200 OK 34 kB URL User Request GET HTTP/1.1 IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1021), with CRLF, LF line terminators
Hash 74978cd4c5110dd3d3174ace53d00cb0
a6d59647e6f856d02d096810e1d1a1a5aa09b00e
75ea926a15692fba9358f60094fd6825627b8df614852465a650b1e88b245e06
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET / HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:06 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
X-Powered-By: PHP/5.4.16
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Last-Modified: Sun, 21 May 2023 22:08:06 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Set-Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; path=/
Content-Encoding: gzip
www.googletagmanager.com/gtag/js?id=AW-824091668
200 OK 253 B URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=AW-824091668
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint55:51:32:58:36:72:A1:C8:50:5E:5A:8D:CE:A5:2F:DC:D7:1E:62:03
ValidityMon, 24 Apr 2023 11:56:06 GMT - Mon, 17 Jul 2023 11:56:05 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash fd6af3b7a3ec9383134b9c7939b27d6f
4ef4226d2b6ccad158cc7b24c4a44c67c02e52d7
4d67445e8ac8ffff4589ae585b09314f948b32780da30984121465aa649c4c0f
GET /gtag/js?id=AW-824091668 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Location: https://www.googletagmanager.com/gtag/js?id=AW-824091668
Cross-Origin-Resource-Policy: cross-origin
Date: Sun, 21 May 2023 22:08:07 GMT
Content-Type: text/html; charset=UTF-8
Server: Google Tag Manager
Content-Length: 253
X-XSS-Protection: 0
217.195.197.85/style/opt.css?ux=298
200 OK 4.1 kB URL GET HTTP/1.1 217.195.197.85/style/opt.css?ux=298
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
Hash 888c4ac5d912aa455f594c5e403078e6
a8f8ed6ab87f5b1837d8e49752e7e73dab9e43e7
80d5a2bd8ca4f80987d110fffab50a3fa5461f5c16463ec7ad18848ab4647046
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /style/opt.css?ux=298 HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:07 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
Last-Modified: Tue, 14 Mar 2023 00:04:45 GMT
ETag: W/"56ed-5f6d0f9a26606"
Content-Encoding: gzip
217.195.197.85/style/jquery.rselect.css?ux=298
200 OK 897 B URL GET HTTP/1.1 217.195.197.85/style/jquery.rselect.css?ux=298
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type ASCII text, with CRLF line terminators
Hash af4e9fc0e6997e157b2f7d181394db26
f65cce5f1a2ba2b876122e1d94319c9d8c6d1130
d16fe5ed66c33ecd72ffb414b62151337c9604aaff9404b264036c820a3031ff
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /style/jquery.rselect.css?ux=298 HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:07 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
Last-Modified: Tue, 14 Mar 2023 00:04:45 GMT
ETag: W/"af9-5f6d0f9a34c7e"
Content-Encoding: gzip
217.195.197.85/style/art_alt.css?ux=298
200 OK 427 B URL GET HTTP/1.1 217.195.197.85/style/art_alt.css?ux=298
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type ASCII text, with CRLF line terminators
Hash 4df805d8b1814d31c145b8131ad2086f
6adf36d7a01b34fea2f0eba5c6b027ce5071993b
3a01bbf48d75b4a5593497e5db920d8c294dcd000915b733c1e54aeaaa39cedd
Analyzer Verdict Alert quad9 Sinkholed
GET /style/art_alt.css?ux=298 HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:07 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
Last-Modified: Tue, 14 Mar 2023 00:04:45 GMT
ETag: W/"648-5f6d0f9a4ea8e"
Content-Encoding: gzip
217.195.197.85/js/common.js?ux=298
200 OK 15 kB URL GET HTTP/1.1 217.195.197.85/js/common.js?ux=298
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type Unicode text, UTF-8 text, with very long lines (391)
Hash 1d92c548b3c3fb668a923fbead5150f2
11e7551e395a3ce1752dfb605713aa8fdacbef77
458ff4cf7b8e21bd639e488f2aad4b6c9847bd5067d5682563c46aea911f4da0
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /js/common.js?ux=298 HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:07 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
Last-Modified: Tue, 14 Mar 2023 00:04:16 GMT
ETag: W/"f5e4-5f6d0f7eb9de4"
Content-Encoding: gzip
217.195.197.85/js/jquery.rselect.js?ux=298
200 OK 1.7 kB URL GET HTTP/1.1 217.195.197.85/js/jquery.rselect.js?ux=298
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type ASCII text, with CRLF line terminators
Hash 821e42061aefb597735d276c2269511a
5252e375538cda9ce018d68f903dba439559e9dd
5bcda0eddaaa2a7b33a07c39802701be6c6182ec4925b4c14bf36b1aa6375909
Analyzer Verdict Alert quad9 Sinkholed
GET /js/jquery.rselect.js?ux=298 HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:07 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
Last-Modified: Tue, 14 Mar 2023 00:04:16 GMT
ETag: W/"19c8-5f6d0f7e9fbec"
Content-Encoding: gzip
217.195.197.85/v2/js/jquery.js?ux=298
200 OK 33 kB URL GET HTTP/1.1 217.195.197.85/v2/js/jquery.js?ux=298
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type ASCII text, with very long lines (32089), with CRLF line terminators
Hash 383771ef1692bfcc3f2b6917ca985778
a1ce0bfa507f23cc414a9a7634bd73b994bb3b35
20638e363fcc5152155f24b281303e17da62da62d24ef5dcf863b184d9a25734
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /v2/js/jquery.js?ux=298 HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:07 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
Last-Modified: Tue, 14 Mar 2023 00:04:58 GMT
ETag: W/"169d9-5f6d0fa667d3e"
Content-Encoding: gzip
217.195.197.85/js/jquery.chstyler.js?ux=298
200 OK 735 B URL GET HTTP/1.1 217.195.197.85/js/jquery.chstyler.js?ux=298
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type ASCII text, with CRLF line terminators
Hash 90e0496917a43b0c2015aa16b613f0a4
f23ea179073045e42cc58fd7bae0d9c84986aca4
9682708b431a32a15ecae847ae4d43355eb010f296ba8e694fd64317ae8c0195
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /js/jquery.chstyler.js?ux=298 HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:07 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
Last-Modified: Tue, 14 Mar 2023 00:04:16 GMT
ETag: W/"863-5f6d0f7ec3254"
Content-Encoding: gzip
217.195.197.85/v2/js/cufon.js?ux=298
200 OK 7.5 kB URL GET HTTP/1.1 217.195.197.85/v2/js/cufon.js?ux=298
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type ASCII text, with very long lines (18158), with CRLF line terminators
Hash 2ef30245466e5023c2187d138075cb5a
313f78eae9b872f98fb188af4675e99a40da90ac
27d7d958c79fe067447031f573e4b3296a3021169f6f7668fedddbdd7390a158
Analyzer Verdict Alert quad9 Sinkholed
GET /v2/js/cufon.js?ux=298 HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:07 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
Last-Modified: Tue, 14 Mar 2023 00:04:58 GMT
ETag: W/"4758-5f6d0fa67cd2e"
Content-Encoding: gzip
217.195.197.85/v2/js/swfobject.js?ux=298
200 OK 3.9 kB URL GET HTTP/1.1 217.195.197.85/v2/js/swfobject.js?ux=298
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type ASCII text, with very long lines (10071)
Hash f2b8e1fd56409db445af9f23da8cfc0a
63cf680ae8fdad3634de9c73116011439877c1db
e3d90d2d066815482da4f84e9791491d45f4c17dd1ac425fa12847c220141dc4
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /v2/js/swfobject.js?ux=298 HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:07 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
Last-Modified: Tue, 14 Mar 2023 00:04:58 GMT
ETag: W/"27ee-5f6d0fa669c7e"
Content-Encoding: gzip
217.195.197.85/v2/js/jquery.formstyler.min.js?ux=298
200 OK 2.9 kB URL GET HTTP/1.1 217.195.197.85/v2/js/jquery.formstyler.min.js?ux=298
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type ASCII text, with very long lines (551), with CRLF line terminators
Hash 3294c77a96859a100fb81a52a6d27491
f7f89f9122619e40f5b921b28809d81966ce4792
c3db1f4dfef9db3cf3f506f29da51ac52f85428279befe2cf9785ffc446bc864
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /v2/js/jquery.formstyler.min.js?ux=298 HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:07 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
Last-Modified: Tue, 14 Mar 2023 00:04:58 GMT
ETag: W/"2781-5f6d0fa679e4e"
Content-Encoding: gzip
217.195.197.85/v2/js/main.js?ux=298
200 OK 2.5 kB URL GET HTTP/1.1 217.195.197.85/v2/js/main.js?ux=298
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type ASCII text, with CRLF line terminators
Hash 1b0c0cd6206d85e0b967f03133aa9bfa
860d88551cb211d542d437744381fa6678308164
23334e15e4cad4b20bc27776b6932971bc1218c0be74ac5d715c1bbb790fc471
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /v2/js/main.js?ux=298 HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:07 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
Last-Modified: Tue, 14 Mar 2023 00:04:58 GMT
ETag: W/"267d-5f6d0fa66b7d6"
Content-Encoding: gzip
217.195.197.85/v2/style/index2d42.css?ux=1546806283
200 OK 2.9 kB URL GET HTTP/1.1 217.195.197.85/v2/style/index2d42.css?ux=1546806283
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
Hash 0ba00be3e2d14a66c86127de98f3b5c3
2c2c89b380f50fdb88f79ee18e09378d2704d037
adaa95526a05b8bd8d78d146b2061f5ec294eb6154eaed3b6ad071ce1e0ca753
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /v2/style/index2d42.css?ux=1546806283 HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:07 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
Last-Modified: Tue, 14 Mar 2023 00:04:58 GMT
ETag: W/"3cb1-5f6d0fa681766"
Content-Encoding: gzip
217.195.197.85/js/simple_alt.js?ux=298
200 OK 1.5 kB URL GET HTTP/1.1 217.195.197.85/js/simple_alt.js?ux=298
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash 6f0c3a835d898c3ec0a0d581e6539277
4f0daa408d08acc31345176dacee614836f6e7f6
f74a3944bb817d721dabf6c313e8a8abc077d30a1d9f76c17baba9c6717c93fd
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /js/simple_alt.js?ux=298 HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:07 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
Last-Modified: Tue, 14 Mar 2023 00:04:16 GMT
ETag: W/"1428-5f6d0f7ee226c"
Content-Encoding: gzip
217.195.197.85/v2/style/maine2db.css?ux=298
200 OK 9.1 kB URL GET HTTP/1.1 217.195.197.85/v2/style/maine2db.css?ux=298
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
Hash e1ec90c3383d54870f240243f2107693
2a6f5cc0e69eb0fdb89a384cb57f975897507ae5
5e070bc39880d0d6dbb46f41b3347f6a214f0137ab7490848a6a4d8204e242db
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /v2/style/maine2db.css?ux=298 HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:07 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
Last-Modified: Tue, 14 Mar 2023 00:04:58 GMT
ETag: W/"fb08-5f6d0fa684646"
Content-Encoding: gzip
217.195.197.85/v2/style/main.css?ux=298
200 OK 6.6 kB URL GET HTTP/1.1 217.195.197.85/v2/style/main.css?ux=298
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type Unicode text, UTF-8 text, with CRLF line terminators
Hash 8ad843e8e3666db4a35f42c016c1ea18
0164e569585283dbad07d2dec5fe3cf544ba45b0
d975142f4ac5dcc421baf76398b6dfc4663d19dae3dee1f28a677ccc5fe3cbc4
Analyzer Verdict Alert quad9 Sinkholed
GET /v2/style/main.css?ux=298 HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:07 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
Last-Modified: Tue, 14 Mar 2023 00:04:58 GMT
ETag: W/"adcc-5f6d0fa68f226"
Content-Encoding: gzip
217.195.197.85/v2/js/jquery.powertip.min.js?ux=298
200 OK 3.5 kB URL GET HTTP/1.1 217.195.197.85/v2/js/jquery.powertip.min.js?ux=298
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type ASCII text, with very long lines (9151)
Hash 552fb989c1ec3b175f80f54865cd6709
1ceeac3c74ac25f2831d3e2b38ca4635ce08c4ff
24c03e06f6afda7aea231950a9391ae84f0fc6a8d2816326ff9c7867c11f7b2b
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /v2/js/jquery.powertip.min.js?ux=298 HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:07 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
Last-Modified: Tue, 14 Mar 2023 00:04:58 GMT
ETag: W/"2566-5f6d0fa67197e"
Content-Encoding: gzip
217.195.197.85/v2/style/jquery.formstyler.css?ux=298
200 OK 1.5 kB URL GET HTTP/1.1 217.195.197.85/v2/style/jquery.formstyler.css?ux=298
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type ASCII text, with CRLF line terminators
Hash 96366cbb61b1517ae8ac43882eaf9c9b
575a213ee56b7f5f18e45c63b982ae494f0a563c
00c2a081d772cd27afb55652187703b414263e401a38263444732fd0abc9004a
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /v2/style/jquery.formstyler.css?ux=298 HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:07 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
Last-Modified: Tue, 14 Mar 2023 00:04:58 GMT
ETag: W/"1605-5f6d0fa69154e"
Content-Encoding: gzip
217.195.197.85/js/jquery-ui.js?ux=298
200 OK 133 kB URL GET HTTP/1.1 217.195.197.85/js/jquery-ui.js?ux=298
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type ASCII text, with very long lines (1003), with CRLF line terminators
Size 133 kB (133441 bytes)
Hash 6eb2d518f8d459456a1ca0173dfb3c20
482fbf27ed2eb499a4fa017c29e131bcb2d839f4
26127cebe0a72a1e5a1ba46432258a970b71525f6c6008cb460ed22492e14002
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /js/jquery-ui.js?ux=298 HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:07 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
Last-Modified: Tue, 14 Mar 2023 00:04:16 GMT
ETag: W/"b244d-5f6d0f7e6db24"
Content-Encoding: gzip
217.195.197.85/v2/style/jquery.powertip.css?ux=298
200 OK 230 B URL GET HTTP/1.1 217.195.197.85/v2/style/jquery.powertip.css?ux=298
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
Hash 7c2a6534b6d2d43ddef8198269d877a6
2287724ce6e5057735224b71a25b885b3fa9190a
bb8fe054fc45d4784c1332700f2867423a3c66ea5f98d21099187d9248e98d8a
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /v2/style/jquery.powertip.css?ux=298 HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:07 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
Last-Modified: Tue, 14 Mar 2023 00:04:58 GMT
ETag: W/"2f3-5f6d0fa692106"
Content-Encoding: gzip
217.195.197.85/v2/fonts/PTSans_400-PTSans_700.font.js?ux=298
200 OK 49 kB URL GET HTTP/1.1 217.195.197.85/v2/fonts/PTSans_400-PTSans_700.font.js?ux=298
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type ISO-8859 text, with very long lines (63886)
