www.oqily.com/catalog/view/javascript/font-awesome/css/font-awesome.min.css
185.160.67.92 7.1 kB URL www.oqily.com/catalog/view/javascript/font-awesome/css/font-awesome.min.css
IP 185.160.67.92:0
File type ASCII text, with very long lines (30837)
Hash 269550530cc127b6aa5a35925a7de6ce
512c7d79033e3028a9be61b540cf1a6870c896f8
799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
Quad9 DNS malicious Sinkholed
GET /catalog/view/javascript/font-awesome/css/font-awesome.min.css HTTP/1.1
Host: www.oqily.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.oqily.com/index.php?route=product/search&search=safe?e=index&tcMAWmS=1701177309&description=true
Cookie: language=ar; currency=SAR; OCSESSID=4f19be97acf9e6b109ce239ca8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Wed, 05 Jan 2022 10:59:47 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Wed, 27 Nov 2024 13:15:14 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 7053
content-type: text/css
date: Tue, 28 Nov 2023 13:15:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.oqily.com/catalog/view/javascript/soconfig/css/bootstrap/bootstrap.rtl.min.css
185.160.67.92 20 kB URL www.oqily.com/catalog/view/javascript/soconfig/css/bootstrap/bootstrap.rtl.min.css
IP 185.160.67.92:0
File type ASCII text, with very long lines (65347)
Hash 5d5c8eebffd126b6a44c5f44485b3399
f0da2c195e500641c8533f6f7d931c40c5ac3bea
4af909b9436cd4730f936afea0075cc254fb2539b68260eeaa73c7c0cabd399d
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
Quad9 DNS malicious Sinkholed
GET /catalog/view/javascript/soconfig/css/bootstrap/bootstrap.rtl.min.css HTTP/1.1
Host: www.oqily.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.oqily.com/index.php?route=product/search&search=safe?e=index&tcMAWmS=1701177309&description=true
Cookie: language=ar; currency=SAR; OCSESSID=4f19be97acf9e6b109ce239ca8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Wed, 06 Jun 2018 17:33:44 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Wed, 27 Nov 2024 13:15:14 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 19622
content-type: text/css
date: Tue, 28 Nov 2023 13:15:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-121469540-1
142.250.74.168 51 kB URL www.googletagmanager.com/gtag/js?id=UA-121469540-1
IP 142.250.74.168:0
File type ASCII text, with very long lines (2213)
Hash ad81604079d998a68ff4501be33dc9a0
a1cb6817b9d67b05bb075ff56a3d7ac9b7fae931
00390dee4c4690e88b3afbf37c0e779602cb020e0364363e4331cb83aad54ea0
GET /gtag/js?id=UA-121469540-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.oqily.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 28 Nov 2023 13:15:14 GMT
expires: Tue, 28 Nov 2023 13:15:14 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 51401
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=AW-955812931
142.250.74.168200 OK 76 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=AW-955812931
IP 142.250.74.168:443
Requested by https://www.oqily.com/index.php?route=product/search&search=safe?e=index&tcMAWmS=1701177309&description=true
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (4179)
Hash 9de0e7d4b0c32245f964c6ce561de288
6d113d007f50b556d3084f0903ddab2c161e4197
0db0f9216b1b43062fcd4112444c63b1d3922dc33e5f9234cb36f58d61c801e1
GET /gtag/js?id=AW-955812931 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.oqily.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 28 Nov 2023 13:15:14 GMT
expires: Tue, 28 Nov 2023 13:15:14 GMT
cache-control: private, max-age=900
last-modified: Tue, 28 Nov 2023 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 76162
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn3.iconfinder.com/data/icons/essential-pack-2/48/8-Email-512.png
104.21.0.91 8.7 kB URL cdn3.iconfinder.com/data/icons/essential-pack-2/48/8-Email-512.png
IP 104.21.0.91:0
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Hash 13b9e60318107e435b80ab6a4538d966
8c5204d24824d54cabb6ddc36b64d329d2d5185a
2a3682b605cc5a9136e87224a35ec7e490396eb75103af51821f14890b48ebd7
GET /data/icons/essential-pack-2/48/8-Email-512.png HTTP/1.1
Host: cdn3.iconfinder.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.oqily.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 13:15:14 GMT
content-type: image/png
content-length: 8705
report-to: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1699933243&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&s=jDfnPnh%2FUD6OUPZi%2BaUMvcd95plDkP4JZw9Rdzp8SrY%3D"}]}
reporting-endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1699933243&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&s=jDfnPnh%2FUD6OUPZi%2BaUMvcd95plDkP4JZw9Rdzp8SrY%3D
nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}
cache-control: public, max-age=31536000
content-disposition: inline; filename="3134477.png"
expires: Wed, 27 Nov 2024 13:15:14 GMT
x-request-id: 807dd5e0-31ed-4239-a176-a3739ef38691
access-control-allow-origin: *
via: 1.1 vegur
last-modified: Tue, 14 Nov 2023 03:40:43 GMT
cf-cache-status: HIT
age: 279078
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82d2e0e73e6756b5-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn2.iconfinder.com/data/icons/ios-7-icons/50/track-256.png
104.21.0.91200 OK 5.3 kB URL GET HTTP/2 cdn2.iconfinder.com/data/icons/ios-7-icons/50/track-256.png
IP 104.21.0.91:443
Requested by https://www.oqily.com/index.php?route=product/search&search=safe?e=index&tcMAWmS=1701177309&description=true
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintA8:8A:81:9C:80:DD:B7:43:49:4B:E2:D5:B2:94:F9:AE:F4:E0:16:68
ValidityMon, 13 Feb 2023 00:00:00 GMT - Mon, 12 Feb 2024 23:59:59 GMT
File type PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced\012- data
Hash 7d416edea8bd7ec96d9eb60711761e83
abb58af611be75f146c0dae4ff81f8e45df1fb29
cc3e44b0c1654a7a82fa75bf0a76de9817499ffa1ea2739972001172389cc757
GET /data/icons/ios-7-icons/50/track-256.png HTTP/1.1
Host: cdn2.iconfinder.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.oqily.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 13:15:14 GMT
content-type: image/png
content-length: 5349
report-to: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1700632931&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&s=8AWdtgwZRNsMDd0bd57SzYQyONk1%2FWT2Y%2BLkz%2BYaLVU%3D"}]}
reporting-endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1700632931&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&s=8AWdtgwZRNsMDd0bd57SzYQyONk1%2FWT2Y%2BLkz%2BYaLVU%3D
nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}
cache-control: public, max-age=31536000
content-disposition: inline; filename="477266.png"
expires: Wed, 27 Nov 2024 13:15:14 GMT
x-request-id: 4796ee3d-3ce4-417b-a4c2-93d15295050e
access-control-allow-origin: *
via: 1.1 vegur
last-modified: Wed, 22 Nov 2023 06:02:11 GMT
cf-cache-status: HIT
age: 279078
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82d2e0e74df756bf-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn2.iconfinder.com/data/icons/ios-7-icons/50/update-512.png
104.21.0.91 9.9 kB URL cdn2.iconfinder.com/data/icons/ios-7-icons/50/update-512.png
IP 104.21.0.91:0
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintA8:8A:81:9C:80:DD:B7:43:49:4B:E2:D5:B2:94:F9:AE:F4:E0:16:68
ValidityMon, 13 Feb 2023 00:00:00 GMT - Mon, 12 Feb 2024 23:59:59 GMT
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Hash 5b522bfb83d990fa15213ee5f4f93010
7d73e23afd3c9eb2d8f828e290dba30174b5eb12
0c096c89e5eb530dabf7b03efaa2be6858b3ae0b8fdac0cb37baae9cdae702ab
GET /data/icons/ios-7-icons/50/update-512.png HTTP/1.1
Host: cdn2.iconfinder.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.oqily.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 13:15:14 GMT
content-type: image/png
content-length: 9934
cache-control: public, max-age=31536000
content-disposition: inline; filename="477282.png"
expires: Wed, 27 Nov 2024 13:15:14 GMT
x-request-id: 81f57d1d-770c-4a92-ac01-d70e407c29a9
access-control-allow-origin: *
via: 1.1 vegur
last-modified: Fri, 10 Nov 2023 14:02:36 GMT
cf-cache-status: HIT
age: 526921
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Yq9pBsqwaL4fHG1eL8kloFPpvIXbp2UdAuXnLH%2FJKbfRkCOgBOwWg38IeL8qnUcgEeuhllKY4mjtdJDyWycXFT9kOCEwLqqCSYsDA1z%2BQvlil8XL%2FBeMecfhL5ILHer6%2B%2FnhlWQv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82d2e0e74df456bf-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn2.iconfinder.com/data/icons/ios-7-icons/50/shopping_bag-512.png
104.21.0.91 12 kB URL cdn2.iconfinder.com/data/icons/ios-7-icons/50/shopping_bag-512.png
IP 104.21.0.91:0
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintA8:8A:81:9C:80:DD:B7:43:49:4B:E2:D5:B2:94:F9:AE:F4:E0:16:68
ValidityMon, 13 Feb 2023 00:00:00 GMT - Mon, 12 Feb 2024 23:59:59 GMT
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Hash 7a64ad132ae91410084b5ed429fef040
ecad589e5243ee4e3fd0db5f8bb4586c2d35668c
d8a234a73a116e1e2d71209119719d8ec41631607d9f02326464b9757e7b670e
GET /data/icons/ios-7-icons/50/shopping_bag-512.png HTTP/1.1
Host: cdn2.iconfinder.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.oqily.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 13:15:14 GMT
content-type: image/png
content-length: 11919
report-to: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1700561684&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&s=Z%2FzBHu57S6sRIsLp9gzQekueFRlwFoCPEjSdkJO15KI%3D"}]}
reporting-endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1700561684&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&s=Z%2FzBHu57S6sRIsLp9gzQekueFRlwFoCPEjSdkJO15KI%3D
nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}
cache-control: public, max-age=31536000
content-disposition: inline; filename="477215.png"
expires: Wed, 27 Nov 2024 13:15:14 GMT
x-request-id: 7198e343-9aea-4587-a114-d0357ad40272
access-control-allow-origin: *
via: 1.1 vegur
last-modified: Tue, 21 Nov 2023 10:14:44 GMT
cf-cache-status: HIT
age: 191380
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82d2e0e74df956bf-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.oqily.com/catalog/view/javascript/soconfig/css/lib.css
185.160.67.92 1.7 kB URL www.oqily.com/catalog/view/javascript/soconfig/css/lib.css
IP 185.160.67.92:0
File type ASCII text, with very long lines (5707), with CRLF line terminators
Hash abfb46e52ee51722edc217ef52390226
1c0544f2d427c03593ab4dfa92c535594ee84ce6
ef58e4d634ae81df90cac2e868676efb3e630220b914de0cede088a5f240048d
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
Quad9 DNS malicious Sinkholed
GET /catalog/view/javascript/soconfig/css/lib.css HTTP/1.1
Host: www.oqily.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.oqily.com/index.php?route=product/search&search=safe?e=index&tcMAWmS=1701177309&description=true
Cookie: language=ar; currency=SAR; OCSESSID=4f19be97acf9e6b109ce239ca8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Wed, 06 Jun 2018 17:33:44 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Wed, 27 Nov 2024 13:15:14 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 1718
content-type: text/css
date: Tue, 28 Nov 2023 13:15:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.oqily.com/catalog/view/theme/so-emarket/css/ie9-and-up.css
185.160.67.92 55 B URL www.oqily.com/catalog/view/theme/so-emarket/css/ie9-and-up.css
IP 185.160.67.92:0
Hash a2c76f8fa129c3edc33411e4b717b368
68bf7ef5c189b59343319c4eff248f40142a1f4c
5ffbcc8d325f9427f6c89fef21136d09b10d0fea875cecbe35cfd5737b263f79
