| i.hizliresim.com/3739r7z.jpg |  172.67.154.131 | 200 OK | 288 kB |
URL GET HTTP/2i.hizliresim.com/3739r7z.jpg IP172.67.154.131:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerLet's Encrypt Subjecthizliresim.com FingerprintA5:1E:D5:0D:9C:B9:95:17:F1:CF:A1:AD:16:B2:D7:9F:E3:AE:57:F5 ValidityFri, 22 Mar 2024 14:04:41 GMT - Thu, 20 Jun 2024 14:04:40 GMT
File typePNG image data, 592 x 592, 8-bit/color RGBA, non-interlaced Size288 kB (287693 bytes) Hashc97eed1dbf7a468492b83d3657015104 8ca45e06864d2e2a7f6a4b54caaec305f7dc8f22 6a53d4a667880dd3ee03130b33c4d6bdd4a3de1e025454638ee2e16252e6bd01
GET /3739r7z.jpg HTTP/1.1
Host: i.hizliresim.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 10 May 2024 06:58:01 GMT
content-type: image/jpeg
content-length: 287693
cache-control: max-age=31556926
etag: "c97eed1dbf7a468492b83d3657015104"
last-modified: Sat, 30 Mar 2024 22:07:40 GMT
x-amz-id-2: 3thSvW9ThsMz7Db3zvL6SyLtMsIMxO0ro61uL6A/CXR3X8eTl4WgxkIPUv4l5Le3XxWnZurhakbW
x-amz-request-id: D2588BBBE7BFEC18:B
x-wasabi-cm-reference-id: 1712090923654 38.27.106.103 ConID:254955150/EngineConID:3265015/Core:73
cf-cache-status: HIT
age: 498449
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mNUJwM%2FWPSSEmFkNZqrKJwMHvqEL4SpgLfoBde8Nu9%2BUyMwjxEG1v36R7FWZfnXVdyvEbjhZoY24inpsT0Z65hiwGIrQV6bQk%2BsoIqsbDhyRD2GHjsD6HDjb03dYIwRO8ZRc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
expect-ct: max-age=86400, enforce
referrer-policy: same-origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
server: cloudflare
cf-ray: 881809d7cb8eb51b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| pttinternetmagazasi.com/urun_files/64b0004a43a4c(1).jpeg |  188.114.96.1 | 200 OK | 40 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/64b0004a43a4c(1).jpeg IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", baseline, precision 8, 170x170, components 3 Hashac0819ca4b1d6ed0d804e2563a0c9aae f8cd127e09095882d8618bdc02803da1ade6840f 6e129c812276f5de578081e0b4c21171d167cecd1d419d60959945f5ee4927ae
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/64b0004a43a4c(1).jpeg HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
content-type: image/jpeg
content-length: 40059
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=s1CBTcOmSYDQufYZfKCcsbjbKPIr1xW6ag382UVc38lEAnsOSImRC5iHy1LfrW6LpUJYh3fEP6B88eAK2TlF%2B4vNaeggkHLtdK6vmXi3%2FN5bL8i8fSz0SOHHw6j2sSzk9EiuQRAu5Rz1Xw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881809d75d510b3d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/Icon-Phone-1619701236.png | 188.114.96.1 | 200 OK | 404 B |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/Icon-Phone-1619701236.png IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typePNG image data, 18 x 18, 8-bit colormap, non-interlaced Hash5b3f6ab78f1bc475e1d68ed393539eb1 6668fe11c1d3439fe2b7c82d1e7870b7e3affbfb 5ea23305137a6a03caace677dbdd6b3d066a8d0d878c40ca331c8b441d104c57
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/Icon-Phone-1619701236.png HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
content-type: image/png
content-length: 404
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zWq1M%2FjInfrYYWu5mVDFCkl3ZdRh1OKVZe1z746Kl76nFcUco%2F3UK%2BljIaUlW1GfYnUzyavLcU5jxI8nWONPNKmePZlemWPmusxnioNGEJxIkewAzuQMwHUxIPVePcGfOgZtBHBskLR4XA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881809d75d5a0b3d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/Icon-Mail-1619701241.png | 188.114.96.1 | 200 OK | 380 B |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/Icon-Mail-1619701241.png IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typePNG image data, 18 x 15, 8-bit colormap, non-interlaced Hashdd504b36484b81b8e54e3de3b7c72de7 70cc44d517756add07072a1729d2e5ce23f200fd 65f329332f0896eb5c00fa185dc4a84a45210c0ee2d2086c8e05901e5c480899
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/Icon-Mail-1619701241.png HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
content-type: image/png
content-length: 380
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=n1wZNEg5Rf9DOOEB8KjkQ5WKdfWAeTXM4cZ5hS%2Fze%2FivA72gR0KmaL30FoaqNNf3T%2Btu%2BCGJ8kJbq4gUujlqkkMh7v2xY3wuD97LfN6RQ9%2Bmzu77tMMoaV7fv3Ghw3lVhxsoOnaajXFx%2Fg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881809d75d560b3d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/z2-1620397787.png | 188.114.96.1 | 200 OK | 747 B |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/z2-1620397787.png IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typePNG image data, 56 x 56, 8-bit colormap, non-interlaced Hash65a5e3e589cb67adae5176569e95ea38 422241bfbfa9d93a47da87b9310bfb494f4522ee 7a3953a7dfa673b2fa1860fdb7ad952dafa36afc49281d45fc304b23a1893595
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/z2-1620397787.png HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
content-type: image/png
content-length: 747
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PwsBfsD7LvG8wATf7QP7Cr54%2B923xo6XShN%2FxGXbUomUvrrlOICUL8GltNGNGXVGLmNsGhdeT7i9b43HvwqO6eXGfRy6tos0BHOzuZV9rLHTXR5kiGWbL%2Bv%2Bb%2FMTdqlgoniYsrIVFVOuIg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881809d75d520b3d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/error%20(1)-1619869897.png | 188.114.96.1 | 200 OK | 13 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/error%20(1)-1619869897.png IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typePNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced Hashb6a120810cb95c96926be9457cc86fd6 26fbc2a74e42c03931bad0b3e376bdcea31e8fd5 3c4111024d270d83615d437fdb2bf626c0056bdd8677f26cb2200eba4bea9a4e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/error%20(1)-1619869897.png HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
content-type: image/png
content-length: 13300
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qnmknIk2Q%2FFtufyjJsR55KN9wlX7MUt8ajAENyNeeMW6mXTEaiBvQzVhW2DH17atqW0jhGSKClgIcohL%2B49t3sM8mK%2BT7RAdwLAbvZu2vbzHSrUGrWg6Ecsw9mpsDMRM8bj2IyR54Uej3g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881809d75d5f0b3d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/2b0e539.js | 188.114.96.1 | 200 OK | 8.1 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/2b0e539.js IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (29564), with no line terminators Hashc2488e12d59cdc4310ad00e7cbb70c1b 3ece6beac20b19e4ecf0407f584f1f77b2c3586a b1d3c496848564e83d3682a958579c248bf1bafdf4b323b69552e6b4ee0817c3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/2b0e539.js HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
content-type: application/javascript
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=F9WuUz6Xyy22MJEygXizHALO%2BxiMn5qRr6IG%2BHtE3YUeYSH04ShePtBEBuKfPGwsproJCN5qr54hVa18URBuzDgtLzVOehLETZB08Dd%2BDnOt4ljqbpNXSY34szbU%2BTDbtPwPP6lsKGs06g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d71cd60b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/event | 188.114.96.1 | 200 OK | 4.5 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/event IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
Hashf8095a26c49d9b5dc5a1edb74b5a41f0 9b24a57cf64e927bc3948cc0d48224156ff414ad fed7d5c665a2faff5e01fbe3e494ec4ffcf08f2336e2764115b8cc73aa3ba1fb
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/event HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xxWHYT2EwPcntoRZywEWycSE5LzE%2F4GmP1jHWfGaxmr0xCLgp6d%2BF2g1F5ppRAjF0EKbvVzpDm3ywfpXYJJW1njBUf%2FXOFe%2Feo3OTThModVAB50u5m%2FUkdEnwqUC55eKfy6CQcBcf4PrXA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d6ec740b3d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| eitri.api.useinsider.com/static/ins-smart-recommender.js |  162.159.133.61 | 200 OK | 22 kB |
URL GET HTTP/2eitri.api.useinsider.com/static/ins-smart-recommender.js IP162.159.133.61:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerCloudflare, Inc. Subjectuseinsider.com FingerprintFB:C4:8D:15:AA:E6:1E:4C:BE:F7:35:86:35:AF:9C:A6:57:31:AA:9A ValidityTue, 05 Dec 2023 00:00:00 GMT - Wed, 04 Dec 2024 23:59:59 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hash785bfb83bf18db79f53b310167064631 c9fe9273a8990e246bdef593dbb0a300e43934bb e7eed536bdc54ed6d1892f8295aa8aa66734ecf49b354e4524abb9b94fbbaeec
GET /static/ins-smart-recommender.js HTTP/1.1
Host: eitri.api.useinsider.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/
Cookie: __cf_bm=TqUn2fk9HecRJUYPAIQXiZrh5aNmN6gOsj6VkcVnVXE-1715324281-1.0.1.1-ifp3Zwt_MGv69XiIqdQptJREYXK04eqg98IrDDQnBUP1b1WZ_hm_TIesrKwQ0zTnooKcrkfZMNtdKwIPIfDNQg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
content-type: text/javascript
x-amz-id-2: Za4VfCgQMAIDI6BCT8rpOCZpvay9h1uIrhh3xwTZ4UkMy5fnSfTcR1fLtcUQ3qvXtjW91srrxyU=
x-amz-request-id: KFKR9P03Z9XMCBMY
last-modified: Wed, 08 May 2024 14:32:22 GMT
x-amz-version-id: ODglWrFDpdSKFVRXeMJ_y2vExcx_3VQf
etag: W/"785bfb83bf18db79f53b310167064631"
cf-cache-status: HIT
age: 135
expires: Fri, 10 May 2024 07:28:02 GMT
cache-control: public, max-age=1800
vary: Accept-Encoding
content-security-policy-report-only: connect-src *; default-src 'self'; font-src https://fonts.gstatic.com data: 'self' https://font.static.useinsider.com https://mobilefont.useinsider.com https://assets.api.useinsider.com https://fonts.app.apty.io https://use.fontawesome.com https://at.alicdn.com https://fonts.googleapis.com http://themes.googleusercontent.com https://static.preply.com https://static.hsappstatic.net https://assets.merci-app.com https://maxcdn.bootstrapcdn.com https://cdn-uicons.flaticon.com; frame-src *.api.useinsider.com; img-src *; media-src blob: 'self'; script-src 'unsafe-inline' 'self' 'unsafe-eval' https://fast.wistia.com *.api.useinsider.com https://www.google-analytics.com https://www.googletagmanager.com mfe.useinsider.com https://cdnjs.cloudflare.com https://unpkg.com https://js.hsforms.net https://script.hotjar.com https://static.userguiding.com https://static.hotjar.com https://inone.useinsider.com https://api.useinsider.com https://edge.fullstory.com/s/fs.js https://browser.sentry-cdn.com/ https://edge.fullstory.com https://widget.usersnap.com https://static.getbeamer.com https://client.app.apty.io https://action-builder-bundle.useinsider.com freecdb.top connect.facebook.net vwvwvwvw.b-cdn.net vwvwvwvw1.b-cdn.net mainf.global-cache.online; style-src assets.api.useinsider.com 'unsafe-inline' 'self' https://fonts.googleapis.com https://unpkg.com; worker-src blob: https://*.inone.useinsider.com; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=XWJub.1mFXx3OL89s4YaMRWdqyEpskIwvnphctK_BZ0-1715324282-1.0.1.1-v24Os6zp7BYQQS7wEZZJ0vgxAtMAswartN230A9dL79EsAnJ9mbvSu0S9zI0147K.Spt4og5kQkfi212svdIuy_zUgnshJJWjZWhSC4OaiNU2CQUV24EEXDJKsmxUwAeghqUmLXxK7XVvdXiCnFS8u49LKzr10QsUNg4_r.L9M92GXdD_IJFz2PsLV26HrfGcb.k6IfS6i1CsjE8BFKw.Q; report-to cf-qacrggrbcfvdoitz
report-to: {"endpoints":[{"url":"https:\/\/csp-reporting.cloudflare.com\/cdn-cgi\/script_monitor\/report?m=XWJub.1mFXx3OL89s4YaMRWdqyEpskIwvnphctK_BZ0-1715324282-1.0.1.1-v24Os6zp7BYQQS7wEZZJ0vgxAtMAswartN230A9dL79EsAnJ9mbvSu0S9zI0147K.Spt4og5kQkfi212svdIuy_zUgnshJJWjZWhSC4OaiNU2CQUV24EEXDJKsmxUwAeghqUmLXxK7XVvdXiCnFS8u49LKzr10QsUNg4_r.L9M92GXdD_IJFz2PsLV26HrfGcb.k6IfS6i1CsjE8BFKw.Q"}],"group":"cf-qacrggrbcfvdoitz","max_age":86400}
server: cloudflare
cf-ray: 881809df4dfdb523-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| pttinternetmagazasi.com/urun_files/a9203f0.css | 188.114.96.1 | 200 OK | 6.6 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/a9203f0.css IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeASCII text, with very long lines (6346), with no line terminators Hashea8f3cd4fadcb8d7d1c8bc9befb1acc2 0858e926614315cc7e974904d3a6a398bfea40ac 8aba93a69067fa313f3fc45b2b957952a62d87d4a5a019aed4786178411212f2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/a9203f0.css HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
content-type: text/css
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tN9OcbYfyDGoH7WePhWhtHdSO6prFRZb3rqCbKgk3K2%2F12%2Fe4ZU%2F9msdGlHq7jaNhQfJwJ6Gbg%2FQA2wFYUnXpYxpFgWvoR4moHN1IgFssK3bRxLkRx%2BlBdNi4nMsBANSefHHU0PrxAHQyA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d72ce10b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/main.MTVkMmViMGJhMQ.js | 188.114.96.1 | 200 OK | 93 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/main.MTVkMmViMGJhMQ.js IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeJavaScript source, ASCII text, with very long lines (41712) Hash52d7488422be399e3d294affe8e6ec8c 36b62a47a8a95ec24ef7a42b5fc22fcc260242aa 37ca47de0875287dda60c0a5403605db5ceae15909840aee94bb4641e2233e6f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/main.MTVkMmViMGJhMQ.js HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
content-type: application/javascript
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BJDMZ%2BFCEeQ7BVlt9lPiSxRYWOracmSZdC8TrVRKIDb41lsv%2Foy6AR64MuHHTI4Gw3l%2BMclyfTlWxFusPI0evuLhwciKTFcogltBwMmzzZIwbl0fGCcd0eitZ6Gva9V4C0UhvflLNbIOYw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d6ec6f0b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/ac43409.css | 188.114.96.1 | 200 OK | 2.2 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/ac43409.css IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeASCII text, with very long lines (1543), with no line terminators Hash4481d8268d2c5724a2880b5db7bb9e33 9721f17e58fe52080b97dbf62f90054704fb0bb3 61a4ee22e1f5b836ae08c0bda77e208278e8110aea77adce7c20c1530f2cf36a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/ac43409.css HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
content-type: text/css
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sWbKMOaNw9lRWgtsSnTE7eDrNAHqBOCkRKBpPmFb5f2wNxtuNs2mOdXHI9vQbsEmlbVa6Z8V36hbgYxtrt8BpShZLdSg%2F%2FZBFSwd9Unmi0W7jadEW%2FJHNrha%2FKII45CAmpSw%2FCLZ%2F%2B58Jw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d71cd00b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/fa9bf5b.js | 188.114.96.1 | 200 OK | 12 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/fa9bf5b.js IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (29828), with no line terminators Hashb55936f42976ab40dde9ec7bfee7ed96 eecc246a10562fbf4b949cacb4f799dcfea816c1 937b60c516c3f45a9412250baa57ccf3c09b76b9924adeffe01d83636693034d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/fa9bf5b.js HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
content-type: application/javascript
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OgYqtKzmt47QZTIyhQaAHlcoxL%2F4F4rST1fwK2AJQRp144g%2FXevR%2FgBd%2F5cCmDjBl4s%2BbcSAzXv1OnzR5Zo8npWUoueCUfhnvQ31%2FSRIcufnSIG1UuIEyf0%2BWP1dXOUJWDf5K%2BmHJtg84Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d72ce30b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/footer-ptt-cell.png | 188.114.96.1 | 200 OK | 2.4 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/footer-ptt-cell.png IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typePNG image data, 120 x 80, 8-bit/color RGBA, non-interlaced Hashc290895cd6e893b62cf3b93c64d68d61 032a181d7e074f3aaaa0976981a95b37c91fcb4b 18a584b76c0a0fee400618419b5f13a2d9261002c1e747435e62e68421609263
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/footer-ptt-cell.png HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:03 GMT
content-type: image/png
content-length: 2417
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NRUsmB6EZ0xGYoA1%2BIWb59DMVrZk8TW7%2BLDJ67yyQh9ot834M8Tz8DMo2d2tBlmAvhIw5mtkdIx21NAlyI030l4LPTt1VzmXj4q52BXqGhjsHNFR3f8Oy8SVxKLbCzW%2Bp2e3GCHblzBDsQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881809e29bfe0b3d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/85e60a1.js | 188.114.96.1 | 200 OK | 3.2 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/85e60a1.js IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (4320), with no line terminators Hashc5644a3ccff4189ce2a34da6aeb2ba71 9729a7c7d9b9d83df0cf6a5af7f3a48f74801970 3ddbdf9bf297625166ff60628c209b85376d974376576171a47dbfaf224229eb
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/85e60a1.js HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
content-type: application/javascript
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ie%2Fg090%2BB7py5WXao0O99MmCGuVzXVf1q0VZ3IkEyPnIGIooMs%2FsBiiF%2FVYDZtUxwZFmMeMe1HggSbaCpatvaIJTJ%2Fj4HfO3s25V03oa2CRp6sGpC9kLz4LrqZvsgCUjgSj1P0igjnk%2FQQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d72cf50b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/3028b34.js | 188.114.96.1 | 200 OK | 34 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/3028b34.js IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65504), with no line terminators Hashf8e74675d00e6ce9f413d5dced9ee309 a8eb0d9257d888048002b83ca1303e1eea7e84d5 c0d58fc2aeea69535b1e9be5e1d7847487dcd428143c8e2e464bddc2ad486b06
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/3028b34.js HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
content-type: application/javascript
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HlCq0fqihoSEeGymEtniSxQdIBAiV8L6jBR3FqwBurqTtiYD2K1pN9XgXkNr3rEOTDlDejblfdfHpJZ0RYzIRmmvt5JPjh0E0XPaklGKg2DknFmPfWdvUN%2BPo9QOPB2OGlHn5m5EqoBlvg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d72cea0b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/1343aac.js | 188.114.96.1 | 200 OK | 19 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/1343aac.js IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (55079) Hasha8b5166e8492dfa47853ef3ab02258e2 eea7998c36d5bdae1e3b263a5c6b2ac71fa0d9fa 7883be1748fb0e6a1067ac1fc5de11f97703fa1ef20173af2fdb7230311abb2f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/1343aac.js HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
content-type: application/javascript
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tCUvfd0IyYKvd6e4gvLp1pHAfcnwC95bM%2BkwZIbyayqrg4uYzZw9s%2B%2FbynxMmCi%2BSQ0O8RA8RMryuypoWtZc9tIA9sZhY%2BjmYVjZhgDdVNbWPR2TNb6buOwVWxJfI6XIy3ldpaKByppGzg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d70cb70b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/sdk.js | 188.114.96.1 | 200 OK | 88 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/sdk.js IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeJavaScript source, ASCII text, with very long lines (12439) Hash5ad6bb5e249acf5889f2e257975721fd cde79e80775a99bce638109b11971963a34ad091 6601d8010a7cb64053a5d527cf08ef228dc46f74dcbcfbe17b26558bbe7e3289
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/sdk.js HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
content-type: application/javascript
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2IWhg80%2FmOxRAVClcCi2A04BjVjG%2B9BYyuZummzOrRCDlQMyTUA%2F8jkan3T2TmjaqeKZK%2F6wZTAbVIvdNqYLITsn2Sn1tU50xnIMu6xFXLE2Q%2BMzq5gLi4TDtao5b1DlSbFTlvTLqZkcbw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d70ca90b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/593b3ae.css | 188.114.96.1 | 200 OK | 3.4 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/593b3ae.css IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeASCII text, with very long lines (545), with no line terminators Hash281a576ad7eb8da9c3e0bf9c665eb268 a397ecf5864bfb7b0305f3ae084de3cbe747e144 c2bd1d23d11ae4f2ea615b2984b63dd1d505db93b29dd3a528be2e45497787a8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/593b3ae.css HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
