| |  91.241.55.42 | 200 OK | 7.4 kB |
URL User Request GET HTTP/1.1IP91.241.55.42:443 ASN#199242 Malakmadze Web LLC
CertificateIssuerLet's Encrypt Subjectwww.primaveraborsa.shop Fingerprint02:99:35:34:51:01:96:B8:B7:08:25:96:DA:3A:F1:AD:C7:95:92:D0 ValidityTue, 02 Apr 2024 08:02:20 GMT - Mon, 01 Jul 2024 08:02:19 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hashf86ed7bfaee93ce2638160c1fe404621 88cbc1a2dd6b60bbe7a655cb04d48f86f2a9662d 09e4f82da07f3f15d380ea64bdaef48ad3e06b9c44127aa5596564d6cf41d59d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: www.primaveraborsa.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Wed, 08 May 2024 02:33:29 GMT
Content-Type: text/html
Last-Modified: Fri, 29 Mar 2024 15:56:12 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"6606e49c-a1fc"
Expires: Thu, 09 May 2024 02:33:29 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
|
|
| www.primaveraborsa.shop/resources/img/user/user-female.png | 91.241.55.42 | 200 OK | 9.9 kB |
URL GET HTTP/1.1www.primaveraborsa.shop/resources/img/user/user-female.png IP91.241.55.42:443 ASN#199242 Malakmadze Web LLC
Requested byhttps://www.primaveraborsa.shop/ CertificateIssuerLet's Encrypt Subjectwww.primaveraborsa.shop Fingerprint02:99:35:34:51:01:96:B8:B7:08:25:96:DA:3A:F1:AD:C7:95:92:D0 ValidityTue, 02 Apr 2024 08:02:20 GMT - Mon, 01 Jul 2024 08:02:19 GMT
File typePNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced Hash2562d31b12e93395f71726f22befb028 0388d81e642a68da953934da9e95bb56e5410c60 ce00bee45c8123179811e38193619f8a4f7fb8ca7adaf3edcf7981c113b7cd87
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /resources/img/user/user-female.png HTTP/1.1
Host: www.primaveraborsa.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.primaveraborsa.shop/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Wed, 08 May 2024 02:33:30 GMT
Content-Type: image/png
Content-Length: 9894
Last-Modified: Wed, 28 Dec 2022 20:50:46 GMT
Connection: keep-alive
ETag: "63acac26-26a6"
Accept-Ranges: bytes
|
|
| www.primaveraborsa.shop/resources/css/all-build.css?v=451192304202 | 91.241.55.42 | 200 OK | 37 kB |
URL GET HTTP/1.1www.primaveraborsa.shop/resources/css/all-build.css?v=451192304202 IP91.241.55.42:443 ASN#199242 Malakmadze Web LLC
Requested byhttps://www.primaveraborsa.shop/ CertificateIssuerLet's Encrypt Subjectwww.primaveraborsa.shop Fingerprint02:99:35:34:51:01:96:B8:B7:08:25:96:DA:3A:F1:AD:C7:95:92:D0 ValidityTue, 02 Apr 2024 08:02:20 GMT - Mon, 01 Jul 2024 08:02:19 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hashc70594d361246a12d292518786ed9909 40c213ed0ad6b5451446a0b74009ffab36a97faa 37ee786a106fd330e6a570a592c3765825cff4cdfc0cd703558c4fab23079b64
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /resources/css/all-build.css?v=451192304202 HTTP/1.1
Host: www.primaveraborsa.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.primaveraborsa.shop/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Wed, 08 May 2024 02:33:30 GMT
Content-Type: text/css
Last-Modified: Fri, 29 Mar 2024 15:56:12 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"6606e49c-2ddac"
Content-Encoding: gzip
|
|
| www.primaveraborsa.shop/resources/css/home.css?v=451192304202 | 91.241.55.42 | 200 OK | 1.5 kB |
URL GET HTTP/1.1www.primaveraborsa.shop/resources/css/home.css?v=451192304202 IP91.241.55.42:443 ASN#199242 Malakmadze Web LLC
Requested byhttps://www.primaveraborsa.shop/ CertificateIssuerLet's Encrypt Subjectwww.primaveraborsa.shop Fingerprint02:99:35:34:51:01:96:B8:B7:08:25:96:DA:3A:F1:AD:C7:95:92:D0 ValidityTue, 02 Apr 2024 08:02:20 GMT - Mon, 01 Jul 2024 08:02:19 GMT
File typeASCII text, with very long lines (5675), with no line terminators Hash81395b0639a587ace4f02dcc1e369348 9bf6639e10a84ea461fd7bcfb93385d89581b266 a8378e908e5327bd18b4157ccf76ed30a09fac13deaa162a1d75ee177a6bef60
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /resources/css/home.css?v=451192304202 HTTP/1.1
Host: www.primaveraborsa.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.primaveraborsa.shop/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Wed, 08 May 2024 02:33:30 GMT
Content-Type: text/css
Last-Modified: Fri, 29 Mar 2024 15:56:12 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"6606e49c-162b"
Content-Encoding: gzip
|
|
| www.primaveraborsa.shop/resources/css/viewer.css?v=451192304202 | 91.241.55.42 | 200 OK | 1.8 kB |
URL GET HTTP/1.1www.primaveraborsa.shop/resources/css/viewer.css?v=451192304202 IP91.241.55.42:443 ASN#199242 Malakmadze Web LLC
Requested byhttps://www.primaveraborsa.shop/ CertificateIssuerLet's Encrypt Subjectwww.primaveraborsa.shop Fingerprint02:99:35:34:51:01:96:B8:B7:08:25:96:DA:3A:F1:AD:C7:95:92:D0 ValidityTue, 02 Apr 2024 08:02:20 GMT - Mon, 01 Jul 2024 08:02:19 GMT
File typeASCII text, with very long lines (6342), with no line terminators Hashe0a85beea625d97112d8c8228f774add ce06c1cd80ddff4c5fdec51e1314257914d0269b 38d865e5a93ba83899afdd3840bc8c7a43b7918af95222ff6379f2439ba8d7b3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /resources/css/viewer.css?v=451192304202 HTTP/1.1
Host: www.primaveraborsa.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.primaveraborsa.shop/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Wed, 08 May 2024 02:33:30 GMT
Content-Type: text/css
Last-Modified: Wed, 28 Dec 2022 20:50:46 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63acac26-18c6"
Content-Encoding: gzip
|
|
| www.primaveraborsa.shop/resources/img/RapidSSL_SEAL.gif | 91.241.55.42 | 200 OK | 7.6 kB |
URL GET HTTP/1.1www.primaveraborsa.shop/resources/img/RapidSSL_SEAL.gif IP91.241.55.42:443 ASN#199242 Malakmadze Web LLC
Requested byhttps://www.primaveraborsa.shop/ CertificateIssuerLet's Encrypt Subjectwww.primaveraborsa.shop Fingerprint02:99:35:34:51:01:96:B8:B7:08:25:96:DA:3A:F1:AD:C7:95:92:D0 ValidityTue, 02 Apr 2024 08:02:20 GMT - Mon, 01 Jul 2024 08:02:19 GMT
File typeGIF image data, version 89a, 90 x 50 Hash1931d61a7a5c4a5f41e2202367e56c71 1cdff3ebaa351822a827d7a2062f9ad44596ab01 234bafeda944f540c5b76f81c2d11077e445bc4655888dafb1594b380683ddb1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /resources/img/RapidSSL_SEAL.gif HTTP/1.1
Host: www.primaveraborsa.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.primaveraborsa.shop/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Wed, 08 May 2024 02:33:31 GMT
Content-Type: image/gif
Content-Length: 7599
Last-Modified: Wed, 28 Dec 2022 20:50:46 GMT
Connection: keep-alive
ETag: "63acac26-1daf"
Accept-Ranges: bytes
|
|
| www.primaveraborsa.shop/resources/fonts/iconfont.woff2?t=1656495576965 | 91.241.55.42 | 200 OK | 12 kB |
URL GET HTTP/1.1www.primaveraborsa.shop/resources/fonts/iconfont.woff2?t=1656495576965 IP91.241.55.42:443 ASN#199242 Malakmadze Web LLC
Requested byhttps://www.primaveraborsa.shop/ CertificateIssuerLet's Encrypt Subjectwww.primaveraborsa.shop Fingerprint02:99:35:34:51:01:96:B8:B7:08:25:96:DA:3A:F1:AD:C7:95:92:D0 ValidityTue, 02 Apr 2024 08:02:20 GMT - Mon, 01 Jul 2024 08:02:19 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 11884, version 1.0 Hash25ec4ac20928f14223dde5c7a43b841a 896aac0376b275524fede2bf3bd17329468dd888 62e32db44c80e67770d0f2e9a19eedeadf8e6a5cc7df9573309c9c48c753717c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /resources/fonts/iconfont.woff2?t=1656495576965 HTTP/1.1
Host: www.primaveraborsa.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://www.primaveraborsa.shop/resources/css/all-build.css?v=451192304202
Cookie: isFirst=0
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Wed, 08 May 2024 02:33:31 GMT
Content-Type: application/octet-stream
Content-Length: 11884
Last-Modified: Fri, 29 Mar 2024 15:56:12 GMT
Connection: keep-alive
Vary: Accept-Encoding
ETag: "6606e49c-2e6c"
Accept-Ranges: bytes
|
|
| www.primaveraborsa.shop/resources/js/libs/require.min.js?v=451192304202 | 91.241.55.42 | 200 OK | 7.2 kB |
URL GET HTTP/1.1www.primaveraborsa.shop/resources/js/libs/require.min.js?v=451192304202 IP91.241.55.42:443 ASN#199242 Malakmadze Web LLC
Requested byhttps://www.primaveraborsa.shop/ CertificateIssuerLet's Encrypt Subjectwww.primaveraborsa.shop Fingerprint02:99:35:34:51:01:96:B8:B7:08:25:96:DA:3A:F1:AD:C7:95:92:D0 ValidityTue, 02 Apr 2024 08:02:20 GMT - Mon, 01 Jul 2024 08:02:19 GMT
