Report - chpopesco.com/

Report Overview

Submitted URL
chpopesco.com/
IP
66.175.58.9
ASN
#30447 INFB2-AS
Submitted
2022-11-28 08:28:30
Access
Website Title
Final URL
Tags
None
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
contile.services.mozilla.com	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	333 B	229 B	34.117.237.239
img-getpocket.cdn.mozilla.net	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3.2 kB	56 kB	34.120.237.76
firefox.settings.services.mozilla.com	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	782 B	2.4 kB	34.102.187.140
push.services.mozilla.com	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	606 B	127 B	100.20.30.105
ocsp.pki.goog	175	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	686 B	1.4 kB	142.250.74.3
region1.google-analytics.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	695 B	560 B	216.239.32.36
r3.o.lencr.org	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.7 kB	4.4 kB	23.36.76.226
chpopesco.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	345 B	191 B	66.175.58.9
www.google-analytics.com	40	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	370 B	21 kB	142.250.74.174
ocsp.digicert.com	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	682 B	1.6 kB	93.184.220.29
content-signature-2.cdn.mozilla.net	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	413 B	5.8 kB	34.160.144.191
www.googletagmanager.com	75	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	381 B	44 kB	142.250.74.168
gidatarim.com	526686	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	13 kB	732 kB	45.158.15.68
s.w.org	748	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	399 B	792 B	192.0.77.48

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2022-11-28	medium	chpopesco.com/	Malware

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

JavaScript (7)

	URL	Size	First Seen	Last Seen
	www.googletagmanager.com/gtag/js?id=G-GWRKHGS3GQ&l=dataLayer&cx=c	181 kB	2023-03-11	2023-03-11
Pretty URL www.googletagmanager.com/gtag/js?id=G-GWRKHGS3GQ&l=dataLayer&cx=c IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 21:49:18 Last Seen2023-03-11 21:49:18 Times Seen1 Hash b3eff14e6b119ad55434128d81951f01 710da14bfb63e1242963ecdf8c641be3a69831a8 a1865f59819c083ae7325efcb1bc66a6f12b6537453f1cb482fda9648b4bfcee Loading...

	gidatarim.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.0	90 kB	2023-03-07	2024-04-23
Pretty URL gidatarim.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.0 IP 45.158.15.68 ASN #207459 Taner Temel Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:02 Last Seen2024-04-23 14:29:05 Times Seen31794 Hash 02dd5d04add4759122013c5ab4dc5cc2 a45a56e396ac549b4ff39b696ce9e0c16a7612de bd4de6a3fc0fb68d6f76ba7b93514b96a92e585c295b5351c31ad92a4b0777ea Loading...

	unknown	0 B	2023-03-07	2024-04-23
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:01:59 Last Seen2024-04-23 15:35:28 Times Seen37021431 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	gidatarim.com/Emirates_EPG-MAIL	294 B	2023-03-09	2023-03-13
Pretty URL gidatarim.com/Emirates_EPG-MAIL IP 45.158.15.68 ASN #207459 Taner Temel Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-09 01:11:35 Last Seen2023-03-13 01:32:55 Times Seen1 Hash 7797a6cc5de6e7d0dd4b7d89f0fa0f16 dbaa8df0c227cb15ec012ad248bb733c2b628122 55fcefe83fa77dec8bfb80fbc26ce63e67fc3c8532f5db9b831275a42fa0a5fa Loading...

	www.googletagmanager.com/gtag/js?id=UA-4250163-1	112 kB	2023-03-11	2023-03-11
Pretty URL www.googletagmanager.com/gtag/js?id=UA-4250163-1 IP 142.250.74.168 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 21:49:18 Last Seen2023-03-11 21:49:18 Times Seen1 Hash c8f11faa4d8368edcadf7eded078635b 5e9677bb4534745cfeb82ccd7297f2d132bc082a 75e41a49ff0af648b9e8af9387fd8682d9b9b4268bfa6f0d4534024b98f8e7e9 Loading...

	gidatarim.com/wp-includes/js/wp-emoji-release.min.js?ver=6.0.3	19 kB	2023-03-07	2024-04-23
Pretty URL gidatarim.com/wp-includes/js/wp-emoji-release.min.js?ver=6.0.3 IP 45.158.15.68 ASN #207459 Taner Temel Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:08 Last Seen2024-04-23 14:29:05 Times Seen38024 Hash 32beb68a374e3aeac00abdf9e12b84ea b5d18aa625e8696dd9d07cd0869337717b211ae0 5aad5fbd4238981a9ff5e2772ff1353dfe1a801fb49542fe157418c1438f7782 Loading...

	www.google-analytics.com/analytics.js	50 kB	2023-03-08	2024-04-20
Pretty URL www.google-analytics.com/analytics.js IP 142.250.74.174 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 05:22:31 Last Seen2024-04-20 17:36:09 Times Seen1522 Hash fda30e8a22c9bcd954fd8d0fadd0e77c ae47cd34cbde081a48d7f92fc80aaf06a1381193 b42e4a056cb5b80c5a315040826866445ec9332f0749e184509ab2d9d3b86719 Loading...

HTTP Transactions (50)

URL IP Response Size

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
cdbad2434b7d127a4fc769807a9dc3e7
fa98cd9fc2309ab4423f33f683d17bdb17d76713
560cbbb751ab2884024da3b93fba6bc45c6434797dba72a98c05e7fc2bb94bc1

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "560CBBB751AB2884024DA3B93FBA6BC45C6434797DBA72A98C05E7FC2BB94BC1"
Last-Modified: Sat, 26 Nov 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14053
Expires: Mon, 28 Nov 2022 12:22:32 GMT
Date: Mon, 28 Nov 2022 08:28:19 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
71f9c681a82440fd55e76c780a20e55d
3147768cfbcdd06e0c6e69684292e68e99917a80
5ea71ce6dd9e927f9bb3f97f59cc1ac7dc25a949024815965b29bc5835614786

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5EA71CE6DD9E927F9BB3F97F59CC1AC7DC25A949024815965B29BC5835614786"
Last-Modified: Sat, 26 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2182
Expires: Mon, 28 Nov 2022 09:04:41 GMT
Date: Mon, 28 Nov 2022 08:28:19 GMT
Connection: keep-alive