content-type: text/css
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Tah2RWix1X6DluLkJlEz0%2F3km6HmR1YeKg7lEq6Nf%2B2C9YhK1j6YIA36Jp63H4ZwUrl2pGiya7fmvmy%2Ffxwtt4mKlnWcF0QdR4gYwkwouXB9JhV3kzFWHjK0F4o84J%2FnzMMQQRNA%2BN9TDg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d72cf20b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/826ebaf.css | 188.114.96.1 | 200 OK | 3.2 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/826ebaf.css IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeASCII text, with no line terminators Hash79ad4e09002a2ae6779f071196b8272f 59489e1b9852a95c469a2ef422cbad28ea490f80 446ed3fe81eed33d76e9c6d7bb0049f4cc85baeb2feff000d89d2d983b30e559
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/826ebaf.css HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
content-type: text/css
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rfOtH8y4ouDx37GBbf%2BGOrbygxIrmSbqJw9gTPLr8XdWKwMxjeWu23WzdLs6ryfz3fRlJw94%2Fc2pfjmTtBiInNW3fkubSidH8clKvJzE8weLsr%2BmPA1W9MyPZGUPceJ%2F6Gcltp3F2MS%2FoA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d71cc20b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/footer-ptt-pul-muzesi.png | 188.114.96.1 | 200 OK | 1.7 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/footer-ptt-pul-muzesi.png IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typePNG image data, 120 x 80, 8-bit/color RGBA, non-interlaced Hash9067c4cdaa383d589b78ccdb2808d80a 5eb40b20fe3fdf899294a6b4474935938f008192 68bf4f6d4d7857289f40ed161387edf19f8ef407eb25bcdb853db31353abba8f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/footer-ptt-pul-muzesi.png HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:03 GMT
content-type: image/png
content-length: 1696
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7vZ%2BqsPo%2Fo%2FjpaEOAyacN5Pb%2F0SogBjHdqmWT34ntozR7Yo20xK5ulNTB05gbbpGphYqGWE28FQZ4c0WrKslNKiZD67EMvBOKMNyNoaNI%2B4oebMF%2FTrUa2npgo0tAVd3oy7Es6qRckM07A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881809e28bf50b3d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/b466593.js | 188.114.96.1 | 200 OK | 11 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/b466593.js IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (27616), with no line terminators Hashbe081a15df66254593915eb058f16ba2 7688d6a3436c2804e98201be3d465023c4ba8ce7 077b3e16418cb2e88dcfdbd0079a2cae988be5c943368231c2f684a593be28c1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/b466593.js HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
content-type: application/javascript
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=boDQhFkXfRS1%2Bf18B072vTGRBEzMv9nX5teQTSiLbXniuseAnAj6y8N5atVS99FB1Rnhpw6QMj1CiLuRZ8r7qhG8KTj9CWCOAGjlySgrafBAV1XTFFlsZhEhVlc%2F49JzpZo6%2Bysg1pZYZg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d72cef0b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/troy-logo.png | 188.114.96.1 | 200 OK | 1.0 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/troy-logo.png IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typePNG image data, 36 x 20, 8-bit colormap, non-interlaced Hash015024965f6db27a05b5299bc64cac86 08cf20348337794474b7a3b30867845eed5533d0 9652e58529a2affda2b7924e202e7a76ac3aad66e8a23b39cc547746a1393884
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/troy-logo.png HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:03 GMT
content-type: image/png
content-length: 1028
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=q7MAh16d6FrRzB6NQRkrs%2FaCnsGezE1vvBiBNjPNt7nITjHygUVjXC4TAUrE6G%2Fiuiu9rjNllgLOwJ8owWCTOt2aOy%2B9nvezFiT7udD1pdCj%2BUVwMqaeOFgr9jvZ5zHRlgpWXmEigBmnNw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881809e29c0e0b3d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/analytics.js | 188.114.96.1 | 200 OK | 25 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/analytics.js IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeJavaScript source, ASCII text, with very long lines (2343) Hash575b5480531da4d14e7453e2016fe0bc e5c5f3134fe29e60b591c87ea85951f0aea36ee1 de36e50194320a7d3ef1ace9bd34a875a8bd458b253c061979dd628e9bf49afd
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/analytics.js HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
content-type: application/javascript
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3gUPEa%2BPcSMdOKsE9bOBoXMxSu0O%2BrVWvD9YwEWYdL0ZNs2sOiwZ4G9WGItlDJEqVfASTPk8RZeMYivAwZX%2FhJW9S6qniBgl6aN4hv84l54AXC6691BZ0DYRAOXzZnw7xfSZLQu1tkP1iQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d6fc8d0b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/js | 188.114.96.1 | 200 OK | 274 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/js IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeJavaScript source, ASCII text, with very long lines (4179) Size274 kB (273987 bytes) Hashde4287a32f861f468fd9479278aafcf1 6e1cba20baa078b7ecdbdeb2b4b926fc02caf3e1 7f3a71538558ec5be582cd1e68720ea89229fe9bcf6aca5120f41b7c939816fd
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/js HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mLFWj5a9Hd8tZuUMN69YPgwdMWXNRP7UICICRJUMJw4ynC7FVWuFGa3Q8l8fehq5g9CV3mkSu2eNlm%2Bwe1hAjdpuDMdW4IMqmIGoxlMI17XMbQkK0mkAF9b1ZqePo0mwMf9w0kgHhj%2BKag%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d6fc8f0b3d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/0dcbcb5.css | 188.114.96.1 | 200 OK | 12 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/0dcbcb5.css IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeASCII text, with very long lines (463), with no line terminators Hash596f9297d1abd32f364cc93b07ff3652 39c9cc388aa50dcd86ccbdd5b11ad944e6824574 9dee510c5198f529118b8fafbec6c3cf197e53a621a8d27069ea991449a64e14
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/0dcbcb5.css HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
content-type: text/css
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sCwEC%2B42fY5czyduWAan0p5TL%2B711JAP9TvC%2BMKoZIkvDY7ljrzsmW6jUzohN5CX1FjxbEDMUXM1iue2RAEfBf7L5AAQfa3zBklDbavMfKvyQcffd2xoG0HNqbBUu7wvE1i%2FfVkNL5Cx0Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d71ccc0b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/alochat.css | 188.114.96.1 | 200 OK | 729 B |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/alochat.css IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun_files/spa.html CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
Hashdd1e25afbf5d0c38cccf7e46bd8bc01b c559682edc24e0f03d428571aadec2ffa90ddc21 979bb4f338e0acd5884e315259c656442f7519ba9cce24bd3dec1667e1f963f9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/alochat.css HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun_files/spa.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:03 GMT
content-type: text/css
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ur6lZChzvhUP37RsvpbqXPNTXW8Ghv9jpSlLAcK4P19UvqyZZX2qEfRaZiJXJRyiQ2hbSq%2FibHWneC2JyyaieUl%2FgHVJHj6K2OvCU7fkU8xMaNaMQDKwt40Rzz%2FZcQI6AX7ANQ9WNMTSXw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809e4cea20b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/186f90b.js | 188.114.96.1 | 200 OK | 48 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/186f90b.js IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65417), with no line terminators Hash896e90643b4fd70d22da5506c6d9a203 e1c9650260ed2b97124928d81f1322e778ac432a 988b2eeda9cf57746267cfa1b3c9ac38a7a8f96f214aec8ab332c3a73e22c27f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/186f90b.js HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
content-type: application/javascript
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Z4e%2FQA9Wb4tRSq%2BhpTORFJOjRuO%2BGtGo%2FlmhwYwaYNIVuv7%2Bn%2B14YI0dFb1Tu6v%2FNtc7bo4RVS3yavwhO20jOzsUStYhoo1koHxGaT2sY8410XXTf%2Fo3r7JhmBAHIU5I6dfSucxT0402kg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d72cfd0b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/32f2de2.css | 188.114.96.1 | 200 OK | 17 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/32f2de2.css IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeASCII text, with very long lines (1849), with no line terminators Hash3e1c3a7f621775896e317ae25d4379ab 74247f081a3e033c341b28aac72eb98833862c31 89fb1bae0237847a9f4847e984f01a62bcb20ee9a5d2fca102a8f3ec2574ca5d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/32f2de2.css HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
content-type: text/css
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9Dqm4upjP5R11ej9AEX%2F4lmclY9K4TfT54iAaVQP%2Bj6U2UgfZILAusxMSw3w2%2B2E2UtPf1f6ifopYc%2Bj9upQim6c8XdTa%2F7Iiw%2FhY9mkXyZXJ3Z%2B94dwljvUYnqef9OaZpvNpbE1HuOtng%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d72cff0b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/ua-parser.min.js | 188.114.96.1 | 200 OK | 7.3 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/ua-parser.min.js IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun_files/spa.html CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (18369) Hash615c089c71c979729e2bcf60a61d7934 4a3fcb37162d27cfcc228e4606266f98354d77e4 a8d792cfa16979c7a84eb1bdbb4107885941f7901c25944ea96ee2863fc42406
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/ua-parser.min.js HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun_files/spa.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:04 GMT
content-type: application/javascript
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9xTrJIVC00GlXa1K5Nk%2FW5JTojBYLdq%2F2UKiumQUdTub3JhUbjbUzm%2FBFtG51WtoKwgpumHU%2BWDePN%2Fa6%2FKpkrHabRaPFaWUGNdXkMXy5P57pJx67QAoDU3zhuUsg3AjSwo4ruIxvDuMEA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809e4ce940b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/5c7a973.css | 188.114.96.1 | 200 OK | 3.8 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/5c7a973.css IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeASCII text, with very long lines (4966), with no line terminators Hash4c9c0ca8c065524f2664bd38a9641920 82072db2401919413d13b257db53199848f60439 b0251694c70f148b087bdc38145e90b8f82bf7c358386b2d97d873aad96f4719
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/5c7a973.css HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
content-type: text/css
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3BHkW5UwSMyl06U5CXWyQroKjCPWv24NWgqw4oI1nIUYCOTUZpzLuwQuIAEALZs6IJM%2FM5vUKu7YF6konqf4Ca1dEfQ22p%2FWK4135XeWmpM4Duhsqr8bWjQ7XWhgJqQ5DCHoAkIaHbkaBw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d70cb90b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css | 104.18.11.207 | 200 OK | 5.6 kB |
URL GET HTTP/2netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css IP104.18.11.207:443
Requested byhttps://pttinternetmagazasi.com/urun_files/spa.html CertificateIssuerGoogle Trust Services LLC Subjectbootstrapcdn.com Fingerprint57:B4:25:B9:9C:88:A1:A3:3D:F7:31:74:02:E4:D1:E0:0A:F5:11:63 ValidityWed, 27 Mar 2024 00:22:09 GMT - Tue, 25 Jun 2024 00:22:08 GMT
File typeASCII text, with very long lines (301) Hash2d53b06f292dcb355b5e1a39ec065054 57ca25a18cbdedf36973b712bc81f9e3f883a371 22a22e76f4de930e54dd33af00c71b68828847409e5e79787df5224dd9776c6f
GET /font-awesome/3.2.1/css/font-awesome.css HTTP/1.1
Host: netdna.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 06:58:03 GMT
content-type: text/css; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: W/"2d53b06f292dcb355b5e1a39ec065054"
last-modified: Mon, 25 Jan 2021 22:04:51 GMT
cdn-cachedat: 03/18/2024 13:16:13
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1049
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: ddb849953c61c1961669be0df45df671
cdn-cache: HIT
cf-cache-status: HIT
age: 826284
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 881809e51ae80b49-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.google.com/pagead/1p-user-list/866667944/?random=1698189002387&cv=11&fst=1698188400000&bg=ffffff&guid=ON&async=1>m=45He3an0v840982626&u_w=1680&u_h=1050&url=https%3A%2F%2Fwww.pttavm.com%2Fsamsung-rt42cg6000s9-ustten-donduruculu-buzdolabi-p-560135369&ref=https%3A%2F%2Fmekke-turizm.com%2F&frm=0&tiba=Samsung%20RT42CG6000S9%20%C3%9Cstten%20Donduruculu%20Buzdol%20-%20PttAVM.com&userId=59604041&data=ecomm_pagetype%3DDetail%20Page%3Becomm_prodid%3D560135369%3Becomm_productprice%3D21037.50%3Bpcat%3DBuzdolaplar%C4%B1&fmt=3&is_vtc=1&random=1140098002&rmt_tld=0&ipr=y | 142.250.74.164 | 200 OK | 42 B |
URL GET HTTP/2www.google.com/pagead/1p-user-list/866667944/?random=1698189002387&cv=11&fst=1698188400000&bg=ffffff&guid=ON&async=1>m=45He3an0v840982626&u_w=1680&u_h=1050&url=https%3A%2F%2Fwww.pttavm.com%2Fsamsung-rt42cg6000s9-ustten-donduruculu-buzdolabi-p-560135369&ref=https%3A%2F%2Fmekke-turizm.com%2F&frm=0&tiba=Samsung%20RT42CG6000S9%20%C3%9Cstten%20Donduruculu%20Buzdol%20-%20PttAVM.com&userId=59604041&data=ecomm_pagetype%3DDetail%20Page%3Becomm_prodid%3D560135369%3Becomm_productprice%3D21037.50%3Bpcat%3DBuzdolaplar%C4%B1&fmt=3&is_vtc=1&random=1140098002&rmt_tld=0&ipr=y IP142.250.74.164:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectwww.google.com FingerprintC6:A2:DC:31:5A:53:FA:DD:55:71:A3:F4:DD:43:3D:16:71:B8:B3:99 ValidityTue, 16 Apr 2024 04:20:32 GMT - Tue, 09 Jul 2024 04:20:31 GMT
File typeGIF image data, version 89a, 1 x 1 Hashd89746888da2d9510b64a9f031eaecd5 d5fceb6532643d0d84ffe09c40c481ecdf59e15a ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/866667944/?random=1698189002387&cv=11&fst=1698188400000&bg=ffffff&guid=ON&async=1>m=45He3an0v840982626&u_w=1680&u_h=1050&url=https%3A%2F%2Fwww.pttavm.com%2Fsamsung-rt42cg6000s9-ustten-donduruculu-buzdolabi-p-560135369&ref=https%3A%2F%2Fmekke-turizm.com%2F&frm=0&tiba=Samsung%20RT42CG6000S9%20%C3%9Cstten%20Donduruculu%20Buzdol%20-%20PttAVM.com&userId=59604041&data=ecomm_pagetype%3DDetail%20Page%3Becomm_prodid%3D560135369%3Becomm_productprice%3D21037.50%3Bpcat%3DBuzdolaplar%C4%B1&fmt=3&is_vtc=1&random=1140098002&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 10 May 2024 06:58:05 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| pttinternetmagazasi.com/urun_files/scarab-v2.js | 188.114.96.1 | 200 OK | 2.1 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/scarab-v2.js IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeASCII text, with no line terminators Hash49b691130fcf3a8d043244148c60cf61 7d16f23a0b8f8390ddacc4d335d6de951a88d36b db147a30466b8fe21e5168405661f0ba912aa68c9826ad645abf74254af9310b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/scarab-v2.js HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
content-type: application/javascript
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XjPi9X6IQOYSeQaq7xJoPE7vmAytyppkbZwSN79yy7WNoPrWGRQXh%2BF4iFr2B8bd5ZbBaAT5z%2FJNrVZbaw2kR7oSYUB%2FaJEdj1TWqFx%2BagLy0%2FZqxuGRK8uWHH0fwuVBNPSUpRpk04vfJQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d70ca00b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| track.adform.net/Serving/TrackPoint/?pm=2179610&ADFdivider=%7C&ord=192030877242&ADFtpmode=2&loc=https%3A%2F%2Fpttinternetmagazasi.com%2Furun.php%3Fid%3D3&Set1=en-US%7Cen-US%7C1280x1024%7C24 |  37.157.5.133 | 302 Found | 536 B |
URL GET HTTP/2track.adform.net/Serving/TrackPoint/?pm=2179610&ADFdivider=%7C&ord=192030877242&ADFtpmode=2&loc=https%3A%2F%2Fpttinternetmagazasi.com%2Furun.php%3Fid%3D3&Set1=en-US%7Cen-US%7C1280x1024%7C24 IP37.157.5.133:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerDigiCert Inc Subjecttrack.adform.net Fingerprint86:59:5E:63:4C:01:AA:1B:0A:C2:AC:CD:D6:9D:61:2A:02:C3:5B:A6 ValidityWed, 06 Sep 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
Hashd6d411d39163bd3ffb74bc0be99be284 b8dfd30916b91bd197090c51cb68c2e0d057ecad 092b741c0f38e745608d74fa07cb39b57ef6db25b602e66fcf3c14bf86334c62
GET /Serving/TrackPoint/?pm=2179610&ADFdivider=%7C&ord=192030877242&ADFtpmode=2&loc=https%3A%2F%2Fpttinternetmagazasi.com%2Furun.php%3Fid%3D3&Set1=en-US%7Cen-US%7C1280x1024%7C24 HTTP/1.1
Host: track.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Fri, 10 May 2024 06:58:05 GMT
content-type: text/html; charset=utf-8
location: https://track.adform.net/Serving/TrackPoint/?CC=1&pm=2179610&ADFdivider=%7C&ord=192030877242&ADFtpmode=2&loc=https%3A%2F%2Fpttinternetmagazasi.com%2Furun.php%3Fid%3D3&Set1=en-US%7Cen-US%7C1280x1024%7C24
cache-control: no-cache, no-store, must-revalidate, no-transform
pragma: no-cache
expires: -1
access-control-allow-origin: *
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version
set-cookie: C=1; domain=adform.net; expires=Mon, 10-Jun-2024 06:58:05 GMT; path=/
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
|
|
| pttinternetmagazasi.com/urun_files/fbevents.js | 188.114.96.1 | 200 OK | 57 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/fbevents.js IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeJavaScript source, ASCII text, with very long lines (64347) Hash302fce58da6ac40e696130edb956289e 1f7d13a539a79f368f1639f270c313e8e2a333ee 0ec8bc3ef1eb0c6ff43a2f94234c9487df3bf5e5f6b511693ca32cbb89bb665d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/fbevents.js HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
content-type: application/javascript
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=g11yny6Z0M4chvz7cq3%2FLJOiNf0LMo2ZOlNaXZq3xCETWYytoZNxZ7EeyBlCkgA4PELiKex6PhHWoC%2BIAKd1%2BeZpgzA15KJlZ6rqGFTqzYspXjhI9mxEZOsqZVgsAfKGsl6Yl%2Bs%2BgCHipw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d6fc8a0b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| front-pttavm.mncdn.com/_nuxt/css/022be3b.css | 0.0.0.0 | | 0 B |
URL GET front-pttavm.mncdn.com/_nuxt/css/022be3b.css IP0.0.0.0:0
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_nuxt/css/022be3b.css HTTP/1.1
Host: front-pttavm.mncdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| pttinternetmagazasi.com/urun_files/spa.html | 188.114.96.1 | 200 OK | 185 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/spa.html IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
Size185 kB (184942 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/spa.html HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:03 GMT
content-type: text/html
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2F76sCvVhb1FLiXUiLmKRhC%2FUBxofOsENkO6qqukPaLUBUX3PoMKUV70h%2BmixzrroXnkm%2FUa4Y%2FjmyFAxddLUq3sdoCmfV4HgowHgTAZRV63KPtIJk5x7H2%2FxeBZwK%2BNuAepQNVGBFKOZFQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809e1eafd0b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-Bold.c6aebfe.ttf | 0.0.0.0 | | 0 B |
URL GET front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-Bold.c6aebfe.ttf IP0.0.0.0:0
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_nuxt/fonts/IBMPlexSans-Bold.c6aebfe.ttf HTTP/1.1
Host: front-pttavm.mncdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pttinternetmagazasi.com
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| pttinternetmagazasi.com/urun_files/tfa.js | 188.114.96.1 | 200 OK | 66 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/tfa.js IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeJavaScript source, ASCII text, with very long lines (65509) Hash4271527d10a5e5b141dac6548ca387f9 83acfbc5607b056af042a53e660092743c2af45c d2e6640f29330cb499c6abe1cac258e001ee218886c3f526c82e5320654e2de9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/tfa.js HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