File typeJavaScript source, ASCII text, with very long lines (17977), with no line terminators Hash96b82021931474e69d57e0c3889c9f84 d184e6789a69b76f9f472e424daad1ad1f74daa8 b1b52cb637d48d3b6e552cb851beac966f1ab164cc95cb6c00c7ff1a3b11b152
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /resources/js/libs/require.min.js?v=451192304202 HTTP/1.1
Host: www.primaveraborsa.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.primaveraborsa.shop/
Cookie: isFirst=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Wed, 08 May 2024 02:33:31 GMT
Content-Type: application/javascript
Last-Modified: Tue, 18 Apr 2023 20:24:42 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"643efc8a-4639"
Content-Encoding: gzip
|
|
| www.primaveraborsa.shop/resources/js/apps/home.js?v=451192304202 | 91.241.55.42 | 200 OK | 3.1 kB |
URL GET HTTP/1.1www.primaveraborsa.shop/resources/js/apps/home.js?v=451192304202 IP91.241.55.42:443 ASN#199242 Malakmadze Web LLC
Requested byhttps://www.primaveraborsa.shop/ CertificateIssuerLet's Encrypt Subjectwww.primaveraborsa.shop Fingerprint02:99:35:34:51:01:96:B8:B7:08:25:96:DA:3A:F1:AD:C7:95:92:D0 ValidityTue, 02 Apr 2024 08:02:20 GMT - Mon, 01 Jul 2024 08:02:19 GMT
File typeJavaScript source, ASCII text, with very long lines (11933), with CRLF line terminators Hashe930456280b9ef0fb5c0a8d8a1ca694c a8098cb9894213f66c72d8e8c60b9b28bd1c1e0e 3c207f8b8690ecd5d724330a0a036166358961c85593ef34ecebc050e832b13c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /resources/js/apps/home.js?v=451192304202 HTTP/1.1
Host: www.primaveraborsa.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.primaveraborsa.shop/
Cookie: isFirst=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Wed, 08 May 2024 02:33:31 GMT
Content-Type: application/javascript
Last-Modified: Wed, 27 Mar 2024 18:26:42 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"660464e2-2eac"
Content-Encoding: gzip
|
|
| www.primaveraborsa.shop/resources/fonts/roboto.woff2 | 91.241.55.42 | 200 OK | 16 kB |
URL GET HTTP/1.1www.primaveraborsa.shop/resources/fonts/roboto.woff2 IP91.241.55.42:443 ASN#199242 Malakmadze Web LLC
Requested byhttps://www.primaveraborsa.shop/ CertificateIssuerLet's Encrypt Subjectwww.primaveraborsa.shop Fingerprint02:99:35:34:51:01:96:B8:B7:08:25:96:DA:3A:F1:AD:C7:95:92:D0 ValidityTue, 02 Apr 2024 08:02:20 GMT - Mon, 01 Jul 2024 08:02:19 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15736, version 1.0 Hash479970ffb74f2117317f9d24d9e317fe 81c796737cbe44d4a719777f0aff14b73a3efb1e 48c3fa6f86c54f1d9bb519220713d4b0a1f8cd1a589a3c03b9fa82e98ecb13e3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /resources/fonts/roboto.woff2 HTTP/1.1
Host: www.primaveraborsa.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.primaveraborsa.shop/resources/css/all-build.css?v=451192304202
Cookie: isFirst=0
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Wed, 08 May 2024 02:33:31 GMT
Content-Type: application/octet-stream
Last-Modified: Wed, 28 Dec 2022 20:50:46 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63acac26-3d78"
Content-Encoding: gzip
|
|
| www.primaveraborsa.shop/resources/js/apps/config.js?v=451192304202 | 91.241.55.42 | 200 OK | 117 kB |
URL GET HTTP/1.1www.primaveraborsa.shop/resources/js/apps/config.js?v=451192304202 IP91.241.55.42:443 ASN#199242 Malakmadze Web LLC
Requested byhttps://www.primaveraborsa.shop/ CertificateIssuerLet's Encrypt Subjectwww.primaveraborsa.shop Fingerprint02:99:35:34:51:01:96:B8:B7:08:25:96:DA:3A:F1:AD:C7:95:92:D0 ValidityTue, 02 Apr 2024 08:02:20 GMT - Mon, 01 Jul 2024 08:02:19 GMT
File typeJavaScript source, ASCII text, with very long lines (31976), with CRLF, LF line terminators Size117 kB (117015 bytes) Hash8db6d18f282eea9ddd1ed7de24e677ca b34db9a2a9c717169e933f4a2512179ad0a42e32 1d3c9f563e12151cb5462ec08288be7dd9dc5979c9a1400042a7b201346ed167
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /resources/js/apps/config.js?v=451192304202 HTTP/1.1
Host: www.primaveraborsa.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.primaveraborsa.shop/
Cookie: isFirst=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Wed, 08 May 2024 02:33:31 GMT
Content-Type: application/javascript
Last-Modified: Fri, 29 Mar 2024 15:57:16 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"6606e4dc-53bcc"
Content-Encoding: gzip
|
|
| www.primaveraborsa.shop/pic/favicon.ico | 91.241.55.42 | 404 Not Found | 169 B |
URL GET HTTP/1.1www.primaveraborsa.shop/pic/favicon.ico IP91.241.55.42:443 ASN#199242 Malakmadze Web LLC
Requested byhttps://www.primaveraborsa.shop/ CertificateIssuerLet's Encrypt Subjectwww.primaveraborsa.shop Fingerprint02:99:35:34:51:01:96:B8:B7:08:25:96:DA:3A:F1:AD:C7:95:92:D0 ValidityTue, 02 Apr 2024 08:02:20 GMT - Mon, 01 Jul 2024 08:02:19 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash7693e858b2ca7115ac7fd50df329ab4f f6c47617b9a3e4dc957144fcb29f64a7a8c41da4 5b3fc771f43d8e67bd8957f7b3d9a49eae80b88e43c13cbf16623623e9028375
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pic/favicon.ico HTTP/1.1
Host: www.primaveraborsa.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.primaveraborsa.shop/
Cookie: isFirst=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx/1.14.2
Date: Wed, 08 May 2024 02:33:31 GMT
Content-Type: text/html
Content-Length: 169
Connection: keep-alive
|
|
| www.primaveraborsa.shop/pic/logo.png | 91.241.55.42 | 404 Not Found | 169 B |
URL GET HTTP/1.1www.primaveraborsa.shop/pic/logo.png IP91.241.55.42:443 ASN#199242 Malakmadze Web LLC
Requested byhttps://www.primaveraborsa.shop/ CertificateIssuerLet's Encrypt Subjectwww.primaveraborsa.shop Fingerprint02:99:35:34:51:01:96:B8:B7:08:25:96:DA:3A:F1:AD:C7:95:92:D0 ValidityTue, 02 Apr 2024 08:02:20 GMT - Mon, 01 Jul 2024 08:02:19 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash7693e858b2ca7115ac7fd50df329ab4f f6c47617b9a3e4dc957144fcb29f64a7a8c41da4 5b3fc771f43d8e67bd8957f7b3d9a49eae80b88e43c13cbf16623623e9028375
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pic/logo.png HTTP/1.1
Host: www.primaveraborsa.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.primaveraborsa.shop/
Cookie: isFirst=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx/1.14.2
Date: Wed, 08 May 2024 02:33:31 GMT
Content-Type: text/html
Content-Length: 169
Connection: keep-alive
|
|
| www.primaveraborsa.shop/api/systemconf | 91.241.55.42 | 200 | 2.1 kB |
URL POST HTTP/1.1www.primaveraborsa.shop/api/systemconf IP91.241.55.42:443 ASN#199242 Malakmadze Web LLC
Requested byhttps://www.primaveraborsa.shop/ CertificateIssuerLet's Encrypt Subjectwww.primaveraborsa.shop Fingerprint02:99:35:34:51:01:96:B8:B7:08:25:96:DA:3A:F1:AD:C7:95:92:D0 ValidityTue, 02 Apr 2024 08:02:20 GMT - Mon, 01 Jul 2024 08:02:19 GMT
Hash3ee4daa330e5cdafafcee3bfaac35eb9 98e7720d1fe1c899c5a1260bb8bb084ad928156c 927d7e0955f73e093cbeb432ec1ef4841ac512caf4ad4eff2f2cfbf4d1dfc0cf
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /api/systemconf HTTP/1.1
Host: www.primaveraborsa.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Origin: https://www.primaveraborsa.shop
DNT: 1
Connection: keep-alive
Referer: https://www.primaveraborsa.shop/
Cookie: isFirst=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
HTTP/1.1 200
Server: nginx/1.14.2
Date: Wed, 08 May 2024 02:33:31 GMT
Content-Type: application/json;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Origin: https://www.primaveraborsa.shop
Access-Control-Allow-Credentials: true
Set-Cookie: JSESSIONID=896744BFDE5B4F1BC1403D30D0B44863; Path=/api; HttpOnly
Content-Encoding: gzip
|
|
| www.primaveraborsa.shop/api/get_loginstatus | 91.241.55.42 | 200 | 50 B |
URL POST HTTP/1.1www.primaveraborsa.shop/api/get_loginstatus IP91.241.55.42:443 ASN#199242 Malakmadze Web LLC
Requested byhttps://www.primaveraborsa.shop/ CertificateIssuerLet's Encrypt Subjectwww.primaveraborsa.shop Fingerprint02:99:35:34:51:01:96:B8:B7:08:25:96:DA:3A:F1:AD:C7:95:92:D0 ValidityTue, 02 Apr 2024 08:02:20 GMT - Mon, 01 Jul 2024 08:02:19 GMT
Hashc158b4225ec4ef8f487a5c73df9840a1 37e1e34185bfebef668c03124c45e7886d35f7c1 df74e920e8a1fcdf4adfa04d7cacbdc21b11eae7c05e7b87115620e466dedb5c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /api/get_loginstatus HTTP/1.1
