GET www.dosya.tc/server41/nvev78/IPTV_FUL_TR.m3u.html
200 OK 3.6 kB URL User Request GET HTTP/1.1 www.dosya.tc/server41/nvev78/IPTV_FUL_TR.m3u.html
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerSectigo Limited
Subject*.dosya.tc
Fingerprint1B:AB:AC:F6:BB:9C:39:DA:F2:1E:19:AD:EE:15:3B:CE:67:DE:92:E8
ValiditySun, 12 Feb 2023 00:00:00 GMT - Thu, 14 Mar 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ISO-8859 text
Hash 12063e685ae10a84b493c2fb8f9e6eb2
9a3d3569a9588f54d5b16ee713ec593561953290
6bdaff0d91fd7e6d0c56cf9f97a197cb844c98dccf08c064ad5d0d9d7cd020f1
GET /server41/nvev78/IPTV_FUL_TR.m3u.html HTTP/1.1
Host: www.dosya.tc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 04 Dec 2023 21:29:14 GMT
Server: Apache
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=ISO-8859-9
GET www.dosya.tc/style/style.css
200 OK 15 kB URL GET HTTP/1.1 www.dosya.tc/style/style.css
IP
ASN #24940 Hetzner Online GmbH
Requested by https://www.dosya.tc/server41/nvev78/IPTV_FUL_TR.m3u.html
Certificate IssuerSectigo Limited
Subject*.dosya.tc
Fingerprint1B:AB:AC:F6:BB:9C:39:DA:F2:1E:19:AD:EE:15:3B:CE:67:DE:92:E8
ValiditySun, 12 Feb 2023 00:00:00 GMT - Thu, 14 Mar 2024 23:59:59 GMT
File type assembler source, ASCII text
Hash e36585a9f4a781f9445425224c85e695
4a34bb8474bd8d15a5313a157ca72bf8552910cc
2b8c3599f9d693fc1422d4ad7c8fe6b9fbb2ade6b19a89c55e0d94f02252410a
GET /style/style.css HTTP/1.1
Host: www.dosya.tc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.dosya.tc/server41/nvev78/IPTV_FUL_TR.m3u.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 04 Dec 2023 21:29:15 GMT
Server: Apache
Last-Modified: Sun, 26 Nov 2023 08:56:15 GMT
Accept-Ranges: bytes
Content-Length: 14629
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
GET www.dosya.tc/style/bootstrap.css
200 OK 146 kB URL GET HTTP/1.1 www.dosya.tc/style/bootstrap.css
IP
ASN #24940 Hetzner Online GmbH
Requested by https://www.dosya.tc/server41/nvev78/IPTV_FUL_TR.m3u.html
Certificate IssuerSectigo Limited
Subject*.dosya.tc
Fingerprint1B:AB:AC:F6:BB:9C:39:DA:F2:1E:19:AD:EE:15:3B:CE:67:DE:92:E8
ValiditySun, 12 Feb 2023 00:00:00 GMT - Thu, 14 Mar 2024 23:59:59 GMT
File type ASCII text, with very long lines (386)
Size 146 kB (145933 bytes)
Hash 2dbb985a5bb6dd8ef0a7b21d290ea9ae
f8676e1f4a902a63088f45982f3f9b6a6c401b47
d170052c16caec3810f2dee6456539045d8e326f6d8ed7c7f78e59ed34de348a
GET /style/bootstrap.css HTTP/1.1
Host: www.dosya.tc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.dosya.tc/server41/nvev78/IPTV_FUL_TR.m3u.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 04 Dec 2023 21:29:15 GMT
Server: Apache
Last-Modified: Sun, 26 Nov 2023 08:56:15 GMT
Accept-Ranges: bytes
Content-Length: 145933
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
GET www.dosya.tc/images/footer-icon2.png
200 OK 850 B URL GET HTTP/1.1 www.dosya.tc/images/footer-icon2.png
IP
ASN #24940 Hetzner Online GmbH
Requested by https://www.dosya.tc/server41/nvev78/IPTV_FUL_TR.m3u.html
Certificate IssuerSectigo Limited
Subject*.dosya.tc
Fingerprint1B:AB:AC:F6:BB:9C:39:DA:F2:1E:19:AD:EE:15:3B:CE:67:DE:92:E8
ValiditySun, 12 Feb 2023 00:00:00 GMT - Thu, 14 Mar 2024 23:59:59 GMT
File type PNG image data, 35 x 35, 8-bit/color RGBA, non-interlaced\012- data
Hash 51a472b4a51ea9245ee6f4386f07818f
a19e86c411dc6da3592d1f90e89ddf68df1fee3c
eea1befd43d3dc930a0eb0335c56ed8bc7e14aa1ee3e6c546cd21c1826362750
GET /images/footer-icon2.png HTTP/1.1
Host: www.dosya.tc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.dosya.tc/server41/nvev78/IPTV_FUL_TR.m3u.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 04 Dec 2023 21:29:15 GMT
Server: Apache
Last-Modified: Sun, 26 Nov 2023 08:56:06 GMT
Accept-Ranges: bytes
Content-Length: 850
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/png
GET www.dosya.tc/images/uye-girisi.png
200 OK 3.0 kB URL GET HTTP/1.1 www.dosya.tc/images/uye-girisi.png
IP
ASN #24940 Hetzner Online GmbH
Requested by https://www.dosya.tc/server41/nvev78/IPTV_FUL_TR.m3u.html
Certificate IssuerSectigo Limited
Subject*.dosya.tc
Fingerprint1B:AB:AC:F6:BB:9C:39:DA:F2:1E:19:AD:EE:15:3B:CE:67:DE:92:E8
ValiditySun, 12 Feb 2023 00:00:00 GMT - Thu, 14 Mar 2024 23:59:59 GMT
File type PNG image data, 140 x 51, 8-bit/color RGB, non-interlaced\012- data
Hash 6925e8f5c208aae4dd55cadd1340f180
a03365e7fb59c9588b3b7963e18c0b3e5d4cb369
6bfa03e8b7d8249e9927cafe801657559f7b7064248bb970b55fb4b689611f2d
GET /images/uye-girisi.png HTTP/1.1
Host: www.dosya.tc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.dosya.tc/server41/nvev78/IPTV_FUL_TR.m3u.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 04 Dec 2023 21:29:15 GMT
Server: Apache
Last-Modified: Sun, 26 Nov 2023 08:56:11 GMT
Accept-Ranges: bytes
Content-Length: 2979
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/png
GET www.dosya.tc/images/footer-icon3.png
200 OK 1.7 kB URL GET HTTP/1.1 www.dosya.tc/images/footer-icon3.png
IP
ASN #24940 Hetzner Online GmbH
Requested by https://www.dosya.tc/server41/nvev78/IPTV_FUL_TR.m3u.html
Certificate IssuerSectigo Limited
Subject*.dosya.tc
Fingerprint1B:AB:AC:F6:BB:9C:39:DA:F2:1E:19:AD:EE:15:3B:CE:67:DE:92:E8
ValiditySun, 12 Feb 2023 00:00:00 GMT - Thu, 14 Mar 2024 23:59:59 GMT
File type PNG image data, 35 x 35, 8-bit/color RGBA, non-interlaced\012- data
Hash 3a61d85a6bb0a45429b1e4b7d945aa95
6fcdf44c20d1ed269303583e16a98e245fa7b69b
c84a015988434d7fa0c884f5590de727799abacb9c4a4ad6b4cadea4b97ea732
GET /images/footer-icon3.png HTTP/1.1
Host: www.dosya.tc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.dosya.tc/server41/nvev78/IPTV_FUL_TR.m3u.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 04 Dec 2023 21:29:15 GMT
Server: Apache
Last-Modified: Sun, 26 Nov 2023 08:56:06 GMT
Accept-Ranges: bytes
Content-Length: 1702
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png
GET www.dosya.tc/images/footer-icon1.png
200 OK 582 B URL GET HTTP/1.1 www.dosya.tc/images/footer-icon1.png
IP
ASN #24940 Hetzner Online GmbH
Requested by https://www.dosya.tc/server41/nvev78/IPTV_FUL_TR.m3u.html
Certificate IssuerSectigo Limited
Subject*.dosya.tc
Fingerprint1B:AB:AC:F6:BB:9C:39:DA:F2:1E:19:AD:EE:15:3B:CE:67:DE:92:E8
ValiditySun, 12 Feb 2023 00:00:00 GMT - Thu, 14 Mar 2024 23:59:59 GMT
File type PNG image data, 35 x 35, 8-bit/color RGBA, non-interlaced\012- data
Hash e62d200d08f565563cc9b713729bbaa6
3a130f79117f2aaa91154eb56a22b47de8c06a50
101d88dc759a5588d5c064fe233b6b19c565966a527a03eb9cdc29c733b8d4c3
GET /images/footer-icon1.png HTTP/1.1
Host: www.dosya.tc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.dosya.tc/server41/nvev78/IPTV_FUL_TR.m3u.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 04 Dec 2023 21:29:15 GMT
Server: Apache
Last-Modified: Sun, 26 Nov 2023 08:56:06 GMT
Accept-Ranges: bytes
Content-Length: 582
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png
GET www.dosya.tc/images/logo.png
200 OK 7.2 kB URL GET HTTP/1.1 www.dosya.tc/images/logo.png
IP
ASN #24940 Hetzner Online GmbH
Requested by https://www.dosya.tc/server41/nvev78/IPTV_FUL_TR.m3u.html
Certificate IssuerSectigo Limited
Subject*.dosya.tc
Fingerprint1B:AB:AC:F6:BB:9C:39:DA:F2:1E:19:AD:EE:15:3B:CE:67:DE:92:E8
ValiditySun, 12 Feb 2023 00:00:00 GMT - Thu, 14 Mar 2024 23:59:59 GMT
File type PNG image data, 191 x 53, 8-bit/color RGB, non-interlaced\012- data
Hash 2a193802d40b18cd55b0d159571bf63c
1a4e4bdf88317471241d9e5ee29d9572be3f37e3
77eba513db8685e5a4b7633684b1d6b175bf8272ccfff3c6a1c0735d37d1d57a
GET /images/logo.png HTTP/1.1
Host: www.dosya.tc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.dosya.tc/server41/nvev78/IPTV_FUL_TR.m3u.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 04 Dec 2023 21:29:15 GMT
Server: Apache
Last-Modified: Sun, 26 Nov 2023 08:56:10 GMT
Accept-Ranges: bytes
Content-Length: 7157
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/png
GET www.dosya.tc/images/download.gif
200 OK 7.2 kB URL GET HTTP/1.1 www.dosya.tc/images/download.gif
IP
ASN #24940 Hetzner Online GmbH
Requested by https://www.dosya.tc/server41/nvev78/IPTV_FUL_TR.m3u.html
Certificate IssuerSectigo Limited
Subject*.dosya.tc
Fingerprint1B:AB:AC:F6:BB:9C:39:DA:F2:1E:19:AD:EE:15:3B:CE:67:DE:92:E8
ValiditySun, 12 Feb 2023 00:00:00 GMT - Thu, 14 Mar 2024 23:59:59 GMT
File type GIF image data, version 89a, 300 x 86\012- data
Hash a9a5324512e43e463fe0a00118ad0c37
5375ae6855a34619ce428da5f835fc9d9ce06124
7964b17bc443c3bcf422211a690ac4bc62ad981d77d5c0b6bdddc982b8615a25
GET /images/download.gif HTTP/1.1
Host: www.dosya.tc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.dosya.tc/server41/nvev78/IPTV_FUL_TR.m3u.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 04 Dec 2023 21:29:15 GMT
Server: Apache
Last-Modified: Sun, 26 Nov 2023 08:56:05 GMT
Accept-Ranges: bytes
Content-Length: 7229
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/gif
GET www.dosya.tc/images/background.webp
200 OK 113 kB URL GET HTTP/1.1 www.dosya.tc/images/background.webp
IP
ASN #24940 Hetzner Online GmbH
Requested by https://www.dosya.tc/server41/nvev78/IPTV_FUL_TR.m3u.html
Certificate IssuerSectigo Limited
Subject*.dosya.tc
Fingerprint1B:AB:AC:F6:BB:9C:39:DA:F2:1E:19:AD:EE:15:3B:CE:67:DE:92:E8
