9297b2f0d97bb
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /app-assets/recentproductbrowsetool/61353/index.js?var=1702031713 HTTP/1.1
Host: 4f-onlineshop.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4f-onlineshop.com/
DNT: 1
Connection: keep-alive
Cookie: _fbs_fbp=fb.1.1713420555809.1616014724; oemsaas_global_visit_id=CC9249FA-8468-E1F2-3793-C32D1488D069; oemsaas_checkout_visit_id=318D8D4C-6DF2-7DDC-5D0B-F60785690063; oemsaas_global_visit_session=DE56FC3E-C4B7-E7FE-E476-886BEF3A5610; utm_source=direct; utm_medium=default; order_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1713420555%2C%22expire_time%22%3A1716012555%7D%5D; landing_page=aHR0cHM6Ly80Zi1vbmxpbmVzaG9wLmNvbS8%3D; oemsaas_keep_alive=001A17CA-59CA-F666-7705-118B770F729D; first_http_referer=null; PHPSESSID=dfc8e5fa9182a96036eed8fc4f8cbcf3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 06:09:17 GMT
content-type: application/javascript
vary: Accept-Encoding, Origin
x-oss-request-id: 6620B90C00F3E03739839B64
last-modified: Wed, 17 Apr 2024 03:05:21 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 17129252221536811924
x-oss-storage-class: Standard
cache-control: public, max-age=14400
x-oss-ec: 0048-00000113
content-disposition: attachment
x-oss-force-download: true
content-md5: pB85SzGASEgb1nR1stZlVg==
x-oss-server-time: 6
content-encoding: gzip
cf-cache-status: MISS
expires: Thu, 18 Apr 2024 10:09:17 GMT
server: cloudflare
cf-ray: 87627c2e0b27b4fa-OSL
X-Firefox-Spdy: h2
|
|
| cdn.staticsoe.com/uploads/0/theme/default/assets/theme.css?v=66eda0dd6672bd051feb0d39b9f9197e | 104.18.169.76 | 200 OK | 20 kB |
URL GET HTTP/2cdn.staticsoe.com/uploads/0/theme/default/assets/theme.css?v=66eda0dd6672bd051feb0d39b9f9197e IP104.18.169.76:443
Requested byhttps://4f-onlineshop.com/ CertificateIssuerCloudflare, Inc. Subjectcdn.staticsoe.com Fingerprint81:12:7B:A0:28:A4:6D:E5:44:00:F3:A3:14:8C:B8:2C:42:34:DA:CD ValidityWed, 14 Feb 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
Hash66eda0dd6672bd051feb0d39b9f9197e fce0d05f5389afdf45501d1ca44b13b4edbbd1e6 ccfdc21df473396a2dd78496fd4c04b5703ab0f516959898c75cdeb668c2c97f
GET /uploads/0/theme/default/assets/theme.css?v=66eda0dd6672bd051feb0d39b9f9197e HTTP/1.1
Host: cdn.staticsoe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4f-onlineshop.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 06:09:16 GMT
content-type: text/css
vary: Accept-Encoding, Origin
x-oss-request-id: 661F7B2E91795F38360AE909
last-modified: Wed, 17 Apr 2024 07:16:48 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 3603105492076268374
x-oss-storage-class: Standard
content-md5: Zu2g3WZyvQUf6w05ufkZfg==
x-oss-server-time: 2
cf-cache-status: HIT
age: 42945
expires: Fri, 26 Apr 2024 06:09:16 GMT
cache-control: public, max-age=691200
server: cloudflare
cf-ray: 87627c2e5a2556a5-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| cdn.staticsoe.com/statics/country/flag/pl.png | 104.18.169.76 | 200 OK | 319 B |
URL GET HTTP/2cdn.staticsoe.com/statics/country/flag/pl.png IP104.18.169.76:443
Requested byhttps://4f-onlineshop.com/ CertificateIssuerCloudflare, Inc. Subjectcdn.staticsoe.com Fingerprint81:12:7B:A0:28:A4:6D:E5:44:00:F3:A3:14:8C:B8:2C:42:34:DA:CD ValidityWed, 14 Feb 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typePNG image data, 128 x 128, 4-bit colormap, non-interlaced Hashcfd9291e629876037557722530ae6148 9a42c0cc5a94992dea0aa1a7584fd9b403702c1c 22706276ce07b6ade0d9c2c9765ee274d36ea2ea822eb8810b43c9e3d449a001
GET /statics/country/flag/pl.png HTTP/1.1
Host: cdn.staticsoe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4f-onlineshop.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 06:09:20 GMT
content-type: image/png
content-length: 319
x-oss-request-id: 654EE24D269C5632385B1EED
vary: Origin, Accept-Encoding
etag: "CFD9291E629876037557722530AE6148"
last-modified: Mon, 14 Feb 2022 07:59:45 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 15484148905490677633
x-oss-storage-class: Standard
content-md5: z9kpHmKYdgN1V3IlMK5hSA==
x-oss-server-time: 2
cf-cache-status: HIT
age: 42829
expires: Fri, 26 Apr 2024 06:09:20 GMT
cache-control: public, max-age=691200
accept-ranges: bytes
server: cloudflare
cf-ray: 87627c4759c156a5-OSL
X-Firefox-Spdy: h2
|
|
| cdn.staticsoe.com/statics/apps/static/recentsale-front/holiday_newyear_top.png | 104.18.169.76 | 200 OK | 3.1 kB |
URL GET HTTP/2cdn.staticsoe.com/statics/apps/static/recentsale-front/holiday_newyear_top.png IP104.18.169.76:443
Requested byhttps://4f-onlineshop.com/ CertificateIssuerCloudflare, Inc. Subjectcdn.staticsoe.com Fingerprint81:12:7B:A0:28:A4:6D:E5:44:00:F3:A3:14:8C:B8:2C:42:34:DA:CD ValidityWed, 14 Feb 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typePNG image data, 90 x 77, 8-bit/color RGBA, non-interlaced Hash7286a7d99640c7a1cbdb478cc819d434 ad40ccd3335dd149f936835cf56d02fe26253a82 0f96fe680793ca5c6825a92b5f7de30b1c8a5d35afc92f0379285f4b92a67c4c
GET /statics/apps/static/recentsale-front/holiday_newyear_top.png HTTP/1.1
Host: cdn.staticsoe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4f-onlineshop.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 06:09:20 GMT
content-type: image/png
content-length: 3086
x-oss-request-id: 65E1C8C676EC4B36374CADEB
vary: Origin, Accept-Encoding
etag: "7286A7D99640C7A1CBDB478CC819D434"
last-modified: Mon, 14 Feb 2022 07:59:32 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 4901823410734665154
x-oss-storage-class: Standard
content-md5: coan2ZZAx6HL20eMyBnUNA==
x-oss-server-time: 2
cf-cache-status: HIT
age: 5152
expires: Fri, 26 Apr 2024 06:09:20 GMT
cache-control: public, max-age=691200
accept-ranges: bytes
server: cloudflare
cf-ray: 87627c4769d756a5-OSL
X-Firefox-Spdy: h2
|
|
| at.alicdn.com/t/font_2997681_8jbkqwwojx3.woff2?t=1638950246505 |  47.246.44.250 | 200 OK | 684 B |
URL GET HTTP/2at.alicdn.com/t/font_2997681_8jbkqwwojx3.woff2?t=1638950246505 IP47.246.44.250:443 ASN#24429 Zhejiang Taobao Network Co.,Ltd
Requested byhttps://4f-onlineshop.com/ CertificateIssuerGlobalSign nv-sa Subject*.tbcdn.cn Fingerprint29:04:BE:E6:49:30:F7:DC:C0:BE:56:8F:B4:AC:24:9B:50:1A:F7:E2 ValidityTue, 26 Dec 2023 03:36:04 GMT - Tue, 30 Jul 2024 02:26:11 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 684, version 1.0 Hasha44567d08fff8b33f8de681e451a27cc ba48c72327db04232dc2d6a6e47772711fed68fd b9b719d1e524dddce10fc7c43e45114936dc1f30c5fcc11c309b9ca26acea3e3
GET /t/font_2997681_8jbkqwwojx3.woff2?t=1638950246505 HTTP/1.1
Host: at.alicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://4f-onlineshop.com
DNT: 1
Connection: keep-alive
Referer: https://4f-onlineshop.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: Tengine
content-type: font/woff2
content-length: 684
date: Thu, 18 Apr 2024 06:09:20 GMT
x-oss-request-id: 6620B910E84D243231660149
vary: Origin
accept-ranges: bytes
etag: "A44567D08FFF8B33F8DE681E451A27CC"
last-modified: Wed, 08 Dec 2021 07:57:26 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 15427969927471343633
x-oss-storage-class: Standard
cache-control: max-age=63072000
content-md5: pEVn0I//izP43mgeRRonzA==
x-oss-server-time: 1
ali-swift-global-savetime: 1713420561
via: cache16.l2de2[461,460,200-0,M], cache8.l2de2[462,0], ens-cache16.se2[484,483,200-0,M], ens-cache17.se2[485,0]
x-cache: MISS TCP_MISS dirn:-2:-2
x-swift-savetime: Thu, 18 Apr 2024 06:09:21 GMT
x-swift-cachetime: 31104000
access-control-allow-origin: *
timing-allow-origin: *
eagleid: 2ff62ca517134205605205667e
X-Firefox-Spdy: h2
|
|
| 4f-onlineshop.com/theme/default/assets/empty.png | 104.16.198.133 | 200 OK | 33 kB |
URL GET HTTP/24f-onlineshop.com/theme/default/assets/empty.png IP104.16.198.133:443
Requested byhttps://4f-onlineshop.com/ CertificateIssuerGoogle Trust Services LLC Subject4f-onlineshop.com Fingerprint47:CC:0D:E1:A0:25:7F:A2:83:8B:12:C7:49:BC:5B:FB:B3:69:3E:16 ValiditySat, 16 Mar 2024 13:58:38 GMT - Fri, 14 Jun 2024 13:58:37 GMT
File typePNG image data, 1020 x 1020, 8-bit/color RGBA, non-interlaced Hash8c5a3ab01981c42df5e31daee2e8b7b0 bbd4399a810d583f3446587692c556859149b98d f3de53bb61298cfd17f183f97dacd2c672b34665cbbe778070232ced85386e1c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /theme/default/assets/empty.png HTTP/1.1
Host: 4f-onlineshop.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4f-onlineshop.com/
DNT: 1
Connection: keep-alive
Cookie: _fbs_fbp=fb.1.1713420555809.1616014724; oemsaas_global_visit_id=CC9249FA-8468-E1F2-3793-C32D1488D069; oemsaas_checkout_visit_id=318D8D4C-6DF2-7DDC-5D0B-F60785690063; oemsaas_global_visit_session=DE56FC3E-C4B7-E7FE-E476-886BEF3A5610; utm_source=direct; utm_medium=default; order_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1713420555%2C%22expire_time%22%3A1716012555%7D%5D; landing_page=aHR0cHM6Ly80Zi1vbmxpbmVzaG9wLmNvbS8%3D; oemsaas_keep_alive=001A17CA-59CA-F666-7705-118B770F729D; first_http_referer=null; PHPSESSID=dfc8e5fa9182a96036eed8fc4f8cbcf3; oemcart_client_user_agent=Mozilla%252F5.0%2520(X11%253B%2520Linux%2520x86_64%253B%2520rv%253A96.0)%2520Gecko%252F20100101%2520Firefox%252F96.0; oemcart_client_pre_url=; oemcart_client_timezone=Etc%252FUTC; oemcart_client_screen_size=1280X1024; oemcart_client_broswer_language=en-US; oemcart_client_viewport_size=1280X1024; oemcart_client_broswer_date_time=2024-04-18%2006%3A09%3A16; _scid=ebfcf4e0-6c9f-4782-8731-c678a6daa7a4; _scid_r=ebfcf4e0-6c9f-4782-8731-c678a6daa7a4; googtrans=%2Fauto%2Fen; app_popups_time_type_diy_1860=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 06:09:21 GMT