Host: www.primaveraborsa.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Origin: https://www.primaveraborsa.shop
DNT: 1
Connection: keep-alive
Referer: https://www.primaveraborsa.shop/
Cookie: isFirst=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
HTTP/1.1 200
Server: nginx/1.14.2
Date: Wed, 08 May 2024 02:33:31 GMT
Content-Type: application/json;charset=UTF-8
Content-Length: 50
Connection: keep-alive
Access-Control-Allow-Origin: https://www.primaveraborsa.shop
Access-Control-Allow-Credentials: true
Set-Cookie: JSESSIONID=5F72F61E63CA88A4E2B57FD57F95667A; Path=/api; HttpOnly
|
|
| www.primaveraborsa.shop/resources/fonts/oswald-v14-latin-regular.woff2 | 91.241.55.42 | 200 OK | 16 kB |
URL GET HTTP/1.1www.primaveraborsa.shop/resources/fonts/oswald-v14-latin-regular.woff2 IP91.241.55.42:443 ASN#199242 Malakmadze Web LLC
Requested byhttps://www.primaveraborsa.shop/ CertificateIssuerLet's Encrypt Subjectwww.primaveraborsa.shop Fingerprint02:99:35:34:51:01:96:B8:B7:08:25:96:DA:3A:F1:AD:C7:95:92:D0 ValidityTue, 02 Apr 2024 08:02:20 GMT - Mon, 01 Jul 2024 08:02:19 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15440, version 1.0 Hashbc929ce04719434ea60c653783ea547a bdb2bf1cda1361b01b193a56f64b7b86e243cbeb 7d2d71a37b3b4cdc1e63cea793d01abaec9cbc90c81e4771741e27925204214a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /resources/fonts/oswald-v14-latin-regular.woff2 HTTP/1.1
Host: www.primaveraborsa.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.primaveraborsa.shop/resources/css/all-build.css?v=451192304202
Cookie: isFirst=0; sourcekey=1D910AF9679C10EF140B1E9FF74753F4; sourcetime=1715135612026; uvid=202405081033318749
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Wed, 08 May 2024 02:33:32 GMT
Content-Type: application/octet-stream
Last-Modified: Wed, 28 Dec 2022 20:50:46 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63acac26-3c50"
Content-Encoding: gzip
|
|
| www.primaveraborsa.shop/resources/img/country/CL.png | 91.241.55.42 | 200 OK | 174 B |
URL GET HTTP/1.1www.primaveraborsa.shop/resources/img/country/CL.png IP91.241.55.42:443 ASN#199242 Malakmadze Web LLC
Requested byhttps://www.primaveraborsa.shop/ CertificateIssuerLet's Encrypt Subjectwww.primaveraborsa.shop Fingerprint02:99:35:34:51:01:96:B8:B7:08:25:96:DA:3A:F1:AD:C7:95:92:D0 ValidityTue, 02 Apr 2024 08:02:20 GMT - Mon, 01 Jul 2024 08:02:19 GMT
File typePNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced Hash490161959a4578c9f01847ba96f8f085 3a8b03f5b259fb9516846ff4620960e1897351a3 74acd686daf4db019792ec2330303e227cc105f928a2cd8b260c74aa923ffc42
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /resources/img/country/CL.png HTTP/1.1
Host: www.primaveraborsa.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.primaveraborsa.shop/
Cookie: isFirst=0; sourcekey=1D910AF9679C10EF140B1E9FF74753F4; sourcetime=1715135612026; uvid=202405081033318749
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Wed, 08 May 2024 02:33:32 GMT
Content-Type: image/png
Content-Length: 174
Last-Modified: Wed, 28 Dec 2022 20:50:46 GMT
Connection: keep-alive
ETag: "63acac26-ae"
Accept-Ranges: bytes
|
|
| www.primaveraborsa.shop/api/getcusttempl | 91.241.55.42 | 200 | 571 B |
URL POST HTTP/1.1www.primaveraborsa.shop/api/getcusttempl IP91.241.55.42:443 ASN#199242 Malakmadze Web LLC
Requested byhttps://www.primaveraborsa.shop/ CertificateIssuerLet's Encrypt Subjectwww.primaveraborsa.shop Fingerprint02:99:35:34:51:01:96:B8:B7:08:25:96:DA:3A:F1:AD:C7:95:92:D0 ValidityTue, 02 Apr 2024 08:02:20 GMT - Mon, 01 Jul 2024 08:02:19 GMT
Hashe55b84ac58db15bdd72e6d707982ea0e ea2d25deaa57c34829832ca113727d064e980f48 29f0cc3c5b216ded2ec5b5979a35e237b59dbc59d3b38f5d06c907d17f964be5
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /api/getcusttempl HTTP/1.1
Host: www.primaveraborsa.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 7
Origin: https://www.primaveraborsa.shop
DNT: 1
Connection: keep-alive
Referer: https://www.primaveraborsa.shop/
Cookie: JSESSIONID=5F72F61E63CA88A4E2B57FD57F95667A; isFirst=0; sourcekey=1D910AF9679C10EF140B1E9FF74753F4; sourcetime=1715135612026; uvid=202405081033318749; currentCurrencyCode=CRY114; sjstil=0.9366412903952912
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Server: nginx/1.14.2
Date: Wed, 08 May 2024 02:33:32 GMT
Content-Type: application/json;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Origin: https://www.primaveraborsa.shop
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
|
|
| www.primaveraborsa.shop/resources/locale/languages.json | 91.241.55.42 | 200 OK | 240 B |
URL GET HTTP/1.1www.primaveraborsa.shop/resources/locale/languages.json IP91.241.55.42:443 ASN#199242 Malakmadze Web LLC
Requested byhttps://www.primaveraborsa.shop/ CertificateIssuerLet's Encrypt Subjectwww.primaveraborsa.shop Fingerprint02:99:35:34:51:01:96:B8:B7:08:25:96:DA:3A:F1:AD:C7:95:92:D0 ValidityTue, 02 Apr 2024 08:02:20 GMT - Mon, 01 Jul 2024 08:02:19 GMT
Hash15ce64a0bcb6d6a9ea2b4240e14f61fe b82e1f0763c6f7c9efa0d869f0d8b547b4e02f27 7e6699232a1a18770017d3c603d45979b07756764acab462114eb5640b763e30
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /resources/locale/languages.json HTTP/1.1
Host: www.primaveraborsa.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.primaveraborsa.shop/
Cookie: isFirst=0; sourcekey=1D910AF9679C10EF140B1E9FF74753F4; sourcetime=1715135612026; uvid=202405081033318749; currentCurrencyCode=CRY114; sjstil=0.9366412903952912
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Wed, 08 May 2024 02:33:32 GMT
Content-Type: application/json
Content-Length: 240
Last-Modified: Fri, 08 Sep 2023 12:42:04 GMT
Connection: keep-alive
ETag: "64fb169c-f0"
Accept-Ranges: bytes
|
|
| www.primaveraborsa.shop/api/home_page_product | 91.241.55.42 | 200 | 760 B |
URL POST HTTP/1.1www.primaveraborsa.shop/api/home_page_product IP91.241.55.42:443 ASN#199242 Malakmadze Web LLC
Requested byhttps://www.primaveraborsa.shop/ CertificateIssuerLet's Encrypt Subjectwww.primaveraborsa.shop Fingerprint02:99:35:34:51:01:96:B8:B7:08:25:96:DA:3A:F1:AD:C7:95:92:D0 ValidityTue, 02 Apr 2024 08:02:20 GMT - Mon, 01 Jul 2024 08:02:19 GMT
Hash73c58bccacd612859f11a7042795a355 405bef0bed701163c4bee14e003de9914c1be189 17d595de82b2c6f49d9295883bb296da8465b0ddc1cf6f3533a075624d58e35c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /api/home_page_product HTTP/1.1
Host: www.primaveraborsa.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 17
Origin: https://www.primaveraborsa.shop
DNT: 1
Connection: keep-alive
Referer: https://www.primaveraborsa.shop/
Cookie: JSESSIONID=5F72F61E63CA88A4E2B57FD57F95667A; isFirst=0; sourcekey=1D910AF9679C10EF140B1E9FF74753F4; sourcetime=1715135612026; uvid=202405081033318749; currentCurrencyCode=CRY114; sjstil=0.9366412903952912
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Server: nginx/1.14.2
Date: Wed, 08 May 2024 02:33:32 GMT
Content-Type: application/json;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Origin: https://www.primaveraborsa.shop
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
|
|
| www.primaveraborsa.shop/resources/img/qr_code_es.png | 91.241.55.42 | 200 OK | 6.4 kB |
URL GET HTTP/1.1www.primaveraborsa.shop/resources/img/qr_code_es.png IP91.241.55.42:443 ASN#199242 Malakmadze Web LLC
Requested byhttps://www.primaveraborsa.shop/ CertificateIssuerLet's Encrypt Subjectwww.primaveraborsa.shop Fingerprint02:99:35:34:51:01:96:B8:B7:08:25:96:DA:3A:F1:AD:C7:95:92:D0 ValidityTue, 02 Apr 2024 08:02:20 GMT - Mon, 01 Jul 2024 08:02:19 GMT
File typePNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced Hashf785ca4a9afcda4128d03ed204844cba 63118887d2095397b61c41d5da1535873cc6e8b2 f5987613850deedb3c69c5760041854e5658dc9212a9151620168c4af6225f38
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /resources/img/qr_code_es.png HTTP/1.1
Host: www.primaveraborsa.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.primaveraborsa.shop/
Cookie: isFirst=0; sourcekey=1D910AF9679C10EF140B1E9FF74753F4; sourcetime=1715135612026; uvid=202405081033318749; currentCurrencyCode=CRY114; sjstil=0.9366412903952912
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Wed, 08 May 2024 02:33:32 GMT
Content-Type: image/png
Content-Length: 6429
Last-Modified: Wed, 28 Dec 2022 20:50:46 GMT
Connection: keep-alive