Hash f9b73d416c7e356b2d41bc9ba525494a
7b2c0c6860b15e8c3873d18f400ff0ab52f4f53a
b257085a0a49321bf92e517623824a992c9b44d2d596ce65a10d102f2f29efe7
Analyzer Verdict Alert quad9 Sinkholed
GET /v2/fonts/PTSans_400-PTSans_700.font.js?ux=298 HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:07 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
Last-Modified: Tue, 14 Mar 2023 00:04:56 GMT
ETag: W/"33b74-5f6d0fa4a812e"
Content-Encoding: gzip
217.195.197.85/v2/style/index.css?ux=298
200 OK 2.9 kB URL GET HTTP/1.1 217.195.197.85/v2/style/index.css?ux=298
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type ASCII text, with CRLF line terminators
Hash 07a6d06e3a1f310b68a49eb199de64a9
904ee0e1369337926416c4e5a845a991158ef65f
2b53e59916576ee7031b16bb972759bf968831613b98473aff0fa5e26ac80ef7
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /v2/style/index.css?ux=298 HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:07 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
Last-Modified: Tue, 14 Mar 2023 00:04:58 GMT
ETag: W/"4013-5f6d0fa693c5e"
Content-Encoding: gzip
217.195.197.85/images/m_dmd.gif
200 OK 298 B URL GET HTTP/1.1 217.195.197.85/images/m_dmd.gif
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type GIF image data, version 89a, 11 x 11\012- data
Hash 785e5dde612e1c92403df1bab5d9b6a2
7d33d7e198bc941cd048c102d71be065fbbc4f3b
01b2621c588405844d77c9fbc7dd5460f82b4cbaae7f04ae7e487aa7b7c42f42
Analyzer Verdict Alert quad9 Sinkholed
GET /images/m_dmd.gif HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:07 GMT
Content-Type: image/gif
Content-Length: 298
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Mon, 13 Mar 2023 23:39:54 GMT
ETag: "12a-5f6d0a0c0f2ee"
Accept-Ranges: bytes
217.195.197.85/images/m_game3.gif
200 OK 190 B URL GET HTTP/1.1 217.195.197.85/images/m_game3.gif
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type GIF image data, version 89a, 11 x 11\012- data
Hash 55d51f2e5efb5a50f5da6e33dd2aa1fa
bd64092fa2283fb8a35e593319308da356f93f97
5b295c05555430aa3a2d15ab070d4faf38dbd543c7e161c3e361cc5085e26814
Analyzer Verdict Alert quad9 Sinkholed
GET /images/m_game3.gif HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:07 GMT
Content-Type: image/gif
Content-Length: 190
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Mon, 13 Mar 2023 23:39:54 GMT
ETag: "be-5f6d0a0c09146"
Accept-Ranges: bytes
217.195.197.85/images/player_info.gif
200 OK 122 B URL GET HTTP/1.1 217.195.197.85/images/player_info.gif
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type GIF image data, version 89a, 10 x 10\012- data
Hash 00352f32adc9662a17fa4d3e59c59bcf
1245bd0077c1eb86fb2ebbb124fdfe24a3b5a308
11011bbf0d3cb26e0fceafca878f9b4c4f2e6f8c9c3a16ac3596bf728a9e13aa
Analyzer Verdict Alert quad9 Sinkholed
GET /images/player_info.gif HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:07 GMT
Content-Type: image/gif
Content-Length: 122
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Mon, 13 Mar 2023 23:40:05 GMT
ETag: "7a-5f6d0a167d97f"
Accept-Ranges: bytes
217.195.197.85/images/data/clans/RAKI-YENI-RAKI-UZUN-DEMLEME.gif
200 OK 872 B URL GET HTTP/1.1 217.195.197.85/images/data/clans/RAKI-YENI-RAKI-UZUN-DEMLEME.gif
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 13x13, components 3\012- data
Hash bdc8aaa6ada4bc8731f3e3e6c260382d
608df1b224dc581cb60895dac739cbcd9091ba8d
f111b1cac867030da428d58880162c11a952346c0d685516cc0ea7ee53a6ff1f
Analyzer Verdict Alert quad9 Sinkholed
GET /images/data/clans/RAKI-YENI-RAKI-UZUN-DEMLEME.gif HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:07 GMT
Content-Type: image/gif
Content-Length: 872
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Mon, 13 Mar 2023 23:59:47 GMT
ETag: "368-5f6d0e7dff73f"
Accept-Ranges: bytes
217.195.197.85/images/data/areas/unmagic_rose.jpg
200 OK 12 kB URL GET HTTP/1.1 217.195.197.85/images/data/areas/unmagic_rose.jpg
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 282x82, components 3\012- data
Hash c25e8157327777cd3c716262e5691995
07b7224b50065209a95d49d83c7af9ebc29d1757
04a92b2a19d916b66535ed4182ce33010ee5efe4e2e0ef71abae659fc0ad775e
Analyzer Verdict Alert quad9 Sinkholed
GET /images/data/areas/unmagic_rose.jpg HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:07 GMT
Content-Type: image/jpeg
Content-Length: 11743
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Mon, 13 Mar 2023 23:53:36 GMT
ETag: "2ddf-5f6d0d1bed9a6"
Accept-Ranges: bytes
www.dwarofraces.com.tr/images/data/clans/anka.png
403 Forbidden 2.3 kB URL GET HTTP/3 www.dwarofraces.com.tr/images/data/clans/anka.png
IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint20:3D:27:50:E6:45:21:01:FD:2C:AC:1A:74:69:40:8A:0D:6A:68:F9
ValiditySun, 19 Mar 2023 00:00:00 GMT - Mon, 18 Mar 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (501)
Hash 3ab3f1d03c644272528383d79a62f35d
be176993487e0b4335405c8c3666a1dc8f2eca6e
26e44010ee6706f1c8d303a31f90fb798b87df07b4cf393d2d862902a4e17103
GET /images/data/clans/anka.png HTTP/1.1
Host: www.dwarofraces.com.tr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 403 Forbidden
date: Sun, 21 May 2023 22:08:07 GMT
content-type: text/html; charset=UTF-8
vary: Referer, Accept-Encoding
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pP91n85%2BL5NC3KfYvkKF4olZTyJDJX013Twc3kFClkgZ4KQay5qyymHZ7REwA%2BQHx3sgp7FYkthiQ057KOJgKyKFSsOgPqhWSbE7T1P6lupAmKdW%2FlzzGS3s%2FOGslVpundZwgQIZU5rn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cb022e01a69b523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=AW-824091668
200 OK 53 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=AW-824091668
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint55:51:32:58:36:72:A1:C8:50:5E:5A:8D:CE:A5:2F:DC:D7:1E:62:03
ValidityMon, 24 Apr 2023 11:56:06 GMT - Mon, 17 Jul 2023 11:56:05 GMT
File type ASCII text, with very long lines (2271)
Hash 92bc7fd52432f907646fa037b631634a
d2c289f1255bcebcbe35e4b3bf4d0dc87deb0a0e
d4008c3621f2686c4fdf967e0aeb56f6df69bb4287ad602a71d6c839d57275fc
GET /gtag/js?id=AW-824091668 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://217.195.197.85/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 21 May 2023 22:08:08 GMT
expires: Sun, 21 May 2023 22:08:08 GMT
cache-control: private, max-age=900
last-modified: Sun, 21 May 2023 21:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 53401
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
217.195.197.85/images/data/clans/anka.png
200 OK 2.7 kB URL GET HTTP/1.1 217.195.197.85/images/data/clans/anka.png
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type PNG image data, 25 x 25, 8-bit/color RGBA, interlaced\012- data
Hash 59441adbefaa24875d72bc92581ca4b2
5dca986374343c2b7f4e7be6bd8bf5f3dc1c9299
2e415abc6a41c9d6831326f00c5e364346e7152a1cdd1e6c241cff17651c1dae
Analyzer Verdict Alert quad9 Sinkholed
GET /images/data/clans/anka.png HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:08 GMT
Content-Type: image/png
Content-Length: 2677
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Mon, 13 Mar 2023 23:59:47 GMT
ETag: "a75-5f6d0e7e630ff"
Accept-Ranges: bytes
217.195.197.85/images/plus_ma.png
200 OK 346 B URL GET HTTP/1.1 217.195.197.85/images/plus_ma.png
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 174ab45f310fbb9ea2f2ec0e49f0586f
1abe2564d7e3928fba5246ffd1d6a7d8450fde8e
755f0e4bd0220325af93bad60a95fc50a2752cd6044ce7052f66575e08100258
Analyzer Verdict Alert quad9 Sinkholed
GET /images/plus_ma.png HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:08 GMT
Content-Type: image/png
Content-Length: 346
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Mon, 13 Mar 2023 23:39:52 GMT
ETag: "15a-5f6d0a0a69106"
Accept-Ranges: bytes
217.195.197.85/images/data/clans/9x8rx6c.gif
200 OK 4.1 kB URL GET HTTP/1.1 217.195.197.85/images/data/clans/9x8rx6c.gif
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type GIF image data, version 89a, 15 x 18\012- data
Hash 8d015f7e3c7a006738edda326841c2be
1cb8ff8259285623123b968b03b8c60e6a291ed9
2cbe6463d047acea6e7c0cf1ae8c538013a3a32a0d9a72a272f1cc4da3477df8
Analyzer Verdict Alert quad9 Sinkholed
GET /images/data/clans/9x8rx6c.gif HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:08 GMT
Content-Type: image/gif
Content-Length: 4128
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Mon, 13 Mar 2023 23:59:47 GMT
ETag: "1020-5f6d0e7e2b277"
Accept-Ranges: bytes
217.195.197.85/images/d.gif
200 OK 43 B URL GET HTTP/1.1 217.195.197.85/images/d.gif
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
Analyzer Verdict Alert quad9 Sinkholed
GET /images/d.gif HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:08 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Mon, 13 Mar 2023 23:40:05 GMT
ETag: "2b-5f6d0a17431a7"
Accept-Ranges: bytes
ocsp.pki.goog/gts1c3
471 B IP
Hash e704e964bb5b3041d29c68fb02cb8543
ba61630a2b52c8218e035207224a176c8ea70710
b327e7e251d144f45d6f57d50444343e7dc666dedfeea217c65b1b32943995f6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 21 May 2023 22:08:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
217.195.197.85/js/console_log.js
200 OK 265 B URL GET HTTP/1.1 217.195.197.85/js/console_log.js
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
Hash 3c8a2db081daacfaee0beeb423628d30
f7d88e6eaf6af1088b20ce1fc111fbdae509afb9
e3466ecffb0ce2b8a41cbdb4979b2e727478030d283db99432af088ebdf189b6
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /js/console_log.js HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:08 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
Last-Modified: Tue, 14 Mar 2023 00:04:16 GMT
ETag: W/"4bb-5f6d0f7eb01a4"
Content-Encoding: gzip
217.195.197.85/images/fk_ba/shopier.png
200 OK 2.6 kB URL GET HTTP/1.1 217.195.197.85/images/fk_ba/shopier.png
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type PNG image data, 128 x 39, 8-bit colormap, interlaced\012- data
Hash b770fd8bfb52d2798c3ee3c22e80ed7e
58421c5891a362c37936752ad1236a26292fafe9
3cc89c983cbcd5a6cc2bd739e8f323eafe14a619e58c284149a4e94367021082
Analyzer Verdict Alert quad9 Sinkholed
GET /images/fk_ba/shopier.png HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:08 GMT
Content-Type: image/png
Content-Length: 2635
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Tue, 14 Mar 2023 00:03:59 GMT
ETag: "a4b-5f6d0f6e20d83"
Accept-Ranges: bytes
217.195.197.85/images/data/clans/revenge.gif
200 OK 883 B URL GET HTTP/1.1 217.195.197.85/images/data/clans/revenge.gif
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type GIF image data, version 89a, 13 x 13\012- data
Hash f8b0161627f8a422e025ddd83d896fdb
20163a5ae8bce47dcae2c2554aaea4b94f9defbc
87eab890817b4edc41692e1839287ea64b94c8488bdb988ded08ed3c741997bf
Analyzer Verdict Alert quad9 Sinkholed
GET /images/data/clans/revenge.gif HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:08 GMT
Content-Type: image/gif
Content-Length: 883
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Sat, 25 Mar 2023 15:11:42 GMT
ETag: "373-5f7baed69d46b"
Accept-Ranges: bytes
217.195.197.85/images/data/clans/Diamond.jpeg
200 OK 852 B URL GET HTTP/1.1 217.195.197.85/images/data/clans/Diamond.jpeg
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 13x13, components 3\012- data
Hash ea355ea4e166300ea302f298c6d80840
921f4c4f6e3b3c97ac4fb17a72cf13ba37c43958
0127312ab2019b57e84469985ddf54520a8d3b9bb1de9c756f1bd0c78e795049
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /images/data/clans/Diamond.jpeg HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:08 GMT
Content-Type: image/jpeg
Content-Length: 852
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Wed, 15 Mar 2023 16:50:53 GMT
ETag: "354-5f6f325b52669"
Accept-Ranges: bytes
217.195.197.85/images/data/clans/6293161.png
200 OK 535 B URL GET HTTP/1.1 217.195.197.85/images/data/clans/6293161.png
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type PNG image data, 13 x 12, 8-bit/color RGBA, non-interlaced\012- data
Hash ed7fa3b7d2244ecd6158693ce2d0da37
1d10d2b4e0464e7c5cc696f574edbbd4c5d57c50
139cc878f664140f27f51d9ef32b14613dfde80870ca4b6b2146e1f3d2846c63
Analyzer Verdict Alert quad9 Sinkholed
GET /images/data/clans/6293161.png HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:08 GMT
Content-Type: image/png
Content-Length: 535
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Mon, 13 Mar 2023 23:59:47 GMT
ETag: "217-5f6d0e7def957"
Accept-Ranges: bytes
www.dwarofraces.com.tr/images/ranks/rank12.gif
403 Forbidden 18 kB URL GET HTTP/2 www.dwarofraces.com.tr/images/ranks/rank12.gif
IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint20:3D:27:50:E6:45:21:01:FD:2C:AC:1A:74:69:40:8A:0D:6A:68:F9
ValiditySun, 19 Mar 2023 00:00:00 GMT - Mon, 18 Mar 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (501)
Hash dfef69882f71e9335637e1cca5d6a35e
0ed29335b93f5a93a8b7c0460de8914d32bcd307
aa2ccf916e5b3bc1579315a504e495eae8153f0eab0e44355d75c114d006ef04
GET /images/ranks/rank12.gif HTTP/1.1
Host: www.dwarofraces.com.tr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 403 Forbidden
date: Sun, 21 May 2023 22:08:08 GMT
content-type: text/html; charset=UTF-8
vary: Referer, Accept-Encoding
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FiiEtMwFmfJFMDJFXIJEn%2FX0Re1JMYC2tYYPIDLKiphGrzBZ2BcP2eXHOmi6fzhj%2BxYn9JILA5OwzBdF1ASY1jM%2BSlI2Bi71x3aFyNKh43ezuXv779pbBcgbjxbVId5mClwcnSMjUmgB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cb022e63872b515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
www.dwarofraces.com.tr/images/ranks/rank15.gif
403 Forbidden 12 kB URL GET HTTP/3 www.dwarofraces.com.tr/images/ranks/rank15.gif
IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint20:3D:27:50:E6:45:21:01:FD:2C:AC:1A:74:69:40:8A:0D:6A:68:F9
ValiditySun, 19 Mar 2023 00:00:00 GMT - Mon, 18 Mar 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (501)
Hash d1649334c663c2203cd3d709a87747ba
faf961d3706a0a43b8b67b95cfe63342d9b3217c
5d76d7fb8ed03d00b8be40ab597c94629b094c542a97b27b13105e59c2e25b99
GET /images/ranks/rank15.gif HTTP/1.1
Host: www.dwarofraces.com.tr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 403 Forbidden
