English

sbjs_migrations

language

consent

cookieconsent_status

_gcl_au

euconsent

sbjs_current_add

_ga_PX07WTYMBJ

sbjs_current

sbjs_udata

checkout_continuity_service

gdpr_consent

b242ga_track_id

leadCatcherUpTime

OCSESSID

currency

sbjs_session

sbjs_first_add

sbjs_first

The domain name 'top3dshop.com' uses the commercial generic top-level domain (.com). Its registrable label 'top3dshop' stretches across 9 characters split between 2 vowels and 6 consonants; bonus characters include one digit. Word splitting yields 4 words: top, 3, d, shop. Expect 2 characters per word on average. No strong language cues emerged from the frequency lists.

href_redirect

code

change_country

redirect_route

redirect_query

redirect_ssl

en-us

es-es

https://top3dshop.com/index.php?route=checkout/checkout

https://top3dshop.com/3d-printers/commercial-3d-printers/

https://top3dshop.com/3d-printers/commercial-3d-printers/professional-3d-printers/

https://top3dshop.com/3d-printers/commercial-3d-printers/industrial-3d-printers/

https://top3dshop.com/3d-printer-supplies-and-accessories/

https://top3dshop.com/3d-printers/filter/application/for-prototyping/

https://top3dshop.com/3d-printers/filter/application/for-end-use-parts/

https://top3dshop.com/3d-printers/filter/application/for-education/

https://top3dshop.com/3d-printers/filter/application/for-dentistry/

https://top3dshop.com/3d-printers/filter/application/for-jewelry/

https://top3dshop.com/3d-printers/filter/application/for-cosplay/

https://top3dshop.com/3d-printers/filter/application/for-automotive-/

https://top3dshop.com/3d-printers/filter/application/for-aerospace/

https://top3dshop.com/3d-printers/p-fusion3/

https://top3dshop.com/3d-printers/p-anisoprint/

https://top3dshop.com/3d-scanner/commercial-3d-scanners/

https://top3dshop.com/3d-scanner/commercial-3d-scanners/professional-3d-scanners/

https://top3dshop.com/3d-scanner/commercial-3d-scanners/industrial-3d-scanners/

https://top3dshop.com/3d-scanner/filter/technology/structured-light/

https://top3dshop.com/3d-scanner/filter/scope/for-full-body-scanning/

https://top3dshop.com/3d-scanner/filter/scope/for-foot-scanning/

https://top3dshop.com/3d-scanner/filter/scope/for-jewelry/

https://top3dshop.com/3d-scanner/s-scantech/

https://top3dshop.com/3d-scanner/s-matter-and-form/

https://top3dshop.com/robots/collaborative-robots/

https://top3dshop.com/robots/educational-robots/

https://top3dshop.com/robots/filter/elephant-robotics/

https://top3dshop.com/3d-printer-filaments/

https://top3dshop.com/3d-printer-filaments/abs-filament/

https://top3dshop.com/3d-printer-filaments/pla-filament/

https://top3dshop.com/3d-printer-filaments/petg-filament/

https://top3dshop.com/3d-printer-filaments/filter/filament-type/nylon/

https://top3dshop.com/3d-printer-filaments/filter/filament-type/asa/

https://top3dshop.com/3d-printer-filaments/carbon-fiber-filament/

https://top3dshop.com/3d-printer-filaments/filter/filament-type/tpu/

https://top3dshop.com/3d-printer-filaments/filter/filament-type/pva/

https://top3dshop.com/3d-printer-filaments/filter/filament-type/hips/

https://top3dshop.com/3d-printer-filaments/peek-filament/

https://top3dshop.com/3d-printer-filaments/black-color/

https://top3dshop.com/3d-printer-filaments/white-color/

https://top3dshop.com/3d-printer-filaments/blue-color/

https://top3dshop.com/3d-printer-filaments/green-color/

https://top3dshop.com/3d-printer-filaments/grey-color/

html/ff/84/ff84aa29-7667-4d6a-838a-d457244603e7.html.gz

report-uri https://94ca3ba57026f9fe761cfa13ef32e2c8.report-uri.io/r/default/csp/reportOnly; frame-ancestors *.reviews.co.uk *.reviews.io localhost:* pingdom.com http://*.pingdom.com https://*.pingdom.com http://*.top3dshop.com http://*.dash.reviews.io http://top3dshop.com http://dash.reviews.io https://*.top3dshop.com https://*.dash.reviews.io https://top3dshop.com https://dash.reviews.io

