Overview

URL rafist.com/gundem/6nci-arama.html
IP185.179.27.209
ASN
Location Unknown
Report completed2018-12-10 14:17:19 CET
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2018-12-10 2 rafist.com/gundem/6nci-arama.html Malware
2018-12-10 2 www.rafist.com/gundem/6nci-arama.html Malware
2018-12-10 2 www.rafist.com/gundem/dunyanin-en-yuksek-binasi-torenle-acildi.html Malware
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 185.179.27.209

Date UQ / IDS / BL URL IP
2019-03-22 15:53:26 +0100
0 - 0 - 4 rafist.com/saglik/myom-rahim-ici-tumorler.html 185.179.27.209
2019-03-06 19:00:31 +0100
0 - 0 - 4 rafist.com/teknoloji/osymden-yine-yalanlama.html 185.179.27.209
2019-03-06 18:59:16 +0100
0 - 0 - 3 rafist.com/teknoloji/zara%EF%BF%BD%EF%BF%BD%E (...) 185.179.27.209
2019-02-24 19:04:58 +0100
0 - 0 - 4 rafist.com/saglik/kansizlik-kalp-hastaliklari (...) 185.179.27.209
2019-02-24 04:01:46 +0100
0 - 0 - 4 rafist.com/eglence/2007nin-en-buyuk-gaflari.html 185.179.27.209
2019-01-29 20:34:17 +0100
0 - 0 - 3 rafist.com/kategori/otomobil/page/38 185.179.27.209
2019-01-27 20:03:35 +0100
0 - 0 - 3 rafist.com/page/930 185.179.27.209
2019-01-27 11:30:01 +0100
0 - 0 - 3 rafist.com/yasam/cep-telefonu-kullaniyor-musu (...) 185.179.27.209
2019-01-12 11:29:39 +0100
0 - 0 - 2 www.rafist.com/teknoloji/wwwe-kolaynet-ekolayn= 185.179.27.209
2019-01-11 23:15:47 +0100
0 - 0 - 4 rafist.com/yasam/anadolunun-tarihcesi-genel-o (...) 185.179.27.209

Last 10 reports on ASN:

Date UQ / IDS / BL URL IP
2019-03-26 08:09:27 +0100
0 - 0 - 6 dev.upnewz.in/ 35.225.199.168
2019-03-26 08:08:21 +0100
0 - 0 - 1 bosworths-news.co.uk/login.php 52.31.85.24
2019-03-26 08:03:09 +0100
0 - 0 - 1 34.228.167.64/docs/ioPyN-Bai_m-7XO/ 34.228.167.64
2019-03-26 08:03:03 +0100
0 - 0 - 1 bournevalley-news.co.uk/login.php 52.31.85.24
2019-03-26 08:01:28 +0100
0 - 0 - 2 35.234.16.132/ 35.234.16.132
2019-03-26 07:58:52 +0100
0 - 0 - 4 planasdis.com/ 137.74.93.229
2019-03-26 07:57:51 +0100
0 - 0 - 0 35.234.16.132/wp-content/dngj-25t_k-kS/ 35.234.16.132
2019-03-26 07:57:38 +0100
1 - 1 - 0 intgrerplan.tk/ 212.80.217.169
2019-03-26 07:57:13 +0100
0 - 2 - 1 down.zmnds.com/cx/180806/4/microsoftofficepow (...) 163.171.133.123
2019-03-26 07:56:25 +0100
0 - 0 - 1 osloflagg.no/ 164.132.160.172

Last 10 reports on domain: rafist.com

Date UQ / IDS / BL URL IP
2019-03-22 15:53:26 +0100
0 - 0 - 4 rafist.com/saglik/myom-rahim-ici-tumorler.html 185.179.27.209
2019-03-06 19:00:31 +0100
0 - 0 - 4 rafist.com/teknoloji/osymden-yine-yalanlama.html 185.179.27.209
2019-03-06 18:59:16 +0100
0 - 0 - 3 rafist.com/teknoloji/zara%EF%BF%BD%EF%BF%BD%E (...) 185.179.27.209
2019-02-24 19:04:58 +0100
0 - 0 - 4 rafist.com/saglik/kansizlik-kalp-hastaliklari (...) 185.179.27.209
2019-02-24 04:01:46 +0100
0 - 0 - 4 rafist.com/eglence/2007nin-en-buyuk-gaflari.html 185.179.27.209
2019-01-29 20:34:17 +0100
0 - 0 - 3 rafist.com/kategori/otomobil/page/38 185.179.27.209
2019-01-27 20:03:35 +0100
0 - 0 - 3 rafist.com/page/930 185.179.27.209
2019-01-27 11:30:01 +0100
0 - 0 - 3 rafist.com/yasam/cep-telefonu-kullaniyor-musu (...) 185.179.27.209
2019-01-12 11:29:39 +0100
0 - 0 - 2 www.rafist.com/teknoloji/wwwe-kolaynet-ekolayn= 185.179.27.209
2019-01-11 23:15:47 +0100
0 - 0 - 4 rafist.com/yasam/anadolunun-tarihcesi-genel-o (...) 185.179.27.209


JavaScript

Executed Scripts (52)


Executed Evals (2)

#1 JavaScript::Eval (size: 226, repeated: 1) - SHA256: bb037a2c6d9cf7fa65d8570beb76b1a31c360826ed6edb8612a584aa1918d62d

                                        ({
    '0': [0, -15, 5, 8],
    '1': [-5, -15, 3, 8],
    '2': [-8, -15, 5, 8],
    '3': [-13, -15, 5, 8],
    '4': [-18, -15, 5, 8],
    '5': [-23, -15, 5, 8],
    '6': [-28, -15, 5, 8],
    '7': [-33, -15, 5, 8],
    '8': [-38, -15, 5, 8],
    '9': [-43, -15, 5, 8],
    ',': [-48, -15, 2, 8],
    'o': [-50, -15, 24, 8]
})
                                    

#2 JavaScript::Eval (size: 17, repeated: 1) - SHA256: 17f5bfdbae6b35ae8bc3b27c069526d694021fe1e37a8027678e770fbb05e061

                                        /*@cc_on!@*/
false
                                    

Executed Writes (1)

#1 JavaScript::Write (size: 99, repeated: 1) - SHA256: 6d020dd3536662cebaba6a4d1121c201d1ef0f4fab30e822616e4a7cb55e1624

                                        < script src = 'http://srv.sayyac.net/sa.js?_salogin=rafist&_sav=4.3'
type = 'text/javascript' > < /script>
                                    


HTTP Transactions (85)


Request Response
                                        
                                            GET /gundem/6nci-arama.html HTTP/1.1 
Host: rafist.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         185.179.27.209
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
                                        
X-Pingback: http://www.rafist.com/xmlrpc.php
Set-Cookie: sayfa_sayac_okunan=YToxOntpOjA7aToxODY0Njt9; path=/
Location: http://www.rafist.com/gundem/6nci-arama.html
Content-Length: 0
Date: Mon, 10 Dec 2018 13:16:39 GMT
Server: LiteSpeed
Connection: close


--- Additional Info ---

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /gundem/6nci-arama.html HTTP/1.1 
Host: www.rafist.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         185.179.27.209
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
X-Pingback: http://www.rafist.com/xmlrpc.php
Set-Cookie: sayfa_sayac_okunan=YToxOntpOjA7aToxODY0Njt9; path=/
Link: <http://www.rafist.com/?p=18646>; rel=shortlink
Transfer-Encoding: chunked
Content-Encoding: gzip
Vary: Accept-Encoding
Date: Mon, 10 Dec 2018 13:16:40 GMT
Server: LiteSpeed
Connection: close


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   11040
Md5:    f863f24b9482fc9f24389cc868c5d28f
Sha1:   c679a2f40dddb557a1acb9158cd0919cf3c8dcf0
Sha256: 255776bad212536cf90e523560670d23bd18705f7ba57bd4f4907341cb640db4

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /wp-content/plugins/wp-pagenavi/pagenavi-css.css?ver=2.70 HTTP/1.1 
Host: www.rafist.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.rafist.com/gundem/6nci-arama.html
Cookie: sayfa_sayac_okunan=YToxOntpOjA7aToxODY0Njt9

                                         
                                         185.179.27.209
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Cache-Control: public, max-age=604800
Expires: Mon, 17 Dec 2018 13:16:40 GMT
Last-Modified: Mon, 23 Apr 2012 10:26:01 GMT
Content-Length: 242
Content-Encoding: gzip
Vary: Accept-Encoding
Date: Mon, 10 Dec 2018 13:16:40 GMT
Server: LiteSpeed
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   242
Md5:    5bf7779afb7080a1227ab2e015b1eab1
Sha1:   9ece53ec3c9fe971dc1e8f3951d2e1b94b30640a
Sha256: fbc7f20e12603a00e8b02a2297084d907e0e0a565cdda4a92202894a7a2bde4e
                                        
                                            GET /wp-content/plugins/add-to-any/share_save_171_16.png HTTP/1.1 
Host: www.rafist.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.rafist.com/gundem/6nci-arama.html
Cookie: sayfa_sayac_okunan=YToxOntpOjA7aToxODY0Njt9

                                         
                                         185.179.27.209
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Cache-Control: public, max-age=604800
Expires: Mon, 17 Dec 2018 13:16:40 GMT
Last-Modified: Mon, 23 Apr 2012 10:25:58 GMT
Content-Length: 1504
Date: Mon, 10 Dec 2018 13:16:40 GMT
Server: LiteSpeed
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image, 171 x 16, 8-bit colormap, non-interlaced
Size:   1504
Md5:    3059f49447de58eca5a50e92af5cafce
Sha1:   777060280cbae355a7144515f0aed095a9b3a235
Sha256: f913f879adcce3afa18b539f6dbecb3144996b2a9a07ee1457ed75203d2525dc
                                        
                                            GET /wp-content/themes/internet-10/style.css HTTP/1.1 
Host: www.rafist.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.rafist.com/gundem/6nci-arama.html
Cookie: sayfa_sayac_okunan=YToxOntpOjA7aToxODY0Njt9