content-type: image/png
content-length: 32646
last-modified: Wed, 16 Mar 2022 03:25:53 GMT
etag: "623158c1-7f86"
cf-cache-status: MISS
expires: Thu, 18 Apr 2024 10:09:21 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 87627c475a75b4fa-OSL
X-Firefox-Spdy: h2
|
|
| cdn.staticsoe.com/statics/apps/static/recentsale-front/holiday_newyear.png?x-oss-process=image/resize,m_lfit,w_504 | 104.18.169.76 | 200 OK | 64 kB |
URL GET HTTP/2cdn.staticsoe.com/statics/apps/static/recentsale-front/holiday_newyear.png?x-oss-process=image/resize,m_lfit,w_504 IP104.18.169.76:443
Requested byhttps://4f-onlineshop.com/ CertificateIssuerCloudflare, Inc. Subjectcdn.staticsoe.com Fingerprint81:12:7B:A0:28:A4:6D:E5:44:00:F3:A3:14:8C:B8:2C:42:34:DA:CD ValidityWed, 14 Feb 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typePNG image data, 504 x 152, 8-bit/color RGBA, non-interlaced Hashe6946d9873c2839213d19186612b8b88 0ce6bb5b3edeca3f17bd29bf0493c1f57526d046 a781c8cca6c1112f4c5fcd0d4618c11666c6b4807f33c8a0ecfb379c16785665
GET /statics/apps/static/recentsale-front/holiday_newyear.png?x-oss-process=image/resize,m_lfit,w_504 HTTP/1.1
Host: cdn.staticsoe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4f-onlineshop.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 06:09:21 GMT
content-type: image/png
content-length: 63723
x-oss-request-id: 65B5616D90AF51353611305C
vary: Origin, Accept-Encoding
etag: "BD97868B842F91AEC77E2B6DCA9FDC0B"
last-modified: Mon, 14 Feb 2022 07:59:33 GMT
x-oss-object-type: Normal
x-oss-storage-class: Standard
x-oss-hash-crc64ecma: 493897066906043259
x-oss-server-time: 4
cf-cache-status: REVALIDATED
expires: Fri, 26 Apr 2024 06:09:21 GMT
cache-control: public, max-age=691200
accept-ranges: bytes
server: cloudflare
cf-ray: 87627c497cfd56a5-OSL
X-Firefox-Spdy: h2
|
|
| cdn.staticsoe.com/uploads/61353/cart/resources/20231213/41a36559b2eda3838897d211d1caf208.jpg?x-oss-process=image/resize,m_lfit,w_1920 | 104.18.169.76 | 200 OK | 378 kB |
URL GET HTTP/2cdn.staticsoe.com/uploads/61353/cart/resources/20231213/41a36559b2eda3838897d211d1caf208.jpg?x-oss-process=image/resize,m_lfit,w_1920 IP104.18.169.76:443
Requested byhttps://4f-onlineshop.com/ CertificateIssuerCloudflare, Inc. Subjectcdn.staticsoe.com Fingerprint81:12:7B:A0:28:A4:6D:E5:44:00:F3:A3:14:8C:B8:2C:42:34:DA:CD ValidityWed, 14 Feb 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1920x630, components 3 Size378 kB (378251 bytes) Hash6a0a965ef1db1f7ea62451d3210402c5 1acabd6f40aaf77e1aee0f52903284c9d88471ee fb1fb65cb29b892e63e75eb53887bdb425c1b90d9489e3c5a53d6c45eb88c0c0
GET /uploads/61353/cart/resources/20231213/41a36559b2eda3838897d211d1caf208.jpg?x-oss-process=image/resize,m_lfit,w_1920 HTTP/1.1
Host: cdn.staticsoe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4f-onlineshop.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 06:09:21 GMT
content-type: image/jpeg
content-length: 378251
x-oss-request-id: 6620B91076EC4B33384D144E
vary: Origin, Accept-Encoding
etag: "03E7951CA0662D4E79D528B95750EB96"
last-modified: Wed, 13 Dec 2023 10:28:31 GMT
x-oss-object-type: Normal
x-oss-storage-class: Standard
x-oss-server-time: 126
x-oss-hash-crc64ecma: 4566405124103480816
cf-cache-status: MISS
expires: Fri, 26 Apr 2024 06:09:21 GMT
cache-control: public, max-age=691200
accept-ranges: bytes
server: cloudflare
cf-ray: 87627c485b8856a5-OSL
X-Firefox-Spdy: h2
|
|
| cdn.staticsoe.com/uploads/61353/cart/resources/20231025/6E8B3A45-EAD1-3FF8-5569-9A0FC738DCBF.webp | 104.18.169.76 | 200 OK | 80 kB |
URL GET HTTP/2cdn.staticsoe.com/uploads/61353/cart/resources/20231025/6E8B3A45-EAD1-3FF8-5569-9A0FC738DCBF.webp IP104.18.169.76:443
Requested byhttps://4f-onlineshop.com/ CertificateIssuerCloudflare, Inc. Subjectcdn.staticsoe.com Fingerprint81:12:7B:A0:28:A4:6D:E5:44:00:F3:A3:14:8C:B8:2C:42:34:DA:CD ValidityWed, 14 Feb 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 1200x1600, Scaling: [none]x[none], YUV color, decoders should clamp Hash0474f643c606cf025c3a3c9295132b27 c79234600454efc312443ed2bf3c74978274530e d2e8a92cff2ae065499e849fb31ead4436dcdb8b33ea42488e240859cffbe2b7
GET /uploads/61353/cart/resources/20231025/6E8B3A45-EAD1-3FF8-5569-9A0FC738DCBF.webp HTTP/1.1
Host: cdn.staticsoe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4f-onlineshop.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 06:09:21 GMT
content-type: image/webp
content-length: 79476
x-oss-request-id: 660ADE199191FB3437231C88
vary: Origin, Accept-Encoding
etag: "0474F643C606CF025C3A3C9295132B27"
last-modified: Wed, 25 Oct 2023 10:20:51 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 4646687751794999671
x-oss-storage-class: Standard
content-md5: BHT2Q8YGzwJcOjySlRMrJw==
x-oss-server-time: 89
cf-cache-status: REVALIDATED
expires: Fri, 26 Apr 2024 06:09:21 GMT
cache-control: public, max-age=691200
accept-ranges: bytes
server: cloudflare
cf-ray: 87627c4b3f1656a5-OSL
X-Firefox-Spdy: h2
|
|
| 4f-onlineshop.com/app-api/recentsale/61353/info | 104.16.198.133 | 200 OK | 9.7 kB |
URL GET HTTP/24f-onlineshop.com/app-api/recentsale/61353/info IP104.16.198.133:443
Requested byhttps://4f-onlineshop.com/ CertificateIssuerGoogle Trust Services LLC Subject4f-onlineshop.com Fingerprint47:CC:0D:E1:A0:25:7F:A2:83:8B:12:C7:49:BC:5B:FB:B3:69:3E:16 ValiditySat, 16 Mar 2024 13:58:38 GMT - Fri, 14 Jun 2024 13:58:37 GMT
File typegzip compressed data, from Unix Hash82119a8fd5e2e01196a42872a53887b4 7b87f48dcb79b59c795d0e6a0604159bee9826d8 7c9ea26af8b2ec3d2a5821b913b8cbe0d06846ece3a5559fc36474c7611a9804
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /app-api/recentsale/61353/info HTTP/1.1
Host: 4f-onlineshop.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4f-onlineshop.com/
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: _fbs_fbp=fb.1.1713420555809.1616014724; oemsaas_global_visit_id=CC9249FA-8468-E1F2-3793-C32D1488D069; oemsaas_checkout_visit_id=318D8D4C-6DF2-7DDC-5D0B-F60785690063; oemsaas_global_visit_session=DE56FC3E-C4B7-E7FE-E476-886BEF3A5610; utm_source=direct; utm_medium=default; order_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1713420555%2C%22expire_time%22%3A1716012555%7D%5D; landing_page=aHR0cHM6Ly80Zi1vbmxpbmVzaG9wLmNvbS8%3D; oemsaas_keep_alive=001A17CA-59CA-F666-7705-118B770F729D; first_http_referer=null; PHPSESSID=dfc8e5fa9182a96036eed8fc4f8cbcf3; oemcart_client_user_agent=Mozilla%252F5.0%2520(X11%253B%2520Linux%2520x86_64%253B%2520rv%253A96.0)%2520Gecko%252F20100101%2520Firefox%252F96.0; oemcart_client_pre_url=; oemcart_client_timezone=Etc%252FUTC; oemcart_client_screen_size=1280X1024; oemcart_client_broswer_language=en-US; oemcart_client_viewport_size=1280X1024; oemcart_client_broswer_date_time=2024-04-18%2006%3A09%3A16; _scid=ebfcf4e0-6c9f-4782-8731-c678a6daa7a4; _scid_r=ebfcf4e0-6c9f-4782-8731-c678a6daa7a4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 06:09:17 GMT
content-type: application/json; charset=utf-8
x-trace-id: 609779E9-B56B-5B07-3A61-05E4968B16A3
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-max-age: 1800
access-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS
access-control-allow-headers: *
access-control-request-headers: *
access-control-expose-headers: *
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 87627c3228f3b4fa-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| cdn.staticsoe.com/uploads/61353/cart/resources/20231025/3C2E332E-C6E3-BB77-227A-244AD06667BE.webp | 104.18.169.76 | 200 OK | 209 kB |
URL GET HTTP/2cdn.staticsoe.com/uploads/61353/cart/resources/20231025/3C2E332E-C6E3-BB77-227A-244AD06667BE.webp IP104.18.169.76:443
Requested byhttps://4f-onlineshop.com/ CertificateIssuerCloudflare, Inc. Subjectcdn.staticsoe.com Fingerprint81:12:7B:A0:28:A4:6D:E5:44:00:F3:A3:14:8C:B8:2C:42:34:DA:CD ValidityWed, 14 Feb 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 1200x1600, Scaling: [none]x[none], YUV color, decoders should clamp Size209 kB (208822 bytes) Hashc13920f15731c93496d7b40f8fc06382 e13d62d48f2b162a84ea851ecb63f8073d78e7d3 8797acb1cb486f684d6aad38e0107471b51ef66516ab72fd984fbbb752b43ffc
GET /uploads/61353/cart/resources/20231025/3C2E332E-C6E3-BB77-227A-244AD06667BE.webp HTTP/1.1
Host: cdn.staticsoe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4f-onlineshop.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 06:09:27 GMT
content-type: image/webp
content-length: 208822
x-oss-request-id: 6620B91776EC4B303443334E
vary: Origin, Accept-Encoding
etag: "C13920F15731C93496D7B40F8FC06382"
last-modified: Wed, 25 Oct 2023 10:20:48 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 3804456800670108142
x-oss-storage-class: Standard
content-md5: wTkg8VcxyTSW17QPj8Bjgg==
x-oss-server-time: 57
cf-cache-status: MISS
expires: Fri, 26 Apr 2024 06:09:27 GMT
cache-control: public, max-age=691200
accept-ranges: bytes
server: cloudflare
cf-ray: 87627c70b96a56a5-OSL
X-Firefox-Spdy: h2
|
|
| translate.googleapis.com/element/log?format=json&hasfast=true&authuser=0 | 142.250.74.138 | 200 OK | 0 B |
URL POST HTTP/3translate.googleapis.com/element/log?format=json&hasfast=true&authuser=0 IP142.250.74.138:443
Requested byhttps://4f-onlineshop.com/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /element/log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-goog-authuser
