mediziyashop.com/
301 Moved Permanently 233 B IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 14cca70ad239fe8146ca47d12f9d3299
7976cee3b60e65418738377e305435d350bc54f3
45810e53dd8a28087df750067ab335ee123215619657eaf749ff637aa63ab032
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Thu, 10 Nov 2022 22:38:29 GMT
Server: Apache
Location: https://mediziyashop.com/
Content-Length: 233
Keep-Alive: timeout=5, max=75
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash aabe410b4bbe4d8beb0e4561d3aa158e
e1788632902ddea62cdd9e7ad6009a75ffb69788
ad535e27b201e92670770b2b868c58f7c05633ec66490a41ef4592f062834c1f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AD535E27B201E92670770B2B868C58F7C05633EC66490A41EF4592F062834C1F"
Last-Modified: Wed, 09 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13177
Expires: Fri, 11 Nov 2022 02:18:07 GMT
Date: Thu, 10 Nov 2022 22:38:30 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash a19a5555cc9ea92581b0cc504cb64345
01a86ce33d5eb33420ed76266360f32c62a96f31
9ebd48b4053bb4a7a27718670c44075b1f35d037be7fd16750fcbc3ffd68b18c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 538
Cache-Control: max-age=129695
Content-Type: application/ocsp-response
Date: Thu, 10 Nov 2022 22:38:30 GMT
Etag: "636cd2eb-1d7"
Expires: Sat, 12 Nov 2022 10:40:05 GMT
Last-Modified: Thu, 10 Nov 2022 10:31:07 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 4736bac84ca28f2b1e961159fb4ea098
1319612979f53896fcfeacd4215c2715d4951e4c
5e81213e111ddf68c7f884f72b4e06fc4dc95eb902c3cf0762236b2418840dba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Retry-After, Content-Length, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 10 Nov 2022 21:43:53 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 3277
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2b57492bf85f4ae6abbd1641b17dc9ab
008e71ec05d47bf025ca64e17da2ea1bd8e71111
17894427c471f7fa02ca274795dc55df1bfc99d7bd83f9ee36249394035110fd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "17894427C471F7FA02CA274795DC55DF1BFC99D7BD83F9EE36249394035110FD"
Last-Modified: Wed, 09 Nov 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14587
Expires: Fri, 11 Nov 2022 02:41:37 GMT
Date: Thu, 10 Nov 2022 22:38:30 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: F9v20GsvFpQ1qnLCwp6h+1kMdcVI2D5rvLV01N2w+u2HniQwmkvHG1jUmmi5ytUcfbcXbu+gOas0mik36NMGGA==
x-amz-request-id: QKNDKYJGGPHVYY3H
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 10 Nov 2022 21:49:33 GMT
age: 2937
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 10 Nov 2022 22:38:30 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Last-Modified, Cache-Control, Retry-After, Content-Length, Expires, ETag, Pragma, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 10 Nov 2022 22:24:57 GMT
cache-control: public,max-age=3600
age: 813
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3b4957f4d29a2bd2338c66e9d1663430
436da1df07c95f73db26e05b1570d5aaf2bacec1
7fc75978e735875c8d1a90865bb590d2b12d2cadb3ea7899c5be4a092fd217ec
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7FC75978E735875C8D1A90865BB590D2B12D2CADB3EA7899C5BE4A092FD217EC"
Last-Modified: Thu, 10 Nov 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21575
Expires: Fri, 11 Nov 2022 04:38:05 GMT
Date: Thu, 10 Nov 2022 22:38:30 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 081ea13ba4390a4baab25cf57c2672f3
30cc9c329228e3d7bc6041f1aa553f06f8136eed
5a48c189581edd8ae4a4e58e2d54359bb75ba769828436394e4c256fe861814e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5727
Cache-Control: max-age=129830
Content-Type: application/ocsp-response
Date: Thu, 10 Nov 2022 22:38:30 GMT
Etag: "636cbf2d-1d7"
Expires: Sat, 12 Nov 2022 10:42:20 GMT
Last-Modified: Thu, 10 Nov 2022 09:06:53 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: QX80IRkEiYXJn3nigW9ewg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: KfpX1t5HWqRUuKKJdDl67/ly+JE=
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1b6e55fb9c16b8ec503ca6fb935f650f
1e392159765235158a218248677dc21c46bc4f42
89cc50a881ff8fae94b7bfa2732d133df59bae06680f6d2147281ee7bf8ab00b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "89CC50A881FF8FAE94B7BFA2732D133DF59BAE06680F6D2147281EE7BF8AB00B"
Last-Modified: Tue, 08 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10430
Expires: Fri, 11 Nov 2022 01:32:22 GMT
Date: Thu, 10 Nov 2022 22:38:32 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1b6e55fb9c16b8ec503ca6fb935f650f
1e392159765235158a218248677dc21c46bc4f42
89cc50a881ff8fae94b7bfa2732d133df59bae06680f6d2147281ee7bf8ab00b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "89CC50A881FF8FAE94B7BFA2732D133DF59BAE06680F6D2147281EE7BF8AB00B"
Last-Modified: Tue, 08 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10430
Expires: Fri, 11 Nov 2022 01:32:22 GMT
Date: Thu, 10 Nov 2022 22:38:32 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1b6e55fb9c16b8ec503ca6fb935f650f
1e392159765235158a218248677dc21c46bc4f42
89cc50a881ff8fae94b7bfa2732d133df59bae06680f6d2147281ee7bf8ab00b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "89CC50A881FF8FAE94B7BFA2732D133DF59BAE06680F6D2147281EE7BF8AB00B"
Last-Modified: Tue, 08 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10430
Expires: Fri, 11 Nov 2022 01:32:22 GMT
Date: Thu, 10 Nov 2022 22:38:32 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbdff5978-349f-4530-9552-e5cce667c694.jpeg
200 OK 4.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbdff5978-349f-4530-9552-e5cce667c694.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 34a19397629678ac8f56ef4591f84a18
39a1402a8e60e27d314f91babcfe3794f3d96a63
0822f6c832e8b91a8003774ff18295987fa2359dbd6f99695d8623f5aa7d0bd4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbdff5978-349f-4530-9552-e5cce667c694.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4567
x-amzn-requestid: 2f786526-2230-434a-8521-bcab8ecfc628
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bM5l9EO0IAMFZbA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63683c8c-193ccf163e83754648d3662d;Sampled=0
x-amzn-remapped-date: Sun, 06 Nov 2022 23:00:28 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: 6mrbe_VR7Jrzz_FhGHYtEuPWzZ7Hv-SdsxSVj0c5ePbo-JqlXaQmxg==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 de2dd11312f7d5ad3bcd0cb112c7fd0e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 10 Nov 2022 21:46:04 GMT
age: 3148
etag: "39a1402a8e60e27d314f91babcfe3794f3d96a63"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1b6e55fb9c16b8ec503ca6fb935f650f
1e392159765235158a218248677dc21c46bc4f42
89cc50a881ff8fae94b7bfa2732d133df59bae06680f6d2147281ee7bf8ab00b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "89CC50A881FF8FAE94B7BFA2732D133DF59BAE06680F6D2147281EE7BF8AB00B"
Last-Modified: Tue, 08 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10430
Expires: Fri, 11 Nov 2022 01:32:22 GMT
Date: Thu, 10 Nov 2022 22:38:32 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8403ff83-77b6-40bf-b7e1-ab07f5cd626b.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8403ff83-77b6-40bf-b7e1-ab07f5cd626b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 93699f63986977bb5e3926c0d7aad77b
50f1d3a664c1c64ddf933568af39de89dfbc2703
d70ccf11660c242f9681dd84388f0873eb6a3aeba86e18deb5adc96f82c148b0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8403ff83-77b6-40bf-b7e1-ab07f5cd626b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10090
x-amzn-requestid: 2eab8b67-08fc-4a40-a3fb-269a3f4950d2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bURx0HTfoAMF1wQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636b300b-1aebba620dc11e1d6c48f934;Sampled=0
x-amzn-remapped-date: Wed, 09 Nov 2022 04:43:55 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: lKJQ-yYSwAVRZTy6zs1le8bL6AIQ8akcPqWJCe-0spFidY5zEJ9uSg==
via: 1.1 95b0ac620fa3a80ee590ecf1cda1c698.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 10 Nov 2022 12:24:10 GMT
age: 36862
etag: "50f1d3a664c1c64ddf933568af39de89dfbc2703"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fad1abae5-6437-44bf-8428-756b825e5be6.jpeg
200 OK 8.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fad1abae5-6437-44bf-8428-756b825e5be6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 88c9931a009690991e73c5b37a1aa085
815a4a1eb8c8e2a138fb3d65ba777b0c18fa15d0
74e70391889e4b46742033b1d5daccfec415ba2ee999e429d1013fd4a1ebc61a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fad1abae5-6437-44bf-8428-756b825e5be6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8294
x-amzn-requestid: 233f9724-1c36-426d-8299-1f6577a6e5e4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bZ4lmE60IAMF1Lw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636d6e23-4b2763b42d8a57044dfa8144;Sampled=0
x-amzn-remapped-date: Thu, 10 Nov 2022 21:33:23 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: QaMTrn0ZUptFLGY0x7bytPsJZHnLvdpMnU0XGCBU2pkmiA4MO8DIUw==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 ddaf46a95abcfc80e8eae76235e2127c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 10 Nov 2022 21:46:56 GMT
etag: "815a4a1eb8c8e2a138fb3d65ba777b0c18fa15d0"
content-type: image/jpeg
age: 3096
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe4094512-9a5a-47aa-9796-9f630fb1c13f.jpeg
200 OK 8.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe4094512-9a5a-47aa-9796-9f630fb1c13f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 13f7b6eea163326da8c58ae5c09efccd
e0d1ebb35a16c686eae3d31eb85ac72278459b05
13f2f428acb7806808d957a8167ab2c139a5d0f59798671465717f2b39b914a9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe4094512-9a5a-47aa-9796-9f630fb1c13f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8581
x-amzn-requestid: 385174fe-153f-448f-be5e-9ea3b5757ff9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bZ4u1EYOIAMFncA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636d6e5e-6084a34f58df22037275e676;Sampled=0
x-amzn-remapped-date: Thu, 10 Nov 2022 21:34:22 GMT
x-amz-cf-pop: YVR50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: xSnHWpFlXeyf08gYjPn02H88Hta9fhiDjDOukoKtt6PPVBl_gNTfgw==
via: 1.1 dfc972676b24a6d23251d4f298dfa08c.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Thu, 10 Nov 2022 21:46:56 GMT
age: 3096
etag: "e0d1ebb35a16c686eae3d31eb85ac72278459b05"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3dc257b4-cff1-4093-b986-70c66328966e.jpeg
200 OK 4.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3dc257b4-cff1-4093-b986-70c66328966e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash daeae83501cf5d1ce25742534d35ec20
03417f4d671cec18b0137e6963a5e82f32044b30
f344831ec8ae295db4c071eefee859bd66270de8aedf780c2f3e470579a73ecf
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3dc257b4-cff1-4093-b986-70c66328966e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4794
x-amzn-requestid: 4562153c-ffa1-4282-8521-530f3121af74
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bZ5tsGftoAMF2EA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636d6ff1-488c79a01fcd794e398e0014;Sampled=0
x-amzn-remapped-date: Thu, 10 Nov 2022 21:41:05 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: tutAt2AgMzWcRZE0fP9n-ednvmJZb0IvSrY_eT-ozVoaQVzXyCmvfQ==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Thu, 10 Nov 2022 21:48:46 GMT
etag: "03417f4d671cec18b0137e6963a5e82f32044b30"
content-type: image/jpeg
age: 2986
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9df70151-7694-4da8-bd44-6896d250b85f.jpeg
200 OK 6.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9df70151-7694-4da8-bd44-6896d250b85f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6b3ea5032d4b71e8fe23f7b60a52dda8
ceaedd4a64839502fbe0ce200155fecb3999a2cf
7bcc450207ac919b3ed469c95c945f32ff1001fde61bce91f589a60ff8fb48fe
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9df70151-7694-4da8-bd44-6896d250b85f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6502
x-amzn-requestid: 2c87a526-8f40-47af-8c7c-94f6c77cb73b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bM36nEVSoAMFm1w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636839dd-790085821e4ae2c134e3ef30;Sampled=0
x-amzn-remapped-date: Sun, 06 Nov 2022 22:49:01 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: RvQvmgUaIHNYO1b4_qVH7AIvr2IK-BdyKpP3Dn_WdTdRb9584Sm4MQ==
via: 1.1 b23fb37cd7fff033ab21e3284f558a28.cloudfront.net (CloudFront), 1.1 559326ad73233233a9e52cb9e8601ede.cloudfront.net (CloudFront), 1.1 google
date: Thu, 10 Nov 2022 17:00:53 GMT
age: 20259
etag: "ceaedd4a64839502fbe0ce200155fecb3999a2cf"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 83b99092f19a38763c0b6ffc5e05e5aa
4cacf0a4adc46e28bc867d666a3fb45738dd1501
168478f1e03d83548fbfeed6dfad20ef23cb5a1dbf18f7312e5cf6dd290e9339
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 10 Nov 2022 22:38:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
mediziyashop.com/wp-content/plugins/woo-gutenberg-products-block/build/wc-blocks-vendors-style.css?ver=6.7.1
200 OK 1.6 kB URL HTTP/2 mediziyashop.com/wp-content/plugins/woo-gutenberg-products-block/build/wc-blocks-vendors-style.css?ver=6.7.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (4933), with no line terminators
Hash 971cfc62ecc92ebe1174a2c80671a10f
86989b6ba38041063eab75516aa10bfc3fc9a55f
e51fd87d27a0dedfe4afb52aab0d8708d369be1e16ff09b90245c145bd8847ba
GET /wp-content/plugins/woo-gutenberg-products-block/build/wc-blocks-vendors-style.css?ver=6.7.1 HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 10 Jan 2022 09:16:37 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1637
content-type: text/css
date: Thu, 10 Nov 2022 22:38:32 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-includes/css/dist/block-library/style.min.css?ver=5.8.6