ValiditySun, 12 Feb 2023 00:00:00 GMT - Thu, 14 Mar 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x1050, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size 113 kB (112776 bytes)
Hash 2b08bddebb64127b30bc913f73cdab61
f8911fd91f0302e88e7fe6e089ba20af32269b79
0804b26a6993fc6ee8e977f77aa9ce5ddf9c4fe69773b296cc292ee7b2a5ac1b
GET /images/background.webp HTTP/1.1
Host: www.dosya.tc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.dosya.tc/style/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 04 Dec 2023 21:29:15 GMT
Server: Apache
Last-Modified: Sun, 26 Nov 2023 08:56:03 GMT
Accept-Ranges: bytes
Content-Length: 112776
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/webp
GET www.dosya.tc/images/menu-ayrac.png
200 OK 125 B URL GET HTTP/1.1 www.dosya.tc/images/menu-ayrac.png
IP
ASN #24940 Hetzner Online GmbH
Requested by https://www.dosya.tc/server41/nvev78/IPTV_FUL_TR.m3u.html
Certificate IssuerSectigo Limited
Subject*.dosya.tc
Fingerprint1B:AB:AC:F6:BB:9C:39:DA:F2:1E:19:AD:EE:15:3B:CE:67:DE:92:E8
ValiditySun, 12 Feb 2023 00:00:00 GMT - Thu, 14 Mar 2024 23:59:59 GMT
File type PNG image data, 2 x 52, 8-bit/color RGB, non-interlaced\012- data
Hash 35a0591c63feeb75e3e547e894ff6e2d
7dd00c2e8d4e9203b71d3fcb9a660e717b8dca7c
9700fc9abb23b0fa04c070487f5aebdcec2cbb22f10788ab7898032abe3fcced
GET /images/menu-ayrac.png HTTP/1.1
Host: www.dosya.tc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.dosya.tc/style/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 04 Dec 2023 21:29:15 GMT
Server: Apache
Last-Modified: Sun, 26 Nov 2023 08:56:10 GMT
Accept-Ranges: bytes
Content-Length: 125
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png
GET www.dosya.tc/apple-touch-icon.png
200 OK 6.6 kB URL GET HTTP/1.1 www.dosya.tc/apple-touch-icon.png
IP
ASN #24940 Hetzner Online GmbH
Requested by https://www.dosya.tc/server41/nvev78/IPTV_FUL_TR.m3u.html
Certificate IssuerSectigo Limited
Subject*.dosya.tc
Fingerprint1B:AB:AC:F6:BB:9C:39:DA:F2:1E:19:AD:EE:15:3B:CE:67:DE:92:E8
ValiditySun, 12 Feb 2023 00:00:00 GMT - Thu, 14 Mar 2024 23:59:59 GMT
File type PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced\012- data
Hash bfd9b50e03f63b25c253a5d6fa5c5ef4
b4c68746da8a1da96b57d37990bfbfb0f716c14b
ca0f27136956761254299ac92d78aecca2c21841760c56904d894eb13ea0237f
GET /apple-touch-icon.png HTTP/1.1
Host: www.dosya.tc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.dosya.tc/server41/nvev78/IPTV_FUL_TR.m3u.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 04 Dec 2023 21:29:15 GMT
Server: Apache
Last-Modified: Sun, 26 Nov 2023 08:55:43 GMT
Accept-Ranges: bytes
Content-Length: 6556
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png
GET www.dosya.tc/favicon-16x16.png
200 OK 1.6 kB URL GET HTTP/1.1 www.dosya.tc/favicon-16x16.png
IP
ASN #24940 Hetzner Online GmbH
Requested by https://www.dosya.tc/server41/nvev78/IPTV_FUL_TR.m3u.html
Certificate IssuerSectigo Limited
Subject*.dosya.tc
Fingerprint1B:AB:AC:F6:BB:9C:39:DA:F2:1E:19:AD:EE:15:3B:CE:67:DE:92:E8
ValiditySun, 12 Feb 2023 00:00:00 GMT - Thu, 14 Mar 2024 23:59:59 GMT
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Hash 05c5d89a72c5dc5e863e151cc5fa9b68
df5a0242031f54494fe0bf1b2d7290cd5e864a15
cd6cef0b6624ec979018be137e45b606f36c018b2d64cfe7e3d39815c0936a46
GET /favicon-16x16.png HTTP/1.1
Host: www.dosya.tc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.dosya.tc/server41/nvev78/IPTV_FUL_TR.m3u.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 04 Dec 2023 21:29:15 GMT
Server: Apache
Last-Modified: Sun, 26 Nov 2023 08:55:45 GMT
Accept-Ranges: bytes
Content-Length: 1594
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/png
GET my.rtmark.net/gid.js?userId=0295a7c34f3742f090c9378b48c4eb08
200 OK 65 B URL GET HTTP/2 my.rtmark.net/gid.js?userId=0295a7c34f3742f090c9378b48c4eb08
IP
Requested by https://www.dosya.tc/server41/nvev78/IPTV_FUL_TR.m3u.html
Certificate IssuerLet's Encrypt
Subjectrtmark.net
FingerprintE8:81:4E:79:89:89:BE:CE:75:1F:E0:2A:60:54:8A:A4:11:2E:F7:42
ValiditySat, 07 Oct 2023 15:22:00 GMT - Fri, 05 Jan 2024 15:21:59 GMT
File type JSON data\012- , ASCII text
Hash 1b6731bee5cb7fa96d9b16744c7b2849
458c4248fd2a9b3107980e5cd3cb4580476a3f2b
bdc1ae9044e723daf63f23a357842994298514b3a022a7d0977587f80e87c531
GET /gid.js?userId=0295a7c34f3742f090c9378b48c4eb08 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.dosya.tc
DNT: 1
Connection: keep-alive
Referer: https://www.dosya.tc/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 21:29:16 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://www.dosya.tc
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=0295a7c34f3742f090c9378b48c4eb08; expires=Tue, 03 Dec 2024 21:29:16 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
GET ibrapush.com/zone?pub=0&zone_id=5968117&is_mobile=false&domain=www.dosya.tc&var=&ymid=&var_3=&tg=0&sw=3.1.471
200 OK 880 B URL GET HTTP/2 ibrapush.com/zone?pub=0&zone_id=5968117&is_mobile=false&domain=www.dosya.tc&var=&ymid=&var_3=&tg=0&sw=3.1.471
IP
Requested by https://www.dosya.tc/server41/nvev78/IPTV_FUL_TR.m3u.html
Certificate IssuerLet's Encrypt
Subjectibrapush.com
FingerprintAC:F6:AB:6F:AB:34:17:90:49:79:7B:7C:FD:CE:24:5B:02:33:E5:E2
ValidityFri, 10 Nov 2023 10:01:20 GMT - Thu, 08 Feb 2024 10:01:19 GMT
File type JSON data\012- , ASCII text, with very long lines (879)
Hash a5a8bb788598a358d0e84002614d4fd5
1be4ed4cbbd7d159ad071f75f20bce2142bfbe18
71ebbf70b692abefecec0399bdc9e1c87355fe5109407b376788cdf1eb77f14e
GET /zone?pub=0&zone_id=5968117&is_mobile=false&domain=www.dosya.tc&var=&ymid=&var_3=&tg=0&sw=3.1.471 HTTP/1.1
Host: ibrapush.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.dosya.tc/
Origin: https://www.dosya.tc
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 21:29:16 GMT
content-type: application/json; charset=utf-8
content-length: 880
x-trace-id: 9846790e618243f7da2c49c85e3cc48c
access-control-allow-origin: https://www.dosya.tc
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
OPTIONS ibrapush.com/custom
200 OK 0 B IP
Requested by https://www.dosya.tc/server41/nvev78/IPTV_FUL_TR.m3u.html
Certificate IssuerLet's Encrypt
Subjectibrapush.com
FingerprintAC:F6:AB:6F:AB:34:17:90:49:79:7B:7C:FD:CE:24:5B:02:33:E5:E2
ValidityFri, 10 Nov 2023 10:01:20 GMT - Thu, 08 Feb 2024 10:01:19 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /custom HTTP/1.1
Host: ibrapush.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.dosya.tc/
Origin: https://www.dosya.tc
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 21:29:16 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://www.dosya.tc
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token,X-Oaid
access-control-max-age: 86400
X-Firefox-Spdy: h2
OPTIONS ibrapush.com/custom
200 OK 0 B IP
Requested by https://www.dosya.tc/server41/nvev78/IPTV_FUL_TR.m3u.html
Certificate IssuerLet's Encrypt
Subjectibrapush.com
FingerprintAC:F6:AB:6F:AB:34:17:90:49:79:7B:7C:FD:CE:24:5B:02:33:E5:E2
ValidityFri, 10 Nov 2023 10:01:20 GMT - Thu, 08 Feb 2024 10:01:19 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /custom HTTP/1.1
Host: ibrapush.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.dosya.tc/
Origin: https://www.dosya.tc
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 21:29:16 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://www.dosya.tc
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token,X-Oaid
access-control-max-age: 86400
X-Firefox-Spdy: h2
GET cameesse.net/27/b7af9eee900df9a8aa2af9ad8ee46174
200 OK 130 kB URL GET HTTP/2 cameesse.net/27/b7af9eee900df9a8aa2af9ad8ee46174
IP
Requested by https://www.dosya.tc/server41/nvev78/IPTV_FUL_TR.m3u.html
Certificate IssuerLet's Encrypt
Subjectcameesse.net
Fingerprint95:AE:4C:29:A9:9F:0C:04:38:32:00:81:30:07:95:A7:F8:B0:77:D6
ValidityWed, 18 Oct 2023 10:27:53 GMT - Tue, 16 Jan 2024 10:27:52 GMT
File type gzip compressed data, max speed, from Unix\012- data
Size 130 kB (130484 bytes)
Hash 3b7f4157df2818f022d6bf1ee97cbef1
928c3576ce544619526ac846caaea1da6470c813
55a3f04232a680a439c9614b0a9d36415bfa44e35814ba0a2b470a6ef9ebed77
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /27/b7af9eee900df9a8aa2af9ad8ee46174 HTTP/1.1
Host: cameesse.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.dosya.tc/
Cookie: scm=1; OAID=b57761a4a1e3452a837eb25fb4516e8a; oaidts=1701725356
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 21:29:16 GMT
content-type: application/javascript
access-control-allow-credentials: true
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID, baggage, sentry-trace
x-trace-id: c6e8aca3d02ae0f8849d6e34dec0a646
cache-control: max-age:290304000, public
last-modified: Fri, 24 Nov 2023 06:46:08 GMT
expires: Fri, 24 Dec 2083 06:46:08 GMT
access-control-expose-headers: X-Sc
strict-transport-security: max-age=1
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
OPTIONS ibrapush.com/custom
200 OK 39 B IP
Requested by https://www.dosya.tc/server41/nvev78/IPTV_FUL_TR.m3u.html
Certificate IssuerLet's Encrypt
Subjectibrapush.com
FingerprintAC:F6:AB:6F:AB:34:17:90:49:79:7B:7C:FD:CE:24:5B:02:33:E5:E2