                                         
                                         185.179.27.209
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Cache-Control: public, max-age=604800
Expires: Mon, 17 Dec 2018 13:16:40 GMT
Last-Modified: Mon, 23 Apr 2012 08:02:01 GMT
Content-Length: 2323
Content-Encoding: gzip
Vary: Accept-Encoding
Date: Mon, 10 Dec 2018 13:16:40 GMT
Server: LiteSpeed
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2323
Md5:    e685d95473550407c6faa5b495a8dcf5
Sha1:   29a59a2a29517d30bd64bf58f36ae03027c34e50
Sha256: 797f5fc29a8b5784c9b58425550040d59e6b3cef61d24b94a7fe9ecb167547c0
                                        
                                            GET /wp-content/plugins/add-to-any/addtoany.min.css?ver=1.4 HTTP/1.1 
Host: www.rafist.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.rafist.com/gundem/6nci-arama.html
Cookie: sayfa_sayac_okunan=YToxOntpOjA7aToxODY0Njt9

                                         
                                         185.179.27.209
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Cache-Control: public, max-age=604800
Expires: Mon, 17 Dec 2018 13:16:40 GMT
Last-Modified: Mon, 23 Apr 2012 10:25:58 GMT
Content-Length: 259
Content-Encoding: gzip
Vary: Accept-Encoding
Date: Mon, 10 Dec 2018 13:16:40 GMT
Server: LiteSpeed
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   259
Md5:    678a0da25da687167216cba485ec6907
Sha1:   02320f5faee4ddd9d2d308c35760da43f09219f1
Sha256: cb9a87ce6dfaec5b0b54d3473568e79e253f7f7c2f118dc12f776b63e6cd448e
                                        
                                            GET /jquery-1.10.2.min.js HTTP/1.1 
Host: code.jquery.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.rafist.com/gundem/6nci-arama.html

                                         
                                         205.185.208.52
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Date: Mon, 10 Dec 2018 13:16:42 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Content-Encoding: gzip
Content-Length: 38145
Last-Modified: Fri, 24 Oct 2014 00:16:07 GMT
Server: nginx
Etag: W/"54499a47-16bb3"
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
X-HW: 1544447802.dop015.sk1.t,1544447802.cds019.sk1.c


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   38145
Md5:    b1c6cb9d8a9243117b4e6932b5398e8d
Sha1:   97a53f8fd605fa5202989cc2c1e2005fbd4ca29d
Sha256: f290292737f4b9d79dce25c14886a580db1415bb116cb55cb5ff2bb6cd6b248f
                                        
                                            GET /wp-content/themes/internet-10/images/com_form.png HTTP/1.1 
Host: www.rafist.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.rafist.com/gundem/6nci-arama.html
Cookie: sayfa_sayac_okunan=YToxOntpOjA7aToxODY0Njt9

                                         
                                         185.179.27.209
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Cache-Control: public, max-age=604800
Expires: Mon, 17 Dec 2018 13:16:40 GMT
Last-Modified: Mon, 23 Apr 2012 08:08:25 GMT
Content-Length: 1911
Date: Mon, 10 Dec 2018 13:16:40 GMT
Server: LiteSpeed
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image, 35 x 35, 8-bit colormap, non-interlaced
Size:   1911
Md5:    c01c0770d9ba38c354f0be88acdadaba
Sha1:   47745e2551c8e4982d5507261a6b54e7ab4409e0
Sha256: 6e2961ee278a2a38f92e87d4b71599df2ce94c4597b3f1914635a8b03c9c327b
                                        
                                            GET /widgets.js HTTP/1.1 
Host: platform.twitter.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.rafist.com/gundem/6nci-arama.html

                                         
                                         192.229.233.25
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Content-Encoding: gzip
Cache-Control: public, max-age=1800
Date: Mon, 10 Dec 2018 13:16:42 GMT
Etag: "4e5cc317f91405882b591962259aaeb5+gzip"
Last-Modified: Wed, 28 Nov 2018 23:07:09 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F715)
Vary: Accept-Encoding
X-Cache: HIT
Content-Length: 27967


--- Additional Info ---
Magic:  gzip compressed data, from Unix, last modified: Thu Nov 29 00:07:09 2018
Size:   27967
Md5:    c01e01a932bd1d86d37c3e1a79ad6a64
Sha1:   02939c3470bc02154f68845e51e3b3668557d799
Sha256: 00d0bfb0ee66bc9b0e49f95c9fda113090f59c37a48446a39251c370803c06d8
                                        
                                            GET /wp-content/themes/internet-10/images/tabmenu.gif HTTP/1.1 
Host: www.rafist.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.rafist.com/wp-content/themes/internet-10/style.css
Cookie: sayfa_sayac_okunan=YToxOntpOjA7aToxODY0Njt9

                                         
                                         185.179.27.209
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Cache-Control: public, max-age=604800
Expires: Mon, 17 Dec 2018 13:16:41 GMT
Last-Modified: Mon, 23 Apr 2012 08:08:32 GMT
Content-Length: 4828
Date: Mon, 10 Dec 2018 13:16:41 GMT
Server: LiteSpeed
Connection: Keep-Alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 960 x 39
Size:   4828
Md5:    e20eb47b9e6129e3a59feeaba88707e1
Sha1:   ca3298670d165744819b01c5398f37c98579338d
Sha256: 1fccde1d8c91f5923d301e6af228a3ec88022ba4de8ef3a647a0e7d4435fd596
                                        
                                            GET /wp-content/themes/internet-10/images/barbg.gif HTTP/1.1 
Host: www.rafist.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.rafist.com/wp-content/themes/internet-10/style.css
Cookie: sayfa_sayac_okunan=YToxOntpOjA7aToxODY0Njt9

                                         
                                         185.179.27.209
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Cache-Control: public, max-age=604800
Expires: Mon, 17 Dec 2018 13:16:41 GMT
Last-Modified: Mon, 23 Apr 2012 08:08:23 GMT
Content-Length: 982
Date: Mon, 10 Dec 2018 13:16:41 GMT
Server: LiteSpeed
Connection: Keep-Alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 82 x 32
Size:   982
Md5:    8a4331a30416cf454ad2b0abc835c896
Sha1:   13f3a5a40cb75258f71b43b98abaa566138a4963
Sha256: 2367039c876efe5532796cdfeec5298a8026316c7091c7b8b44c425084f16558
                                        
                                            GET /wp-content/themes/internet-10/images/searchbg.gif HTTP/1.1 
Host: www.rafist.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.rafist.com/wp-content/themes/internet-10/style.css
Cookie: sayfa_sayac_okunan=YToxOntpOjA7aToxODY0Njt9

                                         
                                         185.179.27.209
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Cache-Control: public, max-age=604800
Expires: Mon, 17 Dec 2018 13:16:41 GMT
Last-Modified: Mon, 23 Apr 2012 08:08:30 GMT
Content-Length: 5319
Date: Mon, 10 Dec 2018 13:16:41 GMT
Server: LiteSpeed
Connection: Keep-Alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 960 x 62
Size:   5319
Md5:    dc50cf7cd190c424a469f362bfd3e0c6
Sha1:   c6ab373f20adfd8003ed654030f7dacf14897024
Sha256: 0d74b8e82110e6876d0c21c498d894a0d62c5189f190a172810d052d89b1704c
                                        
                                            GET /pagead/show_ads.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.rafist.com/gundem/6nci-arama.html

                                         
                                         172.217.22.162
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Vary: Accept-Encoding
Date: Mon, 10 Dec 2018 13:16:42 GMT
Expires: Mon, 10 Dec 2018 13:16:42 GMT
Cache-Control: private, max-age=3600
Etag: 9354519568043102361
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 22291
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   22291
Md5:    43c5f49c792843a0aeafc96d4eec136b
Sha1:   9607e690a718a124f4e459197c1ca1526d173a5b
Sha256: 1eb7c76b36661c76c24a8fa05862e93524627dc196cf09fd6639417fd5e6bc5c
                                        
                                            GET /ti.js HTTP/1.1 
Host: tcr.tynt.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.rafist.com/gundem/6nci-arama.html

                                         
                                         104.16.87.26
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Mon, 10 Dec 2018 13:16:42 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=d77b3eeb8d1feaa681c7a7061c55a17551544447802; expires=Tue, 10-Dec-19 13:16:42 GMT; path=/; domain=.tynt.com; HttpOnly
Last-Modified: Tue, 10 Apr 2018 18:36:52 GMT
Vary: Accept-Encoding
Etag: W/"5acd0444-ad74"
Content-Encoding: gzip
CF-Cache-Status: HIT
Expires: Thu, 13 Dec 2018 13:16:42 GMT
Cache-Control: public, max-age=259200
Server: cloudflare
CF-RAY: 486ffccef6c14255-OSL


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   15759
Md5:    72911a541e41fa4ce2e5edd90f1bf9d4
Sha1:   6cf9e7331d5f068385f434a08f1f9b4c9e54344e
Sha256: fad856840608d1ccf9d95630882181478bdac709a850dc8e42a131fcfdf7a46b
                                        
                                            GET /plugins/like.php?href=http://www.facebook.com/yolguzergahi&layout=button_count&show_faces=false&width=50&action=like&colorscheme=light&height=21 HTTP/1.1 
Host: www.facebook.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.rafist.com/gundem/6nci-arama.html

                                         
                                         31.13.72.36
HTTP/1.1 302 Found
Content-Type: text/html; charset="utf-8"
                                        
Location: https://www.facebook.com/plugins/like.php?href=http%3A%2F%2Fwww.facebook.com%2Fyolguzergahi&layout=button_count&show_faces=false&width=50&action=like&colorscheme=light&height=21
X-FB-Debug: /kchuk03dLWvquSvqq1YEsvMHwEG1hvPm7TJSL6vLqq+zaYwAO6Cl7gA0inKvWv0jUaZdKj92L69ZgYZFFAm0Q==
Date: Mon, 10 Dec 2018 13:16:42 GMT
Connection: keep-alive
Content-Length: 0


--- Additional Info ---
                                        
                                            GET /wp-content/themes/internet-10/images/timeicon.gif HTTP/1.1 
Host: www.rafist.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.rafist.com/gundem/6nci-arama.html
Cookie: sayfa_sayac_okunan=YToxOntpOjA7aToxODY0Njt9