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
Quad9 DNS malicious Sinkholed
GET /catalog/view/theme/so-emarket/css/ie9-and-up.css HTTP/1.1
Host: www.oqily.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.oqily.com/index.php?route=product/search&search=safe?e=index&tcMAWmS=1701177309&description=true
Cookie: language=ar; currency=SAR; OCSESSID=4f19be97acf9e6b109ce239ca8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Wed, 06 Jun 2018 17:33:44 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Wed, 27 Nov 2024 13:15:14 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 55
content-type: text/css
date: Tue, 28 Nov 2023 13:15:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.oqily.com/catalog/view/theme/so-emarket/css/custom.css
185.160.67.92 585 B URL www.oqily.com/catalog/view/theme/so-emarket/css/custom.css
IP 185.160.67.92:0
File type assembler source, ASCII text, with CRLF line terminators
Hash 9c5ac4f97d3625a372cff5695ced3a16
2c9a9fb5a28b8e21e3a52fd3b14252b5198c4505
c448c9ec0be5aa18c89cac745557e2c65f4f22437b7af88aace6ad35171b7d04
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
Quad9 DNS malicious Sinkholed
GET /catalog/view/theme/so-emarket/css/custom.css HTTP/1.1
Host: www.oqily.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.oqily.com/index.php?route=product/search&search=safe?e=index&tcMAWmS=1701177309&description=true
Cookie: language=ar; currency=SAR; OCSESSID=4f19be97acf9e6b109ce239ca8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Wed, 06 Jun 2018 17:33:44 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Wed, 27 Nov 2024 13:15:14 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 585
content-type: text/css
date: Tue, 28 Nov 2023 13:15:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.oqily.com/catalog/view/javascript/so_newletter_custom_popup/css/style.css
185.160.67.92 878 B URL www.oqily.com/catalog/view/javascript/so_newletter_custom_popup/css/style.css
IP 185.160.67.92:0
File type ASCII text, with CRLF line terminators
Hash f8862fe19e1f9e341db98dca70293cbb
9fec484b691ee867a36ec4235ba7cbdd68c6b751
dee7e52faa78226e4eaca7968111d578360865d3c3483dc3c7bbe22f38e9acb2
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
Quad9 DNS malicious Sinkholed
GET /catalog/view/javascript/so_newletter_custom_popup/css/style.css HTTP/1.1
Host: www.oqily.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.oqily.com/index.php?route=product/search&search=safe?e=index&tcMAWmS=1701177309&description=true
Cookie: language=ar; currency=SAR; OCSESSID=4f19be97acf9e6b109ce239ca8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Wed, 06 Jun 2018 17:33:44 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Wed, 27 Nov 2024 13:15:14 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 878
content-type: text/css
date: Tue, 28 Nov 2023 13:15:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.oqily.com/catalog/view/javascript/so_page_builder/css/shortcodes.css
185.160.67.92 7.1 kB URL www.oqily.com/catalog/view/javascript/so_page_builder/css/shortcodes.css
IP 185.160.67.92:0
File type ASCII text, with very long lines (1098)
Hash d10b9140b0a93fc8e9365a0e972cd86e
2750bfed1c0d54995cea5e2d96252979914ff370
d7f672d5e59405343f4b5cd03ccd5af79e8ff14604f98bcb49d240992b12a3ff
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
Quad9 DNS malicious Sinkholed
GET /catalog/view/javascript/so_page_builder/css/shortcodes.css HTTP/1.1
Host: www.oqily.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.oqily.com/index.php?route=product/search&search=safe?e=index&tcMAWmS=1701177309&description=true
Cookie: language=ar; currency=SAR; OCSESSID=4f19be97acf9e6b109ce239ca8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Mon, 09 Sep 2019 15:56:46 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Wed, 27 Nov 2024 13:15:14 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 7114
content-type: text/css
date: Tue, 28 Nov 2023 13:15:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.oqily.com/catalog/view/javascript/so_page_builder/css/style_render_35.css
185.160.67.92200 OK 325 B URL GET HTTP/2 www.oqily.com/catalog/view/javascript/so_page_builder/css/style_render_35.css
IP 185.160.67.92:443
Requested by https://www.oqily.com/index.php?route=product/search&search=safe?e=index&tcMAWmS=1701177309&description=true
Certificate IssuercPanel, Inc.
Subjectoqily.com
FingerprintE6:E1:60:D2:04:45:0F:40:AA:28:60:75:2F:38:6D:33:CD:2C:04:11
ValiditySun, 22 Oct 2023 00:00:00 GMT - Sat, 20 Jan 2024 23:59:59 GMT
File type HTML document, ASCII text
Hash d4797444936784fad242079184ef6bd6
084be98b241ff85218773c1245b899851da14774
93cd2a6c3665d66f0e289ab041890c77c7dfb7bedaf7d65e08da7c39ac325e86
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
Quad9 DNS malicious Sinkholed
GET /catalog/view/javascript/so_page_builder/css/style_render_35.css HTTP/1.1
Host: www.oqily.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.oqily.com/index.php?route=product/search&search=safe?e=index&tcMAWmS=1701177309&description=true
Cookie: language=ar; currency=SAR; OCSESSID=4f19be97acf9e6b109ce239ca8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Sat, 09 Apr 2022 00:06:20 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Wed, 27 Nov 2024 13:15:14 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 325
content-type: text/css
date: Tue, 28 Nov 2023 13:15:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.oqily.com/catalog/view/javascript/so_page_builder/css/style.css
185.160.67.92 189 B URL www.oqily.com/catalog/view/javascript/so_page_builder/css/style.css
IP 185.160.67.92:0
File type ASCII text, with CRLF line terminators
Hash 34b10777da894680e525d40d0d3b2cb1
38c62bf021a13b1f2c9491aacaf05c96836b25ab
68da705046e6cb0b65f68ca8d8671e5f40f8bfd7c71cf7117963ff32148c78b8
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
Quad9 DNS malicious Sinkholed
GET /catalog/view/javascript/so_page_builder/css/style.css HTTP/1.1
Host: www.oqily.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.oqily.com/index.php?route=product/search&search=safe?e=index&tcMAWmS=1701177309&description=true
Cookie: language=ar; currency=SAR; OCSESSID=4f19be97acf9e6b109ce239ca8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Wed, 06 Jun 2018 17:33:44 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Wed, 27 Nov 2024 13:15:14 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 189
content-type: text/css
date: Tue, 28 Nov 2023 13:15:14 GMT
server: Apache
X-Firefox-Spdy: h2
oqily.com/favicon.ico
185.160.67.92302 Found 18 kB IP 185.160.67.92:443
Certificate IssuercPanel, Inc.
Subjectoqily.com
FingerprintE6:E1:60:D2:04:45:0F:40:AA:28:60:75:2F:38:6D:33:CD:2C:04:11
ValiditySun, 22 Oct 2023 00:00:00 GMT - Sat, 20 Jan 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (2486), with CRLF, LF line terminators
Hash 3bfdfbccda5a621d29f4c7d54316afe0
0cd4f14045a2f99cf2005f176346c9b9d008110b
3f64b97348f4e5cf9b4facba01cf2338e15b8ea25abe48e06d17d2888882c299
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
Quad9 DNS malicious Sinkholed
GET /favicon.ico HTTP/1.1
Host: oqily.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oqily.com/eaut/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
content-encoding: gzip
vary: Accept-Encoding,User-Agent
set-cookie: OCSESSID=f6b7abfd643eb3c52fbc175fdb; path=/
OCSESSID=08ae3b0af76cc19337c0c2f859; path=/
language=ar; expires=Thu, 28-Dec-2023 13:15:09 GMT; Max-Age=2592000; path=/; domain=oqily.com
currency=SAR; expires=Thu, 28-Dec-2023 13:15:09 GMT; Max-Age=2592000; path=/; domain=oqily.com
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
location: http://www.oqily.com/index.php?route=product/search&search=favicon.ico&description=true
content-type: text/html; charset=UTF-8
date: Tue, 28 Nov 2023 13:15:09 GMT
server: Apache
X-Firefox-Spdy: h2
www.oqily.com/catalog/view/javascript/so_megamenu/so_megamenu.css
185.160.67.92 2.6 kB URL www.oqily.com/catalog/view/javascript/so_megamenu/so_megamenu.css
IP 185.160.67.92:0
File type Unicode text, UTF-8 text, with very long lines (429)
Hash d5a85c646bdf93ec6dcef0f332cf7bc2
2fd6642dfb2f71139c19a5c1f4081441b5dd3547
59fc847f3591546a1b3bb8991333efe0164d1efe73ee47adbe013416f14732ba
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
Quad9 DNS malicious Sinkholed
GET /catalog/view/javascript/so_megamenu/so_megamenu.css HTTP/1.1
Host: www.oqily.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.oqily.com/index.php?route=product/search&search=safe?e=index&tcMAWmS=1701177309&description=true
Cookie: language=ar; currency=SAR; OCSESSID=4f19be97acf9e6b109ce239ca8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Mon, 09 Sep 2019 15:56:17 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Wed, 27 Nov 2024 13:15:14 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 2613
content-type: text/css
date: Tue, 28 Nov 2023 13:15:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.oqily.com/catalog/view/javascript/so_megamenu/wide-grid.css
185.160.67.92 287 B URL www.oqily.com/catalog/view/javascript/so_megamenu/wide-grid.css
IP 185.160.67.92:0
Hash 1b1b721af4b41b941d8f9f8896142b1f
8e76cae5241a6c6a0673f062f9c47ddb9f6d340a
f7b2eb39b5adbf90c3f05c5f177ec449d0c5733570241cdcee5bf8910eee91cf
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
Quad9 DNS malicious Sinkholed
GET /catalog/view/javascript/so_megamenu/wide-grid.css HTTP/1.1
Host: www.oqily.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.oqily.com/index.php?route=product/search&search=safe?e=index&tcMAWmS=1701177309&description=true
Cookie: language=ar; currency=SAR; OCSESSID=4f19be97acf9e6b109ce239ca8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Wed, 06 Jun 2018 17:33:44 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Wed, 27 Nov 2024 13:15:14 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 287
content-type: text/css
date: Tue, 28 Nov 2023 13:15:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.oqily.com/catalog/view/javascript/so_sociallogin/css/so_sociallogin.css
185.160.67.92 1.6 kB URL www.oqily.com/catalog/view/javascript/so_sociallogin/css/so_sociallogin.css
IP 185.160.67.92:0
File type ASCII text, with CRLF line terminators
Hash d800c4d7e634c02f873e783e31e2b0e1
caaa271abc11b45719827f771e1c6ab7d447016c
f522b6c99be3f9d30d5d9ee6597a7c2272940a9cd0c4da025dc274aa68ce7bb7
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
Quad9 DNS malicious Sinkholed
GET /catalog/view/javascript/so_sociallogin/css/so_sociallogin.css HTTP/1.1
Host: www.oqily.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.oqily.com/index.php?route=product/search&search=safe?e=index&tcMAWmS=1701177309&description=true
Cookie: language=ar; currency=SAR; OCSESSID=4f19be97acf9e6b109ce239ca8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Wed, 06 Jun 2018 17:33:45 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Wed, 27 Nov 2024 13:15:14 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 1615
content-type: text/css
date: Tue, 28 Nov 2023 13:15:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.oqily.com/catalog/view/javascript/bootstrap/js/bootstrap.min.js
185.160.67.92200 OK 9.7 kB URL GET HTTP/2 www.oqily.com/catalog/view/javascript/bootstrap/js/bootstrap.min.js
IP 185.160.67.92:443
Requested by https://www.oqily.com/index.php?route=product/search&search=safe?e=index&tcMAWmS=1701177309&description=true
Certificate IssuercPanel, Inc.
