Overview

URLpembekoala.net/wp-includes/Text/Diff/ca4ca71fbb5b782049e242b4f11903f7/dzhyjy=/zg4ngy=
IP 46.45.187.49 (Turkey)
ASN#42926 Radore Veri Merkezi Hizmetleri A.S.
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2022-11-29 02:22:34 UTC
StatusLoading report..
IDS alerts0
Blocklist alert10
urlquery alerts No alerts detected
Tags None

Domain Summary (15)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
img-getpocket.cdn.mozilla.net (6) 1631 2018-06-21 23:36:00 UTC 2020-02-19 04:43:25 UTC 34.120.237.76
fonts.googleapis.com (1) 8877 2013-06-10 20:14:26 UTC 2022-11-28 16:39:41 UTC 142.250.74.10
www.google-analytics.com (2) 40 2012-10-03 01:04:21 UTC 2022-11-28 21:28:05 UTC 142.250.74.174
www.pembekoala.net (16) 0 2015-09-14 09:31:29 UTC 2015-09-14 09:31:29 UTC 46.45.187.49 Unknown ranking
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-11-28 05:53:26 UTC 34.117.237.239
pembekoala.net (1) 0 No data No data 46.45.187.49 Unknown ranking
ocsp.digicert.com (2) 86 2012-05-21 07:02:23 UTC 2020-05-02 20:58:10 UTC 93.184.220.29
mc.yandex.ru (6) 2672 2012-05-21 09:38:30 UTC 2022-11-28 10:10:12 UTC 87.250.251.119
push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2020-05-03 10:09:39 UTC 34.223.160.237
firefox.settings.services.mozilla.com (2) 867 2020-06-04 20:08:41 UTC 2022-11-28 05:55:58 UTC 34.102.187.140
ocsp.globalsign.com (1) 2075 2012-07-20 17:46:16 UTC 2020-05-02 20:58:10 UTC 104.18.20.226
fonts.gstatic.com (2) 0 2014-09-09 00:40:21 UTC 2022-11-28 23:28:37 UTC 216.58.207.195 Domain (gstatic.com) ranked at: 540
ocsp.pki.goog (2) 175 2018-07-01 06:43:07 UTC 2020-05-02 20:58:16 UTC 142.250.74.35
r3.o.lencr.org (7) 344 No data No data 23.36.76.226
content-signature-2.cdn.mozilla.net (1) 1152 No data No data 34.160.144.191

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-11-29 2 pembekoala.net/wp-includes/Text/Diff/ca4ca71fbb5b782049e242b4f11903f7/dzhyj (...) Phishing
2022-11-29 2 www.pembekoala.net/wp-includes/Text/Diff/ca4ca71fbb5b782049e242b4f11903f7/d (...) Phishing
2022-11-29 2 www.pembekoala.net/wp-includes/css/dist/block-library/style.min.css?ver=5.1.15 Malware
2022-11-29 2 www.pembekoala.net/wp-content/themes/simplemag/js/jquery.assets.js?ver=1.0 Malware
2022-11-29 2 www.pembekoala.net/wp-content/themes/simplemag/js/jquery.custom.js?ver=1.0 Malware
2022-11-29 2 www.pembekoala.net/wp-includes/js/wp-emoji-release.min.js?ver=5.1.15 Malware
2022-11-29 2 www.pembekoala.net/wp-includes/js/wp-embed.min.js?ver=5.1.15 Malware
2022-11-29 2 www.pembekoala.net/wp-content/themes/simplemag/css/framework.css?ver=5.1.15 Malware
2022-11-29 2 www.pembekoala.net/wp-content/themes/simplemag/css/icons.css?ver=5.1.15 Malware
2022-11-29 2 www.pembekoala.net/wp-content/uploads/favicon-5.ico Malware

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 46.45.187.49
Date UQ / IDS / BL URL IP
2023-01-31 07:52:49 +0000 0 - 0 - 1 yesilguntavukculuk.com/wp-admin/outlook.com/1 (...) 46.45.187.49
2023-01-04 03:41:38 +0000 0 - 0 - 10 pembekoala.net/wp-includes/Text/Diff/ca4ca71f (...) 46.45.187.49
2023-01-04 03:11:44 +0000 0 - 0 - 10 pembekoala.net/wp-includes/Text/Diff/ca4ca71f (...) 46.45.187.49
2023-01-01 02:00:31 +0000 0 - 0 - 9 pembekoala.net/wp-includes/Text/Diff/ca4ca71f (...) 46.45.187.49
2023-01-01 01:12:56 +0000 0 - 0 - 10 pembekoala.net/wp-includes/Text/Diff/ca4ca71f (...) 46.45.187.49


Last 5 reports on ASN: Radore Veri Merkezi Hizmetleri A.S.
Date UQ / IDS / BL URL IP
2023-01-31 10:24:41 +0000 0 - 7 - 0 m.trend-tech.net/landings/fun/nwpn99?hash=76f (...) 176.53.48.26
2023-01-31 07:52:49 +0000 0 - 0 - 1 yesilguntavukculuk.com/wp-admin/outlook.com/1 (...) 46.45.187.49
2023-01-30 16:57:40 +0000 0 - 1 - 0 www.buygelsin.com/ 176.53.85.114
2023-01-29 07:02:50 +0000 0 - 0 - 1 websem.net/dhlexp2m/dhl/info.php 89.252.183.162
2023-01-28 12:49:04 +0000 0 - 1 - 0 www.antikacim.com.tr/antika-fener/ 176.53.85.114


