| www.tevashoessouthafrica.com/ |  196.240.121.126 | 200 OK | 43 kB |
URL User Request GET HTTP/1.1www.tevashoessouthafrica.com/ IP196.240.121.126:443 ASN#41564 Orion Network Limited
CertificateIssuerLet's Encrypt Subjectcpcalendars.tevashoessouthafrica.com Fingerprint4E:B5:21:6C:C2:3A:F1:AF:CA:2F:A9:75:2E:1A:F7:9E:04:5E:E0:CC ValidityFri, 12 Apr 2024 02:18:27 GMT - Thu, 11 Jul 2024 02:18:26 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (2814), with CRLF, LF line terminators Hash12e01d6a17e817e5ce842fe80523a505 06008db717f00fe9edd93c962adda5692d622440 126d025bc3fd993206506031af6a1ba63016c898759cbfc247a3f42d72f32f60
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: www.tevashoessouthafrica.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 06:44:12 GMT
Server: Apache
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Set-Cookie: zenid=4ukv9l46hm4b1332m123ui8qc6; path=/; HttpOnly
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=utf-8
|
|
| www.tevashoessouthafrica.com/includes/templates/tevasouthafrica/css/stylesheetVrJxb.css | 196.240.121.126 | 200 OK | 2.3 kB |
URL GET HTTP/1.1www.tevashoessouthafrica.com/includes/templates/tevasouthafrica/css/stylesheetVrJxb.css IP196.240.121.126:443 ASN#41564 Orion Network Limited
Requested byhttps://www.tevashoessouthafrica.com/ CertificateIssuerLet's Encrypt Subjectcpcalendars.tevashoessouthafrica.com Fingerprint4E:B5:21:6C:C2:3A:F1:AF:CA:2F:A9:75:2E:1A:F7:9E:04:5E:E0:CC ValidityFri, 12 Apr 2024 02:18:27 GMT - Thu, 11 Jul 2024 02:18:26 GMT
Hash77ac4aa1fc1b80426aa7ad8033dcb40c fa30830acbbe5458aa445be97ecd00be2e1d60fa 93a60cfc2924d4c2d193bd12bd2ccd8d54b433b975bf842d9c2547a95efabdf0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /includes/templates/tevasouthafrica/css/stylesheetVrJxb.css HTTP/1.1
Host: www.tevashoessouthafrica.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tevashoessouthafrica.com/
Cookie: zenid=4ukv9l46hm4b1332m123ui8qc6
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 06:44:13 GMT
Server: Apache
Last-Modified: Wed, 29 Apr 2020 14:17:14 GMT
Accept-Ranges: bytes
Content-Length: 2341
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
|
|
| www.tevashoessouthafrica.com/includes/templates/tevasouthafrica/css/stylesheetX8Vso.css | 196.240.121.126 | 200 OK | 12 kB |
URL GET HTTP/1.1www.tevashoessouthafrica.com/includes/templates/tevasouthafrica/css/stylesheetX8Vso.css IP196.240.121.126:443 ASN#41564 Orion Network Limited
Requested byhttps://www.tevashoessouthafrica.com/ CertificateIssuerLet's Encrypt Subjectcpcalendars.tevashoessouthafrica.com Fingerprint4E:B5:21:6C:C2:3A:F1:AF:CA:2F:A9:75:2E:1A:F7:9E:04:5E:E0:CC ValidityFri, 12 Apr 2024 02:18:27 GMT - Thu, 11 Jul 2024 02:18:26 GMT
File typeASCII text, with CRLF line terminators Hash67fb450b5474f2904e1e900d963d132c 6acfcb58c6e97fdbbcf505735b68d70273558c2b c734b979333908d6a0acb91c2f2582f29ca8487835319fc23ae311d0e775ab30
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /includes/templates/tevasouthafrica/css/stylesheetX8Vso.css HTTP/1.1
Host: www.tevashoessouthafrica.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tevashoessouthafrica.com/
Cookie: zenid=4ukv9l46hm4b1332m123ui8qc6
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 06:44:13 GMT
Server: Apache
Last-Modified: Fri, 07 May 2021 16:51:56 GMT
Accept-Ranges: bytes
Content-Length: 11539
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
|
|
| www.tevashoessouthafrica.com/includes/templates/tevasouthafrica/css/stylesheet.css | 196.240.121.126 | 200 OK | 0 B |
URL GET HTTP/1.1www.tevashoessouthafrica.com/includes/templates/tevasouthafrica/css/stylesheet.css IP196.240.121.126:443 ASN#41564 Orion Network Limited
Requested byhttps://www.tevashoessouthafrica.com/ CertificateIssuerLet's Encrypt Subjectcpcalendars.tevashoessouthafrica.com Fingerprint4E:B5:21:6C:C2:3A:F1:AF:CA:2F:A9:75:2E:1A:F7:9E:04:5E:E0:CC ValidityFri, 12 Apr 2024 02:18:27 GMT - Thu, 11 Jul 2024 02:18:26 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /includes/templates/tevasouthafrica/css/stylesheet.css HTTP/1.1
Host: www.tevashoessouthafrica.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tevashoessouthafrica.com/
Cookie: zenid=4ukv9l46hm4b1332m123ui8qc6
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 06:44:13 GMT
Server: Apache
Last-Modified: Thu, 10 Apr 2014 01:36:02 GMT
Accept-Ranges: bytes
Content-Length: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
|
|
| www.tevashoessouthafrica.com/includes/templates/tevasouthafrica/css/stylesheet2BEqg.css | 196.240.121.126 | 200 OK | 0 B |
URL GET HTTP/1.1www.tevashoessouthafrica.com/includes/templates/tevasouthafrica/css/stylesheet2BEqg.css IP196.240.121.126:443 ASN#41564 Orion Network Limited
Requested byhttps://www.tevashoessouthafrica.com/ CertificateIssuerLet's Encrypt Subjectcpcalendars.tevashoessouthafrica.com Fingerprint4E:B5:21:6C:C2:3A:F1:AF:CA:2F:A9:75:2E:1A:F7:9E:04:5E:E0:CC ValidityFri, 12 Apr 2024 02:18:27 GMT - Thu, 11 Jul 2024 02:18:26 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /includes/templates/tevasouthafrica/css/stylesheet2BEqg.css HTTP/1.1
Host: www.tevashoessouthafrica.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tevashoessouthafrica.com/
Cookie: zenid=4ukv9l46hm4b1332m123ui8qc6
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 06:44:13 GMT
Server: Apache
Last-Modified: Thu, 10 Apr 2014 01:36:02 GMT
Accept-Ranges: bytes
Content-Length: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
|
|
| www.tevashoessouthafrica.com/includes/templates/tevasouthafrica/css/stylesheetUntvb.css | 196.240.121.126 | 200 OK | 2.4 kB |
URL GET HTTP/1.1www.tevashoessouthafrica.com/includes/templates/tevasouthafrica/css/stylesheetUntvb.css IP196.240.121.126:443 ASN#41564 Orion Network Limited
Requested byhttps://www.tevashoessouthafrica.com/ CertificateIssuerLet's Encrypt Subjectcpcalendars.tevashoessouthafrica.com Fingerprint4E:B5:21:6C:C2:3A:F1:AF:CA:2F:A9:75:2E:1A:F7:9E:04:5E:E0:CC ValidityFri, 12 Apr 2024 02:18:27 GMT - Thu, 11 Jul 2024 02:18:26 GMT
File typeASCII text, with CRLF line terminators Hash4156c4f3b3e8eb75b3f0ffc31b9b3c48 d2e2362789756890af0cd16178e7dc00b66a2032 9b1778227a7dc12daa8be9254e2f90de342d38c9c26140ffd85c82de5a1f70cd
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /includes/templates/tevasouthafrica/css/stylesheetUntvb.css HTTP/1.1
Host: www.tevashoessouthafrica.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tevashoessouthafrica.com/
Cookie: zenid=4ukv9l46hm4b1332m123ui8qc6
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 06:44:13 GMT
Server: Apache
Last-Modified: Mon, 24 May 2021 16:24:32 GMT
Accept-Ranges: bytes
Content-Length: 2370
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
|
|
| www.tevashoessouthafrica.com/includes/templates/tevasouthafrica/css/stylesheetaG4Ph.css | 196.240.121.126 | 200 OK | 4.1 kB |
URL GET HTTP/1.1www.tevashoessouthafrica.com/includes/templates/tevasouthafrica/css/stylesheetaG4Ph.css IP196.240.121.126:443 ASN#41564 Orion Network Limited
Requested byhttps://www.tevashoessouthafrica.com/ CertificateIssuerLet's Encrypt Subjectcpcalendars.tevashoessouthafrica.com Fingerprint4E:B5:21:6C:C2:3A:F1:AF:CA:2F:A9:75:2E:1A:F7:9E:04:5E:E0:CC ValidityFri, 12 Apr 2024 02:18:27 GMT - Thu, 11 Jul 2024 02:18:26 GMT
File typeASCII text, with CRLF line terminators Hashcfef0068cc4115a37461aa5ef3af84d1 2e64b20408cb8c5467606fd7ae14a1aa326808d0 7bbdebed52b56baddd40ccc7a597d0d6188c0562b792c9bd362fd497b822b587
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /includes/templates/tevasouthafrica/css/stylesheetaG4Ph.css HTTP/1.1
Host: www.tevashoessouthafrica.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tevashoessouthafrica.com/
Cookie: zenid=4ukv9l46hm4b1332m123ui8qc6
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 06:44:13 GMT
Server: Apache
Last-Modified: Mon, 24 May 2021 16:24:32 GMT
Accept-Ranges: bytes
Content-Length: 4097
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/css
|
|
| www.tevashoessouthafrica.com/includes/templates/tevasouthafrica/css/stylesheetbKiCw.css | 196.240.121.126 | 200 OK | 3.8 kB |
URL GET HTTP/1.1www.tevashoessouthafrica.com/includes/templates/tevasouthafrica/css/stylesheetbKiCw.css IP196.240.121.126:443 ASN#41564 Orion Network Limited
Requested byhttps://www.tevashoessouthafrica.com/ CertificateIssuerLet's Encrypt Subjectcpcalendars.tevashoessouthafrica.com Fingerprint4E:B5:21:6C:C2:3A:F1:AF:CA:2F:A9:75:2E:1A:F7:9E:04:5E:E0:CC ValidityFri, 12 Apr 2024 02:18:27 GMT - Thu, 11 Jul 2024 02:18:26 GMT
File typeASCII text, with CRLF line terminators Hash21675ad5187739cdfccd32f25148e5bd 9c90cbea39eec254070051d025d7e37b954c8536 b940b235942c4d9cbcae49a3f47de09d90205c71365f37e97b0d32f6df3a6f5c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /includes/templates/tevasouthafrica/css/stylesheetbKiCw.css HTTP/1.1
Host: www.tevashoessouthafrica.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tevashoessouthafrica.com/
Cookie: zenid=4ukv9l46hm4b1332m123ui8qc6
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 06:44:13 GMT
Server: Apache
Last-Modified: Mon, 24 May 2021 16:24:32 GMT
Accept-Ranges: bytes
Content-Length: 3842
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
|
|
| www.tevashoessouthafrica.com/includes/templates/tevasouthafrica/css/stylesheetbsB8o.css | 196.240.121.126 | 200 OK | 178 B |