Referer: https://4f-onlineshop.com/
Origin: https://4f-onlineshop.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: https://4f-onlineshop.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser
content-type: text/plain; charset=UTF-8
date: Thu, 18 Apr 2024 06:09:29 GMT
server: Playlog
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| translate.googleapis.com/element/log?format=json&hasfast=true&authuser=0 | 142.250.74.138 | 200 OK | 131 B |
URL POST HTTP/3translate.googleapis.com/element/log?format=json&hasfast=true&authuser=0 IP142.250.74.138:443
Requested byhttps://4f-onlineshop.com/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT
Hashca0b7e866005f6774d284b9f438ebfd2 53644f5ee3640189bdb223473ba6a2d46606c556 502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358
POST /element/log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-AuthUser: 0
Content-Type: text/plain;charset=UTF-8
Content-Length: 1199
Origin: https://4f-onlineshop.com
DNT: 1
Connection: keep-alive
Referer: https://4f-onlineshop.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: https://4f-onlineshop.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-type: text/plain; charset=UTF-8
content-encoding: gzip
date: Thu, 18 Apr 2024 06:09:29 GMT
server: Playlog
cache-control: private
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cdn.staticsoe.com/uploads/61353/cart/resources/20231025/607823B9-5E50-8643-836F-374ED2AB711B.webp | 104.18.169.76 | 200 OK | 87 kB |
URL GET HTTP/2cdn.staticsoe.com/uploads/61353/cart/resources/20231025/607823B9-5E50-8643-836F-374ED2AB711B.webp IP104.18.169.76:443
Requested byhttps://4f-onlineshop.com/ CertificateIssuerCloudflare, Inc. Subjectcdn.staticsoe.com Fingerprint81:12:7B:A0:28:A4:6D:E5:44:00:F3:A3:14:8C:B8:2C:42:34:DA:CD ValidityWed, 14 Feb 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 1200x1600, Scaling: [none]x[none], YUV color, decoders should clamp Hashf728c5e2e72bcfdbccf4ce5aa964a821 53b198b4ddef468bf8c3177ed3fd939292de88fb 1b2e9abc75024250048a2d00be1def5ea82f49f62f9fe45b69fb3947e0deed49
GET /uploads/61353/cart/resources/20231025/607823B9-5E50-8643-836F-374ED2AB711B.webp HTTP/1.1
Host: cdn.staticsoe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4f-onlineshop.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 06:09:33 GMT
content-type: image/webp
content-length: 86714
x-oss-request-id: 661E06685EDFF637374EC8F2
vary: Origin, Accept-Encoding
etag: "F728C5E2E72BCFDBCCF4CE5AA964A821"
last-modified: Wed, 25 Oct 2023 10:18:07 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 4004860980966517744
x-oss-storage-class: Standard
content-md5: 9yjF4ucrz9vM9M5aqWSoIQ==
x-oss-server-time: 65
cf-cache-status: REVALIDATED
expires: Fri, 26 Apr 2024 06:09:33 GMT
cache-control: public, max-age=691200
accept-ranges: bytes
server: cloudflare
cf-ray: 87627c964d6456a5-OSL
X-Firefox-Spdy: h2
|
|
| cdn.staticsoe.com/uploads/61353/cart/resources/20231025/40424137-431D-D917-5A19-A495CFBEC8C5.webp | 104.18.169.76 | | 37 kB |
URL cdn.staticsoe.com/uploads/61353/cart/resources/20231025/40424137-431D-D917-5A19-A495CFBEC8C5.webp IP104.18.169.76:0
CertificateIssuerCloudflare, Inc. Subjectcdn.staticsoe.com Fingerprint81:12:7B:A0:28:A4:6D:E5:44:00:F3:A3:14:8C:B8:2C:42:34:DA:CD ValidityWed, 14 Feb 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 1200x1600, Scaling: [none]x[none], YUV color, decoders should clamp Hash52aa232f651004d810f6cd95c8ff5af8 c06c964f7d7bb56f3ee782e42fd7688521598ce2 aa276dff2b933839687cd447cc1c85d17bdd5d4d5e4fed330c5516e1d13b2ffd
GET /uploads/61353/cart/resources/20231025/40424137-431D-D917-5A19-A495CFBEC8C5.webp HTTP/1.1
Host: cdn.staticsoe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4f-onlineshop.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 06:09:39 GMT
content-type: image/webp
content-length: 37418
x-oss-request-id: 661F57CBD561043232AC26BA
vary: Origin, Accept-Encoding
etag: "52AA232F651004D810F6CD95C8FF5AF8"
last-modified: Wed, 25 Oct 2023 10:19:11 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 3244631921736699011
x-oss-storage-class: Standard
content-md5: UqojL2UQBNgQ9s2VyP9a+A==
x-oss-server-time: 58
cf-cache-status: REVALIDATED
expires: Fri, 26 Apr 2024 06:09:39 GMT
cache-control: public, max-age=691200
accept-ranges: bytes
server: cloudflare
cf-ray: 87627cbbcdc456a5-OSL
X-Firefox-Spdy: h2
|
|
| cdn.staticsoe.com/uploads/0/theme/default/assets/vendor.css?v=8bf6ee9d0cb37ac6af2ef2619c479347 | 104.18.169.76 | 200 OK | 74 kB |
URL GET HTTP/2cdn.staticsoe.com/uploads/0/theme/default/assets/vendor.css?v=8bf6ee9d0cb37ac6af2ef2619c479347 IP104.18.169.76:443
Requested byhttps://4f-onlineshop.com/ CertificateIssuerCloudflare, Inc. Subjectcdn.staticsoe.com Fingerprint81:12:7B:A0:28:A4:6D:E5:44:00:F3:A3:14:8C:B8:2C:42:34:DA:CD ValidityWed, 14 Feb 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeASCII text, with very long lines (35771) Hash8bf6ee9d0cb37ac6af2ef2619c479347 69bc61bbd878435fcb91abbc97908573ff7f631d b40b0219d705f3ef33e5b2bea78e988251e4c00dfa9fa63e58c85cfa1fc8ff8d
GET /uploads/0/theme/default/assets/vendor.css?v=8bf6ee9d0cb37ac6af2ef2619c479347 HTTP/1.1
Host: cdn.staticsoe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4f-onlineshop.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 06:09:16 GMT
content-type: text/css
vary: Accept-Encoding, Origin
x-oss-request-id: 661FB7C09979C738352F207C
last-modified: Wed, 17 Apr 2024 07:16:45 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 18289564630321224492
x-oss-storage-class: Standard
content-md5: i/bunQyzesavLvJhnEeTRw==
x-oss-server-time: 1
cf-cache-status: HIT
age: 42945
expires: Fri, 26 Apr 2024 06:09:16 GMT
cache-control: public, max-age=691200
server: cloudflare
cf-ray: 87627c2e5a3656a5-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| translate.google.com/translate_a/element.js?cb=googleTranslateElementInit | 216.58.211.14 | 200 OK | 90 kB |
URL GET HTTP/2translate.google.com/translate_a/element.js?cb=googleTranslateElementInit IP216.58.211.14:443
Requested byhttps://4f-onlineshop.com/ CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint02:6C:2F:38:A0:8A:95:AC:E8:2B:67:AA:69:A4:34:6E:15:99:F5:1D ValidityMon, 04 Mar 2024 06:35:50 GMT - Mon, 27 May 2024 06:35:49 GMT
File typeJavaScript source, ASCII text, with very long lines (2064) Hash0e263a95d8e1e3a587aec3cf8c4caa46 f9d1b1e66e9da1046965627a9c20091d5dd41027 8f0417cd65dce728742761b7cdab4f6cc9e7809b17c1081a588d6805f6fbc0e5
GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1
Host: translate.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4f-onlineshop.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 18 Apr 2024 06:09:18 GMT
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/frankruhllibre/v6/j8_w6_fAw7jrcalD7oKYNX0QfAnPW7Dl4Q.woff2 | 142.250.74.163 | 200 OK | 20 kB |
URL GET HTTP/2fonts.gstatic.com/s/frankruhllibre/v6/j8_w6_fAw7jrcalD7oKYNX0QfAnPW7Dl4Q.woff2 IP142.250.74.163:443
Requested byhttps://4f-onlineshop.com/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 19900, version 1.0 Hash3f3feedf5b4b90abf094f63ea6d87710 2ba4349e31c137dbe75ad327de9eb04a87e26165 e845309bca1ba7946299dc5ea01a12f66784e7220003ff3c438714decfa8c413
GET /s/frankruhllibre/v6/j8_w6_fAw7jrcalD7oKYNX0QfAnPW7Dl4Q.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://4f-onlineshop.com
DNT: 1
Connection: keep-alive
Referer: https://4f-onlineshop.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 19900
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 16 Apr 2024 19:13:25 GMT
expires: Wed, 16 Apr 2025 19:13:25 GMT
cache-control: public, max-age=31536000
age: 125751
last-modified: Tue, 01 Sep 2020 03:50:38 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| 4f-onlineshop.com/dist/front/assets/415a6fb983d3d506283c.woff2?t=1686211178958 | 104.16.198.133 | 200 OK | 2.2 kB |
URL GET HTTP/24f-onlineshop.com/dist/front/assets/415a6fb983d3d506283c.woff2?t=1686211178958 IP104.16.198.133:443
Requested byhttps://4f-onlineshop.com/ CertificateIssuerGoogle Trust Services LLC Subject4f-onlineshop.com Fingerprint47:CC:0D:E1:A0:25:7F:A2:83:8B:12:C7:49:BC:5B:FB:B3:69:3E:16 ValiditySat, 16 Mar 2024 13:58:38 GMT - Fri, 14 Jun 2024 13:58:37 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 2212, version 1.0 Hash5e845ac75e407a38e30312f7c7bdc2be 7f40b07e06ca50a33930316dc3052b7f1887b353 58ae705f6c18280bbb0fbde724a38dfdab1d80f83e4cadc5eb3a9f728a8fb495
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /dist/front/assets/415a6fb983d3d506283c.woff2?t=1686211178958 HTTP/1.1
Host: 4f-onlineshop.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://4f-onlineshop.com/
DNT: 1
Connection: keep-alive
Cookie: _fbs_fbp=fb.1.1713420555809.1616014724; oemsaas_global_visit_id=CC9249FA-8468-E1F2-3793-C32D1488D069; oemsaas_checkout_visit_id=318D8D4C-6DF2-7DDC-5D0B-F60785690063; oemsaas_global_visit_session=DE56FC3E-C4B7-E7FE-E476-886BEF3A5610; utm_source=direct; utm_medium=default; order_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1713420555%2C%22expire_time%22%3A1716012555%7D%5D; landing_page=aHR0cHM6Ly80Zi1vbmxpbmVzaG9wLmNvbS8%3D; oemsaas_keep_alive=001A17CA-59CA-F666-7705-118B770F729D; first_http_referer=null; PHPSESSID=dfc8e5fa9182a96036eed8fc4f8cbcf3; oemcart_client_user_agent=Mozilla%252F5.0%2520(X11%253B%2520Linux%2520x86_64%253B%2520rv%253A96.0)%2520Gecko%252F20100101%2520Firefox%252F96.0; oemcart_client_pre_url=; oemcart_client_timezone=Etc%252FUTC; oemcart_client_screen_size=1280X1024; oemcart_client_broswer_language=en-US; oemcart_client_viewport_size=1280X1024; oemcart_client_broswer_date_time=2024-04-18%2006%3A09%3A16; _scid=ebfcf4e0-6c9f-4782-8731-c678a6daa7a4; _scid_r=ebfcf4e0-6c9f-4782-8731-c678a6daa7a4