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
64b2a23eab6e5ae8c010ec7242be930c
0673e4385ba01a5a245711bab96cafc34f765793
64751d193f7af72431e9689581faffcae1a30ff50ea425697b2b80ff61c87909

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4796
Cache-Control: max-age=98570
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 08:28:19 GMT
Etag: "63833c71-1d7"
Expires: Tue, 29 Nov 2022 11:51:09 GMT
Last-Modified: Sun, 27 Nov 2022 10:31:13 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: GN4P9pHWTlw0G0KJMOLAy9yoY9UvQC0ipF5j/MGJA0IZJLFBd8MLpva+PPIe+twCGkWUoru+7X8=
x-amz-request-id: DKWKZEVV41ST759X
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 28 Nov 2022 07:41:58 GMT
age: 2781
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

firefox.settings.services.mozilla.com/v1/

34.102.187.140

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
34.102.187.140:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
567df7db606cf5d0871aa5bc9311b6da
4263faac7cbab2fcaf6661911dcad5091c06be17
e9650e1fdc46fc8678708ddcc37ab369c7a6d50489a004be896f20c7a3a644b0

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 28 Nov 2022 08:19:32 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 527
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 08:28:19 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

chpopesco.com/

66.175.58.9

302 Found

0 B

URL HTTP/1.1
chpopesco.com/
IP
66.175.58.9:0
ASN
#30447 INFB2-AS

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET / HTTP/1.1
Host: chpopesco.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 302 Found
Date: Mon, 28 Nov 2022 08:28:19 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 0
Connection: keep-alive
Location: https://gidatarim.com/Emirates_EPG-MAIL

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

34.102.187.140

200 OK

329 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
34.102.187.140:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Pragma, Alert, Content-Type, ETag, Retry-After, Last-Modified, Content-Length, Cache-Control, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 28 Nov 2022 08:11:12 GMT
cache-control: public,max-age=3600
age: 1027
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
a6fee11dfe1b88cd768a0ca3e2bd0c89
59cec9a44a4a92467678afe65f347f68641a2174
50870c499aae4d5dfd6df25a36cd04b6d185b66ef0590e46933984bf52e2483f

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4791
Cache-Control: max-age=93503
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 08:28:19 GMT
Etag: "638328ac-1d7"
Expires: Tue, 29 Nov 2022 10:26:42 GMT
Last-Modified: Sun, 27 Nov 2022 09:06:52 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471

push.services.mozilla.com/

100.20.30.105

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
100.20.30.105:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Ya4meE2z+MbZuKIUl+CIPQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: HVOUCGCl1UluSKLiJI0gNTcGzqg=

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4703
Expires: Mon, 28 Nov 2022 09:46:44 GMT
Date: Mon, 28 Nov 2022 08:28:21 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4703
Expires: Mon, 28 Nov 2022 09:46:44 GMT
Date: Mon, 28 Nov 2022 08:28:21 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4703
Expires: Mon, 28 Nov 2022 09:46:44 GMT
Date: Mon, 28 Nov 2022 08:28:21 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd6c93814-fbc2-4f60-a417-7cb6ff99a2ef.jpeg

34.120.237.76

200 OK

6.3 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd6c93814-fbc2-4f60-a417-7cb6ff99a2ef.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
6.3 kB (6263 bytes)
Hash
b24e349e9d22fb30fbc80497b512cead
c033d1ecdb9e7640f3df044e39053bed8292fcbc
2d77e3c39c60a3563613b1ba97ec0b1a256f41ad09936ba49b23d8cf22f8a7a8

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd6c93814-fbc2-4f60-a417-7cb6ff99a2ef.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 6263
x-amzn-requestid: 5c3da401-eb9e-4904-a7e9-5e74648b8b77
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR6_KFfWoAMF99A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d860-3110d65625e883502a5078a9;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:36:32 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: EpU6HS6f0BpRceJVfwhBhOgKMTMvdMZj4ST9DMATiqfA10pNplyPtQ==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 21:51:04 GMT
age: 38237
etag: "c033d1ecdb9e7640f3df044e39053bed8292fcbc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

9.4 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F165667de-df17-4cc6-832c-94f49703bdf2.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.4 kB (9430 bytes)
Hash
1f434933b5bd6377d299ada22d1ae7ef
075531f525e625b117b2497f31139c9824d0e9c5
b587a3249e4f20112088608e3651c2ccbc44225a5c9d88d3bf5884d7f0e9029c

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F165667de-df17-4cc6-832c-94f49703bdf2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9430
x-amzn-requestid: 454ca8bd-a256-45f2-8b41-feee86c5af82
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR7wyGCIIAMFhgw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d99e-1488f8ce71a91ebc3ad6b7e0;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:41:50 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: ibLuLI6j9EWh0dgk51O7kiPBRyURZ0UdNtlgbBD-SXnDg_GT_tJm8Q==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 22:01:16 GMT
age: 37625
etag: "075531f525e625b117b2497f31139c9824d0e9c5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.8 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a11c6ec-01ab-453a-a13d-c7804535dc69.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.8 kB (8771 bytes)
Hash
b0bd385532089b45a14e461abbecc1af
3da359b1ba09138a425094715b9f3a2f8d0257fe
803001528f2aefc1ea90e585d48de435975862861a1cbe8d898e5cd7ebd297dd

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a11c6ec-01ab-453a-a13d-c7804535dc69.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8771
x-amzn-requestid: 995d3904-9be1-4b40-9813-ff47e60639ec
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR6_MEAPoAMF0xw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d861-3fdb7958064e0c4b1aed2136;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:36:33 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: vrBB4JkuL3nbZnDWitQ4dvTruO9M6hSt8mw9NuJliCmcNOw8xvfWhw==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 22:20:34 GMT
age: 36467
etag: "3da359b1ba09138a425094715b9f3a2f8d0257fe"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

13 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbfe1c9b5-b323-496c-a65c-09c1511f882f.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
13 kB (12555 bytes)
Hash
f20d5c4b208740dd4c737b9d95c0e1d0
c843c5422499736a83a80c2b07475a8dbbb8860f
f8d048a2c911aaedfa53b7d6e134638e8c36db0700a874fe99e0d8f847970a1b

