r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dfd491ebe7381221b3674c2c8bf9e566
d2ac5badf17f348c28a52e9db10e6eb80e5a231a
34a026664386054b0b73c36cd1ddfce023551ee41963df0e38248bac1e1eb56c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "34A026664386054B0B73C36CD1DDFCE023551EE41963DF0E38248BAC1E1EB56C"
Last-Modified: Fri, 24 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15397
Expires: Sun, 26 Mar 2023 03:12:01 GMT
Date: Sat, 25 Mar 2023 22:55:24 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5d9435c884bf4a0777fdf4b57079ae09
7f04b9db47ffeec90ac6397416b7553e5336a550
fe77420ec3a11f547cf5172b68d30faa4fe0c13165ae305f0013b02914e61084
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FE77420EC3A11F547CF5172B68D30FAA4FE0C13165AE305F0013B02914E61084"
Last-Modified: Sat, 25 Mar 2023 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13358
Expires: Sun, 26 Mar 2023 02:38:02 GMT
Date: Sat, 25 Mar 2023 22:55:24 GMT
Connection: keep-alive
www.ropasrebaja.shop/
301 Moved Permanently 185 B IP
ASN #59447 Istanbuldc Veri Merkezi Ltd Sti
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4c555068310076e85908835c721911f5
9ec990aabb4391e139034f68e5e657e0f1d0b74d
568b4de0ad30e85670e724dc30ccb675924353b77807356c5ad7f29c8c38f510
Analyzer Verdict Alert quad9 Sinkholed
GET / HTTP/1.1
Host: www.ropasrebaja.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx/1.14.2
Date: Sat, 25 Mar 2023 22:55:24 GMT
Content-Type: text/html
Content-Length: 185
Connection: keep-alive
Location: https://www.ropasrebaja.shop/
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 84db75194692d4afe13196bda6f22da8
4c1f49bc973a4917f146d93c8d598344edc021f6
a3bec66f95b3bdf1d310c726e8ed05f7b06c1901c62381a94582d581844d2c23
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Type, Alert, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 25 Mar 2023 22:27:45 GMT
content-type: application/json
age: 1659
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1313ee2f06606d09c45b06ff9e8e1001
285ca89d1d3ea45d35832bc6d9827f834b3bfe21
63463447d29550c3734f621be02ec85290fbdf4612f79f9fad7e94f7e066dcb0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "63463447D29550C3734F621BE02EC85290FBDF4612F79F9FAD7E94F7E066DCB0"
Last-Modified: Fri, 24 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2850
Expires: Sat, 25 Mar 2023 23:42:54 GMT
Date: Sat, 25 Mar 2023 22:55:24 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
IP
File type PEM certificate\012- , ASCII text
Hash e7bace7c1e04d44012e37ddffe36e5d5
3ac8d7c0a9d3e3f0b28b2530c7b8d8407b4042c2
6b4f80f2e95b26f6122ea8dcd0ef8d762299be822c69e839fc37581ca2bcb5f2
GET /chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: RhR5yG/0AwaHaVElzKiw0Vx/OtU6sQe5rxgjsakDHDy7SOEhfhXPN/aLP0hqSGSFYC/WRvrpOuk=
x-amz-request-id: H140BNQCD8R4EK5S
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 25 Mar 2023 22:55:05 GMT
age: 19
last-modified: Sat, 11 Mar 2023 16:53:15 GMT
etag: "e7bace7c1e04d44012e37ddffe36e5d5"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 25 Mar 2023 22:55:24 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, ETag, Content-Type, Cache-Control, Pragma, Alert, Last-Modified, Retry-After, Backoff, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 25 Mar 2023 22:17:24 GMT
age: 2281
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ce050f5231e61965d3cbba406c256a1f
b89af39040ac2f578ffc0b8233f9cb6de15aac3c
9b4fd765f34d3895d0b9198ae5c317b059444a48e72dea991d4368fc117d7c49
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9B4FD765F34D3895D0B9198AE5C317B059444A48E72DEA991D4368FC117D7C49"
Last-Modified: Sat, 25 Mar 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Sun, 26 Mar 2023 04:55:25 GMT
Date: Sat, 25 Mar 2023 22:55:25 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 717ebcc65cb1390c2509851bac7b5878
1e04e3058329f3809bc01022d441172dcacc1aaa
3c8d41efe14dc75e001ce50aae65e133d90bcb2e2f86b2426cefe7abe4c7b588
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3C8D41EFE14DC75E001CE50AAE65E133D90BCB2E2F86B2426CEFE7ABE4C7B588"
Last-Modified: Fri, 24 Mar 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6786
Expires: Sun, 26 Mar 2023 00:48:31 GMT
Date: Sat, 25 Mar 2023 22:55:25 GMT
Connection: keep-alive
www.ropasrebaja.shop/
200 OK 7.2 kB IP
ASN #59447 Istanbuldc Veri Merkezi Ltd Sti
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash bc20800bf1473e7963eb8f12fcd99aec
d6cf601eb111850bb3b361832975f103e273fb91
dbe4cbe9123ae6132b2afa0e7c56a25438a1b374c70dc5e687b5cfa5ff0d96ad
Analyzer Verdict Alert quad9 Sinkholed
GET / HTTP/1.1
Host: www.ropasrebaja.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Sat, 25 Mar 2023 22:55:25 GMT
Content-Type: text/html
Last-Modified: Wed, 15 Mar 2023 13:31:06 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"6411c89a-9f11"
Expires: Sun, 26 Mar 2023 22:55:25 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
www.ropasrebaja.shop/resources/img/user/user-female.png
200 OK 9.9 kB URL HTTP/1.1 www.ropasrebaja.shop/resources/img/user/user-female.png
IP
ASN #59447 Istanbuldc Veri Merkezi Ltd Sti
File type PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced\012- data
Hash 2562d31b12e93395f71726f22befb028
0388d81e642a68da953934da9e95bb56e5410c60
ce00bee45c8123179811e38193619f8a4f7fb8ca7adaf3edcf7981c113b7cd87
Analyzer Verdict Alert quad9 Sinkholed