                                         
                                         185.179.27.209
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Cache-Control: public, max-age=604800
Expires: Mon, 17 Dec 2018 13:16:41 GMT
Last-Modified: Mon, 23 Apr 2012 08:08:32 GMT
Content-Length: 207
Date: Mon, 10 Dec 2018 13:16:41 GMT
Server: LiteSpeed
Connection: Keep-Alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 16 x 16
Size:   207
Md5:    cebf0d8c08804c222a97850ff556d6f7
Sha1:   f97818deec45a2787cdd059aefcae010b18a441b
Sha256: 490f47c0dad65dc119f7c92455c40dd2b7f63bdb48b97690cb97441db7207258
                                        
                                            GET /wp-content/themes/internet-10/images/folder.gif HTTP/1.1 
Host: www.rafist.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.rafist.com/gundem/6nci-arama.html
Cookie: sayfa_sayac_okunan=YToxOntpOjA7aToxODY0Njt9

                                         
                                         185.179.27.209
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Cache-Control: public, max-age=604800
Expires: Mon, 17 Dec 2018 13:16:41 GMT
Last-Modified: Mon, 23 Apr 2012 08:08:26 GMT
Content-Length: 274
Date: Mon, 10 Dec 2018 13:16:41 GMT
Server: LiteSpeed
Connection: Keep-Alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 16 x 16
Size:   274
Md5:    e00a9767c5e0d703eef931e036cd63fa
Sha1:   e220ba12f15c75236e06da840e5d97701e58072c
Sha256: 30d9435caaf4e28152d2b2d76b191b7ccc34b57bd48d402a3d9071320d4b972e
                                        
                                            GET /wp-content/themes/internet-10/images/comment.gif HTTP/1.1 
Host: www.rafist.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.rafist.com/gundem/6nci-arama.html
Cookie: sayfa_sayac_okunan=YToxOntpOjA7aToxODY0Njt9

                                         
                                         185.179.27.209
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Cache-Control: public, max-age=604800
Expires: Mon, 17 Dec 2018 13:16:41 GMT
Last-Modified: Mon, 23 Apr 2012 08:08:25 GMT
Content-Length: 257
Date: Mon, 10 Dec 2018 13:16:41 GMT
Server: LiteSpeed
Connection: Keep-Alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 16 x 16
Size:   257
Md5:    3b967759fddccb24519d3a5d8a16adda
Sha1:   bb6d5bbd898ac8a6163cccdaedd24464c23bc4ff
Sha256: f8e3fa1c28678c564afdf457d1d81f915b1bb8486298c0aae2fd3cd2b3bfa0ab
                                        
                                            GET /wp-content/themes/internet-10/images/rss.gif HTTP/1.1 
Host: www.rafist.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.rafist.com/gundem/6nci-arama.html
Cookie: sayfa_sayac_okunan=YToxOntpOjA7aToxODY0Njt9

                                         
                                         185.179.27.209
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Cache-Control: public, max-age=604800
Expires: Mon, 17 Dec 2018 13:16:41 GMT
Last-Modified: Mon, 23 Apr 2012 08:08:29 GMT
Content-Length: 1061
Date: Mon, 10 Dec 2018 13:16:41 GMT
Server: LiteSpeed
Connection: Keep-Alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 16 x 16
Size:   1061
Md5:    8241f89b2241fd3b946a5bedd9ba0788
Sha1:   740d56b5186d4e031e6b6a8c1493e8c82b266fe5
Sha256: 6511b1a23a8027bcf8e79861cedaa4a0919c06f90c969655fdf594086ccbd86e
                                        
                                            GET /site_stats/js/t/a?url=www.rafist.com HTTP/1.1 
Host: xslt.alexa.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.rafist.com/gundem/6nci-arama.html

                                         
                                         143.204.51.228
HTTP/1.1 200 OK
Content-Type: binary/octet-stream
                                        
Content-Length: 151
Connection: keep-alive
Date: Wed, 25 Jul 2018 16:46:13 GMT
Last-Modified: Fri, 27 Oct 2017 21:35:55 GMT
Etag: "394d6f2c6c2041a2fbcdaad0e525aa7b"
Accept-Ranges: bytes
Server: AmazonS3
Age: 72485
X-Cache: Hit from cloudfront
Via: 1.1 83a23d85c009b0c0e3626072e9f997fe.cloudfront.net (CloudFront)
X-Amz-Cf-Id: 5A6Vp9seomlbE50ktazC_uwlv1LYEv81ZhxvJIbKhLcSuJDTJE01VA==


--- Additional Info ---
Magic:  ASCII C++ program text
Size:   151
Md5:    394d6f2c6c2041a2fbcdaad0e525aa7b
Sha1:   5c7635c0ed73db3816069025e8b4f7ba84ed45af
Sha256: cd19302865a315df9a57552a585191f452efcbed7b0ab6b6569f4bebb764366e
                                        
                                            GET /friendconnect/script/friendconnect.js HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.rafist.com/gundem/6nci-arama.html

                                         
                                         172.217.21.164
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=UTF-8
                                        
Referrer-Policy: no-referrer
Content-Length: 1598
Date: Mon, 10 Dec 2018 13:16:42 GMT


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   1598
Md5:    8dc494040a252b9a3a9ea04255941cd6
Sha1:   663805a606e28589d28362cc1d8fa19a5bc56860
Sha256: 24d511499e91216fa0deefaf1c2875a378f83b01b170f2dfc50d27f2a4978a0a
                                        
                                            GET /count.asp?id=1258593 HTTP/1.1 
Host: toplist.cz
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.rafist.com/gundem/6nci-arama.html

                                         
                                         88.86.101.2
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Mon, 10 Dec 2018 13:16:42 GMT
Server: Apache/2.4.7 (Ubuntu) mod_fcgid/2.3.9
Pragma: no-cache
Cache-Control: private,no-cache,no-store,must-revalidate,max-age=0
Expires: Thu, 01 Dec 1994 16:00:00 GMT
Set-Cookie: ui=572; expires=Wed, 09-Jan-2019 13:16:42 GMT; path=/; domain=toplist.cz;
P3P: CP="NON DSP ADM DEV PSD CUSo OUR IND STP PRE NAV UNI"
X-W: 4
Connection: close
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  GIF image data, version 89a, 88 x 31
Size:   746
Md5:    3fc96e1ddda5a6e7332eb0eb46de93f2
Sha1:   82fdc5b146a4eb46ef894434f4a1858010df19e3
Sha256: e8d35974e18a2086ae980242a5ec740633901028b9954ecad2bab4e8dc608372
                                        
                                            GET /wp-content/themes/internet-10/images/digg.gif HTTP/1.1 
Host: www.rafist.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.rafist.com/gundem/6nci-arama.html
Cookie: sayfa_sayac_okunan=YToxOntpOjA7aToxODY0Njt9

                                         
                                         185.179.27.209
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Cache-Control: public, max-age=604800
Expires: Mon, 17 Dec 2018 13:16:41 GMT
Last-Modified: Mon, 23 Apr 2012 08:08:26 GMT
Content-Length: 245
Date: Mon, 10 Dec 2018 13:16:41 GMT
Server: LiteSpeed
Connection: Keep-Alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 16 x 14
Size:   245
Md5:    2544327e9e076e0d47d7d61e3782e3da
Sha1:   0047c7c0cc5bacfbe040c836fee5708e22990f42
Sha256: e4fb197ba9164b84bacc78856ea01599624d25065fd4df81499746e9ff62d66c
                                        
                                            GET /wp-content/themes/internet-10/images/xmlsitemap.png HTTP/1.1 
Host: www.rafist.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.rafist.com/gundem/6nci-arama.html
Cookie: sayfa_sayac_okunan=YToxOntpOjA7aToxODY0Njt9

                                         
                                         185.179.27.209
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Cache-Control: public, max-age=604800
Expires: Mon, 17 Dec 2018 13:16:41 GMT
Last-Modified: Mon, 23 Apr 2012 08:08:32 GMT
Content-Length: 273
Date: Mon, 10 Dec 2018 13:16:41 GMT
Server: LiteSpeed
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image, 80 x 15, 8-bit/color RGB, non-interlaced
Size:   273
Md5:    035834fd82fcff368a9d1072008c5553
Sha1:   0b206c56943d48aaa201c7df4c65b2f896afe2dc
Sha256: c8cedaabdc248b16aa9af0b24367126342b5e2b927106d731fd34ed54e3647ad
                                        
                                            GET /wp-content/themes/internet-10/images/delicious.gif HTTP/1.1 
Host: www.rafist.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.rafist.com/gundem/6nci-arama.html
Cookie: sayfa_sayac_okunan=YToxOntpOjA7aToxODY0Njt9

                                         
                                         185.179.27.209
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Cache-Control: public, max-age=604800
Expires: Mon, 17 Dec 2018 13:16:41 GMT
Last-Modified: Mon, 23 Apr 2012 08:08:25 GMT
Content-Length: 103
Date: Mon, 10 Dec 2018 13:16:41 GMT
Server: LiteSpeed
Connection: Keep-Alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 16 x 16
Size:   103
Md5:    7b25927bd164778f4d3833065ad9ce3e
Sha1:   29aef72fab3d8ad3eaa87ca0c5c4039057cd875d
Sha256: ba143df18daa5c1bb6f3187fca87f0abfa08865ec998b68cb5cc224d4c07eb54
                                        
                                            GET /count.asp?id=1239364 HTTP/1.1 
Host: toplist.sk
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.rafist.com/gundem/6nci-arama.html

                                         
                                         88.86.101.4
HTTP/1.1 301 Moved Permanently
                                        
Content-Length: 0
Location: https://toplist.sk/count.asp?id=1239364


--- Additional Info ---
                                        
                                            GET /cb.js HTTP/1.1 
Host: cdn.tynt.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.rafist.com/gundem/6nci-arama.html
Cookie: __cfduid=d77b3eeb8d1feaa681c7a7061c55a17551544447802

                                         
                                         104.16.88.26
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Mon, 10 Dec 2018 13:16:43 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 10 Apr 2018 18:36:52 GMT
Vary: Accept-Encoding
Etag: W/"5acd0444-290"
Content-Encoding: gzip
CF-Cache-Status: HIT
Expires: Thu, 13 Dec 2018 13:16:43 GMT
Cache-Control: public, max-age=259200
Server: cloudflare
CF-RAY: 486ffcd172214261-OSL


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   363
Md5:    efdd5105dda5757dfce016b1e4f0a656
Sha1:   ebec810a4d85c76f1148a60485fee20a1eb18253
Sha256: 6a8271d90a23c60d3c701f3f927d4ce0fdb3c15edc912e8398f9b590136a988c
                                        