URL GET HTTP/1.1www.tevashoessouthafrica.com/includes/templates/tevasouthafrica/css/stylesheetbsB8o.css IP196.240.121.126:443 ASN#41564 Orion Network Limited
Requested byhttps://www.tevashoessouthafrica.com/ CertificateIssuerLet's Encrypt Subjectcpcalendars.tevashoessouthafrica.com Fingerprint4E:B5:21:6C:C2:3A:F1:AF:CA:2F:A9:75:2E:1A:F7:9E:04:5E:E0:CC ValidityFri, 12 Apr 2024 02:18:27 GMT - Thu, 11 Jul 2024 02:18:26 GMT
Hash3d372a1cb4a5c596147ea4123ced27d7 c77116d60116e0cbad041002a2afb14420be6d68 b356396cc5563c1983f4297821b0e8bddacc94ae2bc45ecc0dcda90cbf9e91c3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /includes/templates/tevasouthafrica/css/stylesheetbsB8o.css HTTP/1.1
Host: www.tevashoessouthafrica.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tevashoessouthafrica.com/
Cookie: zenid=4ukv9l46hm4b1332m123ui8qc6
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 06:44:13 GMT
Server: Apache
Last-Modified: Mon, 24 May 2021 16:24:32 GMT
Accept-Ranges: bytes
Content-Length: 178
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
|
|
| www.tevashoessouthafrica.com/includes/templates/tevasouthafrica/css/stylesheetDx86e.css | 196.240.121.126 | 200 OK | 16 kB |
URL GET HTTP/1.1www.tevashoessouthafrica.com/includes/templates/tevasouthafrica/css/stylesheetDx86e.css IP196.240.121.126:443 ASN#41564 Orion Network Limited
Requested byhttps://www.tevashoessouthafrica.com/ CertificateIssuerLet's Encrypt Subjectcpcalendars.tevashoessouthafrica.com Fingerprint4E:B5:21:6C:C2:3A:F1:AF:CA:2F:A9:75:2E:1A:F7:9E:04:5E:E0:CC ValidityFri, 12 Apr 2024 02:18:27 GMT - Thu, 11 Jul 2024 02:18:26 GMT
File typeASCII text, with very long lines (876), with CRLF line terminators Hash8b5c291be11279e2e47402dbafa14e54 e39dbe1a45bd922c9facbebc82d894ddf097bb19 4dc8312455ebd5eebe1f323559e0bbdad080bd1aa2dee604a483fcc7ce776950
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /includes/templates/tevasouthafrica/css/stylesheetDx86e.css HTTP/1.1
Host: www.tevashoessouthafrica.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tevashoessouthafrica.com/
Cookie: zenid=4ukv9l46hm4b1332m123ui8qc6
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 06:44:13 GMT
Server: Apache
Last-Modified: Mon, 24 May 2021 16:24:32 GMT
Accept-Ranges: bytes
Content-Length: 16221
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
|
|
| www.tevashoessouthafrica.com/includes/templates/tevasouthafrica/jscript/jscript_jquery_kinSlideshow.js | 196.240.121.126 | 200 OK | 9.7 kB |
URL GET HTTP/1.1www.tevashoessouthafrica.com/includes/templates/tevasouthafrica/jscript/jscript_jquery_kinSlideshow.js IP196.240.121.126:443 ASN#41564 Orion Network Limited
Requested byhttps://www.tevashoessouthafrica.com/ CertificateIssuerLet's Encrypt Subjectcpcalendars.tevashoessouthafrica.com Fingerprint4E:B5:21:6C:C2:3A:F1:AF:CA:2F:A9:75:2E:1A:F7:9E:04:5E:E0:CC ValidityFri, 12 Apr 2024 02:18:27 GMT - Thu, 11 Jul 2024 02:18:26 GMT
File typeJavaScript source, ISO-8859 text, with very long lines (8513), with CRLF line terminators Hash08a763acea723e1d88cbce2f1c9b3317 ea20687e4f773bf67907b0edb029ebafbc110fc1 c17caeebb94b90d9aae3dc3142cda848f67e8b9425a6d25e434af74d2978aba4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /includes/templates/tevasouthafrica/jscript/jscript_jquery_kinSlideshow.js HTTP/1.1
Host: www.tevashoessouthafrica.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tevashoessouthafrica.com/
Cookie: zenid=4ukv9l46hm4b1332m123ui8qc6
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 06:44:13 GMT
Server: Apache
Last-Modified: Sun, 21 Nov 2010 06:51:10 GMT
Accept-Ranges: bytes
Content-Length: 9674
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| www.tevashoessouthafrica.com/includes/templates/tevasouthafrica/jscript/jscript_lightbox.js | 196.240.121.126 | 200 OK | 20 kB |
URL GET HTTP/1.1www.tevashoessouthafrica.com/includes/templates/tevasouthafrica/jscript/jscript_lightbox.js IP196.240.121.126:443 ASN#41564 Orion Network Limited
Requested byhttps://www.tevashoessouthafrica.com/ CertificateIssuerLet's Encrypt Subjectcpcalendars.tevashoessouthafrica.com Fingerprint4E:B5:21:6C:C2:3A:F1:AF:CA:2F:A9:75:2E:1A:F7:9E:04:5E:E0:CC ValidityFri, 12 Apr 2024 02:18:27 GMT - Thu, 11 Jul 2024 02:18:26 GMT
File typeJavaScript source, ISO-8859 text, with very long lines (797), with CRLF line terminators Hash3d79a6c53803295ef00c052546d76500 f1481ce4f6f2aaefd7a5b6af19be42c7b1606dcc 93acbf26510bd264764a43d220a984b78270cd37536e0aa6bf8deb1fb28338f8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /includes/templates/tevasouthafrica/jscript/jscript_lightbox.js HTTP/1.1
Host: www.tevashoessouthafrica.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tevashoessouthafrica.com/
Cookie: zenid=4ukv9l46hm4b1332m123ui8qc6
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 06:44:13 GMT
Server: Apache
Last-Modified: Sun, 24 Oct 2010 01:36:54 GMT
Accept-Ranges: bytes
Content-Length: 20417
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| www.tevashoessouthafrica.com/includes/templates/tevasouthafrica/jscript/jscript_2.2.0.min.js | 196.240.121.126 | 200 OK | 143 kB |
URL GET HTTP/1.1www.tevashoessouthafrica.com/includes/templates/tevasouthafrica/jscript/jscript_2.2.0.min.js IP196.240.121.126:443 ASN#41564 Orion Network Limited
Requested byhttps://www.tevashoessouthafrica.com/ CertificateIssuerLet's Encrypt Subjectcpcalendars.tevashoessouthafrica.com Fingerprint4E:B5:21:6C:C2:3A:F1:AF:CA:2F:A9:75:2E:1A:F7:9E:04:5E:E0:CC ValidityFri, 12 Apr 2024 02:18:27 GMT - Thu, 11 Jul 2024 02:18:26 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (522) Size143 kB (142713 bytes) Hash674b896ffae27a70571b1fc5bd65919d 63c8c73c7e5ba15aa940aba8f1c43b6150a9f941 a7c32e459eae73c136b6eb07711a69b2cc7b557c085fc232dd42db7fb50e9374
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /includes/templates/tevasouthafrica/jscript/jscript_2.2.0.min.js HTTP/1.1
Host: www.tevashoessouthafrica.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tevashoessouthafrica.com/
Cookie: zenid=4ukv9l46hm4b1332m123ui8qc6
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 06:44:13 GMT
Server: Apache
Last-Modified: Fri, 24 Jul 2020 15:30:22 GMT
Accept-Ranges: bytes
Content-Length: 142713
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| www.tevashoessouthafrica.com/facebox/css/font-awesome.min.css | 196.240.121.126 | 200 OK | 32 kB |
URL GET HTTP/1.1www.tevashoessouthafrica.com/facebox/css/font-awesome.min.css IP196.240.121.126:443 ASN#41564 Orion Network Limited
Requested byhttps://www.tevashoessouthafrica.com/ CertificateIssuerLet's Encrypt Subjectcpcalendars.tevashoessouthafrica.com Fingerprint4E:B5:21:6C:C2:3A:F1:AF:CA:2F:A9:75:2E:1A:F7:9E:04:5E:E0:CC ValidityFri, 12 Apr 2024 02:18:27 GMT - Thu, 11 Jul 2024 02:18:26 GMT
File typeASCII text, with very long lines (402) Hash0557ee20cbec5ddc14ba0481a4ae9ca8 b95de7bc2822aebad9564b64fd10ed69c60f611c c6d652d309878c531875964ca66aa28c95a80204df250b89ef04d90be6c4f50d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /facebox/css/font-awesome.min.css HTTP/1.1
Host: www.tevashoessouthafrica.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tevashoessouthafrica.com/
Cookie: zenid=4ukv9l46hm4b1332m123ui8qc6
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 06:44:13 GMT
Server: Apache
Last-Modified: Sun, 10 May 2020 08:08:48 GMT
Accept-Ranges: bytes
Content-Length: 31725
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
|
|
| www.tevashoessouthafrica.com/includes/templates/tevasouthafrica/css/stylesheetPjaeb.css | 196.240.121.126 | 200 OK | 101 kB |
URL GET HTTP/1.1www.tevashoessouthafrica.com/includes/templates/tevasouthafrica/css/stylesheetPjaeb.css IP196.240.121.126:443 ASN#41564 Orion Network Limited
Requested byhttps://www.tevashoessouthafrica.com/ CertificateIssuerLet's Encrypt Subjectcpcalendars.tevashoessouthafrica.com Fingerprint4E:B5:21:6C:C2:3A:F1:AF:CA:2F:A9:75:2E:1A:F7:9E:04:5E:E0:CC ValidityFri, 12 Apr 2024 02:18:27 GMT - Thu, 11 Jul 2024 02:18:26 GMT
File typeASCII text, with CRLF line terminators Size101 kB (101165 bytes) Hash3592d0507a351928b4ee974958a8c106 924d05bb30b794dc83f2aba94743f96eefa54947 d97e4e16438791b5f3e269d918fe8099290cac8b6bb80202021b9dde2361af80
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /includes/templates/tevasouthafrica/css/stylesheetPjaeb.css HTTP/1.1
Host: www.tevashoessouthafrica.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tevashoessouthafrica.com/
Cookie: zenid=4ukv9l46hm4b1332m123ui8qc6
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 06:44:13 GMT
Server: Apache
Last-Modified: Mon, 24 May 2021 16:24:32 GMT
Accept-Ranges: bytes
Content-Length: 101165
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
|
|
| www.tevashoessouthafrica.com/js/jquery-1.7.2.min.js | 196.240.121.126 | 200 OK | 158 kB |
URL GET HTTP/1.1www.tevashoessouthafrica.com/js/jquery-1.7.2.min.js IP196.240.121.126:443 ASN#41564 Orion Network Limited
Requested byhttps://www.tevashoessouthafrica.com/ CertificateIssuerLet's Encrypt Subjectcpcalendars.tevashoessouthafrica.com Fingerprint4E:B5:21:6C:C2:3A:F1:AF:CA:2F:A9:75:2E:1A:F7:9E:04:5E:E0:CC ValidityFri, 12 Apr 2024 02:18:27 GMT - Thu, 11 Jul 2024 02:18:26 GMT
File typeJavaScript source, ASCII text, with very long lines (749) Size158 kB (157648 bytes) Hash6f3d61313966fcd43b0334aa5fad66b9 22b2b120da5b405a348e4abdd865c496625d87ab f2374ffefd903e49bfa1772a042c1b593e52cd862e6553f538128ab4a58fe5b5
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/jquery-1.7.2.min.js HTTP/1.1