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbfe1c9b5-b323-496c-a65c-09c1511f882f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 12555
x-amzn-requestid: 2d9827ba-fc88-4deb-9844-f5b42764b2e9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR6_MHPWIAMFQMg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d861-42986aeb284115943c849306;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:36:33 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: KcI_BV4rZkM-2CmcFI5qkJLT-OOwYQnRNEPXrQJvlNA9A3Da0EzgEA==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 21:51:04 GMT
age: 38237
etag: "c843c5422499736a83a80c2b07475a8dbbb8860f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

6.0 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcd94c980-e701-4603-9381-0bd47116d31d.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
6.0 kB (5989 bytes)
Hash
fa848cb85e85df184b078fe7aa95ae52
21aa6418f3a0d2b64925b66d5fb9079b7e84a11c
37d299c166e3350dee6dee647e98a86f8bd916d186bae12c42764ed0a3177085

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcd94c980-e701-4603-9381-0bd47116d31d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 5989
x-amzn-requestid: db10fcc5-80ab-4650-af49-d5afe36706f3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR78LHQqIAMF9_g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d9e7-4cbd19e3227894844807742c;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:43:03 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: P0Nx-FcvcV-f5cRPwZr5sEMb8pH3AoYFr185q_D0X2bE7z40nDn91w==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 21:51:04 GMT
age: 38237
etag: "21aa6418f3a0d2b64925b66d5fb9079b7e84a11c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

6.4 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F36d8942f-c540-4112-a5a9-c7ac53a00a23.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
6.4 kB (6376 bytes)
Hash
78b1389f425425d0450c94d900404dc4
53b12a8702f7c5b7cc697e2a24da824d9434be65
0c1659ab3afc6e45f9e3acb12f8865bb99e4668f7df4501b1cc740e53f5b62ed

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F36d8942f-c540-4112-a5a9-c7ac53a00a23.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 6376
x-amzn-requestid: 25b82353-9c15-44c0-ada5-55f4697de935
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR6_KGeaoAMFb_Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d860-71711cca7c063030292c5e47;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:36:32 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: odmAWkNyUMevvXStu7zRJyckokhyBjUwu7-JSvj8by-JWJ9eAm9P5Q==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 22:01:26 GMT
age: 37615
etag: "53b12a8702f7c5b7cc697e2a24da824d9434be65"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
c81653e99cfdfb43236c8d50248b2e51
a33bc0cb7d3bb714b7ef23b059bb304cf23d464f
e75fa0ce568755990d6949ef93e3e5c29213a5a11887f697af901f41b14e0274

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 08:28:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

www.googletagmanager.com/gtag/js?id=UA-4250163-1

142.250.74.168

200 OK

44 kB

URL HTTP/2
www.googletagmanager.com/gtag/js?id=UA-4250163-1
IP
142.250.74.168:0
ASN
#15169 GOOGLE

File type
ASCII text, with very long lines (1921)
Size
44 kB (43672 bytes)
Hash
ad41cce67a3fb4f71823db5df0aa79ad
6164354e6c5e53a350aeb5862496a2ee03ddcae3
65e3929b8c64ecaba01db6d8720ec18bd19857c2a35b9917d68696fc14f0044d

HTTP Headers

GET /gtag/js?id=UA-4250163-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gidatarim.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 28 Nov 2022 08:28:23 GMT
expires: Mon, 28 Nov 2022 08:28:23 GMT
cache-control: private, max-age=900
last-modified: Mon, 28 Nov 2022 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43672
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
c81653e99cfdfb43236c8d50248b2e51
a33bc0cb7d3bb714b7ef23b059bb304cf23d464f
e75fa0ce568755990d6949ef93e3e5c29213a5a11887f697af901f41b14e0274

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 08:28:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

gidatarim.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.0

45.158.15.68

200 OK

30 kB

URL HTTP/2
gidatarim.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
IP
45.158.15.68:0
ASN
#207459 Taner Temel

File type
ASCII text, with very long lines (65447)
Size
30 kB (30273 bytes)
Hash
34f918ada1fe4f01c5a4b90065bbc37a
a731f6ce2d413805e39ae45994012b1bd5ea1e2b
eba158d5ab26a5a54a3dcfcea1072c636f44e92fc2eb30a3f27cd5be3f891dfc

HTTP Headers

GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1
Host: gidatarim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gidatarim.com/Emirates_EPG-MAIL
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Tue, 28 Nov 2023 14:28:23 GMT
content-type: application/javascript
last-modified: Sun, 23 Oct 2022 15:02:33 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 30273
date: Mon, 28 Nov 2022 08:28:23 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

gidatarim.com/wp-content/litespeed/css/4e99e3b402870e6116ac276a98733a6b.css?ver=33cae

45.158.15.68

200 OK

183 kB

URL HTTP/2
gidatarim.com/wp-content/litespeed/css/4e99e3b402870e6116ac276a98733a6b.css?ver=33cae
IP
45.158.15.68:0
ASN
#207459 Taner Temel

File type
ASCII text, with very long lines (65536), with no line terminators
Size
183 kB (183085 bytes)
Hash
6eda478ac26c10b26e890de50b62a871
395ff52ed138e64477e69ea22aa842869d684e02
4c2299dc6daf497de45421fdb4811934efef2d6c975ad0d687d34f600214794e

HTTP Headers

GET /wp-content/litespeed/css/4e99e3b402870e6116ac276a98733a6b.css?ver=33cae HTTP/1.1
Host: gidatarim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gidatarim.com/Emirates_EPG-MAIL
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Tue, 28 Nov 2023 14:28:23 GMT
content-type: text/css
last-modified: Mon, 28 Nov 2022 06:21:50 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 183085
date: Mon, 28 Nov 2022 08:28:23 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

gidatarim.com/wp-content/uploads/2020/02/gts_logo_rd.png

45.158.15.68

200 OK

14 kB

URL HTTP/2
gidatarim.com/wp-content/uploads/2020/02/gts_logo_rd.png
IP
45.158.15.68:0
ASN
#207459 Taner Temel

File type
PNG image data, 155 x 94, 8-bit/color RGBA, non-interlaced\012- data
Size
14 kB (13710 bytes)
Hash
77d168c1b0ca40da212a43c84988bf98
55d24e8be45e0cf69fd3e5fd4d1bf2e663db4d38
306792a8f22588727c6d5da3f0a557d29ecae8440f8f7bf6135cbef07af57e5e