                                            GET /b/p?id=anehAeJVKr4lROadbi-bpO&lm=0&ts=1544447802838&dn=TI&iso=0&t=6%E2%80%B2nc%C4%B1%20Arama%20-%20Rafist%20Genel%20Bilgiler&cu=http%3A%2F%2Fwww.rafist.com%2Fgundem%2F6nci-arama.html HTTP/1.1 
Host: ic.tynt.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.rafist.com/gundem/6nci-arama.html
Cookie: __cfduid=d77b3eeb8d1feaa681c7a7061c55a17551544447802

                                         
                                         208.100.17.184
HTTP/1.1 204 No Content
                                        
Server: nginx/1.14.0
Date: Mon, 10 Dec 2018 13:16:43 GMT
Set-Cookie: uid=CmUMLVwOZzugjwSuzehJAg==; expires=Tue, 10-Dec-19 13:16:43 GMT; domain=tynt.com; path=/
P3P: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID", CP=NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA


--- Additional Info ---
                                        
                                            GET /pagead/js/r20181205/r20180604/show_ads_impl.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.rafist.com/gundem/6nci-arama.html

                                         
                                         172.217.22.162
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Vary: Accept-Encoding
Date: Mon, 10 Dec 2018 13:16:43 GMT
Expires: Mon, 10 Dec 2018 13:16:43 GMT
Cache-Control: private, max-age=1209600
Etag: 11651059295933233243
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 75629
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   75629
Md5:    dd8f7327a57b5024b7afe88267e56b35
Sha1:   a700fe67d73e1a345f46126d5ab4193ef0033887
Sha256: 53919813bb81de4065de0878d2a4c54edb7b7999f152b7cecf3338c7dc73506f
                                        
                                            GET /images/cnc.png HTTP/1.1 
Host: www.kalipci.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.rafist.com/gundem/6nci-arama.html

                                         
                                         185.179.27.209
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Cache-Control: public, max-age=604800
Expires: Mon, 17 Dec 2018 13:16:41 GMT
Last-Modified: Tue, 02 Aug 2016 13:47:21 GMT
Content-Length: 55039
Date: Mon, 10 Dec 2018 13:16:41 GMT
Server: LiteSpeed
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image, 728 x 90, 8-bit/color RGB, non-interlaced
Size:   55039
Md5:    6b019c92889629583a42e6df5115bb5e
Sha1:   9e1a58bc67037f36cbda05165d4d385ccc075e3d
Sha256: 8b92a316e4e7650ed1ce79ab3377baa0b25d033bc0f2753d69428914670496f1
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         80.239.159.19
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Fri, 07 Dec 2018 05:30:37 GMT
Etag: 521ECE1ED7C8747BBDD78563BE0073FB700790AA
X-OCSP-Responder-ID: (null)
Content-Length: 471
Cache-Control: public, no-transform, must-revalidate, max-age=317050
Expires: Fri, 14 Dec 2018 05:20:53 GMT
Date: Mon, 10 Dec 2018 13:16:43 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   471
Md5:    4de7ac33f9bb98784fcc616eed5276ee
Sha1:   521ece1ed7c8747bbdd78563be0073fb700790aa
Sha256: 9cceec20ab0a5ea18f56e4d4411f5575a4b6e36c91e769e4b64a4dd06b70fa87
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         80.239.159.19
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Tue, 04 Dec 2018 14:14:26 GMT
Etag: DDD668D8384FA1337DF6625884C60EBC8A662ADC
X-OCSP-Responder-ID: (null)
Content-Length: 727
Cache-Control: public, no-transform, must-revalidate, max-age=89250
Expires: Tue, 11 Dec 2018 14:04:13 GMT
Date: Mon, 10 Dec 2018 13:16:43 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   727
Md5:    c7a0e0960625cacb49ddf8134a30c795
Sha1:   ddd668d8384fa1337df6625884c60ebc8a662adc
Sha256: f07dc9504dd1e7471ddd89a7da395b386a6f7599512ab0a92469c1c04b400502
                                        
                                            POST / HTTP/1.1 
Host: ocsp.usertrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         80.239.159.56
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Tue, 04 Dec 2018 14:14:26 GMT
Etag: 3EED6C5AEEA26B6CF2DC166345BB5538FD150424
X-OCSP-Responder-ID: (null)
Content-Length: 471
Cache-Control: public, no-transform, must-revalidate, max-age=89308
Expires: Tue, 11 Dec 2018 14:05:11 GMT
Date: Mon, 10 Dec 2018 13:16:43 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   471
Md5:    8c6b5756a0ccedb25fc8279becbb588e
Sha1:   3eed6c5aeea26b6cf2dc166345bb5538fd150424
Sha256: 039b87ae2ffbab122a1ec915e8ad64441ebfc410491c1e0e6985da9d250b9b74
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=124572
Date: Mon, 10 Dec 2018 13:16:43 GMT
Etag: "5c0da580-1d7"
Expires: Tue, 11 Dec 2018 23:52:55 GMT
Last-Modified: Sun, 09 Dec 2018 23:30:08 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    9428c59ddebcc0e1363b65b2a4f38063
Sha1:   182d65a2c9e57f9aff6fca3b11e67e1bb5e83b48
Sha256: 17bf47a7d606fe64224c4f1a18279fc8ab0dc965f8d92d963cc3592528328726
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=94976
Date: Mon, 10 Dec 2018 13:16:43 GMT
Etag: "5c0d168d-1d7"
Expires: Tue, 11 Dec 2018 15:39:39 GMT
Last-Modified: Sun, 09 Dec 2018 13:20:13 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    5bb548ee3c93ff413b3d0e4c99cd4451
Sha1:   02ff5e9fb4cb25c3dcfb6f98f906ce52f216756b
Sha256: 383cc1658adb233a32f8ba1bdb4ec0e9b134371645ca9f1d5de83a1af55f7d7c
                                        
                                            GET /b/p?id=anehAeJVKr4lROadbi-bpO&lm=0&ts=1544447802838&dn=TI&iso=0&t=6%E2%80%B2nc%C4%B1%20Arama%20-%20Rafist%20Genel%20Bilgiler&cu=http%3A%2F%2Fwww.rafist.com%2Fgundem%2F6nci-arama.html HTTP/1.1 
Host: ic.tynt.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.rafist.com/gundem/6nci-arama.html
Cookie: __cfduid=d77b3eeb8d1feaa681c7a7061c55a17551544447802; uid=CmUMLVwOZzugjwSuzehJAg==

                                         
                                         208.100.17.184
HTTP/1.1 204 No Content
                                        
Server: nginx/1.14.0
Date: Mon, 10 Dec 2018 13:16:43 GMT
P3P: CP=NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA


--- Additional Info ---
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.207.238
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 10 Dec 2018 13:16:43 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    a3f024727a1eae2d86b3c2738f814e24
Sha1:   966e66a8b043a5ae87d52f6a31be089eafd6a8c4
Sha256: 8b89d707cb76d397db087c9b76d114813f4c679dd11bf980be9da38783aeb5b4
                                        
                                            POST /gsr2 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 112
Content-Type: application/ocsp-request

                                         
                                         216.58.207.238
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 10 Dec 2018 13:16:43 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 468
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   468
Md5:    d9d754520ae3340aa37cca6115eee05b
Sha1:   a0320372760d99c762cb2eb4b37f776625ef1b33
Sha256: 7dc8284c51c9a38dc1bf03bd28857ea5336e8f5c564eddbb1c9082ee43c93738
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.207.238
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 10 Dec 2018 13:16:43 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    30af1694017b50502793cb9994993201
Sha1:   1dc4d03e0da3448d843d713c0fe1aa6cea3057a2
Sha256: 58ba84f3ca399b84e99b43e3179358ef10cbdbc61c54695babfb6a52e2951c58
                                        
                                            GET /deb/v2?id=anehAeJVKr4lROadbi-bpO&dn=TI&cc=1&r= HTTP/1.1 
Host: de.tynt.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.rafist.com/gundem/6nci-arama.html
Cookie: __cfduid=d77b3eeb8d1feaa681c7a7061c55a17551544447802

                                         
                                         208.100.17.184
HTTP/1.1 200
Content-Type: application/javascript
                                        
Cache-Control: max-age=86400
Expires: Tue, 11 Dec 2018 13:16:43 GMT
Content-Length: 4
Date: Mon, 10 Dec 2018 13:16:42 GMT
P3P: CP=NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   4
Md5:    350fd6ef6446635f7a8f608434a405ec
Sha1:   a4b6c275ac2c80ec925b5c0c5c6abb79ba897356
Sha256: d21021784cda31eeae5c8295e047a14bda6ed5a9b5963fca9e7ceb398a9c9179
                                        
                                            GET /b/p?id=anehAeJVKr4lROadbi-bpO&lm=0&ts=1544447802838&dn=TI&iso=0&t=6%E2%80%B2nc%C4%B1%20Arama%20-%20Rafist%20Genel%20Bilgiler HTTP/1.1 
Host: ic.tynt.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.rafist.com/gundem/6nci-arama.html
Cookie: __cfduid=d77b3eeb8d1feaa681c7a7061c55a17551544447802; uid=CmUMLVwOZzugjwSuzehJAg==

                                         
                                         208.100.17.184
HTTP/1.1 204 No Content
                                        
Server: nginx/1.14.0
Date: Mon, 10 Dec 2018 13:16:43 GMT
P3P: CP=NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA


--- Additional Info ---
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.207.238
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 10 Dec 2018 13:16:43 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    614521a0e8c907d7ad51c37f6ebbee38
Sha1:   8de07f796f070510ddd1246e7fcfcba4112dbe06
Sha256: 664e4378bf658f9ee8c508e4549342558ea7a8dc3bf5b215f9c88821f2458327
                                        
                                            GET /pub-config/r20160913/ca-pub-7960993394641930.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.rafist.com/gundem/6nci-arama.html

                                         
                                         172.217.22.162
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Date: Mon, 10 Dec 2018 02:37:07 GMT
Expires: Mon, 10 Dec 2018 14:37:07 GMT
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: sffe
Content-Length: 88
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=43200
Age: 38376
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="44,43,39,35",quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   88
Md5:    447300cfe76a026545c27482e7ada077
Sha1:   995fa7efb4f9b8be29ea4c3c69a361e0a1f27ba1
Sha256: 994d8a1f3b94c1b503343b827ffd37a0a2a50015d48a054812591825cc305a40
                                        
