| salenzvs.live/static/market/img/payment.png |  104.21.10.59 | 200 OK | 15 kB |
URL GET HTTP/3salenzvs.live/static/market/img/payment.png IP104.21.10.59:443
Requested byhttps://salenzvs.live/product_details/103535809.html CertificateIssuerLet's Encrypt Subjectsalenzvs.live FingerprintC4:93:74:89:D7:54:43:B0:B2:39:98:89:7A:4C:0B:29:5E:EE:B7:66 ValidityTue, 02 Apr 2024 03:14:40 GMT - Mon, 01 Jul 2024 03:14:39 GMT
File typePNG image data, 342 x 26, 8-bit/color RGBA, non-interlaced Hashd9e27afb8d07e73a5d78c58219db8284 2c8e0b0821ae555b66a6d9ad9d3f3a97d8164f99 1567d764b3ee71f11f52d807789d9a970c60dd195b39f2b295d476308d76aeb3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/market/img/payment.png HTTP/1.1
Host: salenzvs.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://salenzvs.live/product_details/103535809.html
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6InBXSmN6cm9zNmFNN0JTbGVoNWJkMmc9PSIsInZhbHVlIjoiUEhjai95Vk1vSlQweWhrb0NFNHRQRXhqdkcxaEpHV1ZHRXRBUGZjTnhIVXhEUk8yeVN6MGxRZy9LWGZRNlhvbzNFM0hhRWVNbzI2WXh5cjA3ZWpyd3hybHN2cnBEYWJYWmRuU2Q1UFBEYWNjR29sQkw2dm5JWktoblRjRTVDZ3oiLCJtYWMiOiJjOWRkOGIyNDQzMzQzMDc3Y2E1MjhiMjVlNzU5ZDRjNGVlOGU1YjMwMjMyNGFjNTEzNWZmMmMyZjVlMDc2YzI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjJiRUFOQWRKU2RUVllNL3kySGgwTXc9PSIsInZhbHVlIjoiN255TWI2cmdIeXQ4MzZhM3NHRnVBcFY0M0RtUE1uN3A0OWtVK1ZHZDZkd0Y5TVdNM3hjak8zcjZMdnFNZnZ2N01QanRnblZ4dy82R1c4WVhYTk1IcENvRjIzOS9SSlg5YkxMdEZmVkRzL09RSE9va203VzBMajRmY2p4Yll4aEEiLCJtYWMiOiI2Y2Q2Y2ZhYTZjMzZjNzJjMWFhYWFlYjk4Zjk3N2ZmNTZlMjcxN2UzZmNhNTEwOWEyNGRmZjEzY2Y5ZGNjMDI1IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 23 Apr 2024 20:26:12 GMT
content-type: image/png
content-length: 14874
last-modified: Thu, 14 Mar 2024 02:59:07 GMT
etag: "3a1a-613961329bc31"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4129
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HYRolG5Qpla8JjXuW6uWXqJxrwLvTbv8JTFEekpduZTMHhXIl%2B0wlVKF8y3GD%2Fe%2Fy3y9kShHGtR%2Bnc5ld1txfgMOtFVS7BBP0Nl6qEkfa0Pr9n6jxU3DRUV6n68wE6M5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87909654ca64b4ed-OSL
alt-svc: h3=":443"; ma=86400
|
|
| salenzvs.live/static/logo.png | 104.21.10.59 | 200 OK | 5.9 kB |
URL GET HTTP/3salenzvs.live/static/logo.png IP104.21.10.59:443
Requested byhttps://salenzvs.live/product_details/103535809.html CertificateIssuerLet's Encrypt Subjectsalenzvs.live FingerprintC4:93:74:89:D7:54:43:B0:B2:39:98:89:7A:4C:0B:29:5E:EE:B7:66 ValidityTue, 02 Apr 2024 03:14:40 GMT - Mon, 01 Jul 2024 03:14:39 GMT
File typePNG image data, 115 x 41, 8-bit/color RGBA, non-interlaced Hash9740baf71f9fd51a3dc86430f5f49ea2 4617137861adc2341b3377817bf728c4c87e8b37 9e7bdb3c28f7bdd912a7b3f96918bac061ed5f64216c59fc265a83d023f66952
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/logo.png HTTP/1.1
Host: salenzvs.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://salenzvs.live/product_details/103535809.html
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6InBXSmN6cm9zNmFNN0JTbGVoNWJkMmc9PSIsInZhbHVlIjoiUEhjai95Vk1vSlQweWhrb0NFNHRQRXhqdkcxaEpHV1ZHRXRBUGZjTnhIVXhEUk8yeVN6MGxRZy9LWGZRNlhvbzNFM0hhRWVNbzI2WXh5cjA3ZWpyd3hybHN2cnBEYWJYWmRuU2Q1UFBEYWNjR29sQkw2dm5JWktoblRjRTVDZ3oiLCJtYWMiOiJjOWRkOGIyNDQzMzQzMDc3Y2E1MjhiMjVlNzU5ZDRjNGVlOGU1YjMwMjMyNGFjNTEzNWZmMmMyZjVlMDc2YzI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjJiRUFOQWRKU2RUVllNL3kySGgwTXc9PSIsInZhbHVlIjoiN255TWI2cmdIeXQ4MzZhM3NHRnVBcFY0M0RtUE1uN3A0OWtVK1ZHZDZkd0Y5TVdNM3hjak8zcjZMdnFNZnZ2N01QanRnblZ4dy82R1c4WVhYTk1IcENvRjIzOS9SSlg5YkxMdEZmVkRzL09RSE9va203VzBMajRmY2p4Yll4aEEiLCJtYWMiOiI2Y2Q2Y2ZhYTZjMzZjNzJjMWFhYWFlYjk4Zjk3N2ZmNTZlMjcxN2UzZmNhNTEwOWEyNGRmZjEzY2Y5ZGNjMDI1IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 23 Apr 2024 20:26:12 GMT
content-type: image/png
content-length: 5946
last-modified: Thu, 14 Mar 2024 02:59:07 GMT
etag: "173a-613961327d7d0"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4129
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dBMP8DhAGAQEZpzqyMgFeIwcGGrNi61wpedgNE%2Ftz2GZzxfjh0wm4xCqLap0EcXiRwhpTvQwaPpzYypP394tn81Ag650TiKydo51BIz7OdaNJZ4xOnqUiG7Dzy7BbXfp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87909654ca63b4ed-OSL
alt-svc: h3=":443"; ma=86400
|
|
| cdnjs.cloudflare.com/ajax/libs/vue-resource/1.5.3/vue-resource.min.js | 104.17.24.14 | 200 OK | 4.9 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/vue-resource/1.5.3/vue-resource.min.js IP104.17.24.14:443
Requested byhttps://salenzvs.live/product_details/103535809.html CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (14957) Hash5f4a59735ca9517d0478f395439bd517 f820c08cf114da8ec451e8eedc0da51dfcba5e02 ff5c4da48c495fd0e611aec47b2986097c0351d5e1a527ab1ea64085dcdcdbe9
GET /ajax/libs/vue-resource/1.5.3/vue-resource.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 23 Apr 2024 20:26:12 GMT
content-type: application/javascript; charset=utf-8
content-length: 4866
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "60c785b9-1302"
last-modified: Mon, 14 Jun 2021 16:37:13 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 700655
expires: Sun, 13 Apr 2025 20:26:12 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iJSEjySsQxuXT0FsnkKcwbqx3TlEpx%2FKlJ8dOqga4Eoj6BijBLyXU7XQjgJjg2ysas8oA%2BtyR6ilpSXboqTvSf%2BVVcvvIdKZSd41Z1Tg8fkxUj1pyAukNuy9GCSrs0w%2F89Bppi4e"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 879096550aaab515-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/vant/2.12.48/vant.min.js | 104.17.24.14 | 200 OK | 68 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/vant/2.12.48/vant.min.js IP104.17.24.14:443
Requested byhttps://salenzvs.live/product_details/103535809.html CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (57307) Hash0292da744fb4f768ae77370f868a674e 6dbafd633d187d11e2ef0a9a47044fd5646c70fb 068b71488c3a0d9ccf95e76a72a93678f9baf45786e87e0b2dc8f1be25f72468
GET /ajax/libs/vant/2.12.48/vant.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 23 Apr 2024 20:26:12 GMT
content-type: application/javascript; charset=utf-8
content-length: 67811
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "62b69136-108e3"
last-modified: Sat, 25 Jun 2022 04:38:14 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1132211
expires: Sun, 13 Apr 2025 20:26:12 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5io%2B8%2B2wiEq9cxInEnD3dcEcXgp3H4m2m2yq%2F2jr6p3L1Wmq%2FvSVXVCU5axP7ZP6RNALpqFZjhkRZCEIOWzej6K02vBMcrcIdVEH5RF4dXrnU274FAWwFQ4WpM0ZNHvTNS63nu0Z"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 879096550aacb515-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/Swiper/8.3.2/swiper-bundle.min.css | 104.17.24.14 | 200 OK | 3.9 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/Swiper/8.3.2/swiper-bundle.min.css IP104.17.24.14:443
Requested byhttps://salenzvs.live/product_details/103535809.html CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeASCII text, with very long lines (16213) Hash951eae8c8a442c2940c54d180301ed41 771518669a370d915adf0d207f2a22092a768cd1 4359643e1b6350bffd6e16d543603ea7b393855957e792ac7f9178a81ed0b14d
GET /ajax/libs/Swiper/8.3.2/swiper-bundle.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 23 Apr 2024 20:26:12 GMT
content-type: text/css; charset=utf-8
content-length: 3945
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "62dffbc4-f69"
last-modified: Tue, 26 Jul 2022 14:35:48 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1114048
expires: Sun, 13 Apr 2025 20:26:12 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8uQBLZRMiC%2Baf4Xedmn090yq0jSb5IttdB%2Bqyqh6%2BIDG6lkQ%2Bc9Te2ybqIvg1S3oVknO1nfv7hqFR2Tt2PTyTiE5YuXWYLt4A6b03G7PLTrhyKwdgOVvU%2BJL35KLc0mL0R6dRT7B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 879096550aadb515-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/Swiper/8.3.2/swiper-bundle.js | 104.17.24.14 | 200 OK | 50 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/Swiper/8.3.2/swiper-bundle.js IP104.17.24.14:443
Requested byhttps://salenzvs.live/product_details/103535809.html CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text Hashde581e420bf52d70e353080a13094ea8 7e727d99fea8c31c2f2e3173105d585ee3289d31 4eb89fcf77b0f8b3bb92ffae01f6a2773d836e9b15201337de8fe87e7e5c7fa5
GET /ajax/libs/Swiper/8.3.2/swiper-bundle.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 23 Apr 2024 20:26:12 GMT
content-type: application/javascript; charset=utf-8
content-length: 49876
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "62dffbc4-c2d4"
last-modified: Tue, 26 Jul 2022 14:35:48 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 8266331
expires: Sun, 13 Apr 2025 20:26:12 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EtOPMgmUC90Iv%2Bh0aY5PoNv9MpzFcxMbOU5nXBDDOAlx9wA1SB%2FhX465ReyfclR829gbG4J25drqH3NDcpE%2FEy53uChXJlruqnobShxYg%2B8lYhbmmN2LPmAoArlnfscGPjGZfJRC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 879096550aaeb515-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/vant/2.12.48/index.css | 104.17.24.14 | 200 OK | 38 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/vant/2.12.48/index.css IP104.17.24.14:443
Requested byhttps://salenzvs.live/product_details/103535809.html CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hash9a547188fa485f8ca9b2cc7d6d2524ef 7893335159a1f637eb24cd05aaba96ac156c7f65 897e513fc70a4e1759ceb06ed3c9348d036b36b724dc60d815f9f3124de6f433
GET /ajax/libs/vant/2.12.48/index.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 23 Apr 2024 20:26:12 GMT
content-type: text/css; charset=utf-8
content-length: 38108
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "62b69136-94dc"
last-modified: Sat, 25 Jun 2022 04:38:14 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1189730
expires: Sun, 13 Apr 2025 20:26:12 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3ohpfNoDTzniwmdT6iqgX8Kp77XOIC6LdwTg4czMjDgb4RH2qB6Yfbm6gedyRMgB5AaVtqS3dE7biom%2FSw%2FXWo74FILQMNOAJzLTgNxumcMJ89a%2FdkhFg4BnShBY%2FeJcvLfqIMm9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 879096550aa8b515-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| salenzvs.live/static/default/js/delighters.js | 104.21.10.59 | 200 OK | 63 kB |
URL GET HTTP/3salenzvs.live/static/default/js/delighters.js IP104.21.10.59:443
Requested byhttps://salenzvs.live/product_details/103535809.html CertificateIssuerLet's Encrypt Subjectsalenzvs.live FingerprintC4:93:74:89:D7:54:43:B0:B2:39:98:89:7A:4C:0B:29:5E:EE:B7:66 ValidityTue, 02 Apr 2024 03:14:40 GMT - Mon, 01 Jul 2024 03:14:39 GMT
Hashcc31823856831d96acd96628fe1bc12c 4441d2792dc7fb9f54cde379cd6dd5085ae7af33 0636cf1e7380cd58da452b76c4f7d8d902d25c735188b56d005c73a127bae19d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/default/js/delighters.js HTTP/1.1
Host: salenzvs.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://salenzvs.live/product_details/103535809.html