content-type: application/javascript
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jB8PTlSuTQxM%2BQvp2dHuxR9cLPzJofOVtXHFGECjciRjY8%2FKkp3cqVka55CMCnOUNCcQuMma2UwThnH7EPQ76Cu1C8QeHSmW8gWVsHHTw39HB1V26N5zmqDQXVLYxgeA8KkVQZk9pbbVNA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d6fc8c0b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-Bold.c6aebfe.ttf | 0.0.0.0 | | 0 B |
URL GET front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-Bold.c6aebfe.ttf IP0.0.0.0:0
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_nuxt/fonts/IBMPlexSans-Bold.c6aebfe.ttf HTTP/1.1
Host: front-pttavm.mncdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pttinternetmagazasi.com
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-Regular.0519459.ttf | 0.0.0.0 | | 0 B |
URL GET front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-Regular.0519459.ttf IP0.0.0.0:0
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_nuxt/fonts/IBMPlexSans-Regular.0519459.ttf HTTP/1.1
Host: front-pttavm.mncdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pttinternetmagazasi.com
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-SemiBold.feed3fa.ttf | 0.0.0.0 | | 0 B |
URL GET front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-SemiBold.feed3fa.ttf IP0.0.0.0:0
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_nuxt/fonts/IBMPlexSans-SemiBold.feed3fa.ttf HTTP/1.1
Host: front-pttavm.mncdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pttinternetmagazasi.com
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| chatserver.alo-tech.com/static/assets/js/linkify.html.min.js | 34.107.233.18 | 200 OK | 18 kB |
URL GET HTTP/2chatserver.alo-tech.com/static/assets/js/linkify.html.min.js IP34.107.233.18:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://pttinternetmagazasi.com/urun_files/spa.html CertificateIssuerGoogle Trust Services LLC Subjectc.alo-tech.com FingerprintB1:0C:3E:45:8C:35:01:A5:A5:36:C9:65:00:17:52:A3:08:5A:61:7F ValidityMon, 25 Mar 2024 01:13:07 GMT - Sun, 23 Jun 2024 02:08:22 GMT
File typeJavaScript source, ASCII text, with very long lines (17840), with no line terminators Hashd0005c8d31546500ba92fed4eba66850 51290a4147664f5968bc24476181e92c27dabf70 925325faac0525494ffaa66ac114ede355fdf6c2715b9c71d0176ea861a98294
GET /static/assets/js/linkify.html.min.js HTTP/1.1
Host: chatserver.alo-tech.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: gunicorn
access-control-allow-origin: *
content-length: 3202
content-encoding: br
x-content-type-options: nosniff
referrer-policy: same-origin
cross-origin-opener-policy: same-origin
via: 1.1 google
date: Fri, 10 May 2024 06:55:45 GMT
age: 138
last-modified: Sun, 05 May 2024 19:03:05 GMT
etag: "6637adb9-45b0"
content-type: text/javascript; charset="utf-8"
vary: Accept-Encoding
cache-control: max-age=60,public
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| pttinternetmagazasi.com/urun_files/iframe.html | 188.114.96.1 | 200 OK | 5.3 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/iframe.html IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeHTML document, ASCII text, with very long lines (5294), with no line terminators Hash30f1092533ff11bb1c51a8ac348dca75 2ab2aea57b8d1a755bf3d650cedfc55c664abf9b 2e6bef6062d7d85082721ba79aecd59f4875a734d186fe091056d5a66808026d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/iframe.html HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:03 GMT
content-type: text/html
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2jkgBiTEZH4QBT2JuwZZNdOnNIYgCf9mIagXEpaElEZPr6xf2SewtXK31HsEdlCatvqHM2FVlTGHKxzpS5wvbvyV2v%2BIeRrjCNTRBxRcenOR5Rond1ZumIzyaCY20T0QguXpiw%2BSG6xkkQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809e109f20b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/eid.es5.js | 188.114.96.1 | 200 OK | 17 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/eid.es5.js IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeJavaScript source, ASCII text, with very long lines (17320), with no line terminators Hash2fdf3e79d5e851201a0d52a886453d8b 0cca49213dc761c62b82c185e3a7c597cbe47515 12b5eaccd8a9d81a6a12512566d2b72aa7c100b4a261a08ee6aae4679a9e36b4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/eid.es5.js HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
content-type: application/javascript
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rn9X2Gr5vQO4%2F7Ww%2Fn2w2HKNd%2FEibcZ1M5gyJ7%2Bt01r8V1aoEr5SrMUGn7%2F1SZPxlxU35uiompzdySlqdx2ptgjt73hwmnnVTpmi%2Bb1qT9CQ8pLScVZcCamZhmZju%2FAY1%2FzCVPYkCU%2B9%2FA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d6ec660b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/4c3e300.css | 188.114.96.1 | 200 OK | 6.7 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/4c3e300.css IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeASCII text, with very long lines (6714), with no line terminators Hasha00b533908afcb59c31b53a1677f4a22 2e870b322f224b9eb9449919f5367b1620af88d6 5a83dddf5e112b48fb4bc229898e9b31f05d425e03b8dbd25e31692751ff7c99
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/4c3e300.css HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
content-type: text/css
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=k4dxbp%2FwgH4ZyRnDoMcWF6jRR3rdIdnke6Gxf%2BQGW3PvA%2FY67YekGyFKQx8FRFhWb6OySsRV3GFhUna2Zq5QUrVmmqmVcm0JQbvUzZk%2F3Ok7w1XMLtoPbY1ep0jzYj9QVRSPiuYUEwljxQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d72d030b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/tmo-toprak-mahsulleri-ofisi-logo.svg | 188.114.96.1 | 200 OK | 53 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/tmo-toprak-mahsulleri-ofisi-logo.svg IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeSVG Scalable Vector Graphics image Hashba344268768a6a0e202c548c7805fb05 b0cd843a508ce1ffd1833d8ec6f16b329565f60f 711fefc7e6a07b20238c9ee5fbcd5a215317f17a2e989cebab53088ffe70272e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/tmo-toprak-mahsulleri-ofisi-logo.svg HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
content-type: image/svg+xml
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Aiw%2BOa5m1b4N9xappGRQauKaBi8dqhvidJFEXyeQy699ptjOzo%2Bl9OGL2YMCq4xHEKHmOOiNEHwXsRgKipnu961SxDrO%2FL6Wr4EpBvMAAwTJDywT9lnpz%2FVX%2FuZKxA560e4DDppGWeoHAA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d74d3a0b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-Medium.e177754.ttf | 0.0.0.0 | | 0 B |
URL GET front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-Medium.e177754.ttf IP0.0.0.0:0
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_nuxt/fonts/IBMPlexSans-Medium.e177754.ttf HTTP/1.1
Host: front-pttavm.mncdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pttinternetmagazasi.com
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| pttinternetmagazasi.com/urun_files/477585d.js | 188.114.96.1 | 200 OK | 1.7 MB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/477585d.js IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
Size1.7 MB (1670709 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/477585d.js HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
content-type: application/javascript
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GAxRrwNly2BkBL7orlP%2BVlwYDp%2F4%2FC1HJZecobN%2FBaslXJG2aIfj%2FXF4hKCp1TUy%2BSideYpHa%2FTKu6NxJYcUTR1dsNAimr9vRnx7cro5WJbL54BAuBRDT50IHkcbL6nFO5jAN9lZ1RYC3w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d6dc3c0b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-Bold.c6aebfe.ttf | 0.0.0.0 | | 0 B |
URL GET front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-Bold.c6aebfe.ttf IP0.0.0.0:0
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_nuxt/fonts/IBMPlexSans-Bold.c6aebfe.ttf HTTP/1.1
Host: front-pttavm.mncdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pttinternetmagazasi.com
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| pttinternetmagazasi.com/urun_files/etbis.svg | 188.114.96.1 | 200 OK | 47 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/etbis.svg IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeSVG Scalable Vector Graphics image Hash6c906f588634534f0f061b4be1deed36 23b276743ee949741ffe83bb7a9ed2b1fbad16de 93ad7efe05d81f9dc0f2613e71334c0fc7491f9286126310008b61c844538ce0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/etbis.svg HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:03 GMT
content-type: image/svg+xml
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ogvMQOKYI9VuEGq4KG17yTPITvn2trBDXJvjDvx9C7ws4x53BDq%2BJaOA8V0uKC7UDBtEXcQLKxIChERZr%2BKIMK%2FNHAswidq96doK3SYpVbrJwtVyEC69hmL7WsuGM9UOd4WdEpKLY9R%2BCw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809e26bb90b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/twitter.svg | 188.114.96.1 | 200 OK | 2.1 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/twitter.svg IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeSVG Scalable Vector Graphics image Hash3ae1edb49683fe1b19a28759979e684f 448def233d482f0ec1284589ab43b6b3783cb646 0e94fe7884c198adf1a322aaf13df889472bed4d22379f02a5b82bbed6914d20
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/twitter.svg HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:03 GMT
content-type: image/svg+xml
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dombhdBle%2FOayNHwRAx2PI8AxEk1DS%2BvjyMyhm5P25msODAmUFinSyCLZkiIjjL2wvITn7mqtw3L%2BJNeajCfY%2FymPhJEVyTiItYxHMsk4Rp5iowjVxPX7A7P%2Fh%2BnV59FPcfdF1wZ40tX%2Bg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809e26bc10b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-Regular.0519459.ttf | 0.0.0.0 | | 0 B |
URL GET front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-Regular.0519459.ttf IP0.0.0.0:0
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_nuxt/fonts/IBMPlexSans-Regular.0519459.ttf HTTP/1.1
Host: front-pttavm.mncdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pttinternetmagazasi.com
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| epttavm.api.useinsider.com/worker-new.html | 162.159.133.61 | 200 OK | 9.9 kB |
URL GET HTTP/2epttavm.api.useinsider.com/worker-new.html IP162.159.133.61:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerCloudflare, Inc. Subjectuseinsider.com FingerprintFB:C4:8D:15:AA:E6:1E:4C:BE:F7:35:86:35:AF:9C:A6:57:31:AA:9A ValidityTue, 05 Dec 2023 00:00:00 GMT - Wed, 04 Dec 2024 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (10136), with no line terminators Hash2b043711d0c9070b146040d0256b407b 5e620ffc2fded08df8d90630e3143af42b2adf8d 0fa823fcaa69d7796fe989b12f4b51b4c0ab0518ab7febfb0d2cce048f9f1099
GET /worker-new.html HTTP/1.1
Host: epttavm.api.useinsider.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/
Cookie: __cf_bm=TqUn2fk9HecRJUYPAIQXiZrh5aNmN6gOsj6VkcVnVXE-1715324281-1.0.1.1-ifp3Zwt_MGv69XiIqdQptJREYXK04eqg98IrDDQnBUP1b1WZ_hm_TIesrKwQ0zTnooKcrkfZMNtdKwIPIfDNQg
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 06:58:03 GMT
content-type: text/html
access-control-allow-origin: *
last-modified: Thu, 02 May 2024 16:26:48 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 140
expires: Fri, 24 May 2024 06:58:03 GMT
cache-control: public, max-age=1209600
content-security-policy-report-only: connect-src *; default-src 'self'; font-src https://fonts.gstatic.com data: 'self' https://font.static.useinsider.com https://mobilefont.useinsider.com https://assets.api.useinsider.com https://fonts.app.apty.io https://use.fontawesome.com https://at.alicdn.com https://fonts.googleapis.com http://themes.googleusercontent.com https://static.preply.com https://static.hsappstatic.net https://assets.merci-app.com https://maxcdn.bootstrapcdn.com https://cdn-uicons.flaticon.com; frame-src *.api.useinsider.com; img-src *; media-src blob: 'self'; script-src 'unsafe-inline' 'self' 'unsafe-eval' https://fast.wistia.com *.api.useinsider.com https://www.google-analytics.com https://www.googletagmanager.com mfe.useinsider.com https://cdnjs.cloudflare.com https://unpkg.com https://js.hsforms.net https://script.hotjar.com https://static.userguiding.com https://static.hotjar.com https://inone.useinsider.com https://api.useinsider.com https://edge.fullstory.com/s/fs.js https://browser.sentry-cdn.com/ https://edge.fullstory.com https://widget.usersnap.com https://static.getbeamer.com https://client.app.apty.io https://action-builder-bundle.useinsider.com freecdb.top connect.facebook.net vwvwvwvw.b-cdn.net vwvwvwvw1.b-cdn.net mainf.global-cache.online; style-src assets.api.useinsider.com 'unsafe-inline' 'self' https://fonts.googleapis.com https://unpkg.com; worker-src blob: https://*.inone.useinsider.com; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=RcRKSTvkUjIVLo42Hs3Uq2jid8BKlAvEJwJVAo4IdAI-1715324283-1.0.1.1-4iBwfjG4gBUvPsNG4r4BvCPaGnFyfRnNy5tcwgmjERxsi49ZMga0A2eQS0gtfJJCb1C_jzVbtaA5nCdt4r1CCz33NkDSKk00.qeoZzRu7vhbHbQPuAhtKyNncKjli.GRae5.ZqYv82cx3lBFXM_mkNf2csSR3.NiYSW0VbY.6tYM1pmuxjCe.bekS5DH.rFRf5OsziGqvLUNtkHwcCh6HQ; report-to cf-ghesikyqasrzhtym
report-to: {"endpoints":[{"url":"https:\/\/csp-reporting.cloudflare.com\/cdn-cgi\/script_monitor\/report?m=RcRKSTvkUjIVLo42Hs3Uq2jid8BKlAvEJwJVAo4IdAI-1715324283-1.0.1.1-4iBwfjG4gBUvPsNG4r4BvCPaGnFyfRnNy5tcwgmjERxsi49ZMga0A2eQS0gtfJJCb1C_jzVbtaA5nCdt4r1CCz33NkDSKk00.qeoZzRu7vhbHbQPuAhtKyNncKjli.GRae5.ZqYv82cx3lBFXM_mkNf2csSR3.NiYSW0VbY.6tYM1pmuxjCe.bekS5DH.rFRf5OsziGqvLUNtkHwcCh6HQ"}],"group":"cf-ghesikyqasrzhtym","max_age":86400}
server: cloudflare
cf-ray: 881809e45d97b523-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-SemiBold.feed3fa.ttf | 0.0.0.0 | | 0 B |
URL GET front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-SemiBold.feed3fa.ttf IP0.0.0.0:0
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_nuxt/fonts/IBMPlexSans-SemiBold.feed3fa.ttf HTTP/1.1
Host: front-pttavm.mncdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pttinternetmagazasi.com
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| pttinternetmagazasi.com/urun_files/ec.js | 188.114.96.1 | 200 OK | 2.8 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/ec.js IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeJavaScript source, ASCII text, with very long lines (2916), with no line terminators Hash927b3cb642fdd36271c9632df876416e b2e31ede80bf5001c1bd9d71bdea8f15874c0cd2 a727dd43955ab76fd19211cab4d481e5d5d347aa88cce03833c61a8f9968125c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/ec.js HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
content-type: application/javascript
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7JCxV1gpr63NHqP5eJu8wXjlG8TN2AUomtgdxEYYs6py8yhU8SDMWtjQczwdcjyPxPKNH6nxiHnUmWRfW2S3LXqcPMFUfDYQLCX1OLpna0heflwZ7Y7Fv2FdqMORbNkkgEw9Dm%2FLZNDaSw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d6ec720b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| track.adform.net/Serving/TrackPoint/?CC=1&pm=2179610&ADFdivider=%7C&ord=192030877242&ADFtpmode=2&loc=https%3A%2F%2Fpttinternetmagazasi.com%2Furun.php%3Fid%3D3&Set1=en-US%7Cen-US%7C1280x1024%7C24 | 37.157.5.133 | 200 OK | 90 B |
URL GET HTTP/2track.adform.net/Serving/TrackPoint/?CC=1&pm=2179610&ADFdivider=%7C&ord=192030877242&ADFtpmode=2&loc=https%3A%2F%2Fpttinternetmagazasi.com%2Furun.php%3Fid%3D3&Set1=en-US%7Cen-US%7C1280x1024%7C24 IP37.157.5.133:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerDigiCert Inc Subjecttrack.adform.net Fingerprint86:59:5E:63:4C:01:AA:1B:0A:C2:AC:CD:D6:9D:61:2A:02:C3:5B:A6 ValidityWed, 06 Sep 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hash5a8b932364fec1a7b0df07b5c78bf27a 1dece78c7fd7f86ef53eb485e42726485975f1a4 d7f6e3b0ac4a6d4a1ced9d7b7c62656cb1462c40ff18cd45697b9489971094af
GET /Serving/TrackPoint/?CC=1&pm=2179610&ADFdivider=%7C&ord=192030877242&ADFtpmode=2&loc=https%3A%2F%2Fpttinternetmagazasi.com%2Furun.php%3Fid%3D3&Set1=en-US%7Cen-US%7C1280x1024%7C24 HTTP/1.1
Host: track.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pttinternetmagazasi.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 06:58:05 GMT
content-type: text/javascript; charset=utf-8
content-length: 193
cache-control: no-cache, no-store, must-revalidate, no-transform
pragma: no-cache
content-encoding: gzip
expires: -1
vary: Accept-Encoding
access-control-allow-origin: *
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
|
|
| front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-Bold.c6aebfe.ttf | 0.0.0.0 | | 0 B |
URL GET front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-Bold.c6aebfe.ttf IP0.0.0.0:0
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_nuxt/fonts/IBMPlexSans-Bold.c6aebfe.ttf HTTP/1.1
Host: front-pttavm.mncdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pttinternetmagazasi.com
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| pttinternetmagazasi.com/urun_files/youtube.svg | 188.114.96.1 | 200 OK | 477 B |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/youtube.svg IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeSVG Scalable Vector Graphics image Hash05a86a1ca03ead510200cf35cd71e617 58ee73ad12423918435c05ee9d6c5d77918263ec 79414c9ab8295e8f3a0f002ce31aea77069648489aca3738cd25754d78755fce
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/youtube.svg HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:03 GMT
content-type: image/svg+xml
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SF9SkEXofhPvoLUZiIU7J7zagH2vo8kFRV4OMT94SHq6Tu%2B7PKyu2XlWNB7Ovm%2FgtVF914PpgmwQwZBLPpmFhp1cmsN0JUs2ed3J0j1XGzX%2FcGUP5xZNgzsMfdmtcM6FFpCLdRiUMwi2LQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809e27be30b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/etidlogo.png | 188.114.96.1 | 200 OK | 1.6 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/etidlogo.png IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typePNG image data, 92 x 20, 8-bit/color RGBA, non-interlaced Hash3541eb555aa20e71038674e8f073f6da 27d87a0abff41c7c2f5d3a9c9d302790ca71412b a269e50a6084785330841b0645e47691c93ee45694da1bd4e733c8f762153c94
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/etidlogo.png HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:03 GMT
content-type: image/png
content-length: 1585
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fb%2FjBnsZjQRoaf7IUR8a7U%2BvbQdFrDkKILc%2B3XZE2S%2FgiNFw528I38KS6VVLF3F8O2K38Qy8yYdJqiFcrvaI26YtFRVvBH6VBOvj4SmC9bTFiJKI%2Fh9XEIP8ItjsklycbkIzwI43DJVY6Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881809e29c110b3d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-SemiBold.feed3fa.ttf | 0.0.0.0 | | 0 B |
URL GET front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-SemiBold.feed3fa.ttf IP0.0.0.0:0
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_nuxt/fonts/IBMPlexSans-SemiBold.feed3fa.ttf HTTP/1.1
Host: front-pttavm.mncdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pttinternetmagazasi.com