                                            POST / HTTP/1.1 
Host: ocsp.int-x3.letsencrypt.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 117
Content-Type: application/ocsp-request

                                         
                                         80.239.159.24
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 527
Etag: "534A651787200C491E200291FA793B91E4737BE1160211C85C119D8238FAB20C"
Last-Modified: Fri, 07 Dec 2018 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=29156
Expires: Mon, 10 Dec 2018 21:22:39 GMT
Date: Mon, 10 Dec 2018 13:16:43 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   527
Md5:    d00a6fc8dda5790158f155b9c31cd044
Sha1:   33dd7aba17649f44d970ec7166f71a7ac8250f8e
Sha256: 534a651787200c491e200291fa793b91e4737be1160211c85c119d8238fab20c
                                        
                                            GET /b/p?id=anehAeJVKr4lROadbi-bpO&lm=0&ts=1544447802838&dn=TI&iso=0 HTTP/1.1 
Host: ic.tynt.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.rafist.com/gundem/6nci-arama.html
Cookie: __cfduid=d77b3eeb8d1feaa681c7a7061c55a17551544447802; uid=CmUMLVwOZzugjwSuzehJAg==

                                         
                                         208.100.17.184
HTTP/1.1 204 No Content
                                        
Server: nginx/1.14.0
Date: Mon, 10 Dec 2018 13:16:43 GMT
P3P: CP=NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA


--- Additional Info ---
                                        
                                            POST / HTTP/1.1 
Host: isrg.trustid.ocsp.identrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         80.239.159.56
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Transfer-Encoding: Binary
Last-Modified: Fri, 07 Dec 2018 23:28:09 GMT
Etag: "b0673c06a463ddc5ece501d4b8bf3e18b2a45e88"
Content-Length: 1398
Cache-Control: public, no-transform, must-revalidate, max-age=42792
Expires: Tue, 11 Dec 2018 01:09:55 GMT
Date: Mon, 10 Dec 2018 13:16:43 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1398
Md5:    83a46a919e63bc54e63f62ce683c61bc
Sha1:   b0673c06a463ddc5ece501d4b8bf3e18b2a45e88
Sha256: cfc359148ff9fa61f7c13acfbbb1365f2e9a1cc5c81eb2e8ade88bea4537252d
                                        
                                            GET /adsid/integrator.js?domain=www.rafist.com HTTP/1.1 
Host: adservice.google.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.rafist.com/gundem/6nci-arama.html

                                         
                                         172.217.22.162
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
Timing-Allow-Origin: *
Cache-Control: private, no-cache, no-store
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Date: Mon, 10 Dec 2018 13:16:43 GMT
Server: cafe
X-XSS-Protection: 1; mode=block
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="44,43,39,35",quic=":443"; ma=2592000; v="44,43,39,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   104
Md5:    835dc76a57166c8b5b88275a570d1891
Sha1:   0d7e8826520cdadf8db62583b25e26149af2c8ce
Sha256: 6441b99ce0ba328cabe2ff8d6167c3ac47f8d67fc469689fd925f7b57761c333
                                        
                                            GET /adsid/integrator.js?domain=www.rafist.com HTTP/1.1 
Host: adservice.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.rafist.com/gundem/6nci-arama.html

                                         
                                         172.217.22.162
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
Timing-Allow-Origin: *
Cache-Control: private, no-cache, no-store
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Date: Mon, 10 Dec 2018 13:16:43 GMT
Server: cafe
X-XSS-Protection: 1; mode=block
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="44,43,39,35",quic=":443"; ma=2592000; v="44,43,39,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   104
Md5:    835dc76a57166c8b5b88275a570d1891
Sha1:   0d7e8826520cdadf8db62583b25e26149af2c8ce
Sha256: 6441b99ce0ba328cabe2ff8d6167c3ac47f8d67fc469689fd925f7b57761c333
                                        
                                            GET /b/p?id=anehAeJVKr4lROadbi-bpO&lm=0&ts=1544447802838&dn=TI&iso=0 HTTP/1.1 
Host: ic.tynt.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.rafist.com/gundem/6nci-arama.html
Cookie: __cfduid=d77b3eeb8d1feaa681c7a7061c55a17551544447802; uid=CmUMLVwOZzugjwSuzehJAg==

                                         
                                         208.100.17.184
HTTP/1.1 204 No Content
                                        
Server: nginx/1.14.0
Date: Mon, 10 Dec 2018 13:16:43 GMT
P3P: CP=NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA


--- Additional Info ---
                                        
                                            GET /haber/883/6-nci-arama_8063_o.jpg HTTP/1.1 
Host: img.haberler.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.rafist.com/gundem/6nci-arama.html

                                         
                                         174.35.41.102
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Mon, 10 Dec 2018 13:16:42 GMT
Server: PWS/8.3.2.1
X-Px: ms h0-s32.p1-arn ( origin)
Etag: "a4f7ba43a887ca1:0"
Cache-Control: no-cache,Public, max-age=864000
Accept-Ranges: bytes
Content-Length: 57881
Last-Modified: Mon, 28 Dec 2009 10:26:49 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   57881
Md5:    e7647d710d41837a4cd900c2b7009c66
Sha1:   6acca559051345b3eca95257580809cb713b7948
Sha256: ecdae372f9d611115f0e664ae60db241b897d873f190abab9b1886f46661d45b
                                        
                                            GET /plugins/like.php?href=http%3A%2F%2Fwww.facebook.com%2Fyolguzergahi&layout=button_count&show_faces=false&width=50&action=like&colorscheme=light&height=21 HTTP/1.1 
Host: www.facebook.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.rafist.com/gundem/6nci-arama.html

                                         
                                         31.13.72.36
HTTP/1.1 200 OK
Content-Type: text/html; charset="utf-8"
                                        
Cache-Control: private, no-cache, no-store, must-revalidate
Pragma: no-cache
Strict-Transport-Security: max-age=15552000; preload
Content-Encoding: gzip
Timing-Allow-Origin: *
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Expires: Sat, 01 Jan 2000 00:00:00 GMT
X-FB-Debug: pq0kbM8bNXUsiXo2Xw2jn3JRhWUtB5drfebdBaoBlgucsxekyTRvqxMvyacpM20FDGBCrD34UK1v0MIcmxRjYg==
Date: Mon, 10 Dec 2018 13:16:43 GMT
Transfer-Encoding: chunked
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   15017
Md5:    cc3f0fc24eb9c7f493d1fccbbb3198b3
Sha1:   952b617aeb9213d75f10af137fdac42f336f99e9
Sha256: cb9f127757aece83c76f8ab8d2857867d20de450fb46d6f41991c84c1bce68cb
                                        
                                            GET /script/sc/anehAeJVKr4lROadbi-bpO.js HTTP/1.1 
Host: sc.tynt.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.rafist.com/gundem/6nci-arama.html
Cookie: __cfduid=d77b3eeb8d1feaa681c7a7061c55a17551544447802

                                         
                                         104.16.88.26
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=utf-8
                                        
Date: Mon, 10 Dec 2018 13:16:43 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Status: 200 OK
X-Rack-Cache: stale, invalid, store
Cache-Control: max-age=86400, public, s-maxage=172800
Last-Modified: Sun, 09 Dec 2018 15:25:06 GMT
X-XSS-Protection: 1; mode=block
X-Request-Id: 25fe162f-8669-457e-9b82-651838af600a
X-Content-Digest: 72a6195042fe9092998fb2abfd618ab5ee05170f
X-Runtime: 0.011337
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Expires: Tue, 11 Dec 2018 13:16:43 GMT
Content-Encoding: gzip
CF-Cache-Status: MISS
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 486ffcd30bb142bb-OSL


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   86
Md5:    6403b2f6a78217f9b9fcff570fbf83e1
Sha1:   42f21eddf1c0df9cdb65f3fa926c0ad62bb39b98
Sha256: 35730b2c335d9c7e34675a88131dde7a6a4b1d7aa684d5db7e1ccc99327f55b0
                                        
                                            GET /count.asp?id=1239364 HTTP/1.1 
Host: toplist.sk
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.rafist.com/gundem/6nci-arama.html

                                         
                                         88.86.101.4
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Mon, 10 Dec 2018 13:16:43 GMT
Server: Apache/2.4.7 (Ubuntu) mod_fcgid/2.3.9
Pragma: no-cache
Cache-Control: private,no-cache,no-store,must-revalidate,max-age=0
Expires: Thu, 01 Dec 1994 16:00:00 GMT
Set-Cookie: ui=57564; expires=Wed, 09-Jan-2019 13:16:43 GMT; path=/; domain=toplist.sk;
P3P: CP="NON DSP ADM DEV PSD CUSo OUR IND STP PRE NAV UNI"
X-W: 9
Connection: close
Transfer-Encoding: chunked
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload


--- Additional Info ---
Magic:  GIF image data, version 89a, 88 x 31
Size:   746
Md5:    3fc96e1ddda5a6e7332eb0eb46de93f2
Sha1:   82fdc5b146a4eb46ef894434f4a1858010df19e3
Sha256: e8d35974e18a2086ae980242a5ec740633901028b9954ecad2bab4e8dc608372
                                        
                                            GET /b/p?id=anehAeJVKr4lROadbi-bpO&lm=0&ts=1544447802838&dn=TI&iso=0 HTTP/1.1 
Host: ic.tynt.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.rafist.com/gundem/6nci-arama.html
Cookie: __cfduid=d77b3eeb8d1feaa681c7a7061c55a17551544447802; uid=CmUMLVwOZzugjwSuzehJAg==

                                         
                                         208.100.17.184
HTTP/1.1 204 No Content
                                        
Server: nginx/1.14.0
Date: Mon, 10 Dec 2018 13:16:43 GMT
P3P: CP=NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA


--- Additional Info ---
                                        
                                            GET /menu/page.js HTTP/1.1 
Host: static.addtoany.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.rafist.com/gundem/6nci-arama.html