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:138:0

Reviews Badge Ribbon Widget

jivo_container

Jivochat

e26f0afb4748aa4fc0cf453dda495c352226721d46c6491cab5420a348125581

3a6e01208b42520a3e3ef5700b731d62633513f1f40378127aada936030c2ac4

8941183a9488a1e269e52ffb1b3a637c37a06194ddc1594023fa0b57349bf1c9

1d5c74603fb2f5688e9d72735db6212894fb23512b43578d482c89ac0ae44266

5d9232ed77bf06d6b9ab630bbaa7b90cbcfac157d2772db6c1c017fd2e78b7c2

8275d13b161be4671d1fcdd248685c2c0a5c07f1992109af74a983cb907b63fd

cf521fcbe4d9578f7a665d3408f98b3fc427e824c66227a8358f91fae7de5eb6

84d0402e37ada180964c063cc4f65b7eb088e3a6db85695551f203d2e003fdea

08bcdebd6fcf8b513843d67e650670ac947193b2fd53d2a0cccd04b9aec14054

f51833cb66db20b12dbc7130c33708ae4677cf87b25ddcca1dd259febe90e153

4b52781951c70cc8a2ae2afdaac5d673c656c3be0f1c769fa6c1e9e4f5ed8d3b

5c935c15ccdfeb51a14eb9e404f6ffe1cb053f695935c0591756c860d8c47832

39ea5f5180eb761188350fe5c4683140274f9949e22c5120ff452306b2d03bcf

0de8d0c5bd876277136806b5d819cdce3dd3dbdafc89dacc85085166ea561009

3c80302635fda73fb21fe9f9f3b92c69920a30ca3e4f5f45a88552c02113349f

254df62d0580c9bbe48cc12ef97cb3cf46d77fe304ea0c1d02d07baaa3c59e51

dd944bb620041e3946b0544663cffa58fa35ac2b9152463a8d10cafdd08ebdbd

ae2acf0b51509818260a7230a27c1429bba878812bc3b033700f1ed71b5ca6a8

65e156b7dae34d0f1ff834e7794839d0ee7bd3f4793210b086ccaacfc80a67b9

c5453d5d002d12875e6765765aeb86138b0a55c02320a6e7e6ca5681da835310

0aa4e39c7533fcefaee3db95f5d68964cb8ad0831d575e15b32dca211523d93c

9ebc3ad93f8a054e1519c0981a2e6d2960ee3ea8a466836dbeb86eeda437740a

d2552bfc5d57c1099613fbe6e9a780e4e7c31c4a89a5129a007ec3e8e11e8a07

fb8ad8f55baec565f6b9197c3aa21fa8a9ec47aa2b919068aeafdd36cbed1064

Axios NPM package 0.21.0 contains a Server-Side Request Forgery (SSRF) vulnerability

Axios is vulnerable to Inefficient Regular Expression Complexity

Axios Cross-Site Request Forgery Vulnerability

axios Requests Vulnerable To Possible SSRF and Credential Leakage via Absolute URL

## Summary

When Axios runs on Node.js and is given a URL with the `data:` scheme, it does not perform HTTP. Instead, its Node http adapter decodes the entire payload into memory (`Buffer`/`Blob`) and returns a synthetic 200 response.
This path ignores `maxContentLength` / `maxBodyLength` (which only protect HTTP responses), so an attacker can supply a very large `data:` URI and cause the process to allocate unbounded memory and crash (DoS), even if the caller requested `responseType: 'stream'`.

# Denial of Service via **proto** Key in mergeConfig

### Summary

The `mergeConfig` function in axios crashes with a TypeError when processing configuration objects containing `__proto__` as an own property. An attacker can trigger this by providing a malicious configuration object created via `JSON.parse()`, causing complete denial of service.