GET /resources/img/user/user-female.png HTTP/1.1
Host: www.ropasrebaja.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ropasrebaja.shop/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Sat, 25 Mar 2023 22:55:25 GMT
Content-Type: image/png
Content-Length: 9894
Last-Modified: Wed, 28 Dec 2022 20:50:46 GMT
Connection: keep-alive
ETag: "63acac26-26a6"
Accept-Ranges: bytes
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: /7IE7gC5GcgPTLIlrZvffw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: rK9XGGXRphMdlMQr3yuvP+WnEas=
www.ropasrebaja.shop/resources/css/all-build.css?v=039051303202
200 OK 37 kB URL HTTP/1.1 www.ropasrebaja.shop/resources/css/all-build.css?v=039051303202
IP
ASN #59447 Istanbuldc Veri Merkezi Ltd Sti
File type ASCII text, with very long lines (65536), with no line terminators
Hash 7fcaa3dbd4a7a6f4ca0ec878c342bb1f
faed9e25bb1f693fa4f928d95effc67cf18ba54d
7ae191ef2636786285f8b2e415c11664110f2924db953439e41b8533ef82d523
Analyzer Verdict Alert quad9 Sinkholed
GET /resources/css/all-build.css?v=039051303202 HTTP/1.1
Host: www.ropasrebaja.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ropasrebaja.shop/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Sat, 25 Mar 2023 22:55:25 GMT
Content-Type: text/css
Last-Modified: Wed, 28 Dec 2022 20:50:46 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63acac26-2dcab"
Content-Encoding: gzip
www.ropasrebaja.shop/resources/css/home.css?v=039051303202
200 OK 1.4 kB URL HTTP/1.1 www.ropasrebaja.shop/resources/css/home.css?v=039051303202
IP
ASN #59447 Istanbuldc Veri Merkezi Ltd Sti
File type ASCII text, with very long lines (5481), with no line terminators
Hash 0f81c6b39a159871bd78c89c2a1f08d4
17a7759bf055507ce9da1a2deec148edb76c7f33
2f93a2f0361774bf78878f491474e809f220bea26ee840c114db5428b69ade2d
Analyzer Verdict Alert quad9 Sinkholed
GET /resources/css/home.css?v=039051303202 HTTP/1.1
Host: www.ropasrebaja.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ropasrebaja.shop/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Sat, 25 Mar 2023 22:55:25 GMT
Content-Type: text/css
Last-Modified: Wed, 28 Dec 2022 20:50:46 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63acac26-1569"
Content-Encoding: gzip
www.ropasrebaja.shop/resources/css/viewer.css?v=039051303202
200 OK 1.8 kB URL HTTP/1.1 www.ropasrebaja.shop/resources/css/viewer.css?v=039051303202
IP
ASN #59447 Istanbuldc Veri Merkezi Ltd Sti
File type ASCII text, with very long lines (6342), with no line terminators
Hash 4547c3eb57cb3f270e597a8df0af1dc5
a9e679dd9146807aa2d0d92ad5faab61b7ccfcd9
0ebc376e1e733c973555b15811921dab9f361f89ffa864f4c4bcb2eca533c9ba
Analyzer Verdict Alert quad9 Sinkholed
GET /resources/css/viewer.css?v=039051303202 HTTP/1.1
Host: www.ropasrebaja.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ropasrebaja.shop/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Sat, 25 Mar 2023 22:55:25 GMT
Content-Type: text/css
Last-Modified: Wed, 28 Dec 2022 20:50:46 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63acac26-18c6"
Content-Encoding: gzip
www.ropasrebaja.shop/resources/img/RapidSSL_SEAL.gif
200 OK 7.6 kB URL HTTP/1.1 www.ropasrebaja.shop/resources/img/RapidSSL_SEAL.gif
IP
ASN #59447 Istanbuldc Veri Merkezi Ltd Sti
File type GIF image data, version 89a, 90 x 50\012- data
Hash 1931d61a7a5c4a5f41e2202367e56c71
1cdff3ebaa351822a827d7a2062f9ad44596ab01
234bafeda944f540c5b76f81c2d11077e445bc4655888dafb1594b380683ddb1
Analyzer Verdict Alert quad9 Sinkholed
GET /resources/img/RapidSSL_SEAL.gif HTTP/1.1
Host: www.ropasrebaja.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ropasrebaja.shop/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Sat, 25 Mar 2023 22:55:26 GMT
Content-Type: image/gif
Content-Length: 7599
Last-Modified: Wed, 28 Dec 2022 20:50:46 GMT
Connection: keep-alive
ETag: "63acac26-1daf"
Accept-Ranges: bytes
www.ropasrebaja.shop/resources/js/libs/require.min.js?v=039051303202
200 OK 7.2 kB URL HTTP/1.1 www.ropasrebaja.shop/resources/js/libs/require.min.js?v=039051303202
IP
ASN #59447 Istanbuldc Veri Merkezi Ltd Sti
File type ASCII text, with very long lines (17955), with no line terminators
Hash ef679f0d27f8567b6d6c497c740ffd12
b4386835758ea6221f79a1a767c31655dcab3c30
1efe67b2a4e2266fbd49ce59c211372f1dee07f4cec5165f13fb49a5af7bd512
Analyzer Verdict Alert quad9 Sinkholed
GET /resources/js/libs/require.min.js?v=039051303202 HTTP/1.1
Host: www.ropasrebaja.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ropasrebaja.shop/
Cookie: isFirst=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Sat, 25 Mar 2023 22:55:26 GMT
Content-Type: application/javascript
Last-Modified: Wed, 28 Dec 2022 20:50:46 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63acac26-4623"
Content-Encoding: gzip
www.ropasrebaja.shop/resources/fonts/iconfont.woff2?t=1656495576965
200 OK 11 kB URL HTTP/1.1 www.ropasrebaja.shop/resources/fonts/iconfont.woff2?t=1656495576965
IP
ASN #59447 Istanbuldc Veri Merkezi Ltd Sti
File type Web Open Font Format (Version 2), TrueType, length 11344, version 1.0\012- data
Hash 1b5502545b3d2dd17aa654aa312c12b5
1ab3a0d83e0347dd56e931f55577872ec655de78
af22024e9f8afc5a47135a448d4f7da960668176a006b34344cf005fb6dccc14
Analyzer Verdict Alert quad9 Sinkholed
GET /resources/fonts/iconfont.woff2?t=1656495576965 HTTP/1.1