ValidityFri, 10 Nov 2023 10:01:20 GMT - Thu, 08 Feb 2024 10:01:19 GMT
File type JSON data\012- , ASCII text
Hash 058b158c2be925f556454ef762d93538
cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST /custom HTTP/1.1
Host: ibrapush.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.dosya.tc/
Content-Type: application/json
Content-Length: 774
Origin: https://www.dosya.tc
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 21:29:16 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: 5862f1cedacfdb0c1180367e2534acb0
access-control-allow-origin: https://www.dosya.tc
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
GET tzegilo.com/stattag.js
200 OK 11 kB IP
Requested by https://www.dosya.tc/server41/nvev78/IPTV_FUL_TR.m3u.html
Certificate IssuerGoogle Trust Services LLC
Subjecttzegilo.com
FingerprintF2:F3:F8:C4:40:73:B6:FE:DD:58:70:D7:13:25:D2:51:21:88:50:0B
ValiditySun, 03 Dec 2023 17:24:18 GMT - Sat, 02 Mar 2024 17:24:17 GMT
File type ASCII text, with very long lines (18369)
Hash 89e89aea544ea2785d49cc4cd9cf26f6
7d53437a89eb9861038ee27a8ff0e3bb70fa2a0b
86da38693fcea056d36588a4146e85392f784c457511de416fec32034aafa4f9
GET /stattag.js HTTP/1.1
Host: tzegilo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.dosya.tc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 21:29:16 GMT
content-type: application/javascript
last-modified: Thu, 07 Sep 2023 08:19:52 GMT
etag: W/"64f987a8-4a4b"
link: <https://flerap.com/>; rel=preconnect; crossorigin, <https://fleraprt.com/>; rel=preconnect; crossorigin
cache-control: max-age=14400
cf-cache-status: HIT
age: 4766
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BXxb4XTRN%2BgM5mQh5HLXxGHpKMy%2BONdrVbOUc9tD7kBvTemcuaZe9CJncXmLOJxTjx%2FqCvsZyZzn3h1TipMt53crtl4y%2FQM%2FeD2dWQZSx9PeSez1b8mW4mTyEPUZyA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830724d4ba2f56c7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
POST ibrapush.com/event
200 OK 0 B IP
Requested by https://www.dosya.tc/server41/nvev78/IPTV_FUL_TR.m3u.html
Certificate IssuerLet's Encrypt
Subjectibrapush.com
FingerprintAC:F6:AB:6F:AB:34:17:90:49:79:7B:7C:FD:CE:24:5B:02:33:E5:E2
ValidityFri, 10 Nov 2023 10:01:20 GMT - Thu, 08 Feb 2024 10:01:19 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /event HTTP/1.1
Host: ibrapush.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.dosya.tc/
Origin: https://www.dosya.tc
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 21:29:16 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://www.dosya.tc
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token,X-Oaid
access-control-max-age: 86400
X-Firefox-Spdy: h2
POST ibrapush.com/event
200 OK 94 B IP
Requested by https://www.dosya.tc/server41/nvev78/IPTV_FUL_TR.m3u.html
Certificate IssuerLet's Encrypt
Subjectibrapush.com
FingerprintAC:F6:AB:6F:AB:34:17:90:49:79:7B:7C:FD:CE:24:5B:02:33:E5:E2
ValidityFri, 10 Nov 2023 10:01:20 GMT - Thu, 08 Feb 2024 10:01:19 GMT
File type JSON data\012- , ASCII text
Hash 480859d2887f9d47cbad17867c4aa2d2
57e4c11a4305bc14b705da04affd2d5a54a5955e
0d3659aa68f1576ff8b97b3e744275c6c6d1226f4937febb18274a84a964b83f
POST /event HTTP/1.1
Host: ibrapush.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.dosya.tc/
Content-Type: application/json
Content-Length: 1751
Origin: https://www.dosya.tc
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 21:29:16 GMT
content-type: application/json; charset=utf-8
content-length: 94
access-control-allow-origin: https://www.dosya.tc
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
POST amunfezanttor.com/event
200 OK 0 B IP
Requested by https://www.dosya.tc/server41/nvev78/IPTV_FUL_TR.m3u.html
Certificate IssuerLet's Encrypt
Subjectamunfezanttor.com
Fingerprint94:5D:BD:F9:F6:55:6B:83:55:25:90:4A:5F:E4:CF:19:5E:6B:A2:51
ValidityWed, 22 Nov 2023 20:33:33 GMT - Tue, 20 Feb 2024 20:33:32 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
OPTIONS /event HTTP/1.1
Host: amunfezanttor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.dosya.tc/
Origin: https://www.dosya.tc
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 21:29:16 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://www.dosya.tc
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token,X-Oaid
access-control-max-age: 86400
X-Firefox-Spdy: h2
POST fleraprt.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f
200 OK 12 B URL POST HTTP/1.1 fleraprt.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f
IP
Requested by https://www.dosya.tc/server41/nvev78/IPTV_FUL_TR.m3u.html
Certificate IssuerSectigo Limited
Subjectfleraprt.com
FingerprintA4:AF:A0:00:99:C9:85:E5:30:F6:F3:F2:B5:4F:AE:4F:D0:46:74:A9
ValidityMon, 09 Jan 2023 00:00:00 GMT - Sun, 14 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash adb4650bfc9d2a73d4dd69583b0ceb14
1ce399d6e936232aaf2192cd7903a279c5015f22
21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed
POST /log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f HTTP/1.1
Host: fleraprt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1385
Origin: https://www.dosya.tc
DNT: 1
Connection: keep-alive
Referer: https://www.dosya.tc/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.10
Date: Mon, 04 Dec 2023 21:29:57 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 12
Connection: keep-alive
Access-Control-Allow-Origin: https://www.dosya.tc
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match
Access-Control-Allow-Credentials: true
POST amunfezanttor.com/event
200 OK 94 B IP
Requested by https://www.dosya.tc/server41/nvev78/IPTV_FUL_TR.m3u.html
Certificate IssuerLet's Encrypt
Subjectamunfezanttor.com
Fingerprint94:5D:BD:F9:F6:55:6B:83:55:25:90:4A:5F:E4:CF:19:5E:6B:A2:51
ValidityWed, 22 Nov 2023 20:33:33 GMT - Tue, 20 Feb 2024 20:33:32 GMT
File type JSON data\012- , ASCII text
Hash 674a66fca00059406cff878409c2c532
99e3e87f804de1296c8edd9c86a85fc6ac57050b
94c3f13da792f57865a0f9912dc6a1e3456e27d8604f8335d30207953853ca2a
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /event HTTP/1.1
Host: amunfezanttor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.dosya.tc/
Content-Type: application/json
Content-Length: 533
Origin: https://www.dosya.tc
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 21:29:16 GMT
content-type: application/json; charset=utf-8
content-length: 94
access-control-allow-origin: https://www.dosya.tc
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
OPTIONS gishejuy.com/500/5968115?excludes=&oaid=0295a7c34f3742f090c9378b48c4eb08&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&pl=https%3A%2F%2Fwww.dosya.tc%2Fserver41%2Fnvev78%2FIPTV_FUL_TR.m3u.html&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&tzofs=0&js_build=8&sw_version=v1.312.0
200 OK 0 B URL OPTIONS HTTP/2 gishejuy.com/500/5968115?excludes=&oaid=0295a7c34f3742f090c9378b48c4eb08&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&pl=https%3A%2F%2Fwww.dosya.tc%2Fserver41%2Fnvev78%2FIPTV_FUL_TR.m3u.html&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&tzofs=0&js_build=8&sw_version=v1.312.0
IP
Requested by https://www.dosya.tc/server41/nvev78/IPTV_FUL_TR.m3u.html
Certificate IssuerLet's Encrypt
Subjectgishejuy.com
Fingerprint99:91:AA:4E:BA:FC:75:A0:0A:79:EE:F6:15:64:FA:15:B2:BC:61:31
ValidityWed, 25 Oct 2023 09:21:45 GMT - Tue, 23 Jan 2024 09:21:44 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
OPTIONS /500/5968115?excludes=&oaid=0295a7c34f3742f090c9378b48c4eb08&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&pl=https%3A%2F%2Fwww.dosya.tc%2Fserver41%2Fnvev78%2FIPTV_FUL_TR.m3u.html&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&tzofs=0&js_build=8&sw_version=v1.312.0 HTTP/1.1
Host: gishejuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://www.dosya.tc/
Origin: https://www.dosya.tc
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 21:29:16 GMT
content-length: 0
allow: GET, OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://www.dosya.tc
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-allow-credentials: true
access-control-max-age: 600
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *
X-Firefox-Spdy: h2
POST cameesse.net/9?z=5968116&ng=1&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fwww.dosya.tc%2Fserver41%2Fnvev78%2FIPTV_FUL_TR.m3u.html&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&sah=1024&drf=&hil=1&ist=0&oaid=0295a7c34f3742f090c9378b48c4eb08
200 OK 0 B URL POST HTTP/2 cameesse.net/9?z=5968116&ng=1&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fwww.dosya.tc%2Fserver41%2Fnvev78%2FIPTV_FUL_TR.m3u.html&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&sah=1024&drf=&hil=1&ist=0&oaid=0295a7c34f3742f090c9378b48c4eb08
IP
Requested by https://www.dosya.tc/server41/nvev78/IPTV_FUL_TR.m3u.html
Certificate IssuerLet's Encrypt
Subjectcameesse.net
Fingerprint95:AE:4C:29:A9:9F:0C:04:38:32:00:81:30:07:95:A7:F8:B0:77:D6
ValidityWed, 18 Oct 2023 10:27:53 GMT - Tue, 16 Jan 2024 10:27:52 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
OPTIONS /9?z=5968116&ng=1&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fwww.dosya.tc%2Fserver41%2Fnvev78%2FIPTV_FUL_TR.m3u.html&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&sah=1024&drf=&hil=1&ist=0&oaid=0295a7c34f3742f090c9378b48c4eb08 HTTP/1.1