Last 5 reports on domain: pembekoala.net
Date UQ / IDS / BL URL IP
2023-01-04 03:41:38 +0000 0 - 0 - 10 pembekoala.net/wp-includes/Text/Diff/ca4ca71f (...) 46.45.187.49
2023-01-04 03:11:44 +0000 0 - 0 - 10 pembekoala.net/wp-includes/Text/Diff/ca4ca71f (...) 46.45.187.49
2023-01-01 02:00:31 +0000 0 - 0 - 9 pembekoala.net/wp-includes/Text/Diff/ca4ca71f (...) 46.45.187.49
2023-01-01 01:12:56 +0000 0 - 0 - 10 pembekoala.net/wp-includes/Text/Diff/ca4ca71f (...) 46.45.187.49
2022-12-31 03:10:52 +0000 0 - 0 - 10 pembekoala.net/wp-includes/Text/Diff/ca4ca71f (...) 46.45.187.49


Last 5 reports with similar screenshot
Date UQ / IDS / BL URL IP
2023-01-04 03:41:38 +0000 0 - 0 - 10 pembekoala.net/wp-includes/Text/Diff/ca4ca71f (...) 46.45.187.49
2023-01-01 02:00:31 +0000 0 - 0 - 9 pembekoala.net/wp-includes/Text/Diff/ca4ca71f (...) 46.45.187.49
2023-01-01 01:12:56 +0000 0 - 0 - 10 pembekoala.net/wp-includes/Text/Diff/ca4ca71f (...) 46.45.187.49
2022-12-31 03:10:52 +0000 0 - 0 - 10 pembekoala.net/wp-includes/Text/Diff/ca4ca71f (...) 46.45.187.49
2022-12-24 02:20:50 +0000 0 - 0 - 10 pembekoala.net/wp-includes/Text/Diff/ca4ca71f (...) 46.45.187.49

JavaScript

Executed Scripts (12)

Executed Evals (0)

Executed Writes (0)


HTTP Transactions (51)


Request Response
                                        
                                            GET /wp-includes/Text/Diff/ca4ca71fbb5b782049e242b4f11903f7/dzhyjy=/zg4ngy= HTTP/1.1 
Host: pembekoala.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         46.45.187.49
HTTP/1.1 301 Moved Permanently
content-type: text/html; charset=UTF-8
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
x-redirect-by: WordPress
location: http://www.pembekoala.net/wp-includes/Text/Diff/ca4ca71fbb5b782049e242b4f11903f7/dzhyjy=/zg4ngy=
x-litespeed-cache: hit
content-length: 0
date: Tue, 29 Nov 2022 02:22:22 GMT
server: LiteSpeed


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "8EED57C91B42EF7B2D5EFF1309E306E23E13C3DE21219AF24A693CBF3E8977FC"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8018
Expires: Tue, 29 Nov 2022 04:36:01 GMT
Date: Tue, 29 Nov 2022 02:22:23 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4777
Cache-Control: max-age=120515
Date: Tue, 29 Nov 2022 02:22:23 GMT
Etag: "63848df9-1d7"
Expires: Wed, 30 Nov 2022 11:50:58 GMT
Last-Modified: Mon, 28 Nov 2022 10:31:21 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "A3EC545A8F9364AC9062EDDB41279E1465687A1B60F9C1DEC6B3A3DF8B033EB3"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6679
Expires: Tue, 29 Nov 2022 04:13:42 GMT
Date: Tue, 29 Nov 2022 02:22:23 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Type, Backoff, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 29 Nov 2022 02:19:34 GMT
cache-control: public,max-age=3600
age: 169
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    30db107dcf4380cef05efea409c2e6a3
Sha1:   96e6a306fbc07299aba64e5c14e2bfca35872fa9
Sha256: b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: LmSIr4vE3VD30VEV0wQrgcW4Mq1FKKOlz1Z5kIRA7GOg+vPA5i1GzrXa7lY55rjeU+uIWCMszCI=
x-amz-request-id: 0NCHEN3W5ZW01WVR
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 29 Nov 2022 01:45:15 GMT
age: 2228
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    9ebddc2b260d081ebbefee47c037cb28
Sha1:   492bad62a7ca6a74738921ef5ae6f0be5edebf39
Sha256: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
                                        
                                            GET /wp-includes/Text/Diff/ca4ca71fbb5b782049e242b4f11903f7/dzhyjy=/zg4ngy= HTTP/1.1 
Host: www.pembekoala.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         46.45.187.49
HTTP/1.1 404 Not Found
content-type: text/html; charset=UTF-8
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://www.pembekoala.net/wp-json/>; rel="https://api.w.org/"
x-litespeed-cache: hit
content-encoding: gzip
vary: Accept-Encoding
content-length: 4817
date: Tue, 29 Nov 2022 02:22:22 GMT
server: LiteSpeed


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1746), with CRLF, LF line terminators
Size:   4817
Md5:    16dc28c278ef885f99504dd7cbe51cb0
Sha1:   3d9be3bc505cad986d2ef2c58bcc57a588998605
Sha256: 8a78db4e767addb52d00ed0b0de51196f12d22a073e2dc632d2ce759744317ea

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Tue, 29 Nov 2022 02:22:23 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /css?family=Open+Sans%3A300%2C300italic%2C400%2C400italic%2C700%2C700italic%2C900%2C900italic%7COpen+Sans%3A300%2C300italic%2C400%2C400italic%2C700%2C700italic%2C900%2C900italic%27+rel%3D%27stylesheet%27+type%3D%27text%2Fcss&ver=5.1.15 HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.pembekoala.net/

search
                                         142.250.74.10
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Tue, 29 Nov 2022 02:22:23 GMT
Date: Tue, 29 Nov 2022 02:22:23 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Opener-Policy: same-origin-allow-popups
Cross-Origin-Resource-Policy: cross-origin
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff


--- Additional Info ---
Magic:  ASCII text
Size:   882
Md5:    f1f3c8d0ba46895d5d119b0891e31880
Sha1:   de105aa0c695a042c509ca7dd4c9dd5df6105171
Sha256: 7f6cd431355a752e3cd7873f1d0a89b488a563f675092bab7e31d358e13e44f6
                                        
                                            GET /wp-includes/css/dist/block-library/style.min.css?ver=5.1.15 HTTP/1.1 
Host: www.pembekoala.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.pembekoala.net/wp-includes/Text/Diff/ca4ca71fbb5b782049e242b4f11903f7/dzhyjy=/zg4ngy=

search
                                         46.45.187.49
HTTP/1.1 200 OK
content-type: text/css
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Tue, 06 Dec 2022 02:22:23 GMT
last-modified: Thu, 15 Apr 2021 03:00:07 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 5063
date: Tue, 29 Nov 2022 02:22:23 GMT
server: LiteSpeed


--- Additional Info ---
Magic:  ASCII text, with very long lines (25245), with no line terminators
Size:   5063
Md5:    961772f85687671ecba93af1d629d450
Sha1:   46866b1df9bb204e537f848d26ab103d57163cb9
Sha256: 6a4fa273f30267262180819eeb96d06fa87594fe81b200470f32c2028cb57993

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-content/themes/simplemag/style.css?ver=5.1.15 HTTP/1.1 
Host: www.pembekoala.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.pembekoala.net/wp-includes/Text/Diff/ca4ca71fbb5b782049e242b4f11903f7/dzhyjy=/zg4ngy=

search
                                         46.45.187.49
HTTP/1.1 200 OK
content-type: text/css
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Tue, 06 Dec 2022 02:22:23 GMT
last-modified: Sat, 26 Dec 2015 14:20:13 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 10897
date: Tue, 29 Nov 2022 02:22:23 GMT
server: LiteSpeed


--- Additional Info ---
Magic:  ASCII text
Size:   10897
Md5:    30e5b1ad3a1b69d74f6d68f524b981ff
Sha1:   953d09ee7e5d6371d2b243869abcd3f41beaae2d
Sha256: 610fccaf83c47ed6eb15506e7bc2f6778b1f3edb4c99458f56e322f7dda322ff
                                        
                                            GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1 HTTP/1.1 
Host: www.pembekoala.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.pembekoala.net/wp-includes/Text/Diff/ca4ca71fbb5b782049e242b4f11903f7/dzhyjy=/zg4ngy=

search
                                         46.45.187.49
HTTP/1.1 200 OK
content-type: application/javascript
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Tue, 06 Dec 2022 02:22:23 GMT
last-modified: Wed, 22 Sep 2021 03:07:13 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 4251
date: Tue, 29 Nov 2022 02:22:23 GMT
server: LiteSpeed


--- Additional Info ---
Magic:  ASCII text, with very long lines (9959)
Size:   4251
Md5:    481f980fc669b7b40694394421813cf5
Sha1:   e6eb02466e5242666924567e4de8c9f8a39913ef
Sha256: 4b37967650498f93eb3cf92be96b598a5a34e3dccba8b5f76620eea01be44051
                                        
                                            GET /wp-content/themes/simplemag/js/jquery.flexslider-min.js?ver=2.1 HTTP/1.1 
Host: www.pembekoala.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.pembekoala.net/wp-includes/Text/Diff/ca4ca71fbb5b782049e242b4f11903f7/dzhyjy=/zg4ngy=

search
                                         46.45.187.49
HTTP/1.1 200 OK
content-type: application/javascript
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Tue, 06 Dec 2022 02:22:23 GMT
last-modified: Sun, 27 Jun 2021 03:59:41 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 5881
date: Tue, 29 Nov 2022 02:22:23 GMT
server: LiteSpeed


--- Additional Info ---
Magic:  ASCII text, with very long lines (527)
Size:   5881
Md5:    d88ef0af6771200bcddaedaf5458f7c7
Sha1:   a6177949dc873d6d9d1622541783e039ff25250e
Sha256: 0006272b943d64fb5d7be240a58060dd09b8627e2ccad6b40b120bedda81f7fc
                                        
                                            GET /wp-content/themes/simplemag/js/jquery.assets.js?ver=1.0 HTTP/1.1 
Host: www.pembekoala.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.pembekoala.net/wp-includes/Text/Diff/ca4ca71fbb5b782049e242b4f11903f7/dzhyjy=/zg4ngy=

search
                                         46.45.187.49
HTTP/1.1 200 OK
content-type: application/javascript
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Tue, 06 Dec 2022 02:22:23 GMT
last-modified: Sun, 27 Jun 2021 03:59:53 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 9218
date: Tue, 29 Nov 2022 02:22:23 GMT
server: LiteSpeed


--- Additional Info ---
Magic:  HTML document text\012- HTML document, ASCII text, with very long lines (9593)
Size:   9218
Md5:    47ef3f1af048568dcbce18054cc03b71
Sha1:   ff4250d50d51b91c7df13d44c9e24b824c1aeda0
Sha256: 787f27c4a82ee6bf60996e2b063764022941e438ff41e93976b373a2492319b0

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-content/themes/simplemag/js/jquery.custom.js?ver=1.0 HTTP/1.1 
Host: www.pembekoala.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.pembekoala.net/wp-includes/Text/Diff/ca4ca71fbb5b782049e242b4f11903f7/dzhyjy=/zg4ngy=

search
                                         46.45.187.49
HTTP/1.1 200 OK
content-type: application/javascript
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Tue, 06 Dec 2022 02:22:23 GMT
last-modified: Sun, 27 Jun 2021 03:59:50 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 2656
date: Tue, 29 Nov 2022 02:22:23 GMT
server: LiteSpeed