Host: www.tevashoessouthafrica.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tevashoessouthafrica.com/
Cookie: zenid=4ukv9l46hm4b1332m123ui8qc6
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 06:44:13 GMT
Server: Apache
Last-Modified: Thu, 07 May 2020 14:22:20 GMT
Accept-Ranges: bytes
Content-Length: 157648
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| www.tevashoessouthafrica.com/includes/templates/tevasouthafrica/jscript/jscript_jquery.js | 196.240.121.126 | 200 OK | 86 kB |
URL GET HTTP/1.1www.tevashoessouthafrica.com/includes/templates/tevasouthafrica/jscript/jscript_jquery.js IP196.240.121.126:443 ASN#41564 Orion Network Limited
Requested byhttps://www.tevashoessouthafrica.com/ CertificateIssuerLet's Encrypt Subjectcpcalendars.tevashoessouthafrica.com Fingerprint4E:B5:21:6C:C2:3A:F1:AF:CA:2F:A9:75:2E:1A:F7:9E:04:5E:E0:CC ValidityFri, 12 Apr 2024 02:18:27 GMT - Thu, 11 Jul 2024 02:18:26 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65168) Hashe85aed5c30d734f1e30646e030d7a817 b8dcaa1c866905c0bdb0b70c8e564ff1c3fe27ad 8f0a19ee8c606b35a10904951e0a27da1896eafe33c6e88cb7bcbe455f05a24a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /includes/templates/tevasouthafrica/jscript/jscript_jquery.js HTTP/1.1
Host: www.tevashoessouthafrica.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tevashoessouthafrica.com/
Cookie: zenid=4ukv9l46hm4b1332m123ui8qc6
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 06:44:13 GMT
Server: Apache
Last-Modified: Fri, 01 Apr 2011 13:28:42 GMT
Accept-Ranges: bytes
Content-Length: 85925
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| www.tevashoessouthafrica.com/includes/templates/tevasouthafrica/jscript/jscript_1.11.1.min.js | 196.240.121.126 | 200 OK | 86 kB |
URL GET HTTP/1.1www.tevashoessouthafrica.com/includes/templates/tevasouthafrica/jscript/jscript_1.11.1.min.js IP196.240.121.126:443 ASN#41564 Orion Network Limited
Requested byhttps://www.tevashoessouthafrica.com/ CertificateIssuerLet's Encrypt Subjectcpcalendars.tevashoessouthafrica.com Fingerprint4E:B5:21:6C:C2:3A:F1:AF:CA:2F:A9:75:2E:1A:F7:9E:04:5E:E0:CC ValidityFri, 12 Apr 2024 02:18:27 GMT - Thu, 11 Jul 2024 02:18:26 GMT
File typeJavaScript source, ASCII text, with very long lines (32069) Hash93c4b563622d278b1065690a3d93709e f00d128cf399f17322b1d4ee02fa8cd892e081bd 601c06474a16936670a0477da2a777ccfca3301e3857204ec9b55dfa2c45287e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /includes/templates/tevasouthafrica/jscript/jscript_1.11.1.min.js HTTP/1.1
Host: www.tevashoessouthafrica.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tevashoessouthafrica.com/
Cookie: zenid=4ukv9l46hm4b1332m123ui8qc6
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 06:44:13 GMT
Server: Apache
Last-Modified: Tue, 28 Jul 2020 21:10:10 GMT
Accept-Ranges: bytes
Content-Length: 85588
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| www.tevashoessouthafrica.com/js/jquery.mmenu.min.all.js | 196.240.121.126 | 200 OK | 39 kB |
URL GET HTTP/1.1www.tevashoessouthafrica.com/js/jquery.mmenu.min.all.js IP196.240.121.126:443 ASN#41564 Orion Network Limited
Requested byhttps://www.tevashoessouthafrica.com/ CertificateIssuerLet's Encrypt Subjectcpcalendars.tevashoessouthafrica.com Fingerprint4E:B5:21:6C:C2:3A:F1:AF:CA:2F:A9:75:2E:1A:F7:9E:04:5E:E0:CC ValidityFri, 12 Apr 2024 02:18:27 GMT - Thu, 11 Jul 2024 02:18:26 GMT
File typeJavaScript source, ASCII text, with very long lines (401) Hash5b2edbe2f95659b625a0b919ebf98286 1c5722696e849953fccdf41e0f0a01e3f37a80da a83065a45e7248c11ae228cab8da5d6bfcfa4791be255e2a78e81dbc456a4637
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/jquery.mmenu.min.all.js HTTP/1.1
Host: www.tevashoessouthafrica.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tevashoessouthafrica.com/
Cookie: zenid=4ukv9l46hm4b1332m123ui8qc6
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 06:44:13 GMT
Server: Apache
Last-Modified: Fri, 08 May 2020 13:51:20 GMT
Accept-Ranges: bytes
Content-Length: 38800
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| www.tevashoessouthafrica.com/js/slick.js | 196.240.121.126 | 200 OK | 89 kB |
URL GET HTTP/1.1www.tevashoessouthafrica.com/js/slick.js IP196.240.121.126:443 ASN#41564 Orion Network Limited
Requested byhttps://www.tevashoessouthafrica.com/ CertificateIssuerLet's Encrypt Subjectcpcalendars.tevashoessouthafrica.com Fingerprint4E:B5:21:6C:C2:3A:F1:AF:CA:2F:A9:75:2E:1A:F7:9E:04:5E:E0:CC ValidityFri, 12 Apr 2024 02:18:27 GMT - Thu, 11 Jul 2024 02:18:26 GMT
File typeJavaScript source, ASCII text Hash493a1d269b62f30405ad038906f655b8 834c0f32e56f702a155d1cf93f8f9f1705280332 d3d8e6eaf0d3e8496d8a84910412e581c2a44992055e923762fa65e4e3e1ae07
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/slick.js HTTP/1.1
Host: www.tevashoessouthafrica.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tevashoessouthafrica.com/
Cookie: zenid=4ukv9l46hm4b1332m123ui8qc6
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 06:44:13 GMT
Server: Apache
Last-Modified: Thu, 30 Jul 2020 15:40:50 GMT
Accept-Ranges: bytes
Content-Length: 89008
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| www.tevashoessouthafrica.com/includes/templates/tevasouthafrica/jscript/jscript_slick.js | 196.240.121.126 | 200 OK | 89 kB |
URL GET HTTP/1.1www.tevashoessouthafrica.com/includes/templates/tevasouthafrica/jscript/jscript_slick.js IP196.240.121.126:443 ASN#41564 Orion Network Limited
Requested byhttps://www.tevashoessouthafrica.com/ CertificateIssuerLet's Encrypt Subjectcpcalendars.tevashoessouthafrica.com Fingerprint4E:B5:21:6C:C2:3A:F1:AF:CA:2F:A9:75:2E:1A:F7:9E:04:5E:E0:CC ValidityFri, 12 Apr 2024 02:18:27 GMT - Thu, 11 Jul 2024 02:18:26 GMT
File typeJavaScript source, ASCII text Hash5f8f4aed010e1afe499184d8197309f9 097f6a1b4f115e9b6ebefa70d76d830733bcc9ba 0aaa4cf927b0e3631cffbe62f6786810aa65348483cd950e49f634a0881b16b4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /includes/templates/tevasouthafrica/jscript/jscript_slick.js HTTP/1.1
Host: www.tevashoessouthafrica.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tevashoessouthafrica.com/
Cookie: zenid=4ukv9l46hm4b1332m123ui8qc6
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 06:44:13 GMT
Server: Apache
Last-Modified: Tue, 03 Oct 2017 23:49:30 GMT
Accept-Ranges: bytes
Content-Length: 88955
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| www.tevashoessouthafrica.com/js/jquery.jxa.js | 196.240.121.126 | 200 OK | 2.7 kB |
URL GET HTTP/1.1www.tevashoessouthafrica.com/js/jquery.jxa.js IP196.240.121.126:443 ASN#41564 Orion Network Limited
Requested byhttps://www.tevashoessouthafrica.com/ CertificateIssuerLet's Encrypt Subjectcpcalendars.tevashoessouthafrica.com Fingerprint4E:B5:21:6C:C2:3A:F1:AF:CA:2F:A9:75:2E:1A:F7:9E:04:5E:E0:CC ValidityFri, 12 Apr 2024 02:18:27 GMT - Thu, 11 Jul 2024 02:18:26 GMT
File typeJavaScript source, ASCII text, with CRLF line terminators Hashca643ec9e974f881e4c904db35bc40c7 759df5ef14b4e2c0c46770b5e408f600972294ca a1e3d7d98e8e9886c1181e7d53ddd4a6ff424a0fff640d1dc4b06757f096e0e2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/jquery.jxa.js HTTP/1.1
Host: www.tevashoessouthafrica.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tevashoessouthafrica.com/
Cookie: zenid=4ukv9l46hm4b1332m123ui8qc6
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 06:44:13 GMT
Server: Apache
Last-Modified: Wed, 29 Apr 2020 11:46:06 GMT
Accept-Ranges: bytes
Content-Length: 2658
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| www.tevashoessouthafrica.com/includes/templates/tevasouthafrica/css/print_stylesheetpiGX9.css | 196.240.121.126 | 200 OK | 773 B |
URL GET HTTP/1.1www.tevashoessouthafrica.com/includes/templates/tevasouthafrica/css/print_stylesheetpiGX9.css IP196.240.121.126:443 ASN#41564 Orion Network Limited
Requested byhttps://www.tevashoessouthafrica.com/ CertificateIssuerLet's Encrypt Subjectcpcalendars.tevashoessouthafrica.com Fingerprint4E:B5:21:6C:C2:3A:F1:AF:CA:2F:A9:75:2E:1A:F7:9E:04:5E:E0:CC ValidityFri, 12 Apr 2024 02:18:27 GMT - Thu, 11 Jul 2024 02:18:26 GMT
Hashbbd38cb1b3b2298d98121752e951e872 f18e1df8b85734180dbe990473e12b9854913ed1 5ec0e5addd6014a7f05030ad5de266ee15d8d5192ea2efcaccafc3e235a0bd29
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /includes/templates/tevasouthafrica/css/print_stylesheetpiGX9.css HTTP/1.1
Host: www.tevashoessouthafrica.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tevashoessouthafrica.com/
Cookie: zenid=4ukv9l46hm4b1332m123ui8qc6
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 06:44:13 GMT
Server: Apache
Last-Modified: Thu, 10 Apr 2014 01:36:02 GMT
Accept-Ranges: bytes
Content-Length: 773
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
|
|
| www.tevashoessouthafrica.com/includes/templates/tevasouthafrica/images/logo.png | 196.240.121.126 | 200 OK | 4.9 kB |
URL GET HTTP/1.1www.tevashoessouthafrica.com/includes/templates/tevasouthafrica/images/logo.png IP196.240.121.126:443 ASN#41564 Orion Network Limited
Requested byhttps://www.tevashoessouthafrica.com/ CertificateIssuerLet's Encrypt Subjectcpcalendars.tevashoessouthafrica.com Fingerprint4E:B5:21:6C:C2:3A:F1:AF:CA:2F:A9:75:2E:1A:F7:9E:04:5E:E0:CC ValidityFri, 12 Apr 2024 02:18:27 GMT - Thu, 11 Jul 2024 02:18:26 GMT
File typePNG image data, 289 x 89, 8-bit/color RGBA, non-interlaced Hash6da362995ef073b20029acc1c6a4f656 46cd11c73957081502193d27569dfd7bf141d14e d42e87c8654da71d9f7342b8e1543110dc13f10b7d22ec3d6d69a612a2714cb5