date: Sun, 21 May 2023 22:08:08 GMT
content-type: text/html; charset=UTF-8
vary: Referer, Accept-Encoding
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gPN5XR7VQFaTHNPTw%2FqcYuOS7a%2FsnXeGviXvZvxVKgL8aiWVujiiFN3banZbG5n4T1piGaxV%2FHvTOc7SflqLCipSWyHRyW%2BRfI7ZdT5SZZsAcEaeRkkRTJGv9lTjwbwlTui%2FiiKf9EVD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cb022e62862b515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
217.195.197.85/images/frames/main-l.jpg
200 OK 992 B URL GET HTTP/1.1 217.195.197.85/images/frames/main-l.jpg
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 14x126, components 3\012- data
Hash 473b06807260b7619de59653c4ab83d7
ee8c143635fa3a764deda00b4fe15ad8890ce357
2797e9ac069bd4c69ef3d56ab240eca3657c4f97208a2cfcc0d1358f73bd52d3
Analyzer Verdict Alert quad9 Sinkholed
GET /images/frames/main-l.jpg HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/v2/style/main.css?ux=298
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:08 GMT
Content-Type: image/jpeg
Content-Length: 992
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Tue, 14 Mar 2023 00:04:00 GMT
ETag: "3e0-5f6d0f6f2e21b"
Accept-Ranges: bytes
www.dwarofraces.com.tr/images/data/clans/anka.png
403 Forbidden 4.7 kB URL GET HTTP/3 www.dwarofraces.com.tr/images/data/clans/anka.png
IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint20:3D:27:50:E6:45:21:01:FD:2C:AC:1A:74:69:40:8A:0D:6A:68:F9
ValiditySun, 19 Mar 2023 00:00:00 GMT - Mon, 18 Mar 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (501)
Hash a413a35b35348d81a697cf263505b3f3
7f7599c2c82826d0338788d1eb9b088a24513c47
4b972998eb23e77ed44a7011351a00d0c34b56e772408a9a5649fb03773dfecb
GET /images/data/clans/anka.png HTTP/1.1
Host: www.dwarofraces.com.tr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 403 Forbidden
date: Sun, 21 May 2023 22:08:08 GMT
content-type: text/html; charset=UTF-8
vary: Referer, Accept-Encoding
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=z1KHuhDU5fLda%2F4RkM8v1Hcss%2FY%2FeJbab6mKP3iQkqio17oDt5GBozk%2BSqm5IHyA4%2BJC0RFH2P%2FH7Og3ljPUpQR%2FH%2B3gaEwCVqB%2BJk2Knx2fMaI7qvLkTRAzOc%2FWU9xsUWll708h9zqa"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cb022e61859b515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
www.dwarofraces.com.tr/images/exp/exp18.png
403 Forbidden 123 kB URL GET HTTP/2 www.dwarofraces.com.tr/images/exp/exp18.png
IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint20:3D:27:50:E6:45:21:01:FD:2C:AC:1A:74:69:40:8A:0D:6A:68:F9
ValiditySun, 19 Mar 2023 00:00:00 GMT - Mon, 18 Mar 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (501)
Size 123 kB (122863 bytes)
Hash 19c4c9732cc61287686329eb2b19b1e8
f0572c9d546c8fa63727a4c688bd2df7b1c6db4c
5883951fae9e5ec60b3d88820bb9e83b6f00804862a8820f9c1a0e78befe379a
GET /images/exp/exp18.png HTTP/1.1
Host: www.dwarofraces.com.tr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 403 Forbidden
date: Sun, 21 May 2023 22:08:08 GMT
content-type: text/html; charset=UTF-8
vary: Referer, Accept-Encoding
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MPDKiuS9ncDsORSgGEDcNfsNTzeAtb6ECoe%2Be6bcyWwR8aY0udTBV1atXapfmL50b4N8CaIdzaJS0tPwLk8J%2FY5vnF2MYkxe7Z3WA1OMQEDsTUMGzsLvgLi%2FMv6GQdHAY%2FjH40v%2BAMCY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cb022e62864b515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
www.dwarofraces.com.tr/images/ranks/rank13.gif
403 Forbidden 2.8 kB URL GET HTTP/3 www.dwarofraces.com.tr/images/ranks/rank13.gif
IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint20:3D:27:50:E6:45:21:01:FD:2C:AC:1A:74:69:40:8A:0D:6A:68:F9
ValiditySun, 19 Mar 2023 00:00:00 GMT - Mon, 18 Mar 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (501)
Hash 0422d11503b8a5c0b2ebdcd23b287b21
86112de7d47d56edf305581fcc6a4ef1a361e7b0
2b4807262dc1ac667445b78610301fe4a8d6c001b53dd5a27019f17e3addca83
GET /images/ranks/rank13.gif HTTP/1.1
Host: www.dwarofraces.com.tr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 403 Forbidden
date: Sun, 21 May 2023 22:08:08 GMT
content-type: text/html; charset=UTF-8
vary: Referer, Accept-Encoding
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vQk76gKKd5fyPTwXPudWYZC9%2BCGq0YoTMlE8OTK82BXGX5%2F%2F6ojltS%2BVyXDZ3y9TuBi0HNTdK%2FwG62mzZ5hIGMCV8we3DfulL98ReBx8Hw3jC6jO12L%2F30DZ8PcgDL13oTrvnXG8kVEm"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cb022e6488db515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
www.dwarofraces.com.tr/images/data/clans/9x8rx6c.gif
403 Forbidden 2.8 kB URL GET HTTP/3 www.dwarofraces.com.tr/images/data/clans/9x8rx6c.gif
IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint20:3D:27:50:E6:45:21:01:FD:2C:AC:1A:74:69:40:8A:0D:6A:68:F9
ValiditySun, 19 Mar 2023 00:00:00 GMT - Mon, 18 Mar 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (501)
Hash ca6639ef3eed6bc37ec7b172aead5107
26560a431d788476779e0bd5b65cd0c8444818b2
6c760a7443fa07d49b4d438d8a092c53a6d48b093aa29b4740b40d1e8e620465
GET /images/data/clans/9x8rx6c.gif HTTP/1.1
Host: www.dwarofraces.com.tr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 403 Forbidden
date: Sun, 21 May 2023 22:08:08 GMT
content-type: text/html; charset=UTF-8
vary: Referer, Accept-Encoding
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5xOvO9OBWEiFNlQaLufbSKzFGHHtUlT%2F44uM2Vj3WP4S40DkdnmNtJjqx4ld77FgEWWJJnCvtKwxY4yWAnEoYlLA1SFYKQRUmvBkITGkE1EKo3bovjmlEiBlnotAd2lua6MovgRKqhMP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cb022e64891b515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
www.dwarofraces.com.tr/images/data/clans/6293161.png
403 Forbidden 22 kB URL GET HTTP/3 www.dwarofraces.com.tr/images/data/clans/6293161.png
IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint20:3D:27:50:E6:45:21:01:FD:2C:AC:1A:74:69:40:8A:0D:6A:68:F9
ValiditySun, 19 Mar 2023 00:00:00 GMT - Mon, 18 Mar 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (501)
Hash 01ff35cbcc145a3de7875e1b73b4a688
5c67fa6af10a21ade1e93aeaa9bfa2df3f5486d0
6cf1981e63556496ef06c13c91b5e454c6e12f71c97b086635ad733d9ec8692b
GET /images/data/clans/6293161.png HTTP/1.1
Host: www.dwarofraces.com.tr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 403 Forbidden
date: Sun, 21 May 2023 22:08:08 GMT
content-type: text/html; charset=UTF-8
vary: Referer, Accept-Encoding
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KRJQ6kXKglg7FvQe9W0zxMEKrdXEOMDeq0Ug5pWrDLvZQXZJnL4kATBtDIFMoSk1jlQ1ydbBZb%2FK%2FlRuwA%2FB2Gt4wiZzms4%2FEJgFGdhid08fY1%2Bv216XX40SDhYb5Zz4cGNVEIvKfeXE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cb022e62868b515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
www.dwarofraces.com.tr/images/ranks/rank11.gif
403 Forbidden 5.6 kB URL GET HTTP/3 www.dwarofraces.com.tr/images/ranks/rank11.gif
IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint20:3D:27:50:E6:45:21:01:FD:2C:AC:1A:74:69:40:8A:0D:6A:68:F9
ValiditySun, 19 Mar 2023 00:00:00 GMT - Mon, 18 Mar 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (501)
Hash 564c8b25c0851091a4af655e7975cc21
8780990fe1b9f996894ea565da8563bd4ab8a3c7
df4a83f96e2e745c3a810aaabc87edce1bdbe84e12b9b52c352413c896d3bcd4
GET /images/ranks/rank11.gif HTTP/1.1
Host: www.dwarofraces.com.tr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 403 Forbidden
date: Sun, 21 May 2023 22:08:08 GMT
content-type: text/html; charset=UTF-8
vary: Referer, Accept-Encoding
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pr5yS0a2lzPvLMLPKdFbA%2FgvbBxFHACJJovp9luWogf2AioZaqsKqZJdPlq%2BNmRmWAJ8%2BEamoVFvsJ9MS2BNfHEoP52kvOrITSO3H6ZDf09DLYXUdio1G2%2FwLpgfWtKEvgBQ2rcGBvXh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cb022e6489ab515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
www.dwarofraces.com.tr/images/exp/exp17.png
403 Forbidden 7.6 kB URL GET HTTP/2 www.dwarofraces.com.tr/images/exp/exp17.png
IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint20:3D:27:50:E6:45:21:01:FD:2C:AC:1A:74:69:40:8A:0D:6A:68:F9
ValiditySun, 19 Mar 2023 00:00:00 GMT - Mon, 18 Mar 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (501)
Hash 6968538d791d8c4ede28fb2586b275ee
42d17d100583a1834942c7d37e04ce57bd3aa077
84c45b2a5949ce9ce31a42337db4046988ce1b3e3ab7197d29cbb76133c1074a
GET /images/exp/exp17.png HTTP/1.1
Host: www.dwarofraces.com.tr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 403 Forbidden
date: Sun, 21 May 2023 22:08:07 GMT
content-type: text/html; charset=UTF-8
vary: Referer, Accept-Encoding
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Jcv0kjVsvv0%2Bk42bMxPCxXjI4UFKTUi4fjDozyB94vKCKkpKCLVFwjItyO3wmoYG6dQC525sf4cCDCJYGajKlDy9xZ97ZBJKA9ok8QQfu1Shx2ob2292krdYhmd%2FXJqpaRte6ff3KIBZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cb022dffa40b523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.dwarofraces.com.tr/images/mentor.gif
403 Forbidden 45 kB URL GET HTTP/3 www.dwarofraces.com.tr/images/mentor.gif
IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint20:3D:27:50:E6:45:21:01:FD:2C:AC:1A:74:69:40:8A:0D:6A:68:F9
ValiditySun, 19 Mar 2023 00:00:00 GMT - Mon, 18 Mar 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (501)
Hash f686c71347cacc7dcf08d0a58a6dae5b
1cccfac475c831a8d6afa11983174a3b7dc45350
1ae4af12af3ce5b41e3afd3af66ff61437be8bdf3d297e51aa54e588dba91d94
GET /images/mentor.gif HTTP/1.1
Host: www.dwarofraces.com.tr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 403 Forbidden
date: Sun, 21 May 2023 22:08:08 GMT
content-type: text/html; charset=UTF-8
vary: Referer, Accept-Encoding
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PfjpWkiZsG5jxIlfGWv7rRlsvvmDTx9%2FAvYjur2Iwfiru%2BXH5ZWciv%2BR3diXt4qwPWwS5tEAxp%2FgqIjK4lxTCt7T0jf7SF3rFdHp8dfI7lVu7Xr1Nor2RGhbpf0O4SeW9%2Bi3WLorMN7q"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cb022e63873b515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
www.dwarofraces.com.tr/images/data/clans/8585223.gif
403 Forbidden 30 kB URL GET HTTP/2 www.dwarofraces.com.tr/images/data/clans/8585223.gif
IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint20:3D:27:50:E6:45:21:01:FD:2C:AC:1A:74:69:40:8A:0D:6A:68:F9
ValiditySun, 19 Mar 2023 00:00:00 GMT - Mon, 18 Mar 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (501)
Hash 32cfc0ec07c649948747fab6dfd7944b
589b1ee84b61ac50cbd169ee1a167e2b45d3f7e4
99dc21ec0f35d229db5dd09069d642f5fab5ce445bac6162ae6478e7e353fcfa
GET /images/data/clans/8585223.gif HTTP/1.1
Host: www.dwarofraces.com.tr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 403 Forbidden
date: Sun, 21 May 2023 22:08:08 GMT
content-type: text/html; charset=UTF-8
vary: Referer, Accept-Encoding
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PQKiIS8%2Fg96HpjvsfA2QLdHoKYfU7Lcv9rWjzqIVwlO6PXITA4hOvbkpXaJiKGU2nP64ouo7PldIfEOnZaRpJRGdaDptV4W%2FHADNvqCmiykSAy95izmo9BVttAMRiuICmw7Ot63c54oA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cb022e678d2b515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
www.dwarofraces.com.tr/images/ranks/rank8.gif
403 Forbidden 5.5 kB URL GET HTTP/3 www.dwarofraces.com.tr/images/ranks/rank8.gif
IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint20:3D:27:50:E6:45:21:01:FD:2C:AC:1A:74:69:40:8A:0D:6A:68:F9
ValiditySun, 19 Mar 2023 00:00:00 GMT - Mon, 18 Mar 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (501)
Hash 27f0d9bdda86ad8eec78946a146e1b44
bba24cd4d6ade700e686b85ff203b580cf544e04
3e0050e5408cbe6c49dd1d961be75a0a6974e7698769a99e1a54046166a4a9c2
GET /images/ranks/rank8.gif HTTP/1.1
Host: www.dwarofraces.com.tr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 403 Forbidden
date: Sun, 21 May 2023 22:08:07 GMT
content-type: text/html; charset=UTF-8
vary: Referer, Accept-Encoding
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=r1EuhBqnq7gOsK9p8iVx%2BqNN2vo8rGsxB%2BVzSGHHMAx4z3T%2F3TNUDN%2BT84sj29M7l6kUK5sBEi0gse1FWnLsjzRr4UhTHxgxbD5Vcl0OLt1fjItDWsbReHfbP4blUdbc7uZTdMQItksl"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cb022dffa30b523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.dwarofraces.com.tr/images/data/clans/Diamond.jpeg
403 Forbidden 14 kB URL GET HTTP/2 www.dwarofraces.com.tr/images/data/clans/Diamond.jpeg
IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint20:3D:27:50:E6:45:21:01:FD:2C:AC:1A:74:69:40:8A:0D:6A:68:F9
ValiditySun, 19 Mar 2023 00:00:00 GMT - Mon, 18 Mar 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (501)
Hash 47cdcdb63d98c3935dd6e03bf7d1d54c
36f69cac993a24dc6f1abceab4d5b3ded768bd58
549819e2c3dfe31d0fabb9c34ba0399630d631a8a38e5ca94ffe3ce15bfa351e
GET /images/data/clans/Diamond.jpeg HTTP/1.1
Host: www.dwarofraces.com.tr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 403 Forbidden
date: Sun, 21 May 2023 22:08:08 GMT
content-type: text/html; charset=UTF-8
vary: Referer, Accept-Encoding
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fgv8bi1QT9Z2BiluOtCnN%2BMeLt1ort%2FI%2BFah0si7PX28D8C6TX5UnxUogtd9%2F%2FcRUrUasfcY4I3k64tlola3X40IYnvSwnkpyHPVo8pyGb7GDzJXtajwDhdYS3MfxmDK1r2FJDRCWIJm"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cb022e6387ab515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
www.dwarofraces.com.tr/images/ranks/rank10.gif
403 Forbidden 2.2 kB URL GET HTTP/2 www.dwarofraces.com.tr/images/ranks/rank10.gif
IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint20:3D:27:50:E6:45:21:01:FD:2C:AC:1A:74:69:40:8A:0D:6A:68:F9
ValiditySun, 19 Mar 2023 00:00:00 GMT - Mon, 18 Mar 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (501)
Hash 744c373fed2d0ce8ec7f1aa9d7d92004
8f162cc0c431a66fa125015597790f6d8443319a
05a7e33c362f9dd4984dfbf024889af3fb6800b2177b5a88f486e08f153b7431
GET /images/ranks/rank10.gif HTTP/1.1
Host: www.dwarofraces.com.tr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 403 Forbidden
date: Sun, 21 May 2023 22:08:08 GMT
content-type: text/html; charset=UTF-8
vary: Referer, Accept-Encoding
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RH4o4XTkfbHZal2pbG7xsBtU%2BxtzEZMVOTN5AmFbmGqVy38Iyb5K6YmL%2Flcwcd8yzWrdzqRYAY4IlXyuBN9NXp%2Fxk%2BeZ5HM3cbZc%2F%2BAIQbFHP2hHBEzCYYSkOMlBahzfa%2BE%2BM5YgRBlp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cb022e658a0b515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