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 06:09:18 GMT
content-type: application/octet-stream
content-length: 2212
x-oss-request-id: 6620B90E0362C53333B9CA45
vary: Origin, Accept-Encoding
etag: "5E845AC75E407A38E30312F7C7BDC2BE"
last-modified: Wed, 17 Apr 2024 03:05:10 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 6742069295934362351
x-oss-storage-class: Standard
x-oss-ec: 0048-00000113
content-disposition: attachment
x-oss-force-download: true
content-md5: XoRax15AejjjAxL3x73Cvg==
x-oss-server-time: 4
cache-control: public, max-age=86400
cf-cache-status: MISS
expires: Fri, 19 Apr 2024 06:09:18 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 87627c373f40b4fa-OSL
X-Firefox-Spdy: h2
|
|
| 4f-onlineshop.com/app-api/popups/61353/front/count/1860?&type=exposure_times | 104.16.198.133 | 200 OK | 145 B |
URL GET HTTP/24f-onlineshop.com/app-api/popups/61353/front/count/1860?&type=exposure_times IP104.16.198.133:443
Requested byhttps://4f-onlineshop.com/ CertificateIssuerGoogle Trust Services LLC Subject4f-onlineshop.com Fingerprint47:CC:0D:E1:A0:25:7F:A2:83:8B:12:C7:49:BC:5B:FB:B3:69:3E:16 ValiditySat, 16 Mar 2024 13:58:38 GMT - Fri, 14 Jun 2024 13:58:37 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hashe5b7c148dae7c98b844fdb9ce61bc706 9e7dd0cd9ee65e1f431309f06e03b72807d5e598 30e8300ee22f2f837cdb4a02a4fd2a36a4b075747d41e1229fccd283d082fc0c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /app-api/popups/61353/front/count/1860?&type=exposure_times HTTP/1.1
Host: 4f-onlineshop.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4f-onlineshop.com/
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: _fbs_fbp=fb.1.1713420555809.1616014724; oemsaas_global_visit_id=CC9249FA-8468-E1F2-3793-C32D1488D069; oemsaas_checkout_visit_id=318D8D4C-6DF2-7DDC-5D0B-F60785690063; oemsaas_global_visit_session=DE56FC3E-C4B7-E7FE-E476-886BEF3A5610; utm_source=direct; utm_medium=default; order_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1713420555%2C%22expire_time%22%3A1716012555%7D%5D; landing_page=aHR0cHM6Ly80Zi1vbmxpbmVzaG9wLmNvbS8%3D; oemsaas_keep_alive=001A17CA-59CA-F666-7705-118B770F729D; first_http_referer=null; PHPSESSID=dfc8e5fa9182a96036eed8fc4f8cbcf3; oemcart_client_user_agent=Mozilla%252F5.0%2520(X11%253B%2520Linux%2520x86_64%253B%2520rv%253A96.0)%2520Gecko%252F20100101%2520Firefox%252F96.0; oemcart_client_pre_url=; oemcart_client_timezone=Etc%252FUTC; oemcart_client_screen_size=1280X1024; oemcart_client_broswer_language=en-US; oemcart_client_viewport_size=1280X1024; oemcart_client_broswer_date_time=2024-04-18%2006%3A09%3A16; _scid=ebfcf4e0-6c9f-4782-8731-c678a6daa7a4; _scid_r=ebfcf4e0-6c9f-4782-8731-c678a6daa7a4; googtrans=%2Fauto%2Fen; app_popups_time_type_diy_1860=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 06:09:18 GMT
content-type: application/json; charset=utf-8
x-trace-id: C5614DA7-C285-1338-C132-231D85A403DB
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-max-age: 1800
access-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS
access-control-allow-headers: *
access-control-request-headers: *
access-control-expose-headers: *
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 87627c38a92cb4fa-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| 4f-onlineshop.com/app-assets/googletranslate/61353/index.js?var=1698305836 | 104.16.198.133 | 200 OK | 86 kB |
URL GET HTTP/24f-onlineshop.com/app-assets/googletranslate/61353/index.js?var=1698305836 IP104.16.198.133:443
Requested byhttps://4f-onlineshop.com/ CertificateIssuerGoogle Trust Services LLC Subject4f-onlineshop.com Fingerprint47:CC:0D:E1:A0:25:7F:A2:83:8B:12:C7:49:BC:5B:FB:B3:69:3E:16 ValiditySat, 16 Mar 2024 13:58:38 GMT - Fri, 14 Jun 2024 13:58:37 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hashd33e76d517fdde7a64d49493dc656f88 632f0db0e05f1381285e370184b67a4f709c9b5a acc0aa77d07c8df25cedf0e95eab58490c1102d0978f89aca5d43762d0aac6ec
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /app-assets/googletranslate/61353/index.js?var=1698305836 HTTP/1.1
Host: 4f-onlineshop.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4f-onlineshop.com/
DNT: 1
Connection: keep-alive
Cookie: _fbs_fbp=fb.1.1713420555809.1616014724; oemsaas_global_visit_id=CC9249FA-8468-E1F2-3793-C32D1488D069; oemsaas_checkout_visit_id=318D8D4C-6DF2-7DDC-5D0B-F60785690063; oemsaas_global_visit_session=DE56FC3E-C4B7-E7FE-E476-886BEF3A5610; utm_source=direct; utm_medium=default; order_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1713420555%2C%22expire_time%22%3A1716012555%7D%5D; landing_page=aHR0cHM6Ly80Zi1vbmxpbmVzaG9wLmNvbS8%3D; oemsaas_keep_alive=001A17CA-59CA-F666-7705-118B770F729D; first_http_referer=null; PHPSESSID=dfc8e5fa9182a96036eed8fc4f8cbcf3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 06:09:17 GMT
content-type: application/javascript
vary: Accept-Encoding, Origin
x-oss-request-id: 6620B90C9B18D1333409F289
last-modified: Wed, 17 Apr 2024 03:05:19 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 5480370437985418128
x-oss-storage-class: Standard
cache-control: public, max-age=14400
x-oss-ec: 0048-00000113
content-disposition: attachment
x-oss-force-download: true
content-md5: 0z521Rf93npk1JST3GVviA==
x-oss-server-time: 2
content-encoding: gzip
cf-cache-status: MISS
expires: Thu, 18 Apr 2024 10:09:17 GMT
server: cloudflare
cf-ray: 87627c2e0b1db4fa-OSL
X-Firefox-Spdy: h2
|
|
| cdn.staticsoe.com/uploads/0/theme/default/assets/account.css?v=6e42f66bb2c79e42cb37829c9e93d71c | 104.18.169.76 | 200 OK | 30 kB |
URL GET HTTP/2cdn.staticsoe.com/uploads/0/theme/default/assets/account.css?v=6e42f66bb2c79e42cb37829c9e93d71c IP104.18.169.76:443
Requested byhttps://4f-onlineshop.com/ CertificateIssuerCloudflare, Inc. Subjectcdn.staticsoe.com Fingerprint81:12:7B:A0:28:A4:6D:E5:44:00:F3:A3:14:8C:B8:2C:42:34:DA:CD ValidityWed, 14 Feb 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/0/theme/default/assets/account.css?v=6e42f66bb2c79e42cb37829c9e93d71c HTTP/1.1
Host: cdn.staticsoe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4f-onlineshop.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 06:09:16 GMT
content-type: text/css
vary: Accept-Encoding, Origin
x-oss-request-id: 661FAF7B1F524730368A7667
last-modified: Wed, 17 Apr 2024 07:16:45 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 2072138067842434010
x-oss-storage-class: Standard
content-md5: bkL2a7LHnkLLN4KcnpPXHA==
x-oss-server-time: 1
cf-cache-status: HIT
age: 42945
expires: Fri, 26 Apr 2024 06:09:16 GMT
cache-control: public, max-age=691200
server: cloudflare
cf-ray: 87627c2e5a3456a5-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| 4f-onlineshop.com/app-assets/recentsale/61353/index.js?var=1698305700 | 104.16.198.133 | 200 OK | 88 kB |
URL GET HTTP/24f-onlineshop.com/app-assets/recentsale/61353/index.js?var=1698305700 IP104.16.198.133:443
Requested byhttps://4f-onlineshop.com/ CertificateIssuerGoogle Trust Services LLC Subject4f-onlineshop.com Fingerprint47:CC:0D:E1:A0:25:7F:A2:83:8B:12:C7:49:BC:5B:FB:B3:69:3E:16 ValiditySat, 16 Mar 2024 13:58:38 GMT - Fri, 14 Jun 2024 13:58:37 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /app-assets/recentsale/61353/index.js?var=1698305700 HTTP/1.1
Host: 4f-onlineshop.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4f-onlineshop.com/
DNT: 1
Connection: keep-alive
Cookie: _fbs_fbp=fb.1.1713420555809.1616014724; oemsaas_global_visit_id=CC9249FA-8468-E1F2-3793-C32D1488D069; oemsaas_checkout_visit_id=318D8D4C-6DF2-7DDC-5D0B-F60785690063; oemsaas_global_visit_session=DE56FC3E-C4B7-E7FE-E476-886BEF3A5610; utm_source=direct; utm_medium=default; order_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1713420555%2C%22expire_time%22%3A1716012555%7D%5D; landing_page=aHR0cHM6Ly80Zi1vbmxpbmVzaG9wLmNvbS8%3D; oemsaas_keep_alive=001A17CA-59CA-F666-7705-118B770F729D; first_http_referer=null; PHPSESSID=dfc8e5fa9182a96036eed8fc4f8cbcf3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 06:09:17 GMT
content-type: application/javascript
vary: Accept-Encoding, Origin
x-oss-request-id: 6620B90CCD3FA833379D8F84
last-modified: Wed, 17 Apr 2024 03:05:21 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 1710406399142955086
x-oss-storage-class: Standard
cache-control: public, max-age=14400
x-oss-ec: 0048-00000113
content-disposition: attachment
x-oss-force-download: true
content-md5: jP6swUQuXjRigKdyhoEKzA==
x-oss-server-time: 2
content-encoding: gzip
cf-cache-status: MISS
expires: Thu, 18 Apr 2024 10:09:17 GMT
server: cloudflare
cf-ray: 87627c2e0b1bb4fa-OSL
X-Firefox-Spdy: h2
|
|
| cdn.staticsoe.com/uploads/61353/cart/resources/20231025/EE75E9C6-4CFC-31E2-BBCB-6CAB24E66860.webp | 104.18.169.76 | 200 OK | 155 kB |
URL GET HTTP/2cdn.staticsoe.com/uploads/61353/cart/resources/20231025/EE75E9C6-4CFC-31E2-BBCB-6CAB24E66860.webp IP104.18.169.76:443