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6InBXSmN6cm9zNmFNN0JTbGVoNWJkMmc9PSIsInZhbHVlIjoiUEhjai95Vk1vSlQweWhrb0NFNHRQRXhqdkcxaEpHV1ZHRXRBUGZjTnhIVXhEUk8yeVN6MGxRZy9LWGZRNlhvbzNFM0hhRWVNbzI2WXh5cjA3ZWpyd3hybHN2cnBEYWJYWmRuU2Q1UFBEYWNjR29sQkw2dm5JWktoblRjRTVDZ3oiLCJtYWMiOiJjOWRkOGIyNDQzMzQzMDc3Y2E1MjhiMjVlNzU5ZDRjNGVlOGU1YjMwMjMyNGFjNTEzNWZmMmMyZjVlMDc2YzI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjJiRUFOQWRKU2RUVllNL3kySGgwTXc9PSIsInZhbHVlIjoiN255TWI2cmdIeXQ4MzZhM3NHRnVBcFY0M0RtUE1uN3A0OWtVK1ZHZDZkd0Y5TVdNM3hjak8zcjZMdnFNZnZ2N01QanRnblZ4dy82R1c4WVhYTk1IcENvRjIzOS9SSlg5YkxMdEZmVkRzL09RSE9va203VzBMajRmY2p4Yll4aEEiLCJtYWMiOiI2Y2Q2Y2ZhYTZjMzZjNzJjMWFhYWFlYjk4Zjk3N2ZmNTZlMjcxN2UzZmNhNTEwOWEyNGRmZjEzY2Y5ZGNjMDI1IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 23 Apr 2024 20:26:13 GMT
content-type: application/javascript
last-modified: Thu, 14 Mar 2024 02:59:07 GMT
etag: W/"a4b-613961327a120-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 4130
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=69d%2Bh%2FhPK%2FYfchrjLwSlyXav3bG4W2ENamgrvN1vt4DRa%2F0n%2FmGIPubQYMLflyZirNiiaVOZV3hyoVa8ES2BsqqOHXlZRh56uJmcfa1YCAV7l3kbsmemj0QISsCUEL%2Fl"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879096575d16b4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| cdn8.openculture.com/wp-content/uploads/2014/09/Marlborough-Tapestries-at-Blenheim.jpg |  143.204.55.41 | 200 OK | 407 kB |
URL GET HTTP/2cdn8.openculture.com/wp-content/uploads/2014/09/Marlborough-Tapestries-at-Blenheim.jpg IP143.204.55.41:443
Requested byhttps://salenzvs.live/product_details/103535809.html CertificateIssuerSectigo Limited Subject*.openculture.com FingerprintAC:7E:10:7B:5C:14:EF:42:96:19:F5:44:45:5D:DC:3F:0D:E1:87:E3 ValiditySat, 07 Oct 2023 00:00:00 GMT - Wed, 23 Oct 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 1500x1248, components 3 Size407 kB (407409 bytes) Hashb3a690d72184683d47aa40864d9ff564 33b20549783407cec5e4e73e40f733f01083c3d8 634f4dda1f213f015b3aeecac4ca5b790e7234c1a87b2998d88c1a3f51ad6224
GET /wp-content/uploads/2014/09/Marlborough-Tapestries-at-Blenheim.jpg HTTP/1.1
Host: cdn8.openculture.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
content-length: 407409
date: Sat, 20 Apr 2024 08:44:24 GMT
last-modified: Tue, 23 Sep 2014 04:19:06 GMT
etag: "b3a690d72184683d47aa40864d9ff564"
expires: Fri, 20 Sep 2024 04:19:05 GMT
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 5de23153ac267c206221751e1cccb6e8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: eAVooyXg085SoqfVvSu6L5kvRDVIWT05ApnwEEKkvmensOCpeq3kxw==
age: 301316
X-Firefox-Spdy: h2
|
|
| hips.hearstapps.com/hmg-prod/images/image-1-64dfb6ed359e6.jpg?crop=0.662xw:1.00xh;0.293xw,0&resize=1200:* | 151.101.128.155 | 200 OK | 289 kB |
URL GET HTTP/2hips.hearstapps.com/hmg-prod/images/image-1-64dfb6ed359e6.jpg?crop=0.662xw:1.00xh;0.293xw,0&resize=1200:* IP151.101.128.155:443
Requested byhttps://salenzvs.live/product_details/103535809.html CertificateIssuerGlobalSign nv-sa Subjectcosmopolitan.com Fingerprint19:5F:9C:A2:3D:12:23:11:23:DA:7E:B3:F6:62:AA:B9:40:ED:2D:B1 ValidityThu, 28 Mar 2024 16:45:06 GMT - Tue, 29 Apr 2025 16:45:05 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1200x1198, components 3 Size289 kB (289011 bytes) Hashcabe67ce8a4d19eb718be09b9838fa56 6800875393737c52a3c4d886e140e6a68f679c39 29d3cecd0f5829abc819ff1f706f858b7abc2f64fbb7e48fbf0e8eee2200dd71
GET /hmg-prod/images/image-1-64dfb6ed359e6.jpg?crop=0.662xw:1.00xh;0.293xw,0&resize=1200:* HTTP/1.1
Host: hips.hearstapps.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: max-age=31536000, stale-while-revalidate=604800
content-type: image/jpeg
x-animated: 0
x-canonical-ops: crop=1324:1322;586,0&resize=1200:1198
x-image-dimensions: 1200:1198
x-source-image-dimensions: 2000:1322
access-control-allow-origin: *
x-robots-tag: all
accept-ranges: bytes
age: 1413323
date: Tue, 23 Apr 2024 20:26:19 GMT
x-cache: HIT, MISS
timing-allow-origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 289011
X-Firefox-Spdy: h2
|
|
| www.harborfreight.com/media/catalog/product/cache/9fc4a8332f9638515cd199dd0f9238da/6/4/64996_W3.jpg | 151.101.65.124 | 200 OK | 36 kB |
URL GET HTTP/2www.harborfreight.com/media/catalog/product/cache/9fc4a8332f9638515cd199dd0f9238da/6/4/64996_W3.jpg IP151.101.65.124:443
Requested byhttps://salenzvs.live/product_details/103535809.html CertificateIssuerDigiCert Inc Subjectharborfreight.com FingerprintC3:7F:45:47:52:C9:0E:10:05:B5:50:3B:CB:51:C1:CD:74:2A:5A:01 ValidityWed, 06 Dec 2023 00:00:00 GMT - Sun, 05 Jan 2025 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80", progressive, precision 8, 1200x1200, components 3 Hash448d87017b75c2ca63ae637258967d44 a1b3b7c9bb3dd347d7d3358df9dc7d260a5c0c13 c7778079d32cef269a87cbc20551369c5cc3e917a0431cfa752b0daf74c92a3f
GET /media/catalog/product/cache/9fc4a8332f9638515cd199dd0f9238da/6/4/64996_W3.jpg HTTP/1.1
Host: www.harborfreight.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
etag: "61e1fb08-8db0"
last-modified: Fri, 14 Jan 2022 22:36:56 GMT
traceresponse: 00-17c7455600dbaf62887b3bbece4dda5a-623d5da13d2e1600-01
x-debug-info: eyJyZXRyaWVzIjowfQ==
x-platform-server: i-066266652ba5065b2, i-066266652ba5065b2
cache-control: max-age=259200
accept-ranges: bytes
age: 230196
date: Tue, 23 Apr 2024 20:26:19 GMT
x-served-by: cache-bfi-kbfi7400118-BFI, cache-hel1410029-HEL
x-cache: HIT, MISS
x-cache-hits: 93, 0
access-control-allow-credentials: true
access-control-allow-origin: https://www.harborfreight.com
vary: Accept-Encoding,Origin
access-control-allow-methods: GET,HEAD,POST,OPTIONS
access-control-allow-headers: Content-Type, Authorization,X-Requested-With
content-security-policy: upgrade-insecure-requests; script-src 'self' *.harborfreight.com www.redditstatic.com ads.nextdoor.com *.perimeterx.net *.px-cdn.net *.px-cloud.net *.pxchk.net *.px-client.net cdn.mxpnl.com s.trackonomics.net client.px-cloud.net t.ssl.ak.dynamic.tiles.virtualearth.net dev.virtualearth.net tpc.googlesyndication.com ygscdn.azureedge.net analytics.tiktok.com login-ds.dotomi.com login.dotomi.com api.securedvisit.com track.securedvisit.com content.securedvisit.com track.sv.rkdms.com images.securedvisit.com tr2.smarterhq.io d1n00d49gkbray.cloudfront.net members.cj.com cj.com cdn.480app.com cdn.cookielaw.org view.publitas.com pixel.mathtag.com *.cdn-net.com *.accdab.net *.dynamicyield.com *.oracleinfinity.io *.googletagmanager.com docs.paymentjs.firstdata.com bat.bing.com www.youtube.com s.ytimg.com *.bing.com *.vimeo.com cdns.brsrvr.com www.google-analytics.com *.adobetag.com *.gstatic.com cdn.tt.omtrdc.net harborfreight.tt.omtrdc.net px.owneriq.net *.res-x.com seal.verisign.com *.google.com *.igodigital.com *.akamaihd.net *.googleadservices.com *.google-analytics.com *.doubleclick.net *.demdex.net *.mouseflow.com *.fastly.net *.sitelabweb.com mpsnare.iesnare.com *.googleapis.com *.payeezy.com *.facebook.net *.facebook.com *.newrelic.com *.nr-data.net *.nmgassets.com *.turnto.com 'unsafe-eval' 'unsafe-inline'; style-src 'self' *.harborfreight.com www.googletagmanager.com rwww.bing.com www.bing.com r.bing.com members.cj.com cj.com *.dynamicyield.com *.googleapis.com *.akamaihd.net *.turnto.com *.vimeo.com *.fontawesome.com tagmanager.google.com 'unsafe-inline'; img-src 'self' blob: data: alb.reddit.com icon.parcellab.com cdn.parcellab.com ad.doubleclick.net flask.nextdoor.com pippio.com www.bing.com r.bing.com t.ssl.ak.dynamic.tiles.virtualearth.net region1.google-analytics.com region1.analytics.google.com login.dotomi.com 805793671.privacysandbox.googleadservices.com crrecommendedmark.org analytics.tiktok.com 10563850.fls.doubleclick.net login-ds.dotomi.com api.securedvisit.com track.securedvisit.com content.securedvisit.com track.sv.rkdms.com images.securedvisit.com *.cdnwidget.com tr2.smarterhq.io cdn.cookielaw.org cdn.dynamicyield.com *.harborfreight.com pixel.mathtag.com *.oracleinfinity.io *.googletagmanager.com cx.atdmt.com www.googleadservices.com bat.bing.com p.brsrvr.com *.akamaihd.net akamai.mathtag.com *.edgecastcdn.net *.www.turnto.com *.youtube.com *.ytimg.com *.vimeocdn.com px.owneriq.net *.g.doubleclick.net www.google-analytics.com *.ggpht.com *.google.com images.scanalert.com *.facebook.com scontent.xx.fbcdn.net ssl.gstatic.com *.sitelabweb.com *.igodigital.com *.cloudinary.com *.googleapis.com *.abmr.net *.gstatic.com *.nr-data.net *.norton.com *.nmgplatform.com *.marinsm.com cdn.ywxi.net; worker-src blob: 'self' *.perimeterx.net *.px-cdn.net *.px-cloud.net *.pxchk.net *.px-client.net *.akamaihd.net player.vimeo.com www.google.com *.youtube.com youtube.com *.cloudinary.com *.facebook.com *.nr-data.net *.apply2jobs.com; connect-src 'self' *.harborfreight.com hft-prod.actioniq.mr-in.com www.redditstatic.com conversions-config.reddit.com *.brsrvr.com www.googletagmanager.com analytics.pangle-ads.com pagead2.googlesyndication.com direct-collect.dy-api.com gs.nmgassets.com *.px-client.net privacyportal-harborfreight.my.onetrust.com s.tracknomics.net *.px-cdn.net *.px-cloud.net *.pxchk.net t.ssl.ak.tiles.virtualearth.net t.ssl.ak.dynamic.tiles.virtualearth.net dev.virtualearth.net www.bing.com region1.google-analytics.com region1.analytics.google.com ascpqnj-oam.global.ssl.fastly.net maps.googleapis.com analytics.google.com crrecommendedmark.org analytics.tiktok.com *.cdnwidget.com *.cdnbasket.net tr2.smarterhq.io pixel.mathtag.com privacyportal.onetrust.com cdn.cookielaw.org *.accdab.net *.dynamicyield.com www.facebook.com *.nmgplatform.com *.demdex.net *.sitelabweb.com *.nr-data.net *.akamaihd.net *.cloudinary.com *.google-analytics.com *.mouseflow.com *.doubleclick.net vimeo.com fonts.googleapis.com use.fontawesome.com fonts.gstatic.com bat.bing.com
content-length: 36272
X-Firefox-Spdy: h2
|
|
| salenzvs.live/favicon.ico | 104.21.10.59 | 200 OK | 517 kB |
URL GET HTTP/3salenzvs.live/favicon.ico IP104.21.10.59:443
Requested byhttps://salenzvs.live/product_details/103535809.html CertificateIssuerLet's Encrypt Subjectsalenzvs.live FingerprintC4:93:74:89:D7:54:43:B0:B2:39:98:89:7A:4C:0B:29:5E:EE:B7:66 ValidityTue, 02 Apr 2024 03:14:40 GMT - Mon, 01 Jul 2024 03:14:39 GMT
Size517 kB (517280 bytes) Hasha44c87b0d55afacf14c8327af92e948e 3ccbcb7c5e0d553ce51030580dec3732eb477f9d a0587eb4f330926619e867180d0f81a594dde4e75ddd471d2f1414024c9163ab
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: salenzvs.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://salenzvs.live/product_details/103535809.html
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6ImRqVmo5Y011RW5iS0VZeTFXQ0Ribnc9PSIsInZhbHVlIjoiTnBVaCs0WUR2TmlRTHpNaWM0MGR1NUZ5OS9FOWVqMXljZHh6VCtuM2loVWNVdURaNFB2SjRBa1dqVkdVOUMrTDdENEVYb2RsYVBSZlZPMVlPa0NqV0tadWRkVTFHaVRkSlRIVjk0b0JHVG5rUkVnQ1I3OG5tWThCa1ZYc2Fwc1AiLCJtYWMiOiJjYWUxZDFlZmEzZTEzNzU5ZjU1MWRiN2YwNjE1OWQ4MDQ2OWI4NTczMWMyZmNhODU3M2VlMmU4YWZkMDhmNjQyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkdIcnorYVY3YzJiZEJVUkZ4TDNlWFE9PSIsInZhbHVlIjoidmN4R2hyTVA0ejlmemhFNjBVTlpyMVNmNXV4RFdiWmFUbU43d3ZkMlNWV1cvdjB4MW1Wb3QxQ2RYWFNQMWZrcG11MW9mcGQzOTE5V2R1YUp6VVBseFNEZEx5ZlNPYXpleTRnU2tyMG16SUFFOURqQ21VWjdoRFkwNDE3SHpKS20iLCJtYWMiOiI0NDk4ODc0OTIwMjBmMDZjZTY2NTdlZmU2Yzc2YzUxYjY5YTkyNjIzMDlhZjcwNmI1OWQzNTU0OGUxMzZjYmFkIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 23 Apr 2024 20:26:14 GMT
content-type: application/json
cache-control: no-cache, private
vary: Accept-Encoding