--- Additional Info ---
Magic:  ASCII text
Size:   2656
Md5:    27f0024c57f2ac55863385c6a0170c45
Sha1:   3f1dd4dcf562ff0b2de04be60fae2436de50d540
Sha256: a9bc2cfc2e5b7ddd449713da39c964d9455b8b42aa6589077c8c8030d1003209

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-includes/js/jquery/jquery.js?ver=1.12.4 HTTP/1.1 
Host: www.pembekoala.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.pembekoala.net/wp-includes/Text/Diff/ca4ca71fbb5b782049e242b4f11903f7/dzhyjy=/zg4ngy=

search
                                         46.45.187.49
HTTP/1.1 200 OK
content-type: application/javascript
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Tue, 06 Dec 2022 02:22:23 GMT
last-modified: Wed, 22 Sep 2021 03:07:13 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 38045
date: Tue, 29 Nov 2022 02:22:23 GMT
server: LiteSpeed


--- Additional Info ---
Magic:  ASCII text, with very long lines (31997)
Size:   38045
Md5:    ae1d8396fa7a2c9e1b596ed4e3319fbd
Sha1:   5d83ee734228e0b4d4b42fb9d57599a011f12c2e
Sha256: 073e20dc911daf41506f642f26380f8a8f793dd2dbc603d12eb6d5727bbc2b04
                                        
                                            GET /wp-includes/js/wp-emoji-release.min.js?ver=5.1.15 HTTP/1.1 
Host: www.pembekoala.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.pembekoala.net/wp-includes/Text/Diff/ca4ca71fbb5b782049e242b4f11903f7/dzhyjy=/zg4ngy=

search
                                         46.45.187.49
HTTP/1.1 200 OK
content-type: application/javascript
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Tue, 06 Dec 2022 02:22:23 GMT
last-modified: Wed, 22 Sep 2021 03:07:13 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 4813
date: Tue, 29 Nov 2022 02:22:23 GMT
server: LiteSpeed


--- Additional Info ---
Magic:  ASCII text, with very long lines (9071)
Size:   4813
Md5:    690839100df076386922f07c16d0d69d
Sha1:   2b50e1f8519666e114bd94cf3dc97f6876302c23
Sha256: 7b15e13b9b2491a7980beea42bf4d80ab65ae60450f00866dda3b096e6bf1428

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-includes/js/wp-embed.min.js?ver=5.1.15 HTTP/1.1 
Host: www.pembekoala.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.pembekoala.net/wp-includes/Text/Diff/ca4ca71fbb5b782049e242b4f11903f7/dzhyjy=/zg4ngy=

search
                                         46.45.187.49
HTTP/1.1 200 OK
content-type: application/javascript
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Tue, 06 Dec 2022 02:22:23 GMT
last-modified: Wed, 22 Sep 2021 03:07:13 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 751
date: Tue, 29 Nov 2022 02:22:23 GMT
server: LiteSpeed


--- Additional Info ---
Magic:  ASCII text, with very long lines (1391), with no line terminators
Size:   751
Md5:    204c443a7de1de1504250d7d7afa5b37
Sha1:   9293366ded99791e97c79efd0033faccb4bfae58
Sha256: 3aa9d181f5425f879e8bc828dfbe4b3a8d2e2b44444cad4fd9edcb5555b0b522

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-content/themes/simplemag/css/framework.css?ver=5.1.15 HTTP/1.1 
Host: www.pembekoala.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.pembekoala.net/wp-includes/Text/Diff/ca4ca71fbb5b782049e242b4f11903f7/dzhyjy=/zg4ngy=

search
                                         46.45.187.49
HTTP/1.1 200 OK
content-type: text/css
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Tue, 06 Dec 2022 02:22:23 GMT
last-modified: Wed, 19 Aug 2015 08:34:18 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 7032
date: Tue, 29 Nov 2022 02:22:23 GMT
server: LiteSpeed


--- Additional Info ---
Magic:  Unicode text, UTF-8 (with BOM) text, with very long lines (2772)
Size:   7032
Md5:    57d292e18ed5dda256ad2166a3c7e52f
Sha1:   deb6915135ed32bf49b076db711f2ba7522dcef9
Sha256: 266d9b4aa5f58b0330db0895f35c1f95829635ad90c3e4585004f6b5a670abed

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-content/themes/simplemag/css/icons.css?ver=5.1.15 HTTP/1.1 
Host: www.pembekoala.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.pembekoala.net/wp-includes/Text/Diff/ca4ca71fbb5b782049e242b4f11903f7/dzhyjy=/zg4ngy=

search
                                         46.45.187.49
HTTP/1.1 200 OK
content-type: text/css
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Tue, 06 Dec 2022 02:22:23 GMT
last-modified: Sat, 27 Jun 2015 21:45:27 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 13131
date: Tue, 29 Nov 2022 02:22:23 GMT
server: LiteSpeed


--- Additional Info ---
Magic:  ASCII text, with very long lines (10809)
Size:   13131
Md5:    926dc764087647bd2013ba329a403a9b
Sha1:   02ce66de43672a86c2fa726386d1fe04f65af5b6
Sha256: aaa1a51537a5ff178cf082785cdceb33c217d8ff6088a08d44f59a0ce7cdcb6d