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /includes/templates/tevasouthafrica/images/logo.png HTTP/1.1
Host: www.tevashoessouthafrica.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tevashoessouthafrica.com/
Cookie: zenid=4ukv9l46hm4b1332m123ui8qc6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 06:44:13 GMT
Server: Apache
Last-Modified: Fri, 07 May 2021 16:11:40 GMT
Accept-Ranges: bytes
Content-Length: 4911
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/png
|
|
| www.tevashoessouthafrica.com/includes/templates/tevasouthafrica/images/shopping.png | 196.240.121.126 | 200 OK | 725 B |
URL GET HTTP/1.1www.tevashoessouthafrica.com/includes/templates/tevasouthafrica/images/shopping.png IP196.240.121.126:443 ASN#41564 Orion Network Limited
Requested byhttps://www.tevashoessouthafrica.com/ CertificateIssuerLet's Encrypt Subjectcpcalendars.tevashoessouthafrica.com Fingerprint4E:B5:21:6C:C2:3A:F1:AF:CA:2F:A9:75:2E:1A:F7:9E:04:5E:E0:CC ValidityFri, 12 Apr 2024 02:18:27 GMT - Thu, 11 Jul 2024 02:18:26 GMT
File typePNG image data, 41 x 55, 8-bit/color RGBA, non-interlaced Hash1f2760b3751642fe0d744bb38579e879 ed3877e83e52309356150358ae9ccd5947a81eea e4009b9300825ca52d930e8b65b49b66c8edc6b6b9297a9a30eec74c2ab4bc70
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /includes/templates/tevasouthafrica/images/shopping.png HTTP/1.1
Host: www.tevashoessouthafrica.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tevashoessouthafrica.com/
Cookie: zenid=4ukv9l46hm4b1332m123ui8qc6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 06:44:13 GMT
Server: Apache
Last-Modified: Fri, 07 May 2021 15:53:18 GMT
Accept-Ranges: bytes
Content-Length: 725
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png
|
|
| www.tevashoessouthafrica.com/js/jquery.jxb.js | 196.240.121.126 | 200 OK | 158 kB |
URL GET HTTP/1.1www.tevashoessouthafrica.com/js/jquery.jxb.js IP196.240.121.126:443 ASN#41564 Orion Network Limited
Requested byhttps://www.tevashoessouthafrica.com/ CertificateIssuerLet's Encrypt Subjectcpcalendars.tevashoessouthafrica.com Fingerprint4E:B5:21:6C:C2:3A:F1:AF:CA:2F:A9:75:2E:1A:F7:9E:04:5E:E0:CC ValidityFri, 12 Apr 2024 02:18:27 GMT - Thu, 11 Jul 2024 02:18:26 GMT
File typeJavaScript source, ASCII text, with very long lines (749) Size158 kB (157648 bytes) Hash6f3d61313966fcd43b0334aa5fad66b9 22b2b120da5b405a348e4abdd865c496625d87ab f2374ffefd903e49bfa1772a042c1b593e52cd862e6553f538128ab4a58fe5b5
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/jquery.jxb.js HTTP/1.1
Host: www.tevashoessouthafrica.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tevashoessouthafrica.com/
Cookie: zenid=4ukv9l46hm4b1332m123ui8qc6
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 06:44:13 GMT
Server: Apache
Last-Modified: Fri, 05 May 2017 16:03:44 GMT
Accept-Ranges: bytes
Content-Length: 157648
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| www.tevashoessouthafrica.com/images/cate_img_11.png | 196.240.121.126 | 200 OK | 273 kB |
URL GET HTTP/1.1www.tevashoessouthafrica.com/images/cate_img_11.png IP196.240.121.126:443 ASN#41564 Orion Network Limited
Requested byhttps://www.tevashoessouthafrica.com/ CertificateIssuerLet's Encrypt Subjectcpcalendars.tevashoessouthafrica.com Fingerprint4E:B5:21:6C:C2:3A:F1:AF:CA:2F:A9:75:2E:1A:F7:9E:04:5E:E0:CC ValidityFri, 12 Apr 2024 02:18:27 GMT - Thu, 11 Jul 2024 02:18:26 GMT
File typePNG image data, 620 x 310, 8-bit/color RGB, non-interlaced Size273 kB (272595 bytes) Hash02d06fe3a3ca43a87b7f72f6bdac6254 baa0d75f2c2daf606c190047784082b071002536 c0b881f69e807ebeae56704d3bd8d0643b8d1ac821892c874a58a619d19eae10
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/cate_img_11.png HTTP/1.1
Host: www.tevashoessouthafrica.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tevashoessouthafrica.com/
Cookie: zenid=4ukv9l46hm4b1332m123ui8qc6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 06:44:13 GMT
Server: Apache
Last-Modified: Sat, 08 May 2021 11:49:40 GMT
Accept-Ranges: bytes
Content-Length: 272595
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: image/png
|
|
| www.tevashoessouthafrica.com/includes/templates/tevasouthafrica/images/small_delete.png | 196.240.121.126 | 200 OK | 210 B |
URL GET HTTP/1.1www.tevashoessouthafrica.com/includes/templates/tevasouthafrica/images/small_delete.png IP196.240.121.126:443 ASN#41564 Orion Network Limited
Requested byhttps://www.tevashoessouthafrica.com/ CertificateIssuerLet's Encrypt Subjectcpcalendars.tevashoessouthafrica.com Fingerprint4E:B5:21:6C:C2:3A:F1:AF:CA:2F:A9:75:2E:1A:F7:9E:04:5E:E0:CC ValidityFri, 12 Apr 2024 02:18:27 GMT - Thu, 11 Jul 2024 02:18:26 GMT
File typePNG image data, 25 x 25, 8-bit/color RGBA, non-interlaced Hash237085bb6f72cf692a72d3b8494ef593 3d811a076406fd116910160d793607257843892a e603c4d596de5cb8ba469a3600c08aa950e99c8cdf649d0efb3c9d0428964133
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /includes/templates/tevasouthafrica/images/small_delete.png HTTP/1.1
Host: www.tevashoessouthafrica.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tevashoessouthafrica.com/
Cookie: zenid=4ukv9l46hm4b1332m123ui8qc6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 06:44:13 GMT
Server: Apache
Last-Modified: Sun, 18 Apr 2021 17:49:46 GMT
Accept-Ranges: bytes
Content-Length: 210
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png
|
|
| www.tevashoessouthafrica.com/includes/templates/tevasouthafrica/images/search.png | 196.240.121.126 | 200 OK | 664 B |
URL GET HTTP/1.1www.tevashoessouthafrica.com/includes/templates/tevasouthafrica/images/search.png IP196.240.121.126:443 ASN#41564 Orion Network Limited
Requested byhttps://www.tevashoessouthafrica.com/ CertificateIssuerLet's Encrypt Subjectcpcalendars.tevashoessouthafrica.com Fingerprint4E:B5:21:6C:C2:3A:F1:AF:CA:2F:A9:75:2E:1A:F7:9E:04:5E:E0:CC ValidityFri, 12 Apr 2024 02:18:27 GMT - Thu, 11 Jul 2024 02:18:26 GMT
File typePNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced Hasha173ed879e9758c8613840d7f0a07ecd 6ec1ef5cc41cb9e941c8d01731cb4ce494a6c9a5 347b0b81b02367befeaa15ac95956531ad72f140ce16d771e3fde277bd25e70f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /includes/templates/tevasouthafrica/images/search.png HTTP/1.1
Host: www.tevashoessouthafrica.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tevashoessouthafrica.com/
Cookie: zenid=4ukv9l46hm4b1332m123ui8qc6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 06:44:13 GMT
Server: Apache
Last-Modified: Fri, 07 May 2021 16:09:12 GMT
Accept-Ranges: bytes
Content-Length: 664
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/png
|
|
| www.tevashoessouthafrica.com/images/cate_img_17.png | 196.240.121.126 | 200 OK | 240 kB |
URL GET HTTP/1.1www.tevashoessouthafrica.com/images/cate_img_17.png IP196.240.121.126:443 ASN#41564 Orion Network Limited
Requested byhttps://www.tevashoessouthafrica.com/ CertificateIssuerLet's Encrypt Subjectcpcalendars.tevashoessouthafrica.com Fingerprint4E:B5:21:6C:C2:3A:F1:AF:CA:2F:A9:75:2E:1A:F7:9E:04:5E:E0:CC ValidityFri, 12 Apr 2024 02:18:27 GMT - Thu, 11 Jul 2024 02:18:26 GMT
File typePNG image data, 620 x 310, 8-bit/color RGB, non-interlaced Size240 kB (240411 bytes) Hashf7c015ccc1eec8075cf65d83d9304728 c8434b67b4c6ab65326b34270126af1300d697f8 2561f62f4199c187f8272a2ebcb62800832ef306a4081d7cac9b041a74d4377e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/cate_img_17.png HTTP/1.1
Host: www.tevashoessouthafrica.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tevashoessouthafrica.com/
Cookie: zenid=4ukv9l46hm4b1332m123ui8qc6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 06:44:13 GMT
Server: Apache
Last-Modified: Sat, 08 May 2021 11:48:00 GMT
Accept-Ranges: bytes
Content-Length: 240411
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/png
|
|
| www.tevashoessouthafrica.com/includes/templates/tevasouthafrica/images/banner-mobile.jpg | 196.240.121.126 | 200 OK | 19 kB |
URL GET HTTP/1.1www.tevashoessouthafrica.com/includes/templates/tevasouthafrica/images/banner-mobile.jpg IP196.240.121.126:443 ASN#41564 Orion Network Limited
Requested byhttps://www.tevashoessouthafrica.com/ CertificateIssuerLet's Encrypt Subjectcpcalendars.tevashoessouthafrica.com Fingerprint4E:B5:21:6C:C2:3A:F1:AF:CA:2F:A9:75:2E:1A:F7:9E:04:5E:E0:CC ValidityFri, 12 Apr 2024 02:18:27 GMT - Thu, 11 Jul 2024 02:18:26 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=0], baseline, precision 8, 1000x1124, components 3 Hashf21a29cd39df9bc3a7d69b66296dfaa8 7ee3d67bc89e6f1fbc9fbe3545410264c7f78eb8 396145475db092aaa0b8d644d660f239094acab5e2a60fd2efb89d5f392a3e72
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /includes/templates/tevasouthafrica/images/banner-mobile.jpg HTTP/1.1
Host: www.tevashoessouthafrica.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tevashoessouthafrica.com/
Cookie: zenid=4ukv9l46hm4b1332m123ui8qc6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 06:44:13 GMT
Server: Apache
Last-Modified: Wed, 19 May 2021 15:51:44 GMT
Accept-Ranges: bytes
Content-Length: 18562
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: image/jpeg
|
|
| www.tevashoessouthafrica.com/includes/templates/tevasouthafrica/images/banner.jpg | 196.240.121.126 | 200 OK | 426 kB |
URL GET HTTP/1.1www.tevashoessouthafrica.com/includes/templates/tevasouthafrica/images/banner.jpg IP196.240.121.126:443 ASN#41564 Orion Network Limited