Subjectoqily.com
FingerprintE6:E1:60:D2:04:45:0F:40:AA:28:60:75:2F:38:6D:33:CD:2C:04:11
ValiditySun, 22 Oct 2023 00:00:00 GMT - Sat, 20 Jan 2024 23:59:59 GMT
File type ASCII text, with very long lines (32034)
Hash 4becdc9104623e891fbb9d38bba01be4
6c264e0e0026ab5ece49350c6a8812398e696cbb
4a4de7903ea62d330e17410ea4db6c22bcbeb350ac6aa402d6b54b4c0cbed327
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
Quad9 DNS malicious Sinkholed
GET /catalog/view/javascript/bootstrap/js/bootstrap.min.js HTTP/1.1
Host: www.oqily.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.oqily.com/index.php?route=product/search&search=safe?e=index&tcMAWmS=1701177309&description=true
Cookie: language=ar; currency=SAR; OCSESSID=4f19be97acf9e6b109ce239ca8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Wed, 05 Jan 2022 10:59:47 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Wed, 27 Nov 2024 13:15:14 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 9745
content-type: application/x-javascript
date: Tue, 28 Nov 2023 13:15:14 GMT
server: Apache
X-Firefox-Spdy: h2
cdn2.iconfinder.com/data/icons/ios-7-icons/50/flow_chart-512.png
104.21.0.91 4.5 kB URL cdn2.iconfinder.com/data/icons/ios-7-icons/50/flow_chart-512.png
IP 104.21.0.91:0
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintA8:8A:81:9C:80:DD:B7:43:49:4B:E2:D5:B2:94:F9:AE:F4:E0:16:68
ValidityMon, 13 Feb 2023 00:00:00 GMT - Mon, 12 Feb 2024 23:59:59 GMT
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Hash cca8f93f3166874a1e855f93ec314509
606ef770c87317490c19df75fe930d51de6b0db4
3f50ee3321307c8ff0230c6598da172ea83d289cf82fc6a19f8d31601ba84c5b
GET /data/icons/ios-7-icons/50/flow_chart-512.png HTTP/1.1
Host: cdn2.iconfinder.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.oqily.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 13:15:14 GMT
content-type: image/png
content-length: 4512
report-to: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1700681439&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&s=hOyPyVMzf8vJGpQGajLboUM5gEjCYTf3q5aNUh3vp8M%3D"}]}
reporting-endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1700681439&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&s=hOyPyVMzf8vJGpQGajLboUM5gEjCYTf3q5aNUh3vp8M%3D
nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}
cache-control: public, max-age=31536000
content-disposition: inline; filename="477228.png"
expires: Wed, 27 Nov 2024 13:15:14 GMT
x-request-id: 0893ca02-c95a-4d3b-b24e-e7f01e1b838d
access-control-allow-origin: *
via: 1.1 vegur
last-modified: Wed, 22 Nov 2023 19:30:40 GMT
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82d2e0e74e0356bf-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.oqily.com/catalog/view/javascript/so_searchpro/css/so_searchpro.css
185.160.67.92 691 B URL www.oqily.com/catalog/view/javascript/so_searchpro/css/so_searchpro.css
IP 185.160.67.92:0
Hash 378d0036fe439ce34a9cef0d18dcb4aa
e5f4a1a8ed4bfbb356630510d2f27c38687cf5ef
97e7debaeb3fdd9276cc6047cc444d60a070dd5ce4466d0e6b9d7c833c4976b3
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
Quad9 DNS malicious Sinkholed
GET /catalog/view/javascript/so_searchpro/css/so_searchpro.css HTTP/1.1
Host: www.oqily.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.oqily.com/index.php?route=product/search&search=safe?e=index&tcMAWmS=1701177309&description=true
Cookie: language=ar; currency=SAR; OCSESSID=4f19be97acf9e6b109ce239ca8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Wed, 06 Jun 2018 17:33:45 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Wed, 27 Nov 2024 13:15:14 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 691
content-type: text/css
date: Tue, 28 Nov 2023 13:15:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.oqily.com/image/catalog/brands/maroof-2.png
185.160.67.92 14 kB URL www.oqily.com/image/catalog/brands/maroof-2.png
IP 185.160.67.92:0
File type PNG image data, 300 x 81, 8-bit/color RGBA, non-interlaced\012- data
Hash dcb44d5a5f6c2212fcf5115d10fbf696
a385d02ec35cd46f95bd461794659d6cd63beacb
1bd1508cefdac039056ac049d894a5f4f871e07f82601cf205b9ea6928ef72ba
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
Quad9 DNS malicious Sinkholed
GET /image/catalog/brands/maroof-2.png HTTP/1.1
Host: www.oqily.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.oqily.com/index.php?route=product/search&search=safe?e=index&tcMAWmS=1701177309&description=true
Cookie: language=ar; currency=SAR; OCSESSID=4f19be97acf9e6b109ce239ca8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Thu, 12 Sep 2019 07:55:21 GMT
accept-ranges: bytes
content-length: 14338
cache-control: max-age=31536000
expires: Wed, 27 Nov 2024 13:15:14 GMT
vary: User-Agent
content-type: image/png
date: Tue, 28 Nov 2023 13:15:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.oqily.com/catalog/view/theme/so-emarket/css/footer/footer1-rtl.css
185.160.67.92 2.1 kB URL www.oqily.com/catalog/view/theme/so-emarket/css/footer/footer1-rtl.css
IP 185.160.67.92:0
File type ASCII text, with very long lines (10899), with no line terminators
Hash 625547134657468d292acb908595522e
d43c3332167d706d7e0c186f046b7a37c03d8e27
3d8309213c88da2f4604ecad3be08465b948fa412839a74e2861c37e43fda0bb
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
Quad9 DNS malicious Sinkholed
GET /catalog/view/theme/so-emarket/css/footer/footer1-rtl.css HTTP/1.1
Host: www.oqily.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.oqily.com/index.php?route=product/search&search=safe?e=index&tcMAWmS=1701177309&description=true
Cookie: language=ar; currency=SAR; OCSESSID=4f19be97acf9e6b109ce239ca8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Fri, 25 Mar 2022 03:50:50 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Wed, 27 Nov 2024 13:15:14 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 2119
content-type: text/css
date: Tue, 28 Nov 2023 13:15:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.oqily.com/catalog/view/theme/so-emarket/css/header/header1-rtl.css
185.160.67.92 2.9 kB URL www.oqily.com/catalog/view/theme/so-emarket/css/header/header1-rtl.css
IP 185.160.67.92:0
File type ASCII text, with very long lines (15675), with no line terminators
Hash 4eb344efe40ff17d167f4e540e245da5
3d323777b2ec3ddadf9dd1306ea81bbb94a5e1aa
89a765aa7080a3c76eedb70f080959b9273133f0788436233e2ae52f92205319
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
Quad9 DNS malicious Sinkholed
GET /catalog/view/theme/so-emarket/css/header/header1-rtl.css HTTP/1.1
Host: www.oqily.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.oqily.com/index.php?route=product/search&search=safe?e=index&tcMAWmS=1701177309&description=true
Cookie: language=ar; currency=SAR; OCSESSID=4f19be97acf9e6b109ce239ca8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Fri, 25 Mar 2022 03:50:50 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Wed, 27 Nov 2024 13:15:14 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 2881
content-type: text/css
date: Tue, 28 Nov 2023 13:15:14 GMT
server: Apache
X-Firefox-Spdy: h2
oqily.com/eaut//?tcMAWmS=1701177309
185.160.67.92 1.2 kB URL oqily.com/eaut//?tcMAWmS=1701177309
IP 185.160.67.92:0
Certificate IssuercPanel, Inc.
Subjectoqily.com
FingerprintE6:E1:60:D2:04:45:0F:40:AA:28:60:75:2F:38:6D:33:CD:2C:04:11
ValiditySun, 22 Oct 2023 00:00:00 GMT - Sat, 20 Jan 2024 23:59:59 GMT
Hash 5c6e20e24daf306c1fc76b63ab007414
82c2848266b1b0118c1afbb6fab8f73c4f59910e
1110de8d81f6da042f709aea43cf5b3f57b2ff3083348f9cde5617a22f88732a
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
Quad9 DNS malicious Sinkholed
GET /eaut//?tcMAWmS=1701177309 HTTP/1.1
Host: oqily.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oqily.com/eaut/
Cookie: OCSESSID=08ae3b0af76cc19337c0c2f859; language=ar; currency=SAR
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
cache-control: no-store
content-encoding: gzip
vary: Accept-Encoding,User-Agent
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
location: /safe?e=index&tcMAWmS=1701177309
content-type: text/html; charset=UTF-8
date: Tue, 28 Nov 2023 13:15:12 GMT
server: Apache
X-Firefox-Spdy: h2
www.oqily.com/catalog/view/javascript/soconfig/js/so.system.js
185.160.67.92 2.4 kB URL www.oqily.com/catalog/view/javascript/soconfig/js/so.system.js
IP 185.160.67.92:0
File type ASCII text, with very long lines (3518)
Hash e63725e370c4db676da7b0f121d241ab
8c536ebdc46a3b53c70695543622874b0a06cea6
b58bd10e648a353d68fd7799897696cdb701f7420c4c1ba8edc1b879c9e15248
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
Quad9 DNS malicious Sinkholed
GET /catalog/view/javascript/soconfig/js/so.system.js HTTP/1.1
Host: www.oqily.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.oqily.com/index.php?route=product/search&search=safe?e=index&tcMAWmS=1701177309&description=true
Cookie: language=ar; currency=SAR; OCSESSID=4f19be97acf9e6b109ce239ca8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Thu, 12 Sep 2019 08:56:06 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Wed, 27 Nov 2024 13:15:14 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 2380
content-type: application/x-javascript
date: Tue, 28 Nov 2023 13:15:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.oqily.com/catalog/view/theme/so-emarket/js/so.custom.js
185.160.67.92 1.1 kB URL www.oqily.com/catalog/view/theme/so-emarket/js/so.custom.js
IP 185.160.67.92:0
File type ASCII text, with very long lines (1990)
Hash 046bb6cc390af49bbe9493ca75336630
af466fe10d58e4c13f17590994a5304712fc4d73
668279c0dadad66387d7ad733b39b05e51f0527168be2318d613be20b3a73581
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
Quad9 DNS malicious Sinkholed
GET /catalog/view/theme/so-emarket/js/so.custom.js HTTP/1.1
Host: www.oqily.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.oqily.com/index.php?route=product/search&search=safe?e=index&tcMAWmS=1701177309&description=true
Cookie: language=ar; currency=SAR; OCSESSID=4f19be97acf9e6b109ce239ca8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Thu, 12 Sep 2019 08:51:09 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Wed, 27 Nov 2024 13:15:14 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 1097
content-type: application/x-javascript
date: Tue, 28 Nov 2023 13:15:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.oqily.com/catalog/view/javascript/so_page_builder/js/modernizr.video.js
185.160.67.92200 OK 3.3 kB URL GET HTTP/2 www.oqily.com/catalog/view/javascript/so_page_builder/js/modernizr.video.js
IP 185.160.67.92:443
Requested by https://www.oqily.com/index.php?route=product/search&search=safe?e=index&tcMAWmS=1701177309&description=true
Certificate IssuercPanel, Inc.