Host: www.ropasrebaja.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.ropasrebaja.shop/resources/css/all-build.css?v=039051303202
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Sat, 25 Mar 2023 22:55:26 GMT
Content-Type: application/octet-stream
Content-Length: 11344
Last-Modified: Wed, 28 Dec 2022 20:50:46 GMT
Connection: keep-alive
Vary: Accept-Encoding
ETag: "63acac26-2c50"
Accept-Ranges: bytes
www.ropasrebaja.shop/resources/js/apps/home.js?v=039051303202
200 OK 3.0 kB URL HTTP/1.1 www.ropasrebaja.shop/resources/js/apps/home.js?v=039051303202
IP
ASN #59447 Istanbuldc Veri Merkezi Ltd Sti
File type ASCII text, with very long lines (11612), with CRLF line terminators
Hash bf2ce222cb9ec8ff86282036a1a85bad
bf53ef9146c7eb2531b6c4019a68b09ad50f42c2
8ddee36168ced47d7621435db359b7796ef927fdb9166f6b18585ebbb30ec4fb
Analyzer Verdict Alert quad9 Sinkholed
GET /resources/js/apps/home.js?v=039051303202 HTTP/1.1
Host: www.ropasrebaja.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ropasrebaja.shop/
Cookie: isFirst=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Sat, 25 Mar 2023 22:55:26 GMT
Content-Type: application/javascript
Last-Modified: Wed, 28 Dec 2022 20:50:46 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63acac26-2d6b"
Content-Encoding: gzip
www.ropasrebaja.shop/resources/fonts/roboto.woff2
200 OK 16 kB URL HTTP/1.1 www.ropasrebaja.shop/resources/fonts/roboto.woff2
IP
ASN #59447 Istanbuldc Veri Merkezi Ltd Sti
File type Web Open Font Format (Version 2), TrueType, length 15736, version 1.0\012- data
Hash 3bd5b5c6cb35585a5b30d6ba366a9ae6
92589744fc0e2d5ad06d05b06fa8dcef2285c9c5
a894df3ad5a9a81397c9ef836bc68504e7861497764ec0c2462b9609b19c07ba
Analyzer Verdict Alert quad9 Sinkholed
GET /resources/fonts/roboto.woff2 HTTP/1.1
Host: www.ropasrebaja.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ropasrebaja.shop/resources/css/all-build.css?v=039051303202
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Sat, 25 Mar 2023 22:55:26 GMT
Content-Type: application/octet-stream
Last-Modified: Wed, 28 Dec 2022 20:50:46 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63acac26-3d78"
Content-Encoding: gzip
www.ropasrebaja.shop/resources/js/apps/config.js?v=039051303202
200 OK 116 kB URL HTTP/1.1 www.ropasrebaja.shop/resources/js/apps/config.js?v=039051303202
IP
ASN #59447 Istanbuldc Veri Merkezi Ltd Sti
File type ASCII text, with very long lines (31976), with CRLF, LF line terminators
Size 116 kB (116146 bytes)
Hash efbc0a421c42202755c7acb203a19c99
6dbfeb182290e062aa324e91e55141f282feeaa1
405f0c3acb90c6521e639012c5425bc7c1a813008d40c05c948a188d345d2cec
Analyzer Verdict Alert quad9 Sinkholed
GET /resources/js/apps/config.js?v=039051303202 HTTP/1.1
Host: www.ropasrebaja.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ropasrebaja.shop/
Cookie: isFirst=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Sat, 25 Mar 2023 22:55:26 GMT
Content-Type: application/javascript
Last-Modified: Wed, 15 Mar 2023 13:26:36 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"6411c78c-53107"
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b62c9b9530dd66bb7f03ba2ce3d835da
bf8560766de78dd925e395f59610ab2f1335e565
62a45c1bedd4241448ab43b535518e423b0500901328b3a0b984d758c9b0540d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "62A45C1BEDD4241448AB43B535518E423B0500901328B3A0B984D758C9B0540D"
Last-Modified: Fri, 24 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9322
Expires: Sun, 26 Mar 2023 01:30:48 GMT
Date: Sat, 25 Mar 2023 22:55:26 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b62c9b9530dd66bb7f03ba2ce3d835da
bf8560766de78dd925e395f59610ab2f1335e565
62a45c1bedd4241448ab43b535518e423b0500901328b3a0b984d758c9b0540d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "62A45C1BEDD4241448AB43B535518E423B0500901328B3A0B984D758C9B0540D"
Last-Modified: Fri, 24 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9322
Expires: Sun, 26 Mar 2023 01:30:48 GMT
Date: Sat, 25 Mar 2023 22:55:26 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b62c9b9530dd66bb7f03ba2ce3d835da
bf8560766de78dd925e395f59610ab2f1335e565
62a45c1bedd4241448ab43b535518e423b0500901328b3a0b984d758c9b0540d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "62A45C1BEDD4241448AB43B535518E423B0500901328B3A0B984D758C9B0540D"
Last-Modified: Fri, 24 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9322
Expires: Sun, 26 Mar 2023 01:30:48 GMT
Date: Sat, 25 Mar 2023 22:55:26 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b62c9b9530dd66bb7f03ba2ce3d835da
bf8560766de78dd925e395f59610ab2f1335e565
62a45c1bedd4241448ab43b535518e423b0500901328b3a0b984d758c9b0540d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "62A45C1BEDD4241448AB43B535518E423B0500901328B3A0B984D758C9B0540D"
Last-Modified: Fri, 24 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9322
Expires: Sun, 26 Mar 2023 01:30:48 GMT
Date: Sat, 25 Mar 2023 22:55:26 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b62c9b9530dd66bb7f03ba2ce3d835da
bf8560766de78dd925e395f59610ab2f1335e565
62a45c1bedd4241448ab43b535518e423b0500901328b3a0b984d758c9b0540d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "62A45C1BEDD4241448AB43B535518E423B0500901328B3A0B984D758C9B0540D"
Last-Modified: Fri, 24 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9322
Expires: Sun, 26 Mar 2023 01:30:48 GMT