Host: cameesse.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.dosya.tc/
Origin: https://www.dosya.tc
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Mon, 04 Dec 2023 21:29:16 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://www.dosya.tc
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID, baggage, sentry-trace
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
X-Firefox-Spdy: h2
GET my.rtmark.net/gid.js?pub=0&userId=f936b761d238423aa71877f9bb9728d7&zoneId=5968117&checkDuplicate=true&ymid=&var=
200 OK 65 B URL GET HTTP/2 my.rtmark.net/gid.js?pub=0&userId=f936b761d238423aa71877f9bb9728d7&zoneId=5968117&checkDuplicate=true&ymid=&var=
IP
Requested by https://www.dosya.tc/server41/nvev78/IPTV_FUL_TR.m3u.html
Certificate IssuerLet's Encrypt
Subjectrtmark.net
FingerprintE8:81:4E:79:89:89:BE:CE:75:1F:E0:2A:60:54:8A:A4:11:2E:F7:42
ValiditySat, 07 Oct 2023 15:22:00 GMT - Fri, 05 Jan 2024 15:21:59 GMT
File type JSON data\012- , ASCII text
Hash 1b6731bee5cb7fa96d9b16744c7b2849
458c4248fd2a9b3107980e5cd3cb4580476a3f2b
bdc1ae9044e723daf63f23a357842994298514b3a022a7d0977587f80e87c531
GET /gid.js?pub=0&userId=f936b761d238423aa71877f9bb9728d7&zoneId=5968117&checkDuplicate=true&ymid=&var= HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.dosya.tc/
Origin: https://www.dosya.tc
DNT: 1
Connection: keep-alive
Cookie: ID=0295a7c34f3742f090c9378b48c4eb08
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 21:29:16 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://www.dosya.tc
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=0295a7c34f3742f090c9378b48c4eb08; expires=Tue, 03 Dec 2024 21:29:16 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
POST amunfezanttor.com/event
200 OK 94 B IP
Requested by https://www.dosya.tc/server41/nvev78/IPTV_FUL_TR.m3u.html
Certificate IssuerLet's Encrypt
Subjectamunfezanttor.com
Fingerprint94:5D:BD:F9:F6:55:6B:83:55:25:90:4A:5F:E4:CF:19:5E:6B:A2:51
ValidityWed, 22 Nov 2023 20:33:33 GMT - Tue, 20 Feb 2024 20:33:32 GMT
File type JSON data\012- , ASCII text
Hash bde9ecfa05588190ade23b475936d20c
9c48f378f9bc0014a7177d0ee323a417110028f4
2a4fb6a0897e9f94ad81f61f9b062ee79f2dfa933b1b6eb5edf2c3aa5fbce9b9
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /event HTTP/1.1
Host: amunfezanttor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.dosya.tc/
Content-Type: application/json
Content-Length: 533
Origin: https://www.dosya.tc
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 21:29:16 GMT
content-type: application/json; charset=utf-8
content-length: 94
access-control-allow-origin: https://www.dosya.tc
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
GET offerimage.com/www/images/1254ddfd42baa84cea2221d2e82fa511.png
200 OK 70 kB URL GET HTTP/2 offerimage.com/www/images/1254ddfd42baa84cea2221d2e82fa511.png
IP
Requested by https://www.dosya.tc/server41/nvev78/IPTV_FUL_TR.m3u.html
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintDB:4D:42:F8:E2:4C:E3:E4:BB:22:D8:D1:F7:64:B5:9A:10:B6:25:E0
ValiditySun, 07 May 2023 00:00:00 GMT - Mon, 06 May 2024 23:59:59 GMT
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash 1254ddfd42baa84cea2221d2e82fa511
84b26dfb937aa8b9746a20e52f9d1330a9a29eab
eba572a9f6836dc915e75251fed8c1e6129c7013cb380af95899e9824a82fd92
GET /www/images/1254ddfd42baa84cea2221d2e82fa511.png HTTP/1.1
Host: offerimage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.dosya.tc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 21:29:16 GMT
content-type: image/png
content-length: 69506
last-modified: Mon, 28 Aug 2023 16:35:16 GMT
etag: "64ecccc4-10f82"
expires: Tue, 05 Dec 2023 08:33:39 GMT
cache-control: max-age=86400
timing-allow-origin: *
cf-cache-status: HIT
age: 46537
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 830724d78c325efe-ARN
X-Firefox-Spdy: h2
GET cameesse.net/11?rnd=2218551423&z=5968116&b=19427765&var=&varid=0&rqtdbc=1&rcvdbc=1&btp=7&rb=efmpCTiq0hLazNIIUMwAwkRQV8TgNKKdjyTDnnKc3ynIkw89eG_v95omSZs24QDx0UUAm1e4xhaWmm648syekHvdwkBhM-icReRFxWZasVxyVAAoBaFwpG_UXr4XK0hk8_-oCHW5DhP7UacLiXXD7uVjAK04Q1VewUbePR-Bnw3NqYg5UIjQM7ooqLDa8R8yTy_TAiQ8b6X7pOVPeldMTP7Gl-mxhNZYt0XVxMZ7gxE_W2K9W6neyaf9PyulRciau6k7KgiD62qFHJbOo5xsv0PbPFA1C4lIC2cKpIZYP74-oXe8yKQdNd9YybvU2JPPg2VBpQ3q_WD8BE_hsYBILoWf6xG4sBAGj9JUy-0MV_P3o4kCuE3YSo_-8tMXe3Vbm4hVb191rSFu0CyLoyx4UipVF03tg2UDCxLU7qIMHScrsKWvdAigh-5CD1TW6Htwz0ebhk8waMmsD9hKrinQHRjh4Z1GRvJvUhaxQv9a3s2AQcVnnJ2IoynI_Qh9aMMyeuefDLbD7kdp--y8mwF3zOk5Rib1_BBbypgTzT5iFTyZyPS2wO41jg3AeAoLAVOeBzKK5_d469oq9t3M9BxJmCN84y1iggFCFO4jLxRjhiIMno8yT2ZCi_B9Z-qQh0cPuBCcqx_HCZXTrFIbI6CTpXiiDTugHbcTDrtcAg==&ruid=de0e7e35-7a26-4b50-a595-12787484865d&ng=1&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fwww.dosya.tc%2Fserver41%2Fnvev78%2FIPTV_FUL_TR.m3u.html&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&sah=1024&drf=&hil=1&ist=0&ot=137
200 OK 0 B URL GET HTTP/2 cameesse.net/11?rnd=2218551423&z=5968116&b=19427765&var=&varid=0&rqtdbc=1&rcvdbc=1&btp=7&rb=efmpCTiq0hLazNIIUMwAwkRQV8TgNKKdjyTDnnKc3ynIkw89eG_v95omSZs24QDx0UUAm1e4xhaWmm648syekHvdwkBhM-icReRFxWZasVxyVAAoBaFwpG_UXr4XK0hk8_-oCHW5DhP7UacLiXXD7uVjAK04Q1VewUbePR-Bnw3NqYg5UIjQM7ooqLDa8R8yTy_TAiQ8b6X7pOVPeldMTP7Gl-mxhNZYt0XVxMZ7gxE_W2K9W6neyaf9PyulRciau6k7KgiD62qFHJbOo5xsv0PbPFA1C4lIC2cKpIZYP74-oXe8yKQdNd9YybvU2JPPg2VBpQ3q_WD8BE_hsYBILoWf6xG4sBAGj9JUy-0MV_P3o4kCuE3YSo_-8tMXe3Vbm4hVb191rSFu0CyLoyx4UipVF03tg2UDCxLU7qIMHScrsKWvdAigh-5CD1TW6Htwz0ebhk8waMmsD9hKrinQHRjh4Z1GRvJvUhaxQv9a3s2AQcVnnJ2IoynI_Qh9aMMyeuefDLbD7kdp--y8mwF3zOk5Rib1_BBbypgTzT5iFTyZyPS2wO41jg3AeAoLAVOeBzKK5_d469oq9t3M9BxJmCN84y1iggFCFO4jLxRjhiIMno8yT2ZCi_B9Z-qQh0cPuBCcqx_HCZXTrFIbI6CTpXiiDTugHbcTDrtcAg==&ruid=de0e7e35-7a26-4b50-a595-12787484865d&ng=1&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fwww.dosya.tc%2Fserver41%2Fnvev78%2FIPTV_FUL_TR.m3u.html&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&sah=1024&drf=&hil=1&ist=0&ot=137
IP
Requested by https://www.dosya.tc/server41/nvev78/IPTV_FUL_TR.m3u.html
Certificate IssuerLet's Encrypt
Subjectcameesse.net
Fingerprint95:AE:4C:29:A9:9F:0C:04:38:32:00:81:30:07:95:A7:F8:B0:77:D6
ValidityWed, 18 Oct 2023 10:27:53 GMT - Tue, 16 Jan 2024 10:27:52 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /11?rnd=2218551423&z=5968116&b=19427765&var=&varid=0&rqtdbc=1&rcvdbc=1&btp=7&rb=efmpCTiq0hLazNIIUMwAwkRQV8TgNKKdjyTDnnKc3ynIkw89eG_v95omSZs24QDx0UUAm1e4xhaWmm648syekHvdwkBhM-icReRFxWZasVxyVAAoBaFwpG_UXr4XK0hk8_-oCHW5DhP7UacLiXXD7uVjAK04Q1VewUbePR-Bnw3NqYg5UIjQM7ooqLDa8R8yTy_TAiQ8b6X7pOVPeldMTP7Gl-mxhNZYt0XVxMZ7gxE_W2K9W6neyaf9PyulRciau6k7KgiD62qFHJbOo5xsv0PbPFA1C4lIC2cKpIZYP74-oXe8yKQdNd9YybvU2JPPg2VBpQ3q_WD8BE_hsYBILoWf6xG4sBAGj9JUy-0MV_P3o4kCuE3YSo_-8tMXe3Vbm4hVb191rSFu0CyLoyx4UipVF03tg2UDCxLU7qIMHScrsKWvdAigh-5CD1TW6Htwz0ebhk8waMmsD9hKrinQHRjh4Z1GRvJvUhaxQv9a3s2AQcVnnJ2IoynI_Qh9aMMyeuefDLbD7kdp--y8mwF3zOk5Rib1_BBbypgTzT5iFTyZyPS2wO41jg3AeAoLAVOeBzKK5_d469oq9t3M9BxJmCN84y1iggFCFO4jLxRjhiIMno8yT2ZCi_B9Z-qQh0cPuBCcqx_HCZXTrFIbI6CTpXiiDTugHbcTDrtcAg==&ruid=de0e7e35-7a26-4b50-a595-12787484865d&ng=1&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fwww.dosya.tc%2Fserver41%2Fnvev78%2FIPTV_FUL_TR.m3u.html&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&sah=1024&drf=&hil=1&ist=0&ot=137 HTTP/1.1
Host: cameesse.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.dosya.tc
DNT: 1
Connection: keep-alive
Referer: https://www.dosya.tc/
Cookie: scm=1; OAID=0295a7c34f3742f090c9378b48c4eb08; oaidts=1701725356
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 21:29:16 GMT
content-type: image/jpeg
content-length: 0
access-control-allow-credentials: true
access-control-allow-origin: https://www.dosya.tc
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID, baggage, sentry-trace
x-trace-id: c19a2435db5a548092d0cb90c0f615d5
access-control-expose-headers: X-Sc
set-cookie: OAID=0295a7c34f3742f090c9378b48c4eb08; expires=Tue, 03 Dec 2024 21:29:16 GMT; secure; SameSite=None
oaidts=1701725356; expires=Tue, 03 Dec 2024 21:29:16 GMT; secure; SameSite=None
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
X-Firefox-Spdy: h2
OPTIONS ibrapush.com/custom
200 OK 39 B IP
Requested by https://www.dosya.tc/server41/nvev78/IPTV_FUL_TR.m3u.html
Certificate IssuerLet's Encrypt
Subjectibrapush.com
FingerprintAC:F6:AB:6F:AB:34:17:90:49:79:7B:7C:FD:CE:24:5B:02:33:E5:E2
ValidityFri, 10 Nov 2023 10:01:20 GMT - Thu, 08 Feb 2024 10:01:19 GMT
File type JSON data\012- , ASCII text
Hash 058b158c2be925f556454ef762d93538
cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST /custom HTTP/1.1
Host: ibrapush.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.dosya.tc/
Content-Type: application/json
Content-Length: 394
Origin: https://www.dosya.tc
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 21:29:16 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: adc29f88eb5ede6ea889b0d1a98d7864
access-control-allow-origin: https://www.dosya.tc
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