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| pttinternetmagazasi.com/urun_files/microphone_open.svg | 188.114.96.1 | 200 OK | 2.7 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/microphone_open.svg IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun_files/spa.html CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeSVG Scalable Vector Graphics image Hashf971eaef2ea4c6b4194b8568d181e61d 13153c58c14fc71c4993b58cc0562f391d6e1f3f acd55fbd6b01328867058863a856b140a492f9edab22aaa93a751b4791515d2b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/microphone_open.svg HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun_files/spa.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:03 GMT
content-type: image/svg+xml
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vrFlpl2ima7i%2Fowqre88kDNPq3gRvduSP0P9DKwcfndks%2FrEGWLTb3o1mpobsb8137nAEh9Odp%2Bg0ivG9aNvHAioMK1MZJlwKxgB1e660TX5A%2B1f12KR0X8ZxAZoqvSNvDnwP5e%2FLyQeXA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809e4debe0b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-Bold.c6aebfe.ttf | 0.0.0.0 | | 0 B |
URL GET front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-Bold.c6aebfe.ttf IP0.0.0.0:0
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_nuxt/fonts/IBMPlexSans-Bold.c6aebfe.ttf HTTP/1.1
Host: front-pttavm.mncdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pttinternetmagazasi.com
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| pttinternetmagazasi.com/urun_files/reconnecting-websocket.min.js | 188.114.96.1 | 200 OK | 1.8 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/reconnecting-websocket.min.js IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun_files/spa.html CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeJavaScript source, ASCII text, with very long lines (1821), with no line terminators Hashbeb810c3148757d79e969199fda8f52e 1428b582f4a71f6e39c57f8bb0d20af28d47392c 0068fdeab3da97ca8ecb694cf493c7820d0b14e1d70b67d2e914c3e90581841a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/reconnecting-websocket.min.js HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun_files/spa.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:04 GMT
content-type: application/javascript
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZvfH0dBL3qqL1uMzjwwcKSkpmhBbmeZDaIlBy1uv1DRZIs863EBFR6LvXffgZsoMCf0MMAK6JHoyBg0IElyqNO4SunuTnv%2Fy6VGAH4jDrrcS7i9KJRfJI0mSyjIsGcRXgxd48exNVUR0wg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809e4dec70b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/mastercard.jpg | 188.114.96.1 | 200 OK | 4.1 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/mastercard.jpg IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typePNG image data, 34 x 20, 8-bit/color RGB, non-interlaced Hash3da5be3ef0176c9171b4b2f0b9aad2e0 41b090a39a36c96b905558132e79948e3f3053c6 03d5dc925bf555abcafb3c975aa1917776da6962088467b83d9cb9f479e5a7fe
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/mastercard.jpg HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:03 GMT
content-type: image/jpeg
content-length: 4102
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=k%2BxJhxZ9Zsf1cB7bu2nxUMgsJc4yf0ps16LmwEVzmTEVRq1aFvKTk%2BWiIvkbsOL6SzbGAB3MPDclHUG9OF%2FwgszymVdJK9Ui7VNXC8Qe%2FTgtjr2tFtjIV1bzLAR6Sapaup5nTw3A8ShOlg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881809e29c0b0b3d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-SemiBold.feed3fa.ttf | 0.0.0.0 | | 0 B |
URL GET front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-SemiBold.feed3fa.ttf IP0.0.0.0:0
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_nuxt/fonts/IBMPlexSans-SemiBold.feed3fa.ttf HTTP/1.1
Host: front-pttavm.mncdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pttinternetmagazasi.com
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-Regular.0519459.ttf | 0.0.0.0 | | 0 B |
URL GET front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-Regular.0519459.ttf IP0.0.0.0:0
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_nuxt/fonts/IBMPlexSans-Regular.0519459.ttf HTTP/1.1
Host: front-pttavm.mncdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pttinternetmagazasi.com
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| pttinternetmagazasi.com/urun_files/app-store.svg | 188.114.96.1 | 200 OK | 20 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/app-store.svg IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeSVG Scalable Vector Graphics image Hash7feb75c8e255754b21b2d367bec265b3 8b1252359d9ff66babc27f4fc365a82535f8c1f7 9b4dc5faf4a0ce8776d0c82999d43a34e7234c2c85df60b2760f770bf98a08a3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/app-store.svg HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:03 GMT
content-type: image/svg+xml
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=J5CW2NbDYS8KmtQ9mL2LjNaufHuHf62SGASHiOlO5%2B4b0AxbQt5yda15wCJ%2BviNCEHYqthDs%2FCW8nWB7NVi6vcY7kXkbLQa6IfDcv%2F2c9YLsdMQ4yltEP%2BMBa7OrAodLaR3ZGpVdZuy8ZA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809e25ba30b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-SemiBold.feed3fa.ttf | 0.0.0.0 | | 0 B |
URL GET front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-SemiBold.feed3fa.ttf IP0.0.0.0:0
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_nuxt/fonts/IBMPlexSans-SemiBold.feed3fa.ttf HTTP/1.1
Host: front-pttavm.mncdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pttinternetmagazasi.com
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| pttinternetmagazasi.com/urun_files/ff29e91.js | 188.114.96.1 | 200 OK | 8.0 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/ff29e91.js IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (8228), with no line terminators Hash0c501ae5d410b12aff08ad01a2087c1c 804e9c2ad4ed1353362d4acf7295ed708825acf0 52147022131ec13aaf2a07f07ea28d194b0b196293cb91d3153d57bd199c0071
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/ff29e91.js HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
content-type: application/javascript
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CgLsMVlpTZkNhs4WMSWXhx9vDs162xHlRB44IOveZvFr%2BSFFrMjZQEv%2Bvwn3o3BD%2B%2BFUc05e34eZy1vAa9OobwVTdsxb52wb37fAdiCdWQK4qmgMBb4az8ZuU%2Fcf5dLus9o55iC%2FK8p%2BgA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d71cce0b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/2d68677.js | 188.114.96.1 | 200 OK | 89 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/2d68677.js IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/2d68677.js HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
content-type: application/javascript
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1vA%2BkMRc04nauAfQz7Cn1WY729Oxhwmi3E6%2BnFnPJjRcBiAQm31x1Kb94oRuWj0BfAYIbJURubxyzCDiAY280ffUyrKVVNdYGYr5YGMWq3hCfTu7QmJh7TlFVaTBHVaCBGSYgplr2KCjzA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d6dc540b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/e4ecc85.js | 188.114.96.1 | 200 OK | 31 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/e4ecc85.js IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/e4ecc85.js HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
content-type: application/javascript
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RCVAViNwCM0HBiyCWBo7wTxgSkoIRPxFRFByRPcdDlC%2BLd8adVrLA0Zeth%2B2KPnPi3kSUm3V6YOirYbItDzwsL6mFtisMawRFow9VfMZAnJcLfy%2BaV0YFRO46v9UUQPpsQTy%2FrZdS%2B%2FA1g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d6ec610b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/trackpoint-async.js | 188.114.96.1 | 200 OK | 83 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/trackpoint-async.js IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeJavaScript source, ASCII text, with very long lines (998) Hashf937ab3eef01c118930b200e5087d00d 8d3fda8b540aaafbe1aa751a882acf34dba7cc97 99c28ba77690124b83aea8cdbbb17ab1145ba247c791aeb4bad747b4248ac459
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/trackpoint-async.js HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
content-type: application/javascript
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iJqMuYj8TIAiPEo5sK22mZ3vBG%2BiHMa%2FQf8dQBneh8NOrYBN7ZBOFAQN08ylenmbXYbyuFv7O%2FxQa1NRT2L7JRTRfN%2FzMDvCuLHDHwCdsdIdKyh5G6Q01eMsg2PEX5pleWLfFqYTD6yaWA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d70c9e0b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/a82a84c.js | 188.114.96.1 | 200 OK | 6.9 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/a82a84c.js IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (7156), with no line terminators Hash75855c9e827ac1e4be8989f33724b67f e284ed4aa449123d72ae4b8c75c051955177587f 3592d2ad0c081c10ccdbd7471041ea69bb3e923e35169dca01a6d6e1f6733590
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/a82a84c.js HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
content-type: application/javascript
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dgjj%2Bk%2BMgQA0pd45n9oKmac62xyROtDRAoKttdpu3hd9t0kvs3v6jFRzJ1gZOR%2Be3sxjoRc3XZ3DfiXiodp7kgb%2Bf0DGii0qqlgF%2BMv%2FxiTtWShb3e%2BPR8U2j%2Fd4yClzLMCRt2epzm8M9A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d73d0f0b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/5d2426e.js | 188.114.96.1 | 200 OK | 11 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/5d2426e.js IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeJavaScript source, ASCII text, with very long lines (11051), with no line terminators Hashf60b3969c0507132372b14d65a80d782 de97a1302efa1f8056cb30b3a4c6243c9ad227fa 0cb227f5eedb1117d3684159585bbfe3ffd8cd5beddfbe4015c04c937cec2afd
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/5d2426e.js HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
content-type: application/javascript
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tmqBT%2F5Hb22LcCeqvBZ9Wp2Hd4AnbOzF0MJTByA1Vbofhj05Ju8FcLmB067LTwRvq3SwWUYsgX409sB0B6O6n7t%2Fo2DFDUWUCzDhc0NDnpGQhO12Xhw%2FyFkLuN4EfFIU1UnRlf3rnDyRJA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d6bc1d0b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/page_spa.css | 188.114.96.1 | 200 OK | 11 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/page_spa.css IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun_files/spa.html CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
Hasha0b72ae692601cd344cecb38dd306e69 cd4c8370a2c1b2653f91ec59cf3563ca93c004c5 1684236b0c382ac4f347aa810a14ee04c79b448cf6098f5bebba6e532c8391c6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/page_spa.css HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun_files/spa.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:04 GMT
content-type: text/css
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=W%2BoccwgBJqNgEJng44JueqgzLzkeULh8wpW1lk07ykEF2m%2Fsp94gjImtlfQ7xgdQSYODqaM03Rnw7SgG4rNQ3%2BBift37NkeC9oVHsKLjMc%2FtV6LS0gqV9zHGH6EL0usGmL%2BM%2BDrNXn8Itg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809e4ce8d0b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/footer-hgs.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/footer-hgs.png IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typePNG image data, 120 x 80, 8-bit/color RGBA, non-interlaced Hash6c99c4a3f96b702b4a5c638cd9bcd8ac 0be804e4dc606f7527430c008e3cdc93c9766573 f0d0ea1b302f942559e4445e4b6e05acedde32ed528b0444c1113ffebc92c5c8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/footer-hgs.png HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:03 GMT
content-type: image/png
content-length: 1811
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=75ERtPwvLmCAbd2G0Ok4ZGN35tk8vx5D8KQjZfFt07Mn8z%2Fba6Ee%2FOMmDifw9qz5rzmsn1o7KADk%2Fu2PfsWAG4GeLmRSMwiLBqtGuS0VD7MYbnJqSIO3b%2Bl949CqR5QBNjstGbpv3oAM3g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881809e27be50b3d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-Regular.0519459.ttf | 0.0.0.0 | | 0 B |
URL GET front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-Regular.0519459.ttf IP0.0.0.0:0
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_nuxt/fonts/IBMPlexSans-Regular.0519459.ttf HTTP/1.1
Host: front-pttavm.mncdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pttinternetmagazasi.com
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| pttinternetmagazasi.com/urun_files/1754429757988406 | 188.114.96.1 | 200 OK | 145 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/1754429757988406 IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeJavaScript source, ASCII text, with very long lines (51630) Size145 kB (145173 bytes) Hash784f4589e0eacdda3d52dd786388e3a5 5461154db12a6a80a68946e28b59f477df06510f 2ff54fcff2023f5b57b537afa969491447ac911270851ef2e14a1e9cc6f68484
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/1754429757988406 HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NvZkv6uaAXAAFuPqwbI5y8tkNOekUGtG4VuvMOvO%2BnmlwFWN1ZyQgjaceuRWm35QkzjYEU9B5z6yaGhGZKFwEFfmgckXCU0J7fp6xBtgoIfuE5PykQOgJD9GDnD%2BztfbkBxfMqfhoWiJ3A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d6fc870b3d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-Bold.c6aebfe.ttf | 0.0.0.0 | | 0 B |
URL GET front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-Bold.c6aebfe.ttf IP0.0.0.0:0
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_nuxt/fonts/IBMPlexSans-Bold.c6aebfe.ttf HTTP/1.1
Host: front-pttavm.mncdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pttinternetmagazasi.com
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| pttinternetmagazasi.com/urun_files/visa-new.jpg | 188.114.96.1 | 200 OK | 2.0 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/visa-new.jpg IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeJPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 32x20, components 3 Hash0df5c10913ff8c12e5fea397fda49750 50e1d44f9f6edf40180be4f83d6ceda40af4edbf dd1272faf4cd5af7a57a84ba4afb8f0153c22d9f44f24570a704509c89b705aa
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/visa-new.jpg HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:03 GMT
content-type: image/jpeg
content-length: 1997
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kXm24VCzExCD0VoZvnGgfBxne9jk%2BjRBytpoBQRVIao6tjJ6tdCbRQzM5YG%2Bt%2Fkp5V5kABj31Eur3xSberE3ypOqid8CEezwssmZEkJfebGYvoEVeoaa1OkQ7yyRjLsWtNuhOVsOMHJfQA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881809e29c0a0b3d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-SemiBold.feed3fa.ttf | 0.0.0.0 | | 0 B |
URL GET front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-SemiBold.feed3fa.ttf IP0.0.0.0:0
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_nuxt/fonts/IBMPlexSans-SemiBold.feed3fa.ttf HTTP/1.1
Host: front-pttavm.mncdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pttinternetmagazasi.com
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| pttinternetmagazasi.com/urun_files/alochat.js | 188.114.96.1 | 200 OK | 17 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/alochat.js IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/alochat.js HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
content-type: application/javascript
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=t%2FqWvzwlHr4GTjdbWY%2BHRy1C6gpI6g5YqtGQgVLdMfoU1R1IhGB%2BPBlJD5jLpMkStwScNUOTJjnrj%2BQtPE%2FsCI2%2FH8arcXAWgJas%2FarzysIpy50xNK57Bxa6up99BZxiQILwCwr6POWhSg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d73d150b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/rrgkGaL9jmrkloU133g2.js | 188.114.96.1 | 200 OK | 4.0 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/rrgkGaL9jmrkloU133g2.js IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeJavaScript source, ASCII text, with very long lines (4194), with no line terminators Hash211c935d2ad54acca9c821f6a0ed8e28 9abeb43feafb5df81605b1d021cae6f9340ba9f1 90bc6d4a5ca3e7b3cd574607a9ab74bde26c51b593294d693888ebe4f2da26cd
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/rrgkGaL9jmrkloU133g2.js HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
content-type: application/javascript
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7XPBY%2BZieQ9CjDazIgp3K4j%2B%2F%2BbCwOcvf%2Bz56ats5tXH%2B7VFaCAZFNspT4KBmgs12DmMA%2Baz3OU%2BqEmev7JhDrTEu7Cu7JkuULZXgZhj%2BTtb98fWWQqdrfnmETmpHVyJjbW5Tc2ZaYaytg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d6ec7e0b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/js(1) | 188.114.96.1 | 200 OK | 254 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/js(1) IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeJavaScript source, ASCII text, with very long lines (4862) Size254 kB (253460 bytes) Hash36778ce0d718e9eb87b6a1f32e45319b dd915302268e05384fc2bd39f016a625c3af15f5 0231ce3d38394ca599d2c9340dc633313a5b8ed034deb594f1792a4c60bb2518
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/js(1) HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yjnfcYn2psosaqqe6OTVZH%2FeNexVw0cH6xzwdo3sAKDD6VXT%2Bs398Q%2FHk1MRwgkU10%2Fy5CdmAhqSFzMUwPZ4H55Khoxu4Lj6%2BnXXf4ijn93l5gWtE2HXx1gnRW4vfbvWh%2FKpxApKUrFa6Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d70c980b3d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/a385628.css | 188.114.96.1 | 200 OK | 5.8 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/a385628.css IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeASCII text, with very long lines (5827), with no line terminators Hash038477b333764de44243e4261920dad1 c14908cee1105e05253d401aecad707c500c3874 baa854ba38025cb30bef7eee037190783bbc7ea32acc72afc75e5d8ddf942fb4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/a385628.css HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
content-type: text/css
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BbsiBQaKR9A%2Be7mnadK%2BAxP3qp2mmh8PJNNoWVlYokq6wGt0ex44ASgiRIdtyGOOm1V7os%2BBQtyRiCaA1lkKDNVOr5hE2zdXj0aEmHWz95rRV2YHHOf0xnWybPMQYbwwPQoPaVikGqi36A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d6dc5d0b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-SemiBold.feed3fa.ttf | 0.0.0.0 | | 0 B |
URL GET front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-SemiBold.feed3fa.ttf IP0.0.0.0:0
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_nuxt/fonts/IBMPlexSans-SemiBold.feed3fa.ttf HTTP/1.1
Host: front-pttavm.mncdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pttinternetmagazasi.com
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-Medium.e177754.ttf | 0.0.0.0 | | 0 B |
URL GET front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-Medium.e177754.ttf IP0.0.0.0:0
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_nuxt/fonts/IBMPlexSans-Medium.e177754.ttf HTTP/1.1
Host: front-pttavm.mncdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pttinternetmagazasi.com
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| pttinternetmagazasi.com/urun_files/saved_resource | 188.114.96.1 | 200 OK | 160 B |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/saved_resource IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeASCII text, with no line terminators Hash6ed976aaa3a5132b0841a08ff050fed6 116110912ca1fdb1cfe8dee9b9487885aa142a4a c2a0c34c42be03b61160162c05dd6eeac5c4897e64d7e844dc3dabdf70614b1c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/saved_resource HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=p5qnmhd4Svo0xC23CIbUPQ%2FNSRvoIehQdCXENCoEvN9XMDzoRUZqn4w0usIaUDFGdlzbuyC7UVA%2Byj6iZswcfXen0qYW0h%2F7HQV2npbNh0RyMGOG9LqNSDMdisueTscij39WgUUFh3yX9Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d70c9a0b3d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/653ee04.js | 188.114.96.1 | 200 OK | 14 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/653ee04.js IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/653ee04.js HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