www.dwarofraces.com.tr/images/ranks/rank7.gif
403 Forbidden 5.1 kB URL GET HTTP/3 www.dwarofraces.com.tr/images/ranks/rank7.gif
IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint20:3D:27:50:E6:45:21:01:FD:2C:AC:1A:74:69:40:8A:0D:6A:68:F9
ValiditySun, 19 Mar 2023 00:00:00 GMT - Mon, 18 Mar 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (501)
Hash 028b58619bc3ed478ce5d9026832eb10
f22e69eef6e5c339ed0aba96e8518f050a47f307
c031e2bc685db36d1cc12adef08da82acb7d725fd51b5dae4c89959ba04584f1
GET /images/ranks/rank7.gif HTTP/1.1
Host: www.dwarofraces.com.tr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 403 Forbidden
date: Sun, 21 May 2023 22:08:08 GMT
content-type: text/html; charset=UTF-8
vary: Referer, Accept-Encoding
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FBLYv3GIwc0%2BwRIIg5dgb0P8GIhKrJ6aM32QaGIaBg1o92FTgh4%2FpvXwLzGN024TPhu4J7FBZLvYqEGVgZ5l1e45hVbdUfxKVEEYjTRB%2FwMUrrs9%2FuhM2LIgSdRjC2JJIyTgDi7b%2BGZc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cb022e668c1b515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
www.dwarofraces.com.tr/images/data/bots/furija_18_small.jpg
403 Forbidden 4.2 kB URL GET HTTP/2 www.dwarofraces.com.tr/images/data/bots/furija_18_small.jpg
IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint20:3D:27:50:E6:45:21:01:FD:2C:AC:1A:74:69:40:8A:0D:6A:68:F9
ValiditySun, 19 Mar 2023 00:00:00 GMT - Mon, 18 Mar 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (501)
Hash d8adf45573e5f5aa30fb09fab4de7802
a927b90325720951ce9184f8465fb1b96695aa2f
6a3141e527aedddb9304b4e42d081518b4cc8dbfb32fed370143231c12e25ac5
GET /images/data/bots/furija_18_small.jpg HTTP/1.1
Host: www.dwarofraces.com.tr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 403 Forbidden
date: Sun, 21 May 2023 22:08:07 GMT
content-type: text/html; charset=UTF-8
vary: Referer, Accept-Encoding
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KVSa6xSUPdpCVF5vFgJuZvNevwOlj8Uy%2F2TjTt7bLt5ZbGZfOoVryPpEd36djMII9bbsx%2BWhioL%2Bs%2BRBcwHU2sB05nWBfLgvBvavmJxZdZlbZE3h50WwjYLuzB9Sq3w2UtpaFM%2FFO3zK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cb022dffa44b523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
217.195.197.85/images/frames/common-header-decor.png
200 OK 1.5 kB URL GET HTTP/1.1 217.195.197.85/images/frames/common-header-decor.png
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type PNG image data, 16 x 52, 8-bit/color RGBA, non-interlaced\012- data
Hash ed9d970c7b3e39cabaa4867ed774162f
092222845d33a42eeaa83738a5d156386d3304ee
518b5850111f3e1900af47edb9219763b9b62aecfc89055b9ed4bd61e92459bf
Analyzer Verdict Alert quad9 Sinkholed
GET /images/frames/common-header-decor.png HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/v2/style/main.css?ux=298
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:09 GMT
Content-Type: image/png
Content-Length: 1498
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Tue, 14 Mar 2023 00:04:00 GMT
ETag: "5da-5f6d0f6f0905b"
Accept-Ranges: bytes
217.195.197.85/images/frames/common-header.png
200 OK 13 kB URL GET HTTP/1.1 217.195.197.85/images/frames/common-header.png
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type PNG image data, 1000 x 68, 8-bit/color RGBA, non-interlaced\012- data
Hash 678046a70f6e2cac4e7e3d861335735e
5c308042b74d99ce0eb1101319f400331b800fef
c074ac3af2a0bb80b40e6c3220fb370b739528e0a5272cf1503829febcb60e97
Analyzer Verdict Alert quad9 Sinkholed
GET /images/frames/common-header.png HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/v2/style/main.css?ux=298
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:09 GMT
Content-Type: image/png
Content-Length: 13302
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Tue, 14 Mar 2023 00:04:00 GMT
ETag: "33f6-5f6d0f6f03a6b"
Accept-Ranges: bytes
217.195.197.85/images/frames/common-bg.png
200 OK 1.9 kB URL GET HTTP/1.1 217.195.197.85/images/frames/common-bg.png
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type PNG image data, 72 x 59, 8-bit colormap, non-interlaced\012- data
Hash 382f315eeb18b645e32238e4b0e82711
9f3ae01ef8b3169a38e79efa3a3c6f935e81f1be
74e648becbccc6a6d2dd08fa0d40915faa177b0bf203ed5ff197cc562963e022
Analyzer Verdict Alert quad9 Sinkholed
GET /images/frames/common-bg.png HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/v2/style/main.css?ux=298
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:09 GMT
Content-Type: image/png
Content-Length: 1878
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Tue, 14 Mar 2023 00:04:00 GMT
ETag: "756-5f6d0f6f3574b"
Accept-Ranges: bytes
217.195.197.85/images/frames/common-bg-l.png
200 OK 2.9 kB URL GET HTTP/1.1 217.195.197.85/images/frames/common-bg-l.png
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type PNG image data, 21 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash d6ab26f7bc7670527cd3a83feaa1f6ee
b2fb08c53cd071e34ad05d3af6ccd1f621abcea7
f68693c5407620d92369bf3f75769d427eeb59f6d09123e1abcd4973b10bd93e
Analyzer Verdict Alert quad9 Sinkholed
GET /images/frames/common-bg-l.png HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/v2/style/main.css?ux=298
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:09 GMT
Content-Type: image/png
Content-Length: 2899
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Tue, 14 Mar 2023 00:04:00 GMT
ETag: "b53-5f6d0f6f40afb"
Accept-Ranges: bytes
217.195.197.85/images/frames/common-bg-r.png
200 OK 2.9 kB URL GET HTTP/1.1 217.195.197.85/images/frames/common-bg-r.png
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type PNG image data, 21 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash 865dc1f47cfc785a7f1c4b372928c179
84ac9844c12bc31710125f2c55d8d7bdf369c906
ed7e4614fa293c0ee01169ccf979edfa82aabb5046f0260c8061d3e7b6702ba4
Analyzer Verdict Alert quad9 Sinkholed
GET /images/frames/common-bg-r.png HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/v2/style/main.css?ux=298
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:09 GMT
Content-Type: image/png
Content-Length: 2862
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Tue, 14 Mar 2023 00:04:00 GMT
ETag: "b2e-5f6d0f6f3e3eb"
Accept-Ranges: bytes
217.195.197.85/v2/images/frames/great-battles-rating.png
200 OK 12 kB URL GET HTTP/1.1 217.195.197.85/v2/images/frames/great-battles-rating.png
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type PNG image data, 1000 x 104, 8-bit/color RGBA, non-interlaced\012- data
Hash 05a5d4408e4d52d1970869abff28202f
2d85eb75ef713d23c586cc7100dcb7909f939450
c65b30ae8d8ca88d04dab4208a61cb92f0594ee00f06c840e0509c0dadf6ab23
Analyzer Verdict Alert quad9 Sinkholed
GET /v2/images/frames/great-battles-rating.png HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/v2/style/index2d42.css?ux=1546806283
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:09 GMT
Content-Type: image/png
Content-Length: 11677
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Tue, 14 Mar 2023 00:04:57 GMT
ETag: "2d9d-5f6d0fa5cd496"
Accept-Ranges: bytes
217.195.197.85/v2/images/bg-great-battles-races.png
200 OK 5.5 kB URL GET HTTP/1.1 217.195.197.85/v2/images/bg-great-battles-races.png
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type PNG image data, 39 x 76, 8-bit/color RGBA, non-interlaced\012- data
Hash f94c760567aec4e8f005e09022a0206d
78a03cf93404430f56cedb358fc14ff3d6da6681
d0cf51d4df76af5a3a2f129125ec45fc8342e5359f1350617cd419168c162fd6
Analyzer Verdict Alert quad9 Sinkholed
GET /v2/images/bg-great-battles-races.png HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/v2/style/index2d42.css?ux=1546806283
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:09 GMT
Content-Type: image/png
Content-Length: 5514
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Tue, 14 Mar 2023 00:04:56 GMT
ETag: "158a-5f6d0fa5283f6"
Accept-Ranges: bytes
217.195.197.85/v2/images/bg-great-battles-rating.png
200 OK 523 B URL GET HTTP/1.1 217.195.197.85/v2/images/bg-great-battles-rating.png
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type PNG image data, 4 x 56, 8-bit/color RGB, non-interlaced\012- data
Hash 36e0171c1faf101e17371d84e59ab9c8
0270c15394d7570dbc582dc2467e2a09161a346e
238039b7eb1688ae9cb19ff9f840893b92fc781703d6328542e6dcbfd75cb7a2
Analyzer Verdict Alert quad9 Sinkholed
GET /v2/images/bg-great-battles-rating.png HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/v2/style/index2d42.css?ux=1546806283
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:09 GMT
Content-Type: image/png
Content-Length: 523
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Tue, 14 Mar 2023 00:04:56 GMT
ETag: "20b-5f6d0fa5283f6"
Accept-Ranges: bytes
217.195.197.85/images/for_best/ssss.gif
200 OK 2.8 MB URL GET HTTP/1.1 217.195.197.85/images/for_best/ssss.gif
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type GIF image data, version 89a, 750 x 120\012- data
Size 2.8 MB (2755005 bytes)
Hash 321927b282302a5ece74eed21cbd41f5
01be981cc1667c3f367206db369d4b7d6949dd5d
8afd34e573e58c5f2afb1cbede847b51ff4e84cb08632cf12f2b97a8139335d7
Analyzer Verdict Alert quad9 Sinkholed
GET /images/for_best/ssss.gif HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:07 GMT
Content-Type: image/gif
Content-Length: 2755005
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Tue, 14 Mar 2023 00:03:59 GMT
ETag: "2a09bd-5f6d0f6e5de13"
Accept-Ranges: bytes
217.195.197.85/images/buttons/brown.png
200 OK 18 kB URL GET HTTP/1.1 217.195.197.85/images/buttons/brown.png
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type PNG image data, 1000 x 156, 8-bit/color RGBA, non-interlaced\012- data
Hash 566cd75d60fa4cdbf275cf8caea48963
d4042d1bb597e3b181d5c754e84e8ae6e4f4ae35
9ace99cef6347843c5d8eb7984ac70b1482248e4667e797d44369b9f04dde6df
Analyzer Verdict Alert quad9 Sinkholed
GET /images/buttons/brown.png HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/v2/style/main.css?ux=298
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:09 GMT
Content-Type: image/png
Content-Length: 17981
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Tue, 14 Mar 2023 00:03:55 GMT
ETag: "463d-5f6d0f6a3a4f3"
Accept-Ranges: bytes
217.195.197.85/v2/images/bg-great-battles-numbers.png
200 OK 2.0 kB URL GET HTTP/1.1 217.195.197.85/v2/images/bg-great-battles-numbers.png
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type PNG image data, 1000 x 72, 8-bit/color RGBA, non-interlaced\012- data
Hash 94826c3ecafe8e4b66fa5a784434d530
451e9b9f1ab2d00417cc9b4a3395cde9299ed658
6a2240aee848c03a15dedc9f1eaec8884b190bec2b9addf53ca8b8d612f0c058
Analyzer Verdict Alert quad9 Sinkholed
GET /v2/images/bg-great-battles-numbers.png HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/v2/style/index2d42.css?ux=1546806283
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:09 GMT
Content-Type: image/png
Content-Length: 1971
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Tue, 14 Mar 2023 00:04:56 GMT
ETag: "7b3-5f6d0fa52d9e6"
Accept-Ranges: bytes
217.195.197.85/v2/images/icons/common-icons_32x32.png
200 OK 18 kB URL GET HTTP/1.1 217.195.197.85/v2/images/icons/common-icons_32x32.png
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced\012- data
Hash 5ef59f26e59f887d1d7c2706d84a1009
4b786f4511798681616df32fa11fb53d6c6025c9
00bd0e669f406a226785c48464d4bd681f93aedf79dcaee694a9d9a57be0c663
Analyzer Verdict Alert quad9 Sinkholed
GET /v2/images/icons/common-icons_32x32.png HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/v2/style/main.css?ux=298
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:09 GMT
Content-Type: image/png
Content-Length: 18242
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Tue, 14 Mar 2023 00:04:57 GMT
ETag: "4742-5f6d0fa603f96"
Accept-Ranges: bytes
217.195.197.85/v2/images/bg-great-battles-arrow.png
200 OK 992 B URL GET HTTP/1.1 217.195.197.85/v2/images/bg-great-battles-arrow.png
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type PNG image data, 17 x 28, 8-bit/color RGBA, non-interlaced\012- data
Hash 608ce891b41aa7b35321b9971186d083
c88ca042471504e2a9d38523672dcae72700693d
d2878c47b264925d2cb202ead4edb97ddc5a597a2612c82a9dbaa4cd5aeacb6c
Analyzer Verdict Alert quad9 Sinkholed
GET /v2/images/bg-great-battles-arrow.png HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/v2/style/index2d42.css?ux=1546806283
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:09 GMT
Content-Type: image/png
Content-Length: 992
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Tue, 14 Mar 2023 00:04:56 GMT
ETag: "3e0-5f6d0fa53eb56"
Accept-Ranges: bytes
217.195.197.85/images/buttons/brown-2.png
200 OK 12 kB URL GET HTTP/1.1 217.195.197.85/images/buttons/brown-2.png
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type PNG image data, 1000 x 120, 8-bit/color RGBA, non-interlaced\012- data
Hash 7dce0fa21f3c378728ab493293199034
95f5140a087e36ae2489fd57f0d40747f0b0bd47
58741cc6bc80499f1694968d9f2d78cec8856882c85319134a1ae8a1e421432f
Analyzer Verdict Alert quad9 Sinkholed
GET /images/buttons/brown-2.png HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/v2/style/main.css?ux=298
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:09 GMT
Content-Type: image/png
Content-Length: 12072
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Tue, 14 Mar 2023 00:03:55 GMT
ETag: "2f28-5f6d0f6a3c433"
Accept-Ranges: bytes
217.195.197.85/v2/images/bg-table-cell.png
200 OK 118 B URL GET HTTP/1.1 217.195.197.85/v2/images/bg-table-cell.png
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type PNG image data, 5 x 5, 8-bit/color RGBA, non-interlaced\012- data
Hash aedc25fe5ad576ba3c37fdb073e6a744
b328fe290341874786b231748d1ace6381a737f0
7286ab85f2a0e96df2e8cb77e4de86f75dc133ba8b423a90a622e0944ddb73ae
Analyzer Verdict Alert quad9 Sinkholed
GET /v2/images/bg-table-cell.png HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/v2/style/index2d42.css?ux=1546806283
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:09 GMT
Content-Type: image/png
Content-Length: 118
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Tue, 14 Mar 2023 00:04:57 GMT
ETag: "76-5f6d0fa55cbce"
Accept-Ranges: bytes