GET interbuzznews.com/?l=kzHKSWcZinJTibQ&cd_meta_crid=50535&trkintimp&target_url=https%3A%2F%2Fcameesse.net%2F12%3Frnd%3D3134142100%26z%3D5968116%26b%3D19427765%26c%3D7595353%26var%3D%26varid%3D0%26d%3Dhttp%253A%252F%252Fsinglewomenmeet.com%252Fbase.php%253Fc%253D3576%2526key%253D6878efbd7e6d318c378b17a4469f5644%2526zoneid%253D%257Bzoneid%257D%2526banner%253D%257Bbannerid%257D%26cln%3D1%26btp%3D7%26rb%3DefmpCTiq0hLazNIIUMwAwkRQV8TgNKKdjyTDnnKc3ynIkw89eG_v95omSZs24QDx0UUAm1e4xhaWmm648syekHvdwkBhM-icReRFxWZasVxyVAAoBaFwpG_UXr4XK0hk8_-oCHW5DhP7UacLiXXD7uVjAK04Q1VewUbePR-Bnw3NqYg5UIjQM7ooqLDa8R8yTy_TAiQ8b6X7pOVPeldMTP7Gl-mxhNZYt0XVxMZ7gxE_W2K9W6neyaf9PyulRciau6k7KgiD62qFHJbOo5xsv0PbPFA1C4lIC2cKpIZYP74-oXe8yKQdNd9YybvU2JPPg2VBpQ3q_WD8BE_hsYBILoWf6xG4sBAGj9JUy-0MV_P3o4kCuE3YSo_-8tMXe3Vbm4hVb191rSFu0CyLoyx4UipVF03tg2UDCxLU7qIMHScrsKWvdAigh-5CD1TW6Htwz0ebhk8waMmsD9hKrinQHRjh4Z1GRvJvUhaxQv9a3s2AQcVnnJ2IoynI_Qh9aMMyeuefDLbD7kdp--y8mwF3zOk5Rib1_BBbypgTzT5iFTyZyPS2wO41jg3AeAoLAVOeBzKK5_d469oq9t3M9BxJmCN84y1iggFCFO4jLxRjhiIMno8yT2ZCi_B9Z-qQh0cPuBCcqx_HCZXTrFIbI6CTpXiiDTugHbcTDrtcAg%3D%3D%26bag%3DsoD61sIXZfLmZDdfa4zliA%3D%3D%26ruid%3Dde0e7e35-7a26-4b50-a595-12787484865d%26ng%3D1%26ix%3D0%26pt%3D0%26np%3D0%26gp%3D5%26bp%3D4%26nw%3D1%26nb%3D1%26sw%3D1280%26sh%3D1024%26pl%3Dhttps%253A%252F%252Fwww.dosya.tc%252Fserver41%252Fnvev78%252FIPTV_FUL_TR.m3u.html%26wy%3D0%26wx%3D0%26ww%3D1280%26wh%3D1024%26cw%3D1280%26wiw%3D1280%26wih%3D1024%26wfc%3D0%26sah%3D1024%26drf%3D%26hil%3D1%26ist%3D0%26tbc%3D1
200 OK 12 kB URL GET HTTP/2 interbuzznews.com/?l=kzHKSWcZinJTibQ&cd_meta_crid=50535&trkintimp&target_url=https%3A%2F%2Fcameesse.net%2F12%3Frnd%3D3134142100%26z%3D5968116%26b%3D19427765%26c%3D7595353%26var%3D%26varid%3D0%26d%3Dhttp%253A%252F%252Fsinglewomenmeet.com%252Fbase.php%253Fc%253D3576%2526key%253D6878efbd7e6d318c378b17a4469f5644%2526zoneid%253D%257Bzoneid%257D%2526banner%253D%257Bbannerid%257D%26cln%3D1%26btp%3D7%26rb%3DefmpCTiq0hLazNIIUMwAwkRQV8TgNKKdjyTDnnKc3ynIkw89eG_v95omSZs24QDx0UUAm1e4xhaWmm648syekHvdwkBhM-icReRFxWZasVxyVAAoBaFwpG_UXr4XK0hk8_-oCHW5DhP7UacLiXXD7uVjAK04Q1VewUbePR-Bnw3NqYg5UIjQM7ooqLDa8R8yTy_TAiQ8b6X7pOVPeldMTP7Gl-mxhNZYt0XVxMZ7gxE_W2K9W6neyaf9PyulRciau6k7KgiD62qFHJbOo5xsv0PbPFA1C4lIC2cKpIZYP74-oXe8yKQdNd9YybvU2JPPg2VBpQ3q_WD8BE_hsYBILoWf6xG4sBAGj9JUy-0MV_P3o4kCuE3YSo_-8tMXe3Vbm4hVb191rSFu0CyLoyx4UipVF03tg2UDCxLU7qIMHScrsKWvdAigh-5CD1TW6Htwz0ebhk8waMmsD9hKrinQHRjh4Z1GRvJvUhaxQv9a3s2AQcVnnJ2IoynI_Qh9aMMyeuefDLbD7kdp--y8mwF3zOk5Rib1_BBbypgTzT5iFTyZyPS2wO41jg3AeAoLAVOeBzKK5_d469oq9t3M9BxJmCN84y1iggFCFO4jLxRjhiIMno8yT2ZCi_B9Z-qQh0cPuBCcqx_HCZXTrFIbI6CTpXiiDTugHbcTDrtcAg%3D%3D%26bag%3DsoD61sIXZfLmZDdfa4zliA%3D%3D%26ruid%3Dde0e7e35-7a26-4b50-a595-12787484865d%26ng%3D1%26ix%3D0%26pt%3D0%26np%3D0%26gp%3D5%26bp%3D4%26nw%3D1%26nb%3D1%26sw%3D1280%26sh%3D1024%26pl%3Dhttps%253A%252F%252Fwww.dosya.tc%252Fserver41%252Fnvev78%252FIPTV_FUL_TR.m3u.html%26wy%3D0%26wx%3D0%26ww%3D1280%26wh%3D1024%26cw%3D1280%26wiw%3D1280%26wih%3D1024%26wfc%3D0%26sah%3D1024%26drf%3D%26hil%3D1%26ist%3D0%26tbc%3D1
IP
Requested by https://www.dosya.tc/server41/nvev78/IPTV_FUL_TR.m3u.html
Certificate IssuerLet's Encrypt
Subjectinterbuzznews.com
FingerprintB5:C4:C7:F0:3F:BC:50:A9:21:50:39:B8:F8:2E:7E:72:56:62:E7:33
ValidityFri, 22 Sep 2023 05:18:00 GMT - Thu, 21 Dec 2023 05:17:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1498)
Hash ae8dfb455ce76cc82a20e626be49f600
3e65c8552a46f6fee3cbd5cd489c219606387799
db08751c7026452f26a263b5d4a53fe986a2e0902369a043f1654f26a6888f90
GET /?l=kzHKSWcZinJTibQ&cd_meta_crid=50535&trkintimp&target_url=https%3A%2F%2Fcameesse.net%2F12%3Frnd%3D3134142100%26z%3D5968116%26b%3D19427765%26c%3D7595353%26var%3D%26varid%3D0%26d%3Dhttp%253A%252F%252Fsinglewomenmeet.com%252Fbase.php%253Fc%253D3576%2526key%253D6878efbd7e6d318c378b17a4469f5644%2526zoneid%253D%257Bzoneid%257D%2526banner%253D%257Bbannerid%257D%26cln%3D1%26btp%3D7%26rb%3DefmpCTiq0hLazNIIUMwAwkRQV8TgNKKdjyTDnnKc3ynIkw89eG_v95omSZs24QDx0UUAm1e4xhaWmm648syekHvdwkBhM-icReRFxWZasVxyVAAoBaFwpG_UXr4XK0hk8_-oCHW5DhP7UacLiXXD7uVjAK04Q1VewUbePR-Bnw3NqYg5UIjQM7ooqLDa8R8yTy_TAiQ8b6X7pOVPeldMTP7Gl-mxhNZYt0XVxMZ7gxE_W2K9W6neyaf9PyulRciau6k7KgiD62qFHJbOo5xsv0PbPFA1C4lIC2cKpIZYP74-oXe8yKQdNd9YybvU2JPPg2VBpQ3q_WD8BE_hsYBILoWf6xG4sBAGj9JUy-0MV_P3o4kCuE3YSo_-8tMXe3Vbm4hVb191rSFu0CyLoyx4UipVF03tg2UDCxLU7qIMHScrsKWvdAigh-5CD1TW6Htwz0ebhk8waMmsD9hKrinQHRjh4Z1GRvJvUhaxQv9a3s2AQcVnnJ2IoynI_Qh9aMMyeuefDLbD7kdp--y8mwF3zOk5Rib1_BBbypgTzT5iFTyZyPS2wO41jg3AeAoLAVOeBzKK5_d469oq9t3M9BxJmCN84y1iggFCFO4jLxRjhiIMno8yT2ZCi_B9Z-qQh0cPuBCcqx_HCZXTrFIbI6CTpXiiDTugHbcTDrtcAg%3D%3D%26bag%3DsoD61sIXZfLmZDdfa4zliA%3D%3D%26ruid%3Dde0e7e35-7a26-4b50-a595-12787484865d%26ng%3D1%26ix%3D0%26pt%3D0%26np%3D0%26gp%3D5%26bp%3D4%26nw%3D1%26nb%3D1%26sw%3D1280%26sh%3D1024%26pl%3Dhttps%253A%252F%252Fwww.dosya.tc%252Fserver41%252Fnvev78%252FIPTV_FUL_TR.m3u.html%26wy%3D0%26wx%3D0%26ww%3D1280%26wh%3D1024%26cw%3D1280%26wiw%3D1280%26wih%3D1024%26wfc%3D0%26sah%3D1024%26drf%3D%26hil%3D1%26ist%3D0%26tbc%3D1 HTTP/1.1
Host: interbuzznews.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.dosya.tc/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 21:29:16 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/7.4.33
set-cookie: reverse=I1cPdcqGV3w90WNAGgGauZBu2CE2hmn9WE-Jp-E5P78; expires=Mon, 04-Dec-2023 22:29:16 GMT; Max-Age=3600; path=/
OAID=ab88b4583b2111f5d259e38d1b043a5e; expires=Mon, 07-Nov-2078 18:58:32 GMT; Max-Age=1733347756; path=/
oaidts=1701725356; expires=Mon, 07-Nov-2078 18:58:32 GMT; Max-Age=1733347756; path=/
syncedCookie=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
content-encoding: br
X-Firefox-Spdy: h2
GET interbuzznews.com/contents/s/ce/c1/ce/fae62b87ac8ffd152fb67c62f3/01133900792764.jpeg
200 OK 76 kB URL GET HTTP/2 interbuzznews.com/contents/s/ce/c1/ce/fae62b87ac8ffd152fb67c62f3/01133900792764.jpeg
IP
Requested by https://interbuzznews.com/?l=kzHKSWcZinJTibQ&cd_meta_crid=50535&trkintimp&target_url=https%3A%2F%2Fcameesse.net%2F12%3Frnd%3D3134142100%26z%3D5968116%26b%3D19427765%26c%3D7595353%26var%3D%26varid%3D0%26d%3Dhttp%253A%252F%252Fsinglewomenmeet.com%252Fbase.php%253Fc%253D3576%2526key%253D6878efbd7e6d318c378b17a4469f5644%2526zoneid%253D%257Bzoneid%257D%2526banner%253D%257Bbannerid%257D%26cln%3D1%26btp%3D7%26rb%3DefmpCTiq0hLazNIIUMwAwkRQV8TgNKKdjyTDnnKc3ynIkw89eG_v95omSZs24QDx0UUAm1e4xhaWmm648syekHvdwkBhM-icReRFxWZasVxyVAAoBaFwpG_UXr4XK0hk8_-oCHW5DhP7UacLiXXD7uVjAK04Q1VewUbePR-Bnw3NqYg5UIjQM7ooqLDa8R8yTy_TAiQ8b6X7pOVPeldMTP7Gl-mxhNZYt0XVxMZ7gxE_W2K9W6neyaf9PyulRciau6k7KgiD62qFHJbOo5xsv0PbPFA1C4lIC2cKpIZYP74-oXe8yKQdNd9YybvU2JPPg2VBpQ3q_WD8BE_hsYBILoWf6xG4sBAGj9JUy-0MV_P3o4kCuE3YSo_-8tMXe3Vbm4hVb191rSFu0CyLoyx4UipVF03tg2UDCxLU7qIMHScrsKWvdAigh-5CD1TW6Htwz0ebhk8waMmsD9hKrinQHRjh4Z1GRvJvUhaxQv9a3s2AQcVnnJ2IoynI_Qh9aMMyeuefDLbD7kdp--y8mwF3zOk5Rib1_BBbypgTzT5iFTyZyPS2wO41jg3AeAoLAVOeBzKK5_d469oq9t3M9BxJmCN84y1iggFCFO4jLxRjhiIMno8yT2ZCi_B9Z-qQh0cPuBCcqx_HCZXTrFIbI6CTpXiiDTugHbcTDrtcAg%3D%3D%26bag%3DsoD61sIXZfLmZDdfa4zliA%3D%3D%26ruid%3Dde0e7e35-7a26-4b50-a595-12787484865d%26ng%3D1%26ix%3D0%26pt%3D0%26np%3D0%26gp%3D5%26bp%3D4%26nw%3D1%26nb%3D1%26sw%3D1280%26sh%3D1024%26pl%3Dhttps%253A%252F%252Fwww.dosya.tc%252Fserver41%252Fnvev78%252FIPTV_FUL_TR.m3u.html%26wy%3D0%26wx%3D0%26ww%3D1280%26wh%3D1024%26cw%3D1280%26wiw%3D1280%26wih%3D1024%26wfc%3D0%26sah%3D1024%26drf%3D%26hil%3D1%26ist%3D0%26tbc%3D1
Certificate IssuerLet's Encrypt
Subjectinterbuzznews.com
FingerprintB5:C4:C7:F0:3F:BC:50:A9:21:50:39:B8:F8:2E:7E:72:56:62:E7:33
ValidityFri, 22 Sep 2023 05:18:00 GMT - Thu, 21 Dec 2023 05:17:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 492x328, components 3\012- data
Hash cec1cefae62b87ac8ffd152fb67c62f3
5ad9ab10582d18882a0460169b8bc163297cfd9b
6b911a21ac38a27da56d277be7c268886f1adc52d6e68bd5169feaf2a76f863c
GET /contents/s/ce/c1/ce/fae62b87ac8ffd152fb67c62f3/01133900792764.jpeg HTTP/1.1
Host: interbuzznews.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://interbuzznews.com/?l=kzHKSWcZinJTibQ&cd_meta_crid=50535&trkintimp&target_url=https%3A%2F%2Fcameesse.net%2F12%3Frnd%3D3134142100%26z%3D5968116%26b%3D19427765%26c%3D7595353%26var%3D%26varid%3D0%26d%3Dhttp%253A%252F%252Fsinglewomenmeet.com%252Fbase.php%253Fc%253D3576%2526key%253D6878efbd7e6d318c378b17a4469f5644%2526zoneid%253D%257Bzoneid%257D%2526banner%253D%257Bbannerid%257D%26cln%3D1%26btp%3D7%26rb%3DefmpCTiq0hLazNIIUMwAwkRQV8TgNKKdjyTDnnKc3ynIkw89eG_v95omSZs24QDx0UUAm1e4xhaWmm648syekHvdwkBhM-icReRFxWZasVxyVAAoBaFwpG_UXr4XK0hk8_-oCHW5DhP7UacLiXXD7uVjAK04Q1VewUbePR-Bnw3NqYg5UIjQM7ooqLDa8R8yTy_TAiQ8b6X7pOVPeldMTP7Gl-mxhNZYt0XVxMZ7gxE_W2K9W6neyaf9PyulRciau6k7KgiD62qFHJbOo5xsv0PbPFA1C4lIC2cKpIZYP74-oXe8yKQdNd9YybvU2JPPg2VBpQ3q_WD8BE_hsYBILoWf6xG4sBAGj9JUy-0MV_P3o4kCuE3YSo_-8tMXe3Vbm4hVb191rSFu0CyLoyx4UipVF03tg2UDCxLU7qIMHScrsKWvdAigh-5CD1TW6Htwz0ebhk8waMmsD9hKrinQHRjh4Z1GRvJvUhaxQv9a3s2AQcVnnJ2IoynI_Qh9aMMyeuefDLbD7kdp--y8mwF3zOk5Rib1_BBbypgTzT5iFTyZyPS2wO41jg3AeAoLAVOeBzKK5_d469oq9t3M9BxJmCN84y1iggFCFO4jLxRjhiIMno8yT2ZCi_B9Z-qQh0cPuBCcqx_HCZXTrFIbI6CTpXiiDTugHbcTDrtcAg%3D%3D%26bag%3DsoD61sIXZfLmZDdfa4zliA%3D%3D%26ruid%3Dde0e7e35-7a26-4b50-a595-12787484865d%26ng%3D1%26ix%3D0%26pt%3D0%26np%3D0%26gp%3D5%26bp%3D4%26nw%3D1%26nb%3D1%26sw%3D1280%26sh%3D1024%26pl%3Dhttps%253A%252F%252Fwww.dosya.tc%252Fserver41%252Fnvev78%252FIPTV_FUL_TR.m3u.html%26wy%3D0%26wx%3D0%26ww%3D1280%26wh%3D1024%26cw%3D1280%26wiw%3D1280%26wih%3D1024%26wfc%3D0%26sah%3D1024%26drf%3D%26hil%3D1%26ist%3D0%26tbc%3D1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 21:29:17 GMT