Subjectoqily.com
FingerprintE6:E1:60:D2:04:45:0F:40:AA:28:60:75:2F:38:6D:33:CD:2C:04:11
ValiditySun, 22 Oct 2023 00:00:00 GMT - Sat, 20 Jan 2024 23:59:59 GMT
File type HTML document, ASCII text, with very long lines (525)
Hash 7c9329456f09f00fbf3565cd147e0caa
a5909fe33c13ef161bc3c4f5565d16ce88174f95
a9aa2ee87469c69d0ada313ab55bdb343a7ce3a98b621b9b0525d351f1aefa1b
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
Quad9 DNS malicious Sinkholed
GET /catalog/view/javascript/so_page_builder/js/modernizr.video.js HTTP/1.1
Host: www.oqily.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.oqily.com/index.php?route=product/search&search=safe?e=index&tcMAWmS=1701177309&description=true
Cookie: language=ar; currency=SAR; OCSESSID=4f19be97acf9e6b109ce239ca8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Wed, 06 Jun 2018 17:33:44 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Wed, 27 Nov 2024 13:15:14 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 3333
content-type: application/x-javascript
date: Tue, 28 Nov 2023 13:15:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.oqily.com/catalog/view/javascript/so_countdown/js/jquery.cookie.js
185.160.67.92200 OK 898 B URL GET HTTP/2 www.oqily.com/catalog/view/javascript/so_countdown/js/jquery.cookie.js
IP 185.160.67.92:443
Requested by https://www.oqily.com/index.php?route=product/search&search=safe?e=index&tcMAWmS=1701177309&description=true
Certificate IssuercPanel, Inc.
Subjectoqily.com
FingerprintE6:E1:60:D2:04:45:0F:40:AA:28:60:75:2F:38:6D:33:CD:2C:04:11
ValiditySun, 22 Oct 2023 00:00:00 GMT - Sat, 20 Jan 2024 23:59:59 GMT
File type ASCII text, with CRLF line terminators
Hash 0cbfa0423565a417c194dc21719feaa4
7bd3407512f569db2122c4c64da8076c4e402b2e
8ec238b2bec1b0a7715907b6537536b23d8ccbaba31601526d20742454fe57ed
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
Quad9 DNS malicious Sinkholed
GET /catalog/view/javascript/so_countdown/js/jquery.cookie.js HTTP/1.1
Host: www.oqily.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.oqily.com/index.php?route=product/search&search=safe?e=index&tcMAWmS=1701177309&description=true
Cookie: language=ar; currency=SAR; OCSESSID=4f19be97acf9e6b109ce239ca8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Wed, 06 Jun 2018 17:33:45 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Wed, 27 Nov 2024 13:15:14 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 898
content-type: application/x-javascript
date: Tue, 28 Nov 2023 13:15:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.oqily.com/catalog/view/javascript/so_page_builder/js/video_background.js
185.160.67.92 2.4 kB URL www.oqily.com/catalog/view/javascript/so_page_builder/js/video_background.js
IP 185.160.67.92:0
File type ASCII text, with very long lines (566)
Hash 84e68daeef356b35e9f7698c2e453c19
3abcd2376bb33b733af1874de036fdf21b577b1e
24e3ab1ebe6ca853068b8aecfc8426bc14e152ef84ad5461df8c6d851894e6bc
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
Quad9 DNS malicious Sinkholed
GET /catalog/view/javascript/so_page_builder/js/video_background.js HTTP/1.1
Host: www.oqily.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.oqily.com/index.php?route=product/search&search=safe?e=index&tcMAWmS=1701177309&description=true
Cookie: language=ar; currency=SAR; OCSESSID=4f19be97acf9e6b109ce239ca8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Wed, 06 Jun 2018 17:33:44 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Wed, 27 Nov 2024 13:15:14 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 2387
content-type: application/x-javascript
date: Tue, 28 Nov 2023 13:15:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.oqily.com/catalog/view/javascript/so_page_builder/js/swfobject.js
185.160.67.92 3.7 kB URL www.oqily.com/catalog/view/javascript/so_page_builder/js/swfobject.js
IP 185.160.67.92:0
File type ASCII text, with very long lines (583)
Hash 73209ff6bb3eaf784070f372e8e6a146
dfbfab75191456d9c43bb9d17f88e307ed381c66
bef6f95f5191f93f5aa32be6fdace50d522622755edc074303cafe2a57bdfa81
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
Quad9 DNS malicious Sinkholed
GET /catalog/view/javascript/so_page_builder/js/swfobject.js HTTP/1.1
Host: www.oqily.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.oqily.com/index.php?route=product/search&search=safe?e=index&tcMAWmS=1701177309&description=true
Cookie: language=ar; currency=SAR; OCSESSID=4f19be97acf9e6b109ce239ca8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Wed, 06 Jun 2018 17:33:44 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Wed, 27 Nov 2024 13:15:14 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 3673
content-type: application/x-javascript
date: Tue, 28 Nov 2023 13:15:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.oqily.com/catalog/view/javascript/so_megamenu/so_megamenu.js
185.160.67.92 1.2 kB URL www.oqily.com/catalog/view/javascript/so_megamenu/so_megamenu.js
IP 185.160.67.92:0
File type ASCII text, with very long lines (1989)
Hash 06f329012b39497d03eb79e06efbb9af
94dda6d100f77bdc92a5d0871b86dabc88843755
daec1eaa16fb479b67d22363c93eef3e12818411b2a79b411a91846270ef3623
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
Quad9 DNS malicious Sinkholed
GET /catalog/view/javascript/so_megamenu/so_megamenu.js HTTP/1.1
Host: www.oqily.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.oqily.com/index.php?route=product/search&search=safe?e=index&tcMAWmS=1701177309&description=true
Cookie: language=ar; currency=SAR; OCSESSID=4f19be97acf9e6b109ce239ca8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Thu, 12 Sep 2019 08:52:35 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Wed, 27 Nov 2024 13:15:14 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 1172
content-type: application/x-javascript
date: Tue, 28 Nov 2023 13:15:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.oqily.com/admin/view/template/extension/module/so_page_builder/assets/js/shortcodes.js
185.160.67.92 1.3 kB URL www.oqily.com/admin/view/template/extension/module/so_page_builder/assets/js/shortcodes.js
IP 185.160.67.92:0
File type ASCII text, with very long lines (1194)
Hash 32ef78ddfa2867918db1ffa5f4e40ecb
6b5acdaa3836416d99b25e8d918c44fcd7002c32
937e002e54fefdc05f2e16f5792847f018e0c3464f9c1b87ad27c282ad3a643b
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
Quad9 DNS malicious Sinkholed
GET /admin/view/template/extension/module/so_page_builder/assets/js/shortcodes.js HTTP/1.1
Host: www.oqily.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.oqily.com/index.php?route=product/search&search=safe?e=index&tcMAWmS=1701177309&description=true
Cookie: language=ar; currency=SAR; OCSESSID=4f19be97acf9e6b109ce239ca8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Thu, 12 Sep 2019 08:51:37 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Wed, 27 Nov 2024 13:15:14 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 1284
content-type: application/x-javascript
date: Tue, 28 Nov 2023 13:15:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.oqily.com/catalog/view/javascript/soconfig/js/toppanel.js
185.160.67.92200 OK 581 B URL GET HTTP/2 www.oqily.com/catalog/view/javascript/soconfig/js/toppanel.js
IP 185.160.67.92:443
Requested by https://www.oqily.com/index.php?route=product/search&search=safe?e=index&tcMAWmS=1701177309&description=true
Certificate IssuercPanel, Inc.
Subjectoqily.com
FingerprintE6:E1:60:D2:04:45:0F:40:AA:28:60:75:2F:38:6D:33:CD:2C:04:11
ValiditySun, 22 Oct 2023 00:00:00 GMT - Sat, 20 Jan 2024 23:59:59 GMT
File type ASCII text, with very long lines (920)
Hash a1c39fa37979cee944e82bb0d5f5828a
1bf5c6ad6118edca7369b89bac66f3ede1ae4024
9003f7be04d569c8f3c552a2002a444fbbdfdd736e3f7fb3bf43f6a3e4afbc13
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
Quad9 DNS malicious Sinkholed
GET /catalog/view/javascript/soconfig/js/toppanel.js HTTP/1.1
Host: www.oqily.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.oqily.com/index.php?route=product/search&search=safe?e=index&tcMAWmS=1701177309&description=true
Cookie: language=ar; currency=SAR; OCSESSID=4f19be97acf9e6b109ce239ca8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Thu, 12 Sep 2019 08:53:35 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Wed, 27 Nov 2024 13:15:14 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 581
content-type: application/x-javascript
date: Tue, 28 Nov 2023 13:15:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.oqily.com/catalog/view/javascript/so_page_builder/js/section.js
185.160.67.92 495 B URL www.oqily.com/catalog/view/javascript/so_page_builder/js/section.js
IP 185.160.67.92:0
File type ASCII text, with CRLF line terminators
Hash 58710156cd5c7b7d9f4dbf5c7097b49a
f9c32e5a6b5e66c33c20de9979e523f1bd8ae9ce
e6e2e650b14332a15ecf7d2bfb5f15269567a29afe221896ed9ba658848a8141
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
Quad9 DNS malicious Sinkholed
GET /catalog/view/javascript/so_page_builder/js/section.js HTTP/1.1
Host: www.oqily.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.oqily.com/index.php?route=product/search&search=safe?e=index&tcMAWmS=1701177309&description=true
Cookie: language=ar; currency=SAR; OCSESSID=4f19be97acf9e6b109ce239ca8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Wed, 06 Jun 2018 17:33:44 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Wed, 27 Nov 2024 13:15:14 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 495
content-type: application/x-javascript
date: Tue, 28 Nov 2023 13:15:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.oqily.com/catalog/view/javascript/lazysizes/lazysizes.min.js
185.160.67.92200 OK 3.1 kB URL GET HTTP/2 www.oqily.com/catalog/view/javascript/lazysizes/lazysizes.min.js
IP 185.160.67.92:443
Requested by https://www.oqily.com/index.php?route=product/search&search=safe?e=index&tcMAWmS=1701177309&description=true
Certificate IssuercPanel, Inc.