                                         
                                         104.20.111.39
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Date: Mon, 10 Dec 2018 13:16:44 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=dd5d2675d8fef291201f9e17eda88fb311544447804; expires=Tue, 10-Dec-19 13:16:44 GMT; path=/; domain=.addtoany.com; HttpOnly
Cache-Control: public, max-age=172800
Cf-Bgj: minify
Etag: W/"13be9-57c7f777b3a66"
Last-Modified: Sat, 08 Dec 2018 09:36:30 GMT
P3P: CP="ALL DSP COR CURa ADMa DEVa TAIa PSAa PSDa OUR IND UNI COM NAV INT"
Vary: Accept-Encoding
Via: e5
X-Content-Type-Options: nosniff
CF-Cache-Status: HIT
Expires: Wed, 12 Dec 2018 13:16:44 GMT
Server: cloudflare
CF-RAY: 486ffcd830c24255-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   26985
Md5:    8b5168526d997ee10c93d0a98f5d90d0
Sha1:   415293946424588d516ad08fb2ee8b13e758bc46
Sha256: 48d47ffffbaeebaaef579edc218a4d4f9ae577d380dba8087322db2090fabe39
                                        
                                            GET /wp-content/themes/internet-10/images/shadow.gif HTTP/1.1 
Host: www.rafist.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.rafist.com/wp-content/themes/internet-10/style.css
Cookie: sayfa_sayac_okunan=YToxOntpOjA7aToxODY0Njt9

                                         
                                         185.179.27.209
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Cache-Control: public, max-age=604800
Expires: Mon, 17 Dec 2018 13:16:42 GMT
Last-Modified: Mon, 23 Apr 2012 08:08:30 GMT
Content-Length: 1129
Date: Mon, 10 Dec 2018 13:16:42 GMT
Server: LiteSpeed
Connection: Keep-Alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 65 x 70
Size:   1129
Md5:    0c5cd362d75428a7056c36db279d3408
Sha1:   b6d425fa3360e9f36c310028ccc5dc7020be3474
Sha256: c33f60eeb7b27583fd79c56c6b7ae208092d9deae86b9098bbcb9937824602b0
                                        
                                            GET /wp-content/themes/internet-10/images/boxtop.gif HTTP/1.1 
Host: www.rafist.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.rafist.com/wp-content/themes/internet-10/style.css
Cookie: sayfa_sayac_okunan=YToxOntpOjA7aToxODY0Njt9

                                         
                                         185.179.27.209
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Cache-Control: public, max-age=604800
Expires: Mon, 17 Dec 2018 13:16:42 GMT
Last-Modified: Mon, 23 Apr 2012 08:08:24 GMT
Content-Length: 538
Date: Mon, 10 Dec 2018 13:16:42 GMT
Server: LiteSpeed
Connection: Keep-Alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 292 x 19
Size:   538
Md5:    56e961a57fd7ce4a784c4dddef635620
Sha1:   cbc329427dc680a1b5a4fa1cd9142d42608e3973
Sha256: 5d4c304e65461b75fe2b0a30ffc4583a8058413737284d04e2814dc5a55f1d9b
                                        
                                            GET /wp-content/themes/internet-10/images/box.gif HTTP/1.1 
Host: www.rafist.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.rafist.com/wp-content/themes/internet-10/style.css
Cookie: sayfa_sayac_okunan=YToxOntpOjA7aToxODY0Njt9

                                         
                                         185.179.27.209
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Cache-Control: public, max-age=604800
Expires: Mon, 17 Dec 2018 13:16:42 GMT
Last-Modified: Mon, 23 Apr 2012 08:08:24 GMT
Content-Length: 4095
Date: Mon, 10 Dec 2018 13:16:42 GMT
Server: LiteSpeed
Connection: Keep-Alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 292 x 1500
Size:   4095
Md5:    1361a4fbc6a62dc167c7f727516e6bf1
Sha1:   821d3644e658d66c84f9dd292dfb1b6f498a4106
Sha256: cfeba418f8b0fc736a60ad586dec665f7c6c900033d07ed0a71cb444287500fc
                                        
                                            GET /b/p?id=anehAeJVKr4lROadbi-bpO&lm=0&ts=1544447802838&dn=TI&iso=0 HTTP/1.1 
Host: ic.tynt.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.rafist.com/gundem/6nci-arama.html
Cookie: __cfduid=d77b3eeb8d1feaa681c7a7061c55a17551544447802; uid=CmUMLVwOZzugjwSuzehJAg==

                                         
                                         208.100.17.184
HTTP/1.1 204 No Content
                                        
Server: nginx/1.14.0
Date: Mon, 10 Dec 2018 13:16:44 GMT
P3P: CP=NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA


--- Additional Info ---
                                        
                                            GET /friendconnect/script/friendconnect.js HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.rafist.com/gundem/6nci-arama.html

                                         
                                         172.217.21.164
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=UTF-8
                                        
Referrer-Policy: no-referrer
Content-Length: 1598
Date: Mon, 10 Dec 2018 13:16:45 GMT


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   1598
Md5:    8dc494040a252b9a3a9ea04255941cd6
Sha1:   663805a606e28589d28362cc1d8fa19a5bc56860
Sha256: 24d511499e91216fa0deefaf1c2875a378f83b01b170f2dfc50d27f2a4978a0a
                                        
                                            GET /wp-content/themes/internet-10/images/gbox.gif HTTP/1.1 
Host: www.rafist.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.rafist.com/wp-content/themes/internet-10/style.css
Cookie: sayfa_sayac_okunan=YToxOntpOjA7aToxODY0Njt9

                                         
                                         185.179.27.209
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Cache-Control: public, max-age=604800
Expires: Mon, 17 Dec 2018 13:16:43 GMT
Last-Modified: Mon, 23 Apr 2012 08:08:27 GMT
Content-Length: 622
Date: Mon, 10 Dec 2018 13:16:43 GMT
Server: LiteSpeed
Connection: Keep-Alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 960 x 35
Size:   622
Md5:    74b83d05db89ac7f9371aa2d3db8a9a4
Sha1:   dc4998e4e519e1afe2edb7b84a2484976bf1eb45
Sha256: 4a16648e3dbc15a146cf35d92d322ab4c81bccb1893daa0f393d3af7f20ffbba
                                        
                                            GET /plugins/likebox.php?href=http%3A%2F%2Fwww.facebook.com%2Fpages%2FDestegi%2F173214066036266&width=270&colorscheme=light&connections=8&stream=false&header=true&height=290 HTTP/1.1 
Host: www.facebook.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.rafist.com/gundem/6nci-arama.html

                                         
                                         31.13.72.36
HTTP/1.1 302 Found
Content-Type: text/html; charset="utf-8"
                                        
Location: https://www.facebook.com/plugins/likebox.php?href=http%3A%2F%2Fwww.facebook.com%2Fpages%2FDestegi%2F173214066036266&width=270&colorscheme=light&connections=8&stream=false&header=true&height=290
X-FB-Debug: y+HM0xRSZKv9diqsY6Jc1Nrv6FfgURsZH1HULIoKHehrkpO5OOegMfUX1gTFcLE22EzSYY06k7/TZjOI7a6m/A==
Date: Mon, 10 Dec 2018 13:16:45 GMT
Connection: keep-alive
Content-Length: 0


--- Additional Info ---
                                        
                                            GET /rsrc.php/v3/yn/r/lH1ibRl5GKq.png HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/like.php?href=http%3A%2F%2Fwww.facebook.com%2Fyolguzergahi&layout=button_count&show_faces=false&width=50&action=like&colorscheme=light&height=21

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Allow-Credentials: true
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
X-XSS-Protection: 0
Expires: Fri, 06 Dec 2019 18:54:40 GMT
X-Content-Type-Options: nosniff
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Content-MD5: LsIm49y5qOd6jowRdAWHyQ==
Cache-Control: public,max-age=31536000,immutable
X-FB-Debug: 4DzrdjDB+lNypsnbczWSlBNZ3Cs02JOCdwLpleAoXIvNM2yxi0y3HyAtX3gJ0wHPZ2DndN6TzzEhh5uCrADQ/A==
Date: Mon, 10 Dec 2018 13:16:45 GMT
Connection: keep-alive
Content-Length: 222


--- Additional Info ---
Magic:  PNG image, 16 x 16, 4-bit colormap, non-interlaced
Size:   222
Md5:    2ec226e3dcb9a8e77a8e8c11740587c9
Sha1:   3eeef1fffe964e01ca04216633d515b782671437
Sha256: 4c66cf58bddf9101dd5e3d83235728a64c8e7ef7032c4bcbbcc91b8aa7dcac18
                                        
                                            GET /rsrc.php/v3iEpO4/y_/l/en_US/CbTQoFkRZVy.js HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/like.php?href=http%3A%2F%2Fwww.facebook.com%2Fyolguzergahi&layout=button_count&show_faces=false&width=50&action=like&colorscheme=light&height=21
Origin: https://www.facebook.com

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Access-Control-Allow-Credentials: true
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
X-XSS-Protection: 0
Expires: Tue, 10 Dec 2019 09:27:05 GMT
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Cache-Control: public,max-age=31536000,immutable
Content-MD5: ULZHonKYHRuSyddTdV3oow==
X-FB-Debug: rpuWi8tK7TaJ4YHgupjODv0Lb8WH2qPZfN3DX4hnX6e8gy3y1erPDd/5YqoCrhvSzxBn7RWXRcPLKolYXJdt/A==
Date: Mon, 10 Dec 2018 13:16:45 GMT
Connection: keep-alive
Content-Length: 142435


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   142435
Md5:    50b647a272981d1b92c9d753755de8a3
Sha1:   2b5dc529d6dc5f04b203dcfba403e08165600bde
Sha256: 08d976bfbbb32f8cb2ee35eb83feb35b5d60a33b5511fe58063fba680a9b77fd
                                        
                                            GET /rsrc.php/v3/yz/l/0,cross/Xb_9gYkflDY.css HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/likebox.php?href=http%3A%2F%2Fwww.facebook.com%2Fpages%2FDestegi%2F173214066036266&width=270&colorscheme=light&connections=8&stream=false&header=true&height=290

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Credentials: true
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Expires: Fri, 29 Nov 2019 14:49:52 GMT
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Content-MD5: bdohlF3baNIVyeb8ekySBg==
Cache-Control: public,max-age=31536000,immutable
X-FB-Debug: 8BCKrX/JYqdNdgiN72kS8YMBpbLnz+qCYReCEN3VMZh3Z1z50CXjkrFSJWET/SguYUkiCMX1xs1at/eg3fgASA==
Date: Mon, 10 Dec 2018 13:16:45 GMT
Connection: keep-alive
Content-Length: 9510