217.195.197.85/v2/images/bg-forum-info.html
200 OK 196 B URL GET HTTP/1.1 217.195.197.85/v2/images/bg-forum-info.html
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 62962daa1b19bbcc2db10b7bfd531ea6
d64bae91091eda6a7532ebec06aa70893b79e1f8
80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
NIDS Severity Alert suricata medium ETPRO HUNTING HTTP 200 Stat Code with 404 in Body
GET /v2/images/bg-forum-info.html HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/v2/style/index2d42.css?ux=1546806283
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:09 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 196
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Tue, 14 Mar 2023 00:04:56 GMT
ETag: "c4-5f6d0fa52f926"
Accept-Ranges: bytes
217.195.197.85/images/bg-divider-3.png
200 OK 4.1 kB URL GET HTTP/1.1 217.195.197.85/images/bg-divider-3.png
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type PNG image data, 1000 x 30, 8-bit/color RGBA, non-interlaced\012- data
Hash 76d4167a6bd318c0d7e9d061132ae50e
2c309105978d9085c788c4329632e6cb0818d4b0
7cd3ed5416f51f8d8463a2e20d88ec6504894420089fa4fe30b88227b6fad6fc
Analyzer Verdict Alert quad9 Sinkholed
GET /images/bg-divider-3.png HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/v2/style/main.css?ux=298
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:09 GMT
Content-Type: image/png
Content-Length: 4055
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Mon, 13 Mar 2023 23:40:03 GMT
ETag: "fd7-5f6d0a1514827"
Accept-Ranges: bytes
217.195.197.85/v2/images/bg-forum-header.html
200 OK 196 B URL GET HTTP/1.1 217.195.197.85/v2/images/bg-forum-header.html
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 62962daa1b19bbcc2db10b7bfd531ea6
d64bae91091eda6a7532ebec06aa70893b79e1f8
80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
NIDS Severity Alert suricata medium ETPRO HUNTING HTTP 200 Stat Code with 404 in Body
GET /v2/images/bg-forum-header.html HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/v2/style/index2d42.css?ux=1546806283
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:09 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 196
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Tue, 14 Mar 2023 00:04:57 GMT
ETag: "c4-5f6d0fa56509e"
Accept-Ranges: bytes
217.195.197.85/v2/images/icons/common-icons_64x64.png
200 OK 16 kB URL GET HTTP/1.1 217.195.197.85/v2/images/icons/common-icons_64x64.png
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 256x256, components 3\012- data
Hash 59c999f614734d453d65cb4335cd3bb9
14f8c3d4df147acca3fbc7a1bf5eac921433fbaa
929d6cfef5b557035e7dd9fd6f3017c2bb6b87d6cfeb0f38e34519320db5aab1
Analyzer Verdict Alert quad9 Sinkholed
GET /v2/images/icons/common-icons_64x64.png HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/v2/style/main.css?ux=298
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:09 GMT
Content-Type: image/png
Content-Length: 15623
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Tue, 14 Mar 2023 00:04:57 GMT
ETag: "3d07-5f6d0fa5ff55e"
Accept-Ranges: bytes
217.195.197.85/images/frames/main-decor-tr.png
200 OK 1.1 kB URL GET HTTP/1.1 217.195.197.85/images/frames/main-decor-tr.png
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type PNG image data, 25 x 25, 8-bit/color RGBA, non-interlaced\012- data
Hash 96bd6476e3c2bfd9f617db01958778d1
c6dbd6983eab1c811b2af5622271cf59d1c28601
909884be8ba939cbcb3d68e9b86ad8f0b087e2be9a0c7387d773b36c0524d44d
Analyzer Verdict Alert quad9 Sinkholed
GET /images/frames/main-decor-tr.png HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/v2/style/main.css?ux=298
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:09 GMT
Content-Type: image/png
Content-Length: 1067
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Tue, 14 Mar 2023 00:04:00 GMT
ETag: "42b-5f6d0f6f2f98b"
Accept-Ranges: bytes
217.195.197.85/images/frames/main-r.jpg
200 OK 975 B URL GET HTTP/1.1 217.195.197.85/images/frames/main-r.jpg
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 14x126, components 3\012- data
Hash 3eb60fca71963ab00e4f70b7d712ad82
c222518ffddece3a8d95cd94dd1a0ebeec5fb21f
a95c4b0e8bbfafc12703c96ef461e84a0bc1b35184ac90cc05fc24ef89104ec1
Analyzer Verdict Alert quad9 Sinkholed
GET /images/frames/main-r.jpg HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/v2/style/main.css?ux=298
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:09 GMT
Content-Type: image/jpeg
Content-Length: 975
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Tue, 14 Mar 2023 00:04:00 GMT
ETag: "3cf-5f6d0f6f2af53"
Accept-Ranges: bytes
217.195.197.85/images/frames/main-decor-br.png
200 OK 3.8 kB URL GET HTTP/1.1 217.195.197.85/images/frames/main-decor-br.png
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type PNG image data, 89 x 121, 8-bit/color RGBA, non-interlaced\012- data
Hash 7404a88d0125e6698e4667ff4ab288d4
5972e16d8429366c7c54db11d6862649f9ddfbf0
f3fe5634fecb40fc46529de3d89947284b183e93252b56460de602f939aea6fc
Analyzer Verdict Alert quad9 Sinkholed
GET /images/frames/main-decor-br.png HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/v2/style/main.css?ux=298
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:09 GMT
Content-Type: image/png
Content-Length: 3826
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Tue, 14 Mar 2023 00:04:00 GMT
ETag: "ef2-5f6d0f6f34b93"
Accept-Ranges: bytes
217.195.197.85/v2/images/bg-pattern-left.png
200 OK 26 kB URL GET HTTP/1.1 217.195.197.85/v2/images/bg-pattern-left.png
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type PNG image data, 654 x 293, 8-bit/color RGBA, non-interlaced\012- data
Hash 154c9fbc7c7c8ed1b859688ccc000446
6516e4ee7a6d642e32018e168f5f73f3c93eab80
1374cb75cc2ab3ce4f2f2cf1b9bf956f64004cfe64ae850014245011fa70d953
Analyzer Verdict Alert quad9 Sinkholed
GET /v2/images/bg-pattern-left.png HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/v2/style/index2d42.css?ux=1546806283
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:09 GMT
Content-Type: image/png
Content-Length: 26016
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Tue, 14 Mar 2023 00:04:56 GMT
ETag: "65a0-5f6d0fa4d3496"
Accept-Ranges: bytes
217.195.197.85/v2/images/frames/banner-lr.png
200 OK 177 B URL GET HTTP/1.1 217.195.197.85/v2/images/frames/banner-lr.png
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type PNG image data, 20 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash bb890985da1c867f951d8f577fc35783
6bc31023ce412c873bfc74dc931c840051cf9348
d9e632d2c9d027546bf63dfdac2a267a7d108a8ae51812a0fcffdf18920d3001
Analyzer Verdict Alert quad9 Sinkholed
GET /v2/images/frames/banner-lr.png HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/v2/style/index2d42.css?ux=1546806283
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:09 GMT
Content-Type: image/png
Content-Length: 177
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Tue, 14 Mar 2023 00:04:57 GMT
ETag: "b1-5f6d0fa5d9fb6"
Accept-Ranges: bytes
217.195.197.85/v2/images/frames/banner-tb.png
200 OK 185 B URL GET HTTP/1.1 217.195.197.85/v2/images/frames/banner-tb.png
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type PNG image data, 1 x 20, 8-bit/color RGBA, non-interlaced\012- data
Hash 7196483dffe4d5273798e168d520c2d4
c8ce1fa6b370224812de21493229c31e84531c7d
f44c42ba445fb11eeaf62975a37d1aa6aed1198791d280cc7ebc9f6aae24e662
Analyzer Verdict Alert quad9 Sinkholed
GET /v2/images/frames/banner-tb.png HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/v2/style/index2d42.css?ux=1546806283
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:09 GMT
Content-Type: image/png
Content-Length: 185
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Tue, 14 Mar 2023 00:04:57 GMT
ETag: "b9-5f6d0fa5d41f6"
Accept-Ranges: bytes
217.195.197.85/images/frames/main-decor-tr-2.png
200 OK 17 kB URL GET HTTP/1.1 217.195.197.85/images/frames/main-decor-tr-2.png
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type PNG image data, 114 x 229, 8-bit/color RGBA, non-interlaced\012- data
Hash 46ac8107f3f56199eefa84aa8d98cf35
0f211bdd23a4a9103320c5b22d0c83c4b98175f4
1f6d1934cd6a0400d416bb766e9c38a5f2c15033c1a913b74dd4aa3648955d67
Analyzer Verdict Alert quad9 Sinkholed
GET /images/frames/main-decor-tr-2.png HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/v2/style/main.css?ux=298
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:09 GMT
Content-Type: image/png
Content-Length: 17288
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Tue, 14 Mar 2023 00:04:00 GMT
ETag: "4388-5f6d0f6f310fb"
Accept-Ranges: bytes
217.195.197.85/v2/images/frames/banner-corners.png
200 OK 5.3 kB URL GET HTTP/1.1 217.195.197.85/v2/images/frames/banner-corners.png
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type PNG image data, 88 x 88, 8-bit/color RGBA, non-interlaced\012- data
Hash 29f809aa494a2da6e0a90d2002fb8e05
0036b7154b34eb6fda9da3f4b4d6e1c73cf87575
151ed4b4ec9c34b7297063f891b08f7a40895ac027ba16f3f31b95daf3f8396b
Analyzer Verdict Alert quad9 Sinkholed
GET /v2/images/frames/banner-corners.png HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/v2/style/index2d42.css?ux=1546806283
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:09 GMT
Content-Type: image/png
Content-Length: 5331
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Tue, 14 Mar 2023 00:04:57 GMT
ETag: "14d3-5f6d0fa5dce96"
Accept-Ranges: bytes
217.195.197.85/v2/images/frames/news-footer-tb.png
200 OK 188 B URL GET HTTP/1.1 217.195.197.85/v2/images/frames/news-footer-tb.png
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type PNG image data, 1 x 22, 8-bit/color RGBA, non-interlaced\012- data
Hash c810c4fc8484500759ff6d27e0561164
26a9f70d3607f7b4dff12d059c9f91443754e76c
3cf5cae1a6545ac71f248ac588a6a7e4d9082d33ddc6de771f2f30599ab0ab33
Analyzer Verdict Alert quad9 Sinkholed
GET /v2/images/frames/news-footer-tb.png HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/v2/style/index2d42.css?ux=1546806283
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:10 GMT
Content-Type: image/png
Content-Length: 188
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Tue, 14 Mar 2023 00:04:57 GMT
ETag: "bc-5f6d0fa5a53f6"
Accept-Ranges: bytes
217.195.197.85/v2/images/frames/banner-decor-lr.png
200 OK 934 B URL GET HTTP/1.1 217.195.197.85/v2/images/frames/banner-decor-lr.png
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type PNG image data, 20 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash cd0e474d48e50794f6c28a2b0a058650
8d0a02b873a394188bb96a1729112119f653dad4
677a230aaf76220bbd1515b033b938c5e815ad5bcb0ad755bb502d6b0382033e
Analyzer Verdict Alert quad9 Sinkholed
GET /v2/images/frames/banner-decor-lr.png HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/v2/style/index2d42.css?ux=1546806283
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:10 GMT
Content-Type: image/png
Content-Length: 934
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Tue, 14 Mar 2023 00:04:57 GMT
ETag: "3a6-5f6d0fa5db33e"
Accept-Ranges: bytes
217.195.197.85/v2/images/frames/news-footer-center.png
200 OK 899 B URL GET HTTP/1.1 217.195.197.85/v2/images/frames/news-footer-center.png
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type PNG image data, 14 x 20, 8-bit/color RGBA, non-interlaced\012- data
Hash 995252da1430e3a7b94869c862a71883
d5824164071be0ea035d27864204c46f2495835c
0e018e441587a0e70f3bfe8940b1c1ccfa52ac4918debd3455f6d48d87b438ea
Analyzer Verdict Alert quad9 Sinkholed
GET /v2/images/frames/news-footer-center.png HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/v2/style/index2d42.css?ux=1546806283
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:10 GMT
Content-Type: image/png
Content-Length: 899
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Tue, 14 Mar 2023 00:04:57 GMT
ETag: "383-5f6d0fa5eebbe"
Accept-Ranges: bytes
217.195.197.85/v2/images/frames/news-footer-corners.png
200 OK 1.7 kB URL GET HTTP/1.1 217.195.197.85/v2/images/frames/news-footer-corners.png
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type PNG image data, 30 x 22, 8-bit/color RGBA, non-interlaced\012- data
Hash b074c8ea47550282e8f5e1b3940d2b78
2cbdca24777a221eef75f1c221d30b029c83652e
530ab66c62831e94ddc51994eb936ebf383c992b25c89d18a6ecc308ced407a6
Analyzer Verdict Alert quad9 Sinkholed
GET /v2/images/frames/news-footer-corners.png HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/v2/style/index2d42.css?ux=1546806283
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:10 GMT
Content-Type: image/png
Content-Length: 1669
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Tue, 14 Mar 2023 00:04:57 GMT
ETag: "685-5f6d0fa5eefa6"
Accept-Ranges: bytes
217.195.197.85/v2/images/frames/news-footer-bg.png
200 OK 171 B URL GET HTTP/1.1 217.195.197.85/v2/images/frames/news-footer-bg.png
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type PNG image data, 5 x 5, 8-bit/color RGBA, non-interlaced\012- data
Hash 991a4ece44e7436818d7506126566dc6
421f4106ce0debda767941af21a8167015085256
772892578b4cf14fdf9f0571531233f6458cf81373a0c7dfcc81a6eec7981085
Analyzer Verdict Alert quad9 Sinkholed
GET /v2/images/frames/news-footer-bg.png HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/v2/style/index2d42.css?ux=1546806283
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:10 GMT
Content-Type: image/png
Content-Length: 171
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Tue, 14 Mar 2023 00:04:57 GMT
ETag: "ab-5f6d0fa5a57de"
Accept-Ranges: bytes
217.195.197.85/images/data/artifacts/tank_bow_purp12.gif
200 OK 3.2 kB URL GET HTTP/1.1 217.195.197.85/images/data/artifacts/tank_bow_purp12.gif
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type GIF image data, version 89a, 60 x 60\012- data
Hash a44fbbbc32de5860fe789f505e5aa476
a6ef357c9635d890206f5aae7a4ad1088fb9fbfd
c0278c9ca869c7be189279ff6a461ae615f2fee21942364c41651b69c9b812a1
Analyzer Verdict Alert quad9 Sinkholed
GET /images/data/artifacts/tank_bow_purp12.gif HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:10 GMT
Content-Type: image/gif
Content-Length: 3229