Date: Sat, 25 Mar 2023 22:55:26 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fde451a1a-fcba-44c0-b885-cf9daa6d2ff8.jpeg
200 OK 9.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fde451a1a-fcba-44c0-b885-cf9daa6d2ff8.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d54efd2b1b21530d0da6f7a622ea898e
656849322a4885c98f1f06600f3c4680522d78d0
88d941b88e10152a49bd5e07bb6d7f31a1e3b2841562985d1869f5eea6aacf7b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fde451a1a-fcba-44c0-b885-cf9daa6d2ff8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9290
x-amzn-requestid: ea6a8cc6-98ee-4d42-9cb7-73087027dde2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CW1soGZRIAMF0-A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641f6983-32b521b073af557b282cb6b4;Sampled=0
x-amzn-remapped-date: Sat, 25 Mar 2023 21:37:07 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: amzRKsV1FYQWrlBPncqtBdU6rnpKISHPETSvZQSE6VPULbYEmGW_CQ==
via: 1.1 f3802d173009698413044360f84de06c.cloudfront.net (CloudFront), 1.1 2241406ac19fffc8f35d6ddef8e22f56.cloudfront.net (CloudFront), 1.1 google
date: Sat, 25 Mar 2023 21:51:27 GMT
age: 3839
etag: "656849322a4885c98f1f06600f3c4680522d78d0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F255e6a5a-97bb-4a35-8a48-4d120747a63c.jpeg
200 OK 4.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F255e6a5a-97bb-4a35-8a48-4d120747a63c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 85351059b67b0a42eda7e69a31b3b4b4
b798268806dc2f79f033e5872676019faf0e0cc1
86e163b7159b197d6358ab01333ac6da221de0ebe1c5da8d5cef2977d38625fe
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F255e6a5a-97bb-4a35-8a48-4d120747a63c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4000
x-amzn-requestid: 68dc01d7-3eed-48f6-8532-8efaa96cc1ec
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CJpraEqyoAMFgNQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641a2315-3852cc8961365a560d1fa02f;Sampled=0
x-amzn-remapped-date: Tue, 21 Mar 2023 21:35:17 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: Ncagzm12kJaHQtYhhjUUhcfXVfbwMdonoNYqpK-QXEmLfyyENgFnFA==
via: 1.1 288c777a01e22425da9494dad7a69734.cloudfront.net (CloudFront), 1.1 42ef990e439ae115ff739f04e3945234.cloudfront.net (CloudFront), 1.1 google
date: Sat, 25 Mar 2023 08:51:06 GMT
age: 50660
etag: "b798268806dc2f79f033e5872676019faf0e0cc1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffbfc8880-7788-4d8c-a59c-c048b787b772.jpeg
200 OK 7.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffbfc8880-7788-4d8c-a59c-c048b787b772.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9b21b2c60279839939b60afd83d047fa
544c243fe2d69156f50eec156a62de127128a028
091a59214cfc0af90b4cb820bb521577ae63e862ec10160b8f64c9a9e593630d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffbfc8880-7788-4d8c-a59c-c048b787b772.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7823
x-amzn-requestid: c528eae7-69b4-4669-8c15-2b306586b84b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CW1kWHx5IAMFlEA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641f694e-340c77491ea4440b340e3822;Sampled=0
x-amzn-remapped-date: Sat, 25 Mar 2023 21:36:14 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: L_VF003IBR5rwk7Dkcc5BLDFTR4sUCzXvgD3mcLML1bzNatBZjW-Cg==
via: 1.1 e39f48cc8f516dc1072afdb086c71f32.cloudfront.net (CloudFront), 1.1 d042f60a962591f741406f28a8170c5a.cloudfront.net (CloudFront), 1.1 google
date: Sat, 25 Mar 2023 21:49:34 GMT
age: 3952
etag: "544c243fe2d69156f50eec156a62de127128a028"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F381b1b42-2394-4e4e-bb0a-986511a19bd1.jpeg
200 OK 9.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F381b1b42-2394-4e4e-bb0a-986511a19bd1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8dc799aaa2f69ef1109501a605dbdcfd
58cefa986d580ee408fbca288e3e45ba86fb97ac
54fa967d6b96b456416c62140a4eb9b6cda29b80d5083b5d1321b1fb89b3455f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F381b1b42-2394-4e4e-bb0a-986511a19bd1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9124
x-amzn-requestid: 30a39bb7-d3cc-473a-a5f9-4921367832c5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CW1kUESiIAMFVEQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641f694e-6c9bb97512fc3c8a3ecedc43;Sampled=0
x-amzn-remapped-date: Sat, 25 Mar 2023 21:36:14 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: _4VxID1v_auG0Vuzp87FJoPbgJovhYYYa1fpzQZze51I6HwFKbja6w==
via: 1.1 6af36c6902a46beec743522a9bbb3ab0.cloudfront.net (CloudFront), 1.1 331202b5b8aab67acbf389883133f256.cloudfront.net (CloudFront), 1.1 google
date: Sat, 25 Mar 2023 21:50:36 GMT
age: 3890
etag: "58cefa986d580ee408fbca288e3e45ba86fb97ac"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5a195fab-643a-48cc-8f4e-51e27511b474.jpeg
200 OK 5.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5a195fab-643a-48cc-8f4e-51e27511b474.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c8a2437b3c9ab01cd0e2327d4be5c61a
33573e5a6b6c1912702040c6d880c362baf0c3db
2556646c122f89bfce8467d13bf05e68f735373c8c18a33f7258f37f602673cf
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5a195fab-643a-48cc-8f4e-51e27511b474.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5424
x-amzn-requestid: b03169ca-0cc0-49f5-b785-5e29d70048cf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CW1kWGCnIAMFf7w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641f694e-679415d416cf3b666ec128be;Sampled=0