--- Additional Info ---
Magic:  ASCII text, with very long lines
Size:   9510
Md5:    6dda21945ddb68d215c9e6fc7a4c9206
Sha1:   970a1b0362ecbb0ed794e6834ec3c354fdfe4604
Sha256: 89bd55e0e5883467cf8a8b0e61ebff3a22b3ee5834ad9be111cfea4000e6ffdd
                                        
                                            GET /rsrc.php/v3/yc/l/0,cross/goZOoFtquE3.css HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/likebox.php?href=http%3A%2F%2Fwww.facebook.com%2Fpages%2FDestegi%2F173214066036266&width=270&colorscheme=light&connections=8&stream=false&header=true&height=290

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Credentials: true
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Expires: Mon, 09 Dec 2019 16:35:30 GMT
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Content-Encoding: gzip
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Cache-Control: public,max-age=31536000,immutable
Content-MD5: NbscjDr1ua6jOz6hd90TVw==
X-FB-Debug: 4C8hzumT4zLgpVW8NGX8FVWmdLyvAh+XztGh/NvgTk42oSs6v+gEjVvhxBwXuy410UTqg2QfzLqKjo0XsnL5tg==
Date: Mon, 10 Dec 2018 13:16:45 GMT
Connection: keep-alive
Content-Length: 7712


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   7712
Md5:    35bb1c8c3af5b9aea33b3ea177dd1357
Sha1:   df5312cadc824998e0765a8e68c84c564f8f2483
Sha256: d573c9ae1fc6192f9b57058a10be25058eb8d78fc4ed3e1b12f21b6bb2634203
                                        
                                            GET /rsrc.php/v3/yT/r/UoS9bLI3uez.js HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/likebox.php?href=http%3A%2F%2Fwww.facebook.com%2Fpages%2FDestegi%2F173214066036266&width=270&colorscheme=light&connections=8&stream=false&header=true&height=290

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Access-Control-Allow-Credentials: true
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
X-XSS-Protection: 0
Expires: Tue, 10 Dec 2019 09:25:46 GMT
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Cache-Control: public,max-age=31536000,immutable
Content-MD5: 6t/fChCtlEmiBRY3gbzJIw==
X-FB-Debug: xJ8HIlsrEO1Mt9KlPW89N85HvwheCitF263seEW9p5oZV2e9OO9mzeMyvBI+8fjeDN0XGV8yu0xvjiiwdisFrQ==
Date: Mon, 10 Dec 2018 13:16:45 GMT
Connection: keep-alive
Content-Length: 90108


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   90108
Md5:    eadfdf0a10ad9449a205163781bcc923
Sha1:   f2e58ad5eebba0f975318e07e98d36ae4c947f4e
Sha256: e8df722ddcac54d0348c140978dec23c53f12d2883efdd2d05e7b650961bd294
                                        
                                            GET /plugins/likebox.php?href=http%3A%2F%2Fwww.facebook.com%2Fpages%2FDestegi%2F173214066036266&width=270&colorscheme=light&connections=8&stream=false&header=true&height=290 HTTP/1.1 
Host: www.facebook.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.rafist.com/gundem/6nci-arama.html

                                         
                                         31.13.72.36
HTTP/1.1 200 OK
Content-Type: text/html; charset="utf-8"
                                        
Cache-Control: private, no-cache, no-store, must-revalidate
Pragma: no-cache
Strict-Transport-Security: max-age=15552000; preload
Content-Encoding: gzip
Timing-Allow-Origin: *
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Expires: Sat, 01 Jan 2000 00:00:00 GMT
X-FB-Debug: csdGai1QxFlqJ6dNOh5YzMINS2hK7AQe/QfwAMwsu+XTPrF7AqEFPRq1oDOf+/cs0ZQQBpqLxAYnsrU6opOW8A==
Date: Mon, 10 Dec 2018 13:16:45 GMT
Transfer-Encoding: chunked
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   168098
Md5:    e5e914a2617638e54c94f8a32c88da79
Sha1:   79f670c620312bb5615f57dedb26c44584eaa3b4
Sha256: d3615033eb3496a958a3c9b6028b6bdb080b08eacc3d9d0bff36cd856e6d2542
                                        
                                            GET /rsrc.php/v3/yU/r/egAxgZVm5re.js HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/likebox.php?href=http%3A%2F%2Fwww.facebook.com%2Fpages%2FDestegi%2F173214066036266&width=270&colorscheme=light&connections=8&stream=false&header=true&height=290

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Access-Control-Allow-Credentials: true
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
X-XSS-Protection: 0
Expires: Sun, 08 Dec 2019 12:39:49 GMT
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Cache-Control: public,max-age=31536000,immutable
Content-MD5: Sd3o9Tq0NmxEsDyA5DkJag==
X-FB-Debug: VrzyqtQn255Elevn7b1N4XPhDGk7u4COMXgW5w4mLZY0qvkSzUZsjwWehkzJml+CpwyhL0w1guX4wDXQo7XRIA==
Date: Mon, 10 Dec 2018 13:16:46 GMT
Connection: keep-alive
Content-Length: 28941


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   28941
Md5:    49dde8f53ab4366c44b03c80e439096a
Sha1:   c21415bdf1630a982a0fe5daea51b30b7e8aaef3
Sha256: e6eba11a327ef998dc2a92709a751f7e2bc847c57f0889a586e60dc702d45f4d
                                        
                                            GET /rsrc.php/v3/yi/r/WGNOuZpP5gk.js HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/likebox.php?href=http%3A%2F%2Fwww.facebook.com%2Fpages%2FDestegi%2F173214066036266&width=270&colorscheme=light&connections=8&stream=false&header=true&height=290

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Access-Control-Allow-Credentials: true
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Expires: Sat, 07 Dec 2019 19:10:41 GMT
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Content-Encoding: gzip
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Cache-Control: public,max-age=31536000,immutable
Content-MD5: YV/06MaNFZkCad1/bjcGfA==
X-FB-Debug: XP93LvZdyViaQf5MFNOWHaJ0WmFt99iAhIBKen/Gs1hG49H8T8G9tVzT6J3xSOdo1wR2Hixsab9zaMP972xGmw==
Date: Mon, 10 Dec 2018 13:16:46 GMT
Connection: keep-alive
Content-Length: 9596


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   9596
Md5:    615ff4e8c68d15990269dd7f6e37067c
Sha1:   49371020525d0ec4810d948d1fd44f12b8dc3cc4
Sha256: 26eadca5ef006b0ef2eaab2e29599ba1402dd60ed6a232f0f5569f0a56191ee8
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=106096
Date: Mon, 10 Dec 2018 13:16:46 GMT
Etag: "5c0d4ec5-1d7"
Expires: Tue, 11 Dec 2018 18:45:02 GMT
Last-Modified: Sun, 09 Dec 2018 17:20:05 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    acb00b17c15470ee396a9fef593246f8
Sha1:   5ec531bec1b667f1afd2eb003a2f73b4784a5f38
Sha256: e9cb4ce52137e10fdcb0a43d987ad0203be569b24315812ff22c44bb051a74c7
                                        
                                            GET /count.asp?id=1239364 HTTP/1.1 
Host: toplist.sk
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.rafist.com/gundem/6nci-arama.html
Cookie: ui=57564

                                         
                                         88.86.101.4
HTTP/1.1 301 Moved Permanently
                                        
Content-Length: 0
Location: https://toplist.sk/count.asp?id=1239364


--- Additional Info ---
                                        
                                            GET /small.js HTTP/1.1 
Host: widgets.amung.us
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.rafist.com/gundem/6nci-arama.html

                                         
                                         185.225.208.133
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Date: Mon, 10 Dec 2018 13:16:46 GMT
Last-Modified: Mon, 03 Dec 2018 09:40:56 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Etag: W/"5c04fa28-1a20"
Expires: Tue, 11 Dec 2018 13:16:46 GMT
Cache-Control: max-age=86400, private
Access-Control-Allow-Origin: *
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2951
Md5:    410e06441a753d108789c95ec7e46ffe
Sha1:   c5e5c430867334f6f508898f2a28e1766e0c2ff3
Sha256: b01e955f5d397d12836938de2e8a1f6ff8daf3702922b146b16eccac59d5ce1c
                                        
                                            GET /v/t1.0-1/c79.23.287.287a/s50x50/162701_173214192702920_1375808_n.jpg?_nc_cat=100&_nc_ht=scontent.fosl1-1.fna&oh=1503e21fdf7d70568d2322d2ebdf2126&oe=5CA25E7B HTTP/1.1 
Host: scontent.fosl1-1.fna.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/likebox.php?href=http%3A%2F%2Fwww.facebook.com%2Fpages%2FDestegi%2F173214066036266&width=270&colorscheme=light&connections=8&stream=false&header=true&height=290

                                         
                                         213.52.81.145
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Cache-Control: max-age=1209600, no-transform
Access-Control-Expose-Headers: X-FB-CEC-Video-Limit
Date: Mon, 10 Dec 2018 13:16:46 GMT
Connection: keep-alive
Content-Length: 1785


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   1785
Md5:    330eee383f8c6ca6baed0ffa18fc5e07
Sha1:   810c8a4377dbfeb748d33c55fb26da7fef43e95b
Sha256: d7acb412fad3df950b3b2c45c5279c060ab2ddd60752237e93e5184be274cba3
                                        
                                            GET /rsrc.php/v3iLl54/ys/l/en_US/SyPoIiNIkvs.js HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/likebox.php?href=http%3A%2F%2Fwww.facebook.com%2Fpages%2FDestegi%2F173214066036266&width=270&colorscheme=light&connections=8&stream=false&header=true&height=290

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Access-Control-Allow-Credentials: true
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Expires: Sat, 07 Dec 2019 18:55:52 GMT
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Content-Encoding: gzip
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Cache-Control: public,max-age=31536000,immutable
Content-MD5: dl9rGkb7eePhAQOzoDba+w==
X-FB-Debug: LVn74VRIQjcvsFxJ8zSMbkbFL2eKQ4NzHfooOtF8iy8SDULWP/DdGqinI5BHe+CoxGrpczxqD9nIuyFZZHTxsg==
Date: Mon, 10 Dec 2018 13:16:46 GMT
Connection: keep-alive
Content-Length: 10342