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Mon, 13 Mar 2023 23:54:27 GMT
ETag: "c9d-5f6d0d4cf9c18"
Accept-Ranges: bytes
217.195.197.85/images/data/artifacts/kolchan_purp_15.gif
200 OK 4.2 kB URL GET HTTP/1.1 217.195.197.85/images/data/artifacts/kolchan_purp_15.gif
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type GIF image data, version 89a, 60 x 60\012- data
Hash 25bcccc6aca70fbaaf1a1ca8b724ca73
af74bade8ce925d5011d63e42e1b9f546dd40a29
1f5d3cf56f59a5723b614ec94a8c9f9f6f1a98763d7384bc756a5ae0af388230
Analyzer Verdict Alert quad9 Sinkholed
GET /images/data/artifacts/kolchan_purp_15.gif HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:10 GMT
Content-Type: image/gif
Content-Length: 4222
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Mon, 13 Mar 2023 23:56:14 GMT
ETag: "107e-5f6d0db320a2d"
Accept-Ranges: bytes
217.195.197.85/images/data/artifacts/synd_serp.gif
200 OK 3.2 kB URL GET HTTP/1.1 217.195.197.85/images/data/artifacts/synd_serp.gif
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type GIF image data, version 89a, 60 x 60\012- data
Hash c3e301f16f7e853c7463ce16a6df6fba
573f8987d7227544b3e252a0f3f26a4af8b0f68a
03d80df41c44d1b59b8baf559093e67f199ac23f01654b2d2ca8f7767c782032
Analyzer Verdict Alert quad9 Sinkholed
GET /images/data/artifacts/synd_serp.gif HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:10 GMT
Content-Type: image/gif
Content-Length: 3171
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Mon, 13 Mar 2023 23:54:29 GMT
ETag: "c63-5f6d0d4f06e70"
Accept-Ranges: bytes
217.195.197.85/images/data/artifacts/synd_kirka.gif
200 OK 3.3 kB URL GET HTTP/1.1 217.195.197.85/images/data/artifacts/synd_kirka.gif
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type GIF image data, version 89a, 60 x 60\012- data
Hash 5b60df95ac4ce63a136de69ba6dfe5d1
f77cfdd09d364ab5d2750acbff29c177287d51f8
98a06a315d87acde2a830155fcdb05ab03edc260126e162f890983ecec88e52d
Analyzer Verdict Alert quad9 Sinkholed
GET /images/data/artifacts/synd_kirka.gif HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:10 GMT
Content-Type: image/gif
Content-Length: 3250
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Mon, 13 Mar 2023 23:54:29 GMT
ETag: "cb2-5f6d0d4f17fe0"
Accept-Ranges: bytes
217.195.197.85/images/data/artifacts/synd_ydochka.gif
200 OK 3.1 kB URL GET HTTP/1.1 217.195.197.85/images/data/artifacts/synd_ydochka.gif
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type GIF image data, version 89a, 60 x 60\012- data
Hash 844f705605eb076eed6d3b79811782a4
5a011834e23ece9ba1d6bcac0a5a8d03639a979e
ca8f2ecf024f44020784f839e5826da04688274df849e09753f4c2906e49c5de
Analyzer Verdict Alert quad9 Sinkholed
GET /images/data/artifacts/synd_ydochka.gif HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:10 GMT
Content-Type: image/gif
Content-Length: 3115
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Mon, 13 Mar 2023 23:54:29 GMT
ETag: "c2b-5f6d0d4f09968"
Accept-Ranges: bytes
www.dwarofraces.com.tr/images/data/bots/hunt_head_sm.jpg
403 Forbidden 7.5 kB URL GET HTTP/3 www.dwarofraces.com.tr/images/data/bots/hunt_head_sm.jpg
IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint20:3D:27:50:E6:45:21:01:FD:2C:AC:1A:74:69:40:8A:0D:6A:68:F9
ValiditySun, 19 Mar 2023 00:00:00 GMT - Mon, 18 Mar 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (501)
Hash d812b9a013bcb71ea01f304e6d8baa2e
2a245daae282294f2a6850cb53c5eaad49cf8a35
37d245f857e37649f7a72128abb727d1c0fe0128e6c1eab59539f3ad30a2edc7
GET /images/data/bots/hunt_head_sm.jpg HTTP/1.1
Host: www.dwarofraces.com.tr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 403 Forbidden
date: Sun, 21 May 2023 22:08:09 GMT
content-type: text/html; charset=UTF-8
vary: Referer, Accept-Encoding
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HLxk1mu03mcnTsiS1SIeWHsNHXYBB1zEBr1jNpbCv3eD%2BmlqnJYUlbwTFTScJB39TaUgq4WRf77aJzZAoKoXoZAW9U1Ez%2FDfWkrOVS1CkuWHZ2gE6YJ%2F79A0hG%2FXs7DbiXcOztFuPUgI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cb022e86ae2b515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
217.195.197.85/images/data/artifacts/9670_items_zigred_1.gif
200 OK 3.6 kB URL GET HTTP/1.1 217.195.197.85/images/data/artifacts/9670_items_zigred_1.gif
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type GIF image data, version 89a, 60 x 60\012- data
Hash 3df41208ee386d9cb70e492a528ff119
c43e1ef960cfd6e09345f29b94064f20a063ad9c
4fbd623a05cc9a2cc1beafeccbc25290f3d442547071105ccd84aa30e60154e0
Analyzer Verdict Alert quad9 Sinkholed
GET /images/data/artifacts/9670_items_zigred_1.gif HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:10 GMT
Content-Type: image/gif
Content-Length: 3629
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Mon, 13 Mar 2023 23:58:05 GMT
ETag: "e2d-5f6d0e1d190e2"
Accept-Ranges: bytes
217.195.197.85/images/data/artifacts/divnoesteklo_090427.gif
200 OK 3.0 kB URL GET HTTP/1.1 217.195.197.85/images/data/artifacts/divnoesteklo_090427.gif
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type GIF image data, version 89a, 60 x 60\012- data
Hash a753444262bea96900db5d82e9017f82
f4c1e101f2ce554db57afce264c0fd1f69e39391
8e6d7b3bda71446d48fa78461fdbe77adacc0c5cc82cfc66cbd9f3e3c6509113
Analyzer Verdict Alert quad9 Sinkholed
GET /images/data/artifacts/divnoesteklo_090427.gif HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:10 GMT
Content-Type: image/gif
Content-Length: 3012
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Mon, 13 Mar 2023 23:57:24 GMT
ETag: "bc4-5f6d0df559460"
Accept-Ranges: bytes
217.195.197.85/images/data/artifacts/newBonus_premium43.gif
200 OK 4.4 kB URL GET HTTP/1.1 217.195.197.85/images/data/artifacts/newBonus_premium43.gif
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type GIF image data, version 89a, 60 x 60\012- data
Hash 216064089cafe4cb6e1994cff4ff0f0e
6f7d525d6eb92fbdf6ad147557303d066068770b
e086db454347305047d644f3b60491b37f892225f38e1e81f0bdf23c9c6c6e77
Analyzer Verdict Alert quad9 Sinkholed
GET /images/data/artifacts/newBonus_premium43.gif HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:10 GMT
Content-Type: image/gif
Content-Length: 4447
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Mon, 13 Mar 2023 23:55:43 GMT
ETag: "115f-5f6d0d958411c"
Accept-Ranges: bytes
217.195.197.85/images/data/artifacts/pb_flag_maurin.gif
200 OK 4.4 kB URL GET HTTP/1.1 217.195.197.85/images/data/artifacts/pb_flag_maurin.gif
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type GIF image data, version 89a, 60 x 60\012- data
Hash 3b60f0d1c7b2a2a25b8604ff86b7ea7e
dd490b7ff0d53955fdc935fe2bcd2d4374d19c86
d8ca246f1435f23307c4dbf6972ebdc20436210ee3a318bea657a21f80b9f845
Analyzer Verdict Alert quad9 Sinkholed
GET /images/data/artifacts/pb_flag_maurin.gif HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:10 GMT
Content-Type: image/gif
Content-Length: 4355
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Mon, 13 Mar 2023 23:55:34 GMT
ETag: "1103-5f6d0d8ced953"
Accept-Ranges: bytes
217.195.197.85/images/data/artifacts/vorohbumag.gif
200 OK 3.6 kB URL GET HTTP/1.1 217.195.197.85/images/data/artifacts/vorohbumag.gif
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type GIF image data, version 89a, 60 x 60\012- data
Hash c74ebad5ef8696dce88f18e8162b976b
4b35b8df7e2108bae4de6e68d7d83d5703e82242
044c6f31d71fb69906db4e2122ceba15641b3488c5a3b66c67ddc817b32352bf
Analyzer Verdict Alert quad9 Sinkholed
GET /images/data/artifacts/vorohbumag.gif HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:10 GMT
Content-Type: image/gif
Content-Length: 3579
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Mon, 13 Mar 2023 23:54:10 GMT
ETag: "dfb-5f6d0d3c3e8d7"
Accept-Ranges: bytes
217.195.197.85/images/data/artifacts/eat_mountgreeen_hum.gif
200 OK 4.5 kB URL GET HTTP/1.1 217.195.197.85/images/data/artifacts/eat_mountgreeen_hum.gif
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type GIF image data, version 89a, 60 x 60\012- data
Hash 2a1759669023042a139b8013c9802dd6
5cdf89c7d388836c6ab89f6205018ee7faf70cd5
ce1ceaa769dac66af2d67da1c05a55740952042f0d83ee15b14ef7461e75be69
Analyzer Verdict Alert quad9 Sinkholed
GET /images/data/artifacts/eat_mountgreeen_hum.gif HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:10 GMT
Content-Type: image/gif
Content-Length: 4512
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Mon, 13 Mar 2023 23:57:19 GMT
ETag: "11a0-5f6d0df1660b0"
Accept-Ranges: bytes
217.195.197.85/images/data/artifacts/glazhaosa2.gif
200 OK 4.3 kB URL GET HTTP/1.1 217.195.197.85/images/data/artifacts/glazhaosa2.gif
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type GIF image data, version 89a, 60 x 60\012- data
Hash e54cce86d633f1023afdbdc9e7432690
ae87c62579540199db65b2e934b6ebcb0bf7f0e6
f51eb3549ee437915fc5737f8c037ed97bb9c4031b281529f22e1c11e127c34e
Analyzer Verdict Alert quad9 Sinkholed
GET /images/data/artifacts/glazhaosa2.gif HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:10 GMT
Content-Type: image/gif
Content-Length: 4250
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Mon, 13 Mar 2023 23:56:40 GMT
ETag: "109a-5f6d0dcc2089e"
Accept-Ranges: bytes
217.195.197.85/images/data/artifacts/svitok_bistr_dostup.gif
200 OK 4.4 kB URL GET HTTP/1.1 217.195.197.85/images/data/artifacts/svitok_bistr_dostup.gif
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type GIF image data, version 89a, 60 x 60\012- data
Hash c6c3078857add92fc15721daff83b8ab
dca2cadc7e311e60ca16bf2f0262fd4e7960127b
6533bf817777261168f2c6434e20333a84bd2e59cc508e995c0e7b0dfa8a3dd5
Analyzer Verdict Alert quad9 Sinkholed
GET /images/data/artifacts/svitok_bistr_dostup.gif HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:10 GMT
Content-Type: image/gif
Content-Length: 4369
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Mon, 13 Mar 2023 23:54:32 GMT
ETag: "1111-5f6d0d51bacc0"
Accept-Ranges: bytes
217.195.197.85/images/data/artifacts/cherepkvest3.gif
200 OK 4.6 kB URL GET HTTP/1.1 217.195.197.85/images/data/artifacts/cherepkvest3.gif
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type GIF image data, version 89a, 60 x 60\012- data
Hash cd0ef8223e9507369e7b0505eb7555b8
0783e13bc1eaf5320b6a7497e5ce66e7464258d8
223bdc9211a1182acdf64f37d6d5b55e68ea1d6c4980954c55b95578773e384a
Analyzer Verdict Alert quad9 Sinkholed
GET /images/data/artifacts/cherepkvest3.gif HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:10 GMT
Content-Type: image/gif
Content-Length: 4629
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Mon, 13 Mar 2023 23:57:35 GMT
ETag: "1215-5f6d0e0019789"
Accept-Ranges: bytes
217.195.197.85/images/tpl/tbl-2-top-left.png
200 OK 2.2 kB URL GET HTTP/1.1 217.195.197.85/images/tpl/tbl-2-top-left.png
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type PNG image data, 17 x 17, 8-bit/color RGBA, non-interlaced\012- data
Hash a307748ffc41af054ac584c465f22cb1
41be4f8f02bdff324f6e7664bc945d3e703408e9
1359c632bd5a561c3b03546a45bde8856bad21afcc73b5f56a757da583defb46
Analyzer Verdict Alert quad9 Sinkholed
GET /images/tpl/tbl-2-top-left.png HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/v2/style/maine2db.css?ux=298
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:10 GMT
Content-Type: image/png
Content-Length: 2176
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Tue, 14 Mar 2023 00:03:53 GMT
ETag: "880-5f6d0f687fed3"
Accept-Ranges: bytes
www.dwarofraces.com.tr/images/exp/exp15.png
403 Forbidden 411 kB URL GET HTTP/2 www.dwarofraces.com.tr/images/exp/exp15.png
IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint20:3D:27:50:E6:45:21:01:FD:2C:AC:1A:74:69:40:8A:0D:6A:68:F9
ValiditySun, 19 Mar 2023 00:00:00 GMT - Mon, 18 Mar 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (501)
Size 411 kB (410810 bytes)
Hash 5e58b0fa047ff107308efacaa6c86cb6
0b17544c3e97bd4e9f5a70dc11e7d1bc70423a2c
35f3db11af263dba02a62c1f2393bd964c436bd67eba02f65d8c8a8d33a0d42a
GET /images/exp/exp15.png HTTP/1.1
Host: www.dwarofraces.com.tr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 403 Forbidden
date: Sun, 21 May 2023 22:08:07 GMT
content-type: text/html; charset=UTF-8
vary: Referer, Accept-Encoding
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=et%2Fo1rQEjeWqxNpR73nYWoyauP7J0dbTo8LnG7wPmcs01ENFElEM8Qz8Q8Ge1%2FXr96BvB05f3%2FD6oNJ4zrtSeHpW7wdBesEBwwvpD06e%2BQkm%2F8AfaS0xUN03SUnQEBZil1sqgsKp9pxf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cb022dffa3eb523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.dwarofraces.com.tr/images/data/bots/furija_18_small.jpg
403 Forbidden 7.7 kB URL GET HTTP/2 www.dwarofraces.com.tr/images/data/bots/furija_18_small.jpg
IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint20:3D:27:50:E6:45:21:01:FD:2C:AC:1A:74:69:40:8A:0D:6A:68:F9
ValiditySun, 19 Mar 2023 00:00:00 GMT - Mon, 18 Mar 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (501)
Hash 1c0fcffcbeccba54076698425c71501e
083584a93bc2ab31b6eb02a8d8eef4101565012e
d6902fefd696b71d41cef45244625fddc92a6d1ba952739d2103a6e6b7bb6b8c
GET /images/data/bots/furija_18_small.jpg HTTP/1.1
Host: www.dwarofraces.com.tr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 403 Forbidden
date: Sun, 21 May 2023 22:08:09 GMT
content-type: text/html; charset=UTF-8
vary: Referer, Accept-Encoding
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5tuYlir0amsWaNGYdd%2BZOWMcktNLBZjdc%2B8EN58qr0wheT4q%2FXVpUWCjyiL4fSaXuAxTwsU%2FeKwuCErE55SJQklVycKMEGpUKSp7FF8fYix6qcK%2Fq8KgRTuN2Lf1DoC%2BcFr3WDF6TL%2FQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cb022e86aecb515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
217.195.197.85/images/data/artifacts/z_namereniya-2.gif
200 OK 5.1 kB URL GET HTTP/1.1 217.195.197.85/images/data/artifacts/z_namereniya-2.gif
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type GIF image data, version 89a, 60 x 60\012- data
Hash 3f27cc61cb0546cc97d92952dcbd0170
9fe4db89ecade9326592e4986bc573adc76fc19a
e6d8961e733fb0674c6ca545e80a737ec3a5391c6a84f8195dc751d8e501320c
Analyzer Verdict Alert quad9 Sinkholed
GET /images/data/artifacts/z_namereniya-2.gif HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:10 GMT