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-content/themes/simplemag/images/error-page.png HTTP/1.1 
Host: www.pembekoala.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.pembekoala.net/wp-includes/Text/Diff/ca4ca71fbb5b782049e242b4f11903f7/dzhyjy=/zg4ngy=

search
                                         46.45.187.49
HTTP/1.1 200 OK
content-type: image/png
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Tue, 06 Dec 2022 02:22:23 GMT
last-modified: Sat, 27 Jun 2015 21:45:28 GMT
accept-ranges: bytes
content-length: 7492
date: Tue, 29 Nov 2022 02:22:23 GMT
server: LiteSpeed


--- Additional Info ---
Magic:  PNG image data, 402 x 402, 8-bit colormap, non-interlaced\012- data
Size:   7492
Md5:    9cf7aa3d32fd1fd783f0143e96e01272
Sha1:   97fab53753a1bd7a0d0eaee161b08670613e3056
Sha256: 51ca7e3d4fc1a0f315d7253bc630940f33459756399f92cf2fc90c87540a9b5f
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Retry-After, ETag, Alert, Expires, Cache-Control, Backoff, Content-Length, Content-Type, Pragma, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 29 Nov 2022 02:08:56 GMT
cache-control: public,max-age=3600
age: 807
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.pembekoala.net
Connection: keep-alive
Referer: http://fonts.googleapis.com/

search
                                         216.58.207.195
HTTP/1.1 200 OK
Content-Type: font/woff2
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 31320
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Tue, 29 Nov 2022 01:34:06 GMT
Expires: Wed, 29 Nov 2023 01:34:06 GMT
Cache-Control: public, max-age=31536000
Age: 2897
Last-Modified: Mon, 15 Aug 2022 18:11:37 GMT


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 31320, version 1.0\012- data
Size:   31320
Md5:    3fe71527811fbfedd2c07962e1bc49e7
Sha1:   f63e158a0480c5d711b5e268db0e75e57d87a8a5
Sha256: 24c0e724005344165ee0a0ff4c96a914e174bb4caa20c8a533fb194d92853e95
                                        
                                            GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.pembekoala.net
Connection: keep-alive
Referer: http://fonts.googleapis.com/

search
                                         216.58.207.195
HTTP/1.1 200 OK
Content-Type: font/woff2
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 44856
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Mon, 28 Nov 2022 21:39:59 GMT
Expires: Tue, 28 Nov 2023 21:39:59 GMT
Cache-Control: public, max-age=31536000
Age: 16944
Last-Modified: Mon, 15 Aug 2022 18:20:18 GMT


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Size:   44856
Md5:    565ce506190ad3af920b40baf1794cec
Sha1:   ad3cba5d06100e09449a864d3b5e58403b478b3d
Sha256: 8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
                                        
                                            GET /wp-content/uploads/logobirlesikson.png HTTP/1.1 
Host: www.pembekoala.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.pembekoala.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         46.45.187.49
HTTP/2 200 OK
content-type: image/png
                                        
cache-control: public, max-age=604800
expires: Tue, 06 Dec 2022 02:22:23 GMT
last-modified: Wed, 19 Aug 2015 08:31:22 GMT
accept-ranges: bytes
content-length: 26629
date: Tue, 29 Nov 2022 02:22:23 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 500 x 143, 8-bit/color RGB, non-interlaced\012- data
Size:   26629
Md5:    46a26441965c40d3ff89810ab446f31e
Sha1:   71b663e6685bd43423e4ac8ccf881f03c3b48c7e
Sha256: f8de9709b7a4c5ff8b4885c6f5167ebe21fe570eb5fde8be30c3a3ee6cfe401c
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.pembekoala.net/

search
                                         142.250.74.174
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Cross-Origin-Resource-Policy: cross-origin
Server: Golfe2
Content-Length: 20039
Date: Tue, 29 Nov 2022 00:22:56 GMT
Expires: Tue, 29 Nov 2022 02:22:56 GMT
Cache-Control: public, max-age=7200
Age: 7167
Last-Modified: Tue, 27 Sep 2022 22:01:05 GMT


--- Additional Info ---
Magic:  ASCII text, with very long lines (1325)
Size:   20039
Md5:    47e6f374ca946fddd5b59871b325736c
Sha1:   baa9282efc8785e84d247c3bff518eaa45f101c4
Sha256: 16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
                                        
                                            GET /wp-content/themes/simplemag/images/retina-favicon.png HTTP/1.1 
Host: www.pembekoala.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.pembekoala.net/wp-includes/Text/Diff/ca4ca71fbb5b782049e242b4f11903f7/dzhyjy=/zg4ngy=

search
                                         46.45.187.49
HTTP/1.1 200 OK
content-type: image/png
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Tue, 06 Dec 2022 02:22:23 GMT
last-modified: Sat, 27 Jun 2015 21:45:28 GMT
accept-ranges: bytes
content-length: 2693
date: Tue, 29 Nov 2022 02:22:23 GMT
server: LiteSpeed


--- Additional Info ---
Magic:  PNG image data, 144 x 144, 8-bit/color RGB, non-interlaced\012- data
Size:   2693
Md5:    d22d3d632e69beff7b33a5953618e839
Sha1:   37819282cd66bdde23edc13b664d4902b60aea5d
Sha256: b1ad5fc1623604d58962c77f8013139ed258196356954b656650a4c4945f9416
                                        
                                            GET /wp-content/uploads/favicon-5.ico HTTP/1.1 
Host: www.pembekoala.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.pembekoala.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         46.45.187.49
HTTP/2 200 OK
content-type: image/x-icon
                                        
cache-control: public, max-age=604800
expires: Tue, 06 Dec 2022 02:22:23 GMT
last-modified: Tue, 18 Aug 2015 05:27:08 GMT
accept-ranges: bytes
content-length: 1086
date: Tue, 29 Nov 2022 02:22:23 GMT
server: LiteSpeed
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  MS Windows icon resource - 1 icon, 15x16, 32 bits/pixel\012- data
Size:   1086
Md5:    4e5b81d168b5cd63fe9e815a77538677
Sha1:   ddd0223b1cd49142c9e6b2376a7f481830654614
Sha256: 8d2fda31b8c1d74304ff390792f1c60565f50ad34d09de5dfc90f21b19663cfe