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SMnPUNwiRWDUzleQPRNqZdGDwWimFQEvHHjp8h2U96IbNV4iZRUca71W%2Bu4hlWHaI1nDlbvCS%2BteDb82K5VKAaFkdegWtB%2FqnQ%2BR1K0HseEAeOFg0gg8k9DepRmW2WeB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8790965f3c82b4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| cdn-img.prettylittlething.com/9/3/4/e/934e2234527108029ff7c9d95e08a3e74f795859_clw5010_1.jpg |  23.38.201.133 | 200 OK | 74 kB |
URL GET HTTP/2cdn-img.prettylittlething.com/9/3/4/e/934e2234527108029ff7c9d95e08a3e74f795859_clw5010_1.jpg IP23.38.201.133:443
Requested byhttps://salenzvs.live/product_details/103535809.html CertificateIssuerDigiCert Inc Subjectprettylittlething.com Fingerprint25:F7:EB:34:74:B1:9D:1A:AA:56:FD:B4:47:A7:CA:83:E9:D6:BE:6C ValidityWed, 07 Feb 2024 00:00:00 GMT - Fri, 07 Feb 2025 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image Hashd5153d38825c776e9ed9536d71cf75c8 d1ac97e2cb62c1da8c79c4042501e42804d48bdd dd8f3158fc2b2f6a588ef944a62c47fbec00899200aab246436051b84b3999b5
GET /9/3/4/e/934e2234527108029ff7c9d95e08a3e74f795859_clw5010_1.jpg HTTP/1.1
Host: cdn-img.prettylittlething.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
etag: "9092b882e988a6ab81bdc7e666f365ec"
last-modified: Fri, 19 Aug 2022 16:19:47 GMT
server: Akamai Image Manager
x-serial: 94
x-check-cacheable: YES
content-length: 74336
content-type: image/webp
cache-control: no-transform, max-age=31536000
expires: Wed, 23 Apr 2025 20:26:19 GMT
date: Tue, 23 Apr 2024 20:26:19 GMT
X-Firefox-Spdy: h2
|
|
| salenzvs.live/static/mall/css/bootstrap.css | 104.21.10.59 | 200 OK | 33 kB |
URL GET HTTP/3salenzvs.live/static/mall/css/bootstrap.css IP104.21.10.59:443
Requested byhttps://salenzvs.live/product_details/103535809.html CertificateIssuerLet's Encrypt Subjectsalenzvs.live FingerprintC4:93:74:89:D7:54:43:B0:B2:39:98:89:7A:4C:0B:29:5E:EE:B7:66 ValidityTue, 02 Apr 2024 03:14:40 GMT - Mon, 01 Jul 2024 03:14:39 GMT
File typeUnicode text, UTF-8 text, with very long lines (560) Hash39e8a2967c8d284fe8fcb510e86c8e4c 6904f1ee11fd7c9a267a97096af2292f8858d226 7b7a0759889ed7da02124e9c2effa3f1052e4d434f0a9b161dda12d8986353da
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/mall/css/bootstrap.css HTTP/1.1
Host: salenzvs.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://salenzvs.live/product_details/103535809.html
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6InBXSmN6cm9zNmFNN0JTbGVoNWJkMmc9PSIsInZhbHVlIjoiUEhjai95Vk1vSlQweWhrb0NFNHRQRXhqdkcxaEpHV1ZHRXRBUGZjTnhIVXhEUk8yeVN6MGxRZy9LWGZRNlhvbzNFM0hhRWVNbzI2WXh5cjA3ZWpyd3hybHN2cnBEYWJYWmRuU2Q1UFBEYWNjR29sQkw2dm5JWktoblRjRTVDZ3oiLCJtYWMiOiJjOWRkOGIyNDQzMzQzMDc3Y2E1MjhiMjVlNzU5ZDRjNGVlOGU1YjMwMjMyNGFjNTEzNWZmMmMyZjVlMDc2YzI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjJiRUFOQWRKU2RUVllNL3kySGgwTXc9PSIsInZhbHVlIjoiN255TWI2cmdIeXQ4MzZhM3NHRnVBcFY0M0RtUE1uN3A0OWtVK1ZHZDZkd0Y5TVdNM3hjak8zcjZMdnFNZnZ2N01QanRnblZ4dy82R1c4WVhYTk1IcENvRjIzOS9SSlg5YkxMdEZmVkRzL09RSE9va203VzBMajRmY2p4Yll4aEEiLCJtYWMiOiI2Y2Q2Y2ZhYTZjMzZjNzJjMWFhYWFlYjk4Zjk3N2ZmNTZlMjcxN2UzZmNhNTEwOWEyNGRmZjEzY2Y5ZGNjMDI1IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 23 Apr 2024 20:26:12 GMT
content-type: text/css
last-modified: Thu, 14 Mar 2024 02:59:07 GMT
etag: W/"32283-613961328e559-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 4129
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MgsnGOQBp0x965W2Uk0WWmVVf%2BIQFbq9DuPmChjji38MTwT6SIOocjo5StGDZ6zsUDKpB9u070FIeLji3RQejVl8pzM9hiNrHaARD5Sy2coQIKIDuIEUnJjooU7MQSog"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87909654aa3db4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| cdn.vox-cdn.com/thumbor/S_0MVec_nb_INPOQOB_5ZbtHdHE=/0x0:3456x5184/1400x933/filters:focal(1360x908:1912x1460):no_upscale()/cdn.vox-cdn.com/uploads/chorus_image/image/72287328/1489994103.0.jpg | 199.232.192.124 | 200 OK | 137 kB |
URL GET HTTP/2cdn.vox-cdn.com/thumbor/S_0MVec_nb_INPOQOB_5ZbtHdHE=/0x0:3456x5184/1400x933/filters:focal(1360x908:1912x1460):no_upscale()/cdn.vox-cdn.com/uploads/chorus_image/image/72287328/1489994103.0.jpg IP199.232.192.124:443
Requested byhttps://salenzvs.live/product_details/103535809.html CertificateIssuerGlobalSign nv-sa Subject*.vox-cdn.com Fingerprint67:CF:AA:E1:D0:B6:1C:BF:3C:92:9A:55:AB:2B:DE:2B:6F:49:CF:45 ValidityThu, 19 Oct 2023 19:50:10 GMT - Tue, 19 Nov 2024 19:50:09 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1400x933, components 3 Size137 kB (137401 bytes) Hash5dda6c60ed0db9d2e5cecc26d7f8343d 2bce7e86e497d8b058622bc66494c21dff59370f c464acd35435ec7dbe8e1e4ef020c7ac7d37b8fa4b11b18fe13d85adec12694a
GET /thumbor/S_0MVec_nb_INPOQOB_5ZbtHdHE=/0x0:3456x5184/1400x933/filters:focal(1360x908:1912x1460):no_upscale()/cdn.vox-cdn.com/uploads/chorus_image/image/72287328/1489994103.0.jpg HTTP/1.1
Host: cdn.vox-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
expires: Mon, 24 Apr 2034 08:26:21 GMT
server: Thumbor/6.7.0
etag: "2bce7e86e497d8b058622bc66494c21dff59370f"
cache-control: max-age=315576000,public
accept-ranges: bytes
age: 0
date: Tue, 23 Apr 2024 20:26:21 GMT
via: 1.1 varnish
x-served-by: cache-hel1410020-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1713903979.982487,VS0,VE2128
access-control-allow-origin: *
strict-transport-security: max-age=31536000
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 137401
X-Firefox-Spdy: h2
|
|
| www.f150forum.com/attachments/f118/424142d1459659977-show-me-your-bed-toppers-camper-shells-image-845848866.jpg | 104.21.25.18 | 200 OK | 598 kB |
URL GET HTTP/2www.f150forum.com/attachments/f118/424142d1459659977-show-me-your-bed-toppers-camper-shells-image-845848866.jpg IP104.21.25.18:443
Requested byhttps://salenzvs.live/product_details/103535809.html CertificateIssuerLet's Encrypt Subjectf150forum.com FingerprintD6:AD:26:E6:18:14:00:5B:1F:41:A0:36:32:44:C6:69:B1:73:18:D5 ValidityMon, 04 Mar 2024 02:04:15 GMT - Sun, 02 Jun 2024 02:04:14 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=2, orientation=upper-left], baseline, precision 8, 800x600, components 3 Size598 kB (597895 bytes) Hash521448942d8c67174c4f474c800b30bc bd6065ca70986da8bcc830d175812a9cdd275859 1a32a03fcec7ae1e4c9355cdc4e7b41fa4c26aaf6f20c14c2b47398425b8a58e
GET /attachments/f118/424142d1459659977-show-me-your-bed-toppers-camper-shells-image-845848866.jpg HTTP/1.1
Host: www.f150forum.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 23 Apr 2024 20:26:19 GMT
content-type: image/jpeg
content-length: 597895
vary: User-Agent,Accept, Accept-Encoding
expires: Wed, 23 Apr 2025 20:26:19 GMT
content-disposition: inline; filename*=ISO-8859-1''image-845848866.jpg
content-transfer-encoding: binary
x-content-type-options: nosniff
x-permitted-cross-domain-policies: none
cache-control: max-age=31536000
x-frame-options: SAMEORIGIN
last-modified: Sun, 03 Apr 2016 05:06:17 GMT
etag: "424142"
cf-cache-status: BYPASS
set-cookie: BIGipServerf150forum_POOL=2827096074.20480.0000; path=/; Httponly
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ikP5ZZEH9nNzZWRkEvCmT9jIGYZjCWJcJp57gpyK9gL9eK%2BnhD2nDFxVe7iBYi%2BUVR8U3tH5Tq3gJ%2FolGRMZas%2F5gMVqsHKvjZVY4agwpFpy%2B2vY3x4d4mH97%2BFxpLANJPIkCQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8790967c4bee0b4d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdn.vox-cdn.com/thumbor/11iJ0Ai2GdByAJhuAQBbLvlPA_8=/0x0:3200x2128/1200x800/filters:focal(1339x633:1851x1145)/cdn.vox-cdn.com/uploads/chorus_image/image/69528378/1233742426.0.jpg | 199.232.192.124 | 200 OK | 144 kB |
URL GET HTTP/2cdn.vox-cdn.com/thumbor/11iJ0Ai2GdByAJhuAQBbLvlPA_8=/0x0:3200x2128/1200x800/filters:focal(1339x633:1851x1145)/cdn.vox-cdn.com/uploads/chorus_image/image/69528378/1233742426.0.jpg IP199.232.192.124:443
Requested byhttps://salenzvs.live/product_details/103535809.html CertificateIssuerGlobalSign nv-sa Subject*.vox-cdn.com Fingerprint67:CF:AA:E1:D0:B6:1C:BF:3C:92:9A:55:AB:2B:DE:2B:6F:49:CF:45 ValidityThu, 19 Oct 2023 19:50:10 GMT - Tue, 19 Nov 2024 19:50:09 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1200x800, components 3 Size144 kB (144232 bytes) Hashe89224d4db2db7d3a49d36112bcd74d6 43a81e92670e6e452a8d0e2927c198eb8782f7e2 66c03e76fafa849edb915d797d027a1937bd5d323b492beb9a717393e168868f
GET /thumbor/11iJ0Ai2GdByAJhuAQBbLvlPA_8=/0x0:3200x2128/1200x800/filters:focal(1339x633:1851x1145)/cdn.vox-cdn.com/uploads/chorus_image/image/69528378/1233742426.0.jpg HTTP/1.1
Host: cdn.vox-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
expires: Mon, 24 Apr 2034 08:26:21 GMT
server: Thumbor/6.7.0
etag: "43a81e92670e6e452a8d0e2927c198eb8782f7e2"
cache-control: max-age=315576000,public
accept-ranges: bytes
date: Tue, 23 Apr 2024 20:26:21 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-hel1410020-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1713903979.004845,VS0,VE2238
access-control-allow-origin: *
strict-transport-security: max-age=31536000
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 144232
X-Firefox-Spdy: h2
|
|
| salenzvs.live/static/default/js/public.js | 104.21.10.59 | 200 OK | 1.9 kB |
URL GET HTTP/3salenzvs.live/static/default/js/public.js IP104.21.10.59:443
Requested byhttps://salenzvs.live/product_details/103535809.html CertificateIssuerLet's Encrypt Subjectsalenzvs.live FingerprintC4:93:74:89:D7:54:43:B0:B2:39:98:89:7A:4C:0B:29:5E:EE:B7:66 ValidityTue, 02 Apr 2024 03:14:40 GMT - Mon, 01 Jul 2024 03:14:39 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (1900), with no line terminators Hash51c8cad5196fedebda08621dea5c6405 5edaf17734119cf9985a4c1474bbde7eb801de35 13d077ad8e2e39537edac3359ea189cc9dd414f7a939e19950e22d7f7bcb1d34
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/default/js/public.js HTTP/1.1
Host: salenzvs.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://salenzvs.live/product_details/103535809.html
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6InBXSmN6cm9zNmFNN0JTbGVoNWJkMmc9PSIsInZhbHVlIjoiUEhjai95Vk1vSlQweWhrb0NFNHRQRXhqdkcxaEpHV1ZHRXRBUGZjTnhIVXhEUk8yeVN6MGxRZy9LWGZRNlhvbzNFM0hhRWVNbzI2WXh5cjA3ZWpyd3hybHN2cnBEYWJYWmRuU2Q1UFBEYWNjR29sQkw2dm5JWktoblRjRTVDZ3oiLCJtYWMiOiJjOWRkOGIyNDQzMzQzMDc3Y2E1MjhiMjVlNzU5ZDRjNGVlOGU1YjMwMjMyNGFjNTEzNWZmMmMyZjVlMDc2YzI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjJiRUFOQWRKU2RUVllNL3kySGgwTXc9PSIsInZhbHVlIjoiN255TWI2cmdIeXQ4MzZhM3NHRnVBcFY0M0RtUE1uN3A0OWtVK1ZHZDZkd0Y5TVdNM3hjak8zcjZMdnFNZnZ2N01QanRnblZ4dy82R1c4WVhYTk1IcENvRjIzOS9SSlg5YkxMdEZmVkRzL09RSE9va203VzBMajRmY2p4Yll4aEEiLCJtYWMiOiI2Y2Q2Y2ZhYTZjMzZjNzJjMWFhYWFlYjk4Zjk3N2ZmNTZlMjcxN2UzZmNhNTEwOWEyNGRmZjEzY2Y5ZGNjMDI1IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 20:26:12 GMT
content-type: application/javascript
last-modified: Thu, 14 Mar 2024 02:59:07 GMT
etag: W/"76f-613961327a8f0-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 4129
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ETGk%2FXu%2FnEsf0SIl3rBUJ3%2FlBGrk%2BigvgyPnhxDLXHdRIlMBa4byh05ftKqce8KdM%2FPiQi5vi5xpinCiAQNop2odOUIlYOcVv6pYg1%2FhEYgLyoWV9B6WHCUO45qC9MXe"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87909654ba52b4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| salenzvs.live/static/mall/css/font/Poppins-SemiBold.ttf | 104.21.10.59 | 200 OK | 155 kB |
URL GET HTTP/3salenzvs.live/static/mall/css/font/Poppins-SemiBold.ttf IP104.21.10.59:443
