r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b782882bdabaf3b08e64120922b4a4b7
2035ed7fc9fb5b6ee9715601ba43de5f94d0c0e9
3fe7d1a9a55b86ec25d02634749ccfae11f3477033ba8cd7ac4131b7948ba619
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3FE7D1A9A55B86EC25D02634749CCFAE11F3477033BA8CD7AC4131B7948BA619"
Last-Modified: Sat, 07 Jan 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14798
Expires: Mon, 09 Jan 2023 07:50:29 GMT
Date: Mon, 09 Jan 2023 03:43:51 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 516b9d6951b09439a51d5284994ed92f
5c78edb38bae36caa8e2db8ed6635a32e46c91dd
eaaf4ebc59d2a06d02b552154c5adb7c713ffc4a7f5caabcff1c2b4cd6ec5c7b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EAAF4EBC59D2A06D02B552154C5ADB7C713FFC4A7F5CAABCFF1C2B4CD6EC5C7B"
Last-Modified: Fri, 06 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6045
Expires: Mon, 09 Jan 2023 05:24:36 GMT
Date: Mon, 09 Jan 2023 03:43:51 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 89a058935fd04697c87e9441fbb466a9
59b5b08119374b1da34cff7e43a7c6dc80103f6e
3a3261f495323ff0f60067b2930b8d0e5e4e5cd6ae9b14929a88047587b735da
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3A3261F495323FF0F60067B2930B8D0E5E4E5CD6AE9B14929A88047587B735DA"
Last-Modified: Sat, 07 Jan 2023 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9012
Expires: Mon, 09 Jan 2023 06:14:03 GMT
Date: Mon, 09 Jan 2023 03:43:51 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Length, Alert, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 09 Jan 2023 02:48:20 GMT
content-type: application/json
age: 3331
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
IP
File type PEM certificate\012- , ASCII text
Hash b1fcd419a4245617397846e8d17233f6
2a037ce244587640b27ead9a0ec2af4f862d91b2
e059b6d834c06e58494c43fb2ff42acbc27c1a1d8f7f30e2f32ca0e167599e2f
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: Bvlcqrcpe/Rs7e9yBnLQ5v25kibb5NutET2hkYS84b+MDfsB0Gsy4QJgnet667L0vhZlan5fVOQ=
x-amz-request-id: JB2J3NV01V7T7NKF
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 09 Jan 2023 03:01:04 GMT
age: 2567
last-modified: Tue, 20 Dec 2022 14:47:58 GMT
etag: "b1fcd419a4245617397846e8d17233f6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
jordans13shoes.us/
301 Moved Permanently 305 B IP
ASN #59447 Istanbuldc Veri Merkezi Ltd Sti
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 49a09f0ebb47698a9137aa80a626d4e4
aff3c36dcdc6e01559fcf295ef3b97f95b5e4223
fcc11e187a62a2a4ea44a76fa1e1973af8a0a8182d5dae07807320555814dc86
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: jordans13shoes.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Mon, 09 Jan 2023 03:43:51 GMT
Server: Apache
Location: https://www.jordans13shoes.us/
Content-Length: 305
Connection: close
Content-Type: text/html; charset=iso-8859-1
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 09 Jan 2023 03:43:51 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Expires, Last-Modified, Alert, Content-Type, Content-Length, ETag, Pragma, Cache-Control, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 09 Jan 2023 03:33:44 GMT
age: 607
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 54ac41a005cad66e958c904071ea1d4f
66932889be57eb15ab99237a69d292b12090c68d
52545e144a7ca5c37c5369d5f5b566b4e5e820b1920ab7fe8e413e7fe022e21b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1783
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 09 Jan 2023 03:43:52 GMT
Last-Modified: Mon, 09 Jan 2023 03:14:09 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e4d86a4616fa1c1f8f0d3dae582168f8
bc3818d737c1cced0f44621702843d222afd3935
44fccda2bc8070060394fcc55eab79ca80d4fe59e033e8122022652c7c1ca0b1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "44FCCDA2BC8070060394FCC55EAB79CA80D4FE59E033E8122022652C7C1CA0B1"
Last-Modified: Mon, 09 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Mon, 09 Jan 2023 09:43:52 GMT
Date: Mon, 09 Jan 2023 03:43:52 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e4d86a4616fa1c1f8f0d3dae582168f8
bc3818d737c1cced0f44621702843d222afd3935
44fccda2bc8070060394fcc55eab79ca80d4fe59e033e8122022652c7c1ca0b1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "44FCCDA2BC8070060394FCC55EAB79CA80D4FE59E033E8122022652C7C1CA0B1"
Last-Modified: Mon, 09 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Mon, 09 Jan 2023 09:43:52 GMT
Date: Mon, 09 Jan 2023 03:43:52 GMT
Connection: keep-alive
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: AsN59KIFQN6kzbFwRgoJXw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: IHqntKeY4BEpAmoxGecsZ5/aIi0=
ocsp.digicert.com/
200 OK 280 B IP
Hash e0ab4f7d3ed3540e7e14d17c701c54d6
9990f48876e99f6c1014cb36d8b293c3d2450720
ef436b06ea587654322853c8523360b8ffa18d0cff4e98e7c9d5df0c3edad85d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2442
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 09 Jan 2023 03:43:52 GMT
Last-Modified: Mon, 09 Jan 2023 03:03:10 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 280
code.jquery.com/jquery-1.12.4.min.js
200 OK 34 kB URL HTTP/2 code.jquery.com/jquery-1.12.4.min.js
IP
File type ASCII text, with very long lines (32077)
Hash fc7624613c4e25843694cdb7fa956f05
7765bb4016ae929e22be579ccde505b94c2a63c1
49c97d70ef48bfdc1d7b96271b5613bb099b2c040ebdf5624962aea92ff428ae
GET /jquery-1.12.4.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.jordans13shoes.us
Connection: keep-alive
Referer: https://www.jordans13shoes.us/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 09 Jan 2023 03:43:52 GMT
content-encoding: gzip
content-length: 33738
content-type: application/javascript; charset=utf-8
last-modified: Wed, 16 Feb 2022 10:50:39 GMT
accept-ranges: bytes
server: nginx
etag: W/"620cd6ff-17b8b"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-sp-metadata: HS256.CIi37p0GEoYBCiRlYWU2OTQwNS1lYzhhLTQ2OTctYTU4ZS02ZDdiNGU3NTQ4YjgQ+OiCoKvU+wIaBgj4mu6dBiIMOTEuOTAuNDIuMTU0KPQ3MAM4BEIWVExTX0FFU18xMjhfR0NNX1NIQTI1NlogYzdkMmI0YzQ4NGE0MTNlMTkxZGU2YWNmZjJkYjIwMDkaLAgBEiQ1M2IzYTQ2OS1mMTY2LTRlMjQtYTUyMy04NTAzMWE4ODcxOWUYyocCIhgIAhIUY2RzMjUxLnNrMS5od2Nkbi5uZXQ=.QBIicn+GnGn1TjGNPY2HyLs27GQXxf3XND3myDKPzZI=
x-hw: 1673235832.dop206.sk1.t,1673235832.cds020.sk1.hn,1673235832.cds251.sk1.c
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash e0ab4f7d3ed3540e7e14d17c701c54d6
9990f48876e99f6c1014cb36d8b293c3d2450720
ef436b06ea587654322853c8523360b8ffa18d0cff4e98e7c9d5df0c3edad85d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2442
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 09 Jan 2023 03:43:52 GMT
Last-Modified: Mon, 09 Jan 2023 03:03:10 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 280
www.jordans13shoes.us/includes/templates/13105/css/css_buttons.css
200 OK 831 B URL HTTP/2 www.jordans13shoes.us/includes/templates/13105/css/css_buttons.css
IP