Requested byhttps://4f-onlineshop.com/ CertificateIssuerCloudflare, Inc. Subjectcdn.staticsoe.com Fingerprint81:12:7B:A0:28:A4:6D:E5:44:00:F3:A3:14:8C:B8:2C:42:34:DA:CD ValidityWed, 14 Feb 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 1600x2133, Scaling: [none]x[none], YUV color, decoders should clamp Size155 kB (155200 bytes) Hash9c40a93789e79e13832037eff3e67403 c0141d9b2f281418d1e5f887c107bc6eb783ab46 13505485319deee78332921a978a93ff3f59db7da52666d4199f0380bbd324be
GET /uploads/61353/cart/resources/20231025/EE75E9C6-4CFC-31E2-BBCB-6CAB24E66860.webp HTTP/1.1
Host: cdn.staticsoe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4f-onlineshop.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 06:09:18 GMT
content-type: image/webp
content-length: 155200
x-oss-request-id: 6620B90DF488A53531F00476
vary: Origin, Accept-Encoding
etag: "9C40A93789E79E13832037EFF3E67403"
last-modified: Wed, 25 Oct 2023 10:16:54 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 3151570706438223117
x-oss-storage-class: Standard
content-md5: nECpN4nnnhODIDfv8+Z0Aw==
x-oss-server-time: 51
cf-cache-status: MISS
expires: Fri, 26 Apr 2024 06:09:18 GMT
cache-control: public, max-age=691200
accept-ranges: bytes
server: cloudflare
cf-ray: 87627c360bc656a5-OSL
X-Firefox-Spdy: h2
|
|
| 4f-onlineshop.com/app-api/googletranslate/61353/front/config | 104.16.198.133 | 200 OK | 724 B |
URL GET HTTP/24f-onlineshop.com/app-api/googletranslate/61353/front/config IP104.16.198.133:443
Requested byhttps://4f-onlineshop.com/ CertificateIssuerGoogle Trust Services LLC Subject4f-onlineshop.com Fingerprint47:CC:0D:E1:A0:25:7F:A2:83:8B:12:C7:49:BC:5B:FB:B3:69:3E:16 ValiditySat, 16 Mar 2024 13:58:38 GMT - Fri, 14 Jun 2024 13:58:37 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (968), with no line terminators Hashc6607eeae826b5532b479af124b2866b f75eb851d8b91c671a66674b0cbe87b7802c655e 877c342f59bd7560b1b24a61bf19c418269d2e46c60db773efc159753d4f4fdf
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /app-api/googletranslate/61353/front/config HTTP/1.1
Host: 4f-onlineshop.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4f-onlineshop.com/
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: _fbs_fbp=fb.1.1713420555809.1616014724; oemsaas_global_visit_id=CC9249FA-8468-E1F2-3793-C32D1488D069; oemsaas_checkout_visit_id=318D8D4C-6DF2-7DDC-5D0B-F60785690063; oemsaas_global_visit_session=DE56FC3E-C4B7-E7FE-E476-886BEF3A5610; utm_source=direct; utm_medium=default; order_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1713420555%2C%22expire_time%22%3A1716012555%7D%5D; landing_page=aHR0cHM6Ly80Zi1vbmxpbmVzaG9wLmNvbS8%3D; oemsaas_keep_alive=001A17CA-59CA-F666-7705-118B770F729D; first_http_referer=null; PHPSESSID=dfc8e5fa9182a96036eed8fc4f8cbcf3; oemcart_client_user_agent=Mozilla%252F5.0%2520(X11%253B%2520Linux%2520x86_64%253B%2520rv%253A96.0)%2520Gecko%252F20100101%2520Firefox%252F96.0; oemcart_client_pre_url=; oemcart_client_timezone=Etc%252FUTC; oemcart_client_screen_size=1280X1024; oemcart_client_broswer_language=en-US; oemcart_client_viewport_size=1280X1024; oemcart_client_broswer_date_time=2024-04-18%2006%3A09%3A16; _scid=ebfcf4e0-6c9f-4782-8731-c678a6daa7a4; _scid_r=ebfcf4e0-6c9f-4782-8731-c678a6daa7a4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 06:09:17 GMT
content-type: application/json; charset=utf-8
x-trace-id: 0C89851A-6FC7-6AD3-9957-F51A46BB6581
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-max-age: 1800
access-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS
access-control-allow-headers: *
access-control-request-headers: *
access-control-expose-headers: *
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 87627c35fd7ab4fa-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| 4f-onlineshop.com/app-api/gift/61353/front/config | 104.16.198.133 | 200 OK | 826 B |
URL GET HTTP/24f-onlineshop.com/app-api/gift/61353/front/config IP104.16.198.133:443
Requested byhttps://4f-onlineshop.com/ CertificateIssuerGoogle Trust Services LLC Subject4f-onlineshop.com Fingerprint47:CC:0D:E1:A0:25:7F:A2:83:8B:12:C7:49:BC:5B:FB:B3:69:3E:16 ValiditySat, 16 Mar 2024 13:58:38 GMT - Fri, 14 Jun 2024 13:58:37 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (906), with no line terminators Hashf5b13e09ee827cd35a6d5f954344a0fb becb472d399c459be7e8dd08771ea74695347cdd 495a0ecdfae9d5037837b892b978e33c1fea464fb53987240cec6bb1dba5b400
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /app-api/gift/61353/front/config HTTP/1.1
Host: 4f-onlineshop.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4f-onlineshop.com/
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: _fbs_fbp=fb.1.1713420555809.1616014724; oemsaas_global_visit_id=CC9249FA-8468-E1F2-3793-C32D1488D069; oemsaas_checkout_visit_id=318D8D4C-6DF2-7DDC-5D0B-F60785690063; oemsaas_global_visit_session=DE56FC3E-C4B7-E7FE-E476-886BEF3A5610; utm_source=direct; utm_medium=default; order_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1713420555%2C%22expire_time%22%3A1716012555%7D%5D; landing_page=aHR0cHM6Ly80Zi1vbmxpbmVzaG9wLmNvbS8%3D; oemsaas_keep_alive=001A17CA-59CA-F666-7705-118B770F729D; first_http_referer=null; PHPSESSID=dfc8e5fa9182a96036eed8fc4f8cbcf3; oemcart_client_user_agent=Mozilla%252F5.0%2520(X11%253B%2520Linux%2520x86_64%253B%2520rv%253A96.0)%2520Gecko%252F20100101%2520Firefox%252F96.0; oemcart_client_pre_url=; oemcart_client_timezone=Etc%252FUTC; oemcart_client_screen_size=1280X1024; oemcart_client_broswer_language=en-US; oemcart_client_viewport_size=1280X1024; oemcart_client_broswer_date_time=2024-04-18%2006%3A09%3A16; _scid=ebfcf4e0-6c9f-4782-8731-c678a6daa7a4; _scid_r=ebfcf4e0-6c9f-4782-8731-c678a6daa7a4; googtrans=%2Fauto%2Fen; app_popups_time_type_diy_1860=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 06:09:18 GMT
content-type: application/json; charset=utf-8
x-trace-id: 577766AC-0868-9138-6599-D72AF44C67B5
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-max-age: 1800
access-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS
access-control-allow-headers: *
access-control-request-headers: *
access-control-expose-headers: *
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 87627c396a20b4fa-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| 4f-onlineshop.com/app-api/popups/61353/front/config | 104.16.198.133 | 200 OK | 1.8 kB |
URL GET HTTP/24f-onlineshop.com/app-api/popups/61353/front/config IP104.16.198.133:443
Requested byhttps://4f-onlineshop.com/ CertificateIssuerGoogle Trust Services LLC Subject4f-onlineshop.com Fingerprint47:CC:0D:E1:A0:25:7F:A2:83:8B:12:C7:49:BC:5B:FB:B3:69:3E:16 ValiditySat, 16 Mar 2024 13:58:38 GMT - Fri, 14 Jun 2024 13:58:37 GMT
File typetroff or preprocessor input, Unicode text, UTF-8 text, with very long lines (1973), with no line terminators Hash8999efbcfba08ee34b90d69a5500d246 c907022ae27fa9da6a489c8301a3c69580abc20d 2244c916042d1e64268fd373edf59569584ba6a15821c89bda2e1acb19b2241c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /app-api/popups/61353/front/config HTTP/1.1
Host: 4f-onlineshop.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4f-onlineshop.com/
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: _fbs_fbp=fb.1.1713420555809.1616014724; oemsaas_global_visit_id=CC9249FA-8468-E1F2-3793-C32D1488D069; oemsaas_checkout_visit_id=318D8D4C-6DF2-7DDC-5D0B-F60785690063; oemsaas_global_visit_session=DE56FC3E-C4B7-E7FE-E476-886BEF3A5610; utm_source=direct; utm_medium=default; order_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1713420555%2C%22expire_time%22%3A1716012555%7D%5D; landing_page=aHR0cHM6Ly80Zi1vbmxpbmVzaG9wLmNvbS8%3D; oemsaas_keep_alive=001A17CA-59CA-F666-7705-118B770F729D; first_http_referer=null; PHPSESSID=dfc8e5fa9182a96036eed8fc4f8cbcf3; oemcart_client_user_agent=Mozilla%252F5.0%2520(X11%253B%2520Linux%2520x86_64%253B%2520rv%253A96.0)%2520Gecko%252F20100101%2520Firefox%252F96.0; oemcart_client_pre_url=; oemcart_client_timezone=Etc%252FUTC; oemcart_client_screen_size=1280X1024; oemcart_client_broswer_language=en-US; oemcart_client_viewport_size=1280X1024; oemcart_client_broswer_date_time=2024-04-18%2006%3A09%3A16; _scid=ebfcf4e0-6c9f-4782-8731-c678a6daa7a4; _scid_r=ebfcf4e0-6c9f-4782-8731-c678a6daa7a4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 06:09:18 GMT
content-type: application/json; charset=utf-8
x-trace-id: 3FDA3A3A-39A0-0288-3F71-7AD759273BBB
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-max-age: 1800
access-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS
access-control-allow-headers: *
access-control-request-headers: *
access-control-expose-headers: *
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 87627c35fd88b4fa-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| 4f-onlineshop.com/app-assets/gift/61353/index.js?var=1702029258 | 104.16.198.133 | 200 OK | 149 kB |
URL GET HTTP/24f-onlineshop.com/app-assets/gift/61353/index.js?var=1702029258 IP104.16.198.133:443
Requested byhttps://4f-onlineshop.com/ CertificateIssuerGoogle Trust Services LLC Subject4f-onlineshop.com Fingerprint47:CC:0D:E1:A0:25:7F:A2:83:8B:12:C7:49:BC:5B:FB:B3:69:3E:16 ValiditySat, 16 Mar 2024 13:58:38 GMT - Fri, 14 Jun 2024 13:58:37 GMT
Size149 kB (148861 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /app-assets/gift/61353/index.js?var=1702029258 HTTP/1.1
Host: 4f-onlineshop.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4f-onlineshop.com/
DNT: 1
Connection: keep-alive