Subjectoqily.com
FingerprintE6:E1:60:D2:04:45:0F:40:AA:28:60:75:2F:38:6D:33:CD:2C:04:11
ValiditySun, 22 Oct 2023 00:00:00 GMT - Sat, 20 Jan 2024 23:59:59 GMT
File type ASCII text, with very long lines (6649)
Hash 6c56a43493e4528377e97ea3083ade0d
22f78e629e0159ec7e106ee0d3518d2e07b3b514
cde0cd9ea29052ceed982c4c1b0309d18dcef104b941b07578e49973e37c3e66
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
Quad9 DNS malicious Sinkholed
GET /catalog/view/javascript/lazysizes/lazysizes.min.js HTTP/1.1
Host: www.oqily.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.oqily.com/index.php?route=product/search&search=safe?e=index&tcMAWmS=1701177309&description=true
Cookie: language=ar; currency=SAR; OCSESSID=4f19be97acf9e6b109ce239ca8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Wed, 06 Jun 2018 17:33:45 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Wed, 27 Nov 2024 13:15:14 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 3140
content-type: application/x-javascript
date: Tue, 28 Nov 2023 13:15:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.oqily.com/catalog/view/theme/so-emarket/js/common.js
185.160.67.92 3.0 kB URL www.oqily.com/catalog/view/theme/so-emarket/js/common.js
IP 185.160.67.92:0
File type ASCII text, with CRLF line terminators
Hash 34d80e38d2f5b8944ee8af3f5d6f3476
53caff881ad3e112345e945e5806a5d2991787ab
c3f2320d2f29a3a6993a882a7f7aa643779828491b3835e8e8809f2a565fc7e3
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
Quad9 DNS malicious Sinkholed
GET /catalog/view/theme/so-emarket/js/common.js HTTP/1.1
Host: www.oqily.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.oqily.com/index.php?route=product/search&search=safe?e=index&tcMAWmS=1701177309&description=true
Cookie: language=ar; currency=SAR; OCSESSID=4f19be97acf9e6b109ce239ca8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Wed, 06 Jun 2018 17:33:44 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Wed, 27 Nov 2024 13:15:14 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 3012
content-type: application/x-javascript
date: Tue, 28 Nov 2023 13:15:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.oqily.com/catalog/view/javascript/soconfig/js/jquery.sticky-kit.min.js
185.160.67.92 1.3 kB URL www.oqily.com/catalog/view/javascript/soconfig/js/jquery.sticky-kit.min.js
IP 185.160.67.92:0
File type ASCII text, with very long lines (529)
Hash 572ffbc4923d823f891cb3ce330e3d8a
91504d0b3c964602878880204a7acb7df3b7c2f4
8e8230f2d1e6e230d63f5bd3091ea092eb8d1f447b5f6c84c5b776cf4f50a65d
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
Quad9 DNS malicious Sinkholed
GET /catalog/view/javascript/soconfig/js/jquery.sticky-kit.min.js HTTP/1.1
Host: www.oqily.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.oqily.com/index.php?route=product/search&search=safe?e=index&tcMAWmS=1701177309&description=true
Cookie: language=ar; currency=SAR; OCSESSID=4f19be97acf9e6b109ce239ca8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Wed, 06 Jun 2018 17:33:44 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Wed, 27 Nov 2024 13:15:14 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 1295
content-type: application/x-javascript
date: Tue, 28 Nov 2023 13:15:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.oqily.com/catalog/view/theme/so-emarket/js/jquery.nav.js
185.160.67.92 1.8 kB URL www.oqily.com/catalog/view/theme/so-emarket/js/jquery.nav.js
IP 185.160.67.92:0
Hash a33571eb2591514e45765696e5d92c9f
e680863a86670bf2d8e0b1f5b33c267f0ddc5cd1
707a967916ff7ca8411b995ff078ee44fcbb627bbb11f067643f7a6ab7f99806
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
Quad9 DNS malicious Sinkholed
GET /catalog/view/theme/so-emarket/js/jquery.nav.js HTTP/1.1
Host: www.oqily.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.oqily.com/index.php?route=product/search&search=safe?e=index&tcMAWmS=1701177309&description=true
Cookie: language=ar; currency=SAR; OCSESSID=4f19be97acf9e6b109ce239ca8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Wed, 06 Jun 2018 17:33:44 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Wed, 27 Nov 2024 13:15:14 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 1828
content-type: application/x-javascript
date: Tue, 28 Nov 2023 13:15:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.oqily.com/catalog/view/javascript/soconfig/js/libs.js
185.160.67.92 8.7 kB URL www.oqily.com/catalog/view/javascript/soconfig/js/libs.js
IP 185.160.67.92:0
File type ASCII text, with very long lines (20087), with CRLF line terminators
Hash 729beb3bc863d9d14435ac96a4704020
2718387a0e2f549c6e3bdd09f4426c8d6ec4375b
827b9e228d33dc74807a02b657a6674ee752a0926b748d20af46055d57ea5c94
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
Quad9 DNS malicious Sinkholed
GET /catalog/view/javascript/soconfig/js/libs.js HTTP/1.1
Host: www.oqily.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.oqily.com/index.php?route=product/search&search=safe?e=index&tcMAWmS=1701177309&description=true
Cookie: language=ar; currency=SAR; OCSESSID=4f19be97acf9e6b109ce239ca8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Wed, 06 Jun 2018 17:33:44 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Wed, 27 Nov 2024 13:15:14 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 8650
content-type: application/x-javascript
date: Tue, 28 Nov 2023 13:15:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.oqily.com/catalog/view/javascript/jquery/jquery-2.1.1.min.js
185.160.67.92 30 kB URL www.oqily.com/catalog/view/javascript/jquery/jquery-2.1.1.min.js
IP 185.160.67.92:0
File type ASCII text, with very long lines (32061)
Hash e40ec2161fe7993196f23c8a07346306
afb90752e0a90c24b7f724faca86c5f3d15d1178
874706b2b1311a0719b5267f7d1cf803057e367e94ae1ff7bf78c5450d30f5d4
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
Quad9 DNS malicious Sinkholed
GET /catalog/view/javascript/jquery/jquery-2.1.1.min.js HTTP/1.1
Host: www.oqily.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.oqily.com/index.php?route=product/search&search=safe?e=index&tcMAWmS=1701177309&description=true
Cookie: language=ar; currency=SAR; OCSESSID=4f19be97acf9e6b109ce239ca8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Wed, 05 Jan 2022 10:59:47 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Wed, 27 Nov 2024 13:15:14 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 29497
content-type: application/x-javascript
date: Tue, 28 Nov 2023 13:15:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.oqily.com/catalog/view/theme/so-emarket/css/responsive-rtl.css
185.160.67.92 17 kB URL www.oqily.com/catalog/view/theme/so-emarket/css/responsive-rtl.css
IP 185.160.67.92:0
File type ASCII text, with very long lines (332)
Hash 4c93b2996d6924a74e15f77f91e12a16
9e34dd4b941f4f31834fcb98e0a38cdc55dfd715
13be68e9026d06b8120dca880ece519b6f2cfe50e0147eac4635e4784bedbf31
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
Quad9 DNS malicious Sinkholed
GET /catalog/view/theme/so-emarket/css/responsive-rtl.css HTTP/1.1
Host: www.oqily.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.oqily.com/index.php?route=product/search&search=safe?e=index&tcMAWmS=1701177309&description=true
Cookie: language=ar; currency=SAR; OCSESSID=4f19be97acf9e6b109ce239ca8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Mon, 09 Sep 2019 15:56:10 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Wed, 27 Nov 2024 13:15:14 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 17407
content-type: text/css
date: Tue, 28 Nov 2023 13:15:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.oqily.com/catalog/view/javascript/soconfig/js/owl.carousel.js
185.160.67.92 18 kB URL www.oqily.com/catalog/view/javascript/soconfig/js/owl.carousel.js
IP 185.160.67.92:0
Hash 2d61e233d78c05149d0e3ca07526c69b
41cade962552e364f6f8d3368ca848964eb0210e
b5a0b152a69e10ec7912bbf6ec01f7b31b54367b8ee131687e3e9f5cdcf595ab
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
Quad9 DNS malicious Sinkholed
GET /catalog/view/javascript/soconfig/js/owl.carousel.js HTTP/1.1
Host: www.oqily.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.oqily.com/index.php?route=product/search&search=safe?e=index&tcMAWmS=1701177309&description=true
Cookie: language=ar; currency=SAR; OCSESSID=4f19be97acf9e6b109ce239ca8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Wed, 06 Jun 2018 17:33:44 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Wed, 27 Nov 2024 13:15:14 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 18351
content-type: application/x-javascript
date: Tue, 28 Nov 2023 13:15:14 GMT
server: Apache
X-Firefox-Spdy: h2
www.oqily.com/catalog/view/theme/so-emarket/css/layout1/orange-rtl.css
185.160.67.92 35 kB URL www.oqily.com/catalog/view/theme/so-emarket/css/layout1/orange-rtl.css
IP 185.160.67.92:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash 30ae909426d64d22731b058ccb55de52
a1c1c712ccdd8149cf0549350dd089247c9fe7b6
05928d9699f7d4f0388bacd3036f21074c57f2087aeb21a9501f611425db1906
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
Quad9 DNS malicious Sinkholed
GET /catalog/view/theme/so-emarket/css/layout1/orange-rtl.css HTTP/1.1
Host: www.oqily.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.oqily.com/index.php?route=product/search&search=safe?e=index&tcMAWmS=1701177309&description=true
Cookie: language=ar; currency=SAR; OCSESSID=4f19be97acf9e6b109ce239ca8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Fri, 25 Mar 2022 03:50:53 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Wed, 27 Nov 2024 13:15:14 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 34885
content-type: text/css
date: Tue, 28 Nov 2023 13:15:14 GMT
server: Apache
X-Firefox-Spdy: h2
oqily.com/safe?e=index&tcMAWmS=1701177309
185.160.67.92 17 kB URL oqily.com/safe?e=index&tcMAWmS=1701177309
IP 185.160.67.92:0
Certificate IssuercPanel, Inc.