Requested byhttps://salenzvs.live/product_details/103535809.html CertificateIssuerLet's Encrypt Subjectsalenzvs.live FingerprintC4:93:74:89:D7:54:43:B0:B2:39:98:89:7A:4C:0B:29:5E:EE:B7:66 ValidityTue, 02 Apr 2024 03:14:40 GMT - Mon, 01 Jul 2024 03:14:39 GMT
File typeTrueType Font data, 13 tables, 1st "GDEF", 19 names, Microsoft, language 0x409, Copyright 2020 The Poppins Project Authors (https://github.com/itfoundry/Poppins)Poppins SemiBol Size155 kB (155192 bytes) Hash4cdacb8f89d588d69e8570edcbe49507 20b39c8b480c946b084d6aa09f12bf10b2ec5aa6 bf9c1ff640acc8bb5441a9b564360943f9db90969742aa33a36329b2828d2759
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/mall/css/font/Poppins-SemiBold.ttf HTTP/1.1
Host: salenzvs.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://salenzvs.live/static/mall/css/demo1.css
Cookie: XSRF-TOKEN=eyJpdiI6InBXSmN6cm9zNmFNN0JTbGVoNWJkMmc9PSIsInZhbHVlIjoiUEhjai95Vk1vSlQweWhrb0NFNHRQRXhqdkcxaEpHV1ZHRXRBUGZjTnhIVXhEUk8yeVN6MGxRZy9LWGZRNlhvbzNFM0hhRWVNbzI2WXh5cjA3ZWpyd3hybHN2cnBEYWJYWmRuU2Q1UFBEYWNjR29sQkw2dm5JWktoblRjRTVDZ3oiLCJtYWMiOiJjOWRkOGIyNDQzMzQzMDc3Y2E1MjhiMjVlNzU5ZDRjNGVlOGU1YjMwMjMyNGFjNTEzNWZmMmMyZjVlMDc2YzI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjJiRUFOQWRKU2RUVllNL3kySGgwTXc9PSIsInZhbHVlIjoiN255TWI2cmdIeXQ4MzZhM3NHRnVBcFY0M0RtUE1uN3A0OWtVK1ZHZDZkd0Y5TVdNM3hjak8zcjZMdnFNZnZ2N01QanRnblZ4dy82R1c4WVhYTk1IcENvRjIzOS9SSlg5YkxMdEZmVkRzL09RSE9va203VzBMajRmY2p4Yll4aEEiLCJtYWMiOiI2Y2Q2Y2ZhYTZjMzZjNzJjMWFhYWFlYjk4Zjk3N2ZmNTZlMjcxN2UzZmNhNTEwOWEyNGRmZjEzY2Y5ZGNjMDI1IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 20:26:13 GMT
content-type: font/ttf
last-modified: Thu, 14 Mar 2024 02:59:07 GMT
etag: W/"25e38-6139613292ba9-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 2022
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7llozIsUyRKuKjw%2B%2FdvLKwbpHTAbkXRvanOpWHmVVpVDZI2rhdctpfcjQXVdItFN9%2FqkWkxJMJsKpU%2B438TuKn6GE2puQjp8WYzFJes1tbsYp8FGsTagKCnuwBqsC6Wi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87909657fd9fb4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| salenzvs.live/static/mall/css/swiper-bundle.min.css | 104.21.10.59 | 200 OK | 14 kB |
URL GET HTTP/3salenzvs.live/static/mall/css/swiper-bundle.min.css IP104.21.10.59:443
Requested byhttps://salenzvs.live/product_details/103535809.html CertificateIssuerLet's Encrypt Subjectsalenzvs.live FingerprintC4:93:74:89:D7:54:43:B0:B2:39:98:89:7A:4C:0B:29:5E:EE:B7:66 ValidityTue, 02 Apr 2024 03:14:40 GMT - Mon, 01 Jul 2024 03:14:39 GMT
File typeASCII text, with very long lines (13428) Hash91a0424bb56d373b12fa509e49fa86d2 39087ce17748c48a5218767af371e2aabb576a49 665d1995ba3fd0f5caf431866b89bdfaf36debae2f1c07d8187bc559c41fadc7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/mall/css/swiper-bundle.min.css HTTP/1.1
Host: salenzvs.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://salenzvs.live/product_details/103535809.html
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6InBXSmN6cm9zNmFNN0JTbGVoNWJkMmc9PSIsInZhbHVlIjoiUEhjai95Vk1vSlQweWhrb0NFNHRQRXhqdkcxaEpHV1ZHRXRBUGZjTnhIVXhEUk8yeVN6MGxRZy9LWGZRNlhvbzNFM0hhRWVNbzI2WXh5cjA3ZWpyd3hybHN2cnBEYWJYWmRuU2Q1UFBEYWNjR29sQkw2dm5JWktoblRjRTVDZ3oiLCJtYWMiOiJjOWRkOGIyNDQzMzQzMDc3Y2E1MjhiMjVlNzU5ZDRjNGVlOGU1YjMwMjMyNGFjNTEzNWZmMmMyZjVlMDc2YzI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjJiRUFOQWRKU2RUVllNL3kySGgwTXc9PSIsInZhbHVlIjoiN255TWI2cmdIeXQ4MzZhM3NHRnVBcFY0M0RtUE1uN3A0OWtVK1ZHZDZkd0Y5TVdNM3hjak8zcjZMdnFNZnZ2N01QanRnblZ4dy82R1c4WVhYTk1IcENvRjIzOS9SSlg5YkxMdEZmVkRzL09RSE9va203VzBMajRmY2p4Yll4aEEiLCJtYWMiOiI2Y2Q2Y2ZhYTZjMzZjNzJjMWFhYWFlYjk4Zjk3N2ZmNTZlMjcxN2UzZmNhNTEwOWEyNGRmZjEzY2Y5ZGNjMDI1IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 20:26:12 GMT
content-type: text/css
last-modified: Thu, 14 Mar 2024 02:59:07 GMT
etag: W/"357e-6139613294319-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 4129
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LyhkxGLifrO6IGp9INmcqeV9DyOsi7%2BkvNo8NSx%2BSJpRum48zSXkxOHoqfcDmmkEvKBwokUKKVAVyK5nIlnL0aENWOXCOy4BszV%2FSOjrAGaHRJOCiMj57OAcsoxE0gGs"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87909654aa36b4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| salenzvs.live/static/mall/css/ecicons.min.css | 104.21.10.59 | 200 OK | 38 kB |
URL GET HTTP/3salenzvs.live/static/mall/css/ecicons.min.css IP104.21.10.59:443
Requested byhttps://salenzvs.live/product_details/103535809.html CertificateIssuerLet's Encrypt Subjectsalenzvs.live FingerprintC4:93:74:89:D7:54:43:B0:B2:39:98:89:7A:4C:0B:29:5E:EE:B7:66 ValidityTue, 02 Apr 2024 03:14:40 GMT - Mon, 01 Jul 2024 03:14:39 GMT
Hashabf739a4f700786a4e2d6abf4c81e3a0 aafb0578ed47df30cc871bc161db5f7d7cd6d444 9eef72c0a2fc38e6190244cfed729e9b9667529b47eabe2f446373d8958a968c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/mall/css/ecicons.min.css HTTP/1.1
Host: salenzvs.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://salenzvs.live/product_details/103535809.html
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6InBXSmN6cm9zNmFNN0JTbGVoNWJkMmc9PSIsInZhbHVlIjoiUEhjai95Vk1vSlQweWhrb0NFNHRQRXhqdkcxaEpHV1ZHRXRBUGZjTnhIVXhEUk8yeVN6MGxRZy9LWGZRNlhvbzNFM0hhRWVNbzI2WXh5cjA3ZWpyd3hybHN2cnBEYWJYWmRuU2Q1UFBEYWNjR29sQkw2dm5JWktoblRjRTVDZ3oiLCJtYWMiOiJjOWRkOGIyNDQzMzQzMDc3Y2E1MjhiMjVlNzU5ZDRjNGVlOGU1YjMwMjMyNGFjNTEzNWZmMmMyZjVlMDc2YzI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjJiRUFOQWRKU2RUVllNL3kySGgwTXc9PSIsInZhbHVlIjoiN255TWI2cmdIeXQ4MzZhM3NHRnVBcFY0M0RtUE1uN3A0OWtVK1ZHZDZkd0Y5TVdNM3hjak8zcjZMdnFNZnZ2N01QanRnblZ4dy82R1c4WVhYTk1IcENvRjIzOS9SSlg5YkxMdEZmVkRzL09RSE9va203VzBMajRmY2p4Yll4aEEiLCJtYWMiOiI2Y2Q2Y2ZhYTZjMzZjNzJjMWFhYWFlYjk4Zjk3N2ZmNTZlMjcxN2UzZmNhNTEwOWEyNGRmZjEzY2Y5ZGNjMDI1IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 20:26:12 GMT
content-type: text/css
last-modified: Thu, 14 Mar 2024 02:59:07 GMT
etag: W/"9531-613961328e941-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 4129
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UQHu5PDFMi3A6ISkYc1QPyJ1u7FVVcVroghNogoT%2Bl%2Bf50Qt7TW2YMPPQ4jfPEAZVtg%2FonKU1Xp70eHEvPiNgQD8JAus%2Bz0Vjw3bbsY961JDo0QeVTCPMfX%2FRYypC9DS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87909654aa31b4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| salenzvs.live/static/mall/css/responsive.css | 104.21.10.59 | 200 OK | 62 kB |
URL GET HTTP/3salenzvs.live/static/mall/css/responsive.css IP104.21.10.59:443
Requested byhttps://salenzvs.live/product_details/103535809.html CertificateIssuerLet's Encrypt Subjectsalenzvs.live FingerprintC4:93:74:89:D7:54:43:B0:B2:39:98:89:7A:4C:0B:29:5E:EE:B7:66 ValidityTue, 02 Apr 2024 03:14:40 GMT - Mon, 01 Jul 2024 03:14:39 GMT
Hash5a0f0223020c05a39623fee1527a2b81 07468c1803b6ec9d1c47b051d099815d98618307 5ced93256785d0fc2aed667d047221aea1e152189227f76c0c5c5dd5b6798d60
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/mall/css/responsive.css HTTP/1.1
Host: salenzvs.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://salenzvs.live/product_details/103535809.html
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6InBXSmN6cm9zNmFNN0JTbGVoNWJkMmc9PSIsInZhbHVlIjoiUEhjai95Vk1vSlQweWhrb0NFNHRQRXhqdkcxaEpHV1ZHRXRBUGZjTnhIVXhEUk8yeVN6MGxRZy9LWGZRNlhvbzNFM0hhRWVNbzI2WXh5cjA3ZWpyd3hybHN2cnBEYWJYWmRuU2Q1UFBEYWNjR29sQkw2dm5JWktoblRjRTVDZ3oiLCJtYWMiOiJjOWRkOGIyNDQzMzQzMDc3Y2E1MjhiMjVlNzU5ZDRjNGVlOGU1YjMwMjMyNGFjNTEzNWZmMmMyZjVlMDc2YzI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjJiRUFOQWRKU2RUVllNL3kySGgwTXc9PSIsInZhbHVlIjoiN255TWI2cmdIeXQ4MzZhM3NHRnVBcFY0M0RtUE1uN3A0OWtVK1ZHZDZkd0Y5TVdNM3hjak8zcjZMdnFNZnZ2N01QanRnblZ4dy82R1c4WVhYTk1IcENvRjIzOS9SSlg5YkxMdEZmVkRzL09RSE9va203VzBMajRmY2p4Yll4aEEiLCJtYWMiOiI2Y2Q2Y2ZhYTZjMzZjNzJjMWFhYWFlYjk4Zjk3N2ZmNTZlMjcxN2UzZmNhNTEwOWEyNGRmZjEzY2Y5ZGNjMDI1IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 20:26:12 GMT
content-type: text/css
last-modified: Thu, 14 Mar 2024 02:59:07 GMT
etag: W/"f2c8-6139613294319-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 4129
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IdWSo0KNo%2B5KFM0S47jZ6mlqB%2BiTXMgol2%2FL4d%2F%2FVwyr4HqXu722LO4l8K7GH1H%2B%2FtsjQrvrv0icQHElZQWRRIzZ7NwYcI3sygh4yV8bpErdjwU8chzXNK1JdXbpjA7p"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87909654aa42b4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| salenzvs.live/static/default/js/vue.min.js | 104.21.10.59 | 200 OK | 94 kB |
URL GET HTTP/3salenzvs.live/static/default/js/vue.min.js IP104.21.10.59:443
Requested byhttps://salenzvs.live/product_details/103535809.html CertificateIssuerLet's Encrypt Subjectsalenzvs.live FingerprintC4:93:74:89:D7:54:43:B0:B2:39:98:89:7A:4C:0B:29:5E:EE:B7:66 ValidityTue, 02 Apr 2024 03:14:40 GMT - Mon, 01 Jul 2024 03:14:39 GMT
File typeJavaScript source, ASCII text, with very long lines (65449) Hashb21b8531847604ab5f2f5caaef51ba31 da8d7a59f4e6cc55ea58abec33ef9cebb9ba67c1 9174c425c445377df4562ad9165ea08fdf9433a808296d7de5f619791df10e17
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/default/js/vue.min.js HTTP/1.1
Host: salenzvs.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://salenzvs.live/product_details/103535809.html
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6InBXSmN6cm9zNmFNN0JTbGVoNWJkMmc9PSIsInZhbHVlIjoiUEhjai95Vk1vSlQweWhrb0NFNHRQRXhqdkcxaEpHV1ZHRXRBUGZjTnhIVXhEUk8yeVN6MGxRZy9LWGZRNlhvbzNFM0hhRWVNbzI2WXh5cjA3ZWpyd3hybHN2cnBEYWJYWmRuU2Q1UFBEYWNjR29sQkw2dm5JWktoblRjRTVDZ3oiLCJtYWMiOiJjOWRkOGIyNDQzMzQzMDc3Y2E1MjhiMjVlNzU5ZDRjNGVlOGU1YjMwMjMyNGFjNTEzNWZmMmMyZjVlMDc2YzI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjJiRUFOQWRKU2RUVllNL3kySGgwTXc9PSIsInZhbHVlIjoiN255TWI2cmdIeXQ4MzZhM3NHRnVBcFY0M0RtUE1uN3A0OWtVK1ZHZDZkd0Y5TVdNM3hjak8zcjZMdnFNZnZ2N01QanRnblZ4dy82R1c4WVhYTk1IcENvRjIzOS9SSlg5YkxMdEZmVkRzL09RSE9va203VzBMajRmY2p4Yll4aEEiLCJtYWMiOiI2Y2Q2Y2ZhYTZjMzZjNzJjMWFhYWFlYjk4Zjk3N2ZmNTZlMjcxN2UzZmNhNTEwOWEyNGRmZjEzY2Y5ZGNjMDI1IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 20:26:12 GMT
content-type: application/javascript
last-modified: Thu, 14 Mar 2024 02:59:07 GMT
etag: W/"16fc7-613961327b4a8-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 4129
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=szyxHu8gH5wfsfG%2F%2BgjW2mlHgepZCBh7n%2Fe3qOq9g10UCdjIdSXgbf1ACSyJ%2B%2F%2FKGFAjHkM7TEmZanS8Y7ZeCRtRgeJgg2NBPUgygKFBEpKuo%2BiynLS7dAVG4v2RmCla"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87909654ba51b4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| salenzvs.live/api/item/secondCate | 104.21.10.59 | 200 OK | 105 kB |
URL GET HTTP/3salenzvs.live/api/item/secondCate IP104.21.10.59:443
Requested byhttps://salenzvs.live/product_details/103535809.html CertificateIssuerLet's Encrypt Subjectsalenzvs.live FingerprintC4:93:74:89:D7:54:43:B0:B2:39:98:89:7A:4C:0B:29:5E:EE:B7:66 ValidityTue, 02 Apr 2024 03:14:40 GMT - Mon, 01 Jul 2024 03:14:39 GMT
Size105 kB (105151 bytes) Hash0f6eb50a0e462ce99c859937f98d1631 1379fe41a7264432d9d4c95b35fdff97a532e58b 28493e1fb974bc45eb0e57bcd9bd09b0e6b43c94714c21bab08903a5f7b2b5af
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /api/item/secondCate HTTP/1.1
Host: salenzvs.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://salenzvs.live/product_details/103535809.html