HTTP Headers

GET /wp-content/uploads/2020/02/gts_logo_rd.png HTTP/1.1
Host: gidatarim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gidatarim.com/Emirates_EPG-MAIL
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Tue, 28 Nov 2023 14:28:23 GMT
content-type: image/png
last-modified: Fri, 19 Aug 2022 10:24:22 GMT
accept-ranges: bytes
content-length: 13710
date: Mon, 28 Nov 2022 08:28:23 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

gidatarim.com/wp-content/uploads/2020/02/gtns_logo.png

45.158.15.68

200 OK

12 kB

URL HTTP/2
gidatarim.com/wp-content/uploads/2020/02/gtns_logo.png
IP
45.158.15.68:0
ASN
#207459 Taner Temel

File type
PNG image data, 153 x 73, 8-bit/color RGBA, non-interlaced\012- data
Size
12 kB (12383 bytes)
Hash
1229f0e95f00db2d306a2392de3553e4
060b36966e5678fb068764be60ef26f3dbc47285
45f5598bd972944bc8915b537a72238c3435df683ef631634c471eac44aa4e75

HTTP Headers

GET /wp-content/uploads/2020/02/gtns_logo.png HTTP/1.1
Host: gidatarim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gidatarim.com/Emirates_EPG-MAIL
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Tue, 28 Nov 2023 14:28:23 GMT
content-type: image/png
last-modified: Fri, 19 Aug 2022 10:24:22 GMT
accept-ranges: bytes
content-length: 12383
date: Mon, 28 Nov 2022 08:28:23 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

gidatarim.com/wp-content/litespeed/js/30392056b64adf2af5c4462b0b6cc4e2.js?ver=33cae

45.158.15.68

200 OK

219 kB

URL HTTP/2
gidatarim.com/wp-content/litespeed/js/30392056b64adf2af5c4462b0b6cc4e2.js?ver=33cae
IP
45.158.15.68:0
ASN
#207459 Taner Temel

File type
Unicode text, UTF-8 text, with very long lines (22964)
Size
219 kB (218672 bytes)
Hash
4fd7979f047ed776a413956ff8dd08be
4ec2c4d29b0d2402f6ea0f1683b4ae6dcd284099
8f508995bb1cf53ac35045e11ec3ee5953765f5439795a44e22b0668aaa70529

HTTP Headers

GET /wp-content/litespeed/js/30392056b64adf2af5c4462b0b6cc4e2.js?ver=33cae HTTP/1.1
Host: gidatarim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gidatarim.com/Emirates_EPG-MAIL
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Tue, 28 Nov 2023 14:28:23 GMT
content-type: application/javascript
last-modified: Mon, 28 Nov 2022 08:28:22 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 218672
date: Mon, 28 Nov 2022 08:28:23 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

gidatarim.com/wp-content/themes/jnews/assets/dist/image/preloader.gif

45.158.15.68

200 OK

4.4 kB

URL HTTP/2
gidatarim.com/wp-content/themes/jnews/assets/dist/image/preloader.gif
IP
45.158.15.68:0
ASN
#207459 Taner Temel

File type
GIF image data, version 89a, 100 x 75\012- data
Size
4.4 kB (4399 bytes)
Hash
c225d4001dc31c7ff8e290129f436175
b27a1dcbf1accdee9b64db482e72ac3972363915
e2e60e9eae839d6b2e857c708f6d02ae6069141594b941a1590cd5c5435d42f4

HTTP Headers

GET /wp-content/themes/jnews/assets/dist/image/preloader.gif HTTP/1.1
Host: gidatarim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gidatarim.com/wp-content/litespeed/css/4e99e3b402870e6116ac276a98733a6b.css?ver=33cae
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Tue, 28 Nov 2023 14:28:23 GMT
content-type: image/gif
last-modified: Mon, 01 Aug 2022 14:54:20 GMT
accept-ranges: bytes
content-length: 4399
date: Mon, 28 Nov 2022 08:28:23 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

gidatarim.com/wp-content/plugins/ubermenu/assets/fontawesome/webfonts/fa-solid-900.woff2

45.158.15.68

200 OK

79 kB

URL HTTP/2
gidatarim.com/wp-content/plugins/ubermenu/assets/fontawesome/webfonts/fa-solid-900.woff2
IP
45.158.15.68:0
ASN
#207459 Taner Temel

File type
Web Open Font Format (Version 2), TrueType, length 79444, version 331.524\012- data
Size
79 kB (79444 bytes)
Hash
b15db15f746f29ffa02638cb455b8ec0
75a88815c47a249eadb5f0edc1675957f860cca7
7f4d3fd0a705dbf8403298aad91d5de6972e6b5d536068eba8b24954a5a0a8c7

HTTP Headers

GET /wp-content/plugins/ubermenu/assets/fontawesome/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: gidatarim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://gidatarim.com/wp-content/litespeed/css/4e99e3b402870e6116ac276a98733a6b.css?ver=33cae
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Tue, 28 Nov 2023 14:28:23 GMT
content-type: font/woff2
last-modified: Mon, 22 Nov 2021 06:42:36 GMT
accept-ranges: bytes
content-length: 79444
date: Mon, 28 Nov 2022 08:28:23 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

gidatarim.com/wp-content/themes/jnews/assets/dist/font/fontawesome-webfont.woff2

45.158.15.68

200 OK

77 kB

URL HTTP/2
gidatarim.com/wp-content/themes/jnews/assets/dist/font/fontawesome-webfont.woff2
IP
45.158.15.68:0
ASN
#207459 Taner Temel

File type
Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Size
77 kB (77160 bytes)
Hash
af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe

HTTP Headers

GET /wp-content/themes/jnews/assets/dist/font/fontawesome-webfont.woff2 HTTP/1.1
Host: gidatarim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://gidatarim.com/wp-content/litespeed/css/4e99e3b402870e6116ac276a98733a6b.css?ver=33cae
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Tue, 28 Nov 2023 14:28:23 GMT
content-type: font/woff2
last-modified: Mon, 01 Aug 2022 14:54:20 GMT
accept-ranges: bytes
content-length: 77160
date: Mon, 28 Nov 2022 08:28:23 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

gidatarim.com/wp-content/themes/jnews/assets/dist/font/jegicon.woff

45.158.15.68

200 OK

7.1 kB

URL HTTP/2
gidatarim.com/wp-content/themes/jnews/assets/dist/font/jegicon.woff
IP
45.158.15.68:0
ASN
#207459 Taner Temel