Subjectoqily.com
FingerprintE6:E1:60:D2:04:45:0F:40:AA:28:60:75:2F:38:6D:33:CD:2C:04:11
ValiditySun, 22 Oct 2023 00:00:00 GMT - Sat, 20 Jan 2024 23:59:59 GMT
File type ASCII text, with very long lines (40498)
Hash 765063dccc5f8673cb25bc45f72da390
13bc3ad0ff5e8d9348c48292a476ed1a6e5fc030
d61a6b3234c115e36708d7bbf28cc53c3dc234feddecbba63f52dbca4254145e
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
Quad9 DNS malicious Sinkholed
GET /safe?e=index&tcMAWmS=1701177309 HTTP/1.1
Host: oqily.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://oqily.com/eaut/
DNT: 1
Connection: keep-alive
Cookie: OCSESSID=08ae3b0af76cc19337c0c2f859; language=ar; currency=SAR
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
content-encoding: gzip
vary: Accept-Encoding,User-Agent
set-cookie: OCSESSID=08ae3b0af76cc19337c0c2f859; path=/
OCSESSID=08ae3b0af76cc19337c0c2f859; path=/
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
location: http://www.oqily.com/index.php?route=product/search&search=safe?e=index&tcMAWmS=1701177309&description=true
content-type: text/html; charset=UTF-8
date: Tue, 28 Nov 2023 13:15:13 GMT
server: Apache
X-Firefox-Spdy: h2
oqily.com/eaut/
185.160.67.92 34 kB IP 185.160.67.92:0
Certificate IssuercPanel, Inc.
Subjectoqily.com
FingerprintE6:E1:60:D2:04:45:0F:40:AA:28:60:75:2F:38:6D:33:CD:2C:04:11
ValiditySun, 22 Oct 2023 00:00:00 GMT - Sat, 20 Jan 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash 2f3651ec05c9f9d75de3029bd4a11106
63b233842dc96189697a5152233fa3972833bce0
9659d2d9708fd90b9e3772f6c592edcbefb296bb7b9b099bdb15205e9aba74f4
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
Quad9 DNS malicious Sinkholed
GET /eaut/ HTTP/1.1
Host: oqily.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-encoding: gzip
vary: Accept-Encoding,User-Agent
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-type: text/html; charset=UTF-8
date: Tue, 28 Nov 2023 13:15:09 GMT
server: Apache
X-Firefox-Spdy: h2
fonts.gstatic.com/s/cairo/v28/SLXVc1nY6HkvangtZmpQdkhzfH5lkSscRiyS8pg_RWH1.woff2
142.250.74.3200 OK 34 kB URL GET HTTP/2 fonts.gstatic.com/s/cairo/v28/SLXVc1nY6HkvangtZmpQdkhzfH5lkSscRiyS8pg_RWH1.woff2
IP 142.250.74.3:443
Requested by https://www.oqily.com/index.php?route=product/search&search=safe?e=index&tcMAWmS=1701177309&description=true
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 33588, version 1.0\012- data
Hash ead8e97c01f0448365969c144c8c5fe8
4ff4d355eeaace00eeaf2ae15cc50d01ac2bfa98
1355605c748ba06b91514ca27feaa9c0c97ac33eb32fed979fc9fabb623d9023
GET /s/cairo/v28/SLXVc1nY6HkvangtZmpQdkhzfH5lkSscRiyS8pg_RWH1.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.oqily.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 33588
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 23 Nov 2023 05:11:20 GMT
expires: Fri, 22 Nov 2024 05:11:20 GMT
cache-control: public, max-age=31536000
age: 461035
last-modified: Tue, 02 May 2023 14:51:32 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/cairo/v28/SLXVc1nY6HkvangtZmpQdkhzfH5lkSscQyyS8pg_RWH1vCk.woff2
142.250.74.3200 OK 31 kB URL GET HTTP/2 fonts.gstatic.com/s/cairo/v28/SLXVc1nY6HkvangtZmpQdkhzfH5lkSscQyyS8pg_RWH1vCk.woff2
IP 142.250.74.3:443
Requested by https://www.oqily.com/index.php?route=product/search&search=safe?e=index&tcMAWmS=1701177309&description=true
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 30596, version 1.0\012- data
Hash cdfdf6997ccfea7171e17593b08e3dbd
8bcfc0fb78306b10459da6670d17221fd1a0132d
60d51fea6669a866e3dce8a8583978127ef1808feb14c073b2f5c2a05a45908c
GET /s/cairo/v28/SLXVc1nY6HkvangtZmpQdkhzfH5lkSscQyyS8pg_RWH1vCk.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.oqily.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 30596
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 24 Nov 2023 00:05:45 GMT
expires: Sat, 23 Nov 2024 00:05:45 GMT
cache-control: public, max-age=31536000
age: 392970
last-modified: Tue, 02 May 2023 14:51:33 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/cairo/v28/SLXVc1nY6HkvangtZmpQdkhzfH5lkSscQyyS8pg_RWH1vCk.woff2
142.250.74.3200 OK 31 kB URL GET HTTP/2 fonts.gstatic.com/s/cairo/v28/SLXVc1nY6HkvangtZmpQdkhzfH5lkSscQyyS8pg_RWH1vCk.woff2
IP 142.250.74.3:443
Requested by https://www.oqily.com/index.php?route=product/search&search=safe?e=index&tcMAWmS=1701177309&description=true
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 30596, version 1.0\012- data
Hash cdfdf6997ccfea7171e17593b08e3dbd
8bcfc0fb78306b10459da6670d17221fd1a0132d
60d51fea6669a866e3dce8a8583978127ef1808feb14c073b2f5c2a05a45908c
GET /s/cairo/v28/SLXVc1nY6HkvangtZmpQdkhzfH5lkSscQyyS8pg_RWH1vCk.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.oqily.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 30596
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 24 Nov 2023 00:05:45 GMT
expires: Sat, 23 Nov 2024 00:05:45 GMT
cache-control: public, max-age=31536000
age: 392970
last-modified: Tue, 02 May 2023 14:51:33 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.oqily.com/catalog/view/theme/so-emarket/images/icon/icon-contact.png
185.160.67.92 1.8 kB URL www.oqily.com/catalog/view/theme/so-emarket/images/icon/icon-contact.png
IP 185.160.67.92:0
File type PNG image data, 26 x 176, 8-bit colormap, interlaced\012- data
Hash 5ab0b17b538a8dc51e64f48e7192107a
7556ae1796bcdfcaee178541fea73b9b3d38f7c3
14ff380908b3458d94605ee79e4c5537424713fce775ed8e2fd7b8f5244874bf
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
Quad9 DNS malicious Sinkholed
GET /catalog/view/theme/so-emarket/images/icon/icon-contact.png HTTP/1.1
Host: www.oqily.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.oqily.com/catalog/view/theme/so-emarket/css/footer/footer1-rtl.css
Cookie: language=ar; currency=SAR; OCSESSID=4f19be97acf9e6b109ce239ca8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Thu, 12 Sep 2019 07:55:13 GMT
accept-ranges: bytes
content-length: 1818
cache-control: max-age=31536000
expires: Wed, 27 Nov 2024 13:15:15 GMT
vary: User-Agent
content-type: image/png
date: Tue, 28 Nov 2023 13:15:15 GMT
server: Apache
X-Firefox-Spdy: h2
www.oqily.com/catalog/view/javascript/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0
185.160.67.92 77 kB URL www.oqily.com/catalog/view/javascript/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0
IP 185.160.67.92:0
File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Hash af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
Quad9 DNS malicious Sinkholed
GET /catalog/view/javascript/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: www.oqily.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://www.oqily.com/catalog/view/javascript/font-awesome/css/font-awesome.min.css
Cookie: language=ar; currency=SAR; OCSESSID=4f19be97acf9e6b109ce239ca8
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Wed, 05 Jan 2022 10:59:47 GMT
accept-ranges: bytes
content-length: 77160
cache-control: max-age=31536000
expires: Wed, 27 Nov 2024 13:15:15 GMT
vary: Accept-Encoding,User-Agent
content-type: application/font-woff2
date: Tue, 28 Nov 2023 13:15:15 GMT
server: Apache
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-9P2VHMGWM2&l=dataLayer&cx=c
142.250.74.168 95 kB URL www.googletagmanager.com/gtag/js?id=G-9P2VHMGWM2&l=dataLayer&cx=c
IP 142.250.74.168:0
File type Unicode text, UTF-8 text, with very long lines (7711)
Hash 63658efb052c97e9a0bedadb0579d3cd
86700507eed2330f2fdf1a279680ae785bc1890f
21ae0d318ad7ba95b87b8e58f8be54c9db7a9b96786998b3e70eee06f5109a2a
GET /gtag/js?id=G-9P2VHMGWM2&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.oqily.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 28 Nov 2023 13:15:15 GMT
expires: Tue, 28 Nov 2023 13:15:15 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 95226
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.oqily.com/index.php?route=common/footer/stockaction
185.160.67.92 15 kB URL www.oqily.com/index.php?route=common/footer/stockaction
IP 185.160.67.92:0
File type gzip compressed data, from Unix\012- data
Hash 38ff94245afb80a1f313db823100f8aa
33bc82f7ca425012be6b95dda7b61e6024d70c31
55560d233946020e76b8d0954d4bf4a500e2f625905fa5421932029c0d2975cf
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
Quad9 DNS malicious Sinkholed
POST /index.php?route=common/footer/stockaction HTTP/1.1
Host: www.oqily.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Origin: https://www.oqily.com
DNT: 1
Connection: keep-alive
Referer: https://www.oqily.com/index.php?route=product/search&search=safe?e=index&tcMAWmS=1701177309&description=true
Cookie: language=ar; currency=SAR; OCSESSID=4f19be97acf9e6b109ce239ca8
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
vary: Accept-Encoding,User-Agent
set-cookie: OCSESSID=4f19be97acf9e6b109ce239ca8; path=/
OCSESSID=4f19be97acf9e6b109ce239ca8; path=/
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=31536000
expires: Wed, 27 Nov 2024 13:15:15 GMT
content-type: application/json
date: Tue, 28 Nov 2023 13:15:15 GMT
server: Apache
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-9P2VHMGWM2&cid=1512533228.1701177319>m=45je3b81v896390948&aip=1&dma=1&dma_cps=sypham&gcd=11l1l1l1l1&z=1791620495
142.250.74.163 42 B URL www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-9P2VHMGWM2&cid=1512533228.1701177319>m=45je3b81v896390948&aip=1&dma=1&dma_cps=sypham&gcd=11l1l1l1l1&z=1791620495
IP 142.250.74.163:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-9P2VHMGWM2&cid=1512533228.1701177319>m=45je3b81v896390948&aip=1&dma=1&dma_cps=sypham&gcd=11l1l1l1l1&z=1791620495 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.oqily.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 28 Nov 2023 13:15:15 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.oqily.com/image/catalog/ico.png
185.160.67.92 18 kB URL www.oqily.com/image/catalog/ico.png
IP 185.160.67.92:0
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash c27ebfd0da7a876045ae669f6be8162d
8de86ab8620bdf34e29b11b79ff07d489ce6cd21
5e836f2b11551661ac2afbaaab1f994148e2ac485eebf9ebf9f5ff9b6865ba4c
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
Quad9 DNS malicious Sinkholed