content-type: image/jpeg
content-length: 75924
last-modified: Thu, 23 Feb 2023 08:55:31 GMT
vary: Accept-Encoding
etag: "63f72a03-12894"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
accept-ranges: bytes
X-Firefox-Spdy: h2
GET gishejuy.com/impression/PpQK7QQqIoXqXhhlBciHf1hNNoJlP5OyKGC8zPZIRfm50Z66Oc9ijtKHNy8MVT5blkoa-tacIHzSDtdf-T9OUrK34sOAPc5icqHtGBgYZ6H7z_-JmTE2oA3RfN68mxPOfeZutNTYd5f4P1m-ATKhBLVluRJv4vW6JE7Gn4rVfuXFqC79cVrKAKk4Q3Q2P4bysrfrQCuEnjFB5DEoRwdWM0w997BwNqpllEZ78r1ZD0tuNbesnjB0x1DoDGZ2nIeEc9JSRglKosvPgXoZVa1mHn4qv706jwnE6WFrA3A5IusUynC5DA5L70ZM3lOj03I4pj2UAFc6i293MvyXJrLtpoSmJy5ku1KDq5Udjz_uRqKYzqgytaJK7TZC0z8pyt5J6lwW7tvw4_anwFsgo-rFJlEyGS-irqmnXDhNJ2vdaC50ERRyXa-86BLeckDBpT-4yl195a96q2ucf6RhbrdSNe4apCU694BkBx3SLfx18wwAspdmq6iyAYG0SYbHr_OEqbDq34ruQPOGBEz7oNHQwcK1kvoGuDQWdXT7DTbXq4UGz-a7yGL_XyG_z38Kcva9p2dygu9uB9iQoqmtU8US-dPkY-0Cd8m-w8hMo1HfQ9JC1u9jhQra-861vj9N5mbpILSyZ4Wcf2YhFRMq5XXfX3Qg7iETNXMpBN8O6A3S6cfaLnlkB6dh0ry-aqN9haxm0pI0cEYeTnuYQ0jfHRWmOhEUeG6fKm7z2PZctwvGD4LnBdwkDPNH7kU2Sh0D3TczeHm3QNHUXz_JztigCTOz-09aYN016cfbGF6RA_xWbNpxv6m9OxxuPnSgf-c=?_z=5968115&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=2&pl=https%3A%2F%2Fwww.dosya.tc%2Fserver41%2Fnvev78%2FIPTV_FUL_TR.m3u.html&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&tzofs=0&js_build=8&sw_version=v1.312.0
200 OK 43 B URL GET HTTP/2 gishejuy.com/impression/PpQK7QQqIoXqXhhlBciHf1hNNoJlP5OyKGC8zPZIRfm50Z66Oc9ijtKHNy8MVT5blkoa-tacIHzSDtdf-T9OUrK34sOAPc5icqHtGBgYZ6H7z_-JmTE2oA3RfN68mxPOfeZutNTYd5f4P1m-ATKhBLVluRJv4vW6JE7Gn4rVfuXFqC79cVrKAKk4Q3Q2P4bysrfrQCuEnjFB5DEoRwdWM0w997BwNqpllEZ78r1ZD0tuNbesnjB0x1DoDGZ2nIeEc9JSRglKosvPgXoZVa1mHn4qv706jwnE6WFrA3A5IusUynC5DA5L70ZM3lOj03I4pj2UAFc6i293MvyXJrLtpoSmJy5ku1KDq5Udjz_uRqKYzqgytaJK7TZC0z8pyt5J6lwW7tvw4_anwFsgo-rFJlEyGS-irqmnXDhNJ2vdaC50ERRyXa-86BLeckDBpT-4yl195a96q2ucf6RhbrdSNe4apCU694BkBx3SLfx18wwAspdmq6iyAYG0SYbHr_OEqbDq34ruQPOGBEz7oNHQwcK1kvoGuDQWdXT7DTbXq4UGz-a7yGL_XyG_z38Kcva9p2dygu9uB9iQoqmtU8US-dPkY-0Cd8m-w8hMo1HfQ9JC1u9jhQra-861vj9N5mbpILSyZ4Wcf2YhFRMq5XXfX3Qg7iETNXMpBN8O6A3S6cfaLnlkB6dh0ry-aqN9haxm0pI0cEYeTnuYQ0jfHRWmOhEUeG6fKm7z2PZctwvGD4LnBdwkDPNH7kU2Sh0D3TczeHm3QNHUXz_JztigCTOz-09aYN016cfbGF6RA_xWbNpxv6m9OxxuPnSgf-c=?_z=5968115&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=2&pl=https%3A%2F%2Fwww.dosya.tc%2Fserver41%2Fnvev78%2FIPTV_FUL_TR.m3u.html&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&tzofs=0&js_build=8&sw_version=v1.312.0
IP
Requested by https://www.dosya.tc/server41/nvev78/IPTV_FUL_TR.m3u.html
Certificate IssuerLet's Encrypt
Subjectgishejuy.com
Fingerprint99:91:AA:4E:BA:FC:75:A0:0A:79:EE:F6:15:64:FA:15:B2:BC:61:31
ValidityWed, 25 Oct 2023 09:21:45 GMT - Tue, 23 Jan 2024 09:21:44 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /impression/PpQK7QQqIoXqXhhlBciHf1hNNoJlP5OyKGC8zPZIRfm50Z66Oc9ijtKHNy8MVT5blkoa-tacIHzSDtdf-T9OUrK34sOAPc5icqHtGBgYZ6H7z_-JmTE2oA3RfN68mxPOfeZutNTYd5f4P1m-ATKhBLVluRJv4vW6JE7Gn4rVfuXFqC79cVrKAKk4Q3Q2P4bysrfrQCuEnjFB5DEoRwdWM0w997BwNqpllEZ78r1ZD0tuNbesnjB0x1DoDGZ2nIeEc9JSRglKosvPgXoZVa1mHn4qv706jwnE6WFrA3A5IusUynC5DA5L70ZM3lOj03I4pj2UAFc6i293MvyXJrLtpoSmJy5ku1KDq5Udjz_uRqKYzqgytaJK7TZC0z8pyt5J6lwW7tvw4_anwFsgo-rFJlEyGS-irqmnXDhNJ2vdaC50ERRyXa-86BLeckDBpT-4yl195a96q2ucf6RhbrdSNe4apCU694BkBx3SLfx18wwAspdmq6iyAYG0SYbHr_OEqbDq34ruQPOGBEz7oNHQwcK1kvoGuDQWdXT7DTbXq4UGz-a7yGL_XyG_z38Kcva9p2dygu9uB9iQoqmtU8US-dPkY-0Cd8m-w8hMo1HfQ9JC1u9jhQra-861vj9N5mbpILSyZ4Wcf2YhFRMq5XXfX3Qg7iETNXMpBN8O6A3S6cfaLnlkB6dh0ry-aqN9haxm0pI0cEYeTnuYQ0jfHRWmOhEUeG6fKm7z2PZctwvGD4LnBdwkDPNH7kU2Sh0D3TczeHm3QNHUXz_JztigCTOz-09aYN016cfbGF6RA_xWbNpxv6m9OxxuPnSgf-c=?_z=5968115&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=2&pl=https%3A%2F%2Fwww.dosya.tc%2Fserver41%2Fnvev78%2FIPTV_FUL_TR.m3u.html&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&tzofs=0&js_build=8&sw_version=v1.312.0 HTTP/1.1
Host: gishejuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.dosya.tc/
Cookie: OAID=0295a7c34f3742f090c9378b48c4eb08
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 21:29:21 GMT
content-type: image/gif
content-length: 43
x-trace-id: f02459f9096fb0314f2f058f26df7da6
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: *
access-control-expose-headers: Link
access-control-allow-credentials: true
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
GET gishejuy.com/500/5968115?excludes=18833904&oaid=0295a7c34f3742f090c9378b48c4eb08&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=3&pl=https%3A%2F%2Fwww.dosya.tc%2Fserver41%2Fnvev78%2FIPTV_FUL_TR.m3u.html&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&tzofs=0&js_build=8&sw_version=v1.312.0
200 OK 0 B URL GET HTTP/2 gishejuy.com/500/5968115?excludes=18833904&oaid=0295a7c34f3742f090c9378b48c4eb08&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=3&pl=https%3A%2F%2Fwww.dosya.tc%2Fserver41%2Fnvev78%2FIPTV_FUL_TR.m3u.html&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&tzofs=0&js_build=8&sw_version=v1.312.0
IP
Requested by https://www.dosya.tc/server41/nvev78/IPTV_FUL_TR.m3u.html
Certificate IssuerLet's Encrypt
Subjectgishejuy.com
Fingerprint99:91:AA:4E:BA:FC:75:A0:0A:79:EE:F6:15:64:FA:15:B2:BC:61:31
ValidityWed, 25 Oct 2023 09:21:45 GMT - Tue, 23 Jan 2024 09:21:44 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
OPTIONS /500/5968115?excludes=18833904&oaid=0295a7c34f3742f090c9378b48c4eb08&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=3&pl=https%3A%2F%2Fwww.dosya.tc%2Fserver41%2Fnvev78%2FIPTV_FUL_TR.m3u.html&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&tzofs=0&js_build=8&sw_version=v1.312.0 HTTP/1.1
Host: gishejuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://www.dosya.tc/
Origin: https://www.dosya.tc
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 21:29:21 GMT
content-length: 0
allow: GET, OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://www.dosya.tc
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-allow-credentials: true
access-control-max-age: 600
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *
X-Firefox-Spdy: h2
OPTIONS gishejuy.com/500/5968115?excludes=&oaid=0295a7c34f3742f090c9378b48c4eb08&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&pl=https%3A%2F%2Fwww.dosya.tc%2Fserver41%2Fnvev78%2FIPTV_FUL_TR.m3u.html&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&tzofs=0&js_build=8&sw_version=v1.312.0
200 OK 16 kB URL OPTIONS HTTP/2 gishejuy.com/500/5968115?excludes=&oaid=0295a7c34f3742f090c9378b48c4eb08&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&pl=https%3A%2F%2Fwww.dosya.tc%2Fserver41%2Fnvev78%2FIPTV_FUL_TR.m3u.html&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&tzofs=0&js_build=8&sw_version=v1.312.0
IP
Requested by https://www.dosya.tc/server41/nvev78/IPTV_FUL_TR.m3u.html
Certificate IssuerLet's Encrypt
Subjectgishejuy.com
Fingerprint99:91:AA:4E:BA:FC:75:A0:0A:79:EE:F6:15:64:FA:15:B2:BC:61:31
ValidityWed, 25 Oct 2023 09:21:45 GMT - Tue, 23 Jan 2024 09:21:44 GMT
File type gzip compressed data, max speed, from Unix\012- data
Hash 10e4dd82f9393be16580ca0c7f37482f
4915b25de284b802ed5661a5e928f7b8d3e896e2
3cda6bf4fe94a213a91dce0a427cf55320876885052ec9c77614b11659aef0b6
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /500/5968115?excludes=&oaid=0295a7c34f3742f090c9378b48c4eb08&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&pl=https%3A%2F%2Fwww.dosya.tc%2Fserver41%2Fnvev78%2FIPTV_FUL_TR.m3u.html&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&tzofs=0&js_build=8&sw_version=v1.312.0 HTTP/1.1
Host: gishejuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Origin: https://www.dosya.tc
DNT: 1
Connection: keep-alive
Referer: https://www.dosya.tc/
Cookie: OAID=10b0b10e82504090be3b903efef5221f
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 21:29:16 GMT
content-type: application/javascript
x-trace-id: 0d800e043a539905fc728dfc0f0cdf7f
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: https://www.dosya.tc
access-control-expose-headers: Link
access-control-allow-credentials: true
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
set-cookie: OAID=0295a7c34f3742f090c9378b48c4eb08; expires=Tue, 03 Dec 2024 21:29:16 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
GET offerimage.com/www/images/1254ddfd42baa84cea2221d2e82fa511.png
200 OK 70 kB URL GET HTTP/2 offerimage.com/www/images/1254ddfd42baa84cea2221d2e82fa511.png
IP
Requested by https://www.dosya.tc/server41/nvev78/IPTV_FUL_TR.m3u.html
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintDB:4D:42:F8:E2:4C:E3:E4:BB:22:D8:D1:F7:64:B5:9A:10:B6:25:E0
ValiditySun, 07 May 2023 00:00:00 GMT - Mon, 06 May 2024 23:59:59 GMT
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash 1254ddfd42baa84cea2221d2e82fa511
84b26dfb937aa8b9746a20e52f9d1330a9a29eab
eba572a9f6836dc915e75251fed8c1e6129c7013cb380af95899e9824a82fd92
GET /www/images/1254ddfd42baa84cea2221d2e82fa511.png HTTP/1.1
Host: offerimage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 21:29:21 GMT