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6InBXSmN6cm9zNmFNN0JTbGVoNWJkMmc9PSIsInZhbHVlIjoiUEhjai95Vk1vSlQweWhrb0NFNHRQRXhqdkcxaEpHV1ZHRXRBUGZjTnhIVXhEUk8yeVN6MGxRZy9LWGZRNlhvbzNFM0hhRWVNbzI2WXh5cjA3ZWpyd3hybHN2cnBEYWJYWmRuU2Q1UFBEYWNjR29sQkw2dm5JWktoblRjRTVDZ3oiLCJtYWMiOiJjOWRkOGIyNDQzMzQzMDc3Y2E1MjhiMjVlNzU5ZDRjNGVlOGU1YjMwMjMyNGFjNTEzNWZmMmMyZjVlMDc2YzI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjJiRUFOQWRKU2RUVllNL3kySGgwTXc9PSIsInZhbHVlIjoiN255TWI2cmdIeXQ4MzZhM3NHRnVBcFY0M0RtUE1uN3A0OWtVK1ZHZDZkd0Y5TVdNM3hjak8zcjZMdnFNZnZ2N01QanRnblZ4dy82R1c4WVhYTk1IcENvRjIzOS9SSlg5YkxMdEZmVkRzL09RSE9va203VzBMajRmY2p4Yll4aEEiLCJtYWMiOiI2Y2Q2Y2ZhYTZjMzZjNzJjMWFhYWFlYjk4Zjk3N2ZmNTZlMjcxN2UzZmNhNTEwOWEyNGRmZjEzY2Y5ZGNjMDI1IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 20:26:13 GMT
content-type: application/json
cache-control: no-cache, private
x-ratelimit-limit: 60
x-ratelimit-remaining: 59
access-control-allow-origin: *
set-cookie: laravel_session=eyJpdiI6InhqY1N1MG44M0hOQm1OUUQrSVBka3c9PSIsInZhbHVlIjoieW1kdFhhZXF3NnlsV1lrY1NQUE5wbEZzUFJsakFXc3lwNFVNOE1Lc04yZSt2ZlhsY1U5MVRLbWJOcmlJOXNOWEdNT3REcXErcnF1L1paVFRCVmxzai9zcWNDazV4WVZqSmQ3ZjhRVGtGSU40c3RUbkNqdTVNbWw3Wm1NaGZFSE0iLCJtYWMiOiI0OThjOGVhM2E5NTc1NjhlMzdhMzEyNjU3ZjgwZTNjNTBhMzZmN2Y4MjhlYTdjMGE3ZmY4Zjc4NDgzZWY2N2UzIiwidGFnIjoiIn0%3D; expires=Tue, 23-Apr-2024 22:26:13 GMT; Max-Age=7200; path=/; httponly; samesite=lax
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2hBlz97JuaGB2gDIepHKJAfuZDsKa%2BdD%2BezK9lC%2FPeWa5%2FpvUEWi%2BDBy%2FhD1GCTO1FQ659HNkN7JvvJhNoLkMrkn%2FQ1Y1yj400MjqK8vbnFeY2bGu%2FleoD56vN%2Bk87VJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879096578d47b4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| salenzvs.live/api/cart/index | 104.21.10.59 | 200 OK | 139 B |
URL GET HTTP/3salenzvs.live/api/cart/index IP104.21.10.59:443
Requested byhttps://salenzvs.live/product_details/103535809.html CertificateIssuerLet's Encrypt Subjectsalenzvs.live FingerprintC4:93:74:89:D7:54:43:B0:B2:39:98:89:7A:4C:0B:29:5E:EE:B7:66 ValidityTue, 02 Apr 2024 03:14:40 GMT - Mon, 01 Jul 2024 03:14:39 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash44f293d1057e83d64adbd382f9753c0c 64b4ac33d19337d1a099cf6f41cacbf95d017ac6 e0b1b9c0ec1aa8b305e8ee8c3f3946d9de911e5b0d29b9a80dfe128ce623fa13
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /api/cart/index HTTP/1.1
Host: salenzvs.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://salenzvs.live/product_details/103535809.html
Authorization:
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6InBXSmN6cm9zNmFNN0JTbGVoNWJkMmc9PSIsInZhbHVlIjoiUEhjai95Vk1vSlQweWhrb0NFNHRQRXhqdkcxaEpHV1ZHRXRBUGZjTnhIVXhEUk8yeVN6MGxRZy9LWGZRNlhvbzNFM0hhRWVNbzI2WXh5cjA3ZWpyd3hybHN2cnBEYWJYWmRuU2Q1UFBEYWNjR29sQkw2dm5JWktoblRjRTVDZ3oiLCJtYWMiOiJjOWRkOGIyNDQzMzQzMDc3Y2E1MjhiMjVlNzU5ZDRjNGVlOGU1YjMwMjMyNGFjNTEzNWZmMmMyZjVlMDc2YzI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjJiRUFOQWRKU2RUVllNL3kySGgwTXc9PSIsInZhbHVlIjoiN255TWI2cmdIeXQ4MzZhM3NHRnVBcFY0M0RtUE1uN3A0OWtVK1ZHZDZkd0Y5TVdNM3hjak8zcjZMdnFNZnZ2N01QanRnblZ4dy82R1c4WVhYTk1IcENvRjIzOS9SSlg5YkxMdEZmVkRzL09RSE9va203VzBMajRmY2p4Yll4aEEiLCJtYWMiOiI2Y2Q2Y2ZhYTZjMzZjNzJjMWFhYWFlYjk4Zjk3N2ZmNTZlMjcxN2UzZmNhNTEwOWEyNGRmZjEzY2Y5ZGNjMDI1IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 20:26:14 GMT
content-type: application/json
cache-control: no-cache, private
x-ratelimit-limit: 60
x-ratelimit-remaining: 59
access-control-allow-origin: *
set-cookie: laravel_session=eyJpdiI6InE2dW0zMkdCZkFuTXEyWDA2WWxMRUE9PSIsInZhbHVlIjoiSkJqVFNRaVc1QVY4b2o0YXAxQk9pWlNhRjV0b0V2L3o1dzBXSUJSWEVmbkZWWnQ4TW1hVVZCdkNFVzFjelVVR0ZKZDVueHJnMkNUdDVaTlY4bk1IZk45NDFRVllNYW5Nc0F3QjBxQmoxQU01Q1FWNE1OcG15ZG5DNWRMaTJPYjQiLCJtYWMiOiI0YWU3Nzk2NmRlODhhYjNiM2M5N2IyOGFhMmZjMmVhMWRmMWEwMzE2YmM2OWRjYWQ3MWEyNjliNGNjYTJlOGE0IiwidGFnIjoiIn0%3D; expires=Tue, 23-Apr-2024 22:26:14 GMT; Max-Age=7200; path=/; httponly; samesite=lax
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6fqPSvbJ%2BQbwt6ZaRCx5Djo23iR9Ib9Q7GvvLGWoi3WrydfB8%2FKKRnqWvv%2FbsQtaMOi79%2FCxq7mhmlWNOxIrGFARBgvmc3Zzowz4RmvQYnxfQvEoQhset19MFc%2FQlAhN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879096578d4db4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| salenzvs.live/api/item/randomByKeyword | 104.21.10.59 | 200 OK | 2.7 kB |
URL POST HTTP/3salenzvs.live/api/item/randomByKeyword IP104.21.10.59:443
Requested byhttps://salenzvs.live/product_details/103535809.html CertificateIssuerLet's Encrypt Subjectsalenzvs.live FingerprintC4:93:74:89:D7:54:43:B0:B2:39:98:89:7A:4C:0B:29:5E:EE:B7:66 ValidityTue, 02 Apr 2024 03:14:40 GMT - Mon, 01 Jul 2024 03:14:39 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (2979), with no line terminators Hash63e5ab57598de59168040f6bdbeac6a7 b9659b516409a7b259553ce46a94d1381918942a dc285bc0fce5160980e7ffa2f73e85590e8583b6cacdabc443189622c92857e5
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /api/item/randomByKeyword HTTP/1.1
Host: salenzvs.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://salenzvs.live/product_details/103535809.html
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
Content-Length: 20
Origin: https://salenzvs.live
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6ImRqVmo5Y011RW5iS0VZeTFXQ0Ribnc9PSIsInZhbHVlIjoiTnBVaCs0WUR2TmlRTHpNaWM0MGR1NUZ5OS9FOWVqMXljZHh6VCtuM2loVWNVdURaNFB2SjRBa1dqVkdVOUMrTDdENEVYb2RsYVBSZlZPMVlPa0NqV0tadWRkVTFHaVRkSlRIVjk0b0JHVG5rUkVnQ1I3OG5tWThCa1ZYc2Fwc1AiLCJtYWMiOiJjYWUxZDFlZmEzZTEzNzU5ZjU1MWRiN2YwNjE1OWQ4MDQ2OWI4NTczMWMyZmNhODU3M2VlMmU4YWZkMDhmNjQyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ild4aFp5QVZPSTB0OTFuS0RQMHhoS0E9PSIsInZhbHVlIjoieTRqc2wyTFRBa09YZlcvYktVVGJWZllHa0RidUdGN3htTWdidzJJUUFFeit3amVsM0NqNVBocHR3U0E2S1I3TEkycE5BL3dtcG9xSkNGOHExYnpncjZ3VXJFUUlsZkxaVDR6cExmUURLdnpOVGJwUXZzdS95Q2F3elBNTlRzek8iLCJtYWMiOiI5YTE3YWZkODkyOWQ1ZjQwY2IyMWZjODYxZTBkMTcxYjNmZThlM2ZiMDVlMGU2NTkxMmVhZWQ1NmVlY2I1MmJhIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 20:26:18 GMT
content-type: application/json
cache-control: no-cache, private
x-ratelimit-limit: 60
x-ratelimit-remaining: 58
access-control-allow-origin: *
set-cookie: laravel_session=eyJpdiI6IjNBQ2V1WTArRk4wZ1IzUkVWcHZDZlE9PSIsInZhbHVlIjoiS2d1a0JKcndUNmVweFJFRHNlVDBCUDVqbEc3b1VTRXlpdkZnTFR2QXgyZFRsck94MzdUam1VZlZsa3hmRk1qdjUzZDA3c2dibVVzZEVkQ1hsbGhsNVJpNUN5VHhhZ3JQWERHMmZGUEdUMmpGaGlNTnZQbENacUVwc3FITFdrWkMiLCJtYWMiOiJjOTE2YWZlNjJlM2M3NDQwMWFkNjNmMjgyMGEyMjg5NThlZWM5YjViMWM2NDg5YmRkNDI4MjZhZWU0NmFiMTQwIiwidGFnIjoiIn0%3D; expires=Tue, 23-Apr-2024 22:26:18 GMT; Max-Age=7200; path=/; httponly; samesite=lax
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BC45XBpDVpqYZn4KOP68MabtSohxIbcx2fgj8dgw6m8%2BQmww%2FVKCD6RHxKUDbdqKB5uO11t4%2BwOFdTm0haEq7%2FKNPK0HbFwMzMxnYL7y4%2B%2B0vkXqfdzrnezXdvgGa2x%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8790966ebcceb4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| uploads-ssl.webflow.com/63ca932c63d8101bfc2ad2b8/63f770ee60a4135b38b9976c_DHL_FE_Img1%402x.png | 143.204.55.24 | 200 OK | 516 kB |
URL GET HTTP/2uploads-ssl.webflow.com/63ca932c63d8101bfc2ad2b8/63f770ee60a4135b38b9976c_DHL_FE_Img1%402x.png IP143.204.55.24:443
Requested byhttps://salenzvs.live/product_details/103535809.html CertificateIssuerAmazon Subjectuploads-ssl.webflow.com FingerprintF5:4C:92:EA:27:C8:02:7C:DF:80:D8:46:6B:01:FD:F3:18:FC:74:34 ValiditySat, 29 Jul 2023 00:00:00 GMT - Mon, 26 Aug 2024 23:59:59 GMT
File typePNG image data, 955 x 537, 8-bit/color RGBA, non-interlaced Size516 kB (516010 bytes) Hashbde1ce6a8b89751cee2355afcda89c0c 7211f5621f3c323de31fd990bee02a8bbbdb1817 9ea49e12c7172ae1a1c8fbca1682174df3d42f51af3ac9f147bdaf2a8fbb6fb3
GET /63ca932c63d8101bfc2ad2b8/63f770ee60a4135b38b9976c_DHL_FE_Img1%402x.png HTTP/1.1
Host: uploads-ssl.webflow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
content-length: 516010
date: Tue, 23 Apr 2024 20:26:20 GMT
last-modified: Thu, 23 Feb 2023 13:58:08 GMT
etag: "bde1ce6a8b89751cee2355afcda89c0c"
x-amz-storage-class: INTELLIGENT_TIERING
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000, must-revalidate
x-amz-version-id: SSu2ONANPTwzozvu4lT7JD4D4DqZGFCu
accept-ranges: bytes
server: AmazonS3
via: 1.1 5de23153ac267c206221751e1cccb6e8.cloudfront.net (CloudFront)
access-control-allow-origin: *
x-cache: Miss from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: LWbDaLr2qd_e-fO7QYt2-Y3yxeL-gFmrrpBexs0t5oZWlf1vyddyeA==
X-Firefox-Spdy: h2
|
|
| salenzvs.live/product_details/103535809.html | 104.21.10.59 | 200 OK | 75 kB |
URL User Request GET HTTP/2salenzvs.live/product_details/103535809.html IP104.21.10.59:443
CertificateIssuerLet's Encrypt Subjectsalenzvs.live FingerprintC4:93:74:89:D7:54:43:B0:B2:39:98:89:7A:4C:0B:29:5E:EE:B7:66 ValidityTue, 02 Apr 2024 03:14:40 GMT - Mon, 01 Jul 2024 03:14:39 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /product_details/103535809.html HTTP/1.1
Host: salenzvs.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 23 Apr 2024 20:26:12 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache, private
set-cookie: XSRF-TOKEN=eyJpdiI6InBXSmN6cm9zNmFNN0JTbGVoNWJkMmc9PSIsInZhbHVlIjoiUEhjai95Vk1vSlQweWhrb0NFNHRQRXhqdkcxaEpHV1ZHRXRBUGZjTnhIVXhEUk8yeVN6MGxRZy9LWGZRNlhvbzNFM0hhRWVNbzI2WXh5cjA3ZWpyd3hybHN2cnBEYWJYWmRuU2Q1UFBEYWNjR29sQkw2dm5JWktoblRjRTVDZ3oiLCJtYWMiOiJjOWRkOGIyNDQzMzQzMDc3Y2E1MjhiMjVlNzU5ZDRjNGVlOGU1YjMwMjMyNGFjNTEzNWZmMmMyZjVlMDc2YzI5IiwidGFnIjoiIn0%3D; expires=Tue, 23-Apr-2024 22:26:12 GMT; Max-Age=7200; path=/; samesite=lax
laravel_session=eyJpdiI6IjJiRUFOQWRKU2RUVllNL3kySGgwTXc9PSIsInZhbHVlIjoiN255TWI2cmdIeXQ4MzZhM3NHRnVBcFY0M0RtUE1uN3A0OWtVK1ZHZDZkd0Y5TVdNM3hjak8zcjZMdnFNZnZ2N01QanRnblZ4dy82R1c4WVhYTk1IcENvRjIzOS9SSlg5YkxMdEZmVkRzL09RSE9va203VzBMajRmY2p4Yll4aEEiLCJtYWMiOiI2Y2Q2Y2ZhYTZjMzZjNzJjMWFhYWFlYjk4Zjk3N2ZmNTZlMjcxN2UzZmNhNTEwOWEyNGRmZjEzY2Y5ZGNjMDI1IiwidGFnIjoiIn0%3D; expires=Tue, 23-Apr-2024 22:26:12 GMT; Max-Age=7200; path=/; httponly; samesite=lax
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IymmemzpIVTejE6upA%2BURwrPFTo9OVCUVNaA9BuutyuhdPLHEELQRU6CvIu%2BT%2BGkUQ7c7WuriVcRRNL8ZinxL58cE0RhaXa0EDJ%2FyFgrmr8uKMiSLZY3s%2F01QeQxv%2Bu6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8790964cadd45699-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| salenzvs.live/static/mall/css/font/Poppins-Regular.ttf | 104.21.10.59 | 200 OK | 158 kB |
URL GET HTTP/3salenzvs.live/static/mall/css/font/Poppins-Regular.ttf IP104.21.10.59:443
Requested byhttps://salenzvs.live/product_details/103535809.html CertificateIssuerLet's Encrypt Subjectsalenzvs.live FingerprintC4:93:74:89:D7:54:43:B0:B2:39:98:89:7A:4C:0B:29:5E:EE:B7:66 ValidityTue, 02 Apr 2024 03:14:40 GMT - Mon, 01 Jul 2024 03:14:39 GMT
File typeTrueType Font data, 13 tables, 1st "GDEF", 17 names, Microsoft, language 0x409, Copyright 2020 The Poppins Project Authors (https://github.com/itfoundry/Poppins)PoppinsRegularI Size158 kB (158192 bytes) Hash8b6af8e5e8324edfd77af8b3b35d7f9c 01d319c533f62ea29f03b5df8adfd4d93d2d2a38 78f127277756ae464f4eb665ce214cb6315746f6f4193e95b31f18f4b3e97527
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/mall/css/font/Poppins-Regular.ttf HTTP/1.1