ASN #59447 Istanbuldc Veri Merkezi Ltd Sti
File type ASCII text, with CRLF line terminators
Hash cc9bb9b12583bdcb8199486353143361
8eff8a33b302b358b282f74cd6d36066a530d880
cb71b89b2ca6a88c114ea85b549768d00200d08dcb1f87cd9a88cef6d5ac49cf
GET /includes/templates/13105/css/css_buttons.css HTTP/1.1
Host: www.jordans13shoes.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jordans13shoes.us/
Cookie: zenid=6fngv41rcaomt9p0rlold2erc1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 09 Jan 2023 03:43:52 GMT
server: Apache
last-modified: Sun, 01 Jan 2006 20:15:46 GMT
etag: "653-40951bb498080-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 831
content-type: text/css
X-Firefox-Spdy: h2
www.jordans13shoes.us/includes/templates/13105/css/lightbox.css
200 OK 575 B URL HTTP/2 www.jordans13shoes.us/includes/templates/13105/css/lightbox.css
IP
ASN #59447 Istanbuldc Veri Merkezi Ltd Sti
File type ASCII text, with CR line terminators
Hash c7a626ca8405d6ae9f0b50c89998984a
914e4ae28055635cf60a463afb08d2a586a73aaf
6a4e502fae20f95801dd3fb003abdb571123cca2e12ea1ae4de434b186aa4e77
GET /includes/templates/13105/css/lightbox.css HTTP/1.1
Host: www.jordans13shoes.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jordans13shoes.us/
Cookie: zenid=6fngv41rcaomt9p0rlold2erc1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 09 Jan 2023 03:43:52 GMT
server: Apache
last-modified: Fri, 15 Jun 2018 04:28:04 GMT
etag: "5fd-56ea6a451bd00-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 575
content-type: text/css
X-Firefox-Spdy: h2
www.jordans13shoes.us/includes/templates/13105/css/xzoom.css
200 OK 600 B URL HTTP/2 www.jordans13shoes.us/includes/templates/13105/css/xzoom.css
IP
ASN #59447 Istanbuldc Veri Merkezi Ltd Sti
Hash 0bdff26582143e993c1a3b086e95a88d
615e0b0a3385170151a8518ccef71d2825c310d4
0466c7ccbcdaa4fa0ac4d37118342752ad5de0ce2ee9114ceab747f0ed43c1a2
GET /includes/templates/13105/css/xzoom.css HTTP/1.1
Host: www.jordans13shoes.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jordans13shoes.us/
Cookie: zenid=6fngv41rcaomt9p0rlold2erc1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 09 Jan 2023 03:43:52 GMT
server: Apache
last-modified: Sun, 28 Jun 2020 10:17:38 GMT
etag: "656-5a92240669480-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 600
content-type: text/css
X-Firefox-Spdy: h2
www.jordans13shoes.us/includes/templates/13105/css/jquery.fancybox.css
200 OK 1.4 kB URL HTTP/2 www.jordans13shoes.us/includes/templates/13105/css/jquery.fancybox.css
IP
ASN #59447 Istanbuldc Veri Merkezi Ltd Sti
Hash 557c29a4f424dc35fc9f1f639861642e
a9e0b8128c4936dbe1b611e4beb1760aa6513501
f7cf467cf3da2933b1388c3a2b7c4483edb0ce7680252bf1922f68c272446554
GET /includes/templates/13105/css/jquery.fancybox.css HTTP/1.1
Host: www.jordans13shoes.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jordans13shoes.us/
Cookie: zenid=6fngv41rcaomt9p0rlold2erc1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 09 Jan 2023 03:43:52 GMT
server: Apache
last-modified: Thu, 21 Jun 2018 00:15:10 GMT
etag: "135b-56f1bceed1f80-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1430
content-type: text/css
X-Firefox-Spdy: h2
www.jordans13shoes.us/includes/templates/13105/css/bootstrap-submenu.min.css
200 OK 694 B URL HTTP/2 www.jordans13shoes.us/includes/templates/13105/css/bootstrap-submenu.min.css
IP
ASN #59447 Istanbuldc Veri Merkezi Ltd Sti
File type ASCII text, with very long lines (4878)
Hash 6b44b3b110959a43cb5deeb1834292d1
d97f1bfe102e28b68e3e7ec5fccc7c95e2f6091a
99dbe31f9e360759f113459a3f30b719364bb05d5e81121340211bd73b075f8e
GET /includes/templates/13105/css/bootstrap-submenu.min.css HTTP/1.1
Host: www.jordans13shoes.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jordans13shoes.us/
Cookie: zenid=6fngv41rcaomt9p0rlold2erc1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 09 Jan 2023 03:43:52 GMT
server: Apache
last-modified: Sat, 19 Mar 2016 00:16:38 GMT
etag: "13c0-52e5bc6eee580-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 694
content-type: text/css
X-Firefox-Spdy: h2
www.jordans13shoes.us/includes/templates/13105/css/13105.css
200 OK 2.9 kB URL HTTP/2 www.jordans13shoes.us/includes/templates/13105/css/13105.css
IP
ASN #59447 Istanbuldc Veri Merkezi Ltd Sti
File type ASCII text, with CRLF line terminators
Hash e1a02682e84773aec7aca11989254fe6
dc0d311dcc361755242ef384b72b6ca92c3b2a4e
ba35da3bbd71652e3c683a40692547bcacfeec250008945d722634adb8edea08
GET /includes/templates/13105/css/13105.css HTTP/1.1
Host: www.jordans13shoes.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jordans13shoes.us/
Cookie: zenid=6fngv41rcaomt9p0rlold2erc1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 09 Jan 2023 03:43:52 GMT
server: Apache
last-modified: Thu, 07 Jul 2022 07:58:09 GMT
etag: "33f7-5e332724f732a-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2880
content-type: text/css
X-Firefox-Spdy: h2
www.jordans13shoes.us/includes/templates/13105/images/logo.png
200 OK 9.9 kB URL HTTP/2 www.jordans13shoes.us/includes/templates/13105/images/logo.png
IP
ASN #59447 Istanbuldc Veri Merkezi Ltd Sti
File type PNG image data, 500 x 135, 8-bit/color RGB, non-interlaced\012- data
Hash e1c2ab754587392a7712bef8a7a42be5
46493aeeaf4de21a33bb47cb9e15e6e06bfeb738
d5e7f70a55e82e194f5430dadd0f1f680ba4a97c6e3bb49724a08002eb23c06a
GET /includes/templates/13105/images/logo.png HTTP/1.1
Host: www.jordans13shoes.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jordans13shoes.us/
Cookie: zenid=6fngv41rcaomt9p0rlold2erc1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 09 Jan 2023 03:43:52 GMT
server: Apache
last-modified: Mon, 13 Aug 2018 08:02:30 GMT
etag: "26ce-5734c83d47180"
accept-ranges: bytes
content-length: 9934
content-type: image/png
X-Firefox-Spdy: h2
maxcdn.bootstrapcdn.com/bootstrap/3.3.7/fonts/glyphicons-halflings-regular.woff2
200 OK 18 kB URL HTTP/2 maxcdn.bootstrapcdn.com/bootstrap/3.3.7/fonts/glyphicons-halflings-regular.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 18028, version 1.589\012- data
Hash 448c34a56d699c29117adc64c43affeb
ca35b697d99cae4d1b60f2d60fcd37771987eb07
fe185d11a49676890d47bb783312a0cda5a44c4039214094e7957b4c040ef11c
GET /bootstrap/3.3.7/fonts/glyphicons-halflings-regular.woff2 HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.jordans13shoes.us
Connection: keep-alive
Referer: https://maxcdn.bootstrapcdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 09 Jan 2023 03:43:53 GMT
content-type: font/woff2
content-length: 18028
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: "448c34a56d699c29117adc64c43affeb"
last-modified: Mon, 25 Jan 2021 22:04:00 GMT
cdn-cachedat: 11/15/2022 10:30:09
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1053
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: f30c07e03bc2811cdf456c72b3f67759