content-type: image/png
content-length: 69506
last-modified: Mon, 28 Aug 2023 16:35:16 GMT
etag: "64ecccc4-10f82"
expires: Tue, 05 Dec 2023 08:33:39 GMT
cache-control: max-age=86400
timing-allow-origin: *
cf-cache-status: HIT
age: 46542
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 830724f70bea5efe-ARN
X-Firefox-Spdy: h2
GET gishejuy.com/impression/BPgJLOgUDO4YkFhXPnmSgaFufHPog9UquMnFgfZPwOtZwTCy3hWETeM4Cd1n6lpSwePKYaeG6430v5LoksrvuDEI3sbGVAnS9WQNRcF8kYEywCxTww2dN_S3PQJncdUA1izEkwTX9lEuj8no8Z6DlqRYDZFkjDpdvKTDT2GKGdFUOqTCp3TbDGDxMPotTZuOYyvBDpRlLI81RtmJuOs7jv9elcEA8v0TeYM6wTkIQQ-1Pjf8S7H520w7BP0uoP1tw6dmc-kqMeDT-1FMJdVufilkBKckbFeh8ImWV-KRglGicciL03oNMzw8L0nwKYXHx7xzB0Z5NUzztXEr5Rjfjxh_2IJKzdOaUAQv0ZWG2HPf1syc8pKvw77Q-_7zL3F0Ric3kPwoZ16N1S8HOvfgJx1nMw3lE6hfIQK1fywr18Ltl1VMErF53nDtB6iBVYQf2gsJ06GLMU_iKVKzFPpHqczK1A8xgOv9Ls05hAd_xgtbOOkdQi_w5exx9mtciy_t-DMfFlFKDJq8o-roeiFWW3QGD0nedfiHXLbw99nqtip1spCd5NOXixO8sHYAlIt2nQnCAqW4hpimqltq1PYTIg==?_z=5968115&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=3&pl=https%3A%2F%2Fwww.dosya.tc%2Fserver41%2Fnvev78%2FIPTV_FUL_TR.m3u.html&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&tzofs=0&js_build=8&sw_version=v1.312.0
200 OK 43 B URL GET HTTP/2 gishejuy.com/impression/BPgJLOgUDO4YkFhXPnmSgaFufHPog9UquMnFgfZPwOtZwTCy3hWETeM4Cd1n6lpSwePKYaeG6430v5LoksrvuDEI3sbGVAnS9WQNRcF8kYEywCxTww2dN_S3PQJncdUA1izEkwTX9lEuj8no8Z6DlqRYDZFkjDpdvKTDT2GKGdFUOqTCp3TbDGDxMPotTZuOYyvBDpRlLI81RtmJuOs7jv9elcEA8v0TeYM6wTkIQQ-1Pjf8S7H520w7BP0uoP1tw6dmc-kqMeDT-1FMJdVufilkBKckbFeh8ImWV-KRglGicciL03oNMzw8L0nwKYXHx7xzB0Z5NUzztXEr5Rjfjxh_2IJKzdOaUAQv0ZWG2HPf1syc8pKvw77Q-_7zL3F0Ric3kPwoZ16N1S8HOvfgJx1nMw3lE6hfIQK1fywr18Ltl1VMErF53nDtB6iBVYQf2gsJ06GLMU_iKVKzFPpHqczK1A8xgOv9Ls05hAd_xgtbOOkdQi_w5exx9mtciy_t-DMfFlFKDJq8o-roeiFWW3QGD0nedfiHXLbw99nqtip1spCd5NOXixO8sHYAlIt2nQnCAqW4hpimqltq1PYTIg==?_z=5968115&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=3&pl=https%3A%2F%2Fwww.dosya.tc%2Fserver41%2Fnvev78%2FIPTV_FUL_TR.m3u.html&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&tzofs=0&js_build=8&sw_version=v1.312.0
IP
Requested by https://www.dosya.tc/server41/nvev78/IPTV_FUL_TR.m3u.html
Certificate IssuerLet's Encrypt
Subjectgishejuy.com
Fingerprint99:91:AA:4E:BA:FC:75:A0:0A:79:EE:F6:15:64:FA:15:B2:BC:61:31
ValidityWed, 25 Oct 2023 09:21:45 GMT - Tue, 23 Jan 2024 09:21:44 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /impression/BPgJLOgUDO4YkFhXPnmSgaFufHPog9UquMnFgfZPwOtZwTCy3hWETeM4Cd1n6lpSwePKYaeG6430v5LoksrvuDEI3sbGVAnS9WQNRcF8kYEywCxTww2dN_S3PQJncdUA1izEkwTX9lEuj8no8Z6DlqRYDZFkjDpdvKTDT2GKGdFUOqTCp3TbDGDxMPotTZuOYyvBDpRlLI81RtmJuOs7jv9elcEA8v0TeYM6wTkIQQ-1Pjf8S7H520w7BP0uoP1tw6dmc-kqMeDT-1FMJdVufilkBKckbFeh8ImWV-KRglGicciL03oNMzw8L0nwKYXHx7xzB0Z5NUzztXEr5Rjfjxh_2IJKzdOaUAQv0ZWG2HPf1syc8pKvw77Q-_7zL3F0Ric3kPwoZ16N1S8HOvfgJx1nMw3lE6hfIQK1fywr18Ltl1VMErF53nDtB6iBVYQf2gsJ06GLMU_iKVKzFPpHqczK1A8xgOv9Ls05hAd_xgtbOOkdQi_w5exx9mtciy_t-DMfFlFKDJq8o-roeiFWW3QGD0nedfiHXLbw99nqtip1spCd5NOXixO8sHYAlIt2nQnCAqW4hpimqltq1PYTIg==?_z=5968115&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=3&pl=https%3A%2F%2Fwww.dosya.tc%2Fserver41%2Fnvev78%2FIPTV_FUL_TR.m3u.html&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&tzofs=0&js_build=8&sw_version=v1.312.0 HTTP/1.1
Host: gishejuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.dosya.tc/
Cookie: OAID=0295a7c34f3742f090c9378b48c4eb08
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 21:29:24 GMT
content-type: image/gif
content-length: 43
x-trace-id: f398a9b49ed4431f528af3d363d537bb
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: *
access-control-expose-headers: Link
access-control-allow-credentials: true
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
GET offerimage.com/www/images/9e9e762a8aeda4556eb0010f07639539.jpg
200 OK 15 kB URL GET HTTP/2 offerimage.com/www/images/9e9e762a8aeda4556eb0010f07639539.jpg
IP
Requested by https://www.dosya.tc/server41/nvev78/IPTV_FUL_TR.m3u.html
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintDB:4D:42:F8:E2:4C:E3:E4:BB:22:D8:D1:F7:64:B5:9A:10:B6:25:E0
ValiditySun, 07 May 2023 00:00:00 GMT - Mon, 06 May 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x192, components 3\012- data
Hash 9e9e762a8aeda4556eb0010f07639539
0bcb67a031d30b5513b5e574b4ef7de2ca2db096
32dce39ac731f9cec2f539d042bcfcd5ad867b4a4cc25ffc7d36feb6611264e4
GET /www/images/9e9e762a8aeda4556eb0010f07639539.jpg HTTP/1.1
Host: offerimage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 21:29:24 GMT
content-type: image/jpeg
content-length: 14857
cache-control: max-age=86400
cf-bgj: h2pri
etag: "655a0954-3a09"
expires: Tue, 05 Dec 2023 00:36:22 GMT
last-modified: Sun, 19 Nov 2023 13:10:44 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 75182
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 83072509bf455efe-ARN
X-Firefox-Spdy: h2
GET www.dosya.tc/sw.js
404 Not Found 3.6 kB IP
ASN #24940 Hetzner Online GmbH
Requested by https://www.dosya.tc/server41/nvev78/IPTV_FUL_TR.m3u.html
Certificate IssuerSectigo Limited
Subject*.dosya.tc
Fingerprint1B:AB:AC:F6:BB:9C:39:DA:F2:1E:19:AD:EE:15:3B:CE:67:DE:92:E8
ValiditySun, 12 Feb 2023 00:00:00 GMT - Thu, 14 Mar 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (3873), with no line terminators
Hash 521d92051caa04073be6793df4858b90
e905957e13dee913df5d7dd025bba773884e3d70
565802fdeed6650d93110b6c054e8e76d59c5635f0cedb08800bcb5f339ee5f0
GET /sw.js HTTP/1.1
Host: www.dosya.tc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.dosya.tc/server41/nvev78/IPTV_FUL_TR.m3u.html
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Mon, 04 Dec 2023 21:29:16 GMT
Server: Apache
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=ISO-8859-9
GET ibrapush.com/pfe/current/defaultSkin.min.js
200 OK 57 kB URL GET HTTP/2 ibrapush.com/pfe/current/defaultSkin.min.js
IP
Requested by https://www.dosya.tc/server41/nvev78/IPTV_FUL_TR.m3u.html
Certificate IssuerLet's Encrypt
Subjectibrapush.com
FingerprintAC:F6:AB:6F:AB:34:17:90:49:79:7B:7C:FD:CE:24:5B:02:33:E5:E2
ValidityFri, 10 Nov 2023 10:01:20 GMT - Thu, 08 Feb 2024 10:01:19 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pfe/current/defaultSkin.min.js HTTP/1.1
Host: ibrapush.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.dosya.tc/
Origin: https://www.dosya.tc
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 21:29:16 GMT
content-type: application/javascript
last-modified: Mon, 27 Nov 2023 17:44:23 GMT
etag: W/"6564d577-df63"
access-control-allow-origin: https://www.dosya.tc
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
GET ibrapush.com/pfe/current/universal.min.js?v=3.1.471
200 OK 88 kB URL GET HTTP/2 ibrapush.com/pfe/current/universal.min.js?v=3.1.471
IP
Requested by https://www.dosya.tc/server41/nvev78/IPTV_FUL_TR.m3u.html
Certificate IssuerLet's Encrypt
Subjectibrapush.com
FingerprintAC:F6:AB:6F:AB:34:17:90:49:79:7B:7C:FD:CE:24:5B:02:33:E5:E2
ValidityFri, 10 Nov 2023 10:01:20 GMT - Thu, 08 Feb 2024 10:01:19 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash d46d2997ab218d1dba1ab614422ed53f
3f1f6b9847c8ad209835db366c62fcb209b83a67
09e8ce2dfeac0ad09cd24788931b38ea7e7592f2c28eecc324b2dd1cd69d1b42
GET /pfe/current/universal.min.js?v=3.1.471 HTTP/1.1
Host: ibrapush.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.dosya.tc/
Origin: https://www.dosya.tc
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 21:29:16 GMT
content-type: application/javascript
last-modified: Mon, 27 Nov 2023 17:44:23 GMT
etag: W/"6564d577-1572c"
access-control-allow-origin: https://www.dosya.tc
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
GET interbuzznews.com/contents/s/1c/09/63/75a534c6a2bf3b7f1ca702d1c7/0114732544225.jpeg
200 OK 9.3 kB URL GET HTTP/2 interbuzznews.com/contents/s/1c/09/63/75a534c6a2bf3b7f1ca702d1c7/0114732544225.jpeg
IP
Requested by https://interbuzznews.com/?l=kzHKSWcZinJTibQ&cd_meta_crid=50535&trkintimp&target_url=https%3A%2F%2Fcameesse.net%2F12%3Frnd%3D3134142100%26z%3D5968116%26b%3D19427765%26c%3D7595353%26var%3D%26varid%3D0%26d%3Dhttp%253A%252F%252Fsinglewomenmeet.com%252Fbase.php%253Fc%253D3576%2526key%253D6878efbd7e6d318c378b17a4469f5644%2526zoneid%253D%257Bzoneid%257D%2526banner%253D%257Bbannerid%257D%26cln%3D1%26btp%3D7%26rb%3DefmpCTiq0hLazNIIUMwAwkRQV8TgNKKdjyTDnnKc3ynIkw89eG_v95omSZs24QDx0UUAm1e4xhaWmm648syekHvdwkBhM-icReRFxWZasVxyVAAoBaFwpG_UXr4XK0hk8_-oCHW5DhP7UacLiXXD7uVjAK04Q1VewUbePR-Bnw3NqYg5UIjQM7ooqLDa8R8yTy_TAiQ8b6X7pOVPeldMTP7Gl-mxhNZYt0XVxMZ7gxE_W2K9W6neyaf9PyulRciau6k7KgiD62qFHJbOo5xsv0PbPFA1C4lIC2cKpIZYP74-oXe8yKQdNd9YybvU2JPPg2VBpQ3q_WD8BE_hsYBILoWf6xG4sBAGj9JUy-0MV_P3o4kCuE3YSo_-8tMXe3Vbm4hVb191rSFu0CyLoyx4UipVF03tg2UDCxLU7qIMHScrsKWvdAigh-5CD1TW6Htwz0ebhk8waMmsD9hKrinQHRjh4Z1GRvJvUhaxQv9a3s2AQcVnnJ2IoynI_Qh9aMMyeuefDLbD7kdp--y8mwF3zOk5Rib1_BBbypgTzT5iFTyZyPS2wO41jg3AeAoLAVOeBzKK5_d469oq9t3M9BxJmCN84y1iggFCFO4jLxRjhiIMno8yT2ZCi_B9Z-qQh0cPuBCcqx_HCZXTrFIbI6CTpXiiDTugHbcTDrtcAg%3D%3D%26bag%3DsoD61sIXZfLmZDdfa4zliA%3D%3D%26ruid%3Dde0e7e35-7a26-4b50-a595-12787484865d%26ng%3D1%26ix%3D0%26pt%3D0%26np%3D0%26gp%3D5%26bp%3D4%26nw%3D1%26nb%3D1%26sw%3D1280%26sh%3D1024%26pl%3Dhttps%253A%252F%252Fwww.dosya.tc%252Fserver41%252Fnvev78%252FIPTV_FUL_TR.m3u.html%26wy%3D0%26wx%3D0%26ww%3D1280%26wh%3D1024%26cw%3D1280%26wiw%3D1280%26wih%3D1024%26wfc%3D0%26sah%3D1024%26drf%3D%26hil%3D1%26ist%3D0%26tbc%3D1