Content-Type: image/gif
Content-Length: 5078
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Mon, 13 Mar 2023 23:54:04 GMT
ETag: "13d6-5f6d0d3732cdf"
Accept-Ranges: bytes
217.195.197.85/images/data/artifacts/nektaropyta_fio.gif
200 OK 3.4 kB URL GET HTTP/1.1 217.195.197.85/images/data/artifacts/nektaropyta_fio.gif
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type GIF image data, version 89a, 60 x 60\012- data
Hash 793a9c707cf93ffb47ae5652bc5956c4
89105f08235d5bc798e9978c6cefec3546a11f00
f51bb836766b8f1e0e73f703377524e87dc3fa1258b0d8341c95eab4250213a9
Analyzer Verdict Alert quad9 Sinkholed
GET /images/data/artifacts/nektaropyta_fio.gif HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:10 GMT
Content-Type: image/gif
Content-Length: 3397
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Mon, 13 Mar 2023 23:55:44 GMT
ETag: "d45-5f6d0d965ed1c"
Accept-Ranges: bytes
www.dwarofraces.com.tr/images/ranks/rank6.gif
403 Forbidden 15 kB URL GET HTTP/2 www.dwarofraces.com.tr/images/ranks/rank6.gif
IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint20:3D:27:50:E6:45:21:01:FD:2C:AC:1A:74:69:40:8A:0D:6A:68:F9
ValiditySun, 19 Mar 2023 00:00:00 GMT - Mon, 18 Mar 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (501)
Hash 2fc7cc9b733190e20e0b521e606fe88c
3c48a7fa3555468499cdee4253fe78ae96531c7b
1a5a66d02865728246313ca6f750c7f0f6dfb17c3b84a3fc007e51b6a2290376
GET /images/ranks/rank6.gif HTTP/1.1
Host: www.dwarofraces.com.tr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 403 Forbidden
date: Sun, 21 May 2023 22:08:07 GMT
content-type: text/html; charset=UTF-8
vary: Referer, Accept-Encoding
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ReVUiohDpPKHK4rGHeuuuMGsx89NM7Gst0JSkcynwmwhDuEtiLl3XN2JBeXY0H9FBi8%2Fe0ahzV76G5Tmg0iGV7Kp5ROtG%2FUTT7ZkRfPdV6KgqE9eoYGSQDXC9g%2F5buzs0rmSw92AcIJ4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cb022dffa3db523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
217.195.197.85/images/tpl/tbl-label-left.png
200 OK 1.1 kB URL GET HTTP/1.1 217.195.197.85/images/tpl/tbl-label-left.png
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type PNG image data, 27 x 22, 8-bit colormap, non-interlaced\012- data
Hash be52b4aba145b3af687b9a1b04d068e8
1c708cdc938b332a79da53cb99cfeda14c28d12c
875867d773bed418ffdc1f20928e71cc2baaa563059bbcb3e21cdee8efb09cf8
Analyzer Verdict Alert quad9 Sinkholed
GET /images/tpl/tbl-label-left.png HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/v2/style/maine2db.css?ux=298
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:10 GMT
Content-Type: image/png
Content-Length: 1064
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Tue, 14 Mar 2023 00:03:53 GMT
ETag: "428-5f6d0f686aafb"
Accept-Ranges: bytes
217.195.197.85/images/tpl/tbl-label-right.png
200 OK 1.1 kB URL GET HTTP/1.1 217.195.197.85/images/tpl/tbl-label-right.png
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type PNG image data, 27 x 22, 8-bit colormap, non-interlaced\012- data
Hash 3f423365dde3c37da0eeba67c8091822
3dcd3e50c3ea2b669a147206e6f0001325fc7f42
efaedaf8f2dd224855175701ccab65443fc43e4ba072997f1c471a311d6d8ac1
Analyzer Verdict Alert quad9 Sinkholed
GET /images/tpl/tbl-label-right.png HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/v2/style/maine2db.css?ux=298
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:10 GMT
Content-Type: image/png
Content-Length: 1075
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Tue, 14 Mar 2023 00:03:53 GMT
ETag: "433-5f6d0f68687d3"
Accept-Ranges: bytes
www.dwarofraces.com.tr/images/ranks/rank5.gif
403 Forbidden 4.1 kB URL GET HTTP/2 www.dwarofraces.com.tr/images/ranks/rank5.gif
IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint20:3D:27:50:E6:45:21:01:FD:2C:AC:1A:74:69:40:8A:0D:6A:68:F9
ValiditySun, 19 Mar 2023 00:00:00 GMT - Mon, 18 Mar 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (501)
Hash 69f12b09f82f7dd14b36725754f31e4d
5c5c9118104fad3d023ceef2844c46b9f7f4798d
da8b9a085761688fe32bae9d24ba48edf9929ec1a56432a7bb0e692ba00543c6
GET /images/ranks/rank5.gif HTTP/1.1
Host: www.dwarofraces.com.tr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 403 Forbidden
date: Sun, 21 May 2023 22:08:07 GMT
content-type: text/html; charset=UTF-8
vary: Referer, Accept-Encoding
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rXgqsIzXO2ZWqhf5fcF93L%2Bpp51uLlBiUyCx7MZ%2BIEOWpnehMpFooV%2BgCD8D4Qs5VTMsepg3FAottjgRA69BZn%2BTI%2FywqRWBnhkVwIhvjmjrbgfIJBz1Ojw2FI8m9vOtLE%2BefXtmvthc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cb022dffa37b523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
217.195.197.85/images/tpl/tbl-label-center.png
200 OK 496 B URL GET HTTP/1.1 217.195.197.85/images/tpl/tbl-label-center.png
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type PNG image data, 6 x 22, 8-bit colormap, non-interlaced\012- data
Hash af2dfe82b186f78ba26d4dc7a9854ce1
285d2246d8aca1afefe433d4d2f0ff585919839d
6e830b5d1f03c17af0840f2e3749e618c28d76b8a9b111cc946b11452cc5fbbb
Analyzer Verdict Alert quad9 Sinkholed
GET /images/tpl/tbl-label-center.png HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/v2/style/maine2db.css?ux=298
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:10 GMT
Content-Type: image/png
Content-Length: 496
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Tue, 14 Mar 2023 00:03:53 GMT
ETag: "1f0-5f6d0f6864953"
Accept-Ranges: bytes
www.dwarofraces.com.tr/images/data/bots/hunt_head_sm.jpg
403 Forbidden 7.3 kB URL GET HTTP/3 www.dwarofraces.com.tr/images/data/bots/hunt_head_sm.jpg
IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint20:3D:27:50:E6:45:21:01:FD:2C:AC:1A:74:69:40:8A:0D:6A:68:F9
ValiditySun, 19 Mar 2023 00:00:00 GMT - Mon, 18 Mar 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (501)
Hash 18bf345f0ea88c4a9888516c2a3e2de4
f3f66c093599bbd940d6fecbd3960d12c14910c2
3fe8e8b21183c386dd88d248baa3fd435452116adf3d8c02a7eee2325dc1a9fb
GET /images/data/bots/hunt_head_sm.jpg HTTP/1.1
Host: www.dwarofraces.com.tr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 403 Forbidden
date: Sun, 21 May 2023 22:08:07 GMT
content-type: text/html; charset=UTF-8
vary: Referer, Accept-Encoding
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pK%2BVjIpqDNkBJcr%2Bsuu9wWPmNaNGO9vYhqm9cfeEXuqF73USN2GaY80hBcbYafgaDcbYRQOfY0VYIyfZDuCYpgT0cusFzSap4f%2BOPraDNMCnjJ%2BXk0E1H6zsD5KP9Bcl2QvcNk1YRbWd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cb022dffa2bb523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.dwarofraces.com.tr/images/data/bots/furija_16_small.jpg
403 Forbidden 6.5 kB URL GET HTTP/3 www.dwarofraces.com.tr/images/data/bots/furija_16_small.jpg
IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint20:3D:27:50:E6:45:21:01:FD:2C:AC:1A:74:69:40:8A:0D:6A:68:F9
ValiditySun, 19 Mar 2023 00:00:00 GMT - Mon, 18 Mar 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (501)
Hash 1572f5117e4bf78a21be874b17eaa326
02f0040ce60101de97fc4a0c89a6e11a55411a78
7c4fb9cf2354caf61f581c562b43822948bfac525b3a669d5fca37a99e5e91ee
GET /images/data/bots/furija_16_small.jpg HTTP/1.1
Host: www.dwarofraces.com.tr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 403 Forbidden
date: Sun, 21 May 2023 22:08:07 GMT
content-type: text/html; charset=UTF-8
vary: Referer, Accept-Encoding
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ahwLKcgWB3gvnjFvxW2nudY%2Fh%2BZR%2Fsi7zdIG5awRXV5Fq1zZBcqpK6eCZoPs1r9Xd9Gvq6GCkddbcOeRmDj%2ByK%2BA%2FLpP4PTPZuc40jQEeHDqxcczhjB%2B%2BtYPf%2BIQZDE5kfgmwwDFaKq3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cb022dffa2db523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
217.195.197.85/images/tpl/tbl-bg-2.png
200 OK 2.7 kB URL GET HTTP/1.1 217.195.197.85/images/tpl/tbl-bg-2.png
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type PNG image data, 72 x 59, 8-bit colormap, non-interlaced\012- data
Hash 2c3cb6e71646b49931080443210e07f0
53441d78b80971ea4363b651d64a57ceb87715c4
b1e2061d4cc9fb57810c19f4a82c635d8a9b9644d32596d3e1e4d1a991756201
Analyzer Verdict Alert quad9 Sinkholed
GET /images/tpl/tbl-bg-2.png HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/v2/style/maine2db.css?ux=298
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:10 GMT
Content-Type: image/png
Content-Length: 2745
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Tue, 14 Mar 2023 00:03:53 GMT
ETag: "ab9-5f6d0f686550b"
Accept-Ranges: bytes
www.dwarofraces.com.tr/images/data/bots/furia_cor.gif
403 Forbidden 7.6 kB URL GET HTTP/3 www.dwarofraces.com.tr/images/data/bots/furia_cor.gif
IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint20:3D:27:50:E6:45:21:01:FD:2C:AC:1A:74:69:40:8A:0D:6A:68:F9
ValiditySun, 19 Mar 2023 00:00:00 GMT - Mon, 18 Mar 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (501)
Hash 7e25b1c316c75597ce3cae762521758f
12145a44e86f5899b017875237e485525f10b6f7
8ef98a00cef6190834d35f8b044e992ee15d1a008c28bf154f3ab3b07e8b57d8
GET /images/data/bots/furia_cor.gif HTTP/1.1
Host: www.dwarofraces.com.tr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 403 Forbidden
date: Sun, 21 May 2023 22:08:07 GMT
content-type: text/html; charset=UTF-8
vary: Referer, Accept-Encoding
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1Uw0ceyZAlQrKUHDEMnm%2B6LLoWwhzvbL1aoW2Llt9OWPvgQ%2B%2B2aJGPTNU1ZqBSguLR%2Bc%2F87CVRIv2%2FYRBp87J4jEFfx3xdX5rDSrL%2BtOO8L6SY0MDIjaaUv161WBkiKw8ONWzB%2Bcavf8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cb022dffa46b523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
217.195.197.85/images/data/artifacts/letopis_podarok2.gif
200 OK 5.7 kB URL GET HTTP/1.1 217.195.197.85/images/data/artifacts/letopis_podarok2.gif
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type GIF image data, version 89a, 60 x 60\012- data
Hash dcdeffff3213a79b5ed23f3b1b93bdf0
ba86221623edffea06f5503434e3b57b7c4d7bc7
86f45d63be41f238b7f65da8703aad3c4f6f44d0f506d8b1c49052b9c5eca123
Analyzer Verdict Alert quad9 Sinkholed
GET /images/data/artifacts/letopis_podarok2.gif HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:10 GMT
Content-Type: image/gif
Content-Length: 5669
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Wed, 17 May 2023 13:38:36 GMT
ETag: "1625-5fbe3ce0397bb"
Accept-Ranges: bytes
217.195.197.85/images/data/artifacts/letopis_podarok3.gif
200 OK 5.7 kB URL GET HTTP/1.1 217.195.197.85/images/data/artifacts/letopis_podarok3.gif
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type GIF image data, version 89a, 60 x 60\012- data
Hash 5d2db1dc59d71efe5427088b983e8747
594fda2427236d4a58b702f63cc943139ca1565d
141f71600a45da31061c24fe1f9d32d316baf5d53a4a65db39bc57eba7d7fef8
Analyzer Verdict Alert quad9 Sinkholed
GET /images/data/artifacts/letopis_podarok3.gif HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:10 GMT
Content-Type: image/gif
Content-Length: 5737
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Wed, 17 May 2023 13:39:06 GMT
ETag: "1669-5fbe3cfd89f57"
Accept-Ranges: bytes
217.195.197.85/images/data/artifacts/letopis_podarok4.gif
200 OK 5.7 kB URL GET HTTP/1.1 217.195.197.85/images/data/artifacts/letopis_podarok4.gif
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type GIF image data, version 89a, 60 x 60\012- data
Hash 55bbf1524d7eee5bb4ef6f5c9b7352b9
6a3c3f4e652548ddfa78a0bfd5596d2fc647cdad
e787409ef38a1b586c2485d3e103778e2f4328cdf9a0956dcb6c374c6b8eb601
Analyzer Verdict Alert quad9 Sinkholed
GET /images/data/artifacts/letopis_podarok4.gif HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:11 GMT
Content-Type: image/gif
Content-Length: 5711
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Wed, 17 May 2023 13:39:30 GMT
ETag: "164f-5fbe3d1421f50"
Accept-Ranges: bytes
217.195.197.85/images/data/artifacts/shtani_uvorot1-5pvp_purple.gif
200 OK 3.6 kB URL GET HTTP/1.1 217.195.197.85/images/data/artifacts/shtani_uvorot1-5pvp_purple.gif
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type GIF image data, version 89a, 60 x 60\012- data
Hash 02dd93247f567ce2b65083330ac89e28
f2af5b865dd97732732791ad303ba2fcc0d2bcfd
daac9cee71611af02763fb750a39d9e41e9d2515d2a8edc87c4d2b1244ee1b4b
Analyzer Verdict Alert quad9 Sinkholed
GET /images/data/artifacts/shtani_uvorot1-5pvp_purple.gif HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:11 GMT
Content-Type: image/gif
Content-Length: 3573
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Mon, 13 Mar 2023 23:54:45 GMT
ETag: "df5-5f6d0d5e4c921"
Accept-Ranges: bytes
217.195.197.85/images/data/artifacts/letopis_podarok5.gif
200 OK 4.4 kB URL GET HTTP/1.1 217.195.197.85/images/data/artifacts/letopis_podarok5.gif
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type GIF image data, version 89a, 60 x 60\012- data
Hash ac7e0b88d9f5c094b344097f896d2f3d
cebd2d4aaf0559c28ec1e25ff56b3c1bb287ecb7
ac7f42513ce43576fbaef594ffc56d8102c49d1e566ae27f27387aa40a814301
Analyzer Verdict Alert quad9 Sinkholed
GET /images/data/artifacts/letopis_podarok5.gif HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:11 GMT
Content-Type: image/gif
Content-Length: 4391
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Wed, 17 May 2023 13:40:03 GMT
ETag: "1127-5fbe3d332f818"
Accept-Ranges: bytes
217.195.197.85/images/tpl/tbl-2-right.png
200 OK 5.4 kB URL GET HTTP/1.1 217.195.197.85/images/tpl/tbl-2-right.png
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type PNG image data, 17 x 194, 8-bit/color RGBA, non-interlaced\012- data
Hash 9d6d51f73377bd32f918a5b081789fed
1ad7dc964a5d12297b15519f43442e93b50732db
7959f4a214a6c0e36fc7f1c8f2fd342b7076ef7cb4b0d3eb9812e4fbd34caa87
Analyzer Verdict Alert quad9 Sinkholed
GET /images/tpl/tbl-2-right.png HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/v2/style/maine2db.css?ux=298
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:11 GMT
Content-Type: image/png
Content-Length: 5413
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Tue, 14 Mar 2023 00:03:53 GMT
ETag: "1525-5f6d0f683c0e3"
Accept-Ranges: bytes
217.195.197.85/images/data/artifacts/bronya_uvorot1-5pvp_purple.gif
200 OK 3.4 kB URL GET HTTP/1.1 217.195.197.85/images/data/artifacts/bronya_uvorot1-5pvp_purple.gif