GET /image/catalog/ico.png HTTP/1.1
Host: www.oqily.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.oqily.com/index.php?route=product/search&search=safe?e=index&tcMAWmS=1701177309&description=true
Cookie: language=ar; currency=SAR; OCSESSID=4f19be97acf9e6b109ce239ca8; _scid=425bd468-6994-444a-bf25-e5773088ceb1; _scid_r=425bd468-6994-444a-bf25-e5773088ceb1; _gcl_au=1.1.1243137309.1701177319; _ga_9P2VHMGWM2=GS1.1.1701177319.1.0.1701177319.60.0.0; _ga=GA1.1.1512533228.1701177319
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Mon, 11 May 2020 04:07:38 GMT
accept-ranges: bytes
content-length: 18480
cache-control: max-age=31536000
expires: Wed, 27 Nov 2024 13:15:15 GMT
vary: User-Agent
content-type: image/png
date: Tue, 28 Nov 2023 13:15:15 GMT
server: Apache
X-Firefox-Spdy: h2
www.oqily.com/image/catalog/banners/we-accept--last2022.png
185.160.67.92 19 kB URL www.oqily.com/image/catalog/banners/we-accept--last2022.png
IP 185.160.67.92:0
File type PNG image data, 451 x 56, 8-bit/color RGBA, non-interlaced\012- data
Hash eeacc3627e39995b9fbf378600596914
52c4728c261c0744a2f7a8e56e18f9a7a919f310
d0dae5ef0f010f9afef5785f0dcab9c6826eb1c6e7f672aed02b249a950201e3
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
Quad9 DNS malicious Sinkholed
GET /image/catalog/banners/we-accept--last2022.png HTTP/1.1
Host: www.oqily.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.oqily.com/index.php?route=product/search&search=safe?e=index&tcMAWmS=1701177309&description=true
Cookie: language=ar; currency=SAR; OCSESSID=4f19be97acf9e6b109ce239ca8; _scid=425bd468-6994-444a-bf25-e5773088ceb1; _scid_r=425bd468-6994-444a-bf25-e5773088ceb1; _gcl_au=1.1.1243137309.1701177319; _ga_9P2VHMGWM2=GS1.1.1701177319.1.0.1701177319.60.0.0; _ga=GA1.1.1512533228.1701177319
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Mon, 28 Mar 2022 12:25:50 GMT
accept-ranges: bytes
content-length: 18991
cache-control: max-age=31536000
expires: Wed, 27 Nov 2024 13:15:15 GMT
vary: User-Agent
content-type: image/png
date: Tue, 28 Nov 2023 13:15:15 GMT
server: Apache
X-Firefox-Spdy: h2
region1.analytics.google.com/g/collect?v=2&tid=G-9P2VHMGWM2>m=45je3b81v896390948&_p=1701177318883&_gaz=1&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1512533228.1701177319&ul=en-us&sr=1280x1024&_eu=AAAI&_s=1&sid=1701177319&sct=1&seg=0&dl=https%3A%2F%2Fwww.oqily.com%2Findex.php%3Froute%3Dproduct%2Fsearch%26search%3Dsafe%3Fe%3Dindex%26tcMAWmS%3D1701177309%26description%3Dtrue&dt=%D8%A8%D8%AD%D8%AB%20-%20safe%3Fe%3Dindex&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=2748
216.239.32.36204 No Content 0 B URL POST HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-9P2VHMGWM2>m=45je3b81v896390948&_p=1701177318883&_gaz=1&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1512533228.1701177319&ul=en-us&sr=1280x1024&_eu=AAAI&_s=1&sid=1701177319&sct=1&seg=0&dl=https%3A%2F%2Fwww.oqily.com%2Findex.php%3Froute%3Dproduct%2Fsearch%26search%3Dsafe%3Fe%3Dindex%26tcMAWmS%3D1701177309%26description%3Dtrue&dt=%D8%A8%D8%AD%D8%AB%20-%20safe%3Fe%3Dindex&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=2748
IP 216.239.32.36:443
Requested by https://www.oqily.com/index.php?route=product/search&search=safe?e=index&tcMAWmS=1701177309&description=true
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-9P2VHMGWM2>m=45je3b81v896390948&_p=1701177318883&_gaz=1&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1512533228.1701177319&ul=en-us&sr=1280x1024&_eu=AAAI&_s=1&sid=1701177319&sct=1&seg=0&dl=https%3A%2F%2Fwww.oqily.com%2Findex.php%3Froute%3Dproduct%2Fsearch%26search%3Dsafe%3Fe%3Dindex%26tcMAWmS%3D1701177309%26description%3Dtrue&dt=%D8%A8%D8%AD%D8%AB%20-%20safe%3Fe%3Dindex&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=2748 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.oqily.com
DNT: 1
Connection: keep-alive
Referer: https://www.oqily.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.oqily.com
date: Tue, 28 Nov 2023 13:15:16 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
embed.tawk.to/_s/v4/app/6549ac0173e/js/twk-chunk-2d0b383d.js
104.22.25.131 42 kB URL embed.tawk.to/_s/v4/app/6549ac0173e/js/twk-chunk-2d0b383d.js
IP 104.22.25.131:0
File type ASCII text, with very long lines (699), with no line terminators
Hash 838903127a65ec440893b4945c40ca4a
827f3e5341f56fa4473d53b788af41ec6bf21b8b
89f08c4a66c9a737c6155b8313e87b36687fe65bfc9a1ba1783aeace487bcde3
GET /_s/v4/app/6549ac0173e/js/twk-chunk-2d0b383d.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.oqily.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 28 Nov 2023 13:15:20 GMT
content-type: application/javascript
last-modified: Tue, 07 Nov 2023 03:18:38 GMT
etag: W/"838903127a65ec440893b4945c40ca4a"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 551154
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82d2e10cbca5568a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
va.tawk.to/v1/session/start
104.22.25.131 44 kB URL va.tawk.to/v1/session/start
IP 104.22.25.131:0
Hash b38a62a8f73998a6452f0a41fca0bdf9
a6c4fbd10d55db46cd5698cf8cc1c17012ad1430
8c28e6e189bbfade12771fb2f8be2d0c8c9ac5e6fabb1c647b8d5a961723ddb1
OPTIONS /v1/session/start HTTP/1.1
Host: va.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.oqily.com/
Origin: https://www.oqily.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 28 Nov 2023 13:15:17 GMT
x-served-by: visitor-application-preemptive-j43m
access-control-allow-origin: https://www.oqily.com
access-control-allow-credentials: true
access-control-allow-methods: POST,OPTIONS
access-control-allow-headers: content-type,x-tawk-token
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: DYNAMIC
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82d2e0f9c9ceb512-OSL
alt-svc: h3=":443"; ma=86400
vsa35.tawk.to/s/?k=6565e7e75625d7d34ebe0ed3&cver=0&pop=false&asver=28047&tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI1YjI5NGNhMmViYThjZDMxMjVlMmZkOTAiLCJ2aWQiOiI1YjI5NGNhMmViYThjZDMxMjVlMmZkOTAtVGNjV29CdGd2ODVyS1BoV2tNWEsyIiwic2lkIjoiNjU2NWU3ZTc1NjI1ZDdkMzRlYmUwZWQzIiwiaWF0IjoxNzAxMTc3MzIwLCJleHAiOjE3MDExNzkxMjAsImp0aSI6IkNWa0lIVU96blUyRDJFY25MaFNlciJ9.dVDcR2CGUgfBGPE2vWLzKQKVqoJbE05jS68pT1UoaBUI5AiXLaOh-SNS7tR_0Lfb7X9B7XxEbO2liLWnbxsyFA&EIO=3&transport=websocket&__t=OmM4VDD
104.22.24.131 0 B URL vsa35.tawk.to/s/?k=6565e7e75625d7d34ebe0ed3&cver=0&pop=false&asver=28047&tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI1YjI5NGNhMmViYThjZDMxMjVlMmZkOTAiLCJ2aWQiOiI1YjI5NGNhMmViYThjZDMxMjVlMmZkOTAtVGNjV29CdGd2ODVyS1BoV2tNWEsyIiwic2lkIjoiNjU2NWU3ZTc1NjI1ZDdkMzRlYmUwZWQzIiwiaWF0IjoxNzAxMTc3MzIwLCJleHAiOjE3MDExNzkxMjAsImp0aSI6IkNWa0lIVU96blUyRDJFY25MaFNlciJ9.dVDcR2CGUgfBGPE2vWLzKQKVqoJbE05jS68pT1UoaBUI5AiXLaOh-SNS7tR_0Lfb7X9B7XxEbO2liLWnbxsyFA&EIO=3&transport=websocket&__t=OmM4VDD
IP 104.22.24.131:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s/?k=6565e7e75625d7d34ebe0ed3&cver=0&pop=false&asver=28047&tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI1YjI5NGNhMmViYThjZDMxMjVlMmZkOTAiLCJ2aWQiOiI1YjI5NGNhMmViYThjZDMxMjVlMmZkOTAtVGNjV29CdGd2ODVyS1BoV2tNWEsyIiwic2lkIjoiNjU2NWU3ZTc1NjI1ZDdkMzRlYmUwZWQzIiwiaWF0IjoxNzAxMTc3MzIwLCJleHAiOjE3MDExNzkxMjAsImp0aSI6IkNWa0lIVU96blUyRDJFY25MaFNlciJ9.dVDcR2CGUgfBGPE2vWLzKQKVqoJbE05jS68pT1UoaBUI5AiXLaOh-SNS7tR_0Lfb7X9B7XxEbO2liLWnbxsyFA&EIO=3&transport=websocket&__t=OmM4VDD HTTP/1.1
Host: vsa35.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://www.oqily.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: c3aNch3GRDcetJHH6k3vtg==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Tue, 28 Nov 2023 13:15:21 GMT
Connection: upgrade
upgrade: websocket
sec-websocket-accept: ExDpyGY0C5S0233C5iyBHYTblbU=
sec-websocket-extensions: permessage-deflate
strict-transport-security: max-age=0; includeSubDomains; preload
CF-Cache-Status: DYNAMIC
X-Content-Type-Options: nosniff
Server: cloudflare
CF-RAY: 82d2e10d4d5c56a8-OSL
alt-svc: h3=":443"; ma=86400
region1.analytics.google.com/g/collect?v=2&tid=G-9P2VHMGWM2>m=45je3b81v896390948&_p=1701177318883&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1512533228.1701177319&ul=en-us&sr=1280x1024&_eu=AEAI&_s=2&sid=1701177319&sct=1&seg=0&dl=https%3A%2F%2Fwww.oqily.com%2Findex.php%3Froute%3Dproduct%2Fsearch%26search%3Dsafe%3Fe%3Dindex%26tcMAWmS%3D1701177309%26description%3Dtrue&dt=%D8%A8%D8%AD%D8%AB%20-%20safe%3Fe%3Dindex&en=view_search_results&ep.search_term=safe%3Fe%3Dindex&tfd=7757
216.239.32.36 0 B URL region1.analytics.google.com/g/collect?v=2&tid=G-9P2VHMGWM2>m=45je3b81v896390948&_p=1701177318883&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1512533228.1701177319&ul=en-us&sr=1280x1024&_eu=AEAI&_s=2&sid=1701177319&sct=1&seg=0&dl=https%3A%2F%2Fwww.oqily.com%2Findex.php%3Froute%3Dproduct%2Fsearch%26search%3Dsafe%3Fe%3Dindex%26tcMAWmS%3D1701177309%26description%3Dtrue&dt=%D8%A8%D8%AD%D8%AB%20-%20safe%3Fe%3Dindex&en=view_search_results&ep.search_term=safe%3Fe%3Dindex&tfd=7757
IP 216.239.32.36:0
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-9P2VHMGWM2>m=45je3b81v896390948&_p=1701177318883&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1512533228.1701177319&ul=en-us&sr=1280x1024&_eu=AEAI&_s=2&sid=1701177319&sct=1&seg=0&dl=https%3A%2F%2Fwww.oqily.com%2Findex.php%3Froute%3Dproduct%2Fsearch%26search%3Dsafe%3Fe%3Dindex%26tcMAWmS%3D1701177309%26description%3Dtrue&dt=%D8%A8%D8%AD%D8%AB%20-%20safe%3Fe%3Dindex&en=view_search_results&ep.search_term=safe%3Fe%3Dindex&tfd=7757 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.oqily.com
DNT: 1
Connection: keep-alive
Referer: https://www.oqily.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/3 204 No Content
access-control-allow-origin: https://www.oqily.com
date: Tue, 28 Nov 2023 13:15:21 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.oqily.com/catalog/view/javascript/so_countdown/css/style.css
185.160.67.92200 OK 1.8 kB URL GET HTTP/2 www.oqily.com/catalog/view/javascript/so_countdown/css/style.css
IP 185.160.67.92:443
Requested by https://www.oqily.com/index.php?route=product/search&search=safe?e=index&tcMAWmS=1701177309&description=true
Certificate IssuercPanel, Inc.