200 OK 15 kB URL HTTP/2 mediziyashop.com/wp-includes/css/dist/block-library/style.min.css?ver=5.8.6
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Unicode text, UTF-8 text, with very long lines (33376)
Hash 6ebc7a4d773cb1f29a93f605933fba76
b113ca39afc5fd44cbc06dca58945bb5e9fb771e
7a12133f8cb48c1b5b4631ee9e9a0eebe36bbf2bbe1eb792b0f9fc630c18bd76
GET /wp-includes/css/dist/block-library/style.min.css?ver=5.8.6 HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 17 Nov 2021 15:41:28 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 14560
content-type: text/css
date: Thu, 10 Nov 2022 22:38:32 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/plugins/pe-easy-slider/css/pe-easy-slider.css?ver=5.8.6
200 OK 2.9 kB URL HTTP/2 mediziyashop.com/wp-content/plugins/pe-easy-slider/css/pe-easy-slider.css?ver=5.8.6
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with CRLF line terminators
Hash cb9843c3001d3ee32fa1a34818aa1ad1
ca46b6adc78ea8b195421836c03dbeb4f83ab193
dd38bf0aeaade5778c2f087d0c6405d8922993e31feb2ff413270c395f18acc9
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/pe-easy-slider/css/pe-easy-slider.css?ver=5.8.6 HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 11 Jan 2021 15:55:31 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2875
content-type: text/css
date: Thu, 10 Nov 2022 22:38:32 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/plugins/gdpr/dist/css/public.css?ver=2.1.2
200 OK 7.5 kB URL HTTP/2 mediziyashop.com/wp-content/plugins/gdpr/dist/css/public.css?ver=2.1.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (46995), with no line terminators
Hash e1ab381054f4eb4dd5cb15fca34c0ff5
863b72e28f613e739aa985c9a9461203ce133815
e761da099bacb5ff3b5a14eb02a362b458e79416c8717921312de9cd98e725bc
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/gdpr/dist/css/public.css?ver=2.1.2 HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 11 Jan 2021 15:55:31 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 7485
content-type: text/css
date: Thu, 10 Nov 2022 22:38:32 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/plugins/pe-easy-slider/css/animate.css?ver=5.8.6
200 OK 6.5 kB URL HTTP/2 mediziyashop.com/wp-content/plugins/pe-easy-slider/css/animate.css?ver=5.8.6
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash 601e26bd9344c3a597a9d187110bdf18
55a6d97e0226d05633ca5efe942642c36c8114b3
408324c59f86539c1a6be6b54c97ec4fe0a848106d6a412ebe553e208f7589d7
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/pe-easy-slider/css/animate.css?ver=5.8.6 HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 11 Jan 2021 15:55:31 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 6526
content-type: text/css
date: Thu, 10 Nov 2022 22:38:32 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 83b99092f19a38763c0b6ffc5e05e5aa
4cacf0a4adc46e28bc867d666a3fb45738dd1501
168478f1e03d83548fbfeed6dfad20ef23cb5a1dbf18f7312e5cf6dd290e9339
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 10 Nov 2022 22:38:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
mediziyashop.com/wp-content/plugins/redux-framework/extendify-sdk/public/build/extendify-utilities.css?ver=0.1.0
200 OK 7.6 kB URL HTTP/2 mediziyashop.com/wp-content/plugins/redux-framework/extendify-sdk/public/build/extendify-utilities.css?ver=0.1.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (24453)
Hash 763d35bfcbf3cb444a727e21b0b6f938
775729d641fc8a2098668fe39c7193e0c4dd1abc
16b4bf4a8e6ae9a486349495dd10edb4ba0b2dd260b5ea4a7f514c146b2bf7e7
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/redux-framework/extendify-sdk/public/build/extendify-utilities.css?ver=0.1.0 HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 15 Jan 2022 04:43:06 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 7554
content-type: text/css
date: Thu, 10 Nov 2022 22:38:32 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/plugins/rave-payment-forms/assets/css/flw.css?ver=5.8.6
200 OK 647 B URL HTTP/2 mediziyashop.com/wp-content/plugins/rave-payment-forms/assets/css/flw.css?ver=5.8.6
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash 0c170495607b9b69c706670338942da3
20199d163f37293206d7b04279e4fcabe0628fc2
0206a1f2f7ffb705738e621ba94c49cc5db4f3899e6982d696ec9231539d0cea
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/rave-payment-forms/assets/css/flw.css?ver=5.8.6 HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 18 Nov 2021 14:45:31 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 647
content-type: text/css
date: Thu, 10 Nov 2022 22:38:32 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/plugins/terraclassifieds/assets/css/font-awesome/all.css?ver=5.6.3
200 OK 12 kB URL HTTP/2 mediziyashop.com/wp-content/plugins/terraclassifieds/assets/css/font-awesome/all.css?ver=5.6.3
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (53592), with no line terminators
Hash f80b927049d7f864d02be8884dbc0ae8
fdcc1e54715a29f65b2fab991464e9bc0a7613fc
2b42fa634bc297fc0bb751290d4a9255f786dad6eb9543d43522b555869a1696
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/terraclassifieds/assets/css/font-awesome/all.css?ver=5.6.3 HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 18 Nov 2021 14:45:38 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 11599
content-type: text/css
date: Thu, 10 Nov 2022 22:38:32 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/plugins/wp-responsive-recent-post-slider/assets/css/slick.css?ver=3.0.4.1
200 OK 577 B URL HTTP/2 mediziyashop.com/wp-content/plugins/wp-responsive-recent-post-slider/assets/css/slick.css?ver=3.0.4.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (333)
Hash b0116c0c105f674f72400755bd97c315
0c34f4b4633be76566e1845b246cd7484424915e
0f696d91249fbbb1fdf2e73c9a5b0a21569c18d4d56a6ba7e48710c405cfaabc
GET /wp-content/plugins/wp-responsive-recent-post-slider/assets/css/slick.css?ver=3.0.4.1 HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 16 Jan 2022 07:15:54 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 577
content-type: text/css
date: Thu, 10 Nov 2022 22:38:32 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/plugins/terraclassifieds/assets/css/grid.css?ver=1
200 OK 1.6 kB URL HTTP/2 mediziyashop.com/wp-content/plugins/terraclassifieds/assets/css/grid.css?ver=1
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with CRLF line terminators
Hash 6e59f1a6f174c4f1f2f09fc4feb9d295
c788a4d3edc11e71963415d89a910b228940b6e4
bd49668059a1793ce9ac6bb8b629c9993f84ebc476dffb996b7d7aea25a004c8
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/terraclassifieds/assets/css/grid.css?ver=1 HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 18 Nov 2021 14:45:38 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1580
content-type: text/css
date: Thu, 10 Nov 2022 22:38:32 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/plugins/terraclassifieds/assets/css/sweetalert2.min.css?ver=1
200 OK 5.8 kB URL HTTP/2 mediziyashop.com/wp-content/plugins/terraclassifieds/assets/css/sweetalert2.min.css?ver=1
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (24445), with no line terminators
Hash b425c22d00cfa41a714f4a7c6468b2df
323da155b495a52eada8bac6ed0daacc62321313
b3b4401298731229605535dcf4be0bad4161216d52b872bc8a06cca6ef5d189f
GET /wp-content/plugins/terraclassifieds/assets/css/sweetalert2.min.css?ver=1 HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 18 Nov 2021 14:45:38 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 5792
content-type: text/css
date: Thu, 10 Nov 2022 22:38:32 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/uploads/pe-terraclassic/css/offcanvas.css
200 OK 573 B URL HTTP/2 mediziyashop.com/wp-content/uploads/pe-terraclassic/css/offcanvas.css
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash 7366fbb40c396051f96124ead579669d
256bce9010594c4f47b96eff69e6661a7d736866
11798d4ce18e9ee60dc9739eff3d10e35c2836edcaefa3d13795e89c6190fb96
GET /wp-content/uploads/pe-terraclassic/css/offcanvas.css HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 15 Jan 2022 03:51:22 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 573
content-type: text/css
date: Thu, 10 Nov 2022 22:38:32 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/plugins/wp-responsive-recent-post-slider/assets/css/recent-post-style.css?ver=3.0.4.1
200 OK 3.5 kB URL HTTP/2 mediziyashop.com/wp-content/plugins/wp-responsive-recent-post-slider/assets/css/recent-post-style.css?ver=3.0.4.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (369), with CRLF line terminators
Hash 5bd5e84dd0d742920f430519cbf36abd
bf377245b94137206d10a9aec2a52d5fc669e08a
de4512d98b2210c7b2c41a830f7061d01dcde11ffeaae5ce5b25192d5b6a33e0
GET /wp-content/plugins/wp-responsive-recent-post-slider/assets/css/recent-post-style.css?ver=3.0.4.1 HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 16 Jan 2022 07:15:54 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 3458
content-type: text/css
date: Thu, 10 Nov 2022 22:38:32 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/plugins/terraclassifieds/assets/css/font-awesome/v4-shims.css?ver=5.6.3
200 OK 4.3 kB URL HTTP/2 mediziyashop.com/wp-content/plugins/terraclassifieds/assets/css/font-awesome/v4-shims.css?ver=5.6.3
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (26440), with no line terminators
Hash 025d46d737ababa91109466365beaf01
40e194dfd4e8289d3ae7ab5d5a56cfd7b5b979ca
10afc50b0779e39536b8cb374e4eb0af7d8ba458528ef89b695b73900ae1e823
GET /wp-content/plugins/terraclassifieds/assets/css/font-awesome/v4-shims.css?ver=5.6.3 HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 18 Nov 2021 14:45:38 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4285
content-type: text/css
date: Thu, 10 Nov 2022 22:38:32 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/plugins/pe-recent-posts/css/pe-recent-posts.css?ver=5.8.6
200 OK 2.6 kB URL HTTP/2 mediziyashop.com/wp-content/plugins/pe-recent-posts/css/pe-recent-posts.css?ver=5.8.6
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with CRLF line terminators
Hash c0215913494ab7b2be78225f4608f3c2
e2306e69249ece4608fbfc6bf69f4771467e9b53
1c3c247e0d77c61a2f8c8c5a217d6fb1f077e9bcfea8647c9dea4a5d63e225ce
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/pe-recent-posts/css/pe-recent-posts.css?ver=5.8.6 HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 11 Jan 2021 15:55:30 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2616
content-type: text/css
date: Thu, 10 Nov 2022 22:38:32 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/plugins/terraclassifieds/assets/css/select2.min.css?ver=1
200 OK 3.4 kB URL HTTP/2 mediziyashop.com/wp-content/plugins/terraclassifieds/assets/css/select2.min.css?ver=1
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (15179), with CRLF line terminators
Hash ce6ca3c72831ee930f316ce8a65dbb77
88001ec11d040f2e9fa757785ea474ba5c9a0c17
b3aa6a4b6583f6f6df506d2c38819668cd42e0cb6516b5692d3e211e5e937f34
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/terraclassifieds/assets/css/select2.min.css?ver=1 HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 18 Nov 2021 14:45:38 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 3386
content-type: text/css
date: Thu, 10 Nov 2022 22:38:32 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/themes/pe-terraclassic/css/normalize.min.css?ver=5.0.0
200 OK 1.0 kB URL HTTP/2 mediziyashop.com/wp-content/themes/pe-terraclassic/css/normalize.min.css?ver=5.0.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (2400), with no line terminators
Hash 8c6ba9212133450be43ae2dcfe5c7090
6b7618c190bbf11833f5deadb62ae454a59b5601
ad32a08a042420c5bfa39bf28b9e7211155e6e7b04f2445540d9daec5217e2b5
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/pe-terraclassic/css/normalize.min.css?ver=5.0.0 HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 11 Jan 2021 15:55:32 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1048
content-type: text/css
date: Thu, 10 Nov 2022 22:38:32 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/plugins/terraclassifieds/inc/favourites//includes/js/favourites.js?ver=5.8.6
200 OK 1.0 kB URL HTTP/2 mediziyashop.com/wp-content/plugins/terraclassifieds/inc/favourites//includes/js/favourites.js?ver=5.8.6
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with CRLF line terminators
Hash ed9764239b205dd8bc8fafd412270213
35224a8f909b7aeb11dbb10cca119c6c3414cee8
e5742fcdc3e30b96bc0f984513a49c07cfd013c7b165ba4c232a3de03bd9a1be
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/terraclassifieds/inc/favourites//includes/js/favourites.js?ver=5.8.6 HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 18 Nov 2021 14:45:38 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1001
content-type: application/javascript
date: Thu, 10 Nov 2022 22:38:32 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/themes/pe-terraclassic/style.css?ver=1.07
200 OK 613 B URL HTTP/2 mediziyashop.com/wp-content/themes/pe-terraclassic/style.css?ver=1.07
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (313)
Hash f75b8b51086828e86076a2660c922248
2fe64ec475a09c82a493910cadeb1b1a1a1adc90
c220f7e31b22e4e97035cad8865fb82c4bf27ce4fc91e037c056dd8d55cbb7f7
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/pe-terraclassic/style.css?ver=1.07 HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 11 Jan 2021 15:55:32 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 613
content-type: text/css
date: Thu, 10 Nov 2022 22:38:32 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.7
200 OK 2.6 kB URL HTTP/2 mediziyashop.com/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.7