cdn-cache: HIT
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 786a2bd499beb500-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.jordans13shoes.us/images/banners/banner.jpg
200 OK 71 kB URL HTTP/2 www.jordans13shoes.us/images/banners/banner.jpg
IP
ASN #59447 Istanbuldc Veri Merkezi Ltd Sti
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1200x559, components 3\012- data
Hash 116ad391e2dc5993f8b0bb00fd8c20d1
1baf4ecaa8446bc08d2af3a2050d7e8a8a9304e5
2287c130900a0579acc1850599e1151768e354f1da567589a2ef4de630e52708
GET /images/banners/banner.jpg HTTP/1.1
Host: www.jordans13shoes.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jordans13shoes.us/
Cookie: zenid=6fngv41rcaomt9p0rlold2erc1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 09 Jan 2023 03:43:52 GMT
server: Apache
last-modified: Sat, 22 May 2021 12:02:37 GMT
etag: "1156b-5c2e9f3d39b07"
accept-ranges: bytes
content-length: 71019
content-type: image/jpeg
X-Firefox-Spdy: h2
www.jordans13shoes.us/includes/templates/13105/jscript/13105.js
200 OK 657 B URL HTTP/2 www.jordans13shoes.us/includes/templates/13105/jscript/13105.js
IP
ASN #59447 Istanbuldc Veri Merkezi Ltd Sti
File type ASCII text, with CRLF line terminators
Hash e38b54dc1d728c93e04b7fd296dc4bc8
d8b196f12b305d4c90474e7fb2b355e19afef6cd
010b685f9f6059233b1680e129c4c8d5f843ffc7f1b81af6e288f90b08d8493e
Analyzer Verdict Alert fortinet Malware
GET /includes/templates/13105/jscript/13105.js HTTP/1.1
Host: www.jordans13shoes.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jordans13shoes.us/
Cookie: zenid=6fngv41rcaomt9p0rlold2erc1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 09 Jan 2023 03:43:53 GMT
server: Apache
last-modified: Fri, 22 Jun 2018 08:08:58 GMT
etag: "a41-56f368b355a80-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 657
content-type: application/javascript
X-Firefox-Spdy: h2
www.jordans13shoes.us/includes/templates/13105/jscript/bootstrap-submenu.min.js
200 OK 969 B URL HTTP/2 www.jordans13shoes.us/includes/templates/13105/jscript/bootstrap-submenu.min.js
IP
ASN #59447 Istanbuldc Veri Merkezi Ltd Sti
File type ASCII text, with very long lines (2610)
Hash fc82c55c9292ce7aff670032493ec845
d5d9d47f5102f85d98b85457ca6397ea08d82645
d1c1ace8345db85df7b1ad28ff08f266c5bf31c2315e6fe938bcc81f36eae1be
Analyzer Verdict Alert fortinet Malware
GET /includes/templates/13105/jscript/bootstrap-submenu.min.js HTTP/1.1
Host: www.jordans13shoes.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jordans13shoes.us/
Cookie: zenid=6fngv41rcaomt9p0rlold2erc1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 09 Jan 2023 03:43:53 GMT
server: Apache
last-modified: Sat, 19 Mar 2016 00:16:38 GMT
etag: "ae4-52e5bc6eee580-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 969
content-type: application/javascript
X-Firefox-Spdy: h2
www.jordans13shoes.us/includes/templates/13105/jscript/jquery.input-counter.min.js
200 OK 593 B URL HTTP/2 www.jordans13shoes.us/includes/templates/13105/jscript/jquery.input-counter.min.js
IP
ASN #59447 Istanbuldc Veri Merkezi Ltd Sti
File type ASCII text, with very long lines (1874), with no line terminators
Hash 608f8e1c327761c2d11f40878b8c8a41
b8cd4808acc912952498a25731130d7a366e1cbf
d73336fdd724d1b3330cb5714e5e03775b7a154e83dd203a467330cc4db7c6c1
Analyzer Verdict Alert fortinet Malware
GET /includes/templates/13105/jscript/jquery.input-counter.min.js HTTP/1.1
Host: www.jordans13shoes.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jordans13shoes.us/
Cookie: zenid=6fngv41rcaomt9p0rlold2erc1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 09 Jan 2023 03:43:53 GMT
server: Apache
last-modified: Tue, 14 May 2019 06:09:08 GMT
etag: "752-588d2deeae900-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 593
content-type: application/javascript
X-Firefox-Spdy: h2
www.jordans13shoes.us/includes/templates/13105/jscript/scriptbreaker-multiple-accordion-1.js
200 OK 948 B URL HTTP/2 www.jordans13shoes.us/includes/templates/13105/jscript/scriptbreaker-multiple-accordion-1.js
IP
ASN #59447 Istanbuldc Veri Merkezi Ltd Sti
File type ASCII text, with CRLF line terminators
Hash a0a56dc1493baf0c8036b282c2663f00
c3ec5443d0053ddc93d7b947889b0dfe6c4f84d6
05b1d6640c7995fedbe8d9c79551cf23100c7b7d4c2084e856ddced32e860453
Analyzer Verdict Alert fortinet Malware
GET /includes/templates/13105/jscript/scriptbreaker-multiple-accordion-1.js HTTP/1.1
Host: www.jordans13shoes.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jordans13shoes.us/
Cookie: zenid=6fngv41rcaomt9p0rlold2erc1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 09 Jan 2023 03:43:53 GMT
server: Apache
last-modified: Tue, 25 Jun 2019 06:41:46 GMT
etag: "b24-58c2038f55e80-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 948
content-type: application/javascript
X-Firefox-Spdy: h2
www.jordans13shoes.us/images/footer_payment.png
200 OK 11 kB URL HTTP/2 www.jordans13shoes.us/images/footer_payment.png
IP
ASN #59447 Istanbuldc Veri Merkezi Ltd Sti
File type PNG image data, 160 x 35, 8-bit/color RGBA, non-interlaced\012- data
Hash 0a187346aaba68aee8540d7f9f9d0158
009d9ec8b44791a9299aa3af6da31ce0630b4cb1
2f4d60a40d726133e94e5abc6c1c1150c1c06303f3dfc9bc9f85628fd7e76df8
GET /images/footer_payment.png HTTP/1.1
Host: www.jordans13shoes.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jordans13shoes.us/
Cookie: zenid=6fngv41rcaomt9p0rlold2erc1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 09 Jan 2023 03:43:53 GMT
server: Apache
last-modified: Thu, 21 Jun 2018 01:56:20 GMT
etag: "2af0-56f1d38b9f900"
accept-ranges: bytes
content-length: 10992
content-type: image/png
X-Firefox-Spdy: h2
www.jordans13shoes.us/includes/templates/13105/jscript/xzoom.min.js
200 OK 4.6 kB URL HTTP/2 www.jordans13shoes.us/includes/templates/13105/jscript/xzoom.min.js
IP
ASN #59447 Istanbuldc Veri Merkezi Ltd Sti
File type ASCII text, with very long lines (14091)
Hash c13a0664c2ead03fdcf830ba945f30b7
2abfae1ba5e1c9e50e598677cf18a9a7aeadbb17
769cf849c15e871ab1f57e383b6c0cfd787d67534bbc43203fd2d8e87a59d70a
Analyzer Verdict Alert fortinet Malware
GET /includes/templates/13105/jscript/xzoom.min.js HTTP/1.1
Host: www.jordans13shoes.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jordans13shoes.us/
Cookie: zenid=6fngv41rcaomt9p0rlold2erc1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 09 Jan 2023 03:43:53 GMT
server: Apache
last-modified: Thu, 21 Jun 2018 00:22:08 GMT
etag: "3814-56f1be7d74c00-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4550
content-type: application/javascript
X-Firefox-Spdy: h2
www.jordans13shoes.us/includes/templates/13105/jscript/jquery.hammer.min.js
200 OK 4.1 kB URL HTTP/2 www.jordans13shoes.us/includes/templates/13105/jscript/jquery.hammer.min.js
IP
ASN #59447 Istanbuldc Veri Merkezi Ltd Sti
File type ASCII text, with very long lines (12825)