File type
Web Open Font Format, CFF, length 7144, version 1.0\012- data
Size
7.1 kB (7144 bytes)
Hash
80f6e7a7a6eb44255aeb06a2d5b5ea41
4ded570e00c9c96cc3cf18e770903cb60e360ce4
e2d3127da85763e024971c6192f78becbdf85db231b3d088c9f8b3777d444ede

HTTP Headers

GET /wp-content/themes/jnews/assets/dist/font/jegicon.woff HTTP/1.1
Host: gidatarim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://gidatarim.com/wp-content/litespeed/css/4e99e3b402870e6116ac276a98733a6b.css?ver=33cae
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Tue, 28 Nov 2023 14:28:23 GMT
content-type: font/woff
last-modified: Mon, 01 Aug 2022 14:54:20 GMT
accept-ranges: bytes
content-length: 7144
date: Mon, 28 Nov 2022 08:28:23 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

gidatarim.com/wp-includes/js/wp-emoji-release.min.js?ver=6.0.3

45.158.15.68

200 OK

4.6 kB

URL HTTP/2
gidatarim.com/wp-includes/js/wp-emoji-release.min.js?ver=6.0.3
IP
45.158.15.68:0
ASN
#207459 Taner Temel

File type
ASCII text, with very long lines (15660)
Size
4.6 kB (4619 bytes)
Hash
0232689bd203f330529b36a437f41a68
9046583f7469ad38297969f10a9513eb895d5316
feea9f30a6e454579bbeabf236b7abdb0c7de84dd2852422555ad67348c5e886

HTTP Headers

GET /wp-includes/js/wp-emoji-release.min.js?ver=6.0.3 HTTP/1.1
Host: gidatarim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gidatarim.com/Emirates_EPG-MAIL
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Tue, 28 Nov 2023 14:28:23 GMT
content-type: application/javascript
last-modified: Sun, 23 Oct 2022 15:02:33 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 4619
date: Mon, 28 Nov 2022 08:28:23 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

s.w.org/images/core/emoji/14.0.0/svg/2714.svg

192.0.77.48

200 OK

361 B

URL HTTP/2
s.w.org/images/core/emoji/14.0.0/svg/2714.svg
IP
192.0.77.48:0
ASN
#2635 AUTOMATTIC

File type
SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (361), with no line terminators
Size
361 B (361 bytes)
Hash
7b3ff12d16d96ca77345da9450986dc7
220f77197faa7aed5c3217b1f8cec35518a96137
e98cb75b135ff35e1d3c27667101fc6ac910aa2c7e6b52ff09d06c537f4de8d6

HTTP Headers

GET /images/core/emoji/14.0.0/svg/2714.svg HTTP/1.1
Host: s.w.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gidatarim.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 08:28:23 GMT
content-type: image/svg+xml
content-length: 361
last-modified: Tue, 12 Apr 2022 03:53:44 GMT
x-frame-options: SAMEORIGIN
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
x-nc: HIT arn 1
x-content-type-options: nosniff
accept-ranges: bytes
X-Firefox-Spdy: h2

gidatarim.com/wp-content/themes/jnews/assets/img/jeg-empty.png

45.158.15.68

200 OK

70 B

URL HTTP/2
gidatarim.com/wp-content/themes/jnews/assets/img/jeg-empty.png
IP
45.158.15.68:0
ASN
#207459 Taner Temel

File type
PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Size
70 B (70 bytes)
Hash
c0ddcc7cc2d334254808ae1d918f9ee7
6ea24d025387ce247fa530f14778ef7ada4683d5
67ebf650147a9122e94ff1b25a78a82e903b92b877821c1479de69f00f59d429

HTTP Headers

GET /wp-content/themes/jnews/assets/img/jeg-empty.png HTTP/1.1
Host: gidatarim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gidatarim.com/Emirates_EPG-MAIL
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Tue, 28 Nov 2023 14:28:23 GMT
content-type: image/png
last-modified: Thu, 15 Jul 2021 10:54:10 GMT
accept-ranges: bytes
content-length: 70
date: Mon, 28 Nov 2022 08:28:23 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

www.google-analytics.com/analytics.js

142.250.74.174

200 OK

20 kB

URL HTTP/2
www.google-analytics.com/analytics.js
IP
142.250.74.174:0
ASN
#15169 GOOGLE

File type
ASCII text, with very long lines (1325)
Size
20 kB (20039 bytes)
Hash
47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e

HTTP Headers

GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gidatarim.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Mon, 28 Nov 2022 06:41:08 GMT
expires: Mon, 28 Nov 2022 08:41:08 GMT
cache-control: public, max-age=7200
age: 6436
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

gidatarim.com/wp-content/uploads/2019/08/favicon.ico

45.158.15.68

200 OK

1.2 kB

URL HTTP/2
gidatarim.com/wp-content/uploads/2019/08/favicon.ico
IP
45.158.15.68:0
ASN
#207459 Taner Temel

File type
MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Size
1.2 kB (1150 bytes)
Hash
b2323764068e8fcb06d74fb8e1764ca5
9b94bf1001aef91b4598de0ed98ed96125b049b3
37f7bf5fc18009a726d9f6481d4ae2998adda90aaac29caa5241d58448b15c91

HTTP Headers

GET /wp-content/uploads/2019/08/favicon.ico HTTP/1.1
Host: gidatarim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gidatarim.com/Emirates_EPG-MAIL
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Tue, 28 Nov 2023 14:28:23 GMT
content-type: image/x-icon
last-modified: Fri, 19 Aug 2022 10:22:10 GMT
accept-ranges: bytes
content-length: 1150
date: Mon, 28 Nov 2022 08:28:23 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

gidatarim.com/wp-admin/admin-ajax.php?lang=tr_TR&action=get_ajax_weather_by_citys&city=

45.158.15.68

200 OK

79 B

URL HTTP/2
gidatarim.com/wp-admin/admin-ajax.php?lang=tr_TR&action=get_ajax_weather_by_citys&city=
IP
45.158.15.68:0
ASN
#207459 Taner Temel