Requested byhttps://www.tevashoessouthafrica.com/ CertificateIssuerLet's Encrypt Subjectcpcalendars.tevashoessouthafrica.com Fingerprint4E:B5:21:6C:C2:3A:F1:AF:CA:2F:A9:75:2E:1A:F7:9E:04:5E:E0:CC ValidityFri, 12 Apr 2024 02:18:27 GMT - Thu, 11 Jul 2024 02:18:26 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=3], baseline, precision 8, 1200x900, components 3 Size426 kB (425819 bytes) Hash4344ed086f8411f2930b222fb6c29b93 ea77a69435c749af2b468c0a0911bef9e89c520b 33f0edf03110c253fc17777e967464ba1189cf85f06ad9aa8b569a0e7880c197
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /includes/templates/tevasouthafrica/images/banner.jpg HTTP/1.1
Host: www.tevashoessouthafrica.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tevashoessouthafrica.com/
Cookie: zenid=4ukv9l46hm4b1332m123ui8qc6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 06:44:13 GMT
Server: Apache
Last-Modified: Mon, 24 May 2021 16:07:12 GMT
Accept-Ranges: bytes
Content-Length: 425819
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/jpeg
|
|
| www.tevashoessouthafrica.com/includes/templates/tevasouthafrica/images/flag/ZAR.gif | 196.240.121.126 | 200 OK | 1.1 kB |
URL GET HTTP/1.1www.tevashoessouthafrica.com/includes/templates/tevasouthafrica/images/flag/ZAR.gif IP196.240.121.126:443 ASN#41564 Orion Network Limited
Requested byhttps://www.tevashoessouthafrica.com/ CertificateIssuerLet's Encrypt Subjectcpcalendars.tevashoessouthafrica.com Fingerprint4E:B5:21:6C:C2:3A:F1:AF:CA:2F:A9:75:2E:1A:F7:9E:04:5E:E0:CC ValidityFri, 12 Apr 2024 02:18:27 GMT - Thu, 11 Jul 2024 02:18:26 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 25x17, components 3 Hash218c09392e0f0dde9522ef22c8e1d13b 56b4da299c90b3f0462be457b860f0612fe87560 fba9d0a14a76cdf99fa06e6688cf5fb16840aab3c121c5f98c02a4e50d4b34f1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /includes/templates/tevasouthafrica/images/flag/ZAR.gif HTTP/1.1
Host: www.tevashoessouthafrica.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tevashoessouthafrica.com/
Cookie: zenid=4ukv9l46hm4b1332m123ui8qc6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 06:44:13 GMT
Server: Apache
Last-Modified: Wed, 31 Mar 2021 16:08:06 GMT
Accept-Ranges: bytes
Content-Length: 1061
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: image/gif
|
|
| www.tevashoessouthafrica.com/images/cate_img_2.png | 196.240.121.126 | 200 OK | 244 kB |
URL GET HTTP/1.1www.tevashoessouthafrica.com/images/cate_img_2.png IP196.240.121.126:443 ASN#41564 Orion Network Limited
Requested byhttps://www.tevashoessouthafrica.com/ CertificateIssuerLet's Encrypt Subjectcpcalendars.tevashoessouthafrica.com Fingerprint4E:B5:21:6C:C2:3A:F1:AF:CA:2F:A9:75:2E:1A:F7:9E:04:5E:E0:CC ValidityFri, 12 Apr 2024 02:18:27 GMT - Thu, 11 Jul 2024 02:18:26 GMT
File typePNG image data, 620 x 310, 8-bit/color RGB, non-interlaced Size244 kB (243695 bytes) Hashc97f13a010427674c5dd63d3088a68ec 6715c6220ff19b91289437571edb6cddccb26808 4a6029609fd1efc95904f8fcbfe3f71cf55d657a65fc2ee06156a04f51b3f51a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/cate_img_2.png HTTP/1.1
Host: www.tevashoessouthafrica.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tevashoessouthafrica.com/
Cookie: zenid=4ukv9l46hm4b1332m123ui8qc6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 06:44:13 GMT
Server: Apache
Last-Modified: Fri, 07 May 2021 07:16:12 GMT
Accept-Ranges: bytes
Content-Length: 243695
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png
|
|
| www.tevashoessouthafrica.com/includes/templates/tevasouthafrica/images/banner-mobile-2.jpg | 196.240.121.126 | 200 OK | 10 kB |
URL GET HTTP/1.1www.tevashoessouthafrica.com/includes/templates/tevasouthafrica/images/banner-mobile-2.jpg IP196.240.121.126:443 ASN#41564 Orion Network Limited
Requested byhttps://www.tevashoessouthafrica.com/ CertificateIssuerLet's Encrypt Subjectcpcalendars.tevashoessouthafrica.com Fingerprint4E:B5:21:6C:C2:3A:F1:AF:CA:2F:A9:75:2E:1A:F7:9E:04:5E:E0:CC ValidityFri, 12 Apr 2024 02:18:27 GMT - Thu, 11 Jul 2024 02:18:26 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=0], baseline, precision 8, 1000x605, components 3 Hasha69e1c50d452682649ae51f9473b0893 8a619b41b73cb27f6730b7969ed346a9e30485e9 d4b4593976cad6f11a73c0c749f2e25b6a018552ea72d7e3b520743b80e6af2e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /includes/templates/tevasouthafrica/images/banner-mobile-2.jpg HTTP/1.1
Host: www.tevashoessouthafrica.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tevashoessouthafrica.com/
Cookie: zenid=4ukv9l46hm4b1332m123ui8qc6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 06:44:13 GMT
Server: Apache
Last-Modified: Wed, 19 May 2021 15:55:38 GMT
Accept-Ranges: bytes
Content-Length: 10246
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/jpeg
|
|
| www.tevashoessouthafrica.com/facebox/fonts/fontawesome-webfont.woff2?v=4.7.0 | 196.240.121.126 | 200 OK | 77 kB |
URL GET HTTP/1.1www.tevashoessouthafrica.com/facebox/fonts/fontawesome-webfont.woff2?v=4.7.0 IP196.240.121.126:443 ASN#41564 Orion Network Limited
Requested byhttps://www.tevashoessouthafrica.com/ CertificateIssuerLet's Encrypt Subjectcpcalendars.tevashoessouthafrica.com Fingerprint4E:B5:21:6C:C2:3A:F1:AF:CA:2F:A9:75:2E:1A:F7:9E:04:5E:E0:CC ValidityFri, 12 Apr 2024 02:18:27 GMT - Thu, 11 Jul 2024 02:18:26 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 77160, version 4.459 Hashaf7ae505a9eed503f8b8e6982036873e d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c 2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /facebox/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: www.tevashoessouthafrica.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://www.tevashoessouthafrica.com/facebox/css/font-awesome.min.css
Cookie: zenid=4ukv9l46hm4b1332m123ui8qc6
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 06:44:13 GMT
Server: Apache
Last-Modified: Thu, 27 Oct 2016 14:51:44 GMT
Accept-Ranges: bytes
Content-Length: 77160
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: font/woff2
|
|
| www.tevashoessouthafrica.com/includes/templates/tevasouthafrica/images/login.png | 196.240.121.126 | 200 OK | 464 B |
URL GET HTTP/1.1www.tevashoessouthafrica.com/includes/templates/tevasouthafrica/images/login.png IP196.240.121.126:443 ASN#41564 Orion Network Limited
Requested byhttps://www.tevashoessouthafrica.com/ CertificateIssuerLet's Encrypt Subjectcpcalendars.tevashoessouthafrica.com Fingerprint4E:B5:21:6C:C2:3A:F1:AF:CA:2F:A9:75:2E:1A:F7:9E:04:5E:E0:CC ValidityFri, 12 Apr 2024 02:18:27 GMT - Thu, 11 Jul 2024 02:18:26 GMT
File typePNG image data, 28 x 31, 8-bit/color RGB, non-interlaced Hash3480f73d94870f18fb6b3ab59c064e5e d0f5065fb792faf86d85a92611c6c179525c216e 2f1584ac61105711903347dd27f847fee7f022c1f7716dbf0a8027a9aa86a57f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /includes/templates/tevasouthafrica/images/login.png HTTP/1.1
Host: www.tevashoessouthafrica.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tevashoessouthafrica.com/
Cookie: zenid=4ukv9l46hm4b1332m123ui8qc6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 06:44:13 GMT
Server: Apache
Last-Modified: Fri, 07 May 2021 15:43:14 GMT
Accept-Ranges: bytes
Content-Length: 464
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: image/png
|
|
| www.tevashoessouthafrica.com/images/large/tevasouthafrica/Teva%20Hurricane%20XLT2%20Black%20White%20Sand%20124_ZOOM.jpg | 196.240.121.126 | 200 OK | 138 kB |
URL GET HTTP/1.1www.tevashoessouthafrica.com/images/large/tevasouthafrica/Teva%20Hurricane%20XLT2%20Black%20White%20Sand%20124_ZOOM.jpg IP196.240.121.126:443 ASN#41564 Orion Network Limited
Requested byhttps://www.tevashoessouthafrica.com/ CertificateIssuerLet's Encrypt Subjectcpcalendars.tevashoessouthafrica.com Fingerprint4E:B5:21:6C:C2:3A:F1:AF:CA:2F:A9:75:2E:1A:F7:9E:04:5E:E0:CC ValidityFri, 12 Apr 2024 02:18:27 GMT - Thu, 11 Jul 2024 02:18:26 GMT
File typeJPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=509, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=1110], progressive, precision 8, 1110x1110, components 3 Size138 kB (137630 bytes) Hash15512e6d6a370bb115a0c221f074afd3 93b0b8cb05fc10924e7c1b93b32b27a0e5149576 6d110067e4c1bdae74f596bd91d3b1fcbf22d976a632400431648f3b76935fa0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/large/tevasouthafrica/Teva%20Hurricane%20XLT2%20Black%20White%20Sand%20124_ZOOM.jpg HTTP/1.1
Host: www.tevashoessouthafrica.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tevashoessouthafrica.com/
Cookie: zenid=4ukv9l46hm4b1332m123ui8qc6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 06:44:13 GMT
Server: Apache
Last-Modified: Tue, 11 May 2021 17:50:02 GMT
Accept-Ranges: bytes
Content-Length: 137630
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/jpeg
|
|
| www.tevashoessouthafrica.com/images/large/tevasouthafrica/Teva%20Voya%20Slide%20Leather%20Dark%20Olive%20S%20270_ZOOM.jpg | 196.240.121.126 | 200 OK | 116 kB |
URL GET HTTP/1.1www.tevashoessouthafrica.com/images/large/tevasouthafrica/Teva%20Voya%20Slide%20Leather%20Dark%20Olive%20S%20270_ZOOM.jpg IP196.240.121.126:443 ASN#41564 Orion Network Limited
Requested byhttps://www.tevashoessouthafrica.com/ CertificateIssuerLet's Encrypt Subjectcpcalendars.tevashoessouthafrica.com Fingerprint4E:B5:21:6C:C2:3A:F1:AF:CA:2F:A9:75:2E:1A:F7:9E:04:5E:E0:CC ValidityFri, 12 Apr 2024 02:18:27 GMT - Thu, 11 Jul 2024 02:18:26 GMT
File typeJPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=457, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=1110], progressive, precision 8, 1110x1110, components 3 Size116 kB (116125 bytes) Hashbc18f85b0473ba0e33e3c6212027437b 47f882de496d9e9959f64767e71eeca6751a046e 1ec872baffc209c525799142778d2f85cf6acbdb48dc7b9652e228371f12f5d6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/large/tevasouthafrica/Teva%20Voya%20Slide%20Leather%20Dark%20Olive%20S%20270_ZOOM.jpg HTTP/1.1
Host: www.tevashoessouthafrica.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tevashoessouthafrica.com/
Cookie: zenid=4ukv9l46hm4b1332m123ui8qc6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 06:44:13 GMT
Server: Apache
Last-Modified: Tue, 11 May 2021 18:10:56 GMT
Accept-Ranges: bytes
Content-Length: 116125
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/jpeg
|
|
| www.tevashoessouthafrica.com/images/large/tevasouthafrica/Teva%20Terra%20Fi%20Lite%20Dark%20Grey%20Sandals%20277_ZOOM.jpg | 196.240.121.126 | 200 OK | 219 kB |
URL GET HTTP/1.1www.tevashoessouthafrica.com/images/large/tevasouthafrica/Teva%20Terra%20Fi%20Lite%20Dark%20Grey%20Sandals%20277_ZOOM.jpg IP196.240.121.126:443 ASN#41564 Orion Network Limited
Requested byhttps://www.tevashoessouthafrica.com/ CertificateIssuerLet's Encrypt Subjectcpcalendars.tevashoessouthafrica.com Fingerprint4E:B5:21:6C:C2:3A:F1:AF:CA:2F:A9:75:2E:1A:F7:9E:04:5E:E0:CC ValidityFri, 12 Apr 2024 02:18:27 GMT - Thu, 11 Jul 2024 02:18:26 GMT
File typeJPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=556, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=1110], progressive, precision 8, 1110x1110, components 3 Size219 kB (218715 bytes) Hashfd488e1dc20f8d62975dbf7a9872f1c0 0a26b0ecfd7371408ba16d917b3fc97264216d8b 52b12dce1863d9a5f19b52c27bae4bef6524b302e1ac70ad452383c5e6f95210
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/large/tevasouthafrica/Teva%20Terra%20Fi%20Lite%20Dark%20Grey%20Sandals%20277_ZOOM.jpg HTTP/1.1
Host: www.tevashoessouthafrica.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tevashoessouthafrica.com/
Cookie: zenid=4ukv9l46hm4b1332m123ui8qc6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 06:44:13 GMT
Server: Apache
Last-Modified: Tue, 11 May 2021 18:07:14 GMT
Accept-Ranges: bytes
Content-Length: 218715
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/jpeg
|
|
| www.tevashoessouthafrica.com/images/large/tevasouthafrica/Teva%20Hurricane%20Drift%20Black%20Sandals%20W%20141_ZOOM.jpg | 196.240.121.126 | 200 OK | 132 kB |
URL GET HTTP/1.1www.tevashoessouthafrica.com/images/large/tevasouthafrica/Teva%20Hurricane%20Drift%20Black%20Sandals%20W%20141_ZOOM.jpg IP196.240.121.126:443 ASN#41564 Orion Network Limited
Requested byhttps://www.tevashoessouthafrica.com/ CertificateIssuerLet's Encrypt Subjectcpcalendars.tevashoessouthafrica.com Fingerprint4E:B5:21:6C:C2:3A:F1:AF:CA:2F:A9:75:2E:1A:F7:9E:04:5E:E0:CC ValidityFri, 12 Apr 2024 02:18:27 GMT - Thu, 11 Jul 2024 02:18:26 GMT
File typeJPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=483, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=1110], progressive, precision 8, 1110x1110, components 3 Size132 kB (131879 bytes) Hash8b37f4781750faa0976ec998d16e800d 3f5a4c8c69577986dd119d989467d3ce49ebb79a bda17d1c62f45af30392a87317cd16c0c9a6ff20999ba7afbedf64dcd83a6969
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/large/tevasouthafrica/Teva%20Hurricane%20Drift%20Black%20Sandals%20W%20141_ZOOM.jpg HTTP/1.1
Host: www.tevashoessouthafrica.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tevashoessouthafrica.com/
Cookie: zenid=4ukv9l46hm4b1332m123ui8qc6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 06:44:13 GMT
Server: Apache
Last-Modified: Tue, 11 May 2021 18:13:22 GMT
Accept-Ranges: bytes
Content-Length: 131879
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: image/jpeg
|
|
| www.tevashoessouthafrica.com/images/large/tevasouthafrica/Teva%20Gateway%20Low%20Black%20Sneakers%20Wome%2021_ZOOM.jpg | 196.240.121.126 | 200 OK | 112 kB |
URL GET HTTP/1.1www.tevashoessouthafrica.com/images/large/tevasouthafrica/Teva%20Gateway%20Low%20Black%20Sneakers%20Wome%2021_ZOOM.jpg IP196.240.121.126:443 ASN#41564 Orion Network Limited
Requested byhttps://www.tevashoessouthafrica.com/ CertificateIssuerLet's Encrypt Subjectcpcalendars.tevashoessouthafrica.com Fingerprint4E:B5:21:6C:C2:3A:F1:AF:CA:2F:A9:75:2E:1A:F7:9E:04:5E:E0:CC ValidityFri, 12 Apr 2024 02:18:27 GMT - Thu, 11 Jul 2024 02:18:26 GMT
File typeJPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=551, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=1110], progressive, precision 8, 1110x1110, components 3 Size112 kB (111918 bytes) Hash3d2a6116e6e68eaa4032ae8143f3d4d2 1152d0e1eef863783f564268bd5fc62faa0e0204 059ed0fbd268a81a198f1d1551e85aa0dc72734e642d846178d675d2360047e1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/large/tevasouthafrica/Teva%20Gateway%20Low%20Black%20Sneakers%20Wome%2021_ZOOM.jpg HTTP/1.1
Host: www.tevashoessouthafrica.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tevashoessouthafrica.com/
Cookie: zenid=4ukv9l46hm4b1332m123ui8qc6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 06:44:13 GMT
Server: Apache
Last-Modified: Tue, 11 May 2021 17:44:42 GMT
Accept-Ranges: bytes
Content-Length: 111918
Keep-Alive: timeout=5, max=90
Connection: Keep-Alive
Content-Type: image/jpeg
|
|
| www.tevashoessouthafrica.com/images/large/tevasouthafrica/Teva%20Ember%20Moc%20Black%20Slip-On%20Shoes%20W%2024_ZOOM.jpg | 196.240.121.126 | 200 OK | 152 kB |
URL GET HTTP/1.1www.tevashoessouthafrica.com/images/large/tevasouthafrica/Teva%20Ember%20Moc%20Black%20Slip-On%20Shoes%20W%2024_ZOOM.jpg IP196.240.121.126:443 ASN#41564 Orion Network Limited
Requested byhttps://www.tevashoessouthafrica.com/ CertificateIssuerLet's Encrypt Subjectcpcalendars.tevashoessouthafrica.com Fingerprint4E:B5:21:6C:C2:3A:F1:AF:CA:2F:A9:75:2E:1A:F7:9E:04:5E:E0:CC ValidityFri, 12 Apr 2024 02:18:27 GMT - Thu, 11 Jul 2024 02:18:26 GMT
File typeJPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=545, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=1110], progressive, precision 8, 1110x1110, components 3 Size152 kB (151882 bytes) Hash74bfbb1da167ac0957915c9ad7f3c049 072be8715c817aaa088c155db962182784cbb71f 78139ca63e9a8fae19bbce1bd57ece682398471a4b8c875adf9ffb90dc4aa7bd
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/large/tevasouthafrica/Teva%20Ember%20Moc%20Black%20Slip-On%20Shoes%20W%2024_ZOOM.jpg HTTP/1.1
Host: www.tevashoessouthafrica.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tevashoessouthafrica.com/
Cookie: zenid=4ukv9l46hm4b1332m123ui8qc6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 06:44:13 GMT
Server: Apache
Last-Modified: Tue, 11 May 2021 18:09:18 GMT
Accept-Ranges: bytes
Content-Length: 151882
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: image/jpeg
|
|
| www.tevashoessouthafrica.com/images/large/tevasouthafrica/Teva%20Ember%20Commute%20Waterproof%20Grey%20O%20355_ZOOM.jpg | 196.240.121.126 | 200 OK | 307 kB |
URL GET HTTP/1.1www.tevashoessouthafrica.com/images/large/tevasouthafrica/Teva%20Ember%20Commute%20Waterproof%20Grey%20O%20355_ZOOM.jpg IP196.240.121.126:443 ASN#41564 Orion Network Limited
Requested byhttps://www.tevashoessouthafrica.com/ CertificateIssuerLet's Encrypt Subjectcpcalendars.tevashoessouthafrica.com Fingerprint4E:B5:21:6C:C2:3A:F1:AF:CA:2F:A9:75:2E:1A:F7:9E:04:5E:E0:CC ValidityFri, 12 Apr 2024 02:18:27 GMT - Thu, 11 Jul 2024 02:18:26 GMT
File typeJPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=733, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=1110], progressive, precision 8, 1110x1110, components 3 Size307 kB (307060 bytes) Hash5c30e83ec3b3c9bfec42b1f7a213306a c0fbc867066debc84d782ffbe256a9199d56673b a325fa72bbc1b20d30a0efc352c91a69023e132fad9bcdc2593556101c94907d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/large/tevasouthafrica/Teva%20Ember%20Commute%20Waterproof%20Grey%20O%20355_ZOOM.jpg HTTP/1.1
Host: www.tevashoessouthafrica.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tevashoessouthafrica.com/
Cookie: zenid=4ukv9l46hm4b1332m123ui8qc6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 06:44:13 GMT
Server: Apache
Last-Modified: Tue, 11 May 2021 17:53:12 GMT
Accept-Ranges: bytes
Content-Length: 307060
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: image/jpeg
|
|
| www.tevashoessouthafrica.com/images/large/tevasouthafrica/Teva%20Voya%20Infinity%20Black%20Sandals%20Wom%2050_ZOOM.jpg | 196.240.121.126 | 200 OK | 108 kB |
URL GET HTTP/1.1www.tevashoessouthafrica.com/images/large/tevasouthafrica/Teva%20Voya%20Infinity%20Black%20Sandals%20Wom%2050_ZOOM.jpg IP196.240.121.126:443 ASN#41564 Orion Network Limited
Requested byhttps://www.tevashoessouthafrica.com/ CertificateIssuerLet's Encrypt Subjectcpcalendars.tevashoessouthafrica.com Fingerprint4E:B5:21:6C:C2:3A:F1:AF:CA:2F:A9:75:2E:1A:F7:9E:04:5E:E0:CC ValidityFri, 12 Apr 2024 02:18:27 GMT - Thu, 11 Jul 2024 02:18:26 GMT
File typeJPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=465, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=1110], progressive, precision 8, 1110x1110, components 3 Size108 kB (108525 bytes) Hash7ea251ef93e486d3b76f396f87387b2b 760d3cafd7bca8d1f85ca94e8fea9d90cb6b8131 6d1a6463906f1447c54072938702251e509761b1b7e631a830f098e2fd9018f0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/large/tevasouthafrica/Teva%20Voya%20Infinity%20Black%20Sandals%20Wom%2050_ZOOM.jpg HTTP/1.1