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (6406), with no line terminators
Hash 340db4973d1ee14c5348599f661a3220
d4cf31e2af7774c276d7a883733a8392e232df49
85d0de0d6dbe1f487407829c52413d7e81c7c9ed28bc3ae9079c19303e91f678
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.7 HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 17 Nov 2021 15:41:28 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2635
content-type: application/javascript
date: Thu, 10 Nov 2022 22:38:32 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-includes/js/jquery/ui/menu.min.js?ver=1.12.1
200 OK 3.5 kB URL HTTP/2 mediziyashop.com/wp-includes/js/jquery/ui/menu.min.js?ver=1.12.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (9354)
Hash 0dec251e2f812684ca31e8e955946b7f
86a6150a0315948cd2eee632f674d34563af701b
1ed51628b7d114e082c51b5fa9bf44d1d6a2eb67f3ea5386cc40046ec395d00a
GET /wp-includes/js/jquery/ui/menu.min.js?ver=1.12.1 HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 15 Apr 2021 08:19:31 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 3473
content-type: application/javascript
date: Thu, 10 Nov 2022 22:38:32 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=6.1.2
200 OK 3.1 kB URL HTTP/2 mediziyashop.com/wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=6.1.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (17809), with no line terminators
Hash 97f3e7860b3e0d99f3c0327b0045363a
885af5049143e765b7fd0f3a0a860613b05d12d1
ff05d291dd422f8bee80e816eb1480c67fb3e0d6071bebd8f04c86de87a70080
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=6.1.2 HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 10 Mar 2022 20:19:43 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 3086
content-type: text/css
date: Thu, 10 Nov 2022 22:38:32 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=6.1.2
200 OK 792 B URL HTTP/2 mediziyashop.com/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=6.1.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (2139), with no line terminators
Hash 1ca3f41c13e0027acc45f0601f8b640f
cced34af0c6a59e9cee4229faa66ab39c7031506
d3bc5eaf4c6be9473dbba690825cce9a1a6f4accb6721dae7875efef54942f41
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=6.1.2 HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 10 Mar 2022 20:19:43 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 792
content-type: application/javascript
date: Thu, 10 Nov 2022 22:38:32 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/plugins/pe-terraclassic-plugin/js/jquery.countTo.js?ver=1
200 OK 1.1 kB URL HTTP/2 mediziyashop.com/wp-content/plugins/pe-terraclassic-plugin/js/jquery.countTo.js?ver=1
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash f1ab53b6c7feeea37a1dd587b966f603
70ec0797a91e89f7cd204a97a7f9cdd915c5b0bd
149ac088ea57f6f7f962b37fe61c122a1517f001096ed3defc8178b9d87fb544
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/pe-terraclassic-plugin/js/jquery.countTo.js?ver=1 HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 11 Jan 2021 15:55:31 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1061
content-type: application/javascript
date: Thu, 10 Nov 2022 22:38:32 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/themes/pe-terraclassic/js/jquery.validate.min.js?ver=1.15.0
200 OK 9.2 kB URL HTTP/2 mediziyashop.com/wp-content/themes/pe-terraclassic/js/jquery.validate.min.js?ver=1.15.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Unicode text, UTF-8 text, with very long lines (22886), with CRLF line terminators
Hash 56e9d476b417c13831d24b8307be2c95
b50d1de6a3259eab2ed825362306c5ca79f1982b
73fe1ac6110e3d47158a2bdd63eb4db51ed504fb64aad61e7baff69d25be7c5e
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/pe-terraclassic/js/jquery.validate.min.js?ver=1.15.0 HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 11 Jan 2021 15:55:32 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 9156
content-type: application/javascript
date: Thu, 10 Nov 2022 22:38:32 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=6.1.2
200 OK 1.1 kB URL HTTP/2 mediziyashop.com/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=6.1.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (2938), with no line terminators
Hash 769e9d3f7fc383ec1a02024e39730474
4f5a5edf28ed19b48c5e40747ec6896f0df8f09e
4636689d57889e984a7a1a1c6e2516b7a2d951407ca826aaf505c50002e2b486
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=6.1.2 HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 10 Mar 2022 20:19:43 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1093
content-type: application/javascript
date: Thu, 10 Nov 2022 22:38:32 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/plugins/wp-user-avatar/assets/select2/select2.min.css?ver=5.8.6
200 OK 3.4 kB URL HTTP/2 mediziyashop.com/wp-content/plugins/wp-user-avatar/assets/select2/select2.min.css?ver=5.8.6
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (14965), with no line terminators
Hash 8be7a878c560f1b146db163966f64d74
0dfdd50b2c3355c62cd7426649e819ba4a652495
7c7f8eb143a56619e051b210fa355e14ff4ff9f8fad982b0c4110c166a2aadca
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/wp-user-avatar/assets/select2/select2.min.css?ver=5.8.6 HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 10 Jan 2022 09:16:33 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 3356
content-type: text/css
date: Thu, 10 Nov 2022 22:38:32 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
200 OK 4.6 kB URL HTTP/2 mediziyashop.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (11126)
Hash acdb97105af28a7066790c6748ae2e1e
65794d2c5a9d04f747faf370bc8bacd330e69e5a
dc4efbc4b704b142b5313588c32e56ea56648068a01d2bc596a4eee06b379b5e
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 19 Nov 2020 15:01:14 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4618
content-type: application/javascript
date: Thu, 10 Nov 2022 22:38:32 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/plugins/gdpr/dist/js/public.js?ver=2.1.2
200 OK 4.4 kB URL HTTP/2 mediziyashop.com/wp-content/plugins/gdpr/dist/js/public.js?ver=2.1.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Unicode text, UTF-8 text, with very long lines (9363)
Hash 68391afc0e8e37a9df9d9d93d0ab81bf
8101e8749d38d1dc5140877da7c4bdcab50ca3ed
efed76de14622a90b142ff5e57c28ad289cc1a49b3b0e6ec6175924adbf279f1
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/gdpr/dist/js/public.js?ver=2.1.2 HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 11 Jan 2021 15:55:31 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4412
content-type: application/javascript
date: Thu, 10 Nov 2022 22:38:32 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/plugins/wp-user-avatar/assets/flatpickr/flatpickr.min.css?ver=3.2.6
200 OK 4.1 kB URL HTTP/2 mediziyashop.com/wp-content/plugins/wp-user-avatar/assets/flatpickr/flatpickr.min.css?ver=3.2.6
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (11843)
Hash a2eacc29d4f41073c38be37759e47692
704baf7cd217af03f2023ce63e6a982d292834b3
9e55fa2b980373a7a8f1da010433d0923af916cd6c7c1b8296438632e3fd19ae
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/wp-user-avatar/assets/flatpickr/flatpickr.min.css?ver=3.2.6 HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 10 Jan 2022 09:16:33 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4060
content-type: text/css
date: Thu, 10 Nov 2022 22:38:32 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=6.1.2
200 OK 13 kB URL HTTP/2 mediziyashop.com/wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=6.1.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Unicode text, UTF-8 text, with very long lines (62753), with no line terminators
Hash ebad0134e03078f66fa63f2a89d17d81
bccc743a9a5d015e06c7f622b4687142b2cd2fe5
42e7dbb97a0b72fa2bc44035d713982a7ff653cb63c0a7ef09e1fd4fe69c4d14
GET /wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=6.1.2 HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 10 Mar 2022 20:19:43 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 13255
content-type: text/css
date: Thu, 10 Nov 2022 22:38:32 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/plugins/wp-user-avatar/assets/css/frontend.min.css?ver=3.2.6
200 OK 15 kB URL HTTP/2 mediziyashop.com/wp-content/plugins/wp-user-avatar/assets/css/frontend.min.css?ver=3.2.6
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (65536), with no line terminators
Hash 4965d273c665d58ac673952b3299e882
b2175b87388934bfc92ac38640e69a1ba2bf8efb
f20935193b8a3b402938e07226d46436915d48b1e829e6cf6834fa060e6db129
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/wp-user-avatar/assets/css/frontend.min.css?ver=3.2.6 HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 10 Jan 2022 09:16:33 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 15295
content-type: text/css
date: Thu, 10 Nov 2022 22:38:32 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/plugins/pe-recent-posts/js/bootstrap.min.js?ver=3.3.0
200 OK 14 kB URL HTTP/2 mediziyashop.com/wp-content/plugins/pe-recent-posts/js/bootstrap.min.js?ver=3.3.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (32108)
Hash c029cfaaa273ad5fede356eb846b7747
7c15ef9fb0229668fec78349ae75ee06b22a87b7
1f1b0b7dce0b13c3d59c58ff704f81bc3b6b4f6b296b9f034921d20ac6c1cf14
GET /wp-content/plugins/pe-recent-posts/js/bootstrap.min.js?ver=3.3.0 HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 11 Jan 2021 15:55:30 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 13505
content-type: application/javascript
date: Thu, 10 Nov 2022 22:38:32 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=6.1.2
200 OK 1.2 kB URL HTTP/2 mediziyashop.com/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=6.1.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document, ASCII text, with very long lines (3037), with no line terminators
Hash 57b5945094a547e06221f8f949e6d335
76fc7361f00684ea29ffbf4b7d46e5429b8c245a
f9d0da987075df31cc4cf8aed46bc193467ce7165568d83c8016e6fe904e72c3
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=6.1.2 HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 10 Mar 2022 20:19:43 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1200
content-type: application/javascript
date: Thu, 10 Nov 2022 22:38:32 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/plugins/mailchimp-for-woocommerce/public/js/mailchimp-woocommerce-public.min.js?ver=2.5.4
200 OK 3.0 kB URL HTTP/2 mediziyashop.com/wp-content/plugins/mailchimp-for-woocommerce/public/js/mailchimp-woocommerce-public.min.js?ver=2.5.4
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (355)
Hash c3a6aea95ec5a587e46af56f1a6a3b4a
8291a5026f14d44a543a5820a422ccfff3de372b
b738fdfd3a55b216bb8697e1797bf2c13bd5fc4c375951c67d08f728731b8204
GET /wp-content/plugins/mailchimp-for-woocommerce/public/js/mailchimp-woocommerce-public.min.js?ver=2.5.4 HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 21 Dec 2021 10:52:21 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2965
content-type: application/javascript
date: Thu, 10 Nov 2022 22:38:32 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/plugins/wp-user-avatar/assets/js/frontend.min.js?ver=3.2.6
200 OK 3.2 kB URL HTTP/2 mediziyashop.com/wp-content/plugins/wp-user-avatar/assets/js/frontend.min.js?ver=3.2.6
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (9142), with no line terminators
Hash 4bfcb44b22b3b77b3cd7fcd5ee820f00
58c67dd442dff5aa20f8c146d87d981ccb3d2167
4e8e5af6dfab6e70aa2f62133e337d5b6b04ecd0302c25283ead40764ede0aea
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/wp-user-avatar/assets/js/frontend.min.js?ver=3.2.6 HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 10 Jan 2022 09:16:33 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 3241
content-type: application/javascript
date: Thu, 10 Nov 2022 22:38:32 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/uploads/2022/07/kk-2.png
200 OK 8.6 kB URL HTTP/2 mediziyashop.com/wp-content/uploads/2022/07/kk-2.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 46 x 46, 8-bit/color RGBA, non-interlaced\012- data
Hash fdddbcad66a3aaf029de1ea0b2ab122c
b8d24a234885772effe37842b6e677d4660cf976
816d1a3a8581a72b6d0499381dcc82fd2d527aff2a233fe4d10d1efabf49872e
GET /wp-content/uploads/2022/07/kk-2.png HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 21 Jul 2022 16:34:18 GMT
accept-ranges: bytes
content-length: 8648
content-type: image/png
date: Thu, 10 Nov 2022 22:38:32 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/uploads/2018/08/proporties.png
200 OK 17 kB URL HTTP/2 mediziyashop.com/wp-content/uploads/2018/08/proporties.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 46 x 46, 8-bit/color RGBA, non-interlaced\012- data
Hash d9698c6bc11c70087f2da86b98568f6d
efa7843b1474af3608f1d46d57a584bdb0a58d2a
b6e01183787f74e3b21dbec784c35baf3cfb209fa1250164b29564c6f1cd35e1
GET /wp-content/uploads/2018/08/proporties.png HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 15 Dec 2020 12:56:59 GMT
accept-ranges: bytes
content-length: 16766
content-type: image/png
date: Thu, 10 Nov 2022 22:38:32 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/plugins/pe-terraclassic-plugin/js/map.js?ver=5.8.6
200 OK 471 B URL HTTP/2 mediziyashop.com/wp-content/plugins/pe-terraclassic-plugin/js/map.js?ver=5.8.6
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with CRLF line terminators
Hash 64c592a64a9206c771d3385de9846d8f
4892cb02ebd0007c9abe3c2243f90465b52d4194
2dc6ff33007f4021114601af30773f51608f26b76da39df93f7ec5e1a9e67967
GET /wp-content/plugins/pe-terraclassic-plugin/js/map.js?ver=5.8.6 HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 11 Jan 2021 15:55:31 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 471