Hash a32bd159c04c244c2ce11a7009525190
4f9a23a89ad83c3ef675f9de8315bb53f3335d83
845aee6c83f8279d93956f35a1793b72545c34af9f02940858d89665d067beee
Analyzer Verdict Alert fortinet Malware
GET /includes/templates/13105/jscript/jquery.hammer.min.js HTTP/1.1
Host: www.jordans13shoes.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jordans13shoes.us/
Cookie: zenid=6fngv41rcaomt9p0rlold2erc1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 09 Jan 2023 03:43:53 GMT
server: Apache
last-modified: Sun, 11 Feb 2018 01:39:56 GMT
etag: "32cf-564e5d6b49300-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4148
content-type: application/javascript
X-Firefox-Spdy: h2
www.jordans13shoes.us/includes/templates/13105/jscript/bootstrap.min.js
200 OK 9.8 kB URL HTTP/2 www.jordans13shoes.us/includes/templates/13105/jscript/bootstrap.min.js
IP
ASN #59447 Istanbuldc Veri Merkezi Ltd Sti
File type ASCII text, with very long lines (32033)
Hash c83dab682eea0b37ac9522e2856cbb6b
db1fb35549a4ac9cc12811f09bc4b07b48c51434
a9611bc805de07c98225bb878876a24b063fa52559adaf2ba4e997566d5cf3a1
Analyzer Verdict Alert fortinet Malware
GET /includes/templates/13105/jscript/bootstrap.min.js HTTP/1.1
Host: www.jordans13shoes.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jordans13shoes.us/
Cookie: zenid=6fngv41rcaomt9p0rlold2erc1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 09 Jan 2023 03:43:53 GMT
server: Apache
last-modified: Mon, 25 Jul 2016 07:53:30 GMT
etag: "90b5-538711480d280-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 9833
content-type: application/javascript
X-Firefox-Spdy: h2
www.jordans13shoes.us/includes/templates/13105/jscript/hc-sticky.js
200 OK 4.0 kB URL HTTP/2 www.jordans13shoes.us/includes/templates/13105/jscript/hc-sticky.js
IP
ASN #59447 Istanbuldc Veri Merkezi Ltd Sti
File type ASCII text, with very long lines (10510)
Hash f6b85c0ecbeb17b5749b32de3f74e049
f2a01703647e4551f101c5f0b5bb99940a400978
1024a0026421f73e074d21fd6a3b7f6e64f69896a41abe20258e77ee5f549aaf
Analyzer Verdict Alert fortinet Malware
GET /includes/templates/13105/jscript/hc-sticky.js HTTP/1.1
Host: www.jordans13shoes.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jordans13shoes.us/
Cookie: zenid=6fngv41rcaomt9p0rlold2erc1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 09 Jan 2023 03:43:53 GMT
server: Apache
last-modified: Thu, 17 May 2018 22:13:10 GMT
etag: "2a2e-56c6e24040980-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 3970
content-type: application/javascript
X-Firefox-Spdy: h2
www.jordans13shoes.us/includes/templates/13105/jscript/jquery.fancybox.js
200 OK 14 kB URL HTTP/2 www.jordans13shoes.us/includes/templates/13105/jscript/jquery.fancybox.js
IP
ASN #59447 Istanbuldc Veri Merkezi Ltd Sti
Hash 711e2ae0ba4411cc4bb74bd9b04807f0
b33f3c310875a4854605c4069742ef4da52e1251
9c8d84c1d9442efa552a20abc517f5b6b66ce92e7edcc66f93b3c8de0474bb31
Analyzer Verdict Alert fortinet Malware
GET /includes/templates/13105/jscript/jquery.fancybox.js HTTP/1.1
Host: www.jordans13shoes.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jordans13shoes.us/
Cookie: zenid=6fngv41rcaomt9p0rlold2erc1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 09 Jan 2023 03:43:53 GMT
server: Apache
last-modified: Sun, 11 Feb 2018 01:39:56 GMT
etag: "be42-564e5d6b49300-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 13922
content-type: application/javascript
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 00dae74d254e25e6065bc0fd90785480
19611ae1948df1cb77231aea0adca9cac1f27730
5314ed713156c8b9dc2a379f21c2f162187920f6be0f920fff935b7fdbe32eb3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5314ED713156C8B9DC2A379F21C2F162187920F6BE0F920FFF935B7FDBE32EB3"
Last-Modified: Mon, 09 Jan 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Mon, 09 Jan 2023 09:43:53 GMT
Date: Mon, 09 Jan 2023 03:43:53 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 00dae74d254e25e6065bc0fd90785480
19611ae1948df1cb77231aea0adca9cac1f27730
5314ed713156c8b9dc2a379f21c2f162187920f6be0f920fff935b7fdbe32eb3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5314ED713156C8B9DC2A379F21C2F162187920F6BE0F920FFF935B7FDBE32EB3"
Last-Modified: Mon, 09 Jan 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21597
Expires: Mon, 09 Jan 2023 09:43:50 GMT
Date: Mon, 09 Jan 2023 03:43:53 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 00dae74d254e25e6065bc0fd90785480
19611ae1948df1cb77231aea0adca9cac1f27730
5314ed713156c8b9dc2a379f21c2f162187920f6be0f920fff935b7fdbe32eb3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5314ED713156C8B9DC2A379F21C2F162187920F6BE0F920FFF935B7FDBE32EB3"
Last-Modified: Mon, 09 Jan 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Mon, 09 Jan 2023 09:43:53 GMT
Date: Mon, 09 Jan 2023 03:43:53 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 00dae74d254e25e6065bc0fd90785480
19611ae1948df1cb77231aea0adca9cac1f27730
5314ed713156c8b9dc2a379f21c2f162187920f6be0f920fff935b7fdbe32eb3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5314ED713156C8B9DC2A379F21C2F162187920F6BE0F920FFF935B7FDBE32EB3"
Last-Modified: Mon, 09 Jan 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Mon, 09 Jan 2023 09:43:53 GMT
Date: Mon, 09 Jan 2023 03:43:53 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 00dae74d254e25e6065bc0fd90785480
19611ae1948df1cb77231aea0adca9cac1f27730
5314ed713156c8b9dc2a379f21c2f162187920f6be0f920fff935b7fdbe32eb3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5314ED713156C8B9DC2A379F21C2F162187920F6BE0F920FFF935B7FDBE32EB3"
Last-Modified: Mon, 09 Jan 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Mon, 09 Jan 2023 09:43:53 GMT
Date: Mon, 09 Jan 2023 03:43:53 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 457ca75ed75785c514fb36a16792410f
fcc640c00713c93633d0b2887104c8fbc6c754f9
ff6a40bdaa6bc25eefb2d7ed130ea34460494d92c19c07dff4cc371c45d1ac44
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FF6A40BDAA6BC25EEFB2D7ED130EA34460494D92C19C07DFF4CC371C45D1AC44"
Last-Modified: Fri, 06 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8077
Expires: Mon, 09 Jan 2023 05:58:30 GMT
Date: Mon, 09 Jan 2023 03:43:53 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca7956cf-b613-4307-88cb-8cc1a3fda11c.jpeg
200 OK 9.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca7956cf-b613-4307-88cb-8cc1a3fda11c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash aa9ed964b2f5f08ec571b525992f1566
9de0dfe9d1018726f1504b26964629f419700a49
d75747ac8726cbbe7583c48c2522cecc0c3ed6a0fa3694513c694876847b5944
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca7956cf-b613-4307-88cb-8cc1a3fda11c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9594
x-amzn-requestid: 7844d69e-b683-47ed-8ad8-a26f67916de1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eJ4BbFjnIAMFhSA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b3d3a2-6da6fede0b33969b774aab38;Sampled=0