Host: www.tevashoessouthafrica.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tevashoessouthafrica.com/
Cookie: zenid=4ukv9l46hm4b1332m123ui8qc6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 06:44:13 GMT
Server: Apache
Last-Modified: Tue, 11 May 2021 18:03:30 GMT
Accept-Ranges: bytes
Content-Length: 108525
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: image/jpeg
|
|
| www.tevashoessouthafrica.com/images/large/tevasouthafrica/Teva%20Verra%20Olive%20Sandals%20Womens%20-%20So%2052_ZOOM.jpg | 196.240.121.126 | 200 OK | 134 kB |
URL GET HTTP/1.1www.tevashoessouthafrica.com/images/large/tevasouthafrica/Teva%20Verra%20Olive%20Sandals%20Womens%20-%20So%2052_ZOOM.jpg IP196.240.121.126:443 ASN#41564 Orion Network Limited
Requested byhttps://www.tevashoessouthafrica.com/ CertificateIssuerLet's Encrypt Subjectcpcalendars.tevashoessouthafrica.com Fingerprint4E:B5:21:6C:C2:3A:F1:AF:CA:2F:A9:75:2E:1A:F7:9E:04:5E:E0:CC ValidityFri, 12 Apr 2024 02:18:27 GMT - Thu, 11 Jul 2024 02:18:26 GMT
File typeJPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=492, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=1110], progressive, precision 8, 1110x1110, components 3 Size134 kB (133702 bytes) Hash995678e828bfc8b23b83f86677721ea8 621f18fe53ef07b1ab49b2957efe3c6a891ec6ff 774203dceff4472465b5becd91e51d9b8777733d395c23c5ae96f7204e27f8d8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/large/tevasouthafrica/Teva%20Verra%20Olive%20Sandals%20Womens%20-%20So%2052_ZOOM.jpg HTTP/1.1
Host: www.tevashoessouthafrica.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tevashoessouthafrica.com/
Cookie: zenid=4ukv9l46hm4b1332m123ui8qc6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 06:44:13 GMT
Server: Apache
Last-Modified: Tue, 11 May 2021 17:57:08 GMT
Accept-Ranges: bytes
Content-Length: 133702
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: image/jpeg
|
|
| www.tevashoessouthafrica.com/images/large/tevasouthafrica/Teva%20Jadito%20Universal%20Black%20Sandals%20%2035_ZOOM.jpg | 196.240.121.126 | 200 OK | 202 kB |
URL GET HTTP/1.1www.tevashoessouthafrica.com/images/large/tevasouthafrica/Teva%20Jadito%20Universal%20Black%20Sandals%20%2035_ZOOM.jpg IP196.240.121.126:443 ASN#41564 Orion Network Limited
Requested byhttps://www.tevashoessouthafrica.com/ CertificateIssuerLet's Encrypt Subjectcpcalendars.tevashoessouthafrica.com Fingerprint4E:B5:21:6C:C2:3A:F1:AF:CA:2F:A9:75:2E:1A:F7:9E:04:5E:E0:CC ValidityFri, 12 Apr 2024 02:18:27 GMT - Thu, 11 Jul 2024 02:18:26 GMT
File typeJPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=630, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=1110], progressive, precision 8, 1110x1110, components 3 Size202 kB (201883 bytes) Hashcaff7e460eb46cc0374122f84e50db63 d277f78262f2205c9487f25e9550f0c11f05bd98 c97f258f23fd4cbc1249b90d437e33270842113d81972d35341b7b69e74cc0af
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/large/tevasouthafrica/Teva%20Jadito%20Universal%20Black%20Sandals%20%2035_ZOOM.jpg HTTP/1.1
Host: www.tevashoessouthafrica.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tevashoessouthafrica.com/
Cookie: zenid=4ukv9l46hm4b1332m123ui8qc6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 06:44:13 GMT
Server: Apache
Last-Modified: Tue, 11 May 2021 18:02:40 GMT
Accept-Ranges: bytes
Content-Length: 201883
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/jpeg
|
|
| www.tevashoessouthafrica.com/images/Women.jpg | 196.240.121.126 | 200 OK | 101 kB |
URL GET HTTP/1.1www.tevashoessouthafrica.com/images/Women.jpg IP196.240.121.126:443 ASN#41564 Orion Network Limited
Requested byhttps://www.tevashoessouthafrica.com/ CertificateIssuerLet's Encrypt Subjectcpcalendars.tevashoessouthafrica.com Fingerprint4E:B5:21:6C:C2:3A:F1:AF:CA:2F:A9:75:2E:1A:F7:9E:04:5E:E0:CC ValidityFri, 12 Apr 2024 02:18:27 GMT - Thu, 11 Jul 2024 02:18:26 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=3], baseline, precision 8, 750x950, components 3 Size101 kB (100733 bytes) Hash57fa47fc5991ee0ae3560014dbc4ed4c 95735aa93b2893a9ac93a5e8921447e5b08aca6c f609332e550a0619adb1e29214eb92eeac6fa5eaee41b1469f2e88a7e3ceec9b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/Women.jpg HTTP/1.1
Host: www.tevashoessouthafrica.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tevashoessouthafrica.com/
Cookie: zenid=4ukv9l46hm4b1332m123ui8qc6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 06:44:13 GMT
Server: Apache
Last-Modified: Mon, 24 May 2021 11:58:26 GMT
Accept-Ranges: bytes
Content-Length: 100733
Keep-Alive: timeout=5, max=89
Connection: Keep-Alive
Content-Type: image/jpeg
|
|
| www.tevashoessouthafrica.com/images/Men.jpg | 196.240.121.126 | 200 OK | 139 kB |
URL GET HTTP/1.1www.tevashoessouthafrica.com/images/Men.jpg IP196.240.121.126:443 ASN#41564 Orion Network Limited
Requested byhttps://www.tevashoessouthafrica.com/ CertificateIssuerLet's Encrypt Subjectcpcalendars.tevashoessouthafrica.com Fingerprint4E:B5:21:6C:C2:3A:F1:AF:CA:2F:A9:75:2E:1A:F7:9E:04:5E:E0:CC ValidityFri, 12 Apr 2024 02:18:27 GMT - Thu, 11 Jul 2024 02:18:26 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=3], baseline, precision 8, 799x796, components 3 Size139 kB (138798 bytes) Hashe945bef73fcfb745ceebca4a1a8ec7e6 83cff9f58034f606588311d43afe4b162bbfdd05 bc0b8a0421b556a2f043b6379a9a715c85c5b0fddeacf784539a6dacf0c18e8f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/Men.jpg HTTP/1.1
Host: www.tevashoessouthafrica.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tevashoessouthafrica.com/
Cookie: zenid=4ukv9l46hm4b1332m123ui8qc6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 06:44:13 GMT
Server: Apache
Last-Modified: Mon, 24 May 2021 11:56:04 GMT
Accept-Ranges: bytes
Content-Length: 138798
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: image/jpeg
|
|
| www.tevashoessouthafrica.com/images/Kids.jpg | 196.240.121.126 | 200 OK | 71 kB |
URL GET HTTP/1.1www.tevashoessouthafrica.com/images/Kids.jpg IP196.240.121.126:443 ASN#41564 Orion Network Limited
Requested byhttps://www.tevashoessouthafrica.com/ CertificateIssuerLet's Encrypt Subjectcpcalendars.tevashoessouthafrica.com Fingerprint4E:B5:21:6C:C2:3A:F1:AF:CA:2F:A9:75:2E:1A:F7:9E:04:5E:E0:CC ValidityFri, 12 Apr 2024 02:18:27 GMT - Thu, 11 Jul 2024 02:18:26 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=3], baseline, precision 8, 620x310, components 3 Hashe10018ec3b9f289cc3deb8595c3ee570 6b38620f855e2d030e0712dbdf2ad66f222fb2fb 32f41439a27ac8c61cbac1da8f72e6b013f7f49737579f52336afe3abb48d1f8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/Kids.jpg HTTP/1.1
Host: www.tevashoessouthafrica.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tevashoessouthafrica.com/
Cookie: zenid=4ukv9l46hm4b1332m123ui8qc6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 06:44:13 GMT
Server: Apache
Last-Modified: Mon, 24 May 2021 11:23:40 GMT
Accept-Ranges: bytes
Content-Length: 70825
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: image/jpeg
|
|
| www.tevashoessouthafrica.com/includes/templates/tevasouthafrica/images/teva-main-4.jpg | 196.240.121.126 | 200 OK | 259 kB |
URL GET HTTP/1.1www.tevashoessouthafrica.com/includes/templates/tevasouthafrica/images/teva-main-4.jpg IP196.240.121.126:443 ASN#41564 Orion Network Limited
Requested byhttps://www.tevashoessouthafrica.com/ CertificateIssuerLet's Encrypt Subjectcpcalendars.tevashoessouthafrica.com Fingerprint4E:B5:21:6C:C2:3A:F1:AF:CA:2F:A9:75:2E:1A:F7:9E:04:5E:E0:CC ValidityFri, 12 Apr 2024 02:18:27 GMT - Thu, 11 Jul 2024 02:18:26 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=3], baseline, precision 8, 750x1000, components 3 Size259 kB (259073 bytes) Hasha778bff92ef5c7dc897444d55f3d2acb d46d0880a1f00d6459a8ca26e8e2ceaf345a0709 91b8044d6141e7bfe36f4af4a602fc2220c31833dff5142f24d79e1da1cd52c9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /includes/templates/tevasouthafrica/images/teva-main-4.jpg HTTP/1.1
Host: www.tevashoessouthafrica.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tevashoessouthafrica.com/
Cookie: zenid=4ukv9l46hm4b1332m123ui8qc6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 06:44:13 GMT
Server: Apache
Last-Modified: Mon, 24 May 2021 15:56:08 GMT
Accept-Ranges: bytes
Content-Length: 259073
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: image/jpeg
|
|
| www.tevashoessouthafrica.com/includes/templates/tevasouthafrica/images/teva-main-3.jpg | 196.240.121.126 | 200 OK | 100 kB |
URL GET HTTP/1.1www.tevashoessouthafrica.com/includes/templates/tevasouthafrica/images/teva-main-3.jpg IP196.240.121.126:443 ASN#41564 Orion Network Limited
Requested byhttps://www.tevashoessouthafrica.com/ CertificateIssuerLet's Encrypt Subjectcpcalendars.tevashoessouthafrica.com Fingerprint4E:B5:21:6C:C2:3A:F1:AF:CA:2F:A9:75:2E:1A:F7:9E:04:5E:E0:CC ValidityFri, 12 Apr 2024 02:18:27 GMT - Thu, 11 Jul 2024 02:18:26 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5], baseline, precision 8, 750x1000, components 3 Size100 kB (100365 bytes) Hashb68c7825d0cab81a123cfb2af7e1001e eabcb2301b262b9b460a4824b49d951bd063c22d bdd30662aae40c2fd737865ea16c723dcb74f73ddf6aef2c83030361f3dea086
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /includes/templates/tevasouthafrica/images/teva-main-3.jpg HTTP/1.1
Host: www.tevashoessouthafrica.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tevashoessouthafrica.com/