content-type: application/javascript
date: Thu, 10 Nov 2022 22:38:32 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.6.1.2
200 OK 1.0 kB URL HTTP/2 mediziyashop.com/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.6.1.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (1668)
Hash 0bebfb5722cbc8ac04e62aa40698be49
3bc5e4f29cb19a2d80d46dee242dabf7e42c0fd3
70d02eabbadbe176455a2bb53d8d567feca69847c067a5274987a8bdc65e3c05
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.6.1.2 HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 10 Mar 2022 20:19:43 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1000
content-type: application/javascript
date: Thu, 10 Nov 2022 22:38:32 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/plugins/slide-anything/owl-carousel/owl.carousel.css?ver=2.2.1.1
200 OK 1.7 kB URL HTTP/2 mediziyashop.com/wp-content/plugins/slide-anything/owl-carousel/owl.carousel.css?ver=2.2.1.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with CRLF line terminators
Hash 84ecc03a89badfc48d51b0650dec7c35
ff3e35b3202d82d3355fd236cb0b1c52114a1a0b
aa4ffe7f5e44be1a39ef28496e9410c245440d1d76adc86739b9a7267ef6626a
GET /wp-content/plugins/slide-anything/owl-carousel/owl.carousel.css?ver=2.2.1.1 HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 15 Jan 2022 05:24:20 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1653
content-type: text/css
date: Thu, 10 Nov 2022 22:38:32 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/plugins/pe-terraclassic-plugin/js/script.js?ver=1
200 OK 3.3 kB URL HTTP/2 mediziyashop.com/wp-content/plugins/pe-terraclassic-plugin/js/script.js?ver=1
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with CRLF line terminators
Hash 588b5ff15fc440044b65b537d3dfa903
e28e0d733c657b8aefb9b8f1352771dd9a9011a9
9e686b4fbc62045f6703e7668bf8ff394d55ff4f882b990b0f64de6545701a3d
GET /wp-content/plugins/pe-terraclassic-plugin/js/script.js?ver=1 HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 11 Jan 2021 15:55:31 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 3303
content-type: application/javascript
date: Thu, 10 Nov 2022 22:38:32 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/plugins/slide-anything/owl-carousel/sa-owl-theme.css?ver=2.0
200 OK 3.2 kB URL HTTP/2 mediziyashop.com/wp-content/plugins/slide-anything/owl-carousel/sa-owl-theme.css?ver=2.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with CRLF line terminators
Hash f51f2b4a075ba05e3a113f2dd1975bf0
1f3bb307858aac9559b6b9bb83cb7ef76666d3c2
390d943be93ca4743add9f8fc01e01569aac7ba5f7f6ec8d40dece4cb4d56cf7
GET /wp-content/plugins/slide-anything/owl-carousel/sa-owl-theme.css?ver=2.0 HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 15 Jan 2022 05:24:20 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 3194
content-type: text/css
date: Thu, 10 Nov 2022 22:38:32 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-includes/js/dist/hooks.min.js?ver=a7edae857aab69d69fa10d5aef23a5de
200 OK 1.8 kB URL HTTP/2 mediziyashop.com/wp-includes/js/dist/hooks.min.js?ver=a7edae857aab69d69fa10d5aef23a5de
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (5405)
Hash afcdada0b29742d34e89ca59f1a760b7
aced959f5acb1aacbdf4638f10681054b99dfaff
f35b57c6310fdd25060cb70d114cc336b008539cb54cefeda391358e062a6016
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/dist/hooks.min.js?ver=a7edae857aab69d69fa10d5aef23a5de HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 17 Nov 2021 15:41:28 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1844
content-type: application/javascript
date: Thu, 10 Nov 2022 22:38:32 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-includes/js/dist/a11y.min.js?ver=0ac8327cc1c40dcfdf29716affd7ac63
200 OK 1.2 kB URL HTTP/2 mediziyashop.com/wp-includes/js/dist/a11y.min.js?ver=0ac8327cc1c40dcfdf29716affd7ac63
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Unicode text, UTF-8 text, with very long lines (2973)
Hash 78632fb4a3b33a5bad6d4e4307ebd780
2a69b21d47cef63605c5f9ac3d60b25f63a7cede
51ee65aa4b1f7d26440bf5b29ce631b24844ababdcc79fab590a3d903cf0256f
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/dist/a11y.min.js?ver=0ac8327cc1c40dcfdf29716affd7ac63 HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 17 Nov 2021 15:41:28 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1188
content-type: application/javascript
date: Thu, 10 Nov 2022 22:38:32 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/plugins/terraclassifieds/assets/js/jquery.validate.min.js?ver=1
200 OK 9.7 kB URL HTTP/2 mediziyashop.com/wp-content/plugins/terraclassifieds/assets/js/jquery.validate.min.js?ver=1
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Unicode text, UTF-8 text, with very long lines (24292)
Hash 2d29a91f4da2add72ef6d7a71d2a29a6
67a3dfcd09c184128f76d7b3a33507f0ae3d86ee
9fe41ee1c8bbe47173dd9fd6cd6951029df7fb6f90c89513570b1ed95305d3ab
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/terraclassifieds/assets/js/jquery.validate.min.js?ver=1 HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 18 Nov 2021 14:45:38 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 9726
content-type: application/javascript
date: Thu, 10 Nov 2022 22:38:32 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/plugins/terraclassifieds/assets/js/script.js?ver=1
200 OK 11 kB URL HTTP/2 mediziyashop.com/wp-content/plugins/terraclassifieds/assets/js/script.js?ver=1
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with CRLF line terminators
Hash ec06772d6e49570341071fb232b98d78
ca596fe3e7fc71eb85b6d792f7a23973b424c52d
8b06eae47e21ab29a7ae8ef4e5e3bbf058688a3f6bb541fe78b69e614a31f933
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/terraclassifieds/assets/js/script.js?ver=1 HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 18 Nov 2021 14:45:38 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 11320
content-type: application/javascript
date: Thu, 10 Nov 2022 22:38:32 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/plugins/slide-anything/owl-carousel/animate.min.css?ver=2.0
200 OK 5.2 kB URL HTTP/2 mediziyashop.com/wp-content/plugins/slide-anything/owl-carousel/animate.min.css?ver=2.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (55728), with CRLF, CR line terminators
Hash 581f1f675933d0b84a752fe7f916bd07
e75e99cb3dfc9d9a513689019acf39c54754ad03
54a4c24868a75f5a422c68baff6139e1c2e7b02ff2cc6442f092aa57e69ac8e3
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/slide-anything/owl-carousel/animate.min.css?ver=2.0 HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 15 Jan 2022 05:24:20 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 5217
content-type: text/css
date: Thu, 10 Nov 2022 22:38:32 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-includes/js/jquery/ui/autocomplete.min.js?ver=1.12.1
200 OK 3.4 kB URL HTTP/2 mediziyashop.com/wp-includes/js/jquery/ui/autocomplete.min.js?ver=1.12.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (8354)
Hash a4a7633e8c9bd52152a60168e337f822
d19a3745f496236d792edd2f011906e9f6f5ae41
9ac737e881aa07887b5f9c316f78c8d82bce40d7eb8fe980768f47c87f874973
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/jquery/ui/autocomplete.min.js?ver=1.12.1 HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 04 Feb 2021 09:26:40 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 3402
content-type: application/javascript
date: Thu, 10 Nov 2022 22:38:32 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
200 OK 6.9 kB URL HTTP/2 mediziyashop.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Unicode text, UTF-8 text, with very long lines (16323)
Hash 122fe79a1d53d10946cded540d2e219f
6271fdf889afe8a13d7c69efea9b40cbd0d81939
94cb1b0ca86f7f0bb7bcc81b42a06b6199bd37ff77ca88dccf3acc92683f3e24
GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 17 Nov 2021 15:41:28 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 6935
content-type: application/javascript
date: Thu, 10 Nov 2022 22:38:32 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-includes/js/dist/i18n.min.js?ver=5f1269854226b4dd90450db411a12b79
200 OK 4.1 kB URL HTTP/2 mediziyashop.com/wp-includes/js/dist/i18n.min.js?ver=5f1269854226b4dd90450db411a12b79
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash 3d9880fc11ef815da3bf856d5147cefa
1993cb02311a5e66813aedaf503f6102956fc33f
b0021382b6d834f35c1ba6820b3078aeef1fe6458150066ce642c7aec7c6c3a6
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/dist/i18n.min.js?ver=5f1269854226b4dd90450db411a12b79 HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 17 Nov 2021 15:41:28 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4142
content-type: application/javascript
date: Thu, 10 Nov 2022 22:38:32 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-includes/js/wp-emoji-release.min.js?ver=5.8.6
200 OK 5.2 kB URL HTTP/2 mediziyashop.com/wp-includes/js/wp-emoji-release.min.js?ver=5.8.6
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (15224)
Hash 00af0ddf324f69fcb25f0d2e5d08910a
df0379ab0e1b2902957c8aba77f89d88e1239b59
f0a06ed3b8d3917b358def04d87668001cd1c6da31a5cb4bb452313feb64a2a7
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/wp-emoji-release.min.js?ver=5.8.6 HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 17 Nov 2021 15:41:28 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 5243
content-type: application/javascript
date: Thu, 10 Nov 2022 22:38:32 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/themes/pe-terraclassic/js/jquery.magnific-popup.min.js?ver=1.1.0
200 OK 9.2 kB URL HTTP/2 mediziyashop.com/wp-content/themes/pe-terraclassic/js/jquery.magnific-popup.min.js?ver=1.1.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (20087)
Hash 7a10ae63b238729dc4da7f7bd8986219
654c47168dca0ec7080f6c57e8c4482b57f879d4
b782185399b361358f7c409d6f23f22d45f695dcbb63876c35752c7b1de72db3
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/pe-terraclassic/js/jquery.magnific-popup.min.js?ver=1.1.0 HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 11 Jan 2021 15:55:32 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 9204
content-type: application/javascript
date: Thu, 10 Nov 2022 22:38:32 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-includes/js/jquery/ui/core.min.js?ver=1.12.1
200 OK 8.2 kB URL HTTP/2 mediziyashop.com/wp-includes/js/jquery/ui/core.min.js?ver=1.12.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (7973)
Hash 6e3b0317803aa9f226979ad7a7e77593
c95b4f532fd03f3754bf63139a57aab65fbe8a25
84520e8f7a292cb992fa9c62932245f598c6fa043fd4e19eadb6ad9a767dca6f
GET /wp-includes/js/jquery/ui/core.min.js?ver=1.12.1 HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 15 Apr 2021 08:19:31 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 8223
content-type: application/javascript
date: Thu, 10 Nov 2022 22:38:32 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/themes/pe-terraclassic/js/slick.min.js?ver=1.6.0
200 OK 14 kB URL HTTP/2 mediziyashop.com/wp-content/themes/pe-terraclassic/js/slick.min.js?ver=1.6.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (32076)
Hash 6089654c2cdda263b23e7af02ce9af25
2ddcdfb5a759f83cc03ce3862742f815345de84f
c00aa1482aaf5aabc144c5b8859bb42476ff0d67cab68d7f895c9353ca8458a9
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/pe-terraclassic/js/slick.min.js?ver=1.6.0 HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 11 Jan 2021 15:55:32 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 14096
content-type: application/javascript
date: Thu, 10 Nov 2022 22:38:32 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/uploads/2020/12/Mediziya-Logo50.png
200 OK 4.0 kB URL HTTP/2 mediziyashop.com/wp-content/uploads/2020/12/Mediziya-Logo50.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 49 x 39, 8-bit/color RGBA, non-interlaced\012- data
Hash 0a0b8a243d5bb23aaa93482e573a97a7
78ef74cda90ab3eed99e0fbadb715672b20cf7d2
03ec9d471716ca043d1d987b8084a874e426f1646827c59ad01d7286df59d51c
GET /wp-content/uploads/2020/12/Mediziya-Logo50.png HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 17 Dec 2020 07:19:37 GMT
accept-ranges: bytes
content-length: 3963
content-type: image/png
date: Thu, 10 Nov 2022 22:38:32 GMT
server: Apache
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 05c535856290afa95f14fb2b70da3913
65e1db339938b8bba03c4e64ef881a7f1ddc2b28
acb3f0a1be69d8efaa169c96a05466ff0ff304dbfc9a5b59055882f28504e11a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "ACB3F0A1BE69D8EFAA169C96A05466FF0FF304DBFC9A5B59055882F28504E11A"
Last-Modified: Thu, 10 Nov 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Fri, 11 Nov 2022 04:38:33 GMT
Date: Thu, 10 Nov 2022 22:38:33 GMT
Connection: keep-alive
mediziyashop.com/wp-content/themes/pe-terraclassic/js/js.cookie.js?ver=2.1.0
200 OK 1.5 kB URL HTTP/2 mediziyashop.com/wp-content/themes/pe-terraclassic/js/js.cookie.js?ver=2.1.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash 325157650a8b814dda5b59b7a72459ab
a8852c7db35b51775cfe4a61630b0555e00f0377
f4754fe4b7d99f027e1e290e56aca74f135571f000c53cf3ee9f36f2413a3470
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/pe-terraclassic/js/js.cookie.js?ver=2.1.0 HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 11 Jan 2021 15:55:32 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1470
content-type: application/javascript
date: Thu, 10 Nov 2022 22:38:32 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.6.1.2
200 OK 4.0 kB URL HTTP/2 mediziyashop.com/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.6.1.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (9139)
Hash 5f3c95f97f566ce33b859d6b874d116d
e47be9178d33d8d8eefda83c853b560aaed71413