x-amzn-remapped-date: Tue, 03 Jan 2023 07:05:06 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 1h_UiB89mG6qQdHyosgLG4MYT3KBOyDxLsBCuKuK7smmTWAiEsncxw==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Sun, 08 Jan 2023 11:12:45 GMT
age: 59468
etag: "9de0dfe9d1018726f1504b26964629f419700a49"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f2b50a0-7eb4-4513-84d9-bef528bd99f3.jpeg
200 OK 8.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f2b50a0-7eb4-4513-84d9-bef528bd99f3.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 23b87f42d40f3cc7bc9f46964e83d787
400474fb7b7d241935f5a5745281e6d95902581c
5a2818d70f4304bb2ed26ad0fe1658bc130aff43e11c60e0abac8be6e51836c7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f2b50a0-7eb4-4513-84d9-bef528bd99f3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8284
x-amzn-requestid: 5c9f2c93-3275-489c-9583-0e339a1f6fcb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eWhZ8FhcIAMFy-A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b8e2a5-500bb3d46026ba1f5371f98f;Sampled=0
x-amzn-remapped-date: Sat, 07 Jan 2023 03:10:29 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: 6rp8e_-TjvGBEgszRGgfln9tZHhN4TBXjjmWEE2-hy2uJAtOiO-b3Q==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 618052a0d9c86c1a3bf663f82d041d1c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 08 Jan 2023 04:06:10 GMT
age: 85063
etag: "400474fb7b7d241935f5a5745281e6d95902581c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F71367d17-5f39-4d68-acc2-9e84cc70b6ee.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F71367d17-5f39-4d68-acc2-9e84cc70b6ee.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 958d699fe0e01f8f1e6002637f87ab63
9feb324f4c37992e68e04762494841d532b3da2b
a20dce10643f6cb9aed206ca177c54538076e61568528e5fdc2744d8cc25846a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F71367d17-5f39-4d68-acc2-9e84cc70b6ee.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10157
x-amzn-requestid: cc023618-8a3b-452e-84cc-04c8b5f48a3f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eWhZ8Es5IAMFYtA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b8e2a5-6d9f330a4b3df85c661c1bd6;Sampled=0
x-amzn-remapped-date: Sat, 07 Jan 2023 03:10:29 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ugdPKuDbc79tRm-gf9Z7034UDcmx-xbb0oxzckjipPoJbTsywGFejQ==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Mon, 09 Jan 2023 03:29:03 GMT
age: 890
etag: "9feb324f4c37992e68e04762494841d532b3da2b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fab696bdd-92ae-4c01-855b-6bbe0e8165ad.jpeg
200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fab696bdd-92ae-4c01-855b-6bbe0e8165ad.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e0189748e9478c37ab22a71c0826ca99
08186f7c9717eb7165ee8b9b803760da967b82e7
40a9b3a38f6799c2005bc7cc2716104b175a2178efc8029188b9aff19e598483
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fab696bdd-92ae-4c01-855b-6bbe0e8165ad.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8866
x-amzn-requestid: b4a6c607-98b7-4689-96c3-646756db23df
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eZblsHkmIAMFzKw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ba0c8a-02beb65706f8d3d44a812788;Sampled=0
x-amzn-remapped-date: Sun, 08 Jan 2023 00:21:30 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: MzzI0YmTAJhriuvne16lq57vyPB1DKLu_KhfpDQ3cUmmtRwO_AQsJQ==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Sun, 08 Jan 2023 09:02:38 GMT
age: 67275
etag: "08186f7c9717eb7165ee8b9b803760da967b82e7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33bbc100-e509-4a4f-8b98-1d44a52a7a3c.jpeg
200 OK 9.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33bbc100-e509-4a4f-8b98-1d44a52a7a3c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a23d61d610c7b55d943fcb2636a01b65
82c4c5170c7b586c2a7a1f2d2d5c9ff0219af065
28bf3039cc8c1213e64893c71bc150eda573223feb2cc15ad0814a44960d434a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33bbc100-e509-4a4f-8b98-1d44a52a7a3c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9539
x-amzn-requestid: 9f388939-cfb7-432e-a921-e9188736bb45
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eTw5QGZ6oAMFxQg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b7c83b-4f9d5bfc30e5ee126333d54e;Sampled=0
x-amzn-remapped-date: Fri, 06 Jan 2023 07:05:31 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: b85TTh5GZmQqmHRmmdz9bAw6COe0CeTyHotfElj0qpL9H051dywT3Q==
via: 1.1 1f6e68152880a39d72e6bf2996cd6a60.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Sun, 08 Jan 2023 09:29:35 GMT
age: 65658
etag: "82c4c5170c7b586c2a7a1f2d2d5c9ff0219af065"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e2e4caa-f18f-43f7-bbce-461d21b07be2.jpeg
200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e2e4caa-f18f-43f7-bbce-461d21b07be2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2afe6c3864f4dd4661cdf28d845e8a95
431f560fc40b5de4881e5e4692672c977915afd1
040f2289b10935f9c7fc054092153a02e5cb132cbe72f6a53802eab9a2415c4d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e2e4caa-f18f-43f7-bbce-461d21b07be2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8929
x-amzn-requestid: b13a1539-130b-4a12-94e8-3e624eb12e8e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eJ4FdHNkIAMFlnw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b3d3bc-43ec5dcf3921d6247324f994;Sampled=0
x-amzn-remapped-date: Tue, 03 Jan 2023 07:05:32 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: QSEl29JtaoxSMIoqxodoFcSbo1muCHaYN-j0HzVCs9a-XgFYHdA6GQ==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 ee8246c5442dace7525c74f6a799bb46.cloudfront.net (CloudFront), 1.1 google
date: Sun, 08 Jan 2023 12:25:51 GMT
age: 55082
etag: "431f560fc40b5de4881e5e4692672c977915afd1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img.jordans13shoes.us/images/Air_Jordan_002/Jordan_13_Retro_Ray_Allen_PE_414571-125_feJv7NRnZ.jpg
200 OK 26 kB URL HTTP/2 img.jordans13shoes.us/images/Air_Jordan_002/Jordan_13_Retro_Ray_Allen_PE_414571-125_feJv7NRnZ.jpg
IP
ASN #59447 Istanbuldc Veri Merkezi Ltd Sti
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v90), quality = 91", baseline, precision 8, 450x450, components 3\012- data
Hash d273734d9dfda59e5649674cb986e2f0
069e973d1ee9de4687a672d80a1d22661be38ebe
77ee9e614f4782be2ec40ebba45085c8194f108ffeff59c4866991e1f66dc05c
GET /images/Air_Jordan_002/Jordan_13_Retro_Ray_Allen_PE_414571-125_feJv7NRnZ.jpg HTTP/1.1
Host: img.jordans13shoes.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jordans13shoes.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Mon, 09 Jan 2023 03:43:53 GMT
server: Apache
last-modified: Thu, 04 Aug 2022 02:42:42 GMT
etag: "6583-5e5614db74c80"
accept-ranges: bytes