File type
JSON data\012- , ASCII text, with no line terminators
Size
79 B (79 bytes)
Hash
562e9b79fef7fc063b9955a45de46587
d3a46f1b8af69404373814e415f7fe540fe23e8f
9366b4a8ce060154137a6150a2718d903a8e917ae4d6d4e895f7826298418ff9

HTTP Headers

GET /wp-admin/admin-ajax.php?lang=tr_TR&action=get_ajax_weather_by_citys&city= HTTP/1.1
Host: gidatarim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://gidatarim.com/Emirates_EPG-MAIL
Cookie: _ga=GA1.2.416958315.1669624104; _gid=GA1.2.346791572.1669624104; _gat=1; _gat_gtag_UA_4250163_1=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
content-type: text/html; charset=UTF-8
x-robots-tag: noindex
x-content-type-options: nosniff
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-litespeed-cache-control: no-cache
content-length: 79
content-encoding: br
vary: Accept-Encoding
date: Mon, 28 Nov 2022 08:28:25 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

gidatarim.com/wp-content/uploads/2022/11/ziraat-bankasi-350x250.jpg

45.158.15.68

200 OK

17 kB

URL HTTP/2
gidatarim.com/wp-content/uploads/2022/11/ziraat-bankasi-350x250.jpg
IP
45.158.15.68:0
ASN
#207459 Taner Temel

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 70", baseline, precision 8, 350x250, components 3\012- data
Size
17 kB (16996 bytes)
Hash
b847812ce8f9ae7efa4382bede4b7cc8
b946a927a5e245bebe801fa716b904067a55b535
855cefed4448669fd0a4a2080d5e2bd6b1ddfb4fd77e83af36c6a418724e468e

HTTP Headers

GET /wp-content/uploads/2022/11/ziraat-bankasi-350x250.jpg HTTP/1.1
Host: gidatarim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gidatarim.com/Emirates_EPG-MAIL
Cookie: _ga=GA1.1.416958315.1669624104; _gid=GA1.2.346791572.1669624104; _gat=1; _gat_gtag_UA_4250163_1=1; _ga_GWRKHGS3GQ=GS1.1.1669624104.1.0.1669624104.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Tue, 28 Nov 2023 14:28:25 GMT
content-type: image/jpeg
last-modified: Mon, 28 Nov 2022 06:18:01 GMT
accept-ranges: bytes
content-length: 16996
date: Mon, 28 Nov 2022 08:28:25 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

gidatarim.com/wp-content/uploads/2022/11/izmir-app-350x250.jpg

45.158.15.68

200 OK

14 kB

URL HTTP/2
gidatarim.com/wp-content/uploads/2022/11/izmir-app-350x250.jpg
IP
45.158.15.68:0
ASN
#207459 Taner Temel

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 70", baseline, precision 8, 350x250, components 3\012- data
Size
14 kB (14383 bytes)
Hash
01ca1dd2704baf146d4e90814cd69903
37c749b43ccb0889be7f5692e0a592e35f20454d
be0425841ef8906f96bb534f80ac68415a86a52a21046d37742859fe3c88dd8b

HTTP Headers

GET /wp-content/uploads/2022/11/izmir-app-350x250.jpg HTTP/1.1
Host: gidatarim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gidatarim.com/Emirates_EPG-MAIL
Cookie: _ga=GA1.1.416958315.1669624104; _gid=GA1.2.346791572.1669624104; _gat=1; _gat_gtag_UA_4250163_1=1; _ga_GWRKHGS3GQ=GS1.1.1669624104.1.0.1669624104.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Tue, 28 Nov 2023 14:28:25 GMT
content-type: image/jpeg
last-modified: Mon, 28 Nov 2022 05:57:30 GMT
accept-ranges: bytes
content-length: 14383
date: Mon, 28 Nov 2022 08:28:25 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

gidatarim.com/wp-content/uploads/2022/11/fiskobirlik-350x250.jpg

45.158.15.68

200 OK

17 kB

URL HTTP/2
gidatarim.com/wp-content/uploads/2022/11/fiskobirlik-350x250.jpg
IP
45.158.15.68:0
ASN
#207459 Taner Temel

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 70", baseline, precision 8, 350x250, components 3\012- data
Size
17 kB (17050 bytes)
Hash
9d3b8773ea15ca879d6d483ce575fadf
7d8c67091a14c82ce8d40d4fa8bbd78537734447
0cc6acf75e6df05505b8ced48c12a8ae0e1631a84fec0aabc2d91dbf381c2397

HTTP Headers

GET /wp-content/uploads/2022/11/fiskobirlik-350x250.jpg HTTP/1.1
Host: gidatarim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gidatarim.com/Emirates_EPG-MAIL
Cookie: _ga=GA1.1.416958315.1669624104; _gid=GA1.2.346791572.1669624104; _gat=1; _gat_gtag_UA_4250163_1=1; _ga_GWRKHGS3GQ=GS1.1.1669624104.1.0.1669624104.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Tue, 28 Nov 2023 14:28:25 GMT
content-type: image/jpeg
last-modified: Mon, 28 Nov 2022 04:23:11 GMT
accept-ranges: bytes
content-length: 17050
date: Mon, 28 Nov 2022 08:28:25 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

gidatarim.com/wp-content/uploads/2022/11/limkon-350x250.jpg

45.158.15.68

200 OK

14 kB

URL HTTP/2
gidatarim.com/wp-content/uploads/2022/11/limkon-350x250.jpg
IP
45.158.15.68:0
ASN
#207459 Taner Temel

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 70", baseline, precision 8, 350x250, components 3\012- data
Size
14 kB (14259 bytes)
Hash
10c5d173aa03e97c1e7a5b38c0dbdcda
72b1d0fe3a77261f4d739e22c1347c995330d940
06f8c502fb1a24c540d806e9f2e28f801f4322c1c74f7e59bf8fb131e2787315

HTTP Headers

GET /wp-content/uploads/2022/11/limkon-350x250.jpg HTTP/1.1
Host: gidatarim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gidatarim.com/Emirates_EPG-MAIL
Cookie: _ga=GA1.1.416958315.1669624104; _gid=GA1.2.346791572.1669624104; _gat=1; _gat_gtag_UA_4250163_1=1; _ga_GWRKHGS3GQ=GS1.1.1669624104.1.0.1669624104.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Tue, 28 Nov 2023 14:28:25 GMT
content-type: image/jpeg
last-modified: Mon, 28 Nov 2022 04:18:38 GMT
accept-ranges: bytes
content-length: 14259
date: Mon, 28 Nov 2022 08:28:25 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

gidatarim.com/wp-content/uploads/2022/08/Didem-Eryar-Unlu.jpg.webp

45.158.15.68

200 OK

4.9 kB

URL HTTP/2
gidatarim.com/wp-content/uploads/2022/08/Didem-Eryar-Unlu.jpg.webp
IP
45.158.15.68:0
ASN
#207459 Taner Temel