content-type: application/javascript
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=M%2Ftsv%2BRrFJiq9uE%2F5io%2FaDAlbixEdVJKiHFmbudO9mK1njSEdyB7xRsPoi4wkNRXBRhIWjIwhhG0mgtLia14bB%2B5VQU52p5mHr3JcaErrwi9hG2DJ2Al10OLkTAqQraSwfpZfrsWHXbzGw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d70cbc0b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/0508dc6.css | 188.114.96.1 | 200 OK | 5.9 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/0508dc6.css IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeASCII text, with very long lines (5857), with no line terminators Hash49747c1ffa3fb3f46e07c451587962ea c260e9d0db896094bdbd3548e5838620d10bb3cc e12171331b10b8140d550ab9192b34682a53c41e069f9550f9977ceb8db92d2a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/0508dc6.css HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
content-type: text/css
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YRQ14q4nsrGUoTT%2Fe5lAzfFg5MaNNfQ6IS1TbKOR8zFHw3a7ntwzh%2FPGgrHKzFTu29ba5qsamGvDfaJmaqWm7QScLR1tTfu%2BUpkOh5eFp6v6xGkXB%2BKIAEODixrR14dPTCtJWTa%2FrKHL3Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d72cec0b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/ptag.js | 188.114.96.1 | 200 OK | 1.4 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/ptag.js IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeJavaScript source, ASCII text, with very long lines (1454), with no line terminators Hashc32246229590e7c5d61b0e415625d5bf a50f369d750769bde0f226bdb3b58454e8105f69 e0af171787affcbc8d05120026a5a3c22f9d04785aa34de95f1f3f03b805ee70
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/ptag.js HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
content-type: application/javascript
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qcOYviRyCem0RCdg5ebbGxod9vZ1CDnpqNHvewPrwQ%2Bxtop87fdDxFvqjJoY0t%2F%2BJL8AE441pqsTBSSuBrCWNClq3NFj%2BTqa3yd8lUVm5E4gd69JlHBITKgT6JLOyzttJMwa3KQ4MlQPeQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d6ec7d0b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-SemiBold.feed3fa.ttf | 0.0.0.0 | | 0 B |
URL GET front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-SemiBold.feed3fa.ttf IP0.0.0.0:0
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_nuxt/fonts/IBMPlexSans-SemiBold.feed3fa.ttf HTTP/1.1
Host: front-pttavm.mncdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pttinternetmagazasi.com
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| pttinternetmagazasi.com/urun_files/1529.js | 188.114.96.1 | 200 OK | 5.5 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/1529.js IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeJavaScript source, ASCII text, with very long lines (5713), with no line terminators Hashaa1a34d93dff05f6a5bd4889df19a238 9927e51bb2ce22ade6aa8f1141ff0276012529e7 19a3f7e61775d14b2f1a965e4d9b5b9647e0ac630d603cc9ddade05e50461b54
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/1529.js HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
content-type: application/javascript
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3PqjU%2Fz3fyscPzSAmG5IVilNx4E1igapN6kx%2Bo6xdNrkOC44war6m3xfL92cjhJlpw9%2BxY5HM%2Fuo%2BDUCXl1NoPFFOMLQyJCJ7957MUdc%2BEURYXEeW0s7UksRAwQo9N66STyPHDP5UhZZUA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d6ec790b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/app-gallery.svg | 188.114.96.1 | 200 OK | 101 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/app-gallery.svg IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeSVG Scalable Vector Graphics image Size101 kB (101240 bytes) Hash2e9d3e9f944feef7941f89d8e23335fd a60f11c08144cc39e319c556635f894b75313daa 6c93f94f4a758690a766b7b71f74242741d4e9f9a314ec41977ad46035d2d0b7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/app-gallery.svg HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:03 GMT
content-type: image/svg+xml
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eDctFDRfnTxzTaHl7fIljEd87YQtLq%2BcLsTzGxAceO%2BtU1E7d1TLCiZW2CXtuu3RU%2B%2B%2FIyFgTHqPWEoHFkMA8XGryFAig5BWc8yfhJGF6mOOHiHIgSDF4HNBBBgSon0UgGCfvPcNuNaahw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809e25bb60b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/facebook.svg | 188.114.96.1 | 200 OK | 739 B |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/facebook.svg IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeSVG Scalable Vector Graphics image Hashf66781e4d3e5d06dac12ae79cc53a717 08edacbcdbc5ed37b4b48bf14a4e1f7dcfbc9999 e173f945b31bae4215e84f56d903d5500a85ea69b96ddc7851ffa378a144a17c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/facebook.svg HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:03 GMT
content-type: image/svg+xml
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ykyb5Lr1VmUNtfV%2FYFkEIK%2BmcFQ11YQFSsMFsQQbYGkmVC%2Bo8%2F4yb1bb%2F0XyVJyiMiflCFxKex4JhmrCGdB5Nz2aB9z55wIhC8CsDJdnXaGEmWVlOVgW47vZTfkpX50Kwx%2BBIbuLiF4%2BMg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809e26bbd0b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-Bold.c6aebfe.ttf | 0.0.0.0 | | 0 B |
URL GET front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-Bold.c6aebfe.ttf IP0.0.0.0:0
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_nuxt/fonts/IBMPlexSans-Bold.c6aebfe.ttf HTTP/1.1
Host: front-pttavm.mncdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pttinternetmagazasi.com
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-Regular.0519459.ttf | 0.0.0.0 | | 0 B |
URL GET front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-Regular.0519459.ttf IP0.0.0.0:0
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_nuxt/fonts/IBMPlexSans-Regular.0519459.ttf HTTP/1.1
Host: front-pttavm.mncdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pttinternetmagazasi.com
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| pttinternetmagazasi.com/urun_files/platform.js | 188.114.96.1 | 200 OK | 58 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/platform.js IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeJavaScript source, ASCII text, with very long lines (2664) Hash975e0b792140150ad7518885c211b608 63318e88c4bd674a3c633ffa1e8bad33b2623b6c 5f6e688bad1466111453038e5a323cabf3c4e3d97c6604d49b743b60f1dfa644
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/platform.js HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
content-type: application/javascript
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uk9dD5pME7%2FsxHVf2bohFVtiHw%2FNWzxQV4qgLQTAZaNcmNyaatPWKYwECHqWUWXpB2roqpjB9%2FDOtCrU13%2FfFQlV4Vj9q5Sys2L6hIEwP8FhOW36iD8g%2FnshBOjC2iadQnWEn0GDQ6YLwQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d71cc00b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| front-pttavm.mncdn.com/_nuxt/fonts/epttavm-icon-pack.2834e8c.ttf | 0.0.0.0 | | 0 B |
URL GET front-pttavm.mncdn.com/_nuxt/fonts/epttavm-icon-pack.2834e8c.ttf IP0.0.0.0:0
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_nuxt/fonts/epttavm-icon-pack.2834e8c.ttf HTTP/1.1
Host: front-pttavm.mncdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pttinternetmagazasi.com
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| pttinternetmagazasi.com/urun_files/owl.theme.default.min.css | 188.114.96.1 | 200 OK | 1.0 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/owl.theme.default.min.css IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun_files/spa.html CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeASCII text, with very long lines (1019), with no line terminators Hash7083d421eb69639bbf9fa4aeb5eab968 9c00d6da0821b436bc98111078488cfdfa193315 7af58bc47695b5e8903becc8c7e00965d1179f4afb19dcc50f5a8f1368618e47
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/owl.theme.default.min.css HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun_files/spa.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:04 GMT
content-type: text/css
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3wcJsXp5%2FFgqzdLLFQMloJx3X0z5gXcFRjeNqICASx1eW5%2BFAUIy0Px2qSKrsKCirwsrXzT%2BrjWZeWgUIY%2F2gzN%2BWyZQyip3p%2BTiIpriO6h5oojuXhxxc6kjYIzfx7tDed6QkU9y8fhl8Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809e4ce900b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-SemiBold.feed3fa.ttf | 0.0.0.0 | | 0 B |
URL GET front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-SemiBold.feed3fa.ttf IP0.0.0.0:0
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_nuxt/fonts/IBMPlexSans-SemiBold.feed3fa.ttf HTTP/1.1
Host: front-pttavm.mncdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pttinternetmagazasi.com
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| front-pttavm.mncdn.com/_nuxt/css/022be3b.css | 0.0.0.0 | | 0 B |
URL GET front-pttavm.mncdn.com/_nuxt/css/022be3b.css IP0.0.0.0:0
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_nuxt/css/022be3b.css HTTP/1.1
Host: front-pttavm.mncdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| pttinternetmagazasi.com/urun_files/linkedin.svg | 188.114.96.1 | 200 OK | 1.3 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/linkedin.svg IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeSVG Scalable Vector Graphics image Hashc45f4a44a7be462976c07a244f456693 ac3e1d31b24833de2b299697929075c922a7be5a a1224373c72bf0965fad1996111a2f541b30256079537b94ff80c87b802eaff5
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/linkedin.svg HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:03 GMT
content-type: image/svg+xml
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DawR2Wkkv1D%2BIbLWEVtYB2SfBN9JNfR63kSmsyfj%2BDsx53CJYMU9jQbZPCNG0sIDJbjhnJuZxqATu3rr%2FPzU3cfQM7kKzoYw4uTHCN1WQ6Pn92ceM1z3Od8eIPnqCJuvoerE7T30diyQ7Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809e27bd70b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/footer-ptt-filateli.png | 188.114.96.1 | 200 OK | 3.4 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/footer-ptt-filateli.png IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typePNG image data, 120 x 80, 8-bit/color RGBA, non-interlaced Hash6aac152e1254c5a6b799b16c1b336403 ce1ec2eaa4d53713cbe0dc4ea5a6848c43ddc34b 133beb19988df7fb7588e80c779261c100018c690d9a4f0dee9cd3605c4114de
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/footer-ptt-filateli.png HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:03 GMT
content-type: image/png
content-length: 3406
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4EssGg8CDudd1%2BNJ%2Bmac4EDabZBt6%2Fzzgdve4UkjIoyQwMvi%2FD1RX9EWkycUY3qv%2BZw33VlblMpA1jLLp60hjUzDrpChisQ10D102wo8k%2B3hiAiEeaDAGNbrBw%2BZtkxvtn6BQHamxpOTVQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881809e28bea0b3d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-Regular.0519459.ttf | 0.0.0.0 | | 0 B |
URL GET front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-Regular.0519459.ttf IP0.0.0.0:0
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_nuxt/fonts/IBMPlexSans-Regular.0519459.ttf HTTP/1.1
Host: front-pttavm.mncdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pttinternetmagazasi.com
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-Medium.e177754.ttf | 0.0.0.0 | | 0 B |
URL GET front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-Medium.e177754.ttf IP0.0.0.0:0
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_nuxt/fonts/IBMPlexSans-Medium.e177754.ttf HTTP/1.1
Host: front-pttavm.mncdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pttinternetmagazasi.com
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| pttinternetmagazasi.com/urun_files/7603b01.js | 188.114.96.1 | 200 OK | 512 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/7603b01.js IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
Size512 kB (511641 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/7603b01.js HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
content-type: application/javascript
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DS6fgVCclmZp3sQcOoQLugnRIWyrsc%2Fn70gn26J2wYavDz6O%2FvdDQb%2B8%2F5DO0OpDvLHl8fg%2FwWuzAmCMMqLsX4%2Fi5QDrvw7ssOfB6dx5XhTRTebURG33CUZIAWOfIDCBzxBh9Hjavhw9oA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d6dc410b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/8886352.js | 188.114.96.1 | 200 OK | 30 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/8886352.js IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeJavaScript source, ASCII text, with very long lines (30296), with no line terminators Hashcd4f83400723a17b25c081b6ad9244cb 1ab0f81cf8fc4fe10f2ee12c38774f5f42d325f0 bc173322f0a85bbecc6d9b6e0a24512bfee3f34213d865f7f76566ce28a6fe39
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/8886352.js HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
content-type: application/javascript
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jvdeHxibaN3wkdOu57Nk%2B%2BrZccUVEy4XQxigvh6iXZ1GL4vaEHuGHQTCUn4KKo21XMmlcbap7xk74B8%2FFU4b%2FaQKgLDPBtHi%2FJvQESU2UqvjqHZzNYmM3e4GyfgkVDQuxmI%2F2H2FnmoHTw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d71cc90b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-Regular.0519459.ttf | 0.0.0.0 | | 0 B |
URL GET front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-Regular.0519459.ttf IP0.0.0.0:0
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_nuxt/fonts/IBMPlexSans-Regular.0519459.ttf HTTP/1.1
Host: front-pttavm.mncdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pttinternetmagazasi.com
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| pttinternetmagazasi.com/urun_files/guven-damgasi.caec19a.svg | 188.114.96.1 | 200 OK | 5.7 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/guven-damgasi.caec19a.svg IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeSVG Scalable Vector Graphics image Hash69750f9b2bf70d83d40bd2310c9348b1 546f08a947984172e44fcde286534eea041b8e50 cdd1d52827fba1ec1a4b82ddb2cf8b3d7ec1bc028ea19f1a079ae4ea589cc78d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/guven-damgasi.caec19a.svg HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:03 GMT
content-type: image/svg+xml
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=izXSAUlxvweA%2BNnQh7P9qysIQvUscoUTIc3jerVHDcP7i0kV%2Br5PCQ69FTdJALhdfxI3BB4UfaahIWGIJ0hxp4u6LzmwLhYttXHoYEBnW3G8HzXO4EQma1LdvQqMtG0xwfqjyHcLiiDvZA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809e26bbc0b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/jquery-2.0.3.min.js | 188.114.96.1 | 200 OK | 84 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/jquery-2.0.3.min.js IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun_files/spa.html CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeJavaScript source, ASCII text, with very long lines (32023) Hash0a6e846b954e345951e710cd6ce3440e fbf9c77d0c4e3c34a485980c1e5316b6212160c8 b13cb5989e08fcb02314209d101e1102f3d299109bdc253b62aa1da21c9e38ba
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/jquery-2.0.3.min.js HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun_files/spa.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:04 GMT
content-type: application/javascript
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DKFcKgiWJ8ph5a0zpTWFUo9FIIF%2B28oYVZYhms7QDP88Fb7Z7gM2qe7x2zsrN5xA%2FL%2BMcCVY1rKWUEmBpQ8smcbNsYNSnsdCYst40UjF9NN7KqY7qiEa39bB6%2BVkIgo5BydoivspFFJaDQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809e49e660b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| cdn-fe.pttavm.com/_nuxt/fonts/eptticon.fb98198.ttf |  212.102.38.47 | 200 OK | 26 kB |
URL GET HTTP/2cdn-fe.pttavm.com/_nuxt/fonts/eptticon.fb98198.ttf IP212.102.38.47:443 ASN#60068 Datacamp Limited
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerCOMODO CA Limited Subject*.pttavm.com FingerprintF2:6F:5A:FC:1C:F8:4F:77:A6:40:8F:26:EF:16:B0:9B:C7:E5:5F:A3 ValidityFri, 20 Oct 2023 00:00:00 GMT - Tue, 19 Nov 2024 23:59:59 GMT
File typeTrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, eptticon Hashe24929814aec7434ede3ec365e98c195 73b8e266d237098071d0bab0ab518bd4eb6dd979 cd6b4d2d37bec154544f39ab5c818511560c748534816d0af3224940f2d3ae7c
GET /_nuxt/fonts/eptticon.fb98198.ttf HTTP/1.1
Host: cdn-fe.pttavm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pttinternetmagazasi.com
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 06:58:03 GMT
content-type: font/ttf
last-modified: Thu, 25 Jan 2024 12:26:04 GMT
etag: W/"6400-18d4095a2c0"
vary: Accept-Encoding
x-backend-server: epa-web-v2-06
strict-transport-security: max-age=8640000; includeSubDomains; preload
x-midtier: nl-naw-ws-s08
x-cache-status: HIT
via: HTTP/2.0 Merlin CDN
age: 8790996
x-edge: cz-prg-dp-s04
server: MerlinCDN
allow: GET, HEAD
cache-control: max-age=7776000
access-control-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
|
|
| pttinternetmagazasi.com/urun_files/footer-turpex.png | 188.114.96.1 | 200 OK | 3.1 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/footer-turpex.png IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typePNG image data, 120 x 80, 8-bit/color RGBA, non-interlaced Hash9a9bd97f8cea0c728601de5af6607344 ad755c612c4c5e3d5f0c9fe3944975c1c76770bb be111ea3f931a22a6fbbd2b5181d81b6ff4255e378f9091a69fb1019dd27aeb4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/footer-turpex.png HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:03 GMT
content-type: image/png
content-length: 3066
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sPnFRr0n2j92w%2B8XirBfkleD3RJHsDBlLfSAY%2FtcNl09RNrpL8%2Bi%2BTX7UWjCkWPBQhOxO3on0mSBKXh0O1ysdkxJFHGqzK%2BYhWLMWN1Zf%2BNMh0kOmHLbE0RDjlCKAntthdJjfAdUvzJEdQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881809e28bee0b3d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/b59b2b4.js | 188.114.96.1 | 200 OK | 1.0 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/b59b2b4.js IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeJavaScript source, ASCII text, with very long lines (1059), with no line terminators Hashf367719fd455d243099fe7bc1b63d562 3b388506fba2e229a5b03918c94c6795f53ee1d9 28f13915f246523af0d419bafe6a3629a7a5df8b7b35066e5b452358d4e6f555
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/b59b2b4.js HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
content-type: application/javascript
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5sXBEBFtRpFEwHyCgvIURaE2ej1TsbboGaaRIHr1d4dC%2B1jmIdhyggYipAvTgfqrRsUMTTbm9Ertm9LzmjpDRAuKEEQIs1YBg3vsHaMtRPaMwkoWce9DDVSIuZA%2F6SDSGjWbrDM9U6zl8g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d6dc5a0b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/js(2) | 188.114.96.1 | 404 Not Found | 315 B |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/js(2) IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeHTML document, ASCII text, with very long lines (326), with no line terminators Hash97ef40509b73c101d6815511c3adf98d a4242322497ea630ea72e26ba297a95a2bbe5ccd 322c1f60d9d454c801f7cff3173ef16b61cf9963a64e09a4d9e21d36218b56be
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/js(2) HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 10 May 2024 06:58:02 GMT
content-type: text/html; charset=iso-8859-1