content-length: 25987
content-type: image/jpeg
X-Firefox-Spdy: h2
img.jordans13shoes.us/images/images_005/Travis_Scott_x_Air_Jordan_1_Low_Reverse_Mocha_DM7866-162_QJAMPZG13.jpg
200 OK 18 kB URL HTTP/2 img.jordans13shoes.us/images/images_005/Travis_Scott_x_Air_Jordan_1_Low_Reverse_Mocha_DM7866-162_QJAMPZG13.jpg
IP
ASN #59447 Istanbuldc Veri Merkezi Ltd Sti
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v90), quality = 91", baseline, precision 8, 450x450, components 3\012- data
Hash ffd3aafd96a1b273b415612bd5dbdbd4
2ab278207aad74543a093149bd0bb2d9e67b797f
c1375ad1e30594a9f9b42a7e0704ca22772710d1074a5848f907feb02959e3e1
GET /images/images_005/Travis_Scott_x_Air_Jordan_1_Low_Reverse_Mocha_DM7866-162_QJAMPZG13.jpg HTTP/1.1
Host: img.jordans13shoes.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jordans13shoes.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Mon, 09 Jan 2023 03:43:53 GMT
server: Apache
last-modified: Sat, 21 May 2022 09:36:30 GMT
etag: "46f6-5df82577b6380"
accept-ranges: bytes
content-length: 18166
content-type: image/jpeg
X-Firefox-Spdy: h2
img.jordans13shoes.us/images/images_005/Travis_Scott_x_Fragment_x_Air_Jordan_1_Low_OG_White_DM7866-140_ApQfJ1m58.jpg
200 OK 21 kB URL HTTP/2 img.jordans13shoes.us/images/images_005/Travis_Scott_x_Fragment_x_Air_Jordan_1_Low_OG_White_DM7866-140_ApQfJ1m58.jpg
IP
ASN #59447 Istanbuldc Veri Merkezi Ltd Sti
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v90), quality = 91", baseline, precision 8, 450x450, components 3\012- data
Hash f71ee5abb98c1bfadf2a6aac139c9b4d
2fe3411b2ca9294dbde73b7fd1faa04e79654780
337935c5e5b51c1ceabc08d3c593e089acb3e221fc1c4660074ebcf6a0b68dc3
GET /images/images_005/Travis_Scott_x_Fragment_x_Air_Jordan_1_Low_OG_White_DM7866-140_ApQfJ1m58.jpg HTTP/1.1
Host: img.jordans13shoes.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jordans13shoes.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Mon, 09 Jan 2023 03:43:53 GMT
server: Apache
last-modified: Sat, 21 May 2022 09:36:22 GMT
etag: "5370-5df8257015180"
accept-ranges: bytes
content-length: 21360
content-type: image/jpeg
X-Firefox-Spdy: h2
img.jordans13shoes.us/images/images_007/Travis_Scott_x_Air_Jordan_6_Medium_Olive_CN1084-200_ArOuN4UZR.jpg
200 OK 28 kB URL HTTP/2 img.jordans13shoes.us/images/images_007/Travis_Scott_x_Air_Jordan_6_Medium_Olive_CN1084-200_ArOuN4UZR.jpg
IP
ASN #59447 Istanbuldc Veri Merkezi Ltd Sti
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v90), quality = 91", baseline, precision 8, 450x450, components 3\012- data
Hash a168f337b9e9e58677930e393a27183c
3dcd7ec1353469a7c464aa774d07baa954a1348e
a0d3f14dc8d192e96658c14bd97b34aff01746526ff8c3b749190de6b3cd0a02
GET /images/images_007/Travis_Scott_x_Air_Jordan_6_Medium_Olive_CN1084-200_ArOuN4UZR.jpg HTTP/1.1
Host: img.jordans13shoes.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jordans13shoes.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Mon, 09 Jan 2023 03:43:53 GMT
server: Apache
last-modified: Sat, 21 May 2022 09:39:58 GMT
etag: "6e6a-5df8263e13780"
accept-ranges: bytes
content-length: 28266
content-type: image/jpeg
X-Firefox-Spdy: h2
img.jordans13shoes.us/images/Air_Jordan_002/Air_Jordan_9_Chile_Red_CT8019-600_3g8doBc1p.jpg
200 OK 54 kB URL HTTP/2 img.jordans13shoes.us/images/Air_Jordan_002/Air_Jordan_9_Chile_Red_CT8019-600_3g8doBc1p.jpg
IP
ASN #59447 Istanbuldc Veri Merkezi Ltd Sti
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v90), quality = 91", baseline, precision 8, 450x450, components 3\012- data
Hash 2f331c88e0cb8c41fc0d091a320a8d4f
db7144e39d42f24015df4583ed504f0304dd128d
47aaa5d3d372761f7a73a5fd00fe6d3dc5cd5360c7c8c825f78fa70a72d1236e
GET /images/Air_Jordan_002/Air_Jordan_9_Chile_Red_CT8019-600_3g8doBc1p.jpg HTTP/1.1
Host: img.jordans13shoes.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jordans13shoes.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Mon, 09 Jan 2023 03:43:53 GMT
server: Apache
last-modified: Thu, 04 Aug 2022 02:43:52 GMT
etag: "d158-5e56151e36a00"
accept-ranges: bytes
content-length: 53592
content-type: image/jpeg
X-Firefox-Spdy: h2
img.jordans13shoes.us/images/images_005/Air_Jordan_11_Gamma_Blue_378037-006_jIVYapAJf.jpg
200 OK 22 kB URL HTTP/2 img.jordans13shoes.us/images/images_005/Air_Jordan_11_Gamma_Blue_378037-006_jIVYapAJf.jpg
IP
ASN #59447 Istanbuldc Veri Merkezi Ltd Sti
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v90), quality = 91", baseline, precision 8, 450x450, components 3\012- data
Hash 2dd875340c50097527b2e125b19a40c5
cb3cebb4fec5d3ed61be1d590bcf5b26ca2e981c
2cdf90ef5dbdef767bd0c00024f3c41a523d3c5279420ead1da37b3b1ef5f671
GET /images/images_005/Air_Jordan_11_Gamma_Blue_378037-006_jIVYapAJf.jpg HTTP/1.1
Host: img.jordans13shoes.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jordans13shoes.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Mon, 09 Jan 2023 03:43:53 GMT
server: Apache
last-modified: Sat, 21 May 2022 09:36:40 GMT
etag: "540f-5df825813fa00"
accept-ranges: bytes
content-length: 21519
content-type: image/jpeg
X-Firefox-Spdy: h2
img.jordans13shoes.us/images/Air_Jordan_001/Jordan_12_Retro_Flu_Game__2016__130690-002_EJwfcnrxC.jpg
200 OK 20 kB URL HTTP/2 img.jordans13shoes.us/images/Air_Jordan_001/Jordan_12_Retro_Flu_Game__2016__130690-002_EJwfcnrxC.jpg
IP
ASN #59447 Istanbuldc Veri Merkezi Ltd Sti
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v90), quality = 91", baseline, precision 8, 450x450, components 3\012- data
Hash 3dae5ce624c622851d32298312ec26c9
0fa6422158cf208dc13f25589612e4e0bce83967
311f51cba0b544bcd23dceaadcbe8c02f6e1d97c9fb0e51ffe3ba7decd6b802f
GET /images/Air_Jordan_001/Jordan_12_Retro_Flu_Game__2016__130690-002_EJwfcnrxC.jpg HTTP/1.1
Host: img.jordans13shoes.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jordans13shoes.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Mon, 09 Jan 2023 03:43:53 GMT
server: Apache
last-modified: Thu, 04 Aug 2022 02:42:32 GMT
etag: "4e5b-5e5614d1eb600"
accept-ranges: bytes
content-length: 20059
content-type: image/jpeg
X-Firefox-Spdy: h2
img.jordans13shoes.us/images/images_005/Air_Jordan_11_Bred_378037-061_7N5wHqpuc.jpg
200 OK 22 kB URL HTTP/2 img.jordans13shoes.us/images/images_005/Air_Jordan_11_Bred_378037-061_7N5wHqpuc.jpg
IP
ASN #59447 Istanbuldc Veri Merkezi Ltd Sti
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v90), quality = 91", baseline, precision 8, 450x450, components 3\012- data
Hash 57db92e67ee5d91d3be6699eeecdae3d
40e617ca3946c7f93adbe1a4e6b81434ed30363f
55361a288ac85c7e015407f2e8e2c807edf5e3dfebcf52bf24e9168710f01c87
GET /images/images_005/Air_Jordan_11_Bred_378037-061_7N5wHqpuc.jpg HTTP/1.1
Host: img.jordans13shoes.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jordans13shoes.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Mon, 09 Jan 2023 03:43:53 GMT