a0cea478b83a24f0c90bfaf776ed62fe8747395838a92d8c9f06ceb79b3e5918
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.6.1.2 HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 10 Mar 2022 20:19:43 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 3957
content-type: application/javascript
date: Thu, 10 Nov 2022 22:38:32 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/uploads/2022/07/bg.png
200 OK 8.6 kB URL HTTP/2 mediziyashop.com/wp-content/uploads/2022/07/bg.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 46 x 46, 8-bit/color RGBA, non-interlaced\012- data
Hash 19d9ebc6e03c3500ca90b197c7bc4767
b4154e4d7445c0bb5fe4ea26fab0fe41dc69eaa9
697997cd5e87c082bda456792a6347fe2983144ecae5c2b1bb5a63dd8de7c0cb
GET /wp-content/uploads/2022/07/bg.png HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 21 Jul 2022 16:09:42 GMT
accept-ranges: bytes
content-length: 8648
content-type: image/png
date: Thu, 10 Nov 2022 22:38:32 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/themes/pe-terraclassic/js/jquery.visible.min.js?ver=1.0
200 OK 441 B URL HTTP/2 mediziyashop.com/wp-content/themes/pe-terraclassic/js/jquery.visible.min.js?ver=1.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (802)
Hash e37a5c40099f55de3f5b69653efe6d09
e34c57b895a473cda084e3cb68a6d7ed35d3501b
f09b1da9a533dec3da2d926452fb57633e22eab35acc34af12e4f786655e59a2
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/pe-terraclassic/js/jquery.visible.min.js?ver=1.0 HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 11 Jan 2021 15:55:32 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 441
content-type: application/javascript
date: Thu, 10 Nov 2022 22:38:32 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/uploads/2022/07/proporties.png
200 OK 2.0 kB URL HTTP/2 mediziyashop.com/wp-content/uploads/2022/07/proporties.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 46 x 46, 8-bit/color RGBA, non-interlaced\012- data
Hash c86cac8be68f2d882beddadc143137f7
d7e95ab9ec4ebb0ae611a662bb5719448900b4b7
409a9914016dcfa84624da509bd44e27023f6d02b8162102fbfb98e9467129ec
GET /wp-content/uploads/2022/07/proporties.png HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 21 Jul 2022 15:33:57 GMT
accept-ranges: bytes
content-length: 2045
content-type: image/png
date: Thu, 10 Nov 2022 22:38:32 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/plugins/slide-anything/js/jquery.mousewheel.min.js?ver=3.1.13
200 OK 1.2 kB URL HTTP/2 mediziyashop.com/wp-content/plugins/slide-anything/js/jquery.mousewheel.min.js?ver=3.1.13
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (2584)
Hash d3c7c579b74aed3dcde6ad1f1376b6f4
39cba7a1adbaf7d2b51ccf6d42164dbfa791fce3
e891d3cc839bd3650e204f3dfbb4e78546f141b4318594f101982a624cc00d6f
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/slide-anything/js/jquery.mousewheel.min.js?ver=3.1.13 HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 15 Jan 2022 05:24:20 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1215
content-type: application/javascript
date: Thu, 10 Nov 2022 22:38:32 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-includes/js/wp-embed.min.js?ver=5.8.6
200 OK 777 B URL HTTP/2 mediziyashop.com/wp-includes/js/wp-embed.min.js?ver=5.8.6
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (1391)
Hash 06ece4d01ee88297957c9f4cdcaa4df5
2b3321654a8ead1e1493eac9b5f1fdfb65e2037f
0b17eb6ab02e69f50ac52ca157375bd69853ae4f4796eb48a35eb4a12fc7af8b
GET /wp-includes/js/wp-embed.min.js?ver=5.8.6 HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 04 Feb 2021 09:26:40 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 777
content-type: application/javascript
date: Thu, 10 Nov 2022 22:38:32 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/themes/pe-terraclassic/js/theme.js?ver=1.07
200 OK 4.3 kB URL HTTP/2 mediziyashop.com/wp-content/themes/pe-terraclassic/js/theme.js?ver=1.07
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash a0cd6a484aee633bb7d42fe914e72bc0
0adb8578f8872ca1ed37ce2b19375ddb9326b4bc
77fd374451d0b04013fa29ccc4a3fe334e73f81975956d01282d9620fcff90ef
GET /wp-content/themes/pe-terraclassic/js/theme.js?ver=1.07 HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 11 Jan 2021 15:55:32 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4300
content-type: application/javascript
date: Thu, 10 Nov 2022 22:38:32 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/themes/pe-terraclassic/js/jquery.form.js?ver=3.51
200 OK 14 kB URL HTTP/2 mediziyashop.com/wp-content/themes/pe-terraclassic/js/jquery.form.js?ver=3.51
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash 7af1c9422d9872b2790343e202644cab
dc5db12bdead1549a481fdc3f76ae2d7f91186f6
c00bf89139262f2eabc445879e7e95f6060fdc4aa6184f8e38ca10d1c1197c55
GET /wp-content/themes/pe-terraclassic/js/jquery.form.js?ver=3.51 HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 11 Jan 2021 15:55:32 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 14416
content-type: application/javascript
date: Thu, 10 Nov 2022 22:38:32 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/plugins/creative-mail-by-constant-contact/assets/js/block/submit.js?ver=1641806190
409 Conflict 83 B URL HTTP/2 mediziyashop.com/wp-content/plugins/creative-mail-by-constant-contact/assets/js/block/submit.js?ver=1641806190
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document, ASCII text, with no line terminators
Hash 26267cd8990f15d3bbea71684a6d5995
ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
GET /wp-content/plugins/creative-mail-by-constant-contact/assets/js/block/submit.js?ver=1641806190 HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 409 Conflict
date: Thu, 10 Nov 2022 22:38:32 GMT
server: Apache
content-length: 83
content-type: text/html; charset=iso-8859-1
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/plugins/slide-anything/owl-carousel/owl.carousel.min.js?ver=2.2.1
200 OK 16 kB URL HTTP/2 mediziyashop.com/wp-content/plugins/slide-anything/owl-carousel/owl.carousel.min.js?ver=2.2.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (31997)
Hash 8a2ba9702fb3cca3c84924959fff383d
ec7e32b952d84e211870dd0e9f1520582e3b4270
ebcdf76e9e513c320785d95cbfa122a4aaa6143fc8ea69a2ea0dedf0277828b8
GET /wp-content/plugins/slide-anything/owl-carousel/owl.carousel.min.js?ver=2.2.1 HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 15 Jan 2022 05:24:20 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 15883
content-type: application/javascript
date: Thu, 10 Nov 2022 22:38:32 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/
200 OK 23 kB IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1820), with CRLF, LF line terminators
Hash d270e9339b45b30f245af6b35063d6d4
34894632ff06227e50c570cd1a2565ba1239318f
bebea33557304ce222ba45ee47acc003bc5badc0067b9709dae97ab6bcce521a
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
link: <https://mediziyashop.com/wp-json/>; rel="https://api.w.org/", <https://mediziyashop.com/wp-json/wp/v2/pages/172>; rel="alternate"; type="application/json", <https://mediziyashop.com/>; rel=shortlink
set-cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; expires=Thu, 10-Nov-2022 23:08:32 GMT; Max-Age=1800; path=/
PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; path=/; secure; HttpOnly
gdpr[consent_types]=%5B%5D; expires=Fri, 10-Nov-2023 22:38:32 GMT; Max-Age=31536000; path=/
gdpr[allowed_cookies]=%5B%22%22%5D; expires=Fri, 10-Nov-2023 22:38:32 GMT; Max-Age=31536000; path=/
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Thu, 10 Nov 2022 22:38:30 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/uploads/2022/01/Bannner-1.jpg
200 OK 885 kB URL HTTP/2 mediziyashop.com/wp-content/uploads/2022/01/Bannner-1.jpg
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=3, software=Adobe Photoshop CS6 (Macintosh), datetime=2022:06:02 14:17:56], baseline, precision 8, 1200x300, components 4 DIY-Thermocam raw data\012- (Lepton 2.x), scale 0-0, spot sensor temperature 0.000000, unit celsius, color scheme 0, calibration: offset 0.000000, slope 4489864774406922829824.000000\012- data
Size 885 kB (885002 bytes)
Hash acb61b2e77f9c9da81ccd6a2544935d9
dc7825e5ca9ed17921e5822cec48c0b38c360af1
5a07aef061e3997a4dc73137275828bd6e89958dc235f8f54008323d8d25a9be
GET /wp-content/uploads/2022/01/Bannner-1.jpg HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 02 Jun 2022 12:08:23 GMT
accept-ranges: bytes
content-length: 885002
content-type: image/jpeg
date: Thu, 10 Nov 2022 22:38:32 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/uploads/2022/01/Men-Clothes-.jpg
200 OK 914 kB URL HTTP/2 mediziyashop.com/wp-content/uploads/2022/01/Men-Clothes-.jpg
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=3, software=Adobe Photoshop CS6 (Macintosh), datetime=2022:06:02 16:20:02], progressive, precision 8, 1200x300, components 4\012- data
Size 914 kB (913863 bytes)
Hash a0a07842e3f66d3c0ab77667ba55a40f
64961a90c486b9856cd98b58f7117f59c17b4498
2cd9f99750b143848fa464d9bc200c210984521489b0e94927edc49a87412aad
GET /wp-content/uploads/2022/01/Men-Clothes-.jpg HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 02 Jun 2022 14:13:38 GMT
accept-ranges: bytes
content-length: 913863
content-type: image/jpeg
date: Thu, 10 Nov 2022 22:38:32 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/uploads/2022/01/Ladies.jpg
200 OK 926 kB URL HTTP/2 mediziyashop.com/wp-content/uploads/2022/01/Ladies.jpg
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=3, software=Adobe Photoshop CS6 (Macintosh), datetime=2022:06:02 18:24:46], baseline, precision 8, 1200x300, components 4\012- data
Size 926 kB (926103 bytes)
Hash a172db2b074f3a5c93eb3b798ebf9135
8c0573442ac0a1db8b865c267eadb8fb5af15170
aa999fedc0952cb1c37acb10d2fbe8f1817a8c1feb1f61cc0fa24ee8a24c9e09
GET /wp-content/uploads/2022/01/Ladies.jpg HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 02 Jun 2022 16:15:59 GMT
accept-ranges: bytes
content-length: 926103
content-type: image/jpeg
date: Thu, 10 Nov 2022 22:38:32 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/plugins/terraclassifieds/inc/functions/dynamic-styles.php?ver=5.8.6
200 OK 134 B URL HTTP/2 mediziyashop.com/wp-content/plugins/terraclassifieds/inc/functions/dynamic-styles.php?ver=5.8.6
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with CRLF line terminators
Hash e01298fcf981400b379a2649e86ee219
52b8c631a96cccedbc3b99960a028db250949311
00ea7b6f76911de893337816fe84762237e5c478e8a9d524ff4c8f5de5e37f98
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/terraclassifieds/inc/functions/dynamic-styles.php?ver=5.8.6 HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; expires=Thu, 10-Nov-2022 23:08:32 GMT; Max-Age=1798; path=/
vary: Accept-Encoding
content-encoding: gzip
content-length: 134
content-type: text/css;charset=UTF-8
date: Thu, 10 Nov 2022 22:38:32 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 50b7ad7d0cb47a73140b0c340b5b72b4
5b7fd8d7d4a5fb963c33d52675ef3be152f4e7e3
494e1c3410c113871960bd9b35b3d89c0d404ecb836c03669a8522d159391cd9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 10 Nov 2022 22:38:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
mediziyashop.com/wp-content/plugins/woocommerce/assets/css/woocommerce-smallscreen.css?ver=6.1.2
200 OK 1.3 kB URL HTTP/2 mediziyashop.com/wp-content/plugins/woocommerce/assets/css/woocommerce-smallscreen.css?ver=6.1.2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (7043), with no line terminators
Hash 23030da399d26bb36e2effda3c58d488
2480e4b14c65a29b6013515cea8a55a6646aa85a
026d41f0bbec9c4116e05c06d43d3bbae4e9ec0975f84140565760431eaa88d7
GET /wp-content/plugins/woocommerce/assets/css/woocommerce-smallscreen.css?ver=6.1.2 HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 10 Mar 2022 20:19:43 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1294
content-type: text/css
date: Thu, 10 Nov 2022 22:38:34 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/plugins/woo-gutenberg-products-block/build/wc-blocks-style.css?ver=6.7.1
200 OK 44 kB URL HTTP/2 mediziyashop.com/wp-content/plugins/woo-gutenberg-products-block/build/wc-blocks-style.css?ver=6.7.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash 906761693838982250de1d020a6f8ce7
25ad55840be184d1e8c4be29965bbf6275f4e8d6
a57d3ff171ca4a02eb7d455f25b58e1bb70c405b0debd196908baf3e55579b5f
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/woo-gutenberg-products-block/build/wc-blocks-style.css?ver=6.7.1 HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 10 Jan 2022 09:16:37 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/css
date: Thu, 10 Nov 2022 22:38:32 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6bbfc6315b9228fd41cc16d1b2f54feb
2f2ca82eb3ca303268b03f7aa80af90f9380e8e2
9a593b197ba164b8fc74cfe6feccd57e05233a642d1dd8065c6723cee2c15701
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 10 Nov 2022 22:38:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2
200 OK 24 kB URL HTTP/2 fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 23580, version 1.0\012- data
Hash e1b3b5908c9cf23dfb2b9c52b9a023ab
fcd4136085f2a03481d9958cc6793a5ed98e714c
918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537
GET /s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://mediziyashop.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23580
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 08 Nov 2022 17:10:21 GMT
expires: Wed, 08 Nov 2023 17:10:21 GMT
cache-control: public, max-age=31536000
age: 192493
last-modified: Tue, 26 Apr 2022 15:48:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/montserrat/v25/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw5aXo.woff2