### Details

The vulnerability exists in `lib/core/mergeConfig.js` at lines 98-101:

```javascript
utils.forEach(Object.keys({ ...config1, ...config2 }), function computeConfigValue(prop) {
  const merge = mergeMap[prop] || mergeDeepProperties;
  const configValue = merge(config1[prop], config2[prop], prop);
  (utils.isUndefined(configValue) && merge !== mergeDirectKeys) || (config[prop] = configValue);
});
```

When `prop` is `'__proto__'`:

1. `JSON.parse('{"__proto__": {...}}')` creates an object with `__proto__` as an own enumerable property
2. `Object.keys()` includes `'__proto__'` in the iteration
3. `mergeMap['__proto__']` performs prototype chain lookup, returning `Object.prototype` (truthy object)
4. The expression `mergeMap[prop] || mergeDeepProperties` evaluates to `Object.prototype`
5. `Object.prototype(...)` throws `TypeError: merge is not a function`

The `mergeConfig` function is called by:

- `Axios._request()` at `lib/core/Axios.js:75`
- `Axios.getUri()` at `lib/core/Axios.js:201`
- All HTTP method shortcuts (`get`, `post`, etc.) at `lib/core/Axios.js:211,224`

### PoC

```javascript
import axios from "axios";

const maliciousConfig = JSON.parse('{"__proto__": {"x": 1}}');
await axios.get("https://httpbin.org/get", maliciousConfig);
```

**Reproduction steps:**

1. Clone axios repository or `npm install axios`
2. Create file `poc.mjs` with the code above
3. Run: `node poc.mjs`
4. Observe the TypeError crash

**Verified output (axios 1.13.4):**

```
TypeError: merge is not a function
    at computeConfigValue (lib/core/mergeConfig.js:100:25)
    at Object.forEach (lib/utils.js:280:10)
    at mergeConfig (lib/core/mergeConfig.js:98:9)
```

**Control tests performed:**
| Test | Config | Result |
|------|--------|--------|
| Normal config | `{"timeout": 5000}` | SUCCESS |
| Malicious config | `JSON.parse('{"__proto__": {"x": 1}}')` | **CRASH** |
| Nested object | `{"headers": {"X-Test": "value"}}` | SUCCESS |

**Attack scenario:**
An application that accepts user input, parses it with `JSON.parse()`, and passes it to axios configuration will crash when receiving the payload `{"__proto__": {"x": 1}}`.

### Impact

**Denial of Service** - Any application using axios that processes user-controlled JSON and passes it to axios configuration methods is vulnerable. The application will crash when processing the malicious payload.

Affected environments:

- Node.js servers using axios for HTTP requests
- Any backend that passes parsed JSON to axios configuration

This is NOT prototype pollution - the application crashes before any assignment occurs.

Versions before 1.6.8 depends on follow-redirects before 1.15.6 which could leak the proxy authentication credentials

779764ea1554f7093fb0df30344da2eba2df6b4dea64bd8b1bda095d838fc882

0df5c91ce88af2496893224212623b7da976e04cf4477730db3e1315d576db17

75b7e2b33127da528e726d4336359ffb0647f575ca55d5491cd07c31f0669b78

3b374f20d9a00f31113d00c8ceb68c74a3bef557e30910dbf9ca25537f751f93

7b422802667c0d671dd4c8bcc7d60a10812681c06a31bf0a54d85c299196eb15

24e03e8f733cfb93042bd5c9e090319a623ad31fe297333e2547440c043bf7c9

9d37bd056c1a23ede7288f557eb7050212cab4965a726610fb7f7d84b9ae61e9

5c2e01eb28d4cfb9bd44dc430060f5bdde52b87342c466bc50d759b15fbd528b

dc227dde5757cb9766718ed323c3359d4645ee203e87bc248e92def66a1bc9f4

43113a8a7534f23dc47435c2bcb1e6937fce7c9b0076051a371c85033386854e

15b3a5aefba9eab5b10689b4461f5a8b78d464ef3bd56c13eb2d68f5869f4342

6a47d057d49eefce4b5013c4221fa9e2f0fc60e8b0565cc3a788e4d8a23122ee

70e0579984f52b668e77ff7cfd78bc289fc5060f0b1978bc9bc325d1c563f252

68140dbcc9c5d2fa87a920341df766c8d8516c0758f18166b59ccd61ba19cd29

245bf8af641f8bc9f9738450dfb27d0b941cab77278987f6f1726e654db43506

dd630e6ee6d90c411e910e0d2eb53a27bd102c96783a5198788f2899be328fe6

Unitree G1 Humanoid Robot by Unitree Robotics

user-scalable=no, width=device-width, initial-scale=1.0, maximum-scale=1

viewport

Explore our selection of humanoid robots for sale, including Unitree G1 and Unitree H1. Perfect for R&D, education, and home assistants. Discover robotics innovation today!