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 1640
Cache-Control: 'max-age=158059'
Date: Tue, 29 Nov 2022 02:22:23 GMT
Last-Modified: Tue, 29 Nov 2022 01:55:03 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST /gseccovsslca2018 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         104.18.20.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 29 Nov 2022 02:22:23 GMT
Content-Length: 938
Connection: keep-alive
Expires: Fri, 02 Dec 2022 23:06:35 GMT
ETag: "66ecf101fcb541464917fa95a713c6982d587a91"
Last-Modified: Mon, 28 Nov 2022 23:06:36 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1009
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7717e01728b0b51e-OSL

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 29 Nov 2022 02:22:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /j/collect?v=1&_v=j98&a=1688106640&t=pageview&_s=1&dl=http%3A%2F%2Fwww.pembekoala.net%2Fwp-includes%2FText%2FDiff%2Fca4ca71fbb5b782049e242b4f11903f7%2Fdzhyjy%3D%2Fzg4ngy%3D&ul=en-us&de=UTF-8&dt=Sayfa%20bulunamad%C4%B1%20%7C%20Pembe%20Koala&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=IEBAAEABAAAAACAAI~&jid=964057940&gjid=2071307269&cid=1790803891.1669688543&tid=UA-71463150-1&_gid=1422877258.1669688543&_r=1&_slc=1&z=1374877881 HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: http://www.pembekoala.net
Connection: keep-alive
Referer: http://www.pembekoala.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.174
HTTP/2 200 OK
content-type: text/plain
                                        
access-control-allow-origin: http://www.pembekoala.net
date: Tue, 29 Nov 2022 02:22:23 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   2
Md5:    38684612f0c6bb6dfa16da92f4a6878f
Sha1:   6fe62d0dd7db314b7f9bb945672f078e01d27f0f
Sha256: a048e640908046be06e00eab37742b5d5ff80964af58cfd22f7cb2de4dfe375f
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 29 Nov 2022 02:22:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /metrika/watch.js HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.pembekoala.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         87.250.251.119
HTTP/2 200 OK
content-type: application/javascript
                                        
content-length: 57741
date: Tue, 29 Nov 2022 02:22:23 GMT
access-control-allow-origin: *
etag: "6384bff1-e18d"
expires: Tue, 29 Nov 2022 03:22:23 GMT
last-modified: Mon, 28 Nov 2022 17:04:33 GMT
cache-control: max-age=3600
content-encoding: br
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 (with BOM) text, with very long lines (586)
Size:   57741
Md5:    89185e037b366ee6c6b5d55bd893c11d
Sha1:   6a0e2cd6189b890da76b827beaeeca41097e8cf1
Sha256: 2b46f64d745301de1b0f94206157e0373db1e5db20e7725794fb34adaab08423
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: mCrCbmZVrROKp3XtPyhjHA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         34.223.160.237
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 83Vz1Wc0eqEvcncmthgCHMNqkJE=

                                        
                                            GET /metrika/advert.gif HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.pembekoala.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         87.250.251.119
HTTP/2 200 OK
content-type: image/gif
                                        
content-length: 43
date: Tue, 29 Nov 2022 02:22:24 GMT
access-control-allow-origin: *
etag: "6384bff1-2b"
expires: Tue, 29 Nov 2022 03:22:24 GMT
accept-ranges: bytes
last-modified: Mon, 28 Nov 2022 17:04:33 GMT
cache-control: max-age=3600
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    df3e567d6f16d040326c7a0ea29a4f41
Sha1:   ea7df583983133b62712b5e73bffbcd45cc53736
Sha256: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
                                        