x-amzn-remapped-date: Sat, 25 Mar 2023 21:36:14 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: HJYBgmjUNbjdPrncK3FAPRUykhg3R25vwcbN6jA4K23HPwRUVDCdpA==
via: 1.1 88a7ff956a5b49ec3a35abfc0027af12.cloudfront.net (CloudFront), 1.1 2241406ac19fffc8f35d6ddef8e22f56.cloudfront.net (CloudFront), 1.1 google
date: Sat, 25 Mar 2023 21:51:29 GMT
age: 3837
etag: "33573e5a6b6c1912702040c6d880c362baf0c3db"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F080fe5e4-bfa3-4b7e-bc7b-ea9d3348e6c4.webp
200 OK 7.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F080fe5e4-bfa3-4b7e-bc7b-ea9d3348e6c4.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e924839a6364def37d8e9d20af3f5999
42e3c97cb72a824d50de5b49e92731a7678c4e73
64725edfecba86737c10dbbc9c70faec28405bb36c565e899889fdaa73979694
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F080fe5e4-bfa3-4b7e-bc7b-ea9d3348e6c4.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6976
x-amzn-requestid: dd142563-f3de-4390-816b-192fc44c480d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CW1kWHjMIAMF9xA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641f694e-5dee56692bbe2f35034c9178;Sampled=0
x-amzn-remapped-date: Sat, 25 Mar 2023 21:36:14 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: ZVnX7AJMV_qcEeF6TG2tsNkiw3kUbCI6rskIb8IPuw-8VMg9raFUjA==
via: 1.1 a87682502db4b394cc6ba84510da9f98.cloudfront.net (CloudFront), 1.1 8ae6af4d17aae7471e5fe2792eb6abcc.cloudfront.net (CloudFront), 1.1 google
date: Sat, 25 Mar 2023 21:51:25 GMT
age: 3841
etag: "42e3c97cb72a824d50de5b49e92731a7678c4e73"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.ropasrebaja.shop/pic/logo.png
404 Not Found 169 B URL HTTP/1.1 www.ropasrebaja.shop/pic/logo.png
IP
ASN #59447 Istanbuldc Veri Merkezi Ltd Sti
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 7693e858b2ca7115ac7fd50df329ab4f
f6c47617b9a3e4dc957144fcb29f64a7a8c41da4
5b3fc771f43d8e67bd8957f7b3d9a49eae80b88e43c13cbf16623623e9028375
Analyzer Verdict Alert quad9 Sinkholed
GET /pic/logo.png HTTP/1.1
Host: www.ropasrebaja.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ropasrebaja.shop/
Cookie: isFirst=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Server: nginx/1.14.2
Date: Sat, 25 Mar 2023 22:55:26 GMT
Content-Type: text/html
Content-Length: 169
Connection: keep-alive
www.ropasrebaja.shop/pic/favicon.ico
200 OK 2.5 kB URL HTTP/1.1 www.ropasrebaja.shop/pic/favicon.ico
IP
ASN #59447 Istanbuldc Veri Merkezi Ltd Sti
File type PNG image data, 100 x 100, 8-bit/color RGB, non-interlaced\012- data
Hash bd0b8f786536fa0560db86c8aa60831f
e3281bbf8c3ac9d9f85c7bb6eef7a89da4266e60
ef6ac23f15a5f7e28b984c321e10aa05665ff249241e812dad18f60a23ac3093
Analyzer Verdict Alert quad9 Sinkholed
GET /pic/favicon.ico HTTP/1.1
Host: www.ropasrebaja.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ropasrebaja.shop/
Cookie: isFirst=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Sat, 25 Mar 2023 22:55:26 GMT
Content-Type: image/x-icon
Content-Length: 2514
Last-Modified: Wed, 12 Oct 2022 02:52:04 GMT
Connection: keep-alive
ETag: "63462bd4-9d2"
Accept-Ranges: bytes
www.ropasrebaja.shop/api/systemconf
200 1.6 kB URL HTTP/1.1 www.ropasrebaja.shop/api/systemconf
IP
ASN #59447 Istanbuldc Veri Merkezi Ltd Sti
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (5291), with no line terminators
Hash 0451318e8f3654497b320772c84d45fe
e52b2d11b895e8e1c81977e993f090c9acf87c28
ad39fd46088151bf1fb2e47929d68d3df2101694cdc4e6211cb985e40b6b46c4
Analyzer Verdict Alert quad9 Sinkholed
POST /api/systemconf HTTP/1.1
Host: www.ropasrebaja.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Origin: https://www.ropasrebaja.shop
Connection: keep-alive
Referer: https://www.ropasrebaja.shop/
Cookie: isFirst=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Content-Length: 0
HTTP/1.1 200
Server: nginx/1.14.2
Date: Sat, 25 Mar 2023 22:55:27 GMT
Content-Type: application/json;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Origin: https://www.ropasrebaja.shop
Access-Control-Allow-Credentials: true
Set-Cookie: JSESSIONID=07257612C443E55824E44C1FEFBC665F; Path=/api; HttpOnly
Content-Encoding: gzip
www.ropasrebaja.shop/api/get_loginstatus
200 50 B URL HTTP/1.1 www.ropasrebaja.shop/api/get_loginstatus
IP
ASN #59447 Istanbuldc Veri Merkezi Ltd Sti
File type JSON data\012- , ASCII text, with no line terminators
Hash c158b4225ec4ef8f487a5c73df9840a1
37e1e34185bfebef668c03124c45e7886d35f7c1
df74e920e8a1fcdf4adfa04d7cacbdc21b11eae7c05e7b87115620e466dedb5c
Analyzer Verdict Alert quad9 Sinkholed
POST /api/get_loginstatus HTTP/1.1
Host: www.ropasrebaja.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Origin: https://www.ropasrebaja.shop
Connection: keep-alive
Referer: https://www.ropasrebaja.shop/
Cookie: isFirst=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Content-Length: 0
HTTP/1.1 200
Server: nginx/1.14.2
Date: Sat, 25 Mar 2023 22:55:27 GMT
Content-Type: application/json;charset=UTF-8
Content-Length: 50
Connection: keep-alive
Access-Control-Allow-Origin: https://www.ropasrebaja.shop
Access-Control-Allow-Credentials: true
Set-Cookie: JSESSIONID=5D16AC328EA2831A640048634447039E; Path=/api; HttpOnly
www.ropasrebaja.shop/resources/img/country/GB.png
200 OK 626 B URL HTTP/1.1 www.ropasrebaja.shop/resources/img/country/GB.png