ETag: "63acac26-191d"
Accept-Ranges: bytes
|
|
| www.primaveraborsa.shop/api/getpricebyprdcolor | 91.241.55.42 | 200 | 31 B |
URL POST HTTP/1.1www.primaveraborsa.shop/api/getpricebyprdcolor IP91.241.55.42:443 ASN#199242 Malakmadze Web LLC
Requested byhttps://www.primaveraborsa.shop/ CertificateIssuerLet's Encrypt Subjectwww.primaveraborsa.shop Fingerprint02:99:35:34:51:01:96:B8:B7:08:25:96:DA:3A:F1:AD:C7:95:92:D0 ValidityTue, 02 Apr 2024 08:02:20 GMT - Mon, 01 Jul 2024 08:02:19 GMT
Hashd478da9f5f5888d31aa9495120047f50 2635e296803f9d69660f222cc40381704e79c45f dce4619422e285e5f9395cc16b554d433ad16fad9449f531dba5560718d006fb
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /api/getpricebyprdcolor HTTP/1.1
Host: www.primaveraborsa.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 73
Origin: https://www.primaveraborsa.shop
DNT: 1
Connection: keep-alive
Referer: https://www.primaveraborsa.shop/
Cookie: JSESSIONID=5F72F61E63CA88A4E2B57FD57F95667A; isFirst=0; sourcekey=1D910AF9679C10EF140B1E9FF74753F4; sourcetime=1715135612026; uvid=202405081033318749; currentCurrencyCode=CRY114; sjstil=0.2976379220344698
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Server: nginx/1.14.2
Date: Wed, 08 May 2024 02:33:32 GMT
Content-Type: application/json;charset=UTF-8
Content-Length: 31
Connection: keep-alive
Access-Control-Allow-Origin: https://www.primaveraborsa.shop
Access-Control-Allow-Credentials: true
|
|
| www.primaveraborsa.shop/resources/locale/strings.properties | 91.241.55.42 | 200 OK | 9.9 kB |
URL GET HTTP/1.1www.primaveraborsa.shop/resources/locale/strings.properties IP91.241.55.42:443 ASN#199242 Malakmadze Web LLC
Requested byhttps://www.primaveraborsa.shop/ CertificateIssuerLet's Encrypt Subjectwww.primaveraborsa.shop Fingerprint02:99:35:34:51:01:96:B8:B7:08:25:96:DA:3A:F1:AD:C7:95:92:D0 ValidityTue, 02 Apr 2024 08:02:20 GMT - Mon, 01 Jul 2024 08:02:19 GMT
File typeUnicode text, UTF-8 text, with very long lines (415), with CRLF line terminators Hash74529e3216fcb85af0a1eef800987061 10f99e11f8bce633222122f81ad897eec085d19f 9d0d28955a2973e5281128ad1a8fceeba31fae76e6d7f15c36b085ff3f549e2e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /resources/locale/strings.properties HTTP/1.1
Host: www.primaveraborsa.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/plain, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.primaveraborsa.shop/
Cookie: isFirst=0; sourcekey=1D910AF9679C10EF140B1E9FF74753F4; sourcetime=1715135612026; uvid=202405081033318749; currentCurrencyCode=CRY114; sjstil=0.2976379220344698
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Wed, 08 May 2024 02:33:32 GMT
Content-Type: application/octet-stream
Last-Modified: Wed, 27 Mar 2024 13:47:48 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"66042384-5d87"
Content-Encoding: gzip
|
|
| exmtione.top/resrs96mc96qcrs96shnmfa/v230831/lg2308311419.png |  45.141.156.68 | 200 OK | 5.5 kB |
URL GET HTTP/1.1exmtione.top/resrs96mc96qcrs96shnmfa/v230831/lg2308311419.png IP45.141.156.68:443 ASN#206776 Ophidian Network Limited
Requested byhttps://www.primaveraborsa.shop/ CertificateIssuerLet's Encrypt Subjectwww.exmtione.top FingerprintEF:73:D1:E0:C7:DF:AD:67:CD:E5:65:B1:41:12:C1:4C:ED:16:EC:6E ValidityTue, 07 May 2024 02:30:10 GMT - Mon, 05 Aug 2024 02:30:09 GMT
File typePNG image data, 210 x 75, 8-bit/color RGBA, non-interlaced Hash6c2c5e1ea06e01e0c3b39760baef46f4 a7510c962a859e2d2702dba3a6c324a15056f550 5beec7970f3a53b219fc9f8ba8c7c9cee383b6bcc26e7ddf0e6e74e89b874d1e
GET /resrs96mc96qcrs96shnmfa/v230831/lg2308311419.png HTTP/1.1
Host: exmtione.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.primaveraborsa.shop/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Wed, 08 May 2024 02:33:32 GMT
Content-Type: image/png
Content-Length: 5470
Last-Modified: Mon, 30 Oct 2023 04:08:19 GMT
Connection: keep-alive
ETag: "653f2c33-155e"
Accept-Ranges: bytes
|
|
| exmtione.top/resrs96mc96qcrs96shnmfa/v230831/FRCUISINE20230823007noir01_s.jpg | 45.141.156.68 | 200 OK | 6.6 kB |
URL GET HTTP/1.1exmtione.top/resrs96mc96qcrs96shnmfa/v230831/FRCUISINE20230823007noir01_s.jpg IP45.141.156.68:443 ASN#206776 Ophidian Network Limited
Requested byhttps://www.primaveraborsa.shop/ CertificateIssuerLet's Encrypt Subjectwww.exmtione.top FingerprintEF:73:D1:E0:C7:DF:AD:67:CD:E5:65:B1:41:12:C1:4C:ED:16:EC:6E ValidityTue, 07 May 2024 02:30:10 GMT - Mon, 05 Aug 2024 02:30:09 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 80x80, components 3 Hash4362973ce096bb9f143fc1c3a4c30bc2 f7259df3d110da758a624ba4ade4306e64576089 4cb349011f92b477d1a90b94d8694d8fdbe0fd70c593b454942a2f7d7ef0711d
GET /resrs96mc96qcrs96shnmfa/v230831/FRCUISINE20230823007noir01_s.jpg HTTP/1.1
Host: exmtione.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.primaveraborsa.shop/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Wed, 08 May 2024 02:33:32 GMT
Content-Type: image/jpeg
Content-Length: 6638
Last-Modified: Mon, 30 Oct 2023 04:08:19 GMT
Connection: keep-alive
ETag: "653f2c33-19ee"
Accept-Ranges: bytes
|
|
| exmtione.top/resrs96mc96qcrs96shnmfa/v230831/FRCUISINE20230823005blanc01_s.jpg | 45.141.156.68 | 200 OK | 3.0 kB |
URL GET HTTP/1.1exmtione.top/resrs96mc96qcrs96shnmfa/v230831/FRCUISINE20230823005blanc01_s.jpg IP45.141.156.68:443 ASN#206776 Ophidian Network Limited
Requested byhttps://www.primaveraborsa.shop/ CertificateIssuerLet's Encrypt Subjectwww.exmtione.top FingerprintEF:73:D1:E0:C7:DF:AD:67:CD:E5:65:B1:41:12:C1:4C:ED:16:EC:6E ValidityTue, 07 May 2024 02:30:10 GMT - Mon, 05 Aug 2024 02:30:09 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 80x80, components 3 Hash9d380c50efacf274455e8b598f4c6bd6 60d07e1511a28f90641b546be6dbd049e93d5963 e68ce3a26938e9901d47de79c24a31d311bf5e6370fee894e6bda16e8349c8fe
GET /resrs96mc96qcrs96shnmfa/v230831/FRCUISINE20230823005blanc01_s.jpg HTTP/1.1
Host: exmtione.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.primaveraborsa.shop/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Wed, 08 May 2024 02:33:32 GMT
Content-Type: image/jpeg
Content-Length: 2996
Last-Modified: Mon, 30 Oct 2023 04:08:15 GMT
Connection: keep-alive
ETag: "653f2c2f-bb4"
Accept-Ranges: bytes
|
|
| exmtione.top/resrs96mc96qcrs96shnmfa/v230831/FRCUISINE20230823006orange01_s.jpg | 45.141.156.68 | 200 OK | 5.2 kB |
URL GET HTTP/1.1exmtione.top/resrs96mc96qcrs96shnmfa/v230831/FRCUISINE20230823006orange01_s.jpg IP45.141.156.68:443 ASN#206776 Ophidian Network Limited
Requested byhttps://www.primaveraborsa.shop/ CertificateIssuerLet's Encrypt Subjectwww.exmtione.top FingerprintEF:73:D1:E0:C7:DF:AD:67:CD:E5:65:B1:41:12:C1:4C:ED:16:EC:6E ValidityTue, 07 May 2024 02:30:10 GMT - Mon, 05 Aug 2024 02:30:09 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 80x80, components 3 Hash1b2d95565d7a8b03ff1b6fe45bdc0b64 b19584c9a08f2e6e13e521786b68a41a45b884c2 5f6ab97ffdd10413de5f22b5f21996033c105e5a1a2be939ebdd7ed35b6864d9
GET /resrs96mc96qcrs96shnmfa/v230831/FRCUISINE20230823006orange01_s.jpg HTTP/1.1
Host: exmtione.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.primaveraborsa.shop/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Wed, 08 May 2024 02:33:32 GMT
Content-Type: image/jpeg
Content-Length: 5186
Last-Modified: Mon, 30 Oct 2023 04:08:19 GMT
Connection: keep-alive
ETag: "653f2c33-1442"
Accept-Ranges: bytes
|
|
| exmtione.top/resrs96mc96qcrs96shnmfa/v230831/FRCUISINE20230823008blanc01_s.jpg | 45.141.156.68 | 200 OK | 6.9 kB |
URL GET HTTP/1.1exmtione.top/resrs96mc96qcrs96shnmfa/v230831/FRCUISINE20230823008blanc01_s.jpg IP45.141.156.68:443 ASN#206776 Ophidian Network Limited
Requested byhttps://www.primaveraborsa.shop/ CertificateIssuerLet's Encrypt Subjectwww.exmtione.top FingerprintEF:73:D1:E0:C7:DF:AD:67:CD:E5:65:B1:41:12:C1:4C:ED:16:EC:6E ValidityTue, 07 May 2024 02:30:10 GMT - Mon, 05 Aug 2024 02:30:09 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 80x80, components 3 Hashf8d5ac0e259b286e183c493d961484dd 0e802cbebb05bbdabda8395082eb295051b0f499 7b22ed6abc91eb6099897fce7416fa93d11df4adb9c8eb51e22aba05b3319f61
GET /resrs96mc96qcrs96shnmfa/v230831/FRCUISINE20230823008blanc01_s.jpg HTTP/1.1
Host: exmtione.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.primaveraborsa.shop/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Wed, 08 May 2024 02:33:32 GMT