File type
RIFF (little-endian) data, Web/P image\012- data
Size
4.9 kB (4870 bytes)
Hash
82c419e2128315b7529d69b8ed3a45c8
6db5a7a02db60a04cc47f864e3db1a59a8aa9fd3
ace97376ea543ae9cf82662c12964a30d6fd2f3fffe1f7e5c108b5292bd82e59

HTTP Headers

GET /wp-content/uploads/2022/08/Didem-Eryar-Unlu.jpg.webp HTTP/1.1
Host: gidatarim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gidatarim.com/Emirates_EPG-MAIL
Cookie: _ga=GA1.1.416958315.1669624104; _gid=GA1.2.346791572.1669624104; _gat=1; _gat_gtag_UA_4250163_1=1; _ga_GWRKHGS3GQ=GS1.1.1669624104.1.0.1669624104.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Tue, 28 Nov 2023 14:28:25 GMT
content-type: image/webp
last-modified: Sun, 04 Sep 2022 21:19:25 GMT
accept-ranges: bytes
content-length: 4870
date: Mon, 28 Nov 2022 08:28:25 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

gidatarim.com/wp-content/uploads/2022/11/resmi-gazete-tarim-360x180.jpg

45.158.15.68

200 OK

9.4 kB

URL HTTP/2
gidatarim.com/wp-content/uploads/2022/11/resmi-gazete-tarim-360x180.jpg
IP
45.158.15.68:0
ASN
#207459 Taner Temel

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 70", baseline, precision 8, 360x180, components 3\012- data
Size
9.4 kB (9428 bytes)
Hash
fc603b29e14ee22d7b7a668dc7cff6dc
f39bf94ceb14d87e3b877804f67d350ea4927174
dbc8cc0318b7b2bcbaf0bea4a7bfe73afd4acb179de64374d0fb50b1a1bb2e62

HTTP Headers

GET /wp-content/uploads/2022/11/resmi-gazete-tarim-360x180.jpg HTTP/1.1
Host: gidatarim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gidatarim.com/Emirates_EPG-MAIL
Cookie: _ga=GA1.1.416958315.1669624104; _gid=GA1.2.346791572.1669624104; _gat=1; _gat_gtag_UA_4250163_1=1; _ga_GWRKHGS3GQ=GS1.1.1669624104.1.0.1669624104.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Tue, 28 Nov 2023 14:28:25 GMT
content-type: image/jpeg
last-modified: Sun, 27 Nov 2022 04:38:42 GMT
accept-ranges: bytes
content-length: 9428
date: Mon, 28 Nov 2022 08:28:25 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

gidatarim.com/wp-content/uploads/2022/11/tir-sb-120x86.jpg

45.158.15.68

200 OK

2.2 kB

URL HTTP/2
gidatarim.com/wp-content/uploads/2022/11/tir-sb-120x86.jpg
IP
45.158.15.68:0
ASN
#207459 Taner Temel

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 70", baseline, precision 8, 120x86, components 3\012- data
Size
2.2 kB (2166 bytes)
Hash
9a8a48298e277bd361a21429b25d7b3c
9656f5eb55e69da67416a2773e341effda5b7867
c8687a5d311fc65e70142c5019bbc406648d8e2e2616b92201080904e169b99f

HTTP Headers

GET /wp-content/uploads/2022/11/tir-sb-120x86.jpg HTTP/1.1
Host: gidatarim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gidatarim.com/Emirates_EPG-MAIL
Cookie: _ga=GA1.1.416958315.1669624104; _gid=GA1.2.346791572.1669624104; _gat=1; _gat_gtag_UA_4250163_1=1; _ga_GWRKHGS3GQ=GS1.1.1669624104.1.0.1669624104.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Tue, 28 Nov 2023 14:28:25 GMT
content-type: image/jpeg
last-modified: Sun, 27 Nov 2022 05:26:19 GMT
accept-ranges: bytes
content-length: 2166
date: Mon, 28 Nov 2022 08:28:25 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

gidatarim.com/wp-content/uploads/2022/10/portakal-cicegi-120x86.jpg

45.158.15.68

200 OK

3.8 kB

URL HTTP/2
gidatarim.com/wp-content/uploads/2022/10/portakal-cicegi-120x86.jpg
IP
45.158.15.68:0
ASN
#207459 Taner Temel

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 70", baseline, precision 8, 120x86, components 3\012- data
Size
3.8 kB (3785 bytes)
Hash
e6dc77890911e44b450331fcd05a7035
b1e171641663b913b51b73b016a77ed511213271
c2d85fddd2ad006e019d4e5dd5fadae89153fd9cb3f160bba1298234feec828b

HTTP Headers

GET /wp-content/uploads/2022/10/portakal-cicegi-120x86.jpg HTTP/1.1
Host: gidatarim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gidatarim.com/Emirates_EPG-MAIL
Cookie: _ga=GA1.1.416958315.1669624104; _gid=GA1.2.346791572.1669624104; _gat=1; _gat_gtag_UA_4250163_1=1; _ga_GWRKHGS3GQ=GS1.1.1669624104.1.0.1669624104.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Tue, 28 Nov 2023 14:28:25 GMT
content-type: image/jpeg
last-modified: Thu, 13 Oct 2022 03:26:59 GMT
accept-ranges: bytes
content-length: 3785
date: Mon, 28 Nov 2022 08:28:25 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

gidatarim.com/wp-content/uploads/2021/07/Mehmet-pala-120x86.jpg

45.158.15.68

200 OK

3.5 kB

URL HTTP/2
gidatarim.com/wp-content/uploads/2021/07/Mehmet-pala-120x86.jpg
IP
45.158.15.68:0
ASN
#207459 Taner Temel