server: Apache
last-modified: Sat, 21 May 2022 09:36:36 GMT
etag: "5682-5df8257d6f100"
accept-ranges: bytes
content-length: 22146
content-type: image/jpeg
X-Firefox-Spdy: h2
img.jordans13shoes.us/images/Air_Jordan_001/Jordan_11_Retro_Cherry__2022__CT8012-116_ptLoKyIJT.jpg
200 OK 30 kB URL HTTP/2 img.jordans13shoes.us/images/Air_Jordan_001/Jordan_11_Retro_Cherry__2022__CT8012-116_ptLoKyIJT.jpg
IP
ASN #59447 Istanbuldc Veri Merkezi Ltd Sti
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v90), quality = 91", baseline, precision 8, 450x450, components 3\012- data
Hash 680bc312dfa4fddde849ee477a51c0c0
79def2415a2797c3e82b5fe4bf8b715704f1e4d7
70a3ff1a761910346a9355e4c5039de8141622c15c87ed78f51aa080ea3e996c
GET /images/Air_Jordan_001/Jordan_11_Retro_Cherry__2022__CT8012-116_ptLoKyIJT.jpg HTTP/1.1
Host: img.jordans13shoes.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jordans13shoes.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Mon, 09 Jan 2023 03:43:53 GMT
server: Apache
last-modified: Thu, 04 Aug 2022 02:42:30 GMT
etag: "7529-5e5614d003180"
accept-ranges: bytes
content-length: 29993
content-type: image/jpeg
X-Firefox-Spdy: h2
img.jordans13shoes.us/images/Air_Jordan_001/Jordan_12_Retro_Indigo_130690-404_f5URkLaQy.jpg
200 OK 28 kB URL HTTP/2 img.jordans13shoes.us/images/Air_Jordan_001/Jordan_12_Retro_Indigo_130690-404_f5URkLaQy.jpg
IP
ASN #59447 Istanbuldc Veri Merkezi Ltd Sti
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v90), quality = 91", baseline, precision 8, 450x450, components 3\012- data
Hash e16b562362e9010e91c662e39b2f0460
442b1a1c3e48e0ed78b55bd6ca8547b839a52046
4074658cba18b03c8887cfc05386138f4cbb45ef2204e995b9a95ad1453192fe
GET /images/Air_Jordan_001/Jordan_12_Retro_Indigo_130690-404_f5URkLaQy.jpg HTTP/1.1
Host: img.jordans13shoes.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jordans13shoes.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Mon, 09 Jan 2023 03:43:53 GMT
server: Apache
last-modified: Thu, 04 Aug 2022 02:42:32 GMT
etag: "6f1c-5e5614d1eb600"
accept-ranges: bytes
content-length: 28444
content-type: image/jpeg
X-Firefox-Spdy: h2
img.jordans13shoes.us/images/Air_Jordan_001/Jordan_12_Retro_Utility_DC1062-006_wICRU7oPA.jpg
200 OK 29 kB URL HTTP/2 img.jordans13shoes.us/images/Air_Jordan_001/Jordan_12_Retro_Utility_DC1062-006_wICRU7oPA.jpg
IP
ASN #59447 Istanbuldc Veri Merkezi Ltd Sti
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v90), quality = 91", baseline, precision 8, 450x450, components 3\012- data
Hash 1fb682deb575273a359b3f61425522ef
530a74c18e938434a5c08ef5d79c9da58750128f
7e7f9257a54777a317198d5d3156efb3db7f39dd29b2cd37d1f40ebed35044ea
GET /images/Air_Jordan_001/Jordan_12_Retro_Utility_DC1062-006_wICRU7oPA.jpg HTTP/1.1
Host: img.jordans13shoes.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jordans13shoes.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Mon, 09 Jan 2023 03:43:53 GMT
server: Apache
last-modified: Thu, 04 Aug 2022 02:42:34 GMT
etag: "706e-5e5614d3d3a80"
accept-ranges: bytes
content-length: 28782
content-type: image/jpeg
X-Firefox-Spdy: h2
img.jordans13shoes.us/images/Air_Jordan_002/Jordan_13_Retro_Black_Hyper_Royal_414571-040_nVuyL7qjk.jpg
200 OK 28 kB URL HTTP/2 img.jordans13shoes.us/images/Air_Jordan_002/Jordan_13_Retro_Black_Hyper_Royal_414571-040_nVuyL7qjk.jpg
IP
ASN #59447 Istanbuldc Veri Merkezi Ltd Sti
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v90), quality = 91", baseline, precision 8, 450x450, components 3\012- data
Hash f66c0a5abd026854c2a167f60218d31d
b7ef2e35b4641b43b80db2409f51e9948e22fc80
23c00b2627a68a2fd02574cd063f60706ffb3c73883361828b0f5aee5e7a9fe8
GET /images/Air_Jordan_002/Jordan_13_Retro_Black_Hyper_Royal_414571-040_nVuyL7qjk.jpg HTTP/1.1
Host: img.jordans13shoes.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jordans13shoes.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Mon, 09 Jan 2023 03:43:53 GMT
server: Apache
last-modified: Thu, 04 Aug 2022 02:42:42 GMT
etag: "6f01-5e5614db74c80"
accept-ranges: bytes
content-length: 28417
content-type: image/jpeg
X-Firefox-Spdy: h2
img.jordans13shoes.us/images/Air_Jordan_002/Jordan_13_Retro_Bred__2017__414571-004_JY05tg21j.jpg
200 OK 30 kB URL HTTP/2 img.jordans13shoes.us/images/Air_Jordan_002/Jordan_13_Retro_Bred__2017__414571-004_JY05tg21j.jpg
IP
ASN #59447 Istanbuldc Veri Merkezi Ltd Sti
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v90), quality = 91", baseline, precision 8, 450x450, components 3\012- data
Hash fd17eb2438c2a43f9fe7718154c5d897
45babfef79b6e11709d7c8b909855948743c5bac
36d5db0d3548c0d9e262d09dc82c65dc9b3929fcafeea9aad7048e389f7021f5
GET /images/Air_Jordan_002/Jordan_13_Retro_Bred__2017__414571-004_JY05tg21j.jpg HTTP/1.1
Host: img.jordans13shoes.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jordans13shoes.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Mon, 09 Jan 2023 03:43:53 GMT
server: Apache
last-modified: Thu, 04 Aug 2022 02:42:42 GMT
etag: "757b-5e5614db74c80"
accept-ranges: bytes
content-length: 30075
content-type: image/jpeg
X-Firefox-Spdy: h2
img.jordans13shoes.us/images/Air_Jordan_001/Jordan_13_Retro_Gym_Red_Flint_Grey_DJ5982-600_rWfUYotlv.jpg
200 OK 32 kB URL HTTP/2 img.jordans13shoes.us/images/Air_Jordan_001/Jordan_13_Retro_Gym_Red_Flint_Grey_DJ5982-600_rWfUYotlv.jpg
IP
ASN #59447 Istanbuldc Veri Merkezi Ltd Sti
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v90), quality = 91", baseline, precision 8, 450x450, components 3\012- data
Hash e61b114b660e89c6e0c42704ccc8e590
7f4b51ff752db14b148f94208abc4dfe47e0884a
011957b7d4f588f750b74caaac661f2f346f9f30fc95f530a133d9dfadb81481
GET /images/Air_Jordan_001/Jordan_13_Retro_Gym_Red_Flint_Grey_DJ5982-600_rWfUYotlv.jpg HTTP/1.1
Host: img.jordans13shoes.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jordans13shoes.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Mon, 09 Jan 2023 03:43:53 GMT
server: Apache
last-modified: Thu, 04 Aug 2022 02:42:40 GMT
etag: "7c72-5e5614d98c800"
accept-ranges: bytes
content-length: 31858
content-type: image/jpeg
X-Firefox-Spdy: h2
img.jordans13shoes.us/images/Air_Jordan_002/Jordan_13_Retro_Doernbecher_836405-305_wCjtcJTpM.jpg
200 OK 42 kB URL HTTP/2 img.jordans13shoes.us/images/Air_Jordan_002/Jordan_13_Retro_Doernbecher_836405-305_wCjtcJTpM.jpg
IP
ASN #59447 Istanbuldc Veri Merkezi Ltd Sti
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v90), quality = 91", baseline, precision 8, 450x450, components 3\012- data
Hash a2c935691e1bbf6f744bfa083f0daade
fcf47687246ebe085150eb672d9ffbe654282a97
756b7bb5ba68750862c0527b3140861eed20851a6e3440f26df2935c25f06006
GET /images/Air_Jordan_002/Jordan_13_Retro_Doernbecher_836405-305_wCjtcJTpM.jpg HTTP/1.1
Host: img.jordans13shoes.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jordans13shoes.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Mon, 09 Jan 2023 03:43:53 GMT