Subjectoqily.com
FingerprintE6:E1:60:D2:04:45:0F:40:AA:28:60:75:2F:38:6D:33:CD:2C:04:11
ValiditySun, 22 Oct 2023 00:00:00 GMT - Sat, 20 Jan 2024 23:59:59 GMT
File type ASCII text, with very long lines (1970), with no line terminators
Hash e312c7e46d689c73f02f94fb828a3552
bcea3727f90b03ad07173016af1b189df76ad324
188a1f3c9ee6270b47379774767176c8619d06abc3246d36f453494334ae1cd6
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
Quad9 DNS malicious Sinkholed
GET /catalog/view/javascript/so_countdown/css/style.css HTTP/1.1
Host: www.oqily.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.oqily.com/index.php?route=product/search&search=safe?e=index&tcMAWmS=1701177309&description=true
Cookie: language=ar; currency=SAR; OCSESSID=4f19be97acf9e6b109ce239ca8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Wed, 06 Jun 2018 17:33:45 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Wed, 27 Nov 2024 13:15:14 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 617
content-type: text/css
date: Tue, 28 Nov 2023 13:15:14 GMT
server: Apache
X-Firefox-Spdy: h2
embed.tawk.to/_s/v4/app/6549ac0173e/js/twk-chunk-2d0b9454.js
104.22.25.131200 OK 535 B URL GET HTTP/3 embed.tawk.to/_s/v4/app/6549ac0173e/js/twk-chunk-2d0b9454.js
IP 104.22.25.131:443
Requested by https://www.oqily.com/index.php?route=product/search&search=safe?e=index&tcMAWmS=1701177309&description=true
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (557), with no line terminators
Hash 3f4a6312d60391bda06462d7321ffcdc
9f09295297840a36d2ac95344b39b0af1a729f82
28d61df22c079e51c45b6f87db516f03cb85cf3f2c3a970be369944c3f91bcf1
GET /_s/v4/app/6549ac0173e/js/twk-chunk-2d0b9454.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.oqily.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 28 Nov 2023 13:15:20 GMT
content-type: application/javascript
last-modified: Tue, 07 Nov 2023 03:18:38 GMT
etag: W/"c506281367048d4a134c9affbc68c8c6"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 459702
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82d2e10cdcd0568a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
embed.tawk.to/_s/v4/app/6549ac0173e/js/twk-chunk-vendors.js
104.22.25.131200 OK 217 kB URL GET HTTP/2 embed.tawk.to/_s/v4/app/6549ac0173e/js/twk-chunk-vendors.js
IP 104.22.25.131:443
Requested by https://www.oqily.com/index.php?route=product/search&search=safe?e=index&tcMAWmS=1701177309&description=true
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
Size 217 kB (217124 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_s/v4/app/6549ac0173e/js/twk-chunk-vendors.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.oqily.com
DNT: 1
Connection: keep-alive
Referer: https://www.oqily.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 13:15:15 GMT
content-type: application/javascript
last-modified: Tue, 07 Nov 2023 03:18:38 GMT
etag: W/"86b32a04921a039ace69980bacd1b639"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 73582
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82d2e0eef8b10b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
embed.tawk.to/_s/v4/app/6549ac0173e/js/twk-runtime.js
104.22.25.131200 OK 2.3 kB URL GET HTTP/2 embed.tawk.to/_s/v4/app/6549ac0173e/js/twk-runtime.js
IP 104.22.25.131:443
Requested by https://www.oqily.com/index.php?route=product/search&search=safe?e=index&tcMAWmS=1701177309&description=true
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (2349), with no line terminators
Hash 08b902c691d4caf60c10d21ed6618c8f
50e650828e6a53bc1b074f5838d0f3eb338a81db
58775eee253402af6ada3b2dcff3c6bbba198b18ba11b00653a8dcc8d478875b
GET /_s/v4/app/6549ac0173e/js/twk-runtime.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.oqily.com
DNT: 1
Connection: keep-alive
Referer: https://www.oqily.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 13:15:15 GMT
content-type: application/javascript
last-modified: Tue, 07 Nov 2023 03:18:38 GMT
etag: W/"2369bd11bd41e47e53691438c8e45c5b"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 73583
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82d2e0ef08c00b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
va.tawk.to/v1/widget-settings?propertyId=5b294ca2eba8cd3125e2fd90&widgetId=default&sv=undefined
104.22.25.131200 OK 2.6 kB URL GET HTTP/3 va.tawk.to/v1/widget-settings?propertyId=5b294ca2eba8cd3125e2fd90&widgetId=default&sv=undefined
IP 104.22.25.131:443
Requested by https://www.oqily.com/index.php?route=product/search&search=safe?e=index&tcMAWmS=1701177309&description=true
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type troff or preprocessor input, Unicode text, UTF-8 text, with very long lines (2723), with no line terminators
Hash ba6dfb6eebb3e2c093a68f5f1944fe88
28972b6dfc4693925599f94f6fab02ec65b2ec61
92485a19fbfc8d5851626cb653d930935428b5a10d97b461f570f5e3d665efef
GET /v1/widget-settings?propertyId=5b294ca2eba8cd3125e2fd90&widgetId=default&sv=undefined HTTP/1.1
Host: va.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.oqily.com/
Origin: https://www.oqily.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 28 Nov 2023 13:15:17 GMT
content-type: application/json
x-served-by: visitor-application-preemptive-sg24
access-control-allow-origin: *
access-control-allow-methods: GET,OPTIONS
access-control-allow-headers: content-type,x-tawk-token
cache-control: public, max-age=7200, s-maxage=1800
etag: W/"2-44-0"
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 446
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82d2e0f9c9cbb512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
embed.tawk.to/_s/v4/app/6549ac0173e/js/twk-chunk-f1565420.js
104.22.25.131200 OK 11 kB URL GET HTTP/3 embed.tawk.to/_s/v4/app/6549ac0173e/js/twk-chunk-f1565420.js
IP 104.22.25.131:443
Requested by https://www.oqily.com/index.php?route=product/search&search=safe?e=index&tcMAWmS=1701177309&description=true
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (10992), with no line terminators
Hash e66b5b5406f1411c203d6a14b3268446
16d128903623ff99706f40ec7a35d85d44caff21
1221dfd515b54f32dc7d169eb8c5bbc892d85c310ef286aa9b80eeeef2cf9643
GET /_s/v4/app/6549ac0173e/js/twk-chunk-f1565420.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.oqily.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 28 Nov 2023 13:15:20 GMT
content-type: application/javascript
last-modified: Tue, 07 Nov 2023 03:18:38 GMT
etag: W/"e66b5b5406f1411c203d6a14b3268446"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 543841
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82d2e10cac95568a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
embed.tawk.to/_s/v4/app/6549ac0173e/js/twk-chunk-4fe9d5dd.js
104.22.25.131200 OK 906 B URL GET HTTP/3 embed.tawk.to/_s/v4/app/6549ac0173e/js/twk-chunk-4fe9d5dd.js
IP 104.22.25.131:443
Requested by https://www.oqily.com/index.php?route=product/search&search=safe?e=index&tcMAWmS=1701177309&description=true
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (956), with no line terminators
Hash 7b31fafdf609238b7f4574e44057af5b
f4f849145e5beaff38b9e47e3c5c3e7e4945d70a
2b7dfb20a5ee49b709a4adc3412bd7d5e00539c1ef93a1a58c4ec58816c81ed3
GET /_s/v4/app/6549ac0173e/js/twk-chunk-4fe9d5dd.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.oqily.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 28 Nov 2023 13:15:20 GMT
content-type: application/javascript
last-modified: Tue, 07 Nov 2023 03:18:38 GMT
etag: W/"1c5ecf371149feca23bd895ba9dfec4d"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 117594
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82d2e10cccaa568a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
embed.tawk.to/_s/v4/app/6549ac0173e/css/max-widget.css
104.22.25.131200 OK 78 kB URL GET HTTP/3 embed.tawk.to/_s/v4/app/6549ac0173e/css/max-widget.css
IP 104.22.25.131:443
Requested by https://www.oqily.com/index.php?route=product/search&search=safe?e=index&tcMAWmS=1701177309&description=true
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash d778223a957b2d3cdc540ff6547c0bfd
6fea621f551d26661f3a87c5d56d66b15afd0aca
799596c2833003b4bd92b1454ba52de29fb4fd07edb07648d64e567b0d293f85
GET /_s/v4/app/6549ac0173e/css/max-widget.css HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 28 Nov 2023 13:15:20 GMT
content-type: text/css
cache-control: public, max-age=2592000, immutable
cf-bgj: minify
cf-polished: origSize=78180
access-control-allow-origin: *
etag: W/"0ab357443b798b4a1db6c4f22b1590f4"
last-modified: Tue, 07 Nov 2023 03:18:37 GMT
strict-transport-security: max-age=0; includeSubDomains; preload
x-cache-status: HIT
cf-cache-status: HIT
age: 285018
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82d2e10dcdfe568a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
cdn.jsdelivr.net/emojione/2.2.7/lib/js/emojione.min.js
151.101.193.229200 OK 303 kB URL GET HTTP/2 cdn.jsdelivr.net/emojione/2.2.7/lib/js/emojione.min.js
IP 151.101.193.229:443
Requested by https://www.oqily.com/index.php?route=product/search&search=safe?e=index&tcMAWmS=1701177309&description=true
Certificate IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
Size 303 kB (302554 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /emojione/2.2.7/lib/js/emojione.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.oqily.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
etag: W/"49dda-cp9vjKV4fYl0Ow7X6yf9dkBr+YU"
content-encoding: br
accept-ranges: bytes
date: Tue, 28 Nov 2023 13:15:20 GMT
age: 20600213
x-served-by: cache-fra-eddf8230136-FRA, cache-bma1664-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 41275
X-Firefox-Spdy: h2