Content-Type: image/jpeg
Content-Length: 6858
Last-Modified: Mon, 30 Oct 2023 04:08:19 GMT
Connection: keep-alive
ETag: "653f2c33-1aca"
Accept-Ranges: bytes
|
|
| exmtione.top/resrs96mc96qcrs96shnmfa/v230831/FRCUISINE20230823002noir01_s.jpg | 45.141.156.68 | 200 OK | 4.5 kB |
URL GET HTTP/1.1exmtione.top/resrs96mc96qcrs96shnmfa/v230831/FRCUISINE20230823002noir01_s.jpg IP45.141.156.68:443 ASN#206776 Ophidian Network Limited
Requested byhttps://www.primaveraborsa.shop/ CertificateIssuerLet's Encrypt Subjectwww.exmtione.top FingerprintEF:73:D1:E0:C7:DF:AD:67:CD:E5:65:B1:41:12:C1:4C:ED:16:EC:6E ValidityTue, 07 May 2024 02:30:10 GMT - Mon, 05 Aug 2024 02:30:09 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 80x80, components 3 Hash4ad0fee812c221eb962200d21ced581e 108f7e551a2882157da6a991333a9387358a9657 fa30b27cf07a30d7a93c37a7a72735044aaa6b1e4a3c7b212cd5f4b2f4b096f6
GET /resrs96mc96qcrs96shnmfa/v230831/FRCUISINE20230823002noir01_s.jpg HTTP/1.1
Host: exmtione.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.primaveraborsa.shop/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Wed, 08 May 2024 02:33:32 GMT
Content-Type: image/jpeg
Content-Length: 4485
Last-Modified: Mon, 30 Oct 2023 04:08:19 GMT
Connection: keep-alive
ETag: "653f2c33-1185"
Accept-Ranges: bytes
|
|
| exmtione.top/resrs96mc96qcrs96shnmfa/v230831/FRCUISINE20230823003argent01_s.jpg | 45.141.156.68 | 200 OK | 4.7 kB |
URL GET HTTP/1.1exmtione.top/resrs96mc96qcrs96shnmfa/v230831/FRCUISINE20230823003argent01_s.jpg IP45.141.156.68:443 ASN#206776 Ophidian Network Limited
Requested byhttps://www.primaveraborsa.shop/ CertificateIssuerLet's Encrypt Subjectwww.exmtione.top FingerprintEF:73:D1:E0:C7:DF:AD:67:CD:E5:65:B1:41:12:C1:4C:ED:16:EC:6E ValidityTue, 07 May 2024 02:30:10 GMT - Mon, 05 Aug 2024 02:30:09 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 80x80, components 3 Hash065939ff1cec1c4b52a7630c38b54cd5 67ed7649d193de4eda65863781392b9b49e605ad dd0a04965c0bd167085a22f9a2c48549b94949daa33def178b9903c8eacc6947
GET /resrs96mc96qcrs96shnmfa/v230831/FRCUISINE20230823003argent01_s.jpg HTTP/1.1
Host: exmtione.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.primaveraborsa.shop/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Wed, 08 May 2024 02:33:32 GMT
Content-Type: image/jpeg
Content-Length: 4677
Last-Modified: Mon, 30 Oct 2023 04:08:18 GMT
Connection: keep-alive
ETag: "653f2c32-1245"
Accept-Ranges: bytes
|
|
| exmtione.top/resrs96mc96qcrs96shnmfa/v230831/FRCUISINE20230823003bleu01_s.jpg | 45.141.156.68 | 200 OK | 5.1 kB |
URL GET HTTP/1.1exmtione.top/resrs96mc96qcrs96shnmfa/v230831/FRCUISINE20230823003bleu01_s.jpg IP45.141.156.68:443 ASN#206776 Ophidian Network Limited
Requested byhttps://www.primaveraborsa.shop/ CertificateIssuerLet's Encrypt Subjectwww.exmtione.top FingerprintEF:73:D1:E0:C7:DF:AD:67:CD:E5:65:B1:41:12:C1:4C:ED:16:EC:6E ValidityTue, 07 May 2024 02:30:10 GMT - Mon, 05 Aug 2024 02:30:09 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 80x80, components 3 Hash46e1f9c29727faa78e512c171523af22 609c40db64e6fb6567f509a198ea95d0730e4b09 65b926bc151c7e69d8b1ebb10da91b1b4c752e9bebd062d3ac2d4cf0f5a99c0d
GET /resrs96mc96qcrs96shnmfa/v230831/FRCUISINE20230823003bleu01_s.jpg HTTP/1.1
Host: exmtione.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.primaveraborsa.shop/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Wed, 08 May 2024 02:33:32 GMT
Content-Type: image/jpeg
Content-Length: 5109
Last-Modified: Mon, 30 Oct 2023 04:08:16 GMT
Connection: keep-alive
ETag: "653f2c30-13f5"
Accept-Ranges: bytes
|
|
| exmtione.top/resrs96mc96qcrs96shnmfa/v230831/FRCUISINE20230823003rose01_s.jpg | 45.141.156.68 | 200 OK | 5.0 kB |
URL GET HTTP/1.1exmtione.top/resrs96mc96qcrs96shnmfa/v230831/FRCUISINE20230823003rose01_s.jpg IP45.141.156.68:443 ASN#206776 Ophidian Network Limited
Requested byhttps://www.primaveraborsa.shop/ CertificateIssuerLet's Encrypt Subjectwww.exmtione.top FingerprintEF:73:D1:E0:C7:DF:AD:67:CD:E5:65:B1:41:12:C1:4C:ED:16:EC:6E ValidityTue, 07 May 2024 02:30:10 GMT - Mon, 05 Aug 2024 02:30:09 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 80x80, components 3 Hash601bd3e38835b220894600f545e629bf 9645630bc7c3feb8684eabf586dd2c44bcc8b722 c47f43dc0dbc2b877df1b93ca583efa4d5e71b39406214f8536e7e63891740f1
GET /resrs96mc96qcrs96shnmfa/v230831/FRCUISINE20230823003rose01_s.jpg HTTP/1.1
Host: exmtione.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.primaveraborsa.shop/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Wed, 08 May 2024 02:33:32 GMT
Content-Type: image/jpeg
Content-Length: 4979
Last-Modified: Mon, 30 Oct 2023 04:08:19 GMT
Connection: keep-alive
ETag: "653f2c33-1373"
Accept-Ranges: bytes
|
|
| exmtione.top/resrs96mc96qcrs96shnmfa/v230831/FRCUISINE20230823003fonce01_s.jpg | 45.141.156.68 | 200 OK | 5.5 kB |
URL GET HTTP/1.1exmtione.top/resrs96mc96qcrs96shnmfa/v230831/FRCUISINE20230823003fonce01_s.jpg IP45.141.156.68:443 ASN#206776 Ophidian Network Limited
Requested byhttps://www.primaveraborsa.shop/ CertificateIssuerLet's Encrypt Subjectwww.exmtione.top FingerprintEF:73:D1:E0:C7:DF:AD:67:CD:E5:65:B1:41:12:C1:4C:ED:16:EC:6E ValidityTue, 07 May 2024 02:30:10 GMT - Mon, 05 Aug 2024 02:30:09 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 80x80, components 3 Hashea364271b8dcb0e679bb913d4a7251e9 46e8653c3ebceb009f0ff8dc384e74c368d0a61c 996ac50b89dfc41643c06138a2c2f52914e7a8c50f86f1700904dfe46c0c3b18
GET /resrs96mc96qcrs96shnmfa/v230831/FRCUISINE20230823003fonce01_s.jpg HTTP/1.1
Host: exmtione.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.primaveraborsa.shop/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Wed, 08 May 2024 02:33:32 GMT
Content-Type: image/jpeg
Content-Length: 5475
Last-Modified: Mon, 30 Oct 2023 04:08:17 GMT
Connection: keep-alive
ETag: "653f2c31-1563"
Accept-Ranges: bytes
|
|
| exmtione.top/resrs96mc96qcrs96shnmfa/v230831/FRCUISINE20230823003vert01_s.jpg | 45.141.156.68 | 200 OK | 5.0 kB |
URL GET HTTP/1.1exmtione.top/resrs96mc96qcrs96shnmfa/v230831/FRCUISINE20230823003vert01_s.jpg IP45.141.156.68:443 ASN#206776 Ophidian Network Limited
Requested byhttps://www.primaveraborsa.shop/ CertificateIssuerLet's Encrypt Subjectwww.exmtione.top FingerprintEF:73:D1:E0:C7:DF:AD:67:CD:E5:65:B1:41:12:C1:4C:ED:16:EC:6E ValidityTue, 07 May 2024 02:30:10 GMT - Mon, 05 Aug 2024 02:30:09 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 80x80, components 3 Hashc1cc1d968e905a6b056c0955d0fdebf6 b10fc3c0d9a8ab399644f41300b10639e0cc4628 fbeae434cd7571a84a883f2e885560669f0fd3b1ca43fa252538a5497481a3f2
GET /resrs96mc96qcrs96shnmfa/v230831/FRCUISINE20230823003vert01_s.jpg HTTP/1.1
Host: exmtione.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.primaveraborsa.shop/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Wed, 08 May 2024 02:33:32 GMT
Content-Type: image/jpeg
Content-Length: 5012
Last-Modified: Mon, 30 Oct 2023 04:08:16 GMT
Connection: keep-alive
ETag: "653f2c30-1394"
Accept-Ranges: bytes
|
|
| exmtione.top/resrs96mc96qcrs96shnmfa/v230831/FRCUISINE20230823004argent01_s.jpg | 45.141.156.68 | 200 OK | 3.6 kB |
URL GET HTTP/1.1exmtione.top/resrs96mc96qcrs96shnmfa/v230831/FRCUISINE20230823004argent01_s.jpg IP45.141.156.68:443 ASN#206776 Ophidian Network Limited
Requested byhttps://www.primaveraborsa.shop/ CertificateIssuerLet's Encrypt Subjectwww.exmtione.top FingerprintEF:73:D1:E0:C7:DF:AD:67:CD:E5:65:B1:41:12:C1:4C:ED:16:EC:6E ValidityTue, 07 May 2024 02:30:10 GMT - Mon, 05 Aug 2024 02:30:09 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 80x80, components 3 Hash37b69d61c69028fc0f17ebf32f1902f9 18c0827c9d29263eaea4a8437018fc15dadb5e1d 8c71e840cb37aee9554d3c5ed3681a41c252e1f43f04278b2f9656500565cace
GET /resrs96mc96qcrs96shnmfa/v230831/FRCUISINE20230823004argent01_s.jpg HTTP/1.1
Host: exmtione.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.primaveraborsa.shop/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Wed, 08 May 2024 02:33:32 GMT
Content-Type: image/jpeg
Content-Length: 3557
Last-Modified: Mon, 30 Oct 2023 04:08:19 GMT
Connection: keep-alive
ETag: "653f2c33-de5"
Accept-Ranges: bytes
|
|
| www.primaveraborsa.shop/resources/locale/strings_es.properties | 91.241.55.42 | 200 OK | 11 kB |