Cookie: _fbs_fbp=fb.1.1713420555809.1616014724; oemsaas_global_visit_id=CC9249FA-8468-E1F2-3793-C32D1488D069; oemsaas_checkout_visit_id=318D8D4C-6DF2-7DDC-5D0B-F60785690063; oemsaas_global_visit_session=DE56FC3E-C4B7-E7FE-E476-886BEF3A5610; utm_source=direct; utm_medium=default; order_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1713420555%2C%22expire_time%22%3A1716012555%7D%5D; landing_page=aHR0cHM6Ly80Zi1vbmxpbmVzaG9wLmNvbS8%3D; oemsaas_keep_alive=001A17CA-59CA-F666-7705-118B770F729D; first_http_referer=null; PHPSESSID=dfc8e5fa9182a96036eed8fc4f8cbcf3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 06:09:17 GMT
content-type: application/javascript
vary: Accept-Encoding, Origin
x-oss-request-id: 6620B90CF30510363189AC2E
last-modified: Wed, 17 Apr 2024 03:05:19 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 3466750329570164386
x-oss-storage-class: Standard
cache-control: public, max-age=14400
x-oss-ec: 0048-00000113
content-disposition: attachment
x-oss-force-download: true
content-md5: dixia1FE+DC5lujkRA4+xw==
x-oss-server-time: 2
content-encoding: gzip
cf-cache-status: MISS
expires: Thu, 18 Apr 2024 10:09:17 GMT
server: cloudflare
cf-ray: 87627c2e0b25b4fa-OSL
X-Firefox-Spdy: h2
|
|
| 4f-onlineshop.com/app-assets/popups/61353/index.js?var=1709719087 | 104.16.198.133 | 200 OK | 218 kB |
URL GET HTTP/24f-onlineshop.com/app-assets/popups/61353/index.js?var=1709719087 IP104.16.198.133:443
Requested byhttps://4f-onlineshop.com/ CertificateIssuerGoogle Trust Services LLC Subject4f-onlineshop.com Fingerprint47:CC:0D:E1:A0:25:7F:A2:83:8B:12:C7:49:BC:5B:FB:B3:69:3E:16 ValiditySat, 16 Mar 2024 13:58:38 GMT - Fri, 14 Jun 2024 13:58:37 GMT
Size218 kB (217930 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /app-assets/popups/61353/index.js?var=1709719087 HTTP/1.1
Host: 4f-onlineshop.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4f-onlineshop.com/
DNT: 1
Connection: keep-alive
Cookie: _fbs_fbp=fb.1.1713420555809.1616014724; oemsaas_global_visit_id=CC9249FA-8468-E1F2-3793-C32D1488D069; oemsaas_checkout_visit_id=318D8D4C-6DF2-7DDC-5D0B-F60785690063; oemsaas_global_visit_session=DE56FC3E-C4B7-E7FE-E476-886BEF3A5610; utm_source=direct; utm_medium=default; order_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1713420555%2C%22expire_time%22%3A1716012555%7D%5D; landing_page=aHR0cHM6Ly80Zi1vbmxpbmVzaG9wLmNvbS8%3D; oemsaas_keep_alive=001A17CA-59CA-F666-7705-118B770F729D; first_http_referer=null; PHPSESSID=dfc8e5fa9182a96036eed8fc4f8cbcf3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 06:09:17 GMT
content-type: application/javascript
vary: Accept-Encoding, Origin
x-oss-request-id: 6620B90C2947133035371524
last-modified: Wed, 17 Apr 2024 03:05:20 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 4969094856114232348
x-oss-storage-class: Standard
cache-control: public, max-age=14400
x-oss-ec: 0048-00000113
content-disposition: attachment
x-oss-force-download: true
content-md5: vjS0dKd4gd2nBReGQ167qQ==
x-oss-server-time: 6
content-encoding: gzip
cf-cache-status: MISS
expires: Thu, 18 Apr 2024 10:09:17 GMT
server: cloudflare
cf-ray: 87627c2e1b3bb4fa-OSL
X-Firefox-Spdy: h2
|
|
| 4f-onlineshop.com/homeapi/diyoffers/gift/products | 104.16.198.133 | 200 OK | 14 kB |
URL GET HTTP/24f-onlineshop.com/homeapi/diyoffers/gift/products IP104.16.198.133:443
Requested byhttps://4f-onlineshop.com/ CertificateIssuerGoogle Trust Services LLC Subject4f-onlineshop.com Fingerprint47:CC:0D:E1:A0:25:7F:A2:83:8B:12:C7:49:BC:5B:FB:B3:69:3E:16 ValiditySat, 16 Mar 2024 13:58:38 GMT - Fri, 14 Jun 2024 13:58:37 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /homeapi/diyoffers/gift/products HTTP/1.1
Host: 4f-onlineshop.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4f-onlineshop.com/
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: _fbs_fbp=fb.1.1713420555809.1616014724; oemsaas_global_visit_id=CC9249FA-8468-E1F2-3793-C32D1488D069; oemsaas_checkout_visit_id=318D8D4C-6DF2-7DDC-5D0B-F60785690063; oemsaas_global_visit_session=DE56FC3E-C4B7-E7FE-E476-886BEF3A5610; utm_source=direct; utm_medium=default; order_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1713420555%2C%22expire_time%22%3A1716012555%7D%5D; landing_page=aHR0cHM6Ly80Zi1vbmxpbmVzaG9wLmNvbS8%3D; oemsaas_keep_alive=001A17CA-59CA-F666-7705-118B770F729D; first_http_referer=null; PHPSESSID=dfc8e5fa9182a96036eed8fc4f8cbcf3; oemcart_client_user_agent=Mozilla%252F5.0%2520(X11%253B%2520Linux%2520x86_64%253B%2520rv%253A96.0)%2520Gecko%252F20100101%2520Firefox%252F96.0; oemcart_client_pre_url=; oemcart_client_timezone=Etc%252FUTC; oemcart_client_screen_size=1280X1024; oemcart_client_broswer_language=en-US; oemcart_client_viewport_size=1280X1024; oemcart_client_broswer_date_time=2024-04-18%2006%3A09%3A16; _scid=ebfcf4e0-6c9f-4782-8731-c678a6daa7a4; _scid_r=ebfcf4e0-6c9f-4782-8731-c678a6daa7a4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 06:09:18 GMT
content-type: application/json; charset=utf-8
x-trace-id: B6C45072-E213-0E4A-7118-80BDA1DB79AF
execution-time: 0.0256829262
set-cookie: PHPSESSID=dfc8e5fa9182a96036eed8fc4f8cbcf3; path=/
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 87627c35fd87b4fa-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| at.alicdn.com/t/font_3322510_mbcsazk8hbh.woff2?t=1649751168305 | 47.246.44.250 | 200 OK | 2.2 kB |
URL GET HTTP/2at.alicdn.com/t/font_3322510_mbcsazk8hbh.woff2?t=1649751168305 IP47.246.44.250:443 ASN#24429 Zhejiang Taobao Network Co.,Ltd
Requested byhttps://4f-onlineshop.com/ CertificateIssuerGlobalSign nv-sa Subject*.tbcdn.cn Fingerprint29:04:BE:E6:49:30:F7:DC:C0:BE:56:8F:B4:AC:24:9B:50:1A:F7:E2 ValidityTue, 26 Dec 2023 03:36:04 GMT - Tue, 30 Jul 2024 02:26:11 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 2156, version 1.0 Hasha36453e7c0949c8d34e3cdbf3839c58d d618c2eb83361a5b3d899728ef1c353f23588852 c7607c52d51b6aba39419b7783ad7f2c8f82024a3718f3dd953bf68efaa88af9
GET /t/font_3322510_mbcsazk8hbh.woff2?t=1649751168305 HTTP/1.1
Host: at.alicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://4f-onlineshop.com
DNT: 1
Connection: keep-alive
Referer: https://4f-onlineshop.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: font/woff2
content-length: 2156
date: Thu, 18 Apr 2024 06:09:18 GMT
x-oss-request-id: 6620B90EB096773934A47CD3
vary: Origin
accept-ranges: bytes
etag: "A36453E7C0949C8D34E3CDBF3839C58D"
last-modified: Tue, 12 Apr 2022 08:12:48 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 8986299596544116107
x-oss-storage-class: Standard
cache-control: max-age=63072000
content-md5: o2RT58CUnI00482/ODnFjQ==
x-oss-server-time: 1
ali-swift-global-savetime: 1713420558
via: cache23.l2de2[516,517,200-0,M], cache2.l2de2[518,0], ens-cache6.se2[541,540,200-0,M], ens-cache17.se2[545,0]
x-cache: MISS TCP_MISS dirn:-2:-2
x-swift-savetime: Thu, 18 Apr 2024 06:09:18 GMT
x-swift-cachetime: 31104000
access-control-allow-origin: *
timing-allow-origin: *
eagleid: 2ff62ca517134205578514426e
X-Firefox-Spdy: h2
|
|
| | 104.16.198.133 | 200 OK | 842 kB |
URL User Request GET HTTP/2IP104.16.198.133:443
CertificateIssuerGoogle Trust Services LLC Subject4f-onlineshop.com Fingerprint47:CC:0D:E1:A0:25:7F:A2:83:8B:12:C7:49:BC:5B:FB:B3:69:3E:16 ValiditySat, 16 Mar 2024 13:58:38 GMT - Fri, 14 Jun 2024 13:58:37 GMT
Size842 kB (842234 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: 4f-onlineshop.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 06:09:15 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
set-cookie: _fbs_fbp=fb.1.1713420555809.1616014724; expires=Wed, 17-Jul-2024 06:09:15 GMT; Max-Age=7776000; path=/
oemsaas_global_visit_id=CC9249FA-8468-E1F2-3793-C32D1488D069; expires=Sun, 16-Apr-2034 06:09:15 GMT; Max-Age=315360000; path=/
oemsaas_checkout_visit_id=318D8D4C-6DF2-7DDC-5D0B-F60785690063; expires=Sun, 16-Apr-2034 06:09:15 GMT; Max-Age=315360000; path=/
oemsaas_global_visit_session=DE56FC3E-C4B7-E7FE-E476-886BEF3A5610; expires=Fri, 19-Apr-2024 06:09:15 GMT; Max-Age=86400; path=/
utm_source=direct; expires=Sat, 18-May-2024 06:09:15 GMT; Max-Age=2592000; path=/
utm_medium=default; expires=Sat, 18-May-2024 06:09:15 GMT; Max-Age=2592000; path=/
utm_term=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
utm_campaign=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
utm_content=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
order_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1713420555%2C%22expire_time%22%3A1716012555%7D%5D; path=/
landing_page=aHR0cHM6Ly80Zi1vbmxpbmVzaG9wLmNvbS8%3D; expires=Fri, 18-Apr-2025 06:09:15 GMT; Max-Age=31536000; path=/
oemsaas_keep_alive=001A17CA-59CA-F666-7705-118B770F729D; expires=Thu, 18-Apr-2024 06:39:15 GMT; Max-Age=1800; path=/
first_http_referer=null; expires=Sat, 18-May-2024 06:09:15 GMT; Max-Age=2592000; path=/
PHPSESSID=dfc8e5fa9182a96036eed8fc4f8cbcf3; path=/
execution-time: 0.0871419907
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 87627c280c2fb4fa-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| 4f-onlineshop.com/app-assets/countdown/61353/index.js?var=1698305618 | 104.16.198.133 | 200 OK | 125 kB |
URL GET HTTP/24f-onlineshop.com/app-assets/countdown/61353/index.js?var=1698305618 IP104.16.198.133:443
Requested byhttps://4f-onlineshop.com/ CertificateIssuerGoogle Trust Services LLC Subject4f-onlineshop.com Fingerprint47:CC:0D:E1:A0:25:7F:A2:83:8B:12:C7:49:BC:5B:FB:B3:69:3E:16 ValiditySat, 16 Mar 2024 13:58:38 GMT - Fri, 14 Jun 2024 13:58:37 GMT