                                            GET /watch/32049616/1?wmode=7&page-url=http%3A%2F%2Fwww.pembekoala.net%2Fwp-includes%2FText%2FDiff%2Fca4ca71fbb5b782049e242b4f11903f7%2Fdzhyjy%3D%2Fzg4ngy%3D&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaqp9qze4zeusy7lq5yic%3Afp%3A924%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A1619098992250%3Ahid%3A445869891%3Az%3A0%3Ai%3A20221129022223%3Aet%3A1669688543%3Ac%3A1%3Arn%3A236778200%3Arqn%3A1%3Au%3A1669688543366418122%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A2%2C66%2C66%2C0%2C327%2C0%2C%2C428%2C13%2C%2C%2C%2C914%3Ans%3A1669688541963%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669688543%3At%3ASayfa%20bulunamad%C4%B1%20%7C%20Pembe%20Koala&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29rqnl%281%29ti%282%29 HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.pembekoala.net
Referer: http://www.pembekoala.net/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         87.250.251.119
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
content-length: 407
date: Tue, 29 Nov 2022 02:22:24 GMT
x-content-type-options: nosniff
access-control-allow-origin: http://www.pembekoala.net
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 29-Nov-2022 02:22:24 GMT
last-modified: Tue, 29-Nov-2022 02:22:24 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (407), with no line terminators
Size:   407
Md5:    bd7d1e1f4df3b4b11c130dad3f70193f
Sha1:   3ab112bb64575f7236b43f560fac6d895676e5ea
Sha256: 2106be179be55ac83a5583566c49ada57c83b8690779277c00e509cbdfdb8c44
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6601
Expires: Tue, 29 Nov 2022 04:12:26 GMT
Date: Tue, 29 Nov 2022 02:22:25 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6601
Expires: Tue, 29 Nov 2022 04:12:26 GMT
Date: Tue, 29 Nov 2022 02:22:25 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6601
Expires: Tue, 29 Nov 2022 04:12:26 GMT
Date: Tue, 29 Nov 2022 02:22:25 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6601
Expires: Tue, 29 Nov 2022 04:12:26 GMT
Date: Tue, 29 Nov 2022 02:22:25 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6601
Expires: Tue, 29 Nov 2022 04:12:26 GMT
Date: Tue, 29 Nov 2022 02:22:25 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1c32283b-8309-408e-85df-cad97da6bc80.png HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10176
x-amzn-requestid: c2231955-5c78-4073-8399-b8b90f1add78
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cMo3oHpSoAMF5Qw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6381bb63-55a1cb004ac73c8b02f2fb8d;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 07:08:19 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: uGocx-Lv8ieJVvICjnTGQZyzaQzjVdICX2RZaNyBTQvUKeIcNxaCJQ==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 07:38:02 GMT
age: 67463
etag: "772d86ad983042a728ee3490630a9cf1134ad0dd"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10176
Md5:    03014221d7f49b50ffc2d1b0a0e75457
Sha1:   772d86ad983042a728ee3490630a9cf1134ad0dd
Sha256: 81fb954fa569955907952987e9d8efd1dac80e0e4a682826abf3c5d90eb31771
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5b0dcfcd-38d5-4614-ad4e-405d8ad4ee91.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6037
x-amzn-requestid: eb17903e-1fd3-4a41-a6d1-8b671d890400
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cPAJjFa3oAMFcLA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6382ad70-3db95fcd1aeb9c411c55d173;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 00:21:04 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: NqtaziEIRl6auIGehos7TAJfBAY3CtGJX0vC-pWhjs377L_rEyM6hg==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 10:14:18 GMT
age: 58087
etag: "3348f081a3357490a704592d105d02e81886df89"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6037
Md5:    b5e2bc1651b37b8e0467c2a6cb860fb3
Sha1:   3348f081a3357490a704592d105d02e81886df89
Sha256: 751c601e075c9338335c05b0f430ba8065b4e97440e6630993afd943f302b253
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1172c72b-d329-4446-80cb-92b8cf104425.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 3944
x-amzn-requestid: 8a6732c1-72da-4a73-ba51-8533c6a01a9c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cVNmfFgeIAMFjLw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6385295c-0c807d93277bfb7f6b13c2ee;Sampled=0
x-amzn-remapped-date: Mon, 28 Nov 2022 21:34:20 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: oW4xFfsPp-Jmf28Uc88iZ2jLgtMRjn2gW0orrJ4K201r6Y6OlHkacQ==
via: 1.1 995664ee945c06fc706b5cb8e0e650dc.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 21:46:51 GMT
age: 16534
etag: "5008d7344dd85ae61a598c17e7baf427def3e25d"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   3944
Md5:    9cd333c474420e235831d96ed881167e
Sha1:   5008d7344dd85ae61a598c17e7baf427def3e25d
Sha256: 2178a96e120661e43d8e8ed0df1fcf500caf4c58db9e1bedaf0706af0a80b286
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe059c7ce-454d-453b-aead-18fae338f84c.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 4871
x-amzn-requestid: e2dfa7b8-ded7-4104-a913-1b84746a3c6f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLDUUEy_oAMFgSQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638118e8-0b229e0f60ff019d26800dd9;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 19:35:04 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: qh3WqWdBmMG3fzchn3OvxbEpwm2wl_CXi105CL4uJda47N9ZX3CyLA==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 08:56:43 GMT
age: 62742
etag: "d0dff35eb78f129b5da407043037bcf9c27e55c0"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4871
Md5:    a4058fd62595d15c58b3d3266de9865a
Sha1:   d0dff35eb78f129b5da407043037bcf9c27e55c0
Sha256: ab996c23d58871a2ad53f0c34688c87f0d7c0eac5d0c1d8265b86951248449fe
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa2d4df78-04ce-4ad8-b5a5-07c0212d3a16.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 4901
x-amzn-requestid: a5ad8fee-b892-4485-9975-40e183506a82
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cIsO3HDGIAMFQgQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6380272b-5827122433cb8c6d5ab7e300;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 02:23:39 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: MSxsBockYtOQ1vJwadowGgFdFGyqM2R4ax2EQTLoVPu6y0hWy1H1sw==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 15:12:07 GMT
age: 40218
etag: "3515adf47d25a17eec2a62d045d217cd23a0f985"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4901
Md5:    c812ff38eed34e674ee4090ffc602358
Sha1:   3515adf47d25a17eec2a62d045d217cd23a0f985
Sha256: 17847348aa28dce436e4181ec86578e154c3a700b48df9bbdb771abaa3d2ed58
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F51b530e0-9ee5-45ee-95e9-a687ac33f22c.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 3004
x-amzn-requestid: 1e6e228a-fb73-4ed3-881b-6b0e5c8297c7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cPYcrFRXoAMFUJg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6382d450-45059338501b45d943d7e08c;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 03:06:57 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: rmBhEB-x2sOvI7XfEpZQ0-lXEDWZ4los77q017Im-Lwb32ZLA0Zvcg==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 04:45:02 GMT
age: 77843
etag: "035a1b4a2a7889787532ec2637d5c21e06daf672"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   3004
Md5:    22e7d3e11e78242383e452adb9299016
Sha1:   035a1b4a2a7889787532ec2637d5c21e06daf672
Sha256: 990f18423bafc9cc3daaa1bd1290313b6cb3d3a391f642d01fd6797ad4fc9ca8
                                        