URL GET HTTP/1.1www.primaveraborsa.shop/resources/locale/strings_es.properties IP91.241.55.42:443 ASN#199242 Malakmadze Web LLC
Requested byhttps://www.primaveraborsa.shop/ CertificateIssuerLet's Encrypt Subjectwww.primaveraborsa.shop Fingerprint02:99:35:34:51:01:96:B8:B7:08:25:96:DA:3A:F1:AD:C7:95:92:D0 ValidityTue, 02 Apr 2024 08:02:20 GMT - Mon, 01 Jul 2024 08:02:19 GMT
File typeUnicode text, UTF-8 text, with very long lines (431), with CRLF line terminators Hashf869db30437465618f83c5b155722378 45f437a8583729fd26b34e4788676a8bd10bd783 adba067adaff03b3cd2dcba74aa3727db1ad94801705a814119ecfcfab7a850e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /resources/locale/strings_es.properties HTTP/1.1
Host: www.primaveraborsa.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/plain, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.primaveraborsa.shop/
Cookie: isFirst=0; sourcekey=1D910AF9679C10EF140B1E9FF74753F4; sourcetime=1715135612026; uvid=202405081033318749; currentCurrencyCode=CRY114; sjstil=0.2976379220344698
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Wed, 08 May 2024 02:33:32 GMT
Content-Type: application/octet-stream
Last-Modified: Wed, 27 Mar 2024 13:48:00 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"66042390-68d2"
Content-Encoding: gzip
|
|
| exmtione.top/resrs96mc96qcrs96shnmfa/v230831/ditu.jpg | 45.141.156.68 | 200 OK | 377 kB |
URL GET HTTP/1.1exmtione.top/resrs96mc96qcrs96shnmfa/v230831/ditu.jpg IP45.141.156.68:443 ASN#206776 Ophidian Network Limited
Requested byhttps://www.primaveraborsa.shop/ CertificateIssuerLet's Encrypt Subjectwww.exmtione.top FingerprintEF:73:D1:E0:C7:DF:AD:67:CD:E5:65:B1:41:12:C1:4C:ED:16:EC:6E ValidityTue, 07 May 2024 02:30:10 GMT - Mon, 05 Aug 2024 02:30:09 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1200x400, components 3 Size377 kB (377296 bytes) Hash0e3dc795b2352f3d92b48e5b213da2fd b20744d5b81b0b3b45fed4556f051389936a0e0a 08fd7be4d49d8b2e043b0bc963b0060cbfe4c0c777da56c73d069a963f954e5a
GET /resrs96mc96qcrs96shnmfa/v230831/ditu.jpg HTTP/1.1
Host: exmtione.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.primaveraborsa.shop/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Wed, 08 May 2024 02:33:32 GMT
Content-Type: image/jpeg
Content-Length: 377296
Last-Modified: Mon, 30 Oct 2023 04:08:18 GMT
Connection: keep-alive
ETag: "653f2c32-5c1d0"
Accept-Ranges: bytes
|
|
| exmtione.top/resrs96mc96qcrs96shnmfa/v230831/xinzeng1.jpg | 45.141.156.68 | 200 OK | 716 kB |
URL GET HTTP/1.1exmtione.top/resrs96mc96qcrs96shnmfa/v230831/xinzeng1.jpg IP45.141.156.68:443 ASN#206776 Ophidian Network Limited
Requested byhttps://www.primaveraborsa.shop/ CertificateIssuerLet's Encrypt Subjectwww.exmtione.top FingerprintEF:73:D1:E0:C7:DF:AD:67:CD:E5:65:B1:41:12:C1:4C:ED:16:EC:6E ValidityTue, 07 May 2024 02:30:10 GMT - Mon, 05 Aug 2024 02:30:09 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1200x1800, components 3 Size716 kB (715580 bytes) Hashb08aedfcee8f8fc7daf9b70e6d6e6eea 956b22233e785ccdc8b072a8a9e259b5ec48fffe 24a16b7fbb8a9dbd8bc1bee09ff4878499aaa01a4f20212cd5a5505427380767
GET /resrs96mc96qcrs96shnmfa/v230831/xinzeng1.jpg HTTP/1.1
Host: exmtione.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.primaveraborsa.shop/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Wed, 08 May 2024 02:33:32 GMT
Content-Type: image/jpeg
Content-Length: 715580
Last-Modified: Mon, 30 Oct 2023 04:08:19 GMT
Connection: keep-alive
ETag: "653f2c33-aeb3c"
Accept-Ranges: bytes
|
|
| exmtione.top/resrs96mc96qcrs96shnmfa/v230831/20230830173311490724.jpg | 45.141.156.68 | 200 OK | 15 kB |
URL GET HTTP/1.1exmtione.top/resrs96mc96qcrs96shnmfa/v230831/20230830173311490724.jpg IP45.141.156.68:443 ASN#206776 Ophidian Network Limited
Requested byhttps://www.primaveraborsa.shop/ CertificateIssuerLet's Encrypt Subjectwww.exmtione.top FingerprintEF:73:D1:E0:C7:DF:AD:67:CD:E5:65:B1:41:12:C1:4C:ED:16:EC:6E ValidityTue, 07 May 2024 02:30:10 GMT - Mon, 05 Aug 2024 02:30:09 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 280x280, components 3 Hashd63e2629a732fd62a196269f597fb582 c7439c73b2516f1293dfc3e6e71175efdebf13ed de4a8cba580f5cd0a450c9dc3f224a3b746c4c9c12cc057aa1221febbad269d1
GET /resrs96mc96qcrs96shnmfa/v230831/20230830173311490724.jpg HTTP/1.1
Host: exmtione.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.primaveraborsa.shop/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Wed, 08 May 2024 02:33:32 GMT
Content-Type: image/jpeg
Content-Length: 14744
Last-Modified: Mon, 30 Oct 2023 04:08:16 GMT
Connection: keep-alive
ETag: "653f2c30-3998"
Accept-Ranges: bytes
|
|
| exmtione.top/resrs96mc96qcrs96shnmfa/v230831/20230830173312606953.jpg | 45.141.156.68 | 200 OK | 8.3 kB |
URL GET HTTP/1.1exmtione.top/resrs96mc96qcrs96shnmfa/v230831/20230830173312606953.jpg IP45.141.156.68:443 ASN#206776 Ophidian Network Limited
Requested byhttps://www.primaveraborsa.shop/ CertificateIssuerLet's Encrypt Subjectwww.exmtione.top FingerprintEF:73:D1:E0:C7:DF:AD:67:CD:E5:65:B1:41:12:C1:4C:ED:16:EC:6E ValidityTue, 07 May 2024 02:30:10 GMT - Mon, 05 Aug 2024 02:30:09 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 280x280, components 3 Hasha76c42c43cb6ef6fb143df2349072d78 e099a9210286eacf523deec7f033c43c8d23f1ff dc2a02da3fb2ac66327a609ff3aa527e32379155fda7812deab20eb95ddfee84
GET /resrs96mc96qcrs96shnmfa/v230831/20230830173312606953.jpg HTTP/1.1
Host: exmtione.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.primaveraborsa.shop/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Wed, 08 May 2024 02:33:32 GMT
Content-Type: image/jpeg
Content-Length: 8314
Last-Modified: Mon, 30 Oct 2023 04:08:18 GMT
Connection: keep-alive
ETag: "653f2c32-207a"
Accept-Ranges: bytes
|
|
| exmtione.top/resrs96mc96qcrs96shnmfa/v230831/xinzeng2.jpg | 45.141.156.68 | 200 OK | 494 kB |
URL GET HTTP/1.1exmtione.top/resrs96mc96qcrs96shnmfa/v230831/xinzeng2.jpg IP45.141.156.68:443 ASN#206776 Ophidian Network Limited
Requested byhttps://www.primaveraborsa.shop/ CertificateIssuerLet's Encrypt Subjectwww.exmtione.top FingerprintEF:73:D1:E0:C7:DF:AD:67:CD:E5:65:B1:41:12:C1:4C:ED:16:EC:6E ValidityTue, 07 May 2024 02:30:10 GMT - Mon, 05 Aug 2024 02:30:09 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1200x1800, components 3 Size494 kB (494490 bytes) Hash45dae7d999f50204e9965d32890be9cd c43bfbf02f85fe270dcbff9fa2ee46f4732b71ac 9719b0b7952fe91f2d1541b870dacac5b38df3bb5e833196afb42eecf4cef9aa
GET /resrs96mc96qcrs96shnmfa/v230831/xinzeng2.jpg HTTP/1.1
Host: exmtione.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.primaveraborsa.shop/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Wed, 08 May 2024 02:33:32 GMT
Content-Type: image/jpeg
Content-Length: 494490
Last-Modified: Mon, 30 Oct 2023 04:08:19 GMT
Connection: keep-alive
ETag: "653f2c33-78b9a"
Accept-Ranges: bytes
|
|
| exmtione.top/resrs96mc96qcrs96shnmfa/v230831/20230830173311490703.jpg | 45.141.156.68 | 200 OK | 15 kB |
URL GET HTTP/1.1exmtione.top/resrs96mc96qcrs96shnmfa/v230831/20230830173311490703.jpg IP45.141.156.68:443 ASN#206776 Ophidian Network Limited
Requested byhttps://www.primaveraborsa.shop/ CertificateIssuerLet's Encrypt Subjectwww.exmtione.top FingerprintEF:73:D1:E0:C7:DF:AD:67:CD:E5:65:B1:41:12:C1:4C:ED:16:EC:6E ValidityTue, 07 May 2024 02:30:10 GMT - Mon, 05 Aug 2024 02:30:09 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 280x280, components 3 Hashc289d12922a2542f42792ebde78341f5 6053569a45f014ac25dae12d5c402187fde80c33 4df64f5e591c601b56e2fdcc44b5c5d683e86fda11c6eb0656cc8204eadecdbf
GET /resrs96mc96qcrs96shnmfa/v230831/20230830173311490703.jpg HTTP/1.1
Host: exmtione.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.primaveraborsa.shop/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Wed, 08 May 2024 02:33:32 GMT
Content-Type: image/jpeg
Content-Length: 14576
Last-Modified: Mon, 30 Oct 2023 04:08:18 GMT
Connection: keep-alive
ETag: "653f2c32-38f0"
Accept-Ranges: bytes
|
|
| exmtione.top/resrs96mc96qcrs96shnmfa/v230831/20230830173311490504.jpg | 45.141.156.68 | 200 OK | 15 kB |
URL GET HTTP/1.1exmtione.top/resrs96mc96qcrs96shnmfa/v230831/20230830173311490504.jpg IP45.141.156.68:443 ASN#206776 Ophidian Network Limited