IP
ASN #59447 Istanbuldc Veri Merkezi Ltd Sti
File type PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Hash 2dfad7cd66eebff7f137552ff872b9cd
524670e8e3ac6ef43755dce2b8c0fecf254f1fb6
1dac000a657b5a42dcc804971959f26817af1a9e3df7265b6de00d6ad6cd7ba8
Analyzer Verdict Alert quad9 Sinkholed
GET /resources/img/country/GB.png HTTP/1.1
Host: www.ropasrebaja.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ropasrebaja.shop/
Cookie: isFirst=0; uvid=202303260655272404
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Sat, 25 Mar 2023 22:55:27 GMT
Content-Type: image/png
Content-Length: 626
Last-Modified: Wed, 28 Dec 2022 20:50:46 GMT
Connection: keep-alive
ETag: "63acac26-272"
Accept-Ranges: bytes
www.ropasrebaja.shop/resources/img/qr_code_en.png
200 OK 6.3 kB URL HTTP/1.1 www.ropasrebaja.shop/resources/img/qr_code_en.png
IP
ASN #59447 Istanbuldc Veri Merkezi Ltd Sti
File type PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced\012- data
Hash 25f39ea147048522e6f957195df3f7a1
002941e8f70d83e33a7b284efc7be334c51ded90
147feb58b2e6e28227657f9c01cc36986294cee0a2f7cc2916903a68c3b95312
Analyzer Verdict Alert quad9 Sinkholed
GET /resources/img/qr_code_en.png HTTP/1.1
Host: www.ropasrebaja.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ropasrebaja.shop/
Cookie: isFirst=0; uvid=202303260655272404; currentCurrencyCode=CRY101
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Sat, 25 Mar 2023 22:55:27 GMT
Content-Type: image/png
Content-Length: 6275
Last-Modified: Wed, 28 Dec 2022 20:50:46 GMT
Connection: keep-alive
ETag: "63acac26-1883"
Accept-Ranges: bytes
www.ropasrebaja.shop/api/home_page_product
200 464 B URL HTTP/1.1 www.ropasrebaja.shop/api/home_page_product
IP
ASN #59447 Istanbuldc Veri Merkezi Ltd Sti
File type JSON data\012- , ASCII text, with very long lines (1855), with no line terminators
Hash 0d9cb0a71494b5272f0ef7a4e4aa3ec2
791c9c383e8f5ec55bb611f2b92e7a0519049063
ec6f098c1b1bd3523c405adbbbc71e6a694f9132fcdeec2cd693f73a96c1c6ff
Analyzer Verdict Alert quad9 Sinkholed
POST /api/home_page_product HTTP/1.1
Host: www.ropasrebaja.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 17
Origin: https://www.ropasrebaja.shop
Connection: keep-alive
Referer: https://www.ropasrebaja.shop/
Cookie: JSESSIONID=5D16AC328EA2831A640048634447039E; isFirst=0; uvid=202303260655272404; currentCurrencyCode=CRY101
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200
Server: nginx/1.14.2
Date: Sat, 25 Mar 2023 22:55:27 GMT
Content-Type: application/json;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Origin: https://www.ropasrebaja.shop
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
www.ropasrebaja.shop/api/getcusttempl
200 31 B URL HTTP/1.1 www.ropasrebaja.shop/api/getcusttempl
IP
ASN #59447 Istanbuldc Veri Merkezi Ltd Sti
File type JSON data\012- , ASCII text, with no line terminators
Hash d478da9f5f5888d31aa9495120047f50
2635e296803f9d69660f222cc40381704e79c45f
dce4619422e285e5f9395cc16b554d433ad16fad9449f531dba5560718d006fb
Analyzer Verdict Alert quad9 Sinkholed
POST /api/getcusttempl HTTP/1.1
Host: www.ropasrebaja.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 7
Origin: https://www.ropasrebaja.shop
Connection: keep-alive
Referer: https://www.ropasrebaja.shop/
Cookie: JSESSIONID=5D16AC328EA2831A640048634447039E; isFirst=0; uvid=202303260655272404; currentCurrencyCode=CRY101
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200
Server: nginx/1.14.2
Date: Sat, 25 Mar 2023 22:55:27 GMT
Content-Type: application/json;charset=UTF-8
Content-Length: 31
Connection: keep-alive
Access-Control-Allow-Origin: https://www.ropasrebaja.shop
Access-Control-Allow-Credentials: true
www.ropasrebaja.shop/resources/fonts/oswald-v14-latin-regular.woff2
200 OK 16 kB URL HTTP/1.1 www.ropasrebaja.shop/resources/fonts/oswald-v14-latin-regular.woff2
IP
ASN #59447 Istanbuldc Veri Merkezi Ltd Sti
File type Web Open Font Format (Version 2), TrueType, length 15440, version 1.0\012- data
Hash ad60484f6eb0230a8a62c634ec04d5fb
92e777b53ad67ec6139f28aa5512c5ad14335382
1a02b7a23783a12da45ca34241fb82d3aa9867ad97e39c667fd2445d5252c5d2
Analyzer Verdict Alert quad9 Sinkholed
GET /resources/fonts/oswald-v14-latin-regular.woff2 HTTP/1.1
Host: www.ropasrebaja.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ropasrebaja.shop/resources/css/all-build.css?v=039051303202
Cookie: isFirst=0; uvid=202303260655272404
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Sat, 25 Mar 2023 22:55:27 GMT
Content-Type: application/octet-stream
Last-Modified: Wed, 28 Dec 2022 20:50:46 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63acac26-3c50"
Content-Encoding: gzip
www.ropasrebaja.shop/resources/locale/languages.json
200 OK 165 B URL HTTP/1.1 www.ropasrebaja.shop/resources/locale/languages.json
IP
ASN #59447 Istanbuldc Veri Merkezi Ltd Sti
File type JSON data\012- , ASCII text, with CRLF line terminators
Hash 48555af647018c807c12d124217f4d64
9e7ed95ff36758d069d4b47fae9f2cc1af97ea99
a4ff2eb016cc6d64172ab3e3446756f913bfce57e3b473f3845b8deb970c1bc2
Analyzer Verdict Alert quad9 Sinkholed
GET /resources/locale/languages.json HTTP/1.1
Host: www.ropasrebaja.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://www.ropasrebaja.shop/
Cookie: isFirst=0; uvid=202303260655272404; currentCurrencyCode=CRY101