description

Humanoid Robots for Sale: Unitree Robots with AI

https://top3dshop.com/image/cache/catalog/logo-300x300.png

https://top3dshop.com/robots/humanoid-robots/

twitter:card

twitter:title

twitter:description

twitter:image

apple-mobile-web-app-capable

apple-mobile-web-app-status-bar-style

apple-mobile-web-app-title

msapplication-TileColor

What is a humanoid robot? A humanoid robot is a complex artificial machine with a bipedal, human-like shape, designed to resemble and act like humans, typically featuring a head, torso, arms, and legs. These general-purpose robots are built for tasks in environments designed for humans,

https://top3dshop.com/image/catalog/logo.png

Squarespace Domains II LLC

TOP3DSHOP.COM

Abuse

Google LLC

GOOGLE


      window.dataLayer = window.dataLayer || [];
      function gtag(){dataLayer.push(arguments);}

      // Google Consent Mode v2 - Set defaults to 'denied' for GDPR compliance
      // These will be updated to 'granted' when user accepts via consent banner
      gtag('consent', 'default', {
        'analytics_storage': localStorage.getItem('silktideCookieChoice_analytics') === 'true' ? 'granted' : 'denied',
        'ad_storage': localStorage.getItem('silktideCookieChoice_advertising') === 'true' ? 'granted' : 'denied',
        'ad_user_data': localStorage.getItem('silktideCookieChoice_advertising') === 'true' ? 'granted' : 'denied',
        'ad_personalization': localStorage.getItem('silktideCookieChoice_advertising') === 'true' ? 'granted' : 'denied',
        'functionality_storage': 'granted',
        'personalization_storage': 'granted',
        'security_storage': 'granted',
      });
    

(function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start':
          new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],
        j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=
        'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);
      })(window,document,'script','dataLayer','GTM-MR5VT95H');

// Wait for consent before loading third-party scripts (silktide-consent-manager)
(function() {
 let consentNecessaryScriptsLoaded = false;

 function loadConsentNecessaryScripts() {
 if (consentNecessaryScriptsLoaded) {
 return;
 }
 consentNecessaryScriptsLoaded = true

 // Affirm
 window._affirm_config = {
 public_api_key : "K3PTEG0AMD3ROOCS",
 script : "https://cdn1.affirm.com/js/v2/affirm.js"
 };
 (function(l,g,m,e,a,f,b){var d,c=l[m]||{},h=document.createElement(f),n=document.getElementsByTagName(f)[0],k=function(a,b,c){return function(){a[b]._.push([c,arguments])}};c[e]=k(c,e,"set");d=c[e];c[a]={};c[a]._=[];d._=[];c[a][b]=k(c,a,b);a=0;for(b="set add save post open empty reset on off trigger ready setProduct".split(" ");a<b.length;a++)d[b[a]]=k(c,e,b[a]);a=0;for(b=["get","token","url","items"];a<b.length;a++)d[b[a]]=function(){};h.async=!0;h.src=g[f];n.parentNode.insertBefore(h,n);delete g[f];d(g);l[m]=c})(window,_affirm_config,"affirm","checkout","ui","script","ready");
 }

 window.addEventListener('consentNecessaryAccepted', loadConsentNecessaryScripts);
})();


$( document ).ready(function() {
ratingSnippet("ruk_rating_snippet",{
store: "top3dshop.com",
color: "#f47e27",
linebreak: true,
text: "Reviews"
});
});



		$(document).ready(function () {
      $('.direction__here, .direction__go').on('click', function (e) {
        e.preventDefault();
        var local_store = $(this).data('local-store');
        $('#form-country input[name=\'code\']').val(local_store);
        $('#form-country').submit();
      });