Requested byhttps://www.primaveraborsa.shop/ CertificateIssuerLet's Encrypt Subjectwww.exmtione.top FingerprintEF:73:D1:E0:C7:DF:AD:67:CD:E5:65:B1:41:12:C1:4C:ED:16:EC:6E ValidityTue, 07 May 2024 02:30:10 GMT - Mon, 05 Aug 2024 02:30:09 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 280x280, components 3 Hashead000561b1f11355bcb5ee292413be5 fe151ad1b4ccd1014956315ab689d93d00834204 80160d578cde7a7c120925ddc0f41dc540959aa5a35141eb9d35338b0235e783
GET /resrs96mc96qcrs96shnmfa/v230831/20230830173311490504.jpg HTTP/1.1
Host: exmtione.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.primaveraborsa.shop/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Wed, 08 May 2024 02:33:32 GMT
Content-Type: image/jpeg
Content-Length: 15422
Last-Modified: Mon, 30 Oct 2023 04:08:19 GMT
Connection: keep-alive
ETag: "653f2c33-3c3e"
Accept-Ranges: bytes
|
|
| www.primaveraborsa.shop/api/countryOfClient | 91.241.55.42 | 200 | 45 B |
URL POST HTTP/1.1www.primaveraborsa.shop/api/countryOfClient IP91.241.55.42:443 ASN#199242 Malakmadze Web LLC
Requested byhttps://www.primaveraborsa.shop/ CertificateIssuerLet's Encrypt Subjectwww.primaveraborsa.shop Fingerprint02:99:35:34:51:01:96:B8:B7:08:25:96:DA:3A:F1:AD:C7:95:92:D0 ValidityTue, 02 Apr 2024 08:02:20 GMT - Mon, 01 Jul 2024 08:02:19 GMT
Hash1e77b49774b433537ef35e4ce38f4b8f 1df8c53f8052f860ca7ada4a490ea8a23606793c 870291c9c549917775dce1043664b5e718246f9051e7be6cd086fcc700444638
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /api/countryOfClient HTTP/1.1
Host: www.primaveraborsa.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Origin: https://www.primaveraborsa.shop
DNT: 1
Connection: keep-alive
Referer: https://www.primaveraborsa.shop/
Cookie: JSESSIONID=5F72F61E63CA88A4E2B57FD57F95667A; isFirst=0; sourcekey=1D910AF9679C10EF140B1E9FF74753F4; sourcetime=1715135612026; uvid=202405081033318749; currentCurrencyCode=CRY114; sjstil=0.7988940932897615
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
HTTP/1.1 200
Server: nginx/1.14.2
Date: Wed, 08 May 2024 02:33:32 GMT
Content-Type: application/json;charset=UTF-8
Content-Length: 45
Connection: keep-alive
Access-Control-Allow-Origin: https://www.primaveraborsa.shop
Access-Control-Allow-Credentials: true
|
|
| www.primaveraborsa.shop/api/statistic | 91.241.55.42 | 200 | 31 B |
URL POST HTTP/1.1www.primaveraborsa.shop/api/statistic IP91.241.55.42:443 ASN#199242 Malakmadze Web LLC
Requested byhttps://www.primaveraborsa.shop/ CertificateIssuerLet's Encrypt Subjectwww.primaveraborsa.shop Fingerprint02:99:35:34:51:01:96:B8:B7:08:25:96:DA:3A:F1:AD:C7:95:92:D0 ValidityTue, 02 Apr 2024 08:02:20 GMT - Mon, 01 Jul 2024 08:02:19 GMT
Hashef76d8074632ae79a222f8dd86bc496b 5f99d66914908bae291987f77dfa859797eeffc9 bd2296204802fad53ac68a0d28e3d7064f3c30b824f1d2dabce8a90151564d87
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /api/statistic HTTP/1.1
Host: www.primaveraborsa.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 111
Origin: https://www.primaveraborsa.shop
DNT: 1
Connection: keep-alive
Referer: https://www.primaveraborsa.shop/
Cookie: JSESSIONID=5F72F61E63CA88A4E2B57FD57F95667A; isFirst=0; sourcekey=1D910AF9679C10EF140B1E9FF74753F4; sourcetime=1715135612026; uvid=202405081033318749; currentCurrencyCode=CRY114; sjstil=0.9850131107666348
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Server: nginx/1.14.2
Date: Wed, 08 May 2024 02:33:32 GMT
Content-Type: application/json;charset=UTF-8
Content-Length: 31
Connection: keep-alive
Access-Control-Allow-Origin: https://www.primaveraborsa.shop
Access-Control-Allow-Credentials: true
|
|
| exmtione.top/resrs96mc96qcrs96shnmfa/v230831/20230830173312632242.jpg | 45.141.156.68 | 200 OK | 19 kB |
URL GET HTTP/1.1exmtione.top/resrs96mc96qcrs96shnmfa/v230831/20230830173312632242.jpg IP45.141.156.68:443 ASN#206776 Ophidian Network Limited
Requested byhttps://www.primaveraborsa.shop/ CertificateIssuerLet's Encrypt Subjectwww.exmtione.top FingerprintEF:73:D1:E0:C7:DF:AD:67:CD:E5:65:B1:41:12:C1:4C:ED:16:EC:6E ValidityTue, 07 May 2024 02:30:10 GMT - Mon, 05 Aug 2024 02:30:09 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 280x280, components 3 Hash44cbb0a5d7a7e53b5926d98431d3ee02 eb28afce48059bc5383bc777dde84a79774b4e54 a616c1a7157d45d0a0744280dad419366f1584d70aa22de7e9b5ce8e79ebab3f
GET /resrs96mc96qcrs96shnmfa/v230831/20230830173312632242.jpg HTTP/1.1
Host: exmtione.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.primaveraborsa.shop/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Wed, 08 May 2024 02:33:32 GMT
Content-Type: image/jpeg
Content-Length: 18567
Last-Modified: Mon, 30 Oct 2023 04:08:18 GMT
Connection: keep-alive
ETag: "653f2c32-4887"
Accept-Ranges: bytes
|
|
| exmtione.top/resrs96mc96qcrs96shnmfa/v230831/20230830173312649252.jpg | 45.141.156.68 | 200 OK | 24 kB |
URL GET HTTP/1.1exmtione.top/resrs96mc96qcrs96shnmfa/v230831/20230830173312649252.jpg IP45.141.156.68:443 ASN#206776 Ophidian Network Limited
Requested byhttps://www.primaveraborsa.shop/ CertificateIssuerLet's Encrypt Subjectwww.exmtione.top FingerprintEF:73:D1:E0:C7:DF:AD:67:CD:E5:65:B1:41:12:C1:4C:ED:16:EC:6E ValidityTue, 07 May 2024 02:30:10 GMT - Mon, 05 Aug 2024 02:30:09 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 280x280, components 3 Hashd724d679d97939caa095f0ebad8fccb5 1df4f40efb34e982198993fe4fc8e57c6a354a82 d13eb2b1c84030ba3e29e5f3fbd511f6edc5471a9f6ee926f38dce4f453186c9
GET /resrs96mc96qcrs96shnmfa/v230831/20230830173312649252.jpg HTTP/1.1
Host: exmtione.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.primaveraborsa.shop/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Wed, 08 May 2024 02:33:33 GMT
Content-Type: image/jpeg
Content-Length: 23955
Last-Modified: Mon, 30 Oct 2023 04:08:19 GMT
Connection: keep-alive
ETag: "653f2c33-5d93"
Accept-Ranges: bytes
|
|
| exmtione.top/resrs96mc96qcrs96shnmfa/v230831/20230830173312662424.jpg | 45.141.156.68 | 200 OK | 27 kB |
URL GET HTTP/1.1exmtione.top/resrs96mc96qcrs96shnmfa/v230831/20230830173312662424.jpg IP45.141.156.68:443 ASN#206776 Ophidian Network Limited
Requested byhttps://www.primaveraborsa.shop/ CertificateIssuerLet's Encrypt Subjectwww.exmtione.top FingerprintEF:73:D1:E0:C7:DF:AD:67:CD:E5:65:B1:41:12:C1:4C:ED:16:EC:6E ValidityTue, 07 May 2024 02:30:10 GMT - Mon, 05 Aug 2024 02:30:09 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 280x280, components 3 Hash792fe34e0e86fc91d023e3a9ecf947b4 338c276054c100b09aa49457b3f13c7e18de022b a98a1b15d01e13bfb24f9610203a423717e84add0999d16f0878908b98ebd26c
GET /resrs96mc96qcrs96shnmfa/v230831/20230830173312662424.jpg HTTP/1.1
Host: exmtione.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.primaveraborsa.shop/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Wed, 08 May 2024 02:33:33 GMT
Content-Type: image/jpeg
Content-Length: 26948
Last-Modified: Mon, 30 Oct 2023 04:08:18 GMT
Connection: keep-alive
ETag: "653f2c32-6944"
Accept-Ranges: bytes
|
|
| exmtione.top/resrs96mc96qcrs96shnmfa/v230831/big-ads2.jpg | 45.141.156.68 | 200 OK | 224 kB |
URL GET HTTP/1.1exmtione.top/resrs96mc96qcrs96shnmfa/v230831/big-ads2.jpg IP45.141.156.68:443 ASN#206776 Ophidian Network Limited
Requested byhttps://www.primaveraborsa.shop/ CertificateIssuerLet's Encrypt Subjectwww.exmtione.top FingerprintEF:73:D1:E0:C7:DF:AD:67:CD:E5:65:B1:41:12:C1:4C:ED:16:EC:6E ValidityTue, 07 May 2024 02:30:10 GMT - Mon, 05 Aug 2024 02:30:09 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1600x800, components 3 Size224 kB (224000 bytes) Hash4641396ac11fb44676a74975a99f2bbb 453100a28270e36c48c95503cd0e4fd93ed7afa6 06b624bc9b690dc99d2dd7a707bea86c0c249d4f467d9bdc5b08432ba2f5d26f
GET /resrs96mc96qcrs96shnmfa/v230831/big-ads2.jpg HTTP/1.1
Host: exmtione.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.primaveraborsa.shop/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Wed, 08 May 2024 02:33:33 GMT
Content-Type: image/jpeg
Content-Length: 224000
Last-Modified: Mon, 30 Oct 2023 04:08:18 GMT
Connection: keep-alive
ETag: "653f2c32-36b00"
Accept-Ranges: bytes
|
|
| www.primaveraborsa.shop/api/getpricebyprdcolor | 91.241.55.42 | 200 | 31 B |
URL POST HTTP/1.1www.primaveraborsa.shop/api/getpricebyprdcolor IP91.241.55.42:443 ASN#199242 Malakmadze Web LLC
Requested byhttps://www.primaveraborsa.shop/ CertificateIssuerLet's Encrypt Subjectwww.primaveraborsa.shop Fingerprint02:99:35:34:51:01:96:B8:B7:08:25:96:DA:3A:F1:AD:C7:95:92:D0 ValidityTue, 02 Apr 2024 08:02:20 GMT - Mon, 01 Jul 2024 08:02:19 GMT