Size125 kB (125189 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /app-assets/countdown/61353/index.js?var=1698305618 HTTP/1.1
Host: 4f-onlineshop.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4f-onlineshop.com/
DNT: 1
Connection: keep-alive
Cookie: _fbs_fbp=fb.1.1713420555809.1616014724; oemsaas_global_visit_id=CC9249FA-8468-E1F2-3793-C32D1488D069; oemsaas_checkout_visit_id=318D8D4C-6DF2-7DDC-5D0B-F60785690063; oemsaas_global_visit_session=DE56FC3E-C4B7-E7FE-E476-886BEF3A5610; utm_source=direct; utm_medium=default; order_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1713420555%2C%22expire_time%22%3A1716012555%7D%5D; landing_page=aHR0cHM6Ly80Zi1vbmxpbmVzaG9wLmNvbS8%3D; oemsaas_keep_alive=001A17CA-59CA-F666-7705-118B770F729D; first_http_referer=null; PHPSESSID=dfc8e5fa9182a96036eed8fc4f8cbcf3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 06:09:17 GMT
content-type: application/javascript
vary: Accept-Encoding, Origin
x-oss-request-id: 6620B90CEC136E3239AF99C4
last-modified: Wed, 17 Apr 2024 03:05:17 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 6183438159137031776
x-oss-storage-class: Standard
cache-control: public, max-age=14400
x-oss-ec: 0048-00000113
content-disposition: attachment
x-oss-force-download: true
content-md5: ueyWUpMBQpZJfndThVIciA==
x-oss-server-time: 2
content-encoding: gzip
cf-cache-status: MISS
expires: Thu, 18 Apr 2024 10:09:17 GMT
server: cloudflare
cf-ray: 87627c2e0b19b4fa-OSL
X-Firefox-Spdy: h2
|
|
| 4f-onlineshop.com/homeapi/collect | 104.16.198.133 | 200 OK | 9 B |
URL POST HTTP/24f-onlineshop.com/homeapi/collect IP104.16.198.133:443
Requested byhttps://4f-onlineshop.com/ CertificateIssuerGoogle Trust Services LLC Subject4f-onlineshop.com Fingerprint47:CC:0D:E1:A0:25:7F:A2:83:8B:12:C7:49:BC:5B:FB:B3:69:3E:16 ValiditySat, 16 Mar 2024 13:58:38 GMT - Fri, 14 Jun 2024 13:58:37 GMT
File typeASCII text, with no line terminators Hash311486df619d42e069bcdc41e73f335d b3f9153ae3eef9847a707e36b7f54f989d4a4235 587b05cd8d59f9820d2cf168b07d46b1519d12ee7a2f7062a2490da0a99ccb50
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /homeapi/collect HTTP/1.1
Host: 4f-onlineshop.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4f-onlineshop.com/
Content-Type: application/json
Content-Length: 601
Origin: https://4f-onlineshop.com
DNT: 1
Connection: keep-alive
Cookie: _fbs_fbp=fb.1.1713420555809.1616014724; oemsaas_global_visit_id=CC9249FA-8468-E1F2-3793-C32D1488D069; oemsaas_checkout_visit_id=318D8D4C-6DF2-7DDC-5D0B-F60785690063; oemsaas_global_visit_session=DE56FC3E-C4B7-E7FE-E476-886BEF3A5610; utm_source=direct; utm_medium=default; order_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1713420555%2C%22expire_time%22%3A1716012555%7D%5D; landing_page=aHR0cHM6Ly80Zi1vbmxpbmVzaG9wLmNvbS8%3D; oemsaas_keep_alive=001A17CA-59CA-F666-7705-118B770F729D; first_http_referer=null; PHPSESSID=dfc8e5fa9182a96036eed8fc4f8cbcf3; oemcart_client_user_agent=Mozilla%252F5.0%2520(X11%253B%2520Linux%2520x86_64%253B%2520rv%253A96.0)%2520Gecko%252F20100101%2520Firefox%252F96.0; oemcart_client_pre_url=; oemcart_client_timezone=Etc%252FUTC; oemcart_client_screen_size=1280X1024; oemcart_client_broswer_language=en-US; oemcart_client_viewport_size=1280X1024; oemcart_client_broswer_date_time=2024-04-18%2006%3A09%3A16; _scid=ebfcf4e0-6c9f-4782-8731-c678a6daa7a4; _scid_r=ebfcf4e0-6c9f-4782-8731-c678a6daa7a4; googtrans=%2Fauto%2Fen; app_popups_time_type_diy_1860=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 06:09:19 GMT
content-type: text/html;charset=utf-8
trace_id: 2B0AD992-1DD4-09A0-D5F7-732DD90CC96F
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 87627c409a48b4fa-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| 4f-onlineshop.com/app-assets/trusttool/61353/index.js?var=1709621308 | 104.16.198.133 | 200 OK | 823 kB |
URL GET HTTP/24f-onlineshop.com/app-assets/trusttool/61353/index.js?var=1709621308 IP104.16.198.133:443
Requested byhttps://4f-onlineshop.com/ CertificateIssuerGoogle Trust Services LLC Subject4f-onlineshop.com Fingerprint47:CC:0D:E1:A0:25:7F:A2:83:8B:12:C7:49:BC:5B:FB:B3:69:3E:16 ValiditySat, 16 Mar 2024 13:58:38 GMT - Fri, 14 Jun 2024 13:58:37 GMT
Size823 kB (822713 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /app-assets/trusttool/61353/index.js?var=1709621308 HTTP/1.1
Host: 4f-onlineshop.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4f-onlineshop.com/
DNT: 1
Connection: keep-alive
Cookie: _fbs_fbp=fb.1.1713420555809.1616014724; oemsaas_global_visit_id=CC9249FA-8468-E1F2-3793-C32D1488D069; oemsaas_checkout_visit_id=318D8D4C-6DF2-7DDC-5D0B-F60785690063; oemsaas_global_visit_session=DE56FC3E-C4B7-E7FE-E476-886BEF3A5610; utm_source=direct; utm_medium=default; order_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1713420555%2C%22expire_time%22%3A1716012555%7D%5D; landing_page=aHR0cHM6Ly80Zi1vbmxpbmVzaG9wLmNvbS8%3D; oemsaas_keep_alive=001A17CA-59CA-F666-7705-118B770F729D; first_http_referer=null; PHPSESSID=dfc8e5fa9182a96036eed8fc4f8cbcf3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 06:09:17 GMT
content-type: application/javascript
vary: Accept-Encoding, Origin
x-oss-request-id: 6620B90C2DC38D3437BACAD4
last-modified: Wed, 17 Apr 2024 03:05:22 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 16105371887059623042
x-oss-storage-class: Standard
cache-control: public, max-age=14400
x-oss-ec: 0048-00000113
content-disposition: attachment
x-oss-force-download: true
content-md5: CTpdSw6a1klihII5+2G/2g==
x-oss-server-time: 2
content-encoding: gzip
cf-cache-status: MISS
expires: Thu, 18 Apr 2024 10:09:17 GMT
server: cloudflare
cf-ray: 87627c2e0b2bb4fa-OSL
X-Firefox-Spdy: h2
|
|
| 4f-onlineshop.com/app-api/recentproductbrowsetool/61353/config | 104.16.198.133 | 200 OK | 685 B |
URL GET HTTP/24f-onlineshop.com/app-api/recentproductbrowsetool/61353/config IP104.16.198.133:443
Requested byhttps://4f-onlineshop.com/ CertificateIssuerGoogle Trust Services LLC Subject4f-onlineshop.com Fingerprint47:CC:0D:E1:A0:25:7F:A2:83:8B:12:C7:49:BC:5B:FB:B3:69:3E:16 ValiditySat, 16 Mar 2024 13:58:38 GMT - Fri, 14 Jun 2024 13:58:37 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (771), with no line terminators Hashbed30f0480bb8811eea1960b9d765b88 2a3b3b6c0c7ed0a6de342528c169cb59bb3c6ea5 9b3a229cd0166065f4ef39e29e835b91690a4b9ae5766b664067311b210d4b3f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /app-api/recentproductbrowsetool/61353/config HTTP/1.1
Host: 4f-onlineshop.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4f-onlineshop.com/
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: _fbs_fbp=fb.1.1713420555809.1616014724; oemsaas_global_visit_id=CC9249FA-8468-E1F2-3793-C32D1488D069; oemsaas_checkout_visit_id=318D8D4C-6DF2-7DDC-5D0B-F60785690063; oemsaas_global_visit_session=DE56FC3E-C4B7-E7FE-E476-886BEF3A5610; utm_source=direct; utm_medium=default; order_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1713420555%2C%22expire_time%22%3A1716012555%7D%5D; landing_page=aHR0cHM6Ly80Zi1vbmxpbmVzaG9wLmNvbS8%3D; oemsaas_keep_alive=001A17CA-59CA-F666-7705-118B770F729D; first_http_referer=null; PHPSESSID=dfc8e5fa9182a96036eed8fc4f8cbcf3; oemcart_client_user_agent=Mozilla%252F5.0%2520(X11%253B%2520Linux%2520x86_64%253B%2520rv%253A96.0)%2520Gecko%252F20100101%2520Firefox%252F96.0; oemcart_client_pre_url=; oemcart_client_timezone=Etc%252FUTC; oemcart_client_screen_size=1280X1024; oemcart_client_broswer_language=en-US; oemcart_client_viewport_size=1280X1024; oemcart_client_broswer_date_time=2024-04-18%2006%3A09%3A16; _scid=ebfcf4e0-6c9f-4782-8731-c678a6daa7a4; _scid_r=ebfcf4e0-6c9f-4782-8731-c678a6daa7a4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 06:09:17 GMT
content-type: application/json; charset=utf-8
x-trace-id: 1BD03971-ED6C-0962-4A5B-E83ADFB1840D
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-max-age: 1800
access-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS
access-control-allow-headers: *
access-control-request-headers: *
access-control-expose-headers: *
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 87627c32e9bdb4fa-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_42x16dp.png | 142.250.74.35 | 200 OK | 910 B |
URL GET HTTP/3www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_42x16dp.png IP142.250.74.35:443
Requested byhttps://4f-onlineshop.com/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typePNG image data, 42 x 16, 8-bit/color RGBA, non-interlaced Hashefa6bb2bfe459bc6f4bdafa3db0383f6 52d15ce52fe50643e542c17812de43f4ed1b6ee0 6318394f737c66f0e2ccfcd88e3935c6667633a1b95fa29fba2b75431d55eef2
GET /images/branding/googlelogo/1x/googlelogo_color_42x16dp.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4f-onlineshop.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 910
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 14 Apr 2024 14:36:23 GMT
expires: Mon, 14 Apr 2025 14:36:23 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 02 Nov 2023 22:48:00 GMT
content-type: image/png
vary: Origin
age: 315176
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cdn.staticsoe.com/uploads/0/theme/default/public_assets/public.js?v=5c945293da0fe6770b60caf3ca010bc5 | 104.18.169.76 | 200 OK | 484 kB |