Host: salenzvs.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://salenzvs.live/static/mall/css/demo1.css
Cookie: XSRF-TOKEN=eyJpdiI6ImRqVmo5Y011RW5iS0VZeTFXQ0Ribnc9PSIsInZhbHVlIjoiTnBVaCs0WUR2TmlRTHpNaWM0MGR1NUZ5OS9FOWVqMXljZHh6VCtuM2loVWNVdURaNFB2SjRBa1dqVkdVOUMrTDdENEVYb2RsYVBSZlZPMVlPa0NqV0tadWRkVTFHaVRkSlRIVjk0b0JHVG5rUkVnQ1I3OG5tWThCa1ZYc2Fwc1AiLCJtYWMiOiJjYWUxZDFlZmEzZTEzNzU5ZjU1MWRiN2YwNjE1OWQ4MDQ2OWI4NTczMWMyZmNhODU3M2VlMmU4YWZkMDhmNjQyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjNBQ2V1WTArRk4wZ1IzUkVWcHZDZlE9PSIsInZhbHVlIjoiS2d1a0JKcndUNmVweFJFRHNlVDBCUDVqbEc3b1VTRXlpdkZnTFR2QXgyZFRsck94MzdUam1VZlZsa3hmRk1qdjUzZDA3c2dibVVzZEVkQ1hsbGhsNVJpNUN5VHhhZ3JQWERHMmZGUEdUMmpGaGlNTnZQbENacUVwc3FITFdrWkMiLCJtYWMiOiJjOTE2YWZlNjJlM2M3NDQwMWFkNjNmMjgyMGEyMjg5NThlZWM5YjViMWM2NDg5YmRkNDI4MjZhZWU0NmFiMTQwIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 20:26:18 GMT
content-type: font/ttf
last-modified: Thu, 14 Mar 2024 02:59:07 GMT
etag: W/"269f0-61396132927c1-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 2027
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sVEUXFnpaBWssihsZlCnehe43kb7xDkne19mE5XXIRQDgDPc6q%2FKkysS8OGRXvJCQrjLdP5WkDX5T%2F%2B3C%2B7t2GdA5XZEQaxLs42CwcTruVOvpjeoPKgBiCxVJnVNSROD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8790967bf99fb4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| salenzvs.live/traffic_statistics?gurl= | 104.21.10.59 | 200 OK | 0 B |
URL GET HTTP/3salenzvs.live/traffic_statistics?gurl= IP104.21.10.59:443
Requested byhttps://salenzvs.live/product_details/103535809.html CertificateIssuerLet's Encrypt Subjectsalenzvs.live FingerprintC4:93:74:89:D7:54:43:B0:B2:39:98:89:7A:4C:0B:29:5E:EE:B7:66 ValidityTue, 02 Apr 2024 03:14:40 GMT - Mon, 01 Jul 2024 03:14:39 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /traffic_statistics?gurl= HTTP/1.1
Host: salenzvs.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://salenzvs.live/product_details/103535809.html
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6InBXSmN6cm9zNmFNN0JTbGVoNWJkMmc9PSIsInZhbHVlIjoiUEhjai95Vk1vSlQweWhrb0NFNHRQRXhqdkcxaEpHV1ZHRXRBUGZjTnhIVXhEUk8yeVN6MGxRZy9LWGZRNlhvbzNFM0hhRWVNbzI2WXh5cjA3ZWpyd3hybHN2cnBEYWJYWmRuU2Q1UFBEYWNjR29sQkw2dm5JWktoblRjRTVDZ3oiLCJtYWMiOiJjOWRkOGIyNDQzMzQzMDc3Y2E1MjhiMjVlNzU5ZDRjNGVlOGU1YjMwMjMyNGFjNTEzNWZmMmMyZjVlMDc2YzI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjJiRUFOQWRKU2RUVllNL3kySGgwTXc9PSIsInZhbHVlIjoiN255TWI2cmdIeXQ4MzZhM3NHRnVBcFY0M0RtUE1uN3A0OWtVK1ZHZDZkd0Y5TVdNM3hjak8zcjZMdnFNZnZ2N01QanRnblZ4dy82R1c4WVhYTk1IcENvRjIzOS9SSlg5YkxMdEZmVkRzL09RSE9va203VzBMajRmY2p4Yll4aEEiLCJtYWMiOiI2Y2Q2Y2ZhYTZjMzZjNzJjMWFhYWFlYjk4Zjk3N2ZmNTZlMjcxN2UzZmNhNTEwOWEyNGRmZjEzY2Y5ZGNjMDI1IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 20:26:14 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache, private
set-cookie: XSRF-TOKEN=eyJpdiI6ImRqVmo5Y011RW5iS0VZeTFXQ0Ribnc9PSIsInZhbHVlIjoiTnBVaCs0WUR2TmlRTHpNaWM0MGR1NUZ5OS9FOWVqMXljZHh6VCtuM2loVWNVdURaNFB2SjRBa1dqVkdVOUMrTDdENEVYb2RsYVBSZlZPMVlPa0NqV0tadWRkVTFHaVRkSlRIVjk0b0JHVG5rUkVnQ1I3OG5tWThCa1ZYc2Fwc1AiLCJtYWMiOiJjYWUxZDFlZmEzZTEzNzU5ZjU1MWRiN2YwNjE1OWQ4MDQ2OWI4NTczMWMyZmNhODU3M2VlMmU4YWZkMDhmNjQyIiwidGFnIjoiIn0%3D; expires=Tue, 23-Apr-2024 22:26:14 GMT; Max-Age=7200; path=/; samesite=lax
laravel_session=eyJpdiI6IkdIcnorYVY3YzJiZEJVUkZ4TDNlWFE9PSIsInZhbHVlIjoidmN4R2hyTVA0ejlmemhFNjBVTlpyMVNmNXV4RFdiWmFUbU43d3ZkMlNWV1cvdjB4MW1Wb3QxQ2RYWFNQMWZrcG11MW9mcGQzOTE5V2R1YUp6VVBseFNEZEx5ZlNPYXpleTRnU2tyMG16SUFFOURqQ21VWjdoRFkwNDE3SHpKS20iLCJtYWMiOiI0NDk4ODc0OTIwMjBmMDZjZTY2NTdlZmU2Yzc2YzUxYjY5YTkyNjIzMDlhZjcwNmI1OWQzNTU0OGUxMzZjYmFkIiwidGFnIjoiIn0%3D; expires=Tue, 23-Apr-2024 22:26:14 GMT; Max-Age=7200; path=/; httponly; samesite=lax
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hDaG3CPEYrK4hciWSqNCgxxHDLr%2BB0l%2BVwFUpJch8NkBb8FK0RMNHRk%2B6y4xseoTsUmrCqwQNo71%2FuMx%2BIl5HVJ5iAl8rOrJwAZf5Q160oqza8EbLucKCBAnN0VqStW8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87909658ae56b4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| salenzvs.live/static/mall/css/font/Montserrat-Regular.ttf | 104.21.10.59 | 200 OK | 246 kB |
URL GET HTTP/3salenzvs.live/static/mall/css/font/Montserrat-Regular.ttf IP104.21.10.59:443
Requested byhttps://salenzvs.live/product_details/103535809.html CertificateIssuerLet's Encrypt Subjectsalenzvs.live FingerprintC4:93:74:89:D7:54:43:B0:B2:39:98:89:7A:4C:0B:29:5E:EE:B7:66 ValidityTue, 02 Apr 2024 03:14:40 GMT - Mon, 01 Jul 2024 03:14:39 GMT
File typeTrueType Font data, 17 tables, 1st "GDEF", 13 names, Microsoft, language 0x409, Copyright 2011 The Montserrat Project Authors (https://github.com/JulietaUla/Montserrat)Montserr Size246 kB (245708 bytes) Hashee6539921d713482b8ccd4d0d23961bb d25b35242deb1c6ff888b8162ca2aacc356d3899 077cdab15161232a9ba7124d2ddd7a9425145750788e9a966c156cc66274f525
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/mall/css/font/Montserrat-Regular.ttf HTTP/1.1
Host: salenzvs.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://salenzvs.live/static/mall/css/demo1.css
Cookie: XSRF-TOKEN=eyJpdiI6InBXSmN6cm9zNmFNN0JTbGVoNWJkMmc9PSIsInZhbHVlIjoiUEhjai95Vk1vSlQweWhrb0NFNHRQRXhqdkcxaEpHV1ZHRXRBUGZjTnhIVXhEUk8yeVN6MGxRZy9LWGZRNlhvbzNFM0hhRWVNbzI2WXh5cjA3ZWpyd3hybHN2cnBEYWJYWmRuU2Q1UFBEYWNjR29sQkw2dm5JWktoblRjRTVDZ3oiLCJtYWMiOiJjOWRkOGIyNDQzMzQzMDc3Y2E1MjhiMjVlNzU5ZDRjNGVlOGU1YjMwMjMyNGFjNTEzNWZmMmMyZjVlMDc2YzI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjJiRUFOQWRKU2RUVllNL3kySGgwTXc9PSIsInZhbHVlIjoiN255TWI2cmdIeXQ4MzZhM3NHRnVBcFY0M0RtUE1uN3A0OWtVK1ZHZDZkd0Y5TVdNM3hjak8zcjZMdnFNZnZ2N01QanRnblZ4dy82R1c4WVhYTk1IcENvRjIzOS9SSlg5YkxMdEZmVkRzL09RSE9va203VzBMajRmY2p4Yll4aEEiLCJtYWMiOiI2Y2Q2Y2ZhYTZjMzZjNzJjMWFhYWFlYjk4Zjk3N2ZmNTZlMjcxN2UzZmNhNTEwOWEyNGRmZjEzY2Y5ZGNjMDI1IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 20:26:13 GMT
content-type: font/ttf
last-modified: Thu, 14 Mar 2024 02:59:07 GMT
etag: W/"3bfcc-613961328fcc9-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 2022
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bryDC%2BOL%2FUZ02V5Ga7G6A5gNiVAmbJM9dovVaAwoHLTyMQPkqmYFgXb4%2FHCbZ%2FqjeboW8ezVBgReI7mwNSQQb5e6VXsJaqXEKtcpPONG7RmBm5O%2FH7v9KjFBijPZgsAC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87909658ce6eb4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.digsdigs.com/photos/2014/08/a-black-geometric-paneled-wall-is-a-cool-solution-for-a-boho-mid-century-modern-and-just-elegant-contemporary-space.jpg | 104.21.70.5 | 200 OK | 48 kB |
URL GET HTTP/2www.digsdigs.com/photos/2014/08/a-black-geometric-paneled-wall-is-a-cool-solution-for-a-boho-mid-century-modern-and-just-elegant-contemporary-space.jpg IP104.21.70.5:443
Requested byhttps://salenzvs.live/product_details/103535809.html CertificateIssuerGoogle Trust Services LLC Subjectdigsdigs.com Fingerprint03:F9:55:78:3F:64:F4:8D:3E:15:D2:58:BA:CE:FB:5D:E2:34:F2:8C ValiditySat, 13 Apr 2024 22:24:06 GMT - Fri, 12 Jul 2024 22:24:05 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 553x838, components 3 Hash8400a781658a928c4e03286934cc4cfa 6d2ef9b805e2afd10b95e399b2a8fb7431ed2749 12c507ab848caeb7e958c54e1de9d638ce464b07541a02dee3b443d38c782f28
GET /photos/2014/08/a-black-geometric-paneled-wall-is-a-cool-solution-for-a-boho-mid-century-modern-and-just-elegant-contemporary-space.jpg HTTP/1.1
Host: www.digsdigs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 23 Apr 2024 20:26:17 GMT
content-type: image/jpeg
content-length: 48324
last-modified: Sun, 19 Dec 2021 18:31:03 GMT
etag: "61bf7a67-bcc4"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SwRdjwz%2Fj9AqqofnaCdLjDXrgpg6cdFIRLBASied4X34w4jAwQj%2BFTyMLt9uepSt3rZOB31MVK81PZ0VWiPMLULap2ZZUlo3iT5i60blPpjETd5JcClYsW9F4SfcepCAkrGf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8790966ecba8b521-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| salenzvs.live/static/mall/css/jquery-ui.min.css | 104.21.10.59 | 200 OK | 34 kB |
URL GET HTTP/3salenzvs.live/static/mall/css/jquery-ui.min.css IP104.21.10.59:443
Requested byhttps://salenzvs.live/product_details/103535809.html CertificateIssuerLet's Encrypt Subjectsalenzvs.live FingerprintC4:93:74:89:D7:54:43:B0:B2:39:98:89:7A:4C:0B:29:5E:EE:B7:66 ValidityTue, 02 Apr 2024 03:14:40 GMT - Mon, 01 Jul 2024 03:14:39 GMT
File typeASCII text, with very long lines (2363) Hashbd2605faa1a82b81a3499b489ed5fb22 dab30edbfa1758f8a150148675a4758822986c05 541607bcce7ec5803b0dfc7b0565deec6605b5f7e9f464420b530ffd75015db9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/mall/css/jquery-ui.min.css HTTP/1.1
Host: salenzvs.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://salenzvs.live/product_details/103535809.html
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6InBXSmN6cm9zNmFNN0JTbGVoNWJkMmc9PSIsInZhbHVlIjoiUEhjai95Vk1vSlQweWhrb0NFNHRQRXhqdkcxaEpHV1ZHRXRBUGZjTnhIVXhEUk8yeVN6MGxRZy9LWGZRNlhvbzNFM0hhRWVNbzI2WXh5cjA3ZWpyd3hybHN2cnBEYWJYWmRuU2Q1UFBEYWNjR29sQkw2dm5JWktoblRjRTVDZ3oiLCJtYWMiOiJjOWRkOGIyNDQzMzQzMDc3Y2E1MjhiMjVlNzU5ZDRjNGVlOGU1YjMwMjMyNGFjNTEzNWZmMmMyZjVlMDc2YzI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjJiRUFOQWRKU2RUVllNL3kySGgwTXc9PSIsInZhbHVlIjoiN255TWI2cmdIeXQ4MzZhM3NHRnVBcFY0M0RtUE1uN3A0OWtVK1ZHZDZkd0Y5TVdNM3hjak8zcjZMdnFNZnZ2N01QanRnblZ4dy82R1c4WVhYTk1IcENvRjIzOS9SSlg5YkxMdEZmVkRzL09RSE9va203VzBMajRmY2p4Yll4aEEiLCJtYWMiOiI2Y2Q2Y2ZhYTZjMzZjNzJjMWFhYWFlYjk4Zjk3N2ZmNTZlMjcxN2UzZmNhNTEwOWEyNGRmZjEzY2Y5ZGNjMDI1IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 20:26:12 GMT
content-type: text/css
last-modified: Thu, 14 Mar 2024 02:59:07 GMT
etag: W/"865d-6139613294319-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 4129
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wac%2Fl2pl9HqNT1%2BlBAlkJIaZxwvoNDEZSkYMGydtoAdlAR4fgGffPl9HPdhuSGm8kD3Jr8m1x7HCHVupZOJqmx0YPGenPNDK3XiHKk01VcJbX%2FZy%2BPrBJ%2FGIAOBB9T3Z"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87909654aa38b4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| salenzvs.live/static/store/css/checkout.css | 104.21.10.59 | 200 OK | 4.8 kB |
URL GET HTTP/3salenzvs.live/static/store/css/checkout.css IP104.21.10.59:443
Requested byhttps://salenzvs.live/product_details/103535809.html CertificateIssuerLet's Encrypt Subjectsalenzvs.live FingerprintC4:93:74:89:D7:54:43:B0:B2:39:98:89:7A:4C:0B:29:5E:EE:B7:66 ValidityTue, 02 Apr 2024 03:14:40 GMT - Mon, 01 Jul 2024 03:14:39 GMT
File typeASCII text, with very long lines (5046), with no line terminators Hash78004bf5e334b836b476f48fcb42d6b2 1b118f3acfd8329b2219397946fbdcdd2eb8a8a1 36ec4ba8f16410525a9046d41eab8c0acb179340bed5d10a795edb52fc899bb0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/store/css/checkout.css HTTP/1.1
Host: salenzvs.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://salenzvs.live/product_details/103535809.html