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 120x86, components 3\012- data
Size
3.5 kB (3473 bytes)
Hash
bfdbca166e5c575658d4fc86e5cbc9c2
d6710b95f9de8de88f75745e2eb18785da52a95b
4d54e3ce43d27d55757ce8d5208c7c6c89582521baea1c1fb9153bfe9a7390dc

HTTP Headers

GET /wp-content/uploads/2021/07/Mehmet-pala-120x86.jpg HTTP/1.1
Host: gidatarim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gidatarim.com/Emirates_EPG-MAIL
Cookie: _ga=GA1.1.416958315.1669624104; _gid=GA1.2.346791572.1669624104; _gat=1; _gat_gtag_UA_4250163_1=1; _ga_GWRKHGS3GQ=GS1.1.1669624104.1.0.1669624104.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Tue, 28 Nov 2023 14:28:25 GMT
content-type: image/jpeg
last-modified: Mon, 05 Sep 2022 21:34:27 GMT
accept-ranges: bytes
content-length: 3473
date: Mon, 28 Nov 2022 08:28:25 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

gidatarim.com/wp-content/uploads/2022/09/kuru-fasulye-120x86.jpg

45.158.15.68

200 OK

4.9 kB

URL HTTP/2
gidatarim.com/wp-content/uploads/2022/09/kuru-fasulye-120x86.jpg
IP
45.158.15.68:0
ASN
#207459 Taner Temel

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 120x86, components 3\012- data
Size
4.9 kB (4894 bytes)
Hash
74e0479a8ed1825f24e7c64241896b49
8a1a40d320d5b48e6f69c326c1422750576ec17a
45081557d3a6004c7b74d811d7ef20ccb30a63ba04da9f8dc3b46436e9848a4e

HTTP Headers

GET /wp-content/uploads/2022/09/kuru-fasulye-120x86.jpg HTTP/1.1
Host: gidatarim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gidatarim.com/Emirates_EPG-MAIL
Cookie: _ga=GA1.1.416958315.1669624104; _gid=GA1.2.346791572.1669624104; _gat=1; _gat_gtag_UA_4250163_1=1; _ga_GWRKHGS3GQ=GS1.1.1669624104.1.0.1669624104.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Tue, 28 Nov 2023 14:28:25 GMT
content-type: image/jpeg
last-modified: Wed, 14 Sep 2022 03:31:07 GMT
accept-ranges: bytes
content-length: 4894
date: Mon, 28 Nov 2022 08:28:25 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

region1.google-analytics.com/g/collect?v=2&tid=G-GWRKHGS3GQ&gtm=2oeb90&_p=1201196992&gdid=dZTNiMT&cid=416958315.1669624104&ul=en-us&sr=1280x1024&_s=1&sid=1669624104&sct=1&seg=0&dl=https%3A%2F%2Fgidatarim.com%2FEmirates_EPG-MAIL&dt=Sayfa%20bulunamad%C4%B1%20%E2%80%93%20GIDA%20TARIM&en=page_view&_fv=1&_ss=1&_ee=1

216.239.32.36

204 No Content

0 B

URL HTTP/2
region1.google-analytics.com/g/collect?v=2&tid=G-GWRKHGS3GQ&gtm=2oeb90&_p=1201196992&gdid=dZTNiMT&cid=416958315.1669624104&ul=en-us&sr=1280x1024&_s=1&sid=1669624104&sct=1&seg=0&dl=https%3A%2F%2Fgidatarim.com%2FEmirates_EPG-MAIL&dt=Sayfa%20bulunamad%C4%B1%20%E2%80%93%20GIDA%20TARIM&en=page_view&_fv=1&_ss=1&_ee=1
IP
216.239.32.36:0
ASN
#15169 GOOGLE

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST /g/collect?v=2&tid=G-GWRKHGS3GQ&gtm=2oeb90&_p=1201196992&gdid=dZTNiMT&cid=416958315.1669624104&ul=en-us&sr=1280x1024&_s=1&sid=1669624104&sct=1&seg=0&dl=https%3A%2F%2Fgidatarim.com%2FEmirates_EPG-MAIL&dt=Sayfa%20bulunamad%C4%B1%20%E2%80%93%20GIDA%20TARIM&en=page_view&_fv=1&_ss=1&_ee=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://gidatarim.com
Connection: keep-alive
Referer: https://gidatarim.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

HTTP/2 204 No Content
access-control-allow-origin: https://gidatarim.com
date: Mon, 28 Nov 2022 08:28:25 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

gidatarim.com/Emirates_EPG-MAIL

45.158.15.68

404 Not Found

0 B

URL HTTP/2
gidatarim.com/Emirates_EPG-MAIL
IP
45.158.15.68:0
ASN
#207459 Taner Temel

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /Emirates_EPG-MAIL HTTP/1.1
Host: gidatarim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://gidatarim.com/wp-json/>; rel="https://api.w.org/"
x-litespeed-cache-control: public,max-age=3600
x-litespeed-tag: 6ae_HTTP.404,6ae_404,6ae_URL.313d3a200d2dfaf078255211c16e80f4,6ae_,6ae_MIN.4e99e3b402870e6116ac276a98733a6b.css,6ae_MIN.30392056b64adf2af5c4462b0b6cc4e2.js
x-litespeed-cache: miss
content-encoding: br
vary: Accept-Encoding
date: Mon, 28 Nov 2022 08:28:22 GMT
server: LiteSpeed
alt-svc: quic=":443"; ma=2592000; v="39,43,46", h3-Q039=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-23=":443"; ma=2592000, h3-24=":443"; ma=2592000
X-Firefox-Spdy: h2

gidatarim.com/wp-content/uploads/2022/09/729-x-90-Depar-Reklam.png

45.158.15.68

200 OK

0 B

URL HTTP/2
gidatarim.com/wp-content/uploads/2022/09/729-x-90-Depar-Reklam.png
IP
45.158.15.68:0
ASN
#207459 Taner Temel

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /wp-content/uploads/2022/09/729-x-90-Depar-Reklam.png HTTP/1.1
Host: gidatarim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gidatarim.com/Emirates_EPG-MAIL
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Tue, 28 Nov 2023 14:28:23 GMT
content-type: image/png
last-modified: Thu, 22 Sep 2022 14:41:17 GMT
accept-ranges: bytes
content-length: 127433
date: Mon, 28 Nov 2022 08:28:23 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (7)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (50)

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1