server: Apache
last-modified: Thu, 04 Aug 2022 02:42:44 GMT
etag: "a5ac-5e5614dd5d100"
accept-ranges: bytes
content-length: 42412
content-type: image/jpeg
X-Firefox-Spdy: h2
img.jordans13shoes.us/images/Air_Jordan_002/Air_Jordan_3_Fire_Red_DN3707160_KSDNwpRcl.jpg
200 OK 58 kB URL HTTP/2 img.jordans13shoes.us/images/Air_Jordan_002/Air_Jordan_3_Fire_Red_DN3707160_KSDNwpRcl.jpg
IP
ASN #59447 Istanbuldc Veri Merkezi Ltd Sti
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v90), quality = 91", baseline, precision 8, 450x450, components 3\012- data
Hash f60dbc6b34dc089e8849a6f0610ff051
b9425a77f0f9e5011b587d0f6f79128854d44ffc
9b3778498346532bee46bae8586d30f071238ca07803a473375ba7623ebcba8b
GET /images/Air_Jordan_002/Air_Jordan_3_Fire_Red_DN3707160_KSDNwpRcl.jpg HTTP/1.1
Host: img.jordans13shoes.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jordans13shoes.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Mon, 09 Jan 2023 03:43:53 GMT
server: Apache
last-modified: Thu, 04 Aug 2022 02:43:08 GMT
etag: "e0ac-5e5614f440700"
accept-ranges: bytes
content-length: 57516
content-type: image/jpeg
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 472 B IP
Hash 81844eba82b6d2a0bc6d1fff8a8e1d55
aaab92d3020d9e0d96c298e2e1c086c485bcc071
ee853b9ca290c9bc9e974de5a511e68175941ed00b721a9455d68343f4120d39
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 09 Jan 2023 03:43:54 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Fri, 06 Jan 2023 18:34:05 GMT
Expires: Fri, 13 Jan 2023 18:34:04 GMT
Etag: "aaab92d3020d9e0d96c298e2e1c086c485bcc071"
Cache-Control: max-age=398409,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 786a2bde3b11b515-OSL
www.jordans13shoes.us/favicon.ico
200 OK 950 B URL HTTP/2 www.jordans13shoes.us/favicon.ico
IP
ASN #59447 Istanbuldc Veri Merkezi Ltd Sti
File type MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel\012- data
Hash bde9cca2482f582de4e15bb4512d20f8
3a273a19fbe8ee72c65ee0923c4089fc71d407f8
6a974da170f2d5e10fd891c6849a6c596d210bc12385e7584d9f63ad904ed83c
GET /favicon.ico HTTP/1.1
Host: www.jordans13shoes.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jordans13shoes.us/
Cookie: zenid=6fngv41rcaomt9p0rlold2erc1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 09 Jan 2023 03:43:54 GMT
server: Apache
last-modified: Thu, 28 Jun 2018 05:40:08 GMT
etag: "10be-56fad29fc9e00-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 950
content-type: image/x-icon
X-Firefox-Spdy: h2
maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css
200 OK 0 B URL HTTP/2 maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css
IP
GET /bootstrap/3.3.7/css/bootstrap.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.jordans13shoes.us
Connection: keep-alive
Referer: https://www.jordans13shoes.us/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 09 Jan 2023 03:43:52 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"ec3bb52a00e176a7181d454dffaea219"
last-modified: Mon, 25 Jan 2021 22:03:59 GMT
cdn-cachedat: 01/05/2023 13:19:14
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1082
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 4acbfd0f2e45d21178391503e60d5ff4
cdn-cache: HIT
cf-cache-status: HIT
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 786a2bd36969b500-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.statcounter.com/counter/counter.js
200 OK 0 B URL HTTP/2 www.statcounter.com/counter/counter.js
IP
GET /counter/counter.js HTTP/1.1
Host: www.statcounter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.jordans13shoes.us/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 09 Jan 2023 03:43:54 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Fri, 06 Jan 2023 11:14:12 GMT
etag: W/"63b80284-aa70"
expires: Mon, 09 Jan 2023 10:51:23 GMT
cache-control: max-age=43200
cf-cache-status: HIT
age: 17551
server: cloudflare
cf-ray: 786a2bde8f7c0b61-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.jordans13shoes.us/
200 OK 0 B IP
ASN #59447 Istanbuldc Veri Merkezi Ltd Sti
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: www.jordans13shoes.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Mon, 09 Jan 2023 03:43:52 GMT
server: Apache
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
content-encoding: gzip
vary: Accept-Encoding
set-cookie: zenid=6fngv41rcaomt9p0rlold2erc1; path=/; domain=.www.jordans13shoes.us; secure; HttpOnly
content-type: text/html; charset=utf-8
X-Firefox-Spdy: h2
c.statcounter.com/t.php?sc_project=12538051&u1=A70267D34BE34F72314AA82645BC044D&java=1&security=0f4d0a3f&sc_snum=1&sess=a8f3c4&p=0&rcat=d&rdom=d&rdomg=new&bb=1&jg=new&rr=1.1.1.1.1.1.1.1.1&resolution=1280&h=1024&camefrom=&u=https%3A//www.jordans13shoes.us/&t=Jordans%2013%20%7C%20Jordan%2013%20Outlet%20Sale%20%7C%20Jordan%2013s%20Official%20Website&invisible=1&sc_rum_e_s=3519&sc_rum_e_e=3528&sc_rum_f_s=0&sc_rum_f_e=3505&get_config=true
200 OK 0 B URL HTTP/2 c.statcounter.com/t.php?sc_project=12538051&u1=A70267D34BE34F72314AA82645BC044D&java=1&security=0f4d0a3f&sc_snum=1&sess=a8f3c4&p=0&rcat=d&rdom=d&rdomg=new&bb=1&jg=new&rr=1.1.1.1.1.1.1.1.1&resolution=1280&h=1024&camefrom=&u=https%3A//www.jordans13shoes.us/&t=Jordans%2013%20%7C%20Jordan%2013%20Outlet%20Sale%20%7C%20Jordan%2013s%20Official%20Website&invisible=1&sc_rum_e_s=3519&sc_rum_e_e=3528&sc_rum_f_s=0&sc_rum_f_e=3505&get_config=true
IP
GET /t.php?sc_project=12538051&u1=A70267D34BE34F72314AA82645BC044D&java=1&security=0f4d0a3f&sc_snum=1&sess=a8f3c4&p=0&rcat=d&rdom=d&rdomg=new&bb=1&jg=new&rr=1.1.1.1.1.1.1.1.1&resolution=1280&h=1024&camefrom=&u=https%3A//www.jordans13shoes.us/&t=Jordans%2013%20%7C%20Jordan%2013%20Outlet%20Sale%20%7C%20Jordan%2013s%20Official%20Website&invisible=1&sc_rum_e_s=3519&sc_rum_e_e=3528&sc_rum_f_s=0&sc_rum_f_e=3505&get_config=true HTTP/1.1
Host: c.statcounter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.jordans13shoes.us
Connection: keep-alive
Referer: https://www.jordans13shoes.us/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 09 Jan 2023 03:43:54 GMT
content-type: application/json
p3p: policyref="http://www.statcounter.com/w3c/p3p.xml", CP="ADMa OUR COM NAV NID DSP NOI COR"
expires: Mon, 26 Jul 1997 05:00:00 GMT
set-cookie: is_unique=sc12538051.1673235834.0; SameSite=None; Secure; Expires=Saturday, 08-Jan-2028 11:43:54 CST; Path=/; Domain=.statcounter.com
is_visitor_unique=1673235834651211458; SameSite=None; Secure; Expires=Wednesday, 08-Jan-2025 11:43:54 CST; Path=/; Domain=.statcounter.com
access-control-allow-origin: https://www.jordans13shoes.us
access-control-allow-credentials: true
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 786a2bdecf8d0b61-OSL
content-encoding: br
X-Firefox-Spdy: h2
107.150.164.252
69.16.175.10
104.20.219.77
95.101.11.115
93.184.220.29