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6InBXSmN6cm9zNmFNN0JTbGVoNWJkMmc9PSIsInZhbHVlIjoiUEhjai95Vk1vSlQweWhrb0NFNHRQRXhqdkcxaEpHV1ZHRXRBUGZjTnhIVXhEUk8yeVN6MGxRZy9LWGZRNlhvbzNFM0hhRWVNbzI2WXh5cjA3ZWpyd3hybHN2cnBEYWJYWmRuU2Q1UFBEYWNjR29sQkw2dm5JWktoblRjRTVDZ3oiLCJtYWMiOiJjOWRkOGIyNDQzMzQzMDc3Y2E1MjhiMjVlNzU5ZDRjNGVlOGU1YjMwMjMyNGFjNTEzNWZmMmMyZjVlMDc2YzI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjJiRUFOQWRKU2RUVllNL3kySGgwTXc9PSIsInZhbHVlIjoiN255TWI2cmdIeXQ4MzZhM3NHRnVBcFY0M0RtUE1uN3A0OWtVK1ZHZDZkd0Y5TVdNM3hjak8zcjZMdnFNZnZ2N01QanRnblZ4dy82R1c4WVhYTk1IcENvRjIzOS9SSlg5YkxMdEZmVkRzL09RSE9va203VzBMajRmY2p4Yll4aEEiLCJtYWMiOiI2Y2Q2Y2ZhYTZjMzZjNzJjMWFhYWFlYjk4Zjk3N2ZmNTZlMjcxN2UzZmNhNTEwOWEyNGRmZjEzY2Y5ZGNjMDI1IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 20:26:12 GMT
content-type: text/css
last-modified: Thu, 14 Mar 2024 02:59:07 GMT
etag: W/"12d8-61396132b006a-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 4129
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QIyZpmH%2FkHKoeDPI5iMAaW8yeegZgjUvW52JBgjW9LGTk9ljYWu8ax3NEU6%2FXryu%2BSshtqK1hPFha%2FaOj2L9P2vTo1ZMT%2BPugpel0WRfjgPDlX8E9I1XY7vv0nZj514Y"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87909654aa45b4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| salenzvs.live/static/default/css/iconfont.css | 104.21.10.59 | 200 OK | 1.4 kB |
URL GET HTTP/3salenzvs.live/static/default/css/iconfont.css IP104.21.10.59:443
Requested byhttps://salenzvs.live/product_details/103535809.html CertificateIssuerLet's Encrypt Subjectsalenzvs.live FingerprintC4:93:74:89:D7:54:43:B0:B2:39:98:89:7A:4C:0B:29:5E:EE:B7:66 ValidityTue, 02 Apr 2024 03:14:40 GMT - Mon, 01 Jul 2024 03:14:39 GMT
File typeASCII text, with very long lines (1543), with no line terminators Hash090f72d902afd1175acf4cad9f14c475 570ba183720b7f40f15601d0d4321a6ad819fcf2 29b84aaf9a3d5b98b8f77db96a21f11fd83bf97cc140f3e7ff41735aba555187
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/default/css/iconfont.css HTTP/1.1
Host: salenzvs.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://salenzvs.live/product_details/103535809.html
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6InBXSmN6cm9zNmFNN0JTbGVoNWJkMmc9PSIsInZhbHVlIjoiUEhjai95Vk1vSlQweWhrb0NFNHRQRXhqdkcxaEpHV1ZHRXRBUGZjTnhIVXhEUk8yeVN6MGxRZy9LWGZRNlhvbzNFM0hhRWVNbzI2WXh5cjA3ZWpyd3hybHN2cnBEYWJYWmRuU2Q1UFBEYWNjR29sQkw2dm5JWktoblRjRTVDZ3oiLCJtYWMiOiJjOWRkOGIyNDQzMzQzMDc3Y2E1MjhiMjVlNzU5ZDRjNGVlOGU1YjMwMjMyNGFjNTEzNWZmMmMyZjVlMDc2YzI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjJiRUFOQWRKU2RUVllNL3kySGgwTXc9PSIsInZhbHVlIjoiN255TWI2cmdIeXQ4MzZhM3NHRnVBcFY0M0RtUE1uN3A0OWtVK1ZHZDZkd0Y5TVdNM3hjak8zcjZMdnFNZnZ2N01QanRnblZ4dy82R1c4WVhYTk1IcENvRjIzOS9SSlg5YkxMdEZmVkRzL09RSE9va203VzBMajRmY2p4Yll4aEEiLCJtYWMiOiI2Y2Q2Y2ZhYTZjMzZjNzJjMWFhYWFlYjk4Zjk3N2ZmNTZlMjcxN2UzZmNhNTEwOWEyNGRmZjEzY2Y5ZGNjMDI1IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 20:26:12 GMT
content-type: text/css
last-modified: Thu, 14 Mar 2024 02:59:07 GMT
etag: W/"55c-6139613276a70-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 4129
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JJMOnQ59gu%2BHFFjD6%2B2vgAMKrX0mHREgoPC1d%2BnKZzYaE%2FpmUFEg90XV8HUIVQIA9AXynGoT32zArthzYP%2BZl3zoyhaC68aYV%2F0yRHRctBipXi%2FweJN1VebXLsxNN73%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87909654ba4db4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| salenzvs.live/api/item/info?id=103535809 | 104.21.10.59 | 200 OK | 1.5 kB |
URL GET HTTP/3salenzvs.live/api/item/info?id=103535809 IP104.21.10.59:443
Requested byhttps://salenzvs.live/product_details/103535809.html CertificateIssuerLet's Encrypt Subjectsalenzvs.live FingerprintC4:93:74:89:D7:54:43:B0:B2:39:98:89:7A:4C:0B:29:5E:EE:B7:66 ValidityTue, 02 Apr 2024 03:14:40 GMT - Mon, 01 Jul 2024 03:14:39 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (1605), with no line terminators Hash18fa24ad7a7c212191759629d7072538 419c64880a093463822669f55b33b5acc212ddd9 3159857624c0074f7f42a8b5c5419c5e98560fa272d1f5b93bba64466a0fdcf9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /api/item/info?id=103535809 HTTP/1.1
Host: salenzvs.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://salenzvs.live/product_details/103535809.html
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6InBXSmN6cm9zNmFNN0JTbGVoNWJkMmc9PSIsInZhbHVlIjoiUEhjai95Vk1vSlQweWhrb0NFNHRQRXhqdkcxaEpHV1ZHRXRBUGZjTnhIVXhEUk8yeVN6MGxRZy9LWGZRNlhvbzNFM0hhRWVNbzI2WXh5cjA3ZWpyd3hybHN2cnBEYWJYWmRuU2Q1UFBEYWNjR29sQkw2dm5JWktoblRjRTVDZ3oiLCJtYWMiOiJjOWRkOGIyNDQzMzQzMDc3Y2E1MjhiMjVlNzU5ZDRjNGVlOGU1YjMwMjMyNGFjNTEzNWZmMmMyZjVlMDc2YzI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjJiRUFOQWRKU2RUVllNL3kySGgwTXc9PSIsInZhbHVlIjoiN255TWI2cmdIeXQ4MzZhM3NHRnVBcFY0M0RtUE1uN3A0OWtVK1ZHZDZkd0Y5TVdNM3hjak8zcjZMdnFNZnZ2N01QanRnblZ4dy82R1c4WVhYTk1IcENvRjIzOS9SSlg5YkxMdEZmVkRzL09RSE9va203VzBMajRmY2p4Yll4aEEiLCJtYWMiOiI2Y2Q2Y2ZhYTZjMzZjNzJjMWFhYWFlYjk4Zjk3N2ZmNTZlMjcxN2UzZmNhNTEwOWEyNGRmZjEzY2Y5ZGNjMDI1IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 20:26:16 GMT
content-type: application/json
cache-control: no-cache, private
x-ratelimit-limit: 60
x-ratelimit-remaining: 58
access-control-allow-origin: *
set-cookie: laravel_session=eyJpdiI6Ild4aFp5QVZPSTB0OTFuS0RQMHhoS0E9PSIsInZhbHVlIjoieTRqc2wyTFRBa09YZlcvYktVVGJWZllHa0RidUdGN3htTWdidzJJUUFFeit3amVsM0NqNVBocHR3U0E2S1I3TEkycE5BL3dtcG9xSkNGOHExYnpncjZ3VXJFUUlsZkxaVDR6cExmUURLdnpOVGJwUXZzdS95Q2F3elBNTlRzek8iLCJtYWMiOiI5YTE3YWZkODkyOWQ1ZjQwY2IyMWZjODYxZTBkMTcxYjNmZThlM2ZiMDVlMGU2NTkxMmVhZWQ1NmVlY2I1MmJhIiwidGFnIjoiIn0%3D; expires=Tue, 23-Apr-2024 22:26:16 GMT; Max-Age=7200; path=/; httponly; samesite=lax
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wus1cu%2B9rqLxrb8Bbavnf1baDhqRZppMiW59nyO2OcQTIOymHBGTQxkCJUVyAd5HfOkDtgwKZKqtmi1zO%2BHZAQrcCIkmvcqCwlTMl560fZcLRIbPT30vq1B5qW7CeDxm"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879096580db5b4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| salenzvs.live/static/mall/css/font/ecicons.woff2?v=4.7.0 | 104.21.10.59 | 200 OK | 77 kB |
URL GET HTTP/3salenzvs.live/static/mall/css/font/ecicons.woff2?v=4.7.0 IP104.21.10.59:443
Requested byhttps://salenzvs.live/product_details/103535809.html CertificateIssuerLet's Encrypt Subjectsalenzvs.live FingerprintC4:93:74:89:D7:54:43:B0:B2:39:98:89:7A:4C:0B:29:5E:EE:B7:66 ValidityTue, 02 Apr 2024 03:14:40 GMT - Mon, 01 Jul 2024 03:14:39 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 77160, version 4.459 Hashaf7ae505a9eed503f8b8e6982036873e d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c 2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/mall/css/font/ecicons.woff2?v=4.7.0 HTTP/1.1
Host: salenzvs.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://salenzvs.live/static/mall/css/ecicons.min.css
Cookie: XSRF-TOKEN=eyJpdiI6InBXSmN6cm9zNmFNN0JTbGVoNWJkMmc9PSIsInZhbHVlIjoiUEhjai95Vk1vSlQweWhrb0NFNHRQRXhqdkcxaEpHV1ZHRXRBUGZjTnhIVXhEUk8yeVN6MGxRZy9LWGZRNlhvbzNFM0hhRWVNbzI2WXh5cjA3ZWpyd3hybHN2cnBEYWJYWmRuU2Q1UFBEYWNjR29sQkw2dm5JWktoblRjRTVDZ3oiLCJtYWMiOiJjOWRkOGIyNDQzMzQzMDc3Y2E1MjhiMjVlNzU5ZDRjNGVlOGU1YjMwMjMyNGFjNTEzNWZmMmMyZjVlMDc2YzI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjJiRUFOQWRKU2RUVllNL3kySGgwTXc9PSIsInZhbHVlIjoiN255TWI2cmdIeXQ4MzZhM3NHRnVBcFY0M0RtUE1uN3A0OWtVK1ZHZDZkd0Y5TVdNM3hjak8zcjZMdnFNZnZ2N01QanRnblZ4dy82R1c4WVhYTk1IcENvRjIzOS9SSlg5YkxMdEZmVkRzL09RSE9va203VzBMajRmY2p4Yll4aEEiLCJtYWMiOiI2Y2Q2Y2ZhYTZjMzZjNzJjMWFhYWFlYjk4Zjk3N2ZmNTZlMjcxN2UzZmNhNTEwOWEyNGRmZjEzY2Y5ZGNjMDI1IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 20:26:13 GMT
content-type: font/woff2
last-modified: Thu, 14 Mar 2024 02:59:07 GMT
etag: W/"12d68-6139613294319-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 2022
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=s6N%2BjEyMRzwJFPKNfTY4%2FLg59RTy1SYNaqotpDpCULcMz71K0dCJE%2FuoCM6%2FaFqei3CRtMdhWPKHsD4CFZkZ7AUbwAD3zwQrOjBOM467uCEvLjDC212sDLAEuuX65wyb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87909658ce7cb4ed-OSL
alt-svc: h3=":443"; ma=86400
|
|
| salenzvs.live/static/mall/css/animate.css | 104.21.10.59 | 200 OK | 72 kB |
URL GET HTTP/3salenzvs.live/static/mall/css/animate.css IP104.21.10.59:443
Requested byhttps://salenzvs.live/product_details/103535809.html CertificateIssuerLet's Encrypt Subjectsalenzvs.live FingerprintC4:93:74:89:D7:54:43:B0:B2:39:98:89:7A:4C:0B:29:5E:EE:B7:66 ValidityTue, 02 Apr 2024 03:14:40 GMT - Mon, 01 Jul 2024 03:14:39 GMT
File typeASCII text, with very long lines (65343) Hasha2debeb6012c56100f1180d3de887927 b49fa74ae3abff550dc4beff7e6e540ec1f37029 fee5e34c63f9527f33c78381943de33789c521a12f8ec151991bc5247d5f7bc0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/mall/css/animate.css HTTP/1.1
Host: salenzvs.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://salenzvs.live/product_details/103535809.html
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6InBXSmN6cm9zNmFNN0JTbGVoNWJkMmc9PSIsInZhbHVlIjoiUEhjai95Vk1vSlQweWhrb0NFNHRQRXhqdkcxaEpHV1ZHRXRBUGZjTnhIVXhEUk8yeVN6MGxRZy9LWGZRNlhvbzNFM0hhRWVNbzI2WXh5cjA3ZWpyd3hybHN2cnBEYWJYWmRuU2Q1UFBEYWNjR29sQkw2dm5JWktoblRjRTVDZ3oiLCJtYWMiOiJjOWRkOGIyNDQzMzQzMDc3Y2E1MjhiMjVlNzU5ZDRjNGVlOGU1YjMwMjMyNGFjNTEzNWZmMmMyZjVlMDc2YzI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjJiRUFOQWRKU2RUVllNL3kySGgwTXc9PSIsInZhbHVlIjoiN255TWI2cmdIeXQ4MzZhM3NHRnVBcFY0M0RtUE1uN3A0OWtVK1ZHZDZkd0Y5TVdNM3hjak8zcjZMdnFNZnZ2N01QanRnblZ4dy82R1c4WVhYTk1IcENvRjIzOS9SSlg5YkxMdEZmVkRzL09RSE9va203VzBMajRmY2p4Yll4aEEiLCJtYWMiOiI2Y2Q2Y2ZhYTZjMzZjNzJjMWFhYWFlYjk4Zjk3N2ZmNTZlMjcxN2UzZmNhNTEwOWEyNGRmZjEzY2Y5ZGNjMDI1IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 20:26:12 GMT
content-type: text/css
last-modified: Thu, 14 Mar 2024 02:59:07 GMT
etag: W/"1184b-613961328e171-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 4129
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=L%2FA3iKkRIEDkAbpu3Jac5NfDUuRcwkmmUs1xVmY8OlVoskKaqxlAxy%2FI1%2FCbzOhZGKzmCbY1z1JwO%2FuLrBNfE8RJRA6F6RJA%2Fukgs79q3j2axxMWTr26ahgJfnVBcWCA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87909654aa33b4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| salenzvs.live/static/mall/css/bg-4.css | 104.21.10.59 | 200 OK | 452 B |
URL GET HTTP/3salenzvs.live/static/mall/css/bg-4.css IP104.21.10.59:443
Requested byhttps://salenzvs.live/product_details/103535809.html CertificateIssuerLet's Encrypt Subjectsalenzvs.live FingerprintC4:93:74:89:D7:54:43:B0:B2:39:98:89:7A:4C:0B:29:5E:EE:B7:66 ValidityTue, 02 Apr 2024 03:14:40 GMT - Mon, 01 Jul 2024 03:14:39 GMT
File typeASCII text, with very long lines (467), with no line terminators Hash75d2e5447a478cdc5d40f2f20a0cad6e 581fd4c4e4313bda85e54dbf23f6147c8203f52a 660bc5a80d75b5e2451246f210c51173dca79a0ed3121fe622294637afaeafe9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/mall/css/bg-4.css HTTP/1.1
Host: salenzvs.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://salenzvs.live/product_details/103535809.html
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6InBXSmN6cm9zNmFNN0JTbGVoNWJkMmc9PSIsInZhbHVlIjoiUEhjai95Vk1vSlQweWhrb0NFNHRQRXhqdkcxaEpHV1ZHRXRBUGZjTnhIVXhEUk8yeVN6MGxRZy9LWGZRNlhvbzNFM0hhRWVNbzI2WXh5cjA3ZWpyd3hybHN2cnBEYWJYWmRuU2Q1UFBEYWNjR29sQkw2dm5JWktoblRjRTVDZ3oiLCJtYWMiOiJjOWRkOGIyNDQzMzQzMDc3Y2E1MjhiMjVlNzU5ZDRjNGVlOGU1YjMwMjMyNGFjNTEzNWZmMmMyZjVlMDc2YzI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjJiRUFOQWRKU2RUVllNL3kySGgwTXc9PSIsInZhbHVlIjoiN255TWI2cmdIeXQ4MzZhM3NHRnVBcFY0M0RtUE1uN3A0OWtVK1ZHZDZkd0Y5TVdNM3hjak8zcjZMdnFNZnZ2N01QanRnblZ4dy82R1c4WVhYTk1IcENvRjIzOS9SSlg5YkxMdEZmVkRzL09RSE9va203VzBMajRmY2p4Yll4aEEiLCJtYWMiOiI2Y2Q2Y2ZhYTZjMzZjNzJjMWFhYWFlYjk4Zjk3N2ZmNTZlMjcxN2UzZmNhNTEwOWEyNGRmZjEzY2Y5ZGNjMDI1IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 20:26:12 GMT