		  $('#form-country .country-select').on('click', function (e) {
			  e.preventDefault();

        $('#form-country input[name=\'code\']').val($(this).attr('name'));

        $('#form-country').submit();
		  });
		});
	


          reviewsBadgeRibbon("badge-ribbon", {
            store: "top3dshop.com",
            size: "small",
            mono: true
          });
        


$(function() {
	window.optionsOcFilter = {
		mobile: $('.ocfilter-mobile').is(':visible'),
		php: {
			// searchButton : false,
			showPrice    : true,
			showCounter  : true,
			// manualPrice  : false,
			link         : 'https://top3dshop.com/robots/humanoid-robots/',
			path         : '80_123',
			params       : '',
			index        : 'filter_ocfilter'
		},
		text: {
			show_all: 'show all',
			hide    : 'Hide',
			load    : 'Loading...',
			any     : 'All',
			select  : 'Specify options'
		}
	};

  setTimeout(function() {
    $('#ocfilter').ocfilter(window.optionsOcFilter);
  }, 1);

});


$(function(){
 $('table').wrap('<div style="overflow-x: auto"></div>');
 });

Home

Robots

Humanoid Robots


reviewsBadgeRibbon("badge-ribbon-2", {
store: "top3dshop.com",
size: "small",
});


Digital Manufacturing Store Top 3D Shop


// Wait for consent before loading third-party scripts (silktide-consent-manager)
(function() {
  let consentNecessaryScriptsLoaded = false;

  function injectScript(url, id, onLoad, attributes) {
    return new Promise(function(resolve, reject) {
      try {
        const existingScript =
          (id && document.querySelector(`#${id}`)) ||
          document.querySelector(`script[src="${url}"]`);

        if (existingScript) {
          if (onLoad) onLoad();
          resolve(existingScript);
          return;
        }

        const script = document.createElement('script');
        script.src = url;
        script.defer = true;

        if (id) {
          script.id = id;
        }

        if (attributes) {
          Object.keys(attributes).forEach(function(key) {
            script.setAttribute(key, attributes[key]);
          });
        }

        script.addEventListener('load', function() {
          if (onLoad) onLoad();
          resolve(script);
        });

        script.addEventListener('error', function(error) {
          console.error('Failed to load script:', url, error);
          reject(new Error('Failed to load script: ' + url));
        });

        document.body.appendChild(script);
      } catch (error) {
        console.error('Error injecting script:', url, error);
        reject(error);
      }
    });
  }

  function loadConsentNecessaryScripts() {
    if (consentNecessaryScriptsLoaded) {
      return;
    }
    consentNecessaryScriptsLoaded = true

        injectScript('https://static.affiliatly.com/v3/affiliatly.js?affiliatly_code=AF-1056171', 'affiliatly-script')
      .catch(function(error) {
        console.warn('Affiliatly script failed to load');
      });

    injectScript('https://code.jivosite.com/widget/6dhQWOF5VX', 'jivosite-widget-script')
      .catch(function(error) {
        console.warn('Jivo widget script failed to load');
      });

    injectScript('https://na-library.klarnaservices.com/lib.js', 'klarna-library-script', null, {'data-client-id': '70ce45a8-6116-5b88-862b-2e40e272e0ab'})
      .catch(function(error) {
        console.warn('Klarna library script failed to load');
      });

    injectScript(
      'https://67p.b242ga.ru/static/js/b242ga.js?'+(Date.now()/60000|0),
      'b242ga-script',
      function() {
        B242GAInit({
          portal:'https://top3dshop-inc.bitrix24.com/',
          pid:'d54619266a7289d7cabbb6d2012746c6',
          presets:{}
        });
      }
    ).catch(function(error) {
      console.warn('B242GA script failed to load');
    });
      }

  window.addEventListener('consentNecessaryAccepted', loadConsentNecessaryScripts);
})();


Requests	IP Address	Location	AS Autonomous System
15	66.23.231.6	United States	AS19318Interserver, Inc
13	104.18.33.239Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
13	142.251.14.97Google · CDN	United States	AS15169Google LLC
13	142.251.150.119Google · CDN	United States	AS15169Google LLC
13	104.18.33.62Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
67	5	-	-

Security Scan Report: top3dshop.com

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies11

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History