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Sat, 25 Mar 2023 22:55:27 GMT
Content-Type: application/json
Content-Length: 165
Last-Modified: Wed, 28 Dec 2022 20:50:46 GMT
Connection: keep-alive
ETag: "63acac26-a5"
Accept-Ranges: bytes
www.ropasrebaja.shop/pic/20220329171845634400.jpg
200 OK 21 kB URL HTTP/1.1 www.ropasrebaja.shop/pic/20220329171845634400.jpg
IP
ASN #59447 Istanbuldc Veri Merkezi Ltd Sti
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 280x280, components 3\012- data
Hash 597e70257b4a19e649eb1c32681fb6b5
3aa12ca1cc8dc50d754ee193a3e31077ab221b0f
414cc623dbf87e0066be98d3a23b579a343cc358e2a8868c5d6f1221e421ec31
Analyzer Verdict Alert quad9 Sinkholed
GET /pic/20220329171845634400.jpg HTTP/1.1
Host: www.ropasrebaja.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ropasrebaja.shop/
Cookie: isFirst=0; uvid=202303260655272404; currentCurrencyCode=CRY101
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Sat, 25 Mar 2023 22:55:27 GMT
Content-Type: image/jpeg
Content-Length: 21076
Last-Modified: Mon, 26 Sep 2022 09:06:16 GMT
Connection: keep-alive
ETag: "63316b88-5254"
Accept-Ranges: bytes
www.ropasrebaja.shop/resources/locale/strings.properties
200 OK 9.6 kB URL HTTP/1.1 www.ropasrebaja.shop/resources/locale/strings.properties
IP
ASN #59447 Istanbuldc Veri Merkezi Ltd Sti
File type Unicode text, UTF-8 text, with very long lines (415), with CRLF line terminators
Hash ccf4201acfcd168c724c022f259bccca
835d6624976d849246678dc2478550dbff7b2f7c
1c9457a2fea1fbefc2a97991c8c59f3f63d3b2db6351925de499f8c13a47a238
Analyzer Verdict Alert quad9 Sinkholed
GET /resources/locale/strings.properties HTTP/1.1
Host: www.ropasrebaja.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/plain, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://www.ropasrebaja.shop/
Cookie: isFirst=0; uvid=202303260655272404; currentCurrencyCode=CRY101
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Sat, 25 Mar 2023 22:55:27 GMT
Content-Type: application/octet-stream
Last-Modified: Wed, 11 Jan 2023 14:39:42 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63beca2e-5a91"
Content-Encoding: gzip
www.ropasrebaja.shop/pic/20220329171845634138.jpg
200 OK 29 kB URL HTTP/1.1 www.ropasrebaja.shop/pic/20220329171845634138.jpg
IP
ASN #59447 Istanbuldc Veri Merkezi Ltd Sti
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 280x280, components 3\012- data
Hash 533d4ff808f76b5417378f080fb85320
6dec7b642729f452fc39a5d1e4ebdbc8b086abe5
5902db53bff311fcef256dca3571c95ae354017d0b5b97173bacd181ba9d505c
Analyzer Verdict Alert quad9 Sinkholed
GET /pic/20220329171845634138.jpg HTTP/1.1
Host: www.ropasrebaja.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ropasrebaja.shop/
Cookie: isFirst=0; uvid=202303260655272404; currentCurrencyCode=CRY101
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Sat, 25 Mar 2023 22:55:27 GMT
Content-Type: image/jpeg
Content-Length: 29090
Last-Modified: Mon, 26 Sep 2022 09:06:16 GMT
Connection: keep-alive
ETag: "63316b88-71a2"
Accept-Ranges: bytes
www.ropasrebaja.shop/pic/20220329171845634129.jpg
200 OK 19 kB URL HTTP/1.1 www.ropasrebaja.shop/pic/20220329171845634129.jpg
IP
ASN #59447 Istanbuldc Veri Merkezi Ltd Sti
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 280x280, components 3\012- data
Hash 21b697e98f3bb2fdaa39c07c63af5346
0a320372197d3cadad40fea92d55bcb474a046eb
b30be6451f3dfdfcfde4e46c58e409e89da0aaf4c9823930648a52bc7c85b9ee
Analyzer Verdict Alert quad9 Sinkholed
GET /pic/20220329171845634129.jpg HTTP/1.1
Host: www.ropasrebaja.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ropasrebaja.shop/
Cookie: isFirst=0; uvid=202303260655272404; currentCurrencyCode=CRY101
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Sat, 25 Mar 2023 22:55:27 GMT
Content-Type: image/jpeg
Content-Length: 18885
Last-Modified: Mon, 26 Sep 2022 09:06:16 GMT
Connection: keep-alive
ETag: "63316b88-49c5"
Accept-Ranges: bytes
www.ropasrebaja.shop/pic/20220329171845634143.jpg
200 OK 28 kB URL HTTP/1.1 www.ropasrebaja.shop/pic/20220329171845634143.jpg
IP
ASN #59447 Istanbuldc Veri Merkezi Ltd Sti
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 280x280, components 3\012- data
Hash 56329c6202bebd4f01e61115f1733d47
2c411d2c3e2070ada4e722a550573097c75678af
4222d0ee0edbe47262f9ffdc82434f8e55b87abb5858f70b9fe156fd3096820d
Analyzer Verdict Alert quad9 Sinkholed
GET /pic/20220329171845634143.jpg HTTP/1.1
Host: www.ropasrebaja.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ropasrebaja.shop/
Cookie: isFirst=0; uvid=202303260655272404; currentCurrencyCode=CRY101
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Sat, 25 Mar 2023 22:55:27 GMT
Content-Type: image/jpeg
Content-Length: 28179
Last-Modified: Mon, 26 Sep 2022 09:06:16 GMT
Connection: keep-alive
ETag: "63316b88-6e13"
Accept-Ranges: bytes
www.ropasrebaja.shop/resources/locale/strings_en.properties
200 OK 9.6 kB URL HTTP/1.1 www.ropasrebaja.shop/resources/locale/strings_en.properties
IP
ASN #59447 Istanbuldc Veri Merkezi Ltd Sti
File type Unicode text, UTF-8 text, with very long lines (415), with CRLF line terminators
Hash ccf4201acfcd168c724c022f259bccca
835d6624976d849246678dc2478550dbff7b2f7c
1c9457a2fea1fbefc2a97991c8c59f3f63d3b2db6351925de499f8c13a47a238
Analyzer Verdict Alert quad9 Sinkholed
GET /resources/locale/strings_en.properties HTTP/1.1