200 OK 13 kB URL HTTP/2 fonts.gstatic.com/s/montserrat/v25/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw5aXo.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 12708, version 1.0\012- data
Hash b4a68b1e743ee317eaaf0bbadd131571
f24f7823d4e3830c7cfa5bcb33733d2897c00f13
ddc148b8a0a27b1449fda6033f4a0defac9bd43210117b50d5d7ad1eda09f394
GET /s/montserrat/v25/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw5aXo.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://mediziyashop.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 12708
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 10 Nov 2022 06:06:20 GMT
expires: Fri, 10 Nov 2023 06:06:20 GMT
cache-control: public, max-age=31536000
age: 59534
last-modified: Mon, 11 Jul 2022 18:55:59 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2
200 OK 23 kB URL HTTP/2 fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 23040, version 1.0\012- data
Hash de69cf9e514df447d1b0bb16f49d2457
2ac78601179c3a63ba3f3f3081556b12ddcaf655
c447dd7677b419db7b21dbdfc6277c7816a913ffda76fd2e52702df538de0e49
GET /s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://mediziyashop.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23040
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 08 Nov 2022 17:10:21 GMT
expires: Wed, 08 Nov 2023 17:10:21 GMT
cache-control: public, max-age=31536000
age: 192493
last-modified: Tue, 26 Apr 2022 15:56:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
chimpstatic.com/mcjs-connected/js/users/9a6549d47320e3de9909049dd/19e384c7b290ecf5aeaed5b79.js
200 OK 653 B URL HTTP/1.1 chimpstatic.com/mcjs-connected/js/users/9a6549d47320e3de9909049dd/19e384c7b290ecf5aeaed5b79.js
IP
Hash 5c4175ac0e0e6d95ac18d804b263153a
66985f07a251a4cb15b7570f57ae7eb30ab0e180
58bde7a88d8aa4d7f183b4749b2f747cda33ed54035190f10ba81c9312ba25d7
GET /mcjs-connected/js/users/9a6549d47320e3de9909049dd/19e384c7b290ecf5aeaed5b79.js HTTP/1.1
Host: chimpstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: tI+4GWMVixvBtaioLKXraJXjjrQcYtJ0OhGxSlB78Htd16Nvg0L/li0fjcdb4oB3kKv6dALXQMM=
x-amz-request-id: 2JY8JM3DM8NNP6E6
Last-Modified: Thu, 18 Nov 2021 09:44:48 GMT
ETag: "4b60d3ea13c42468679685c32a1680ac"
Accept-Ranges: bytes
Content-Type: application/javascript
Server: AmazonS3
X-EdgeConnect-MidMile-RTT: 0, 6
X-EdgeConnect-Origin-MEX-Latency: 104, 104
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=1729
Expires: Thu, 10 Nov 2022 23:07:23 GMT
Date: Thu, 10 Nov 2022 22:38:34 GMT
Content-Length: 653
Connection: keep-alive
mediziya.com/classifiedads/wp-content/uploads/2020/12/Mediziya-Logo50.png
404 Not Found 355 B URL HTTP/2 mediziya.com/classifiedads/wp-content/uploads/2020/12/Mediziya-Logo50.png
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash cb50b952a1a41c3358018129e081d511
9b3ce22f173597240fd0c22ff649f3ffb9c6ea99
791b5cb893932898c350d1ec9888ee9c2feaea002431d12e9a1ba29331813be0
GET /classifiedads/wp-content/uploads/2020/12/Mediziya-Logo50.png HTTP/1.1
Host: mediziya.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
last-modified: Tue, 15 Mar 2022 22:06:36 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 355
content-type: text/html
date: Thu, 10 Nov 2022 22:38:34 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6bbfc6315b9228fd41cc16d1b2f54feb
2f2ca82eb3ca303268b03f7aa80af90f9380e8e2
9a593b197ba164b8fc74cfe6feccd57e05233a642d1dd8065c6723cee2c15701
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 10 Nov 2022 22:38:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
mediziyashop.com/wp-content/plugins/terraclassifieds/assets/img/male.png
200 OK 639 B URL HTTP/2 mediziyashop.com/wp-content/plugins/terraclassifieds/assets/img/male.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 24 x 24, 8-bit colormap, non-interlaced\012- data
Hash b6d650c993b58796ec8fdbd76bf95bbe
0af0cc561be0650ee14a2967442aac0842cf7c6a
c5b3a581001c148238d78758b158101d9dafddf9cb94ea3036f57e28a09b7dd7
GET /wp-content/plugins/terraclassifieds/assets/img/male.png HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/wp-content/plugins/terraclassifieds/assets/css/terraclassifieds-frontend.css?ver=1
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 18 Nov 2021 14:45:38 GMT
accept-ranges: bytes
content-length: 639
content-type: image/png
date: Thu, 10 Nov 2022 22:38:34 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/plugins/terraclassifieds/assets/fonts/fa-solid-900.woff2
200 OK 67 kB URL HTTP/2 mediziyashop.com/wp-content/plugins/terraclassifieds/assets/fonts/fa-solid-900.woff2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Web Open Font Format (Version 2), TrueType, length 67400, version 1.0\012- data
Hash 14a08198ec7d1eb96d515362293fed36
965d78c34637d1bdab6277805faecb6caa959669
ca3ea16761b7d443c64cfd99dd1cf8aa84790a25bb4709582935956fe71d014d
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/terraclassifieds/assets/fonts/fa-solid-900.woff2 HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://mediziyashop.com/wp-content/plugins/terraclassifieds/assets/css/font-awesome/all.css?ver=5.6.3
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 18 Nov 2021 14:45:38 GMT
accept-ranges: bytes
content-length: 67400
content-type: font/woff2
date: Thu, 10 Nov 2022 22:38:34 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/plugins/terraclassifieds/assets/fonts/fa-brands-400.woff2
200 OK 65 kB URL HTTP/2 mediziyashop.com/wp-content/plugins/terraclassifieds/assets/fonts/fa-brands-400.woff2
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Web Open Font Format (Version 2), TrueType, length 65316, version 1.0\012- data
Hash 48461ea4e797c9774dabb4a0440d2f56
024b7f9afa49a3658ebd7eee4e1c536502db51fa
974956f1b7b82cecd8ae88a0b685f0d5dfe5c8534c2784e59abeea719eadbbc4
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/terraclassifieds/assets/fonts/fa-brands-400.woff2 HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://mediziyashop.com/wp-content/plugins/terraclassifieds/assets/css/font-awesome/all.css?ver=5.6.3
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 18 Nov 2021 14:45:38 GMT
accept-ranges: bytes
content-length: 65316
content-type: font/woff2
date: Thu, 10 Nov 2022 22:38:34 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/uploads/2022/11/img_4158-170x170.jpg
200 OK 9.0 kB URL HTTP/2 mediziyashop.com/wp-content/uploads/2022/11/img_4158-170x170.jpg
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 170x170, components 3\012- data
Hash 0864ae111de8e14d802877476f2d3f3f
2f0f5e25b6624d40a8cdeda52b94f722cd8aeb66
c850dae591f7b973577dd6c94843eb1045c90144ec6599117e38ebb88eee81c1
GET /wp-content/uploads/2022/11/img_4158-170x170.jpg HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 04 Nov 2022 12:46:13 GMT
accept-ranges: bytes
content-length: 8952
content-type: image/jpeg
date: Thu, 10 Nov 2022 22:38:34 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/uploads/2022/11/img_4176-170x170.jpg
200 OK 7.8 kB URL HTTP/2 mediziyashop.com/wp-content/uploads/2022/11/img_4176-170x170.jpg
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 170x170, components 3\012- data
Hash 935c2244afd80bddc64c4561e87c4640
0d155778115bd0a344fb6877c0fcefdd66098e4a
0a739ebde2a8a339fd2fe9e3b09456eb863e744890e6d1df8753811faaf02172
GET /wp-content/uploads/2022/11/img_4176-170x170.jpg HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 04 Nov 2022 13:26:36 GMT
accept-ranges: bytes
content-length: 7819
content-type: image/jpeg
date: Thu, 10 Nov 2022 22:38:34 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/uploads/2022/11/img_4142-170x170.jpg
200 OK 9.5 kB URL HTTP/2 mediziyashop.com/wp-content/uploads/2022/11/img_4142-170x170.jpg
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 170x170, components 3\012- data
Hash 7ca23c37753ee6c8042c4c4fe2d18761
66aad4b3cf70f7991a6335f71b2044169fc96355
fe3367b9d6165cad6b43a195df97987f1650d85137bfb930ca548855387327a2
GET /wp-content/uploads/2022/11/img_4142-170x170.jpg HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 04 Nov 2022 09:31:13 GMT
accept-ranges: bytes
content-length: 9455
content-type: image/jpeg
date: Thu, 10 Nov 2022 22:38:34 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/uploads/2022/11/img_4152-170x170.jpg
200 OK 8.6 kB URL HTTP/2 mediziyashop.com/wp-content/uploads/2022/11/img_4152-170x170.jpg
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 170x170, components 3\012- data
Hash 6a72c9c04fbc972eeb636be72e052bf7
858548c7750832512b977a092062da1b96980699
ca398a5b6c2f66749aecdee27fdf85d34773a9bea28dcd20188583ca5f4270a1
GET /wp-content/uploads/2022/11/img_4152-170x170.jpg HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 04 Nov 2022 11:51:47 GMT
accept-ranges: bytes
content-length: 8581
content-type: image/jpeg
date: Thu, 10 Nov 2022 22:38:34 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/uploads/2022/08/WhatsApp-Image-2022-08-12-at-7.45.13-PM-170x170.jpeg
200 OK 9.9 kB URL HTTP/2 mediziyashop.com/wp-content/uploads/2022/08/WhatsApp-Image-2022-08-12-at-7.45.13-PM-170x170.jpeg
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 170x170, components 3\012- data
Hash 987350205fd2ec93528792fc3091decd
37d3588dc5c235d9dce25605f565aca0c7c3dc23
2d6b4b431dbd27f7c60f1e23391f39c92d8f01309e4917b2d6235cba1ffba298
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/2022/08/WhatsApp-Image-2022-08-12-at-7.45.13-PM-170x170.jpeg HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 15 Aug 2022 13:35:37 GMT
accept-ranges: bytes
content-length: 9850
content-type: image/jpeg
date: Thu, 10 Nov 2022 22:38:34 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/uploads/2022/08/WhatsApp-Image-2022-08-12-at-7.45.12-PM-170x170.jpeg
200 OK 9.4 kB URL HTTP/2 mediziyashop.com/wp-content/uploads/2022/08/WhatsApp-Image-2022-08-12-at-7.45.12-PM-170x170.jpeg
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 170x170, components 3\012- data
Hash 2fcdececa8e93d890289f0b4d4a316ad
01d16944bce3254b3a5b00015d02c2d920d573bd
1e71999636b10399fdd2c1ad75d1fc86f63a0ded356c440c7956cf8ffb42dbb0
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/2022/08/WhatsApp-Image-2022-08-12-at-7.45.12-PM-170x170.jpeg HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 15 Aug 2022 13:38:44 GMT
accept-ranges: bytes
content-length: 9392
content-type: image/jpeg
date: Thu, 10 Nov 2022 22:38:34 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/uploads/2022/08/WhatsApp-Image-2022-08-12-at-7.45.14-PM-170x170.jpeg
200 OK 9.2 kB URL HTTP/2 mediziyashop.com/wp-content/uploads/2022/08/WhatsApp-Image-2022-08-12-at-7.45.14-PM-170x170.jpeg
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 170x170, components 3\012- data
Hash 70e4f397823da39d79db9dda2ef29bff
22551eebfbb88e20e2c2935718fbd3c9911cfc89
da1920f831653c201c7d282e4925ab1fd74b0045052644b4c03b2223371ff622
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/2022/08/WhatsApp-Image-2022-08-12-at-7.45.14-PM-170x170.jpeg HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 15 Aug 2022 13:33:37 GMT
accept-ranges: bytes
content-length: 9209
content-type: image/jpeg
date: Thu, 10 Nov 2022 22:38:34 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/uploads/2022/08/WhatsApp-Image-2022-08-12-at-7.45.17-PM-170x170.jpeg
200 OK 8.5 kB URL HTTP/2 mediziyashop.com/wp-content/uploads/2022/08/WhatsApp-Image-2022-08-12-at-7.45.17-PM-170x170.jpeg
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 170x170, components 3\012- data
Hash 3669db6fe8f01dccc291dba6b40ecfac
ff2f320d54efc58d3c23d1953c338f68aa13551b
6634282e368af5f32d2f798ba2c203bc7159bd405016e4abd7e52927a313f1d6
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/2022/08/WhatsApp-Image-2022-08-12-at-7.45.17-PM-170x170.jpeg HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 15 Aug 2022 13:27:38 GMT
accept-ranges: bytes
content-length: 8499
content-type: image/jpeg
date: Thu, 10 Nov 2022 22:38:34 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/plugins/creative-mail-by-constant-contact/assets/js/block/submit.js?ver=1641806190
409 Conflict 83 B URL HTTP/2 mediziyashop.com/wp-content/plugins/creative-mail-by-constant-contact/assets/js/block/submit.js?ver=1641806190
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document, ASCII text, with no line terminators
Hash 26267cd8990f15d3bbea71684a6d5995
ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
GET /wp-content/plugins/creative-mail-by-constant-contact/assets/js/block/submit.js?ver=1641806190 HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 409 Conflict
date: Thu, 10 Nov 2022 22:38:34 GMT
server: Apache
content-length: 83
content-type: text/html; charset=iso-8859-1
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/uploads/2022/08/WhatsApp-Image-2022-08-09-at-7.43.54-PM-1-170x170.jpeg
200 OK 8.0 kB URL HTTP/2 mediziyashop.com/wp-content/uploads/2022/08/WhatsApp-Image-2022-08-09-at-7.43.54-PM-1-170x170.jpeg
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 170x170, components 3\012- data
Hash 06284db46351ce3d0765149d93e30ef5
e17d92fd0c0efc54bf4f71f4c5f19c0f3ee1cdb2
eae00aff451732fffeca0b475eb53b837f3e441724b252d2c72b142d3c3ba1f4
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/2022/08/WhatsApp-Image-2022-08-09-at-7.43.54-PM-1-170x170.jpeg HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 10 Aug 2022 11:57:56 GMT
accept-ranges: bytes
content-length: 8011
content-type: image/jpeg
date: Thu, 10 Nov 2022 22:38:34 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/uploads/2022/08/WhatsApp-Image-2022-08-09-at-7.43.54-PM-170x170.jpeg
200 OK 8.4 kB URL HTTP/2 mediziyashop.com/wp-content/uploads/2022/08/WhatsApp-Image-2022-08-09-at-7.43.54-PM-170x170.jpeg
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 170x170, components 3\012- data