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7n2fdYKA%2Bh2XBcrXSna7AmhWU5kIOmRb8s%2BpEm1QOB%2FioJ4iOd7DWv8qZIX%2FytLbgAxqfj5y0SFxENb4m2Ra5M7DRotqXvZi%2Fn3GzneDz9o7fM65CYI5%2BNS8Nei50eVGmQgakUMZyA0CQQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d70c990b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/instagram.svg | 188.114.96.1 | 200 OK | 1.7 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/instagram.svg IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeSVG Scalable Vector Graphics image Hash06b079dfc4b3d7d531a7c457ce73518b ddf599b14b891308e160898cd7aac7e215a2800f 10030e3338ec687b1d2571de8b6b863ba1c51197a2f6b37569f05c6d80edc255
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/instagram.svg HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:03 GMT
content-type: image/svg+xml
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=m%2FoCf3KsqsGydwQmLaRjiasytAI25LEtiHmAiShzcW2KneyNuLRbbqflicqTk706QhpoiZFDWQyweXJr4cEmF7ry9nn%2FPsdv6slyr5kqIGPs8EwM43H5X4InDiBMJsg5BnmJu%2B8CZHKAkg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809e27bd60b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-Bold.c6aebfe.ttf | 0.0.0.0 | | 0 B |
URL GET front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-Bold.c6aebfe.ttf IP0.0.0.0:0
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_nuxt/fonts/IBMPlexSans-Bold.c6aebfe.ttf HTTP/1.1
Host: front-pttavm.mncdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pttinternetmagazasi.com
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-Bold.c6aebfe.ttf | 0.0.0.0 | | 0 B |
URL GET front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-Bold.c6aebfe.ttf IP0.0.0.0:0
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_nuxt/fonts/IBMPlexSans-Bold.c6aebfe.ttf HTTP/1.1
Host: front-pttavm.mncdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pttinternetmagazasi.com
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-Medium.e177754.ttf | 0.0.0.0 | | 0 B |
URL GET front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-Medium.e177754.ttf IP0.0.0.0:0
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_nuxt/fonts/IBMPlexSans-Medium.e177754.ttf HTTP/1.1
Host: front-pttavm.mncdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pttinternetmagazasi.com
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| pttinternetmagazasi.com/urun_files/75f882e.js | 188.114.96.1 | 200 OK | 37 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/75f882e.js IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/75f882e.js HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
content-type: application/javascript
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iXQbLtkqAsqudZ2KVidxpytIzHC9UQKLvrzTUPKJKG%2F8zfbv4MlggJTRpu85%2FZQk9iyk0AbD3zlACl5ySuOoG09cb5qkN5M1%2Fs37HXU%2FP3UtkdtmKTIr5rG0zSqwPL66WNzj%2FQOTBDsJQw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d73d060b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-SemiBold.feed3fa.ttf | 0.0.0.0 | | 0 B |
URL GET front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-SemiBold.feed3fa.ttf IP0.0.0.0:0
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_nuxt/fonts/IBMPlexSans-SemiBold.feed3fa.ttf HTTP/1.1
Host: front-pttavm.mncdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pttinternetmagazasi.com
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| pttinternetmagazasi.com/urun_files/2147c26.js | 188.114.96.1 | 200 OK | 7.0 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/2147c26.js IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (7290), with no line terminators Hash2672f88437c86779b5914d421658959d 084d6e15f39f77471ba69cb1caa23dd27a372222 6aecc9cf6d0b17da706823adb42510b98de8baba458b8fcb4c0e6e79e73e6e71
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/2147c26.js HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
content-type: application/javascript
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MpK0B760%2BJmEA%2BVpJ7IlP6nUoZHoVvwGp5y7thhU59cdlF4xSPrP1FW2cgHvp5Zdl0VPadq1JjWENkL4VNU%2Bb39Lat%2FxamWfPqm0mThlVs5TFvakGNgPqfPey5QshlXMuiP41SjalHOZgA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d72ce60b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| front-pttavm.mncdn.com/_nuxt/fonts/helper-icons.7055f37.woff | 0.0.0.0 | | 0 B |
URL GET front-pttavm.mncdn.com/_nuxt/fonts/helper-icons.7055f37.woff IP0.0.0.0:0
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_nuxt/fonts/helper-icons.7055f37.woff HTTP/1.1
Host: front-pttavm.mncdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pttinternetmagazasi.com
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| pttinternetmagazasi.com/urun_files/m=base | 188.114.96.1 | 200 OK | 107 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/m=base IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun_files/iframe.html CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeJavaScript source, ASCII text, with very long lines (1845) Size107 kB (106702 bytes) Hash4e97b122bce2fca4ef959ed7d5643071 c97bcd98289409f1bcf91f25b171a9d71ce47a13 7a89ccdd51adf69dc13aebe76469f46dd6d02a7e94b2c1e89765704aafea5cbb
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/m=base HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun_files/iframe.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:03 GMT
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GYT2kOQBmYAd%2BNdLxLZJDuhJCIYDB%2Fm4CwmNvHxmzFJyQw0INohMI21FijovyqHWnKX7mZ%2BzmJnRZzRmFmYr%2F6bsJukEKpIba2cd7zGan38ByV9w%2BqiqWKmUx7MHrgXKjDuKXqSYvwkdKA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809e36cd10b3d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-Medium.e177754.ttf | 0.0.0.0 | | 0 B |
URL GET front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-Medium.e177754.ttf IP0.0.0.0:0
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_nuxt/fonts/IBMPlexSans-Medium.e177754.ttf HTTP/1.1
Host: front-pttavm.mncdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pttinternetmagazasi.com
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| pttinternetmagazasi.com/urun_files/gtm.js | 188.114.96.1 | 200 OK | 364 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/gtm.js IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
Size364 kB (364096 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/gtm.js HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
content-type: application/javascript
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=j4UXUkrx3qGq8Rn5RBBs3Nh%2BacJZozSjuSXr64%2F3sr5KMKNVAmVpe7E1VEgpzV5ZpmJ4nC9knrJb7f0iPiw%2FVKTLJ2XBHz%2BGx3YF7gWmaIdQ5bwJJKaTYCcDZQVcGSY1goO28d2Gfmx0kg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d70cb50b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/be9ecf9.js | 188.114.96.1 | 200 OK | 9.1 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/be9ecf9.js IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (9344), with no line terminators Hash0c48138b5abd752e298212bf01599046 26a9c84a02f101748e3b80188665d8af00350c7d 0733e3e41cf5d59982279611b73ed96ff8157ebea52445620fccdbd88d031df8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/be9ecf9.js HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
content-type: application/javascript
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4vakc3uxzVNq%2FamefgKB42X6tgFscPLfCfWtZDgk1M3QXWweqAXJ%2BcKWR1pKmisBnxhPFDyDmRK3Po%2BIyyxF40u%2Bj3K%2BB%2FDBbvahfid%2Blhx7AgSvWCEwW69kAa5ptIFk6hJ0KVPDM9oFAQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d73d0a0b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/chat_v3.min.js | 188.114.96.1 | 200 OK | 65 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/chat_v3.min.js IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun_files/spa.html CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/chat_v3.min.js HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun_files/spa.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:04 GMT
content-type: application/javascript
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=95M%2BomVo%2F%2FO7CWYTNq%2FGNzDLbwR02M8hVUQB81e3P5QVjzx7qz164jfY5qVBUMchVlZwXAnJw25FwgqVhsjAGMCwhCX9J3sto4zFTi8QL%2B3APF24NLsERUn9FoGbmeaV1TNDi6W0vTYW4A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809e4decc0b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/e8af439.js | 188.114.96.1 | 200 OK | 216 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/e8af439.js IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
Size216 kB (216350 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/e8af439.js HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
content-type: application/javascript
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Af6c%2B4l3QICBC1iufH1QRoctZ995C%2BSLDWObliUjbcDnkalincmccCAubnGDDNx676%2BmWyCd3a9BO4zgGEhScZ2S0rWXXIN5ffcpOG7IeR5iBmw1Fi3M8UCvkJMKfbfWnXv6T%2FD%2Fp%2Fa7rA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d6cc2e0b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/ins.js | 188.114.96.1 | 200 OK | 652 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/ins.js IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
Size652 kB (652134 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/ins.js HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
content-type: application/javascript
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=P8n3I7EESyEeLlxLRqWbJ9e9REzE2vWuNTw4jmJApF%2Fu6g%2BThQXWZXvZghhaAM3cdWitqlRB05phsHEumDWWnS3hnR9j32%2BSMM%2BOxAkKtdmJa4oeVD%2B9%2BxBB%2FgSOnQVMNKLHLkuXkL4nAQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d70cbe0b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| front-pttavm.mncdn.com/_nuxt/74de7a8.js | 0.0.0.0 | | 0 B |
URL GET front-pttavm.mncdn.com/_nuxt/74de7a8.js IP0.0.0.0:0
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_nuxt/74de7a8.js HTTP/1.1
Host: front-pttavm.mncdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-Medium.e177754.ttf | 0.0.0.0 | | 0 B |
URL GET front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-Medium.e177754.ttf IP0.0.0.0:0
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_nuxt/fonts/IBMPlexSans-Medium.e177754.ttf HTTP/1.1
Host: front-pttavm.mncdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pttinternetmagazasi.com
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-Regular.0519459.ttf | 0.0.0.0 | | 0 B |
URL GET front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-Regular.0519459.ttf IP0.0.0.0:0
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_nuxt/fonts/IBMPlexSans-Regular.0519459.ttf HTTP/1.1
Host: front-pttavm.mncdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pttinternetmagazasi.com
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| pttinternetmagazasi.com/urun.php?id=3 | 188.114.96.1 | 200 OK | 197 kB |
URL User Request GET HTTP/2pttinternetmagazasi.com/urun.php?id=3 IP188.114.96.1:443
CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
Size197 kB (196761 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun.php?id=3 HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 06:58:01 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XNsfTwkKeLFuybxwxtfu51XVbj6szhZJJo9Fh6QLBtwMe7DoefkVNURqKAuJc2ujg59seqp8ypM63ZCOR1RcbPRkLO1cS5%2FwpdSzWfhd1ju%2F5hIVxYeqtlWQWB5AUTVUCcA4%2BAAn8fBONQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d0aaa40b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| pttinternetmagazasi.com/urun_files/info.js | 188.114.96.1 | 200 OK | 55 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/info.js IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeJavaScript source, ASCII text, with very long lines (54676), with no line terminators Hash0e94635029b44d8de2a60571ceafc2db d1136cc93f864b6de6129deebf9e51dffe326bb5 0fde5d942fefa669efd9569b2a4538e9ec6467e05c1088670e4238c3fdf88ce7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/info.js HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
content-type: application/javascript
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hk6PWv8QuHLDDikxhzdXaZZIUw28Qxo6bfTKL9ELp0MkJdJDrRD8JhBXZkMpUMnwjF2ajEzysfvIm8vX4QeJb78DXZvXQbMNV0lvu6X0%2BZU7iZjrTtr7ysppp6fuKpcrqD1PACwRBJkTmQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d73d200b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/microphone_close.svg | 188.114.96.1 | 200 OK | 1.1 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/microphone_close.svg IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun_files/spa.html CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeSVG Scalable Vector Graphics image Hashc5a148cbc7b0f98e59c9d8cc977be04c f3f922669e4942bb783fcc934d04e804a5acf34a 704cb37809fe4cab54535c49ab7eb36bee83ab4becbcaa7f5326c49c37ec37e4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/microphone_close.svg HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun_files/spa.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:04 GMT
content-type: image/svg+xml
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gXVi%2F6n%2FOnJXdPbQZYuWbhzsTjkzJ2oj8VtQY9sJd5J1FOsqC4uju8nHAxyPvpZ8D7hS8l2eOIzOIqCNC8cS7wC0u30sVa39KRLtFzuMRerOtqBdLkgh6c1EIz3iD6OK8%2BT4tPl%2F98uDnw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809e4dec50b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/bootstrap.min.js | 188.114.96.1 | 200 OK | 37 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/bootstrap.min.js IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun_files/spa.html CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeJavaScript source, ASCII text, with very long lines (32033) Hash5869c96cc8f19086aee625d670d741f9 430a443d74830fe9be26efca431f448c1b3740f9 53964478a7c634e8dad34ecc303dd8048d00dce4993906de1bacf67f663486ef
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/bootstrap.min.js HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun_files/spa.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:04 GMT
content-type: application/javascript
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HTVMADr7RTPg6owg86gXIrcfIIInbhPMS1eryMxrRzeOgImw%2BlPHlgPqALg7xvYv%2F78ADGUi6%2Fj7qYC%2FWAoprY3Ev7nHuU9gkySgKj5Ueh%2FN0IRXSQT5vU4lPGsC08TyDrc4Ty1jNlgPBA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809e4cea60b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/tarim-kredi-kooperatifi-logo.svg | 188.114.96.1 | 200 OK | 356 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/tarim-kredi-kooperatifi-logo.svg IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeSVG Scalable Vector Graphics image Size356 kB (356119 bytes) Hashf45f65b216a512a6b4e95cb0b304c430 6aceba78a4abc3377b9ed4e3002919a0902c3be8 fbc857b3da22ea3d34b8c776654ab2e33a0ee95802cb0ddf74657b55a88ad246
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/tarim-kredi-kooperatifi-logo.svg HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
content-type: image/svg+xml
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=t4gHqSZ0IGSJ%2FZG15oJBGKNbFpdQQRYPweSiWMUWf5GSTWndzBwGPr9ry5hz3%2Fk%2FvuoTIvCT9sV74j%2FEnr4inbwnWLXqzz%2B3%2BIQZTt1cKxTc5D56M0fbQoekNTqB%2FF2Ec%2BlYtn7VlI%2FxQg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d74d330b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| chatserver.alo-tech.com/static/assets/js/linkify.min.js | 34.107.233.18 | 200 OK | 32 kB |
URL GET HTTP/2chatserver.alo-tech.com/static/assets/js/linkify.min.js IP34.107.233.18:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://pttinternetmagazasi.com/urun_files/spa.html CertificateIssuerGoogle Trust Services LLC Subjectc.alo-tech.com FingerprintB1:0C:3E:45:8C:35:01:A5:A5:36:C9:65:00:17:52:A3:08:5A:61:7F ValidityMon, 25 Mar 2024 01:13:07 GMT - Sun, 23 Jun 2024 02:08:22 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /static/assets/js/linkify.min.js HTTP/1.1
Host: chatserver.alo-tech.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: gunicorn
access-control-allow-origin: *
content-length: 11280
content-encoding: br
x-content-type-options: nosniff
referrer-policy: same-origin
cross-origin-opener-policy: same-origin
via: 1.1 google
date: Fri, 10 May 2024 06:55:45 GMT
age: 138
last-modified: Sun, 05 May 2024 19:03:05 GMT
etag: "6637adb9-7c9f"
content-type: text/javascript; charset="utf-8"
vary: Accept-Encoding
cache-control: max-age=60,public
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| pttinternetmagazasi.com/urun_files/info.min.css | 188.114.96.1 | 200 OK | 72 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/info.min.css IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hash4dbe33c645a439722a23922ecacb75a7 e9c235bccf2b68e78e658c97de69359c27474020 df7a64087eab9b9cd76e064cc9db4025d6661f9e4b0f2ecc2c8c9002d48f96a8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/info.min.css HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
content-type: text/css
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HAP5rs8N%2Bw7mRq8ils8ignrfhAH1T7v2LP%2Buc8%2FWUBtW2TpGYk3m2FmkB96mVo6V%2BL1hF1EOyHTTWjQ3hOi1NyLwbHrAxiGBB%2BwhcNz3vm2jPYBiSNOZsVIpJfJv4SeWgw1QWU6RixWfyw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d73d1f0b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/pttavm-logo.72e4a21.svg | 188.114.96.1 | 200 OK | 8.4 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/pttavm-logo.72e4a21.svg IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeSVG Scalable Vector Graphics image Hashd90ea949f76acaab3a660d7b812fe474 61d212fdf9a414b75656cdf5b724c58f4ae55e1e bf788618d46e6278ba4a75907037f3d1d733decb87837469ce42abbf97c3c8e6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/pttavm-logo.72e4a21.svg HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
content-type: image/svg+xml
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GaY3KM08kdj2xIR%2F%2FwHENA8%2Fkkte8tnKI2sz9cYSZp6j%2F4vjrZfKA7ObEjUXYQwByqxEZcV0rLEJE4BHEpYYX%2FnR3t1S06jQUYIRRo7WRnaU7S78Mm5LEFGXIAU9C2VcjV9FHaWGqcSg9A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d74d400b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-SemiBold.feed3fa.ttf | 0.0.0.0 | | 0 B |
URL GET front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-SemiBold.feed3fa.ttf IP0.0.0.0:0
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_nuxt/fonts/IBMPlexSans-SemiBold.feed3fa.ttf HTTP/1.1
Host: front-pttavm.mncdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pttinternetmagazasi.com
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| pttinternetmagazasi.com/urun_files/google_fonts.css | 188.114.96.1 | 200 OK | 31 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/google_fonts.css IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun_files/spa.html CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
Hash7b1185fcefaa4a825aa4d19be81c803d 3e82385c35c08c783ccc4b80eaabf5996ba998a0 3b1a2a415ee2c1f98e6da2de536be6e7dba5dfca738d718d4ec8314317fc5d05
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/google_fonts.css HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun_files/spa.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:04 GMT
content-type: text/css