content-type: text/css
last-modified: Thu, 14 Mar 2024 02:59:07 GMT
etag: W/"1c4-613961328e171-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 4129
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mPBY%2BSMavYBigTT%2Fuf9c83xqZEcp5kqN1ObigTJtaSHv%2FciGSpmarG%2FDHOOvqX4ZfIPWiSLw3bTLJPUN%2BhljoMWKUUQbAo%2FzGC6z8jth55WSXkYqN5rjPvfaF%2FTEfDit"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87909654aa44b4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| salenzvs.live/static/mall/css/font/Montserrat-SemiBold.ttf | 104.21.10.59 | 200 OK | 244 kB |
URL GET HTTP/3salenzvs.live/static/mall/css/font/Montserrat-SemiBold.ttf IP104.21.10.59:443
Requested byhttps://salenzvs.live/product_details/103535809.html CertificateIssuerLet's Encrypt Subjectsalenzvs.live FingerprintC4:93:74:89:D7:54:43:B0:B2:39:98:89:7A:4C:0B:29:5E:EE:B7:66 ValidityTue, 02 Apr 2024 03:14:40 GMT - Mon, 01 Jul 2024 03:14:39 GMT
File typeTrueType Font data, 17 tables, 1st "GDEF", 15 names, Microsoft, language 0x409, Copyright 2011 The Montserrat Project Authors (https://github.com/JulietaUla/Montserrat)Montserr Size244 kB (243816 bytes) Hashc641dbee1d75892e4d88bdc31560c91b f829de4c176fb2ccf5e33360920f48de6794434e f227901ef48ac4d1fe4cc6ed0dbce99e6b38969babe5e05da2dfb33521b02944
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/mall/css/font/Montserrat-SemiBold.ttf HTTP/1.1
Host: salenzvs.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://salenzvs.live/static/mall/css/demo1.css
Cookie: XSRF-TOKEN=eyJpdiI6InBXSmN6cm9zNmFNN0JTbGVoNWJkMmc9PSIsInZhbHVlIjoiUEhjai95Vk1vSlQweWhrb0NFNHRQRXhqdkcxaEpHV1ZHRXRBUGZjTnhIVXhEUk8yeVN6MGxRZy9LWGZRNlhvbzNFM0hhRWVNbzI2WXh5cjA3ZWpyd3hybHN2cnBEYWJYWmRuU2Q1UFBEYWNjR29sQkw2dm5JWktoblRjRTVDZ3oiLCJtYWMiOiJjOWRkOGIyNDQzMzQzMDc3Y2E1MjhiMjVlNzU5ZDRjNGVlOGU1YjMwMjMyNGFjNTEzNWZmMmMyZjVlMDc2YzI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjJiRUFOQWRKU2RUVllNL3kySGgwTXc9PSIsInZhbHVlIjoiN255TWI2cmdIeXQ4MzZhM3NHRnVBcFY0M0RtUE1uN3A0OWtVK1ZHZDZkd0Y5TVdNM3hjak8zcjZMdnFNZnZ2N01QanRnblZ4dy82R1c4WVhYTk1IcENvRjIzOS9SSlg5YkxMdEZmVkRzL09RSE9va203VzBMajRmY2p4Yll4aEEiLCJtYWMiOiI2Y2Q2Y2ZhYTZjMzZjNzJjMWFhYWFlYjk4Zjk3N2ZmNTZlMjcxN2UzZmNhNTEwOWEyNGRmZjEzY2Y5ZGNjMDI1IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 20:26:13 GMT
content-type: font/ttf
last-modified: Thu, 14 Mar 2024 02:59:07 GMT
etag: W/"3b868-61396132900b1-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 2022
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=x4vJboPv1Tz1iZ38mWEq7B%2BuLe8NorSa0ATYIGVKfborIQtZzvHpnkZF61j%2FO3cmW1RHvnKwmnnhqbCjkTPlJhdFuPTWKzHrZ2OB6q4DLzO4jZ7LeYryHyVVSK70EBEr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87909658ce75b4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| salenzvs.live/static/mall/css/demo1.css | 104.21.10.59 | 200 OK | 439 kB |
URL GET HTTP/3salenzvs.live/static/mall/css/demo1.css IP104.21.10.59:443
Requested byhttps://salenzvs.live/product_details/103535809.html CertificateIssuerLet's Encrypt Subjectsalenzvs.live FingerprintC4:93:74:89:D7:54:43:B0:B2:39:98:89:7A:4C:0B:29:5E:EE:B7:66 ValidityTue, 02 Apr 2024 03:14:40 GMT - Mon, 01 Jul 2024 03:14:39 GMT
Size439 kB (438856 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/mall/css/demo1.css HTTP/1.1
Host: salenzvs.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://salenzvs.live/product_details/103535809.html
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6InBXSmN6cm9zNmFNN0JTbGVoNWJkMmc9PSIsInZhbHVlIjoiUEhjai95Vk1vSlQweWhrb0NFNHRQRXhqdkcxaEpHV1ZHRXRBUGZjTnhIVXhEUk8yeVN6MGxRZy9LWGZRNlhvbzNFM0hhRWVNbzI2WXh5cjA3ZWpyd3hybHN2cnBEYWJYWmRuU2Q1UFBEYWNjR29sQkw2dm5JWktoblRjRTVDZ3oiLCJtYWMiOiJjOWRkOGIyNDQzMzQzMDc3Y2E1MjhiMjVlNzU5ZDRjNGVlOGU1YjMwMjMyNGFjNTEzNWZmMmMyZjVlMDc2YzI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjJiRUFOQWRKU2RUVllNL3kySGgwTXc9PSIsInZhbHVlIjoiN255TWI2cmdIeXQ4MzZhM3NHRnVBcFY0M0RtUE1uN3A0OWtVK1ZHZDZkd0Y5TVdNM3hjak8zcjZMdnFNZnZ2N01QanRnblZ4dy82R1c4WVhYTk1IcENvRjIzOS9SSlg5YkxMdEZmVkRzL09RSE9va203VzBMajRmY2p4Yll4aEEiLCJtYWMiOiI2Y2Q2Y2ZhYTZjMzZjNzJjMWFhYWFlYjk4Zjk3N2ZmNTZlMjcxN2UzZmNhNTEwOWEyNGRmZjEzY2Y5ZGNjMDI1IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 20:26:12 GMT
content-type: text/css
last-modified: Thu, 14 Mar 2024 02:59:07 GMT
etag: W/"6b248-613961328e941-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 4129
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6T85QMkU2KD9V7lh68pw1OvAbmQEeaF6IGrBT5N3eEjj1qPgMs1yBtFszy8RM0IDu5l3erT95fkR5hNhM%2BlVLTTYbPW6tPltzVQ4qzNMlp41Y76phLB%2F2V9Z4RUpkO1P"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87909654aa3fb4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| salenzvs.live/static/mall/css/slick.min.css | 104.21.10.59 | 200 OK | 1.3 kB |
URL GET HTTP/3salenzvs.live/static/mall/css/slick.min.css IP104.21.10.59:443
Requested byhttps://salenzvs.live/product_details/103535809.html CertificateIssuerLet's Encrypt Subjectsalenzvs.live FingerprintC4:93:74:89:D7:54:43:B0:B2:39:98:89:7A:4C:0B:29:5E:EE:B7:66 ValidityTue, 02 Apr 2024 03:14:40 GMT - Mon, 01 Jul 2024 03:14:39 GMT
File typeASCII text, with very long lines (1327), with no line terminators Hashda4e146913da6966d85a6b8686886edb 03a28dac9dfc6c33e6175c9c185911c56525d31b fb3ed351cd5c0f1f30f88778ee1f9b056598e6d25ac4fdcab1eebcd8be521cd9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/mall/css/slick.min.css HTTP/1.1
Host: salenzvs.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://salenzvs.live/product_details/103535809.html
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6InBXSmN6cm9zNmFNN0JTbGVoNWJkMmc9PSIsInZhbHVlIjoiUEhjai95Vk1vSlQweWhrb0NFNHRQRXhqdkcxaEpHV1ZHRXRBUGZjTnhIVXhEUk8yeVN6MGxRZy9LWGZRNlhvbzNFM0hhRWVNbzI2WXh5cjA3ZWpyd3hybHN2cnBEYWJYWmRuU2Q1UFBEYWNjR29sQkw2dm5JWktoblRjRTVDZ3oiLCJtYWMiOiJjOWRkOGIyNDQzMzQzMDc3Y2E1MjhiMjVlNzU5ZDRjNGVlOGU1YjMwMjMyNGFjNTEzNWZmMmMyZjVlMDc2YzI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjJiRUFOQWRKU2RUVllNL3kySGgwTXc9PSIsInZhbHVlIjoiN255TWI2cmdIeXQ4MzZhM3NHRnVBcFY0M0RtUE1uN3A0OWtVK1ZHZDZkd0Y5TVdNM3hjak8zcjZMdnFNZnZ2N01QanRnblZ4dy82R1c4WVhYTk1IcENvRjIzOS9SSlg5YkxMdEZmVkRzL09RSE9va203VzBMajRmY2p4Yll4aEEiLCJtYWMiOiI2Y2Q2Y2ZhYTZjMzZjNzJjMWFhYWFlYjk4Zjk3N2ZmNTZlMjcxN2UzZmNhNTEwOWEyNGRmZjEzY2Y5ZGNjMDI1IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 20:26:12 GMT
content-type: text/css
last-modified: Thu, 14 Mar 2024 02:59:07 GMT
etag: W/"52f-6139613294319-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 4129
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FbZvqCpLKY8sSptw6SMXH9kYkhK5K0slL%2BX%2BKVYJEcvRtY21p1KhWXUH4HmVUpoHoswURpQoOLjtKrFpMprPkOL3pYGjbO1nbD64O85HdGytOqRYZKYfcw19uCra4Q2K"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87909654aa3cb4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| salenzvs.live/static/market/js/jquery.min.js | 104.21.10.59 | 200 OK | 84 kB |
URL GET HTTP/3salenzvs.live/static/market/js/jquery.min.js IP104.21.10.59:443
Requested byhttps://salenzvs.live/product_details/103535809.html CertificateIssuerLet's Encrypt Subjectsalenzvs.live FingerprintC4:93:74:89:D7:54:43:B0:B2:39:98:89:7A:4C:0B:29:5E:EE:B7:66 ValidityTue, 02 Apr 2024 03:14:40 GMT - Mon, 01 Jul 2024 03:14:39 GMT
File typeJavaScript source, ASCII text, with very long lines (32061) Hashe40ec2161fe7993196f23c8a07346306 afb90752e0a90c24b7f724faca86c5f3d15d1178 874706b2b1311a0719b5267f7d1cf803057e367e94ae1ff7bf78c5450d30f5d4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/market/js/jquery.min.js HTTP/1.1
Host: salenzvs.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://salenzvs.live/product_details/103535809.html
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6InBXSmN6cm9zNmFNN0JTbGVoNWJkMmc9PSIsInZhbHVlIjoiUEhjai95Vk1vSlQweWhrb0NFNHRQRXhqdkcxaEpHV1ZHRXRBUGZjTnhIVXhEUk8yeVN6MGxRZy9LWGZRNlhvbzNFM0hhRWVNbzI2WXh5cjA3ZWpyd3hybHN2cnBEYWJYWmRuU2Q1UFBEYWNjR29sQkw2dm5JWktoblRjRTVDZ3oiLCJtYWMiOiJjOWRkOGIyNDQzMzQzMDc3Y2E1MjhiMjVlNzU5ZDRjNGVlOGU1YjMwMjMyNGFjNTEzNWZmMmMyZjVlMDc2YzI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjJiRUFOQWRKU2RUVllNL3kySGgwTXc9PSIsInZhbHVlIjoiN255TWI2cmdIeXQ4MzZhM3NHRnVBcFY0M0RtUE1uN3A0OWtVK1ZHZDZkd0Y5TVdNM3hjak8zcjZMdnFNZnZ2N01QanRnblZ4dy82R1c4WVhYTk1IcENvRjIzOS9SSlg5YkxMdEZmVkRzL09RSE9va203VzBMajRmY2p4Yll4aEEiLCJtYWMiOiI2Y2Q2Y2ZhYTZjMzZjNzJjMWFhYWFlYjk4Zjk3N2ZmNTZlMjcxN2UzZmNhNTEwOWEyNGRmZjEzY2Y5ZGNjMDI1IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 20:26:12 GMT
content-type: application/javascript
last-modified: Thu, 14 Mar 2024 02:59:07 GMT
etag: W/"14915-613961329d3a1-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 4129
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DDfmTUMcn%2FgeDoGe8fQpiov8KOHemZfglPEPUEAlkNuOghZVyoY7ahdlBdiHXe4z2%2FWpneVqM3xCOaFLs9OcFnl8077m1AtgxQkHhSvrZnyNbNrOZS5sYI2byA92ESne"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87909654ba46b4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| salenzvs.live/static/mall/css/countdownTimer.css | 104.21.10.59 | 200 OK | 1.3 kB |
URL GET HTTP/3salenzvs.live/static/mall/css/countdownTimer.css IP104.21.10.59:443
Requested byhttps://salenzvs.live/product_details/103535809.html CertificateIssuerLet's Encrypt Subjectsalenzvs.live FingerprintC4:93:74:89:D7:54:43:B0:B2:39:98:89:7A:4C:0B:29:5E:EE:B7:66 ValidityTue, 02 Apr 2024 03:14:40 GMT - Mon, 01 Jul 2024 03:14:39 GMT
File typeASCII text, with very long lines (1372), with no line terminators Hash36b9ffeb0997351e58582be74a0853fe e66064b1787ba78b5ef95c5897fe8fb2f5ae84af 85faf4717d7ebc4252891062420945090a46763a4891e0706581a19e5fc27ddb
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/mall/css/countdownTimer.css HTTP/1.1
Host: salenzvs.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://salenzvs.live/product_details/103535809.html
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6InBXSmN6cm9zNmFNN0JTbGVoNWJkMmc9PSIsInZhbHVlIjoiUEhjai95Vk1vSlQweWhrb0NFNHRQRXhqdkcxaEpHV1ZHRXRBUGZjTnhIVXhEUk8yeVN6MGxRZy9LWGZRNlhvbzNFM0hhRWVNbzI2WXh5cjA3ZWpyd3hybHN2cnBEYWJYWmRuU2Q1UFBEYWNjR29sQkw2dm5JWktoblRjRTVDZ3oiLCJtYWMiOiJjOWRkOGIyNDQzMzQzMDc3Y2E1MjhiMjVlNzU5ZDRjNGVlOGU1YjMwMjMyNGFjNTEzNWZmMmMyZjVlMDc2YzI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjJiRUFOQWRKU2RUVllNL3kySGgwTXc9PSIsInZhbHVlIjoiN255TWI2cmdIeXQ4MzZhM3NHRnVBcFY0M0RtUE1uN3A0OWtVK1ZHZDZkd0Y5TVdNM3hjak8zcjZMdnFNZnZ2N01QanRnblZ4dy82R1c4WVhYTk1IcENvRjIzOS9SSlg5YkxMdEZmVkRzL09RSE9va203VzBMajRmY2p4Yll4aEEiLCJtYWMiOiI2Y2Q2Y2ZhYTZjMzZjNzJjMWFhYWFlYjk4Zjk3N2ZmNTZlMjcxN2UzZmNhNTEwOWEyNGRmZjEzY2Y5ZGNjMDI1IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 20:26:12 GMT
content-type: text/css
last-modified: Thu, 14 Mar 2024 02:59:07 GMT
etag: W/"4fc-613961328e559-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 4129
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pd3IORTA%2Fn1Z6TKa2kkVCTn34TuDkgOVnI0K2VoTNfk9%2BEwPwhlyY9KCNgVBADD7iIxlBhL3lOwvF9PcCm98b34sdVjvmbJDrHgbgXjfCUxKDFJsid2aiCCfaznwdF9B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87909654aa3bb4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|