Hash d47fc6e932d8ec988f25b1b72e323082
391694063f3c0e0a127150d1c9bf34a2495fa24d
042f053c4bb110dd05aeba148b13c97cc902a9b78c6568664cdb4d046d8d8702
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/2022/08/WhatsApp-Image-2022-08-09-at-7.43.54-PM-170x170.jpeg HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 10 Aug 2022 11:54:41 GMT
accept-ranges: bytes
content-length: 8442
content-type: image/jpeg
date: Thu, 10 Nov 2022 22:38:34 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/uploads/2022/08/WhatsApp-Image-2022-08-04-at-2.43.52-PM-170x170.jpeg
200 OK 8.1 kB URL HTTP/2 mediziyashop.com/wp-content/uploads/2022/08/WhatsApp-Image-2022-08-04-at-2.43.52-PM-170x170.jpeg
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 170x170, components 3\012- data
Hash 28ed5a09c76f3074c2008cd282715823
bafbfc110ac2d081149d3fbd9ebd1dfc6ea8e80d
3fdd403aa52ff43695ad80bb67c83823cd340816658e1d062e7c96d4f0b249a0
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/2022/08/WhatsApp-Image-2022-08-04-at-2.43.52-PM-170x170.jpeg HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 05 Aug 2022 19:06:46 GMT
accept-ranges: bytes
content-length: 8050
content-type: image/jpeg
date: Thu, 10 Nov 2022 22:38:34 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/uploads/2022/06/20220608_132929-170x170.jpg
200 OK 10 kB URL HTTP/2 mediziyashop.com/wp-content/uploads/2022/06/20220608_132929-170x170.jpg
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=2, orientation=[*0*]], baseline, precision 8, 170x170, components 3\012- data
Hash defeacfc0d3902c91c0341310ea6192e
5170cbecfea40a25c5a18e3cfe827c1e5eaf3d99
c214fc62917aaf25fbd67da1566f3ed175133a557390a40ab4636b1f5010446f
GET /wp-content/uploads/2022/06/20220608_132929-170x170.jpg HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 08 Jun 2022 13:45:38 GMT
accept-ranges: bytes
content-length: 9993
content-type: image/jpeg
date: Thu, 10 Nov 2022 22:38:34 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/uploads/2022/06/20220608_135717-170x170.jpg
200 OK 8.5 kB URL HTTP/2 mediziyashop.com/wp-content/uploads/2022/06/20220608_135717-170x170.jpg
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=2, orientation=[*0*]], baseline, precision 8, 170x170, components 3\012- data
Hash 6616be3c31980069827e01e08c3a9fe5
84fb5bd9d70041b047dfd6b9cf43fdcb50390b24
4b40fe50494c60a86efe7d4ba73539c89b3bcf50f22d4690978b79f4d231c24d
GET /wp-content/uploads/2022/06/20220608_135717-170x170.jpg HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 08 Jun 2022 12:18:51 GMT
accept-ranges: bytes
content-length: 8530
content-type: image/jpeg
date: Thu, 10 Nov 2022 22:38:34 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/uploads/2022/07/WhatsApp-Image-2022-07-21-at-4.15.16-PM-170x170.jpeg
200 OK 7.9 kB URL HTTP/2 mediziyashop.com/wp-content/uploads/2022/07/WhatsApp-Image-2022-07-21-at-4.15.16-PM-170x170.jpeg
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 170x170, components 3\012- data
Hash afb4fe5d5bbd61c00cef55b0f4159abf
03337bc493795b58867a3c7eec73a0691ee0ce53
8bc2d845c698bd9a0f5116bee256a8118c9320d2c6b00bc724693e8518419b74
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/2022/07/WhatsApp-Image-2022-07-21-at-4.15.16-PM-170x170.jpeg HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 21 Jul 2022 15:32:57 GMT
accept-ranges: bytes
content-length: 7902
content-type: image/jpeg
date: Thu, 10 Nov 2022 22:38:34 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/uploads/2022/06/20220608_140447-1-170x170.jpg
200 OK 8.3 kB URL HTTP/2 mediziyashop.com/wp-content/uploads/2022/06/20220608_140447-1-170x170.jpg
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=2, orientation=[*0*]], baseline, precision 8, 170x170, components 3\012- data
Hash c2866c721dd61e0e698a0efddac5b00e
6499e4b5dcccfec417da19a99607e870dfdb2b73
8b7ff9b412ef8afad1f6edc48d0c5e1bc2a3950ddfd3f49ae827c50eea54797d
GET /wp-content/uploads/2022/06/20220608_140447-1-170x170.jpg HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 08 Jun 2022 12:58:19 GMT
accept-ranges: bytes
content-length: 8318
content-type: image/jpeg
date: Thu, 10 Nov 2022 22:38:34 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 3d17c7f30f0e4c98aa1c36876e9fdf9f
a49862d9612337b780dc915d28f8e5a755ebab02
712a948567d0ddf111e5ee0a6dc846c9646f94dda75d10277039b0b3221093ab
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4098
Cache-Control: max-age=168880
Content-Type: application/ocsp-response
Date: Thu, 10 Nov 2022 22:38:35 GMT
Etag: "636d5e19-1d7"
Expires: Sat, 12 Nov 2022 21:33:15 GMT
Last-Modified: Thu, 10 Nov 2022 20:24:57 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 3d17c7f30f0e4c98aa1c36876e9fdf9f
a49862d9612337b780dc915d28f8e5a755ebab02
712a948567d0ddf111e5ee0a6dc846c9646f94dda75d10277039b0b3221093ab
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4098
Cache-Control: max-age=168880
Content-Type: application/ocsp-response
Date: Thu, 10 Nov 2022 22:38:35 GMT
Etag: "636d5e19-1d7"
Expires: Sat, 12 Nov 2022 21:33:15 GMT
Last-Modified: Thu, 10 Nov 2022 20:24:57 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 471
connect.facebook.net/en_US/fbevents.js
200 OK 27 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64348)
Hash 0ac10debd3a9ea8147a26d045bb93e6e
ff45f3442508e8695f2303701682ebdb6e016464
5dee7b453b2c72c07ff1d62432493a044507835a8031ea62edf2fa7cc26219b9
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy-report-only: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: chrome-extension: 'unsafe-inline' 'unsafe-eval';report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;require-trusted-types-for 'script';
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: ywa+no4o8+11ezQMbFrhjCpUVcKsr/4OkYgYXeLdbHtxKNeN1mHbphazYj3MbqXxp/w3xGop3AFijce5wBr47w==
priority: u=3,i
content-length: 27337
x-fb-trip-id: 1904183273
date: Thu, 10 Nov 2022 22:38:35 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
connect.facebook.net/en_US/sdk/xfbml.customerchat.js
200 OK 92 kB URL HTTP/2 connect.facebook.net/en_US/sdk/xfbml.customerchat.js
IP
File type ASCII text, with very long lines (20829)
Hash 334f87d1d2087cdb9cc64f88dacc927f
8ebfbf765c25a0bcc71566ef35d6ecb6645e6092
1436abe3ad990042f668384e8d9eb909e8d721cd7fe65314f33d0451c16125a7
GET /en_US/sdk/xfbml.customerchat.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: e3a0b7778921c2adaaa134f942836b06
etag: "71d21bec105e5894b79267e4c907b35f"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Thu, 10 Nov 2022 22:45:15 GMT
cache-control: public,max-age=1200,stale-while-revalidate=3600
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: M0+H0dIIfNucxk+I2sySfw==
x-fb-debug: e+IkWoCFfFiC2xz3/hEagQauzZBEi/TAc9qcJrEagAfrCEKSjnZC94VJoVWT1G5f3BKm0Km0exWyKaYRT724YA==
content-length: 92381
x-fb-trip-id: 1904183273
date: Thu, 10 Nov 2022 22:38:35 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 3d17c7f30f0e4c98aa1c36876e9fdf9f
a49862d9612337b780dc915d28f8e5a755ebab02
712a948567d0ddf111e5ee0a6dc846c9646f94dda75d10277039b0b3221093ab
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4098
Cache-Control: max-age=168880
Content-Type: application/ocsp-response
Date: Thu, 10 Nov 2022 22:38:35 GMT
Etag: "636d5e19-1d7"
Expires: Sat, 12 Nov 2022 21:33:15 GMT
Last-Modified: Thu, 10 Nov 2022 20:24:57 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 471
mediziyashop.com/wp-content/uploads/2020/12/cropped-Mediziya-Logo-32x32.png
200 OK 2.4 kB URL HTTP/2 mediziyashop.com/wp-content/uploads/2020/12/cropped-Mediziya-Logo-32x32.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash ab51150e945b98c6dc10c6ff41ed2ea8
70b9e4ad5ad0d2a4337f2601e9ff972537fc530b
e58c34af6c298809b33db7b21b3c5175abfff2664de3b9dc507391e1aabc8ef3
GET /wp-content/uploads/2020/12/cropped-Mediziya-Logo-32x32.png HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 15 Jan 2022 03:38:04 GMT
accept-ranges: bytes
content-length: 2365
content-type: image/png
date: Thu, 10 Nov 2022 22:38:35 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/uploads/2020/12/cropped-Mediziya-Logo-192x192.png
200 OK 40 kB URL HTTP/2 mediziyashop.com/wp-content/uploads/2020/12/cropped-Mediziya-Logo-192x192.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash d20c20072bf0af96927df4692d0e8edf
8cf8505a987c92117eff26db0a98b102edf695ad
0e6bbb89838d1555d23abc401637102d9ad54f3d1a92dce25d1b5afa0380a065
GET /wp-content/uploads/2020/12/cropped-Mediziya-Logo-192x192.png HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 15 Jan 2022 03:38:04 GMT
accept-ranges: bytes
content-length: 40039
content-type: image/png
date: Thu, 10 Nov 2022 22:38:35 GMT
server: Apache
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=776169779678839&ev=PageView&dl=https%3A%2F%2Fmediziyashop.com%2F&rl=&if=false&ts=1668119911273&cd[source]=woocommerce&cd[version]=6.1.2&cd[pluginVersion]=2.6.9&sw=1280&sh=1024&v=2.9.89&r=stable&a=woocommerce-6.1.2-2.6.9&ec=0&o=30&fbp=fb.1.1668119911272.71549573&it=1668119911071&coo=false&rqm=GET
200 OK 86 kB URL HTTP/2 www.facebook.com/tr/?id=776169779678839&ev=PageView&dl=https%3A%2F%2Fmediziyashop.com%2F&rl=&if=false&ts=1668119911273&cd[source]=woocommerce&cd[version]=6.1.2&cd[pluginVersion]=2.6.9&sw=1280&sh=1024&v=2.9.89&r=stable&a=woocommerce-6.1.2-2.6.9&ec=0&o=30&fbp=fb.1.1668119911272.71549573&it=1668119911071&coo=false&rqm=GET
IP
File type gzip compressed data, from Unix\012- data
Hash 24d0c33d7f85e681cf2a3195b6d3f663
a3fe3b65877bf93a67f4611821718f3d5c691d7a
cd31680cbe8d42a67b5077a4b1fa3d9ae49b6c0a4e224c4e3053ce1207c95e46
GET /tr/?id=776169779678839&ev=PageView&dl=https%3A%2F%2Fmediziyashop.com%2F&rl=&if=false&ts=1668119911273&cd[source]=woocommerce&cd[version]=6.1.2&cd[pluginVersion]=2.6.9&sw=1280&sh=1024&v=2.9.89&r=stable&a=woocommerce-6.1.2-2.6.9&ec=0&o=30&fbp=fb.1.1668119911272.71549573&it=1668119911071&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Thu, 10 Nov 2022 22:38:35 GMT
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/plugins/slide-anything/images/icon_next.png
200 OK 261 B URL HTTP/2 mediziyashop.com/wp-content/plugins/slide-anything/images/icon_next.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 20 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash bb36249eae2836938a4fcaa3a03b1df4
99a1a668df22283e233c4b4afa3128b6edae6c13
d27e81fbd7cae813c2206724e15018673c1ee76272aeef848cfa1e7489d4f10e
GET /wp-content/plugins/slide-anything/images/icon_next.png HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/wp-content/plugins/slide-anything/owl-carousel/sa-owl-theme.css?ver=2.0
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D; _fbp=fb.1.1668119911272.71549573
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 15 Jan 2022 05:24:20 GMT
accept-ranges: bytes
content-length: 261
content-type: image/png
date: Thu, 10 Nov 2022 22:38:35 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/plugins/slide-anything/images/icon_prev.png
200 OK 224 B URL HTTP/2 mediziyashop.com/wp-content/plugins/slide-anything/images/icon_prev.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 20 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 2e8d8b60cdc0fc6182236f3b9f37b9ae
aa8f3e0c89631500d0b48c3b5b64a8c6fc59899a
106089e291c72daecb8dc98e36800362b56366d9093486dfe86bb51d8890e98a
GET /wp-content/plugins/slide-anything/images/icon_prev.png HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/wp-content/plugins/slide-anything/owl-carousel/sa-owl-theme.css?ver=2.0
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D; _fbp=fb.1.1668119911272.71549573
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 15 Jan 2022 05:24:20 GMT
accept-ranges: bytes
content-length: 224
content-type: image/png
date: Thu, 10 Nov 2022 22:38:35 GMT
server: Apache
X-Firefox-Spdy: h2
www.facebook.com/plugins/customer_chat/SDK/?app_id=&attribution=fbe_woocommerce&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df3994346f331cea%26domain%3Dmediziyashop.com%26is_canvas%3Dfalse%26origin%3Dhttps%253A%252F%252Fmediziyashop.com%252Ff1f98f9d184b05%26relation%3Dparent.parent¤t_url=https%3A%2F%2Fmediziyashop.com%2F&event_name=chat_plugin_sdk_facade_create&is_loaded_by_facade=true&loading_time=0&locale=en_US&log_id=65813a4c-38d1-4fe7-83ee-d62c1ab113b6&page_id=107813234708267&request_time=1668119911584&sdk=joey&should_use_new_domain=false&suppress_http_code=1
200 OK 0 B URL HTTP/2 www.facebook.com/plugins/customer_chat/SDK/?app_id=&attribution=fbe_woocommerce&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df3994346f331cea%26domain%3Dmediziyashop.com%26is_canvas%3Dfalse%26origin%3Dhttps%253A%252F%252Fmediziyashop.com%252Ff1f98f9d184b05%26relation%3Dparent.parent¤t_url=https%3A%2F%2Fmediziyashop.com%2F&event_name=chat_plugin_sdk_facade_create&is_loaded_by_facade=true&loading_time=0&locale=en_US&log_id=65813a4c-38d1-4fe7-83ee-d62c1ab113b6&page_id=107813234708267&request_time=1668119911584&sdk=joey&should_use_new_domain=false&suppress_http_code=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /plugins/customer_chat/SDK/?app_id=&attribution=fbe_woocommerce&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df3994346f331cea%26domain%3Dmediziyashop.com%26is_canvas%3Dfalse%26origin%3Dhttps%253A%252F%252Fmediziyashop.com%252Ff1f98f9d184b05%26relation%3Dparent.parent¤t_url=https%3A%2F%2Fmediziyashop.com%2F&event_name=chat_plugin_sdk_facade_create&is_loaded_by_facade=true&loading_time=0&locale=en_US&log_id=65813a4c-38d1-4fe7-83ee-d62c1ab113b6&page_id=107813234708267&request_time=1668119911584&sdk=joey&should_use_new_domain=false&suppress_http_code=1 HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Origin: https://mediziyashop.com
Connection: keep-alive