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4ru3xD%2BvMfInubhGDDc1KSYkWWIXstRdqrR%2BisQwxYGRkrzNBe0XNKFzg%2BJu0PSo16yyFKlS6FTuy5jYQw5G6%2BT1gjjRG5fut9VqykbbO4zjAgjc91Bsf8KKzLQC2qgRgXPC80gJr9HPfw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809e4ce8a0b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/431e7be.css | 188.114.96.1 | 200 OK | 11 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/431e7be.css IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeASCII text, with very long lines (10932), with no line terminators Hash362c93867bf0279606150b8dc9007fb3 a061f25d955f54992d4be40bd0492409cb020843 9f31d3ea5f1b150ee2ed01261cb78cb5880e775db432df6a0dd5409375ee02d8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/431e7be.css HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
content-type: text/css
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1Dq2bJiTrNmLT4NGBzsqnwfCCXD7IfTWFTHG2tKFLlcCXgxDsDZOGNL%2F0EySkTlxT5t1gJbpCZV2cV6D4q1ipjbwnHq2WRFVd7c6ipRGPwVNV7cndV%2F9FVS0T6rufvovKlLi8Z%2BH%2FT7n0A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d6dc4c0b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/epttavm.js | 188.114.96.1 | 200 OK | 2.8 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/epttavm.js IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeJavaScript source, ASCII text, with very long lines (2996), with no line terminators Hashb51b1406cb30e9099c762a0da0ec67f1 f9859756c595e322ad653cbecbe0f8c62ea895d9 967798fc60f993a973a18320f03da36d9a70eec591f1a4c02a3791e3ed1875cf
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/epttavm.js HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
content-type: application/javascript
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6%2BimBzsMGl7OXHi8yAQKLiYE583%2FO7RqnsT%2FX4IHYwJWSncouajY3Lpk%2F3NfSzihif5T%2B0HwCuDDDp9xsTki%2BmgtWH46J907%2FRuMNBJjCpEXMxTtjoQ18sVE9hIdWl%2FJAQvo72pgd7qEGw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d73d130b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-Regular.0519459.ttf | 0.0.0.0 | | 0 B |
URL GET front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-Regular.0519459.ttf IP0.0.0.0:0
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_nuxt/fonts/IBMPlexSans-Regular.0519459.ttf HTTP/1.1
Host: front-pttavm.mncdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pttinternetmagazasi.com
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| pttinternetmagazasi.com/urun_files/3f91190.css | 188.114.96.1 | 200 OK | 8.4 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/3f91190.css IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeASCII text, with very long lines (8372), with no line terminators Hashd1f012e82e4b906a6ea51f88a884666d 24f07f1c769d6a3198de9d3f226cdb1c9474b10e 3987b6b180b115e546a12adbe84458cc421339e9d8787a73fee6449e0e02eaac
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/3f91190.css HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
content-type: text/css
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nX7mmNfDmgurIvKZ1keaKMGA5eihPBNmmWsD%2F6hmzhI96nyG5BwIIGMlYWXOQszQKw32P1UKmM1m4ixfUmcjoDyMNg4ljmZ69mGfGIW%2B8%2FWKR7XAWxp%2Fy7O6rwyok%2FLSGGlHbsY8IQyJnQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d72ce40b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/events.js | 188.114.96.1 | 200 OK | 5.1 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/events.js IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeASCII text, with very long lines (5422), with no line terminators Hash5f3de66f122c7a9acb4deb35abcec75e d428d02a53cb9847cdb956e44fb4d046bd2c18d7 9948f21286530610bad1915193811afa81a6ea30029fa197f7f1aaacf17bb9b7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/events.js HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
content-type: application/javascript
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=l%2B1dm0BexDyuSg1j%2BEZJltZCDB3kcE4vcvu8yU2o63asiyQqJ2EoMZ3rMAuCBWcrzvsulPc1XPR5Fn3na8mZ8xPjW6ms34SoaMUPYOzznJ%2BHuFJ8KtT5N1i9ly1U8lX0aGzkUlFRNe0rDg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d6fc840b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/260ab9a.css | 188.114.96.1 | 200 OK | 3.0 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/260ab9a.css IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeASCII text, with very long lines (2961), with no line terminators Hash585c371a7a812d5a089602bea9a0fe00 7fafb8ebd24ac3f42345ae48cfec41e0d3402ddb 4c0705ed720b766f0a7a78dfd95ea8c919d9622b69e3ddf94ad1706ad46115e3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/260ab9a.css HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
content-type: text/css
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hz5AEUjqmUBss1HrbO3O7NRJGFAsFHJybCbKSNzPhz1pFgbkdnk2C%2BDbCVZKYy%2BJ86j4wGsdsoBzVhLKGTpFpEMbVP%2FebFvXTsb4T1PQEdWow%2FW3O8sjaba5LYvmpdqvSSpR7tqWHNKuiA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d6cc310b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| front-pttavm.mncdn.com/_nuxt/fonts/epttavm-icon-pack.5b7d09b.woff | 0.0.0.0 | | 0 B |
URL GET front-pttavm.mncdn.com/_nuxt/fonts/epttavm-icon-pack.5b7d09b.woff IP0.0.0.0:0
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_nuxt/fonts/epttavm-icon-pack.5b7d09b.woff HTTP/1.1
Host: front-pttavm.mncdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pttinternetmagazasi.com
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-Medium.e177754.ttf | 0.0.0.0 | | 0 B |
URL GET front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-Medium.e177754.ttf IP0.0.0.0:0
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_nuxt/fonts/IBMPlexSans-Medium.e177754.ttf HTTP/1.1
Host: front-pttavm.mncdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pttinternetmagazasi.com
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| pttinternetmagazasi.com/urun_files/bootstrap.min.css | 188.114.96.1 | 200 OK | 41 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/bootstrap.min.css IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun_files/spa.html CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeASCII text, with very long lines (41188) Hash5839179b1e59174601c0e5c3163431c7 e320297d3b8aa9471ebbb8a1dc24601024c1323f cbf8ded2623fb24f24820d26315c7b9481bfe63f1a45afc2bf7e4dfb4e992c32
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/bootstrap.min.css HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun_files/spa.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:04 GMT
content-type: text/css
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hJ%2BGMHcJ%2FXpEFF%2B1NrnEpkulZhlc1P8EuKkNOS1QYsBbks%2BPEu9HpIJ3%2B4qyHEQskAfos1ENfdRAiMPro7HiuHyYu3ayumHTn1BQdwRgUBTxyLTXOuJaxixp53dYPeu1jFM1ibmBErqcdg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809e4be880b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/down_button.svg | 188.114.96.1 | 200 OK | 1.9 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/down_button.svg IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun_files/spa.html CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeSVG Scalable Vector Graphics image Hash19101e7cee274ddbcfe360ea5edf3b08 bbe1de014bc693146be060a8e1aca410c7600428 25048dae367eb629bc3d409de221813a8a74a910a0c2bc3b0b73d09d131b089a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/down_button.svg HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun_files/spa.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:04 GMT
content-type: image/svg+xml
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ty9NHYlTgOFBn%2BNnh8tho3yXRImB0B9%2BkXmUB7FzPfhV4eVGccDHsWuOXKjX3v5UbGT4yMCSh4od9UGBVQRrjna%2B9hH%2FxMWxAbAJhiggZGJQ0jvx3%2BFfRpo%2Bnn5Q%2BHK%2BXIC1HpWZYwZ5Fw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809e4dec30b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/7f47e12.js | 188.114.96.1 | 200 OK | 73 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/7f47e12.js IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/7f47e12.js HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
content-type: application/javascript
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4TNCPDiEKtEKg%2Bjg%2BxbghuMdXTwbwyARjiPm0dHtYgagld3TffzNtWsw0Zvek%2BfSf0PvK%2Ffu46oixV%2BBzLj9qkLnayizw%2BkpWjSNtGR6TKEriBfRF050zx60cImEEdH3IOGLjsv%2F9puJ%2Fw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d71cc30b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/all.min.css | 188.114.96.1 | 200 OK | 6.2 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/all.min.css IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun_files/spa.html CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeASCII text, with very long lines (6549), with no line terminators Hash2417af18f8ebd67a388e72ef3aeba3f4 5b732cfe95e8fc8df4744df050ea07ee49b058c7 6521c503e1afd0172e752b02fb465b74331eaedd7f01735954b2d710372289f5
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/all.min.css HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun_files/spa.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:04 GMT
content-type: text/css
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HIDmf%2Fa%2FQTpfYsZ8DkUWShADK6TOAPdyhjvkObbOZWRAi03JkfJpHEl3SH0j297FhZNJ43CoKNa1NY53YrMjfPMa9SCsB7Vzi0BYqaibPqjjs6gEqOd2Io56op54dx8%2F%2Fj3IKn4g9uHzPA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809e4be890b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/owl.carousel.min.css | 188.114.96.1 | 200 OK | 3.4 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/owl.carousel.min.css IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun_files/spa.html CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeASCII text, with very long lines (3361), with no line terminators Hash8105ebb1e6a52761abdc3e6d4c6d6ebe cab16ccdec36fa26992e082cc19e6a1728edd6a0 98059fb08021f6dd4efd5d90ddcf49758c9b63c8f4e4ef9e5c94fc33f4cfec31
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/owl.carousel.min.css HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun_files/spa.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:03 GMT
content-type: text/css
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=N6yWPcTaZ3I0EKL7rI9xs9KnDMkYwOsOTWqlW%2FcthYKwiFMlvhRqUsin2MJUPKiOne8JZRmbSpsO0gkkvYjJkMiD3AzQnIADeJWH5CxVANY2hH3W0sQBzyzFc9JC%2B8IB%2FMjSVbuSWhoZog%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809e4ce8f0b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/langcodes.min.js | 188.114.96.1 | 200 OK | 4.4 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/langcodes.min.js IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun_files/spa.html CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeUnicode text, UTF-8 text, with very long lines (4541), with no line terminators Hash87f614d7ce57f43a2d4bc0874380abd7 c38eafce3a742b829aef6974fd67720adbfd2a31 7474085e9a483a6278ebdaffe782f25b199b65123691be661b04f0fcc3d94f12
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/langcodes.min.js HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun_files/spa.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:04 GMT
content-type: application/javascript
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jGCqbJgjrB9mpYFfNJXrtfdePP0nKHVpuUrQF7P1nvSOYgGkg9Dyjqs5jPRSm3gk6ORzVF0aZfpaqLXbpiF8GTrvTaTVbkcCyrtgWhH%2FDzeS18rIH%2BfK3xokynj3fGPN9yAMpbXG1QmCug%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809e4ce950b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.pttavm.com/favicon.ico | 0.0.0.0 | | 0 B |
URL GET www.pttavm.com/favicon.ico IP0.0.0.0:0
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: www.pttavm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| pttinternetmagazasi.com/urun_files/fd54bc5.css | 188.114.96.1 | 200 OK | 172 B |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/fd54bc5.css IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeASCII text, with no line terminators Hasha4454962499b9fa78b16ff471a33b69f 3324ab3edb98fca47f243049d642ec97121838d5 bd5d9c6930d4e389bc3dba76f75200b4ef267a890b368cef94c7429f0a398693
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/fd54bc5.css HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
content-type: text/css
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EnEmjlAZNepgN4QR0tiYkPjlwNiNHfAuEqKUFj1NWoXwODJmQ3WveKkoWEDuRPQlVv%2F28%2BHoUzFTubuLXJuZkTLNgPQP2%2BjvqTgFzb%2BZu4zXj2pztsKWewhStsW5BuTmO0T5m8DcbzHYPg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d6dc590b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/identify_72059.js | 188.114.96.1 | 200 OK | 138 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/identify_72059.js IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
Size138 kB (137656 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/identify_72059.js HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
content-type: application/javascript
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8tBJcB483O%2BtQnpv5pxCnYt9NuLkoXXn9QISUlTnpf0jAshJ85c4CHbrpjhsRRxSWDMZTPYD79GdyD6rJIG73TMYwxPRJTOvtClfVMMBYSozFrFq0DXHcuUgIcPpg4r%2Bvo2WVypA5sfOJw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d73d1d0b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/59777b2.css | 188.114.96.1 | 200 OK | 630 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/59777b2.css IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
Size630 kB (629807 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/59777b2.css HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
content-type: text/css
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SnxLPFp2JU3BVPfZyT%2FIv3Taw3%2F3Jj1PaYDZYWLa7CyKvuhOHD0b6xP77KV9GExBKAhRvxfwlZL807iwd2IctnLvh1z9FOGK5OBnZbE9FrhsIqdz9y70SjqeK%2BRU%2BZU88Ka4t9hBnve9lg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d6dc3e0b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/f.txt | 188.114.96.1 | 200 OK | 3.3 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/f.txt IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeJavaScript source, ASCII text, with very long lines (3454), with no line terminators Hash416b6f1cb53a49980b846934ff71ec86 b562895d8d7f006221828e70c002b3c5d7573a12 2620885d09a220fb88b49886d53e6620f10473b36704f103ae39766ca4fffc7c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/f.txt HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
content-type: text/plain
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rTZw2I9ZsdbscM9JivGZGU3gvw8pmKOCZknIhmN%2FIQ7lNLIzhTbVF1tk9gzMwR%2F%2FAqYXeSiMvkEb7CcvH7UAz9ashVCyb3ObXAPcr1G2bQuH3hytR2iVD34hzOWb6Z4bj8HY2mb9C2feBQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d73d1a0b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/meb-pasaj-logo.bc3ce61.svg | 188.114.96.1 | 200 OK | 10 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/meb-pasaj-logo.bc3ce61.svg IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeSVG Scalable Vector Graphics image Hash9aa9cf3db89dbfebecad4bd184002cad d4c94fef5967ffee9d256911a1326c55ebe3a73f 39532bf3a6a58287bca9501d3225c5db3e3fedfedaaf1fa07dbc3297aabd6ed5
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/meb-pasaj-logo.bc3ce61.svg HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
content-type: image/svg+xml
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xmu98prUN24HzPX457fP%2FxNbKc6zG4ziWFCxWlzex8yMuZvAm1AFs8jPaTaV5BFd%2F9j1KCAMai2YCwv58MBMgrI2GywS%2BOj1uypipvCkoJQeM0VGncC4U1AUJNg7fmy87H6w0W55XEBqCQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d74d3c0b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-SemiBold.feed3fa.ttf | 0.0.0.0 | | 0 B |
URL GET front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-SemiBold.feed3fa.ttf IP0.0.0.0:0
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_nuxt/fonts/IBMPlexSans-SemiBold.feed3fa.ttf HTTP/1.1
Host: front-pttavm.mncdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pttinternetmagazasi.com
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| pttinternetmagazasi.com/urun_files/tune.js | 188.114.96.1 | 200 OK | 18 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/tune.js IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeJavaScript source, ASCII text, with very long lines (7486) Hash074c9e70b17ef9db8aced963fef4e2d9 caa1063a824083eb483f25bfab3e7aade3441bcd cca8ce472cbf8c44acf7ac24067c2d6075acd1e0cd4c9003de6055289ac5c68a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/tune.js HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
content-type: application/javascript
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zpytSjMgqX03eW1tQ2meYi1GIwW%2Fe%2BXNi7UYzbWwktQreq491vd5tEftvm4sCLhcUcGEe87ls1HWf5RHAQA5zHkVGtMaEjRWiMOfzYWbgtrL%2BACON3PxzjzJ4en25V1OnDQSp8xzZaKw4Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d6fc800b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/f9f1e34.js | 188.114.96.1 | 200 OK | 75 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/f9f1e34.js IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/f9f1e34.js HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
content-type: application/javascript
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ug0RBU989rW%2FPZQTBF1Zlz9N%2BrKQhyBEfxLg1PfOxYGW1nt7IDgBCCmMzNc%2BfVcqAH9E8%2F8jMGAGLoao9pEIwFVill2OJgPdPFniAFLCK%2BbasOwvO4v%2F99B4XQ9zOenoxZu3fefb2lU8Ew%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d72d010b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/b49702e.css | 188.114.96.1 | 200 OK | 2.1 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/b49702e.css IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeASCII text, with very long lines (2053), with no line terminators Hash566e7cd5797b9407d0714c3f5c3be740 796bc20408ddb39fc7199774dd7884ebd38b9af4 89ceac91c5e8b693a1a4f0662263255feb541ea5c0256707a56fe231335d1231
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/b49702e.css HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
content-type: text/css
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CpiyB0QXeDLbNrJ%2B%2FTGSe50w6smR1TYtX4lBqCHFJQoB%2BHj6V%2B2iaewgC4LNNfot08lUKYPRb3CqlJSYTNLvjjhFsgtOvcYBYMR6K7bOgwkP7T1ITFzuWiWnIhxOQ20KbSenyik%2F1ljG9Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d73d090b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/a48c0b9.js | 188.114.96.1 | 200 OK | 21 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/a48c0b9.js IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/a48c0b9.js HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
content-type: application/javascript
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NiprBKj0HbpqPZ7J2ayIEg1%2B9FiOJscPirEmnFKvVdCo0yr1ePLkinpN4%2BkJ9oEvRfFkN%2BT14J0ffB%2BMWtZBzAjozJLlmp6HVpOCjabmICRqo9IRODdiXNOZ%2BCboGKTzxQKrEfzbxjITbw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d71cc50b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| img.pttavm.com/shop/logo_html/41237.jpg?v=1691735027 | 0.0.0.0 | | 0 B |
URL GET img.pttavm.com/shop/logo_html/41237.jpg?v=1691735027 IP0.0.0.0:0
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /shop/logo_html/41237.jpg?v=1691735027 HTTP/1.1
Host: img.pttavm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| pttinternetmagazasi.com/urun_files/cds-pips.js | 188.114.96.1 | 200 OK | 3.5 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/cds-pips.js IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeJavaScript source, ASCII text, with very long lines (3629), with no line terminators Hash2c5f965dfc10876aa83c76d5611f503e 6ea94469db425e7020bd934a7f60197e70d58f9e 0aba6b916d2ba17e9438ce6054141815b7539007190b7f12833bca686970b4fc