Certificate IssuerLet's Encrypt
Subjectinterbuzznews.com
FingerprintB5:C4:C7:F0:3F:BC:50:A9:21:50:39:B8:F8:2E:7E:72:56:62:E7:33
ValidityFri, 22 Sep 2023 05:18:00 GMT - Thu, 21 Dec 2023 05:17:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x192, components 3\012- data
Hash 1c096375a534c6a2bf3b7f1ca702d1c7
99b923326a9c71c15a252c43e47d586a8936bfb1
e9f457f6e6a31b5e1a741d024c107d10a58df50a62707c7883da864ce7191cc2
GET /contents/s/1c/09/63/75a534c6a2bf3b7f1ca702d1c7/0114732544225.jpeg HTTP/1.1
Host: interbuzznews.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://interbuzznews.com/?l=kzHKSWcZinJTibQ&cd_meta_crid=50535&trkintimp&target_url=https%3A%2F%2Fcameesse.net%2F12%3Frnd%3D3134142100%26z%3D5968116%26b%3D19427765%26c%3D7595353%26var%3D%26varid%3D0%26d%3Dhttp%253A%252F%252Fsinglewomenmeet.com%252Fbase.php%253Fc%253D3576%2526key%253D6878efbd7e6d318c378b17a4469f5644%2526zoneid%253D%257Bzoneid%257D%2526banner%253D%257Bbannerid%257D%26cln%3D1%26btp%3D7%26rb%3DefmpCTiq0hLazNIIUMwAwkRQV8TgNKKdjyTDnnKc3ynIkw89eG_v95omSZs24QDx0UUAm1e4xhaWmm648syekHvdwkBhM-icReRFxWZasVxyVAAoBaFwpG_UXr4XK0hk8_-oCHW5DhP7UacLiXXD7uVjAK04Q1VewUbePR-Bnw3NqYg5UIjQM7ooqLDa8R8yTy_TAiQ8b6X7pOVPeldMTP7Gl-mxhNZYt0XVxMZ7gxE_W2K9W6neyaf9PyulRciau6k7KgiD62qFHJbOo5xsv0PbPFA1C4lIC2cKpIZYP74-oXe8yKQdNd9YybvU2JPPg2VBpQ3q_WD8BE_hsYBILoWf6xG4sBAGj9JUy-0MV_P3o4kCuE3YSo_-8tMXe3Vbm4hVb191rSFu0CyLoyx4UipVF03tg2UDCxLU7qIMHScrsKWvdAigh-5CD1TW6Htwz0ebhk8waMmsD9hKrinQHRjh4Z1GRvJvUhaxQv9a3s2AQcVnnJ2IoynI_Qh9aMMyeuefDLbD7kdp--y8mwF3zOk5Rib1_BBbypgTzT5iFTyZyPS2wO41jg3AeAoLAVOeBzKK5_d469oq9t3M9BxJmCN84y1iggFCFO4jLxRjhiIMno8yT2ZCi_B9Z-qQh0cPuBCcqx_HCZXTrFIbI6CTpXiiDTugHbcTDrtcAg%3D%3D%26bag%3DsoD61sIXZfLmZDdfa4zliA%3D%3D%26ruid%3Dde0e7e35-7a26-4b50-a595-12787484865d%26ng%3D1%26ix%3D0%26pt%3D0%26np%3D0%26gp%3D5%26bp%3D4%26nw%3D1%26nb%3D1%26sw%3D1280%26sh%3D1024%26pl%3Dhttps%253A%252F%252Fwww.dosya.tc%252Fserver41%252Fnvev78%252FIPTV_FUL_TR.m3u.html%26wy%3D0%26wx%3D0%26ww%3D1280%26wh%3D1024%26cw%3D1280%26wiw%3D1280%26wih%3D1024%26wfc%3D0%26sah%3D1024%26drf%3D%26hil%3D1%26ist%3D0%26tbc%3D1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 21:29:17 GMT
content-type: image/jpeg
content-length: 9303
last-modified: Tue, 31 Oct 2023 04:03:52 GMT
vary: Accept-Encoding
etag: "65407ca8-2457"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
accept-ranges: bytes
X-Firefox-Spdy: h2
GET gishejuy.com/400/5968115
200 OK 82 kB IP
Requested by https://www.dosya.tc/server41/nvev78/IPTV_FUL_TR.m3u.html
Certificate IssuerLet's Encrypt
Subjectgishejuy.com
Fingerprint99:91:AA:4E:BA:FC:75:A0:0A:79:EE:F6:15:64:FA:15:B2:BC:61:31
ValidityWed, 25 Oct 2023 09:21:45 GMT - Tue, 23 Jan 2024 09:21:44 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash c3960d61be8263c65b7925afb0e79fcb
0e84dbdc3df2b8bed59a3a962031f79a34c8e121
faa5d80833b3ee45d20098ed9fdca214feccd6ec9b733428867f6836178cfbbd
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /400/5968115 HTTP/1.1
Host: gishejuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.dosya.tc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 21:29:16 GMT
content-type: application/javascript
x-trace-id: 6edcca8241ae1c34358c1b982b737706
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: *
access-control-expose-headers: Link
access-control-allow-credentials: true
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
set-cookie: OAID=10b0b10e82504090be3b903efef5221f; expires=Tue, 03 Dec 2024 21:29:16 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
GET inklinkor.com/tag.min.js
200 OK 81 kB IP
Requested by https://www.dosya.tc/server41/nvev78/IPTV_FUL_TR.m3u.html
Certificate IssuerGoogle Trust Services LLC
Subjectinklinkor.com
Fingerprint5D:E8:2B:4E:1D:87:E7:D0:24:0C:11:4B:6D:AF:1B:8A:38:CB:A3:6E
ValidityMon, 23 Oct 2023 14:48:09 GMT - Sun, 21 Jan 2024 14:48:08 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash c0df8622a8748ef389926aa986f1c9bb
e3a5f6ee733c96defecba49a5bfc9d1a04e1cfed
df76071bd8b39d5ae6922442b2aa158df973278d5457bb161cf9eeebedc6e89f
GET /tag.min.js HTTP/1.1
Host: inklinkor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.dosya.tc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 21:29:15 GMT
content-type: text/javascript; charset=utf-8
x-trace-id: d33c3ffaa6d4a8df27836ba97c7b4dd5
cache-control: max-age=86400
last-modified: Mon, 04 Dec 2023 13:29:14 GMT
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-max-age: 86400
pragma: no-cache
expires: Tue, 05 Dec 2023 20:11:39 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 4656
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NqPtmdaHCCvyclVKda%2FNGy1GMf73%2BmeR4JcRSA5xJ9hlheW6pXkrtTMlI4lKbJieLUVQynpqcpfvXg7ClvtJ6kDI81HY%2BlgcARwqxq8XZ3%2Fs1PaniMKXtKUHoiROuhxY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830724d0bc86b500-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET cameesse.net/1?z=5968116
200 OK 43 kB IP
Requested by https://www.dosya.tc/server41/nvev78/IPTV_FUL_TR.m3u.html
Certificate IssuerLet's Encrypt
Subjectcameesse.net
Fingerprint95:AE:4C:29:A9:9F:0C:04:38:32:00:81:30:07:95:A7:F8:B0:77:D6
ValidityWed, 18 Oct 2023 10:27:53 GMT - Tue, 16 Jan 2024 10:27:52 GMT
File type ASCII text, with very long lines (41880)
Hash 8d3f6bf1c2d76dfa800512139d86ca6b
8645bc555c63465d83c55183b84eb6418b48744c
77a33e4292112c7b8d420651391723c9e1135ace39cbad299d98e9d9ac377d25
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /1?z=5968116 HTTP/1.1
Host: cameesse.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.dosya.tc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 21:29:16 GMT
content-type: text/javascript
access-control-allow-credentials: true
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID, baggage, sentry-trace
x-trace-id: f9b938c7ccbb6a24dd47913e9671cd71
access-control-expose-headers: X-Sc
x-sc: lJmFa5uecKXzmYMsoYKHTEwEoryZ1zqSr5DK3AxuPelmxAKIa8pGHhoR2Hn6naDo3oOWbeqn6wbHtF2d8zgzKL0v8_E=
set-cookie: scm=1; expires=Tue, 03 Dec 2024 21:29:16 GMT; secure; SameSite=None
OAID=b57761a4a1e3452a837eb25fb4516e8a; expires=Tue, 03 Dec 2024 21:29:16 GMT; secure; SameSite=None
oaidts=1701725356; expires=Tue, 03 Dec 2024 21:29:16 GMT; secure; SameSite=None
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
GET glaultoa.com/5/5968118/?oo=1&js_build=iclick-v1.637.1
200 OK 2.9 kB URL GET HTTP/2 glaultoa.com/5/5968118/?oo=1&js_build=iclick-v1.637.1
IP
Requested by https://www.dosya.tc/server41/nvev78/IPTV_FUL_TR.m3u.html
Certificate IssuerLet's Encrypt
Subjectglaultoa.com
Fingerprint76:62:43:3F:4B:5F:3A:A9:C6:00:2D:6B:18:2F:1C:90:5D:34:A8:A0
ValiditySat, 02 Dec 2023 14:50:24 GMT - Fri, 01 Mar 2024 14:50:23 GMT
File type troff or preprocessor input, ASCII text, with very long lines (3126), with no line terminators
Hash 79b63006e914adbd390333d858449487
9c72ee524d45294c6da0f73fdda3dbf270c3a8e6
dc7d09b68cca379a3deb56b2aac8b24036d386ea49bc4e6d2db424a4b64c487b
GET /5/5968118/?oo=1&js_build=iclick-v1.637.1 HTTP/1.1
Host: glaultoa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.dosya.tc
DNT: 1
Connection: keep-alive
Referer: https://www.dosya.tc/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 21:29:15 GMT
content-type: application/json
x-trace-id: 235d9a452ea9d75e895f26a8c0d889f7
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://sr7pv7n5x.com>; rel="preconnect dns-prefetch"
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
access-control-allow-origin: https://www.dosya.tc
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-max-age: 86400
timing-allow-origin: *
set-cookie: OAID=0295a7c34f3742f090c9378b48c4eb08; expires=Tue, 03 Dec 2024 21:29:15 GMT; path=/; secure; SameSite=None
oaidts=1701725355; expires=Tue, 03 Dec 2024 21:29:15 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
pragma: no-cache, no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
GET ibrapush.com/pfe/current/tag.min.js?z=5968117
200 OK 13 kB URL GET HTTP/2 ibrapush.com/pfe/current/tag.min.js?z=5968117
IP
Requested by https://www.dosya.tc/server41/nvev78/IPTV_FUL_TR.m3u.html
Certificate IssuerLet's Encrypt
Subjectibrapush.com
FingerprintAC:F6:AB:6F:AB:34:17:90:49:79:7B:7C:FD:CE:24:5B:02:33:E5:E2
ValidityFri, 10 Nov 2023 10:01:20 GMT - Thu, 08 Feb 2024 10:01:19 GMT
File type C source, ASCII text, with very long lines (13300), with no line terminators
Hash 258578af3c107ccb907f73c3a2f4c25f
7a192edea829968fb7f57f2a2fc4cb5b612598be
1f945c9c46c47a2b0e867b0d09c3e4559cd768a2d3747abf28d1d65667733b75
GET /pfe/current/tag.min.js?z=5968117 HTTP/1.1
Host: ibrapush.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.dosya.tc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 21:29:16 GMT
content-type: application/javascript
last-modified: Mon, 27 Nov 2023 17:44:23 GMT
etag: W/"6564d577-33f4"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
link: <https://my.rtmark.net>; rel=dns-prefetch;, <https://my.rtmark.net>; rel=preconnect
content-encoding: gzip
X-Firefox-Spdy: h2
88.99.254.43
104.21.91.63
139.45.197.250
0.0.0.0