Cookie: zenid=4ukv9l46hm4b1332m123ui8qc6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 06:44:13 GMT
Server: Apache
Last-Modified: Wed, 19 May 2021 16:30:26 GMT
Accept-Ranges: bytes
Content-Length: 100365
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: image/jpeg
|
|
| www.tevashoessouthafrica.com/includes/templates/tevasouthafrica/images/teva-main-1.jpg | 196.240.121.126 | 200 OK | 292 kB |
URL GET HTTP/1.1www.tevashoessouthafrica.com/includes/templates/tevasouthafrica/images/teva-main-1.jpg IP196.240.121.126:443 ASN#41564 Orion Network Limited
Requested byhttps://www.tevashoessouthafrica.com/ CertificateIssuerLet's Encrypt Subjectcpcalendars.tevashoessouthafrica.com Fingerprint4E:B5:21:6C:C2:3A:F1:AF:CA:2F:A9:75:2E:1A:F7:9E:04:5E:E0:CC ValidityFri, 12 Apr 2024 02:18:27 GMT - Thu, 11 Jul 2024 02:18:26 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 239x239, segment length 16, baseline, precision 8, 750x1000, components 3 Size292 kB (291892 bytes) Hash57c3d7e98cfa1617cf813ce7a6125767 f3ef3d56fd49d4ef02e615dfa37a427cfc794f26 8c26b863972cd816ef52b3f295c6d2b34f88883b680e207dffef97d8ee29938e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /includes/templates/tevasouthafrica/images/teva-main-1.jpg HTTP/1.1
Host: www.tevashoessouthafrica.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tevashoessouthafrica.com/
Cookie: zenid=4ukv9l46hm4b1332m123ui8qc6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 06:44:14 GMT
Server: Apache
Last-Modified: Wed, 19 May 2021 16:34:00 GMT
Accept-Ranges: bytes
Content-Length: 291892
Keep-Alive: timeout=5, max=88
Connection: Keep-Alive
Content-Type: image/jpeg
|
|
| www.tevashoessouthafrica.com/includes/templates/tevasouthafrica/images/teva-main-2.jpg | 196.240.121.126 | 200 OK | 185 kB |
URL GET HTTP/1.1www.tevashoessouthafrica.com/includes/templates/tevasouthafrica/images/teva-main-2.jpg IP196.240.121.126:443 ASN#41564 Orion Network Limited
Requested byhttps://www.tevashoessouthafrica.com/ CertificateIssuerLet's Encrypt Subjectcpcalendars.tevashoessouthafrica.com Fingerprint4E:B5:21:6C:C2:3A:F1:AF:CA:2F:A9:75:2E:1A:F7:9E:04:5E:E0:CC ValidityFri, 12 Apr 2024 02:18:27 GMT - Thu, 11 Jul 2024 02:18:26 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=3], baseline, precision 8, 750x1000, components 3 Size185 kB (184613 bytes) Hash4452eaad86d70eb46b7d71748737e41e 1d2a80f789349995b29d43c39051bf667eccc039 d6179ed861b09cfcab2551b64990deefe01d99c84130958a9fa0df1cb366b2eb
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /includes/templates/tevasouthafrica/images/teva-main-2.jpg HTTP/1.1
Host: www.tevashoessouthafrica.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tevashoessouthafrica.com/
Cookie: zenid=4ukv9l46hm4b1332m123ui8qc6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 06:44:14 GMT
Server: Apache
Last-Modified: Mon, 24 May 2021 15:58:42 GMT
Accept-Ranges: bytes
Content-Length: 184613
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: image/jpeg
|
|
| www.tevashoessouthafrica.com/includes/templates/tevasouthafrica/images/teva-main-5.jpg | 196.240.121.126 | 200 OK | 98 kB |
URL GET HTTP/1.1www.tevashoessouthafrica.com/includes/templates/tevasouthafrica/images/teva-main-5.jpg IP196.240.121.126:443 ASN#41564 Orion Network Limited
Requested byhttps://www.tevashoessouthafrica.com/ CertificateIssuerLet's Encrypt Subjectcpcalendars.tevashoessouthafrica.com Fingerprint4E:B5:21:6C:C2:3A:F1:AF:CA:2F:A9:75:2E:1A:F7:9E:04:5E:E0:CC ValidityFri, 12 Apr 2024 02:18:27 GMT - Thu, 11 Jul 2024 02:18:26 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 71x71, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=12, height=539, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=1110], baseline, precision 8, 750x1000, components 3 Hash0b94a7fc1b535ff261d3f7b1aeae9c4f 3171f474492f8f77a9300a691b987aae90a00fdb 83aa476b63e8fa65c664f88ffbb23ed67bff3a4dcabc9244d5b2eb9c2776519d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /includes/templates/tevasouthafrica/images/teva-main-5.jpg HTTP/1.1
Host: www.tevashoessouthafrica.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tevashoessouthafrica.com/
Cookie: zenid=4ukv9l46hm4b1332m123ui8qc6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 06:44:14 GMT
Server: Apache
Last-Modified: Wed, 19 May 2021 16:53:48 GMT
Accept-Ranges: bytes
Content-Length: 97912
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: image/jpeg
|
|
| www.tevashoessouthafrica.com/includes/templates/tevasouthafrica/images/teva-main-6.jpg | 196.240.121.126 | 200 OK | 182 kB |
URL GET HTTP/1.1www.tevashoessouthafrica.com/includes/templates/tevasouthafrica/images/teva-main-6.jpg IP196.240.121.126:443 ASN#41564 Orion Network Limited
Requested byhttps://www.tevashoessouthafrica.com/ CertificateIssuerLet's Encrypt Subjectcpcalendars.tevashoessouthafrica.com Fingerprint4E:B5:21:6C:C2:3A:F1:AF:CA:2F:A9:75:2E:1A:F7:9E:04:5E:E0:CC ValidityFri, 12 Apr 2024 02:18:27 GMT - Thu, 11 Jul 2024 02:18:26 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=3], baseline, precision 8, 750x1000, components 3 Size182 kB (181675 bytes) Hashaa8bb04ce9bf382ed04a4b5cc6eee083 3f13a0f94604e691e1b9bec9258004670c954933 3b71960f3b562dac7dc80849a69c697d977c714c74f5f840c6a8163c249a5b60
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /includes/templates/tevasouthafrica/images/teva-main-6.jpg HTTP/1.1
Host: www.tevashoessouthafrica.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tevashoessouthafrica.com/
Cookie: zenid=4ukv9l46hm4b1332m123ui8qc6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 06:44:13 GMT
Server: Apache
Last-Modified: Mon, 24 May 2021 16:01:04 GMT
Accept-Ranges: bytes
Content-Length: 181675
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: image/jpeg
|
|
| www.tevashoessouthafrica.com/includes/templates/tevasouthafrica/images/backtop.png | 196.240.121.126 | 200 OK | 354 B |
URL GET HTTP/1.1www.tevashoessouthafrica.com/includes/templates/tevasouthafrica/images/backtop.png IP196.240.121.126:443 ASN#41564 Orion Network Limited
Requested byhttps://www.tevashoessouthafrica.com/ CertificateIssuerLet's Encrypt Subjectcpcalendars.tevashoessouthafrica.com Fingerprint4E:B5:21:6C:C2:3A:F1:AF:CA:2F:A9:75:2E:1A:F7:9E:04:5E:E0:CC ValidityFri, 12 Apr 2024 02:18:27 GMT - Thu, 11 Jul 2024 02:18:26 GMT
File typePNG image data, 20 x 20, 8-bit/color RGB, non-interlaced Hashbfcabd1b771cce2f84d7917422aedefd eaeb3919ba4bdb90436c9a8f123b492a1128dfc4 565064ca08a4673c1427f78311ea4a001ed32bebbc1159a49d712420ebcb43a0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /includes/templates/tevasouthafrica/images/backtop.png HTTP/1.1
Host: www.tevashoessouthafrica.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tevashoessouthafrica.com/
Cookie: zenid=4ukv9l46hm4b1332m123ui8qc6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 06:44:14 GMT
Server: Apache
Last-Modified: Sat, 08 May 2021 11:15:26 GMT
Accept-Ranges: bytes
Content-Length: 354
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: image/png
|
|
| www.tevashoessouthafrica.com/favicon.ico | 196.240.121.126 | 200 OK | 2.2 kB |
URL GET HTTP/1.1www.tevashoessouthafrica.com/favicon.ico IP196.240.121.126:443 ASN#41564 Orion Network Limited
Requested byhttps://www.tevashoessouthafrica.com/ CertificateIssuerLet's Encrypt Subjectcpcalendars.tevashoessouthafrica.com Fingerprint4E:B5:21:6C:C2:3A:F1:AF:CA:2F:A9:75:2E:1A:F7:9E:04:5E:E0:CC ValidityFri, 12 Apr 2024 02:18:27 GMT - Thu, 11 Jul 2024 02:18:26 GMT
File typeMS Windows icon resource - 1 icon, 32x32, 8 bits/pixel Hashdd922efbd260769ab0c649c037e15a03 d22752a1b87aebf469adcbf4241a128a71fa35cf ea18d730d5c7c970e5deb572f10b9e7f3ad1fb2d83c1abcff548dc2f27725e87
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: www.tevashoessouthafrica.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tevashoessouthafrica.com/
Cookie: zenid=4ukv9l46hm4b1332m123ui8qc6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 06:44:14 GMT
Server: Apache
Last-Modified: Fri, 07 May 2021 14:45:10 GMT
Accept-Ranges: bytes
Content-Length: 2238
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: image/x-icon
|
|
| www.tevashoessouthafrica.com/includes/templates/tevasouthafrica/css/ajax-loader.gif | 196.240.121.126 | 404 Not Found | 7.8 kB |
URL GET HTTP/1.1www.tevashoessouthafrica.com/includes/templates/tevasouthafrica/css/ajax-loader.gif IP196.240.121.126:443 ASN#41564 Orion Network Limited
Requested byhttps://www.tevashoessouthafrica.com/ CertificateIssuerLet's Encrypt Subjectcpcalendars.tevashoessouthafrica.com Fingerprint4E:B5:21:6C:C2:3A:F1:AF:CA:2F:A9:75:2E:1A:F7:9E:04:5E:E0:CC ValidityFri, 12 Apr 2024 02:18:27 GMT - Thu, 11 Jul 2024 02:18:26 GMT
File typeHTML document, ASCII text, with very long lines (8456), with no line terminators Hashe5a081f76c536daa888431a3848334cd 2cf07fdfded12b03abf77cf963ec2a4427374b2f ddcf9e38ffbe42d118ad687d014e800da30d3c8533c016f3c544190f9595515f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /includes/templates/tevasouthafrica/css/ajax-loader.gif HTTP/1.1
Host: www.tevashoessouthafrica.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tevashoessouthafrica.com/includes/templates/tevasouthafrica/css/stylesheetaG4Ph.css
Cookie: zenid=4ukv9l46hm4b1332m123ui8qc6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Thu, 18 Apr 2024 06:44:14 GMT
Server: Apache
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=utf-8
|
|