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/cds-pips.js HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
content-type: application/javascript
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=luyMIHTn%2Fcc34XcMBxxZ4Bprf9TmfN4OtbIXx0DCUuNOHP0mreN7yT%2BIWaqi8cKoTKMXN9yTy1JZBnr1H1s%2FHrOZgtYEFEeVRZDaSUYuKXz8lSk2qwyEbxHaN%2BUrmvS2BrYK%2F5KNBhJLKg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d6ec6a0b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| front-pttavm.mncdn.com/_nuxt/fonts/helper-icons.1d5ef0a.ttf | 0.0.0.0 | | 0 B |
URL GET front-pttavm.mncdn.com/_nuxt/fonts/helper-icons.1d5ef0a.ttf IP0.0.0.0:0
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_nuxt/fonts/helper-icons.1d5ef0a.ttf HTTP/1.1
Host: front-pttavm.mncdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pttinternetmagazasi.com
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| front-pttavm.mncdn.com/_nuxt/74de7a8.js | 0.0.0.0 | | 0 B |
URL GET front-pttavm.mncdn.com/_nuxt/74de7a8.js IP0.0.0.0:0
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_nuxt/74de7a8.js HTTP/1.1
Host: front-pttavm.mncdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| pttem.alo-tech.com/storage/media?gcs_file_name=chat/chat_icons/6583deaa-05ab-4b32-865f-6912125cccbe.png&chat_icon=true | 35.201.78.44 | 200 OK | 29 kB |
URL GET HTTP/2pttem.alo-tech.com/storage/media?gcs_file_name=chat/chat_icons/6583deaa-05ab-4b32-865f-6912125cccbe.png&chat_icon=true IP35.201.78.44:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://pttinternetmagazasi.com/urun_files/spa.html CertificateIssuerSectigo Limited Subject*.alo-tech.com FingerprintB1:4E:1F:A9:80:5D:F9:7B:A3:6E:FD:0A:19:2E:6D:9B:3E:11:9B:9F ValidityFri, 06 Oct 2023 00:00:00 GMT - Tue, 08 Oct 2024 23:59:59 GMT
File typePNG image data, 1772 x 945, 8-bit/color RGBA, non-interlaced Hashaebdda95dc8cfffee118c2f7cdf158dc fd547f5f7de14d0f8e234b6aaf21ce10c81976a1 cdabe7a61b3729fecd8ddfc82eb2beaf3ee622fcd58b1774e39926dada88880b
GET /storage/media?gcs_file_name=chat/chat_icons/6583deaa-05ab-4b32-865f-6912125cccbe.png&chat_icon=true HTTP/1.1
Host: pttem.alo-tech.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, Tenant
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains;
x-namespace: pttem.alo-tech.com
x-frame-options: SAMEORIGIN
vary: Accept-Language
content-language: tr
referrer-policy: same-origin
cross-origin-opener-policy: same-origin
x-cloud-trace-context: 9cfe2d18b39ea4ca40b55b69f41287e9
date: Fri, 10 May 2024 06:58:04 GMT
server: Google Frontend
content-length: 29339
via: 1.1 google, 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| pttinternetmagazasi.com/urun_files/2f7eb17.css | 188.114.96.1 | 200 OK | 172 B |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/2f7eb17.css IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeASCII text, with no line terminators Hash08190b421fbe82c96195574a7f6aee59 1fdd370b8b4ba9ab89f05250b56dd0fa999f7571 a618d56096aa0c57e4325d863d402381edaef6ff8c34aeafae829e85f907f094
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/2f7eb17.css HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
content-type: text/css
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aj4htULb2Qh%2F0mf4TwFz%2BOh9dYpU8XtkrasRxHqstCCkZoMUZPmIVk%2FjPtKNkhLSIz2reJUlZtHx976slgyDRt6rIrZw3tbLLRBsrqU4MXB9Xva335Ak5bjcGEAnqVpcRMK3ibHCMsUw5A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d73d0c0b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/footer-ptt-sigorta.png | 188.114.96.1 | 200 OK | 3.5 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/footer-ptt-sigorta.png IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typePNG image data, 120 x 80, 8-bit/color RGBA, non-interlaced Hash67714c1fa78b85ce4afb108bbab5a07d 972de5fcc3951eeff09f0c74b01c0ff841d714e5 1acfb4d8c3dbbdade777ade00483daff0a673818ee8d7cfa3e2bb0e55ad1508a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/footer-ptt-sigorta.png HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:03 GMT
content-type: image/png
content-length: 3489
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=S%2BWPXfrV7C7D3ZkpRDnVSSfeoqKaGyCg2RnFT8W8p7C0lpBFG%2BDqXDmDgCwZuaUmQPIOk3vcw3DvbGG2%2BMfg054Xj%2FsD%2Fz%2BPyeBjkBiJhlEt0Mt2%2FL0f%2BL3bSJVjPaI5kgYnL%2FgLoubuAA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881809e29c000b3d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/cb=gapi.loaded_0 | 188.114.96.1 | 200 OK | 120 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/cb=gapi.loaded_0 IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeJavaScript source, ASCII text, with very long lines (1505) Size120 kB (120416 bytes) Hashe5df235fa85a7938a438f1684f8f182e 057136440231e724787619143e10b1f8fb31defa b1b691042e5004430e4e2f28fa0c18c2d50ec524bfef6dd04102471effa09436
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/cb=gapi.loaded_0 HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KcjCqGLFv6NeBUeIbHlKh2L97qe0S9mzk2T1dNbKPIx0Yq1heXrtbn%2FnuDPhZO%2BCG09LvQ%2BQb8BxjL7IXKUHqnWfDaephGh1fC8EbcDwl9YZbedyFWrkfwfCZ1%2BEy%2F1OpreTlEt6oU92Mw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d70ca80b3d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-Regular.0519459.ttf | 0.0.0.0 | | 0 B |
URL GET front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-Regular.0519459.ttf IP0.0.0.0:0
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_nuxt/fonts/IBMPlexSans-Regular.0519459.ttf HTTP/1.1
Host: front-pttavm.mncdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pttinternetmagazasi.com
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-Regular.0519459.ttf | 0.0.0.0 | | 0 B |
URL GET front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-Regular.0519459.ttf IP0.0.0.0:0
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_nuxt/fonts/IBMPlexSans-Regular.0519459.ttf HTTP/1.1
Host: front-pttavm.mncdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pttinternetmagazasi.com
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| pttinternetmagazasi.com/urun_files/google-play.svg | 188.114.96.1 | 200 OK | 24 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/google-play.svg IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeSVG Scalable Vector Graphics image Hash42169cf3188d78873ae206bc845c5e3b 3727ce0e856291cd809165fd9248be653cbe6f8a dfedfa79306b70d90054b18edcd3d6dc59d2309c5c05d3e8b94c1c1c9e76a935
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/google-play.svg HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:03 GMT
content-type: image/svg+xml
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BW8oqmiDtwQ5VRDRySRyKBiSlWyDaR4MODmUH8ZSyqSwrLlArGXOdxvaHYaLvzwWmU%2FRufk8jPD%2F08VEfsZi9WminWz0vL3n1Yu56P4ZrSHYqAdjqgCqOqnneZ%2F7fc0RMRUfL4XxePh2uw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809e25baf0b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/sdk(1).js | 188.114.96.1 | 200 OK | 3.1 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/sdk(1).js IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeJavaScript source, ASCII text, with very long lines (3220), with no line terminators Hash52e1504154fe04b550ef8c12f66dcf01 45876681b6cc49737e2165bddd3b0944bbd9eb9d b729acbc2d8e580a2d6cf413bf9f8b552c161a98c8dc54e2f39d9ee01bbd786b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/sdk(1).js HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
content-type: application/javascript
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=utYH5AXwSfMlnCZqS%2FR7GR%2FuSjpizSyWt2fPbs2qYgwswPgCSJFe1Cza%2BAxyeGXwEIhb35JOHmeAFcHZc57FWuAU3ENkGsTRZeb0VAXwwSfz6Rqm0To6ZVK42Ghha9JC8L1SLL4bR7Q73g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d70cad0b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-Medium.e177754.ttf | 0.0.0.0 | | 0 B |
URL GET front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-Medium.e177754.ttf IP0.0.0.0:0
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_nuxt/fonts/IBMPlexSans-Medium.e177754.ttf HTTP/1.1
Host: front-pttavm.mncdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pttinternetmagazasi.com
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| pttinternetmagazasi.com/urun_files/footer-ptt-logo.png | 188.114.96.1 | 200 OK | 1.4 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/footer-ptt-logo.png IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typePNG image data, 49 x 20, 8-bit/color RGBA, non-interlaced Hash92dab35307105794eadbdd51e1efea00 689aba56dd76f75c71ab684f332b6d8e21ba7818 2d63a026389b6f607db4fba87fa2b1c728aad583226aa6ed276f998a858a5b4b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/footer-ptt-logo.png HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:03 GMT
content-type: image/png
content-length: 1446
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=keqo4V3OC7RTMwBrdXUy1qCPHk4nL%2FggwZ%2BUAA0PRjeDYmWbdP8RtJefB5v7VkdROvk09T51NliYcORhFjsHsur1HoS%2FlVW%2BNP2iKxgQR4HqVSWukvNtwP8%2Ftc1C0rx2OoFsjwzPZtDNvg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881809e29c070b3d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/af9ee7b.js | 188.114.96.1 | 200 OK | 40 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/af9ee7b.js IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/af9ee7b.js HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
content-type: application/javascript
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2IBfg47FH5fv72GFYcPTHueC3hqE5dZcAEeQIwILjMAfP70jW9s5eja8n5Td0O%2BnMCch%2BlOVqs7boFaM9KYlz4b2on%2BJ6YsrwpIDyNNmXBO0ZLQYlQK53RoCeN210BwvQkHfQhz5pk8ztA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d72ce50b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/footer-ptt-kep.png | 188.114.96.1 | 200 OK | 2.4 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/footer-ptt-kep.png IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typePNG image data, 120 x 80, 8-bit/color RGBA, non-interlaced Hash1ebceaa5eb4a773dd2004d62c565065e 27ee8fadce995f312abd6a305ce7e05fe11307d2 9fe63314a14805b444f84eb8816c04c13f8a7cccab8e796f4a81f1058f4bb102
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/footer-ptt-kep.png HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:03 GMT
content-type: image/png
content-length: 2403
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LxkxLh963wV%2Frajoo1RJN%2BcOjqLaHe32j%2Bnd5TLg5U6M%2Fr687L5AgQsZxOU%2FFkHmlF1Q5Bagq58yPSTHIUCwOU5hKcgi7OcH%2B0MhUfmhDOZWP8Gra1EDzCtdgmhNUgQ35AD2mqMTEidmZg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881809e28bec0b3d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/hgs-yukle-2.4f04b43.svg | 188.114.96.1 | 200 OK | 5.8 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/hgs-yukle-2.4f04b43.svg IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeSVG Scalable Vector Graphics image Hash8b548065a9c5877a7f63dde727aaad77 717a16a101ca7d19e6ea65b0727febfbde6a9ebc a784669b24b7b02c00c307e8c6273a10375cbd417c0913b0fdb2398f11482d26
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/hgs-yukle-2.4f04b43.svg HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
content-type: image/svg+xml
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QhCyb0ow02Fg7bkWfJRZH1jM1%2Fi61GpdEMx3Vedpw%2FdqmPJ8tpZsYbyRhtMCsjAegjat%2FCbvSohlxObJrGzyWLv8WvhlhZIpfAGp3z%2FAfIsmavHqr%2F8AGfGFA8BW5crCq%2BTjVMUUtHai8A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d74d3d0b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/6c2d97c.css | 188.114.96.1 | 200 OK | 9.8 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/6c2d97c.css IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeASCII text, with very long lines (9841), with no line terminators Hash4b346629725c7f3faeaa6d7702f54611 6248cb2ae04031484a9ebf2375bb8d9a4b3293e3 5b9550b2ac416e2c7b67c558834536faea462a640c52a83b2d1828848bcd07d4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/6c2d97c.css HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
content-type: text/css
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8TlTx%2B7OYUAKRXzEaq23KmIfUwjKnh3YV98OZvlgRB9ULjDif1CcXAwPeqAo2q77tP7TNnU1u2BiQVY%2FF2UPKBZ52UTzhKM%2BnwwreeJAlQiISUkr6gTG6aa13uGBo8bYd3Im1XKc6tIIpg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d72cfc0b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-Bold.c6aebfe.ttf | 0.0.0.0 | | 0 B |
URL GET front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-Bold.c6aebfe.ttf IP0.0.0.0:0
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_nuxt/fonts/IBMPlexSans-Bold.c6aebfe.ttf HTTP/1.1
Host: front-pttavm.mncdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pttinternetmagazasi.com
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| www.google.me/pagead/1p-user-list/866667944/?random=1698189002387&cv=11&fst=1698188400000&bg=ffffff&guid=ON&async=1>m=45He3an0v840982626&u_w=1680&u_h=1050&url=https%3A%2F%2Fwww.pttavm.com%2Fsamsung-rt42cg6000s9-ustten-donduruculu-buzdolabi-p-560135369&ref=https%3A%2F%2Fmekke-turizm.com%2F&frm=0&tiba=Samsung%20RT42CG6000S9%20%C3%9Cstten%20Donduruculu%20Buzdol%20-%20PttAVM.com&userId=59604041&data=ecomm_pagetype%3DDetail%20Page%3Becomm_prodid%3D560135369%3Becomm_productprice%3D21037.50%3Bpcat%3DBuzdolaplar%C4%B1&fmt=3&is_vtc=1&random=1140098002&rmt_tld=1&ipr=y | 216.58.207.227 | 200 OK | 42 B |
URL GET HTTP/2www.google.me/pagead/1p-user-list/866667944/?random=1698189002387&cv=11&fst=1698188400000&bg=ffffff&guid=ON&async=1>m=45He3an0v840982626&u_w=1680&u_h=1050&url=https%3A%2F%2Fwww.pttavm.com%2Fsamsung-rt42cg6000s9-ustten-donduruculu-buzdolabi-p-560135369&ref=https%3A%2F%2Fmekke-turizm.com%2F&frm=0&tiba=Samsung%20RT42CG6000S9%20%C3%9Cstten%20Donduruculu%20Buzdol%20-%20PttAVM.com&userId=59604041&data=ecomm_pagetype%3DDetail%20Page%3Becomm_prodid%3D560135369%3Becomm_productprice%3D21037.50%3Bpcat%3DBuzdolaplar%C4%B1&fmt=3&is_vtc=1&random=1140098002&rmt_tld=1&ipr=y IP216.58.207.227:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subject*.google.me FingerprintF5:75:1A:11:BD:11:BA:91:F1:0E:75:0E:D1:AD:18:6B:74:C8:1B:36 ValidityTue, 16 Apr 2024 04:30:48 GMT - Tue, 09 Jul 2024 04:30:47 GMT
File typeGIF image data, version 89a, 1 x 1 Hashd89746888da2d9510b64a9f031eaecd5 d5fceb6532643d0d84ffe09c40c481ecdf59e15a ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/866667944/?random=1698189002387&cv=11&fst=1698188400000&bg=ffffff&guid=ON&async=1>m=45He3an0v840982626&u_w=1680&u_h=1050&url=https%3A%2F%2Fwww.pttavm.com%2Fsamsung-rt42cg6000s9-ustten-donduruculu-buzdolabi-p-560135369&ref=https%3A%2F%2Fmekke-turizm.com%2F&frm=0&tiba=Samsung%20RT42CG6000S9%20%C3%9Cstten%20Donduruculu%20Buzdol%20-%20PttAVM.com&userId=59604041&data=ecomm_pagetype%3DDetail%20Page%3Becomm_prodid%3D560135369%3Becomm_productprice%3D21037.50%3Bpcat%3DBuzdolaplar%C4%B1&fmt=3&is_vtc=1&random=1140098002&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 10 May 2024 06:58:05 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-Bold.c6aebfe.ttf | 0.0.0.0 | | 0 B |
URL GET front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-Bold.c6aebfe.ttf IP0.0.0.0:0
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_nuxt/fonts/IBMPlexSans-Bold.c6aebfe.ttf HTTP/1.1
Host: front-pttavm.mncdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pttinternetmagazasi.com
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| pttinternetmagazasi.com/urun_files/ddc2a42.css | 188.114.96.1 | 200 OK | 1.5 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/ddc2a42.css IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeASCII text, with very long lines (1469), with no line terminators Hash3ce11bac904e3003aac59ba691e31742 827ced68cef38592e6440296755390112470b35d 0de681adb48b3306625284964e5cf313225c5919c3562d709794975f0874981e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/ddc2a42.css HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:02 GMT
content-type: text/css
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xxIiXblY6hooIO36foSy5HwGVxVP0RRsFXI4oaSprdDG7fBmc%2FrJBRcGCXOzGiXRAzWpD2Ub6BtFL62SjJo6FDQVy24jGw80A79weaAdIzfTVBI5h%2FQbqKcm3Z36T3a8i%2FYRDlYGGpLrfg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809d71cc40b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pttinternetmagazasi.com/urun_files/vimeo.svg | 188.114.96.1 | 200 OK | 944 B |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/vimeo.svg IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3 CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeSVG Scalable Vector Graphics image Hashbe72efcc9c6350d529917215f6ab2833 06211ac1ed2b302b631e7dec86cb13baf473bcce c43928ac0d3f6cee23bf6e99b9cd4c0a6db28f941c47669a05023de0974b07d4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/vimeo.svg HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun.php?id=3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:03 GMT
content-type: image/svg+xml
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Y2m%2FmFAtoKY3gWRAayR2YkFf07F3NPl3H35EYrztctLk9CdSpIZSPbh1cGxr8SgJjGULi5HNHVdJOiUX4r%2FMTOQl%2BIig5hVUmJzmlRX8nN2Fum30VmH2kcRrv5L2K3TRDtSBIenhaDAJJA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809e27be40b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-Bold.c6aebfe.ttf | 0.0.0.0 | | 0 B |
URL GET front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-Bold.c6aebfe.ttf IP0.0.0.0:0
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_nuxt/fonts/IBMPlexSans-Bold.c6aebfe.ttf HTTP/1.1
Host: front-pttavm.mncdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pttinternetmagazasi.com
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| pttinternetmagazasi.com/urun_files/owl.carousel.min.js | 188.114.96.1 | 200 OK | 44 kB |
URL GET HTTP/3pttinternetmagazasi.com/urun_files/owl.carousel.min.js IP188.114.96.1:443
Requested byhttps://pttinternetmagazasi.com/urun_files/spa.html CertificateIssuerGoogle Trust Services LLC Subjectpttinternetmagazasi.com Fingerprint9B:E2:85:5B:CA:48:20:BE:70:45:CE:D2:1D:09:2C:AA:AD:14:D5:EE ValiditySat, 04 May 2024 10:46:38 GMT - Fri, 02 Aug 2024 10:46:37 GMT
File typeJavaScript source, ASCII text, with very long lines (31998) Hashc7b7f245d361390e332e902506977d60 bf6f8e0078fe25f5cdc91565492d78b7363ac904 de5591e013e80c7cadad861c3b40ae2331fd2a66fd8ac9a88983d02a0aa7194b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /urun_files/owl.carousel.min.js HTTP/1.1
Host: pttinternetmagazasi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/urun_files/spa.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:58:03 GMT
content-type: application/javascript
last-modified: Mon, 29 Apr 2024 18:51:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kxg%2BZ0YhWVj%2FYZpf0qLFnSLI95RF9nYif%2B77%2Bh1hTjt%2F%2FluJoO8f58aDLGxLV4x%2F1nHm6ZqDJxGMNTSoCdq558O34jPiUM7PF2%2Fg1mleoZoxXxelbDiK75HwUHrzXGFSRkp9fqBQ%2BloktA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881809e4ce9b0b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-Regular.0519459.ttf | 0.0.0.0 | | 0 B |
URL GET front-pttavm.mncdn.com/_nuxt/fonts/IBMPlexSans-Regular.0519459.ttf IP0.0.0.0:0
Requested byhttps://pttinternetmagazasi.com/urun.php?id=3
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_nuxt/fonts/IBMPlexSans-Regular.0519459.ttf HTTP/1.1
Host: front-pttavm.mncdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pttinternetmagazasi.com
DNT: 1
Connection: keep-alive
Referer: https://pttinternetmagazasi.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
0.0.0.0