Hashd478da9f5f5888d31aa9495120047f50 2635e296803f9d69660f222cc40381704e79c45f dce4619422e285e5f9395cc16b554d433ad16fad9449f531dba5560718d006fb
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /api/getpricebyprdcolor HTTP/1.1
Host: www.primaveraborsa.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 73
Origin: https://www.primaveraborsa.shop
DNT: 1
Connection: keep-alive
Referer: https://www.primaveraborsa.shop/
Cookie: JSESSIONID=5F72F61E63CA88A4E2B57FD57F95667A; isFirst=0; sourcekey=1D910AF9679C10EF140B1E9FF74753F4; sourcetime=1715135612026; uvid=202405081033318749; currentCurrencyCode=CRY126; sjstil=0.2915915992206636; current_country=NO
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Server: nginx/1.14.2
Date: Wed, 08 May 2024 02:33:33 GMT
Content-Type: application/json;charset=UTF-8
Content-Length: 31
Connection: keep-alive
Access-Control-Allow-Origin: https://www.primaveraborsa.shop
Access-Control-Allow-Credentials: true
|
|
| www.primaveraborsa.shop/resources/img/country/NO.png | 91.241.55.42 | 200 OK | 133 B |
URL GET HTTP/1.1www.primaveraborsa.shop/resources/img/country/NO.png IP91.241.55.42:443 ASN#199242 Malakmadze Web LLC
Requested byhttps://www.primaveraborsa.shop/ CertificateIssuerLet's Encrypt Subjectwww.primaveraborsa.shop Fingerprint02:99:35:34:51:01:96:B8:B7:08:25:96:DA:3A:F1:AD:C7:95:92:D0 ValidityTue, 02 Apr 2024 08:02:20 GMT - Mon, 01 Jul 2024 08:02:19 GMT
File typePNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced Hash19206ac6b811f0f3ad80435cb79df783 bcd50233ffc50ae066f2d11d3a6ab91e71b35786 82d0cdd1a1a259b6369d0b13e036089dc75877947aafb9fdfbcf454d79cc9417
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /resources/img/country/NO.png HTTP/1.1
Host: www.primaveraborsa.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.primaveraborsa.shop/
Cookie: isFirst=0; sourcekey=1D910AF9679C10EF140B1E9FF74753F4; sourcetime=1715135612026; uvid=202405081033318749; currentCurrencyCode=CRY126; sjstil=0.48981228386399567; current_country=NO
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Wed, 08 May 2024 02:33:33 GMT
Content-Type: image/png
Content-Length: 133
Last-Modified: Wed, 28 Dec 2022 20:50:46 GMT
Connection: keep-alive
ETag: "63acac26-85"
Accept-Ranges: bytes
|
|
| www.primaveraborsa.shop/api/switch_currency | 91.241.55.42 | 200 | 198 B |
URL POST HTTP/1.1www.primaveraborsa.shop/api/switch_currency IP91.241.55.42:443 ASN#199242 Malakmadze Web LLC
Requested byhttps://www.primaveraborsa.shop/ CertificateIssuerLet's Encrypt Subjectwww.primaveraborsa.shop Fingerprint02:99:35:34:51:01:96:B8:B7:08:25:96:DA:3A:F1:AD:C7:95:92:D0 ValidityTue, 02 Apr 2024 08:02:20 GMT - Mon, 01 Jul 2024 08:02:19 GMT
Hash7a1d5733c2f1eaf805b3ded82d87edb0 912de320e393b280296a0e350383b62e9090010a 3ad83ec040236d5a0de04a65e55af15a16c57f471bad9d9db92757d2fcd0b7e5
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /api/switch_currency HTTP/1.1
Host: www.primaveraborsa.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 17
Origin: https://www.primaveraborsa.shop
DNT: 1
Connection: keep-alive
Referer: https://www.primaveraborsa.shop/
Cookie: JSESSIONID=5F72F61E63CA88A4E2B57FD57F95667A; isFirst=0; sourcekey=1D910AF9679C10EF140B1E9FF74753F4; sourcetime=1715135612026; uvid=202405081033318749; currentCurrencyCode=CRY126; sjstil=0.2915915992206636; current_country=NO
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Server: nginx/1.14.2
Date: Wed, 08 May 2024 02:33:33 GMT
Content-Type: application/json;charset=UTF-8
Content-Length: 198
Connection: keep-alive
Access-Control-Allow-Origin: https://www.primaveraborsa.shop
Access-Control-Allow-Credentials: true
|
|
| www.primaveraborsa.shop/api/home_page_product | 91.241.55.42 | 200 | 748 B |
URL POST HTTP/1.1www.primaveraborsa.shop/api/home_page_product IP91.241.55.42:443 ASN#199242 Malakmadze Web LLC
Requested byhttps://www.primaveraborsa.shop/ CertificateIssuerLet's Encrypt Subjectwww.primaveraborsa.shop Fingerprint02:99:35:34:51:01:96:B8:B7:08:25:96:DA:3A:F1:AD:C7:95:92:D0 ValidityTue, 02 Apr 2024 08:02:20 GMT - Mon, 01 Jul 2024 08:02:19 GMT
Hashb3c3585d0d318ed6a7f8680194a9e8d0 f748e7b52c60e2a1f784afc03f269c67699449e1 5da0dd5e106ccb5d3732183f7ddd83334afa01874ad50ce665d08ada971f8bfb
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /api/home_page_product HTTP/1.1
Host: www.primaveraborsa.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 17
Origin: https://www.primaveraborsa.shop
DNT: 1
Connection: keep-alive
Referer: https://www.primaveraborsa.shop/
Cookie: JSESSIONID=5F72F61E63CA88A4E2B57FD57F95667A; isFirst=0; sourcekey=1D910AF9679C10EF140B1E9FF74753F4; sourcetime=1715135612026; uvid=202405081033318749; currentCurrencyCode=CRY126; sjstil=0.48981228386399567; current_country=NO
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Server: nginx/1.14.2
Date: Wed, 08 May 2024 02:33:33 GMT
Content-Type: application/json;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Origin: https://www.primaveraborsa.shop
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
|
|
| www.googletagmanager.com/gtag/js?id=AW-11319413633&_=1715135611793 | 142.250.74.168 | 200 OK | 88 kB |
URL GET HTTP/2www.googletagmanager.com/gtag/js?id=AW-11319413633&_=1715135611793 IP142.250.74.168:443
Requested byhttps://www.primaveraborsa.shop/ CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT
File typeJavaScript source, ASCII text, with very long lines (4179) Hash675b5ed0197c7b21bee6018ed0e719f6 5fd1ea089d6d607039b4d14817d7e17c10d24c41 2ad555c4096f768bec9a8cdbd80dc445696fea96529cbf3c543c2a2acdcf11b7
GET /gtag/js?id=AW-11319413633&_=1715135611793 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.primaveraborsa.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 08 May 2024 02:33:33 GMT
expires: Wed, 08 May 2024 02:33:33 GMT
cache-control: private, max-age=900
last-modified: Wed, 08 May 2024 00:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 88390
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| exmtione.top/resrs96mc96qcrs96shnmfa/v230831/favicon.ico | 45.141.156.68 | 200 OK | 2.6 kB |
URL GET HTTP/1.1exmtione.top/resrs96mc96qcrs96shnmfa/v230831/favicon.ico IP45.141.156.68:443 ASN#206776 Ophidian Network Limited
Requested byhttps://www.primaveraborsa.shop/ CertificateIssuerLet's Encrypt Subjectwww.exmtione.top FingerprintEF:73:D1:E0:C7:DF:AD:67:CD:E5:65:B1:41:12:C1:4C:ED:16:EC:6E ValidityTue, 07 May 2024 02:30:10 GMT - Mon, 05 Aug 2024 02:30:09 GMT
File typePNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced Hash0c0b94d072670dccb58692099d78359e 39e74c0dd34276746fdd9d75cbe5d490248041ed 436deb311a151a66d184885b3822aa6e427b0adf3cfcad7a494624f1d9a70ff3
GET /resrs96mc96qcrs96shnmfa/v230831/favicon.ico HTTP/1.1
Host: exmtione.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.primaveraborsa.shop/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Wed, 08 May 2024 02:33:33 GMT
Content-Type: image/x-icon
Content-Length: 2594
Last-Modified: Mon, 30 Oct 2023 04:08:16 GMT
Connection: keep-alive
ETag: "653f2c30-a22"
Accept-Ranges: bytes
|
|
| exmtione.top/resrs96mc96qcrs96shnmfa/v230831/big-ads3.jpg | 45.141.156.68 | 200 OK | 440 kB |
URL GET HTTP/1.1exmtione.top/resrs96mc96qcrs96shnmfa/v230831/big-ads3.jpg IP45.141.156.68:443 ASN#206776 Ophidian Network Limited
Requested byhttps://www.primaveraborsa.shop/ CertificateIssuerLet's Encrypt Subjectwww.exmtione.top FingerprintEF:73:D1:E0:C7:DF:AD:67:CD:E5:65:B1:41:12:C1:4C:ED:16:EC:6E ValidityTue, 07 May 2024 02:30:10 GMT - Mon, 05 Aug 2024 02:30:09 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1600x800, components 3 Size440 kB (439875 bytes) Hashb4e8845bf51ad7610d0907aeb4f14d9c 6441b7581b4532aed06b51d31223caa1afce3909 55d1d14b64a3a8d522d1bf0b29b9d1861a70a895829a557bf056a4d0a6537961
GET /resrs96mc96qcrs96shnmfa/v230831/big-ads3.jpg HTTP/1.1
Host: exmtione.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.primaveraborsa.shop/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Wed, 08 May 2024 02:33:37 GMT
Content-Type: image/jpeg
Content-Length: 439875
Last-Modified: Mon, 30 Oct 2023 04:08:19 GMT
Connection: keep-alive
ETag: "653f2c33-6b643"
Accept-Ranges: bytes
|
|