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   10342
Md5:    765f6b1a46fb79e3e10103b3a036dafb
Sha1:   75939c7570f5f1a4952991f201951e98ca8c1033
Sha256: 7f62bde3de93ea8e0273a30e24a7e924ac3bf4feb931650c8798ce39439c82be
                                        
                                            GET /rsrc.php/v3/yX/r/Kvo5FesWVKX.png HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://static.xx.fbcdn.net/rsrc.php/v3/yc/l/0,cross/goZOoFtquE3.css

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Allow-Credentials: true
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Expires: Tue, 03 Dec 2019 21:48:36 GMT
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Content-MD5: zLXyst1HOZzsE8I5PJ2sIg==
Cache-Control: public,max-age=31536000,immutable
X-FB-Debug: 23f+Jdy151p+Iqi2zAJbScWvOUtcPfJ5/Zv5wcuuq80lvsdCBq+lfvmf55tsrRrD4E+67kWdqx4NTHIQXasB1A==
Date: Mon, 10 Dec 2018 13:16:46 GMT
Connection: keep-alive
Content-Length: 19050


--- Additional Info ---
Magic:  PNG image, 25 x 823, 8-bit/color RGBA, non-interlaced
Size:   19050
Md5:    ccb5f2b2dd47399cec13c2393c9dac22
Sha1:   5b9e7c19c7ee5b0c8955eb8b81aa853b038f4923
Sha256: 8f557eaac9fb5f4f5954e62f23dcb962e7175a735a1ba361c4f348dee45efc64
                                        
                                            GET /ga.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.rafist.com/gundem/6nci-arama.html

                                         
                                         172.217.21.174
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Timing-Allow-Origin: *
Date: Mon, 10 Dec 2018 11:50:40 GMT
Expires: Mon, 10 Dec 2018 13:50:40 GMT
Last-Modified: Mon, 05 Nov 2018 21:10:09 GMT
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Server: Golfe2
Content-Length: 17168
Cache-Control: public, max-age=7200
Age: 5166


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   17168
Md5:    01d5892e6e243b52998310c2925b9f3a
Sha1:   58180151b6a6ee4af73583a214b68efb9e8844d4
Sha256: 7e90efb4620a78e8869796d256bcddbde90b853c8c15c5cc116cb11d3d17bc4d
                                        
                                            GET /rsrc.php/v3/y_/r/K4XQ5yRlDcp.js HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/likebox.php?href=http%3A%2F%2Fwww.facebook.com%2Fpages%2FDestegi%2F173214066036266&width=270&colorscheme=light&connections=8&stream=false&header=true&height=290

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Access-Control-Allow-Credentials: true
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Expires: Mon, 09 Dec 2019 12:39:11 GMT
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Content-Encoding: gzip
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Cache-Control: public,max-age=31536000,immutable
Content-MD5: s6BWfoxO9t+ywnCzFcE0Sg==
X-FB-Debug: jTqpKKjxbx+SJl3qNnhQc/bhZKquUs3V8aT5ZfLIlETcySfeeooDXaJgLtuQDWO4itCb4avE1/d2bcqdpqDzPQ==
Date: Mon, 10 Dec 2018 13:16:46 GMT
Connection: keep-alive
Content-Length: 35590


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   35590
Md5:    b3a0567e8c4ef6dfb2c270b315c1344a
Sha1:   1edc712c4010e1e85fc9f8a2004c665b93aaf5d5
Sha256: def90592b759601471ae06fbdd7fc20c9c3a3a9f0bb0bf863500bd6cb995f35e
                                        
                                            GET /r/__utm.gif?utmwv=5.7.2&utms=1&utmn=693460204&utmhn=www.rafist.com&utmcs=UTF-8&utmsr=1176x885&utmvp=1159x754&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=10.0%20r45&utmdt=6%E2%80%B2nc%C4%B1%20Arama%20-%20Rafist%20Genel%20Bilgiler&utmhid=166879054&utmr=-&utmp=%2Fgundem%2F6nci-arama.html&utmht=1544447807029&utmac=UA-5464494-5&utmcc=__utma%3D16126261.114179764.1544447807.1544447807.1544447807.1%3B%2B__utmz%3D16126261.1544447807.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=1141870240&utmredir=1&utmu=qAAAAAAAAAAAAAAAAAAAAAAE~ HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.rafist.com/gundem/6nci-arama.html

                                         
                                         172.217.21.174
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
Date: Mon, 10 Dec 2018 13:16:47 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Server: Golfe2
Content-Length: 35


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            GET /rsrc.php/v3/yd/r/zhr5_YwpbBe.js HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/likebox.php?href=http%3A%2F%2Fwww.facebook.com%2Fpages%2FDestegi%2F173214066036266&width=270&colorscheme=light&connections=8&stream=false&header=true&height=290

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Access-Control-Allow-Credentials: true
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Expires: Sun, 08 Dec 2019 17:15:22 GMT
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Content-Encoding: gzip
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Cache-Control: public,max-age=31536000,immutable
Content-MD5: gbJfaOAvUorylyWQor04jg==
X-FB-Debug: AB48Z1xQjBVEq5s+JY/0miEgFJw00TsURKHC50Uihxur6BIr53ecCNHND1s7S+jD10B8Q3dZVo+QNTbhLO1Bxw==
Date: Mon, 10 Dec 2018 13:16:47 GMT
Connection: keep-alive
Content-Length: 54751


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   54751
Md5:    81b25f68e02f528af2972590a2bd388e
Sha1:   b216c9e61fe1fc414bfe6b17bd7501b2b93296f0
Sha256: 16d76e465af70ee8c0ba963debebc1542636b15fd9132d07da99fc89cdd59884
                                        
                                            GET /pingjs/?k=roa03d91thhu&t=6%E2%80%B2nc%C4%B1%20Arama%20-%20Rafist%20Genel%20Bilgiler&c=s&y=&a=0&d=0&v=22&r=7348 HTTP/1.1 
Host: whos.amung.us
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.rafist.com/gundem/6nci-arama.html

                                         
                                         67.202.94.86
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Date: Mon, 10 Dec 2018 13:16:47 GMT
Transfer-Encoding: chunked
Connection: close
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   50
Md5:    598118d6f3f5be4953d1baf79ca1a8d3
Sha1:   25d5e8a63cc50e13bc88efd12948b2830a134788
Sha256: f93c0ef97b7767394000de71aecd9c54be7998a2adde62acd41b1bf84a849f27
                                        
                                            GET /count.asp?id=1239364 HTTP/1.1 
Host: toplist.sk
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.rafist.com/gundem/6nci-arama.html
Cookie: ui=57564

                                         
                                         88.86.101.4
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Mon, 10 Dec 2018 13:16:47 GMT
Server: Apache/2.4.7 (Ubuntu) mod_fcgid/2.3.9
Pragma: no-cache
Cache-Control: private,no-cache,no-store,must-revalidate,max-age=0
Expires: Thu, 01 Dec 1994 16:00:00 GMT
Set-Cookie: ui=57564; expires=Wed, 09-Jan-2019 13:16:47 GMT; path=/; domain=toplist.sk;
P3P: CP="NON DSP ADM DEV PSD CUSo OUR IND STP PRE NAV UNI"
X-W: 9
Connection: close
Transfer-Encoding: chunked
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload


--- Additional Info ---
Magic:  GIF image data, version 89a, 88 x 31
Size:   746
Md5:    3fc96e1ddda5a6e7332eb0eb46de93f2
Sha1:   82fdc5b146a4eb46ef894434f4a1858010df19e3
Sha256: e8d35974e18a2086ae980242a5ec740633901028b9954ecad2bab4e8dc608372
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: www.rafist.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: sayfa_sayac_okunan=YToyOntpOjA7aToxODY0NjtpOjE7aToxODY0ODt9; __utma=16126261.114179764.1544447807.1544447807.1544447807.1; __utmb=16126261.1.10.1544447807; __utmc=16126261; __utmz=16126261.1544447807.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1

                                         
                                         185.179.27.209
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Cache-Control: public, max-age=604800
Expires: Mon, 17 Dec 2018 13:16:47 GMT
Last-Modified: Mon, 23 Apr 2012 07:54:32 GMT
Content-Length: 7718
Date: Mon, 10 Dec 2018 13:16:47 GMT
Server: LiteSpeed
Connection: Keep-Alive


--- Additional Info ---
Magic:  MS Windows icon resource - 4 icons, 16x16, 16-colors
Size:   7718
Md5:    d5077c853260a958e23f06230e879c5f
Sha1:   551b42834b7cd8c9eee72bbd711ebe3ba9f75858
Sha256: 6bf61aea7b3841dad720f2316284de854885543c21860083881a4a884005f2fe
                                        
                                            GET /advEngine.aspx?accountID=11b42608-fd1b-40a8-a59d-bf1da3bfe64e&categoryID=25&sizeID=8 HTTP/1.1 
Host: ad.hepsiburada.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.rafist.com/gundem/6nci-arama.html

                                         
                                         0.0.0.0
                                        


--- Additional Info ---
                                        
                                            GET /gundem/dunyanin-en-yuksek-binasi-torenle-acildi.html HTTP/1.1 
Host: www.rafist.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.rafist.com/gundem/6nci-arama.html
X-Moz: prefetch
Cookie: sayfa_sayac_okunan=YToxOntpOjA7aToxODY0Njt9; __utma=16126261.114179764.1544447807.1544447807.1544447807.1; __utmb=16126261.1.10.1544447807; __utmc=16126261; __utmz=16126261.1544447807.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1

                                         
                                         185.179.27.209
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
X-Pingback: http://www.rafist.com/xmlrpc.php
Set-Cookie: sayfa_sayac_okunan=YToyOntpOjA7aToxODY0NjtpOjE7aToxODY0ODt9; path=/
Link: <http://www.rafist.com/?p=18648>; rel=shortlink
Transfer-Encoding: chunked
Content-Encoding: gzip
Vary: Accept-Encoding
Date: Mon, 10 Dec 2018 13:16:46 GMT
Server: LiteSpeed
Connection: close


--- Additional Info ---

Alerts:
  Blacklists:
    - fortinet: Malware