Host: www.ropasrebaja.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/plain, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://www.ropasrebaja.shop/
Cookie: isFirst=0; uvid=202303260655272404; currentCurrencyCode=CRY101
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Sat, 25 Mar 2023 22:55:27 GMT
Content-Type: application/octet-stream
Last-Modified: Wed, 11 Jan 2023 14:39:42 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63beca2e-5a91"
Content-Encoding: gzip
www.ropasrebaja.shop/api/statistic
200 31 B URL HTTP/1.1 www.ropasrebaja.shop/api/statistic
IP
ASN #59447 Istanbuldc Veri Merkezi Ltd Sti
File type JSON data\012- , ASCII text, with no line terminators
Hash ef76d8074632ae79a222f8dd86bc496b
5f99d66914908bae291987f77dfa859797eeffc9
bd2296204802fad53ac68a0d28e3d7064f3c30b824f1d2dabce8a90151564d87
Analyzer Verdict Alert quad9 Sinkholed
POST /api/statistic HTTP/1.1
Host: www.ropasrebaja.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 111
Origin: https://www.ropasrebaja.shop
Connection: keep-alive
Referer: https://www.ropasrebaja.shop/
Cookie: JSESSIONID=5D16AC328EA2831A640048634447039E; isFirst=0; uvid=202303260655272404; currentCurrencyCode=CRY101
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200
Server: nginx/1.14.2
Date: Sat, 25 Mar 2023 22:55:28 GMT
Content-Type: application/json;charset=UTF-8
Content-Length: 31
Connection: keep-alive
Access-Control-Allow-Origin: https://www.ropasrebaja.shop
Access-Control-Allow-Credentials: true
ocsp.digicert.com/
200 OK 471 B IP
Hash 5e238f2cddfe84e0a121d3487a472966
a34fd427f8cbcb80527fbcdfbe61a6bcb3ad32bc
11dda96d87d41c7ab95ceb83886b4cd53664b6d4bc0125c352a95340584370c1
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5799
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 22:55:28 GMT
Last-Modified: Sat, 25 Mar 2023 21:18:49 GMT
Server: ECAcc (ska/F775)
X-Cache: HIT
Content-Length: 471
connect.facebook.net/en_US/fbevents.js
200 OK 28 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64347)
Hash 7fc8bce5d342b4898e6c82cc61313763
4aa4da15b55d59fc1a3a640a443cbde675d5e407
e456006ad9bc83651e868be3c53fa3fe93247a23b4fedf3b8c836fdf2c0c7de2
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ropasrebaja.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
report-to: {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/?minimize=0"}],"group":"coep_report"}
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: So5e1qOTSA3GcSUQ9tBzet9Lg8oRlUarB/zj7oh07NypL4hiOS7Pg4GN0LVxgSHwjfI2tYygbRr74Or+Q6W+LQ==
content-length: 27907
x-fb-trip-id: 1679558926
date: Sat, 25 Mar 2023 22:55:28 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 5e238f2cddfe84e0a121d3487a472966
a34fd427f8cbcb80527fbcdfbe61a6bcb3ad32bc
11dda96d87d41c7ab95ceb83886b4cd53664b6d4bc0125c352a95340584370c1
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 208
Cache-Control: max-age=158192
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 22:55:28 GMT
Etag: "641f4200-1d7"
Expires: Mon, 27 Mar 2023 18:52:00 GMT
Last-Modified: Sat, 25 Mar 2023 18:48:32 GMT
Server: ECAcc (ska/F6D2)
X-Cache: HIT
Content-Length: 471
www.ropasrebaja.shop/api/countryOfClient
200 45 B URL HTTP/1.1 www.ropasrebaja.shop/api/countryOfClient
IP
ASN #59447 Istanbuldc Veri Merkezi Ltd Sti
File type JSON data\012- , ASCII text, with no line terminators
Hash 1e77b49774b433537ef35e4ce38f4b8f
1df8c53f8052f860ca7ada4a490ea8a23606793c
870291c9c549917775dce1043664b5e718246f9051e7be6cd086fcc700444638
Analyzer Verdict Alert quad9 Sinkholed
POST /api/countryOfClient HTTP/1.1
Host: www.ropasrebaja.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Origin: https://www.ropasrebaja.shop
Connection: keep-alive
Referer: https://www.ropasrebaja.shop/
Cookie: JSESSIONID=5D16AC328EA2831A640048634447039E; isFirst=0; uvid=202303260655272404; currentCurrencyCode=CRY101
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Content-Length: 0
HTTP/1.1 200
Server: nginx/1.14.2
Date: Sat, 25 Mar 2023 22:55:28 GMT
Content-Type: application/json;charset=UTF-8
Content-Length: 45
Connection: keep-alive
Access-Control-Allow-Origin: https://www.ropasrebaja.shop
Access-Control-Allow-Credentials: true
www.facebook.com/tr/?id=5899647350120564&ev=PageView&dl=https%3A%2F%2Fwww.ropasrebaja.shop%2F&rl=&if=false&ts=1679784942740&sw=1280&sh=1024&v=2.9.100&r=stable&ec=0&o=30&cs_est=true&fbp=fb.1.1679784942739.1529141213&it=1679784942514&coo=false&rqm=GET
200 OK 110 kB URL HTTP/2 www.facebook.com/tr/?id=5899647350120564&ev=PageView&dl=https%3A%2F%2Fwww.ropasrebaja.shop%2F&rl=&if=false&ts=1679784942740&sw=1280&sh=1024&v=2.9.100&r=stable&ec=0&o=30&cs_est=true&fbp=fb.1.1679784942739.1529141213&it=1679784942514&coo=false&rqm=GET
IP
File type gzip compressed data, from Unix\012- data
Size 110 kB (110201 bytes)
Hash 28a65368097de12b1d0dd22947778100
c90f0797331ab2d06b9e3ad3131014ce30c0d3f8
bbf875be053b4d5b057d3436c4e5cec080b443482be074baab205eef9c043cea
GET /tr/?id=5899647350120564&ev=PageView&dl=https%3A%2F%2Fwww.ropasrebaja.shop%2F&rl=&if=false&ts=1679784942740&sw=1280&sh=1024&v=2.9.100&r=stable&ec=0&o=30&cs_est=true&fbp=fb.1.1679784942739.1529141213&it=1679784942514&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ropasrebaja.shop/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Sat, 25 Mar 2023 22:55:28 GMT
X-Firefox-Spdy: h2
162.222.89.179
157.240.205.11
23.36.77.32
34.160.144.191
0.0.0.0