                                            POST /webvisor/32049616?wv-check=34550&wv-type=0&wmode=0&wv-part=1&wv-hit=445869891&page-url=http%3A%2F%2Fwww.pembekoala.net%2Fwp-includes%2FText%2FDiff%2Fca4ca71fbb5b782049e242b4f11903f7%2Fdzhyjy%3D%2Fzg4ngy%3D&rn=590988308&browser-info=gdpr%3A14%3Aet%3A1669688551%3Aw%3A1268x939%3Av%3A923%3Az%3A0%3Ai%3A20221129022230%3Au%3A1669688543366418122%3Avf%3Aeaqp9qze4zeusy7lq5yic%3Ast%3A1669688551&t=gdpr(14)ti(2) HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 44
Origin: http://www.pembekoala.net
Connection: keep-alive
Referer: http://www.pembekoala.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         87.250.251.119
HTTP/2 200 OK
content-type: image/gif
                                        
content-length: 43
date: Tue, 29 Nov 2022 02:22:31 GMT
access-control-allow-origin: http://www.pembekoala.net
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 29-Nov-2022 02:22:31 GMT
last-modified: Tue, 29-Nov-2022 02:22:31 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    df3e567d6f16d040326c7a0ea29a4f41
Sha1:   ea7df583983133b62712b5e73bffbcd45cc53736
Sha256: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
                                        
                                            POST /webvisor/32049616?wv-check=3341&wv-type=0&wmode=0&wv-part=2&wv-hit=445869891&page-url=http%3A%2F%2Fwww.pembekoala.net%2Fwp-includes%2FText%2FDiff%2Fca4ca71fbb5b782049e242b4f11903f7%2Fdzhyjy%3D%2Fzg4ngy%3D&rn=616640632&browser-info=gdpr%3A14%3Aet%3A1669688551%3Aw%3A1268x939%3Av%3A923%3Az%3A0%3Ai%3A20221129022230%3Au%3A1669688543366418122%3Avf%3Aeaqp9qze4zeusy7lq5yic%3Ast%3A1669688551&t=gdpr(14)ti(2) HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 12
Origin: http://www.pembekoala.net
Connection: keep-alive
Referer: http://www.pembekoala.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         87.250.251.119
HTTP/2 200 OK
content-type: image/gif
                                        
content-length: 43
date: Tue, 29 Nov 2022 02:22:31 GMT
access-control-allow-origin: http://www.pembekoala.net
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 29-Nov-2022 02:22:31 GMT
last-modified: Tue, 29-Nov-2022 02:22:31 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    df3e567d6f16d040326c7a0ea29a4f41
Sha1:   ea7df583983133b62712b5e73bffbcd45cc53736
Sha256: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
                                        
                                            GET /watch/32049616?wmode=7&page-url=http%3A%2F%2Fwww.pembekoala.net%2Fwp-includes%2FText%2FDiff%2Fca4ca71fbb5b782049e242b4f11903f7%2Fdzhyjy%3D%2Fzg4ngy%3D&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaqp9qze4zeusy7lq5yic%3Afp%3A924%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A1619098992250%3Ahid%3A445869891%3Az%3A0%3Ai%3A20221129022223%3Aet%3A1669688543%3Ac%3A1%3Arn%3A236778200%3Arqn%3A1%3Au%3A1669688543366418122%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A2%2C66%2C66%2C0%2C327%2C0%2C%2C428%2C13%2C%2C%2C%2C914%3Ans%3A1669688541963%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669688543%3At%3ASayfa%20bulunamad%C4%B1%20%7C%20Pembe%20Koala&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)rqnl(1)ti(2) HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.pembekoala.net
Connection: keep-alive
Referer: http://www.pembekoala.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         87.250.251.119
HTTP/2 302 Found
                                        
location: /watch/32049616/1?wmode=7&page-url=http%3A%2F%2Fwww.pembekoala.net%2Fwp-includes%2FText%2FDiff%2Fca4ca71fbb5b782049e242b4f11903f7%2Fdzhyjy%3D%2Fzg4ngy%3D&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaqp9qze4zeusy7lq5yic%3Afp%3A924%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A1619098992250%3Ahid%3A445869891%3Az%3A0%3Ai%3A20221129022223%3Aet%3A1669688543%3Ac%3A1%3Arn%3A236778200%3Arqn%3A1%3Au%3A1669688543366418122%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A2%2C66%2C66%2C0%2C327%2C0%2C%2C428%2C13%2C%2C%2C%2C914%3Ans%3A1669688541963%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669688543%3At%3ASayfa%20bulunamad%C4%B1%20%7C%20Pembe%20Koala&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29rqnl%281%29ti%282%29
date: Tue, 29 Nov 2022 02:22:24 GMT
access-control-allow-origin: http://www.pembekoala.net
set-cookie: yandexuid=6038498701669688544; Expires=Wed, 29-Nov-2023 02:22:24 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure yuidss=6038498701669688544; Expires=Wed, 29-Nov-2023 02:22:24 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure yabs-sid=2298358071669688544; Path=/; SameSite=None; Secure i=vf/C92azFk7+I42UxlJORB85M2T7OkHxvp5I5VyS708Ex5INDhknU7DFZGEwGvQX3phrRQdJvnOBVnUbb6zV+V4wdYE=; Expires=Fri, 26-Nov-2032 02:22:23 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None ymex=1701224544.yc.1669688544#1701224544.yrts.1669688544#1701224544.yrtsi.1669688544; Expires=Wed, 29-Nov-2023 02:22:24 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 29-Nov-2022 02:22:24 GMT
last-modified: Tue, 29-Nov-2022 02:22:24 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---