Referer: https://mediziyashop.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}
content-security-policy-report-only: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com;worker-src blob: *.facebook.com data:;report-uri https://www.facebook.com/csp/reporting/?minimize=0;
content-security-policy: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
access-control-allow-origin: https://mediziyashop.com
strict-transport-security: max-age=15552000; preload
content-type: text/html; charset="utf-8"
x-fb-debug: H5yD0AEDFpGcC3P0X2fAjJ+w2HXzj9/90L4qbK2iFJNkhZzNKl7WaER7RrbnNqC/YPPLfd3JwGCvu7dtOM8c/w==
content-length: 0
date: Thu, 10 Nov 2022 22:38:36 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.facebook.com/plugins/customer_chat/SDK/?app_id=&attribution=fbe_woocommerce&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df3994346f331cea%26domain%3Dmediziyashop.com%26is_canvas%3Dfalse%26origin%3Dhttps%253A%252F%252Fmediziyashop.com%252Ff1f98f9d184b05%26relation%3Dparent.parent¤t_url=https%3A%2F%2Fmediziyashop.com%2F&event_name=chat_plugin_sdk_facade_load&is_loaded_by_facade=true&loading_time=509&locale=en_US&log_id=65813a4c-38d1-4fe7-83ee-d62c1ab113b6&page_id=107813234708267&request_time=1668119912093&sdk=joey&should_use_new_domain=false&suppress_http_code=1
200 OK 0 B URL HTTP/2 www.facebook.com/plugins/customer_chat/SDK/?app_id=&attribution=fbe_woocommerce&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df3994346f331cea%26domain%3Dmediziyashop.com%26is_canvas%3Dfalse%26origin%3Dhttps%253A%252F%252Fmediziyashop.com%252Ff1f98f9d184b05%26relation%3Dparent.parent¤t_url=https%3A%2F%2Fmediziyashop.com%2F&event_name=chat_plugin_sdk_facade_load&is_loaded_by_facade=true&loading_time=509&locale=en_US&log_id=65813a4c-38d1-4fe7-83ee-d62c1ab113b6&page_id=107813234708267&request_time=1668119912093&sdk=joey&should_use_new_domain=false&suppress_http_code=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /plugins/customer_chat/SDK/?app_id=&attribution=fbe_woocommerce&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df3994346f331cea%26domain%3Dmediziyashop.com%26is_canvas%3Dfalse%26origin%3Dhttps%253A%252F%252Fmediziyashop.com%252Ff1f98f9d184b05%26relation%3Dparent.parent¤t_url=https%3A%2F%2Fmediziyashop.com%2F&event_name=chat_plugin_sdk_facade_load&is_loaded_by_facade=true&loading_time=509&locale=en_US&log_id=65813a4c-38d1-4fe7-83ee-d62c1ab113b6&page_id=107813234708267&request_time=1668119912093&sdk=joey&should_use_new_domain=false&suppress_http_code=1 HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Origin: https://mediziyashop.com
Connection: keep-alive
Referer: https://mediziyashop.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}
content-security-policy-report-only: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com;worker-src blob: *.facebook.com data:;report-uri https://www.facebook.com/csp/reporting/?minimize=0;
content-security-policy: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
access-control-allow-origin: https://mediziyashop.com
strict-transport-security: max-age=15552000; preload
content-type: text/html; charset="utf-8"
x-fb-debug: vIUQL9S2Cbrh64rVTKO3GxWCFUGS2QLM8gnEZCjAI0/9TPWnfUqRnfqrG20EvIrPfcxsPG5YfxnVJh/Dd2NWfA==
content-length: 0
date: Thu, 10 Nov 2022 22:38:36 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
mediziyashop.com/?wc-ajax=get_refreshed_fragments
200 OK 161 B URL HTTP/2 mediziyashop.com/?wc-ajax=get_refreshed_fragments
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type JSON data\012- , ASCII text, with no line terminators
Hash 650d329ca7144ad1b254f70cec48c223
05e4429056d334328c79307d47cb4f2437037c25
2343b049d208442d3efabc649b5f659a589a5bbb8d5e92f1fffb474775331fea
POST /?wc-ajax=get_refreshed_fragments HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 18
Origin: https://mediziyashop.com
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
pragma: no-cache
access-control-allow-origin: https://mediziyashop.com
access-control-allow-credentials: true
x-content-type-options: nosniff
x-robots-tag: noindex
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
set-cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; expires=Thu, 10-Nov-2022 23:08:32 GMT; Max-Age=1796; path=/
vary: Accept-Encoding
content-encoding: gzip
content-length: 161
content-type: application/json; charset=UTF-8
date: Thu, 10 Nov 2022 22:38:35 GMT
server: Apache
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F745eb456-0cb4-44fb-a459-494a1819a447.jpeg
200 OK 5.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F745eb456-0cb4-44fb-a459-494a1819a447.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1aecf0f216c5acf7f14207dbf4b2b6c1
de7d87dc680ff0573389845e70eb38e8de3b2b70
1ade26d36f418c127aabec29371d4254d9a783621faf7627a9e20a3aef3cb51a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F745eb456-0cb4-44fb-a459-494a1819a447.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 5639
x-amzn-requestid: 56f14231-34a6-43b7-9c8f-e1848ea2d0b4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bG4eqEw5IAMFkmQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6365d45d-616da1d675e42b6f4611535a;Sampled=0
x-amzn-remapped-date: Sat, 05 Nov 2022 03:11:25 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 1YVlwDQPS44PlXlJZLXVgb4XPHhpTMNV4P-QwmWlw9hbd9cB8o7gNw==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 b13f158bdf9805ca47e07c0c35870c12.cloudfront.net (CloudFront), 1.1 google
date: Thu, 10 Nov 2022 21:45:49 GMT
age: 3169
etag: "de7d87dc680ff0573389845e70eb38e8de3b2b70"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/uploads/pe-terraclassic/css/theme.css
200 OK 0 B URL HTTP/2 mediziyashop.com/wp-content/uploads/pe-terraclassic/css/theme.css
IP
ASN #46606 UNIFIEDLAYER-AS-1
GET /wp-content/uploads/pe-terraclassic/css/theme.css HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 15 Jan 2022 03:51:22 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/css
date: Thu, 10 Nov 2022 22:38:32 GMT
server: Apache
X-Firefox-Spdy: h2
www.facebook.com/plugins/customer_chat/facade/?app_id=&attribution=fbe_woocommerce&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df3994346f331cea%26domain%3Dmediziyashop.com%26is_canvas%3Dfalse%26origin%3Dhttps%253A%252F%252Fmediziyashop.com%252Ff1f98f9d184b05%26relation%3Dparent.parent¤t_url=https%3A%2F%2Fmediziyashop.com%2F&is_loaded_by_facade=true&locale=en_US&log_id=65813a4c-38d1-4fe7-83ee-d62c1ab113b6&page_id=107813234708267&request_time=1668119911584&sdk=joey&should_use_new_domain=false&suppress_http_code=1
200 OK 0 B URL HTTP/2 www.facebook.com/plugins/customer_chat/facade/?app_id=&attribution=fbe_woocommerce&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df3994346f331cea%26domain%3Dmediziyashop.com%26is_canvas%3Dfalse%26origin%3Dhttps%253A%252F%252Fmediziyashop.com%252Ff1f98f9d184b05%26relation%3Dparent.parent¤t_url=https%3A%2F%2Fmediziyashop.com%2F&is_loaded_by_facade=true&locale=en_US&log_id=65813a4c-38d1-4fe7-83ee-d62c1ab113b6&page_id=107813234708267&request_time=1668119911584&sdk=joey&should_use_new_domain=false&suppress_http_code=1
IP
GET /plugins/customer_chat/facade/?app_id=&attribution=fbe_woocommerce&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df3994346f331cea%26domain%3Dmediziyashop.com%26is_canvas%3Dfalse%26origin%3Dhttps%253A%252F%252Fmediziyashop.com%252Ff1f98f9d184b05%26relation%3Dparent.parent¤t_url=https%3A%2F%2Fmediziyashop.com%2F&is_loaded_by_facade=true&locale=en_US&log_id=65813a4c-38d1-4fe7-83ee-d62c1ab113b6&page_id=107813234708267&request_time=1668119911584&sdk=joey&should_use_new_domain=false&suppress_http_code=1 HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Origin: https://mediziyashop.com
Connection: keep-alive
Referer: https://mediziyashop.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: br
content-type: application/json; charset=utf-8
report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}
content-security-policy-report-only: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com;worker-src blob: *.facebook.com data:;report-uri https://www.facebook.com/csp/reporting/?minimize=0;
content-security-policy: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
access-control-allow-origin: https://mediziyashop.com
strict-transport-security: max-age=15552000; preload
x-fb-debug: X9W8Ts6WkJclLmcXCqsxAVjh37tFOuF3OqtmHZVPFGYff2TnHb9uG1hHhYefnvsJUDZeqXCXUka+DeSvMVSIaA==
date: Thu, 10 Nov 2022 22:38:36 GMT
priority: u=3,i
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/plugins/wp-user-avatar/assets/flatpickr/flatpickr.min.js?ver=5.8.6
200 OK 0 B URL HTTP/2 mediziyashop.com/wp-content/plugins/wp-user-avatar/assets/flatpickr/flatpickr.min.js?ver=5.8.6
IP
ASN #46606 UNIFIEDLAYER-AS-1
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/wp-user-avatar/assets/flatpickr/flatpickr.min.js?ver=5.8.6 HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 10 Jan 2022 09:16:33 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: application/javascript
date: Thu, 10 Nov 2022 22:38:32 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/plugins/wp-user-avatar/assets/select2/select2.min.js?ver=5.8.6
200 OK 0 B URL HTTP/2 mediziyashop.com/wp-content/plugins/wp-user-avatar/assets/select2/select2.min.js?ver=5.8.6
IP
ASN #46606 UNIFIEDLAYER-AS-1
GET /wp-content/plugins/wp-user-avatar/assets/select2/select2.min.js?ver=5.8.6 HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 10 Jan 2022 09:16:33 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: application/javascript
date: Thu, 10 Nov 2022 22:38:32 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/plugins/terraclassifieds/assets/css/terraclassifieds-frontend.css?ver=1
200 OK 0 B URL HTTP/2 mediziyashop.com/wp-content/plugins/terraclassifieds/assets/css/terraclassifieds-frontend.css?ver=1
IP
ASN #46606 UNIFIEDLAYER-AS-1
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/terraclassifieds/assets/css/terraclassifieds-frontend.css?ver=1 HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 18 Nov 2021 14:45:38 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/css
date: Thu, 10 Nov 2022 22:38:32 GMT
server: Apache
X-Firefox-Spdy: h2
socialplugin.facebook.net/new_domain_gating/?endpoint=customerchat&page_id=107813234708267&suppress_http_code=1
200 OK 0 B URL HTTP/2 socialplugin.facebook.net/new_domain_gating/?endpoint=customerchat&page_id=107813234708267&suppress_http_code=1
IP
GET /new_domain_gating/?endpoint=customerchat&page_id=107813234708267&suppress_http_code=1 HTTP/1.1
Host: socialplugin.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Origin: https://mediziyashop.com
Connection: keep-alive
Referer: https://mediziyashop.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: br
content-type: application/json; charset=utf-8
content-security-policy: default-src * data: blob: 'self';script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';block-all-mixed-content;upgrade-insecure-requests;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
access-control-allow-origin: https://mediziyashop.com
x-fb-debug: YuWipYZM7d76kXO6FjFhbTh7RQLbM0TUCYQKXQML3YpmJpEXpggQz0J0JIsiUzKzJ8gHKgz6R5C/m/99MDgEeA==
date: Thu, 10 Nov 2022 22:38:35 GMT
priority: u=3,i
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/plugins/terraclassifieds/assets/js/select2.min.js?ver=1
200 OK 0 B URL HTTP/2 mediziyashop.com/wp-content/plugins/terraclassifieds/assets/js/select2.min.js?ver=1
IP
ASN #46606 UNIFIEDLAYER-AS-1
GET /wp-content/plugins/terraclassifieds/assets/js/select2.min.js?ver=1 HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 18 Nov 2021 14:45:38 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: application/javascript
date: Thu, 10 Nov 2022 22:38:32 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-content/plugins/terraclassifieds/assets/js/sweetalert2.all.min.js?ver=1
200 OK 0 B URL HTTP/2 mediziyashop.com/wp-content/plugins/terraclassifieds/assets/js/sweetalert2.all.min.js?ver=1
IP
ASN #46606 UNIFIEDLAYER-AS-1
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/terraclassifieds/assets/js/sweetalert2.all.min.js?ver=1 HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 18 Nov 2021 14:45:38 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: application/javascript
date: Thu, 10 Nov 2022 22:38:32 GMT
server: Apache
X-Firefox-Spdy: h2
mediziyashop.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
200 OK 0 B URL HTTP/2 mediziyashop.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
IP
ASN #46606 UNIFIEDLAYER-AS-1
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1
Host: mediziyashop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Cookie: ppwp_wp_session=4fca808b9f66b261e9aa2558fc05fbee%7C%7C1668121712%7C%7C1668121352; PHPSESSID=03f89367e1b474d5e2581cd36ccf0660; gdpr[consent_types]=%5B%5D; gdpr[allowed_cookies]=%5B%22%22%5D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 17 Nov 2021 15:41:28 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: application/javascript
date: Thu, 10 Nov 2022 22:38:32 GMT
server: Apache
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Lato:700,400%7CPlayfair%20Display:700%7CMontserrat:400&display=swap&ver=1642224377
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Lato:700,400%7CPlayfair%20Display:700%7CMontserrat:400&display=swap&ver=1642224377
IP
GET /css?family=Lato:700,400%7CPlayfair%20Display:700%7CMontserrat:400&display=swap&ver=1642224377 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mediziyashop.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 10 Nov 2022 22:38:32 GMT
date: Thu, 10 Nov 2022 22:38:32 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
162.241.85.251
31.13.72.36
23.36.77.32
93.184.220.29
0.0.0.0