URL GET HTTP/2cdn.staticsoe.com/uploads/0/theme/default/public_assets/public.js?v=5c945293da0fe6770b60caf3ca010bc5 IP104.18.169.76:443
Requested byhttps://4f-onlineshop.com/ CertificateIssuerCloudflare, Inc. Subjectcdn.staticsoe.com Fingerprint81:12:7B:A0:28:A4:6D:E5:44:00:F3:A3:14:8C:B8:2C:42:34:DA:CD ValidityWed, 14 Feb 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
Size484 kB (483701 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/0/theme/default/public_assets/public.js?v=5c945293da0fe6770b60caf3ca010bc5 HTTP/1.1
Host: cdn.staticsoe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4f-onlineshop.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 06:09:16 GMT
content-type: application/javascript
vary: Accept-Encoding, Origin
x-oss-request-id: 661F775EC3F24534348C96F7
last-modified: Wed, 17 Apr 2024 07:16:44 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 9134437363252466855
x-oss-storage-class: Standard
content-md5: 7HD++FdusuHL3gpCkhOVMA==
x-oss-server-time: 8
cf-cache-status: HIT
age: 42945
expires: Fri, 26 Apr 2024 06:09:16 GMT
cache-control: public, max-age=691200
server: cloudflare
cf-ray: 87627c2e5a3356a5-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| 4f-onlineshop.com/app-assets/sizechart/61353/index.js?var=1698391181 | 104.16.198.133 | 200 OK | 124 kB |
URL GET HTTP/24f-onlineshop.com/app-assets/sizechart/61353/index.js?var=1698391181 IP104.16.198.133:443
Requested byhttps://4f-onlineshop.com/ CertificateIssuerGoogle Trust Services LLC Subject4f-onlineshop.com Fingerprint47:CC:0D:E1:A0:25:7F:A2:83:8B:12:C7:49:BC:5B:FB:B3:69:3E:16 ValiditySat, 16 Mar 2024 13:58:38 GMT - Fri, 14 Jun 2024 13:58:37 GMT
Size124 kB (123973 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /app-assets/sizechart/61353/index.js?var=1698391181 HTTP/1.1
Host: 4f-onlineshop.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4f-onlineshop.com/
DNT: 1
Connection: keep-alive
Cookie: _fbs_fbp=fb.1.1713420555809.1616014724; oemsaas_global_visit_id=CC9249FA-8468-E1F2-3793-C32D1488D069; oemsaas_checkout_visit_id=318D8D4C-6DF2-7DDC-5D0B-F60785690063; oemsaas_global_visit_session=DE56FC3E-C4B7-E7FE-E476-886BEF3A5610; utm_source=direct; utm_medium=default; order_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1713420555%2C%22expire_time%22%3A1716012555%7D%5D; landing_page=aHR0cHM6Ly80Zi1vbmxpbmVzaG9wLmNvbS8%3D; oemsaas_keep_alive=001A17CA-59CA-F666-7705-118B770F729D; first_http_referer=null; PHPSESSID=dfc8e5fa9182a96036eed8fc4f8cbcf3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 06:09:17 GMT
content-type: application/javascript
vary: Accept-Encoding, Origin
x-oss-request-id: 6620B90C5920E23137838E5C
last-modified: Wed, 17 Apr 2024 03:05:22 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 5562022859594627098
x-oss-storage-class: Standard
cache-control: public, max-age=14400
x-oss-ec: 0048-00000113
content-disposition: attachment
x-oss-force-download: true
content-md5: fpUXd2qqZWDmOUAolpR0Jg==
x-oss-server-time: 2
content-encoding: gzip
cf-cache-status: MISS
expires: Thu, 18 Apr 2024 10:09:17 GMT
server: cloudflare
cf-ray: 87627c2e0b21b4fa-OSL
X-Firefox-Spdy: h2
|
|
| 4f-onlineshop.com/app-assets/virtualtrack/61353/index.js?var=1698305978 | 104.16.198.133 | 200 OK | 121 kB |
URL GET HTTP/24f-onlineshop.com/app-assets/virtualtrack/61353/index.js?var=1698305978 IP104.16.198.133:443
Requested byhttps://4f-onlineshop.com/ CertificateIssuerGoogle Trust Services LLC Subject4f-onlineshop.com Fingerprint47:CC:0D:E1:A0:25:7F:A2:83:8B:12:C7:49:BC:5B:FB:B3:69:3E:16 ValiditySat, 16 Mar 2024 13:58:38 GMT - Fri, 14 Jun 2024 13:58:37 GMT
Size121 kB (120983 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /app-assets/virtualtrack/61353/index.js?var=1698305978 HTTP/1.1
Host: 4f-onlineshop.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4f-onlineshop.com/
DNT: 1
Connection: keep-alive
Cookie: _fbs_fbp=fb.1.1713420555809.1616014724; oemsaas_global_visit_id=CC9249FA-8468-E1F2-3793-C32D1488D069; oemsaas_checkout_visit_id=318D8D4C-6DF2-7DDC-5D0B-F60785690063; oemsaas_global_visit_session=DE56FC3E-C4B7-E7FE-E476-886BEF3A5610; utm_source=direct; utm_medium=default; order_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1713420555%2C%22expire_time%22%3A1716012555%7D%5D; landing_page=aHR0cHM6Ly80Zi1vbmxpbmVzaG9wLmNvbS8%3D; oemsaas_keep_alive=001A17CA-59CA-F666-7705-118B770F729D; first_http_referer=null; PHPSESSID=dfc8e5fa9182a96036eed8fc4f8cbcf3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 06:09:17 GMT
content-type: application/javascript
vary: Accept-Encoding, Origin
x-oss-request-id: 6620B90C145E9837324D56D0
last-modified: Wed, 17 Apr 2024 03:05:22 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 13313105535713749605
x-oss-storage-class: Standard
cache-control: public, max-age=14400
x-oss-ec: 0048-00000113
content-disposition: attachment
x-oss-force-download: true
content-md5: 7uLn5HpKpWPY+tSkw/4DnA==
x-oss-server-time: 1
content-encoding: gzip
cf-cache-status: MISS
expires: Thu, 18 Apr 2024 10:09:17 GMT
server: cloudflare
cf-ray: 87627c2e0b1fb4fa-OSL
X-Firefox-Spdy: h2
|
|
| 4f-onlineshop.com/homeapi/collect | 104.16.198.133 | 200 OK | 9 B |
URL POST HTTP/24f-onlineshop.com/homeapi/collect IP104.16.198.133:443
Requested byhttps://4f-onlineshop.com/ CertificateIssuerGoogle Trust Services LLC Subject4f-onlineshop.com Fingerprint47:CC:0D:E1:A0:25:7F:A2:83:8B:12:C7:49:BC:5B:FB:B3:69:3E:16 ValiditySat, 16 Mar 2024 13:58:38 GMT - Fri, 14 Jun 2024 13:58:37 GMT
File typeASCII text, with no line terminators Hash311486df619d42e069bcdc41e73f335d b3f9153ae3eef9847a707e36b7f54f989d4a4235 587b05cd8d59f9820d2cf168b07d46b1519d12ee7a2f7062a2490da0a99ccb50
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /homeapi/collect HTTP/1.1
Host: 4f-onlineshop.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4f-onlineshop.com/
Content-Type: application/json
Content-Length: 418
Origin: https://4f-onlineshop.com
DNT: 1
Connection: keep-alive
Cookie: _fbs_fbp=fb.1.1713420555809.1616014724; oemsaas_global_visit_id=CC9249FA-8468-E1F2-3793-C32D1488D069; oemsaas_checkout_visit_id=318D8D4C-6DF2-7DDC-5D0B-F60785690063; oemsaas_global_visit_session=DE56FC3E-C4B7-E7FE-E476-886BEF3A5610; utm_source=direct; utm_medium=default; order_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1713420555%2C%22expire_time%22%3A1716012555%7D%5D; landing_page=aHR0cHM6Ly80Zi1vbmxpbmVzaG9wLmNvbS8%3D; oemsaas_keep_alive=001A17CA-59CA-F666-7705-118B770F729D; first_http_referer=null; PHPSESSID=dfc8e5fa9182a96036eed8fc4f8cbcf3; oemcart_client_user_agent=Mozilla%252F5.0%2520(X11%253B%2520Linux%2520x86_64%253B%2520rv%253A96.0)%2520Gecko%252F20100101%2520Firefox%252F96.0; oemcart_client_pre_url=; oemcart_client_timezone=Etc%252FUTC; oemcart_client_screen_size=1280X1024; oemcart_client_broswer_language=en-US; oemcart_client_viewport_size=1280X1024; oemcart_client_broswer_date_time=2024-04-18%2006%3A09%3A16
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 06:09:16 GMT
content-type: text/html;charset=utf-8
trace_id: 7672ACA8-73AD-C01F-07AA-04A793F3360C
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 87627c2fbd65b4fa-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| 4f-onlineshop.com/homeapi/collect | 104.16.198.133 | 200 OK | 9 B |
URL POST HTTP/24f-onlineshop.com/homeapi/collect IP104.16.198.133:443
Requested byhttps://4f-onlineshop.com/ CertificateIssuerGoogle Trust Services LLC Subject4f-onlineshop.com Fingerprint47:CC:0D:E1:A0:25:7F:A2:83:8B:12:C7:49:BC:5B:FB:B3:69:3E:16 ValiditySat, 16 Mar 2024 13:58:38 GMT - Fri, 14 Jun 2024 13:58:37 GMT
File typeASCII text, with no line terminators Hash311486df619d42e069bcdc41e73f335d b3f9153ae3eef9847a707e36b7f54f989d4a4235 587b05cd8d59f9820d2cf168b07d46b1519d12ee7a2f7062a2490da0a99ccb50
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /homeapi/collect HTTP/1.1
Host: 4f-onlineshop.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4f-onlineshop.com/
Content-Type: application/json
Content-Length: 919
Origin: https://4f-onlineshop.com
DNT: 1
Connection: keep-alive
Cookie: _fbs_fbp=fb.1.1713420555809.1616014724; oemsaas_global_visit_id=CC9249FA-8468-E1F2-3793-C32D1488D069; oemsaas_checkout_visit_id=318D8D4C-6DF2-7DDC-5D0B-F60785690063; oemsaas_global_visit_session=DE56FC3E-C4B7-E7FE-E476-886BEF3A5610; utm_source=direct; utm_medium=default; order_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1713420555%2C%22expire_time%22%3A1716012555%7D%5D; landing_page=aHR0cHM6Ly80Zi1vbmxpbmVzaG9wLmNvbS8%3D; oemsaas_keep_alive=001A17CA-59CA-F666-7705-118B770F729D; first_http_referer=null; PHPSESSID=dfc8e5fa9182a96036eed8fc4f8cbcf3; oemcart_client_user_agent=Mozilla%252F5.0%2520(X11%253B%2520Linux%2520x86_64%253B%2520rv%253A96.0)%2520Gecko%252F20100101%2520Firefox%252F96.0; oemcart_client_pre_url=; oemcart_client_timezone=Etc%252FUTC; oemcart_client_screen_size=1280X1024; oemcart_client_broswer_language=en-US; oemcart_client_viewport_size=1280X1024; oemcart_client_broswer_date_time=2024-04-18%2006%3A09%3A16; _scid=ebfcf4e0-6c9f-4782-8731-c678a6daa7a4; _scid_r=ebfcf4e0-6c9f-4782-8731-c678a6daa7a4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 06:09:18 GMT
content-type: text/html;charset=utf-8
trace_id: 582FD682-9D9E-67E5-71F1-6EE6A2348492
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 87627c371f23b4fa-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
0.0.0.0