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type GIF image data, version 89a, 60 x 60\012- data
Hash 82ee3039bcb8bf868e4b9bd14323fbbd
c62e94bbb08e9969cad0863991f25a1495fd93e0
6fb0a0fa49c5d7a83bc6b4a3790fa34d435d338a7a069f04ff8ff965f3ec6806
Analyzer Verdict Alert quad9 Sinkholed
GET /images/data/artifacts/bronya_uvorot1-5pvp_purple.gif HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:11 GMT
Content-Type: image/gif
Content-Length: 3425
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Mon, 13 Mar 2023 23:57:40 GMT
ETag: "d61-5f6d0e04e0dc1"
Accept-Ranges: bytes
217.195.197.85/images/data/artifacts/sword1_uvorot1-5pvp_purple.gif
200 OK 3.2 kB URL GET HTTP/1.1 217.195.197.85/images/data/artifacts/sword1_uvorot1-5pvp_purple.gif
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type GIF image data, version 89a, 60 x 60\012- data
Hash 6d8d9b27e4ccdb62c19db63b9cd759f5
2461e502dd2bb3a1a598dc13fab781bed64a2d50
bbdd3130bf56edfce1e3dd1954edf34f4288b121dffe12ee75ae94569e2cbd4c
Analyzer Verdict Alert quad9 Sinkholed
GET /images/data/artifacts/sword1_uvorot1-5pvp_purple.gif HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:11 GMT
Content-Type: image/gif
Content-Length: 3189
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Mon, 13 Mar 2023 23:54:31 GMT
ETag: "c75-5f6d0d50d3988"
Accept-Ranges: bytes
217.195.197.85/images/data/artifacts/kolch_uvorot1-5pvp_purple.gif
200 OK 3.5 kB URL GET HTTP/1.1 217.195.197.85/images/data/artifacts/kolch_uvorot1-5pvp_purple.gif
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type GIF image data, version 89a, 60 x 60\012- data
Hash 9e48995387012b1ffbf42ff4b533c934
ceea28e8e6d7f1a9ffa904f6ba534e94bcfe9b6f
e169fe6dce99311a371944be9c0e5bd3c49af669038d0003253915eb176fac75
Analyzer Verdict Alert quad9 Sinkholed
GET /images/data/artifacts/kolch_uvorot1-5pvp_purple.gif HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:11 GMT
Content-Type: image/gif
Content-Length: 3543
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Mon, 13 Mar 2023 23:56:14 GMT
ETag: "dd7-5f6d0db354a35"
Accept-Ranges: bytes
217.195.197.85/images/data/artifacts/bot_uvorot1-5pvp_purple.gif
200 OK 3.6 kB URL GET HTTP/1.1 217.195.197.85/images/data/artifacts/bot_uvorot1-5pvp_purple.gif
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type GIF image data, version 89a, 60 x 60\012- data
Hash 6e40803d84498d0a539d19d2f694a5bd
4164ec16ae2f90796e92d2164c8f01dc5d497d9f
2d898f8fd302e0dcf519a6f193d20f178584523c3fee3fb35facb87e066ec8e6
Analyzer Verdict Alert quad9 Sinkholed
GET /images/data/artifacts/bot_uvorot1-5pvp_purple.gif HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:11 GMT
Content-Type: image/gif
Content-Length: 3585
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Mon, 13 Mar 2023 23:57:44 GMT
ETag: "e01-5f6d0e0906a09"
Accept-Ranges: bytes
217.195.197.85/images/data/artifacts/plechi_uvorot1-5pvp_purple.gif
200 OK 3.5 kB URL GET HTTP/1.1 217.195.197.85/images/data/artifacts/plechi_uvorot1-5pvp_purple.gif
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type GIF image data, version 89a, 60 x 60\012- data
Hash 61dce5ed5579cc448b21fd194796b1a3
f0bcc9100ea577ae418178922f61a4d538e9ca71
52115472ad10b7e8d1dd10d1773ca212334cd0bd499c9a2df873627239944e3c
Analyzer Verdict Alert quad9 Sinkholed
GET /images/data/artifacts/plechi_uvorot1-5pvp_purple.gif HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:11 GMT
Content-Type: image/gif
Content-Length: 3473
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Mon, 13 Mar 2023 23:55:31 GMT
ETag: "d91-5f6d0d8a187c3"
Accept-Ranges: bytes
217.195.197.85/images/data/artifacts/perchi_uvorot1-5pvp_purple.gif
200 OK 3.6 kB URL GET HTTP/1.1 217.195.197.85/images/data/artifacts/perchi_uvorot1-5pvp_purple.gif
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type GIF image data, version 89a, 60 x 60\012- data
Hash c9b92242efb92d03d8d84737f735cbe6
c34481371430304630ff7fb1f294914af874e0f4
37c4ca87cfce577461226d21fe7df7cfeffa2175f119468df1d38e103d0bdb3b
Analyzer Verdict Alert quad9 Sinkholed
GET /images/data/artifacts/perchi_uvorot1-5pvp_purple.gif HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:11 GMT
Content-Type: image/gif
Content-Length: 3573
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Mon, 13 Mar 2023 23:55:34 GMT
ETag: "df5-5f6d0d8c7d08b"
Accept-Ranges: bytes
217.195.197.85/images/data/artifacts/shlem_uvorot1-5pvp_purple.gif
200 OK 3.1 kB URL GET HTTP/1.1 217.195.197.85/images/data/artifacts/shlem_uvorot1-5pvp_purple.gif
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type GIF image data, version 89a, 60 x 60\012- data
Hash 3cd3a12300296f444331052de515c0e2
a69f6ec9dabd5190158d6788094bc5689197012b
1751e2b9b07cd7a2da4e9379f035672b58f5642c00fe84fedf5c0319ddfb5145
Analyzer Verdict Alert quad9 Sinkholed
GET /images/data/artifacts/shlem_uvorot1-5pvp_purple.gif HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:11 GMT
Content-Type: image/gif
Content-Length: 3135
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Mon, 13 Mar 2023 23:54:46 GMT
ETag: "c3f-5f6d0d5f7c481"
Accept-Ranges: bytes
217.195.197.85/images/data/artifacts/sword2_uvorot1-5pvp_purple.gif
200 OK 3.2 kB URL GET HTTP/1.1 217.195.197.85/images/data/artifacts/sword2_uvorot1-5pvp_purple.gif
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type GIF image data, version 89a, 60 x 60\012- data
Hash 099ec2a47e989aabf9559f5ff75f73ca
19523a973b4fc8b95aa0185ab3ee84201aca99c1
15b92d5bad31cd9583419d5227c4b374490502d528480689b907b7df65598c29
Analyzer Verdict Alert quad9 Sinkholed
GET /images/data/artifacts/sword2_uvorot1-5pvp_purple.gif HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:11 GMT
Content-Type: image/gif
Content-Length: 3175
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Mon, 13 Mar 2023 23:54:31 GMT
ETag: "c67-5f6d0d50c4f28"
Accept-Ranges: bytes
217.195.197.85/images/data/artifacts/shlem_krit1-5pvp_purple.gif
200 OK 3.4 kB URL GET HTTP/1.1 217.195.197.85/images/data/artifacts/shlem_krit1-5pvp_purple.gif
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type GIF image data, version 89a, 60 x 60\012- data
Hash a0577e364400c9e972ddf373406338b5
0137196c903807b92f7db0806ce7e96779055b97
1971ea0cd221227ce831dd5792f436f41fc9acc1b5e25a774a368fa720c9270a
Analyzer Verdict Alert quad9 Sinkholed
GET /images/data/artifacts/shlem_krit1-5pvp_purple.gif HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:11 GMT
Content-Type: image/gif
Content-Length: 3416
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Mon, 13 Mar 2023 23:54:47 GMT
ETag: "d58-5f6d0d60750f9"
Accept-Ranges: bytes
217.195.197.85/images/data/artifacts/bot_krit1-5pvp_purple.gif
200 OK 3.7 kB URL GET HTTP/1.1 217.195.197.85/images/data/artifacts/bot_krit1-5pvp_purple.gif
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type GIF image data, version 89a, 60 x 60\012- data
Hash c63cb9facb74ddc613babbd98d9e1b5b
5c039ce07052287c72525fe1d92dc4a4261ff116
30fbb372858c8d7c04c7e8a42fe2e22df8ee24ca41167e6d21cc84887860f36a
Analyzer Verdict Alert quad9 Sinkholed
GET /images/data/artifacts/bot_krit1-5pvp_purple.gif HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:11 GMT
Content-Type: image/gif
Content-Length: 3686
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Mon, 13 Mar 2023 23:57:44 GMT
ETag: "e66-5f6d0e0926da9"
Accept-Ranges: bytes
217.195.197.85/images/data/artifacts/plechi_krit1-5pvp_purple.gif
200 OK 3.6 kB URL GET HTTP/1.1 217.195.197.85/images/data/artifacts/plechi_krit1-5pvp_purple.gif
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type GIF image data, version 89a, 60 x 60\012- data
Hash e4d0db8676d90697d4c6e527d29ccdad
d590b538e52b56a87c6523277fcbb03a63afb662
ca4ade4a786465a2e998976ce4de7b276bf046669fa60e12c9592c427f779c41
Analyzer Verdict Alert quad9 Sinkholed
GET /images/data/artifacts/plechi_krit1-5pvp_purple.gif HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:11 GMT
Content-Type: image/gif
Content-Length: 3600
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Mon, 13 Mar 2023 23:55:32 GMT
ETag: "e10-5f6d0d8a98e73"
Accept-Ranges: bytes
217.195.197.85/images/data/artifacts/perchi_krit1-5pvp_purple.gif
200 OK 3.6 kB URL GET HTTP/1.1 217.195.197.85/images/data/artifacts/perchi_krit1-5pvp_purple.gif
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type GIF image data, version 89a, 60 x 60\012- data
Hash 200ab3692a3e1916026b3261b0822edf
2391cf179ca68078fc22511b808431417b333b4f
c5ad5d44533ca7cb9646ce61a781d80b6479cd239440a27699d7c42cea36f1e3
Analyzer Verdict Alert quad9 Sinkholed
GET /images/data/artifacts/perchi_krit1-5pvp_purple.gif HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:11 GMT
Content-Type: image/gif
Content-Length: 3558
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Mon, 13 Mar 2023 23:55:34 GMT
ETag: "de6-5f6d0d8caca43"
Accept-Ranges: bytes
217.195.197.85/images/data/artifacts/kolch_krit1-5pvp_purple.gif
200 OK 3.7 kB URL GET HTTP/1.1 217.195.197.85/images/data/artifacts/kolch_krit1-5pvp_purple.gif
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type GIF image data, version 89a, 60 x 60\012- data
Hash 4f5a883bf7aabf0b07ee89321da663b4
719a3300599e625df05a62f55893a5a9720bab0f
5b2e16feabee2ca821c306dae3c603a698de2b8e35ee8ff0a06ed85cc5f6d18d
Analyzer Verdict Alert quad9 Sinkholed
GET /images/data/artifacts/kolch_krit1-5pvp_purple.gif HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:11 GMT
Content-Type: image/gif
Content-Length: 3698
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Mon, 13 Mar 2023 23:56:15 GMT
ETag: "e72-5f6d0db37bf1d"
Accept-Ranges: bytes
217.195.197.85/images/data/artifacts/bronya_krit1-5pvp_purple.gif
200 OK 3.6 kB URL GET HTTP/1.1 217.195.197.85/images/data/artifacts/bronya_krit1-5pvp_purple.gif
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type GIF image data, version 89a, 60 x 60\012- data
Hash 34ceaad146c5ce7eb7ad5b705530fcf6
d8a820624d266897a302fe24d1da4ae4adb6bf40
4cebc83ad4d140bfb3a1e13f487133c5238aebf7bb6c4ee817e1eeee72ffd6dd
Analyzer Verdict Alert quad9 Sinkholed
GET /images/data/artifacts/bronya_krit1-5pvp_purple.gif HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:11 GMT
Content-Type: image/gif
Content-Length: 3602
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Mon, 13 Mar 2023 23:57:41 GMT
ETag: "e12-5f6d0e0595c49"
Accept-Ranges: bytes
217.195.197.85/images/data/artifacts/bot_tank1-5pvp_purple.gif
200 OK 3.4 kB URL GET HTTP/1.1 217.195.197.85/images/data/artifacts/bot_tank1-5pvp_purple.gif
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type GIF image data, version 89a, 60 x 60\012- data
Hash a565a38b975e28a7c813b4e6ea12d5bb
3f99a9a7184c95f22de5ab7353b6973ea11a55a5
073b68a10adbf61cac14650b53b31983fad8140fe457e5bb7f97810649320cee
Analyzer Verdict Alert quad9 Sinkholed
GET /images/data/artifacts/bot_tank1-5pvp_purple.gif HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:11 GMT
Content-Type: image/gif
Content-Length: 3437
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Mon, 13 Mar 2023 23:57:44 GMT
ETag: "d6d-5f6d0e09115e9"
Accept-Ranges: bytes
217.195.197.85/images/data/artifacts/shlem_tank1-5pvp_purple.gif
200 OK 3.4 kB URL GET HTTP/1.1 217.195.197.85/images/data/artifacts/shlem_tank1-5pvp_purple.gif
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type GIF image data, version 89a, 60 x 60\012- data
Hash 529fde4479b223ae1f2562c9fce98a57
d61c599d691b6f1a0c8dbf1c90b4c170fa19d41e
91de4098ce70e51dd368a83f8bd884c53d87ad48e3dc882ac81160f8dba5d1b6
Analyzer Verdict Alert quad9 Sinkholed
GET /images/data/artifacts/shlem_tank1-5pvp_purple.gif HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:11 GMT
Content-Type: image/gif
Content-Length: 3389
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Mon, 13 Mar 2023 23:54:47 GMT
ETag: "d3d-5f6d0d5f9cff1"
Accept-Ranges: bytes
217.195.197.85/images/data/artifacts/plechi_tank1-5pvp_purple.gif
200 OK 3.5 kB URL GET HTTP/1.1 217.195.197.85/images/data/artifacts/plechi_tank1-5pvp_purple.gif
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type GIF image data, version 89a, 60 x 60\012- data
Hash 25866ab83328809e40d9c6b724dfd9de
e93db3faa2fcfeba18df0e816e8702ae1c0de0ca
263573daa3916717b433f39d62c6714963999bed761029f7a80ae4a977725947
Analyzer Verdict Alert quad9 Sinkholed
GET /images/data/artifacts/plechi_tank1-5pvp_purple.gif HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:11 GMT
Content-Type: image/gif
Content-Length: 3524
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Mon, 13 Mar 2023 23:55:31 GMT
ETag: "dc4-5f6d0d8a5fc63"
Accept-Ranges: bytes
217.195.197.85/images/data/artifacts/shtani_krit1-5pvp_purple.gif
200 OK 3.6 kB URL GET HTTP/1.1 217.195.197.85/images/data/artifacts/shtani_krit1-5pvp_purple.gif
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type GIF image data, version 89a, 60 x 60\012- data
Hash 6aab389dc46465d2d7e79d8d8ebc5aa7
997ed350cc7c044c4560968418beff2097f6875a
a9b7bb7fac1c3a578f11604e164c65bc0932fad4867f32f403b9bc2ae4e6a753
Analyzer Verdict Alert quad9 Sinkholed
GET /images/data/artifacts/shtani_krit1-5pvp_purple.gif HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:11 GMT
Content-Type: image/gif
Content-Length: 3566
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Mon, 13 Mar 2023 23:54:46 GMT
ETag: "dee-5f6d0d5e98fc9"
Accept-Ranges: bytes
217.195.197.85/images/data/artifacts/sword_krit1-5pvp_purple.gif
200 OK 3.4 kB URL GET HTTP/1.1 217.195.197.85/images/data/artifacts/sword_krit1-5pvp_purple.gif
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type GIF image data, version 89a, 60 x 60\012- data
Hash e40ffde6c8a7dd591ddda3653e58e61d
df7f871c69c693bfd69331480f7608f561959854
388f8947dfa2030cf34ecabcd1a771b56a2730f30deb93f2d37eab5b2680a6b5
Analyzer Verdict Alert quad9 Sinkholed
GET /images/data/artifacts/sword_krit1-5pvp_purple.gif HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:11 GMT
Content-Type: image/gif
Content-Length: 3368
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Mon, 13 Mar 2023 23:54:31 GMT
ETag: "d28-5f6d0d50a0150"
Accept-Ranges: bytes
217.195.197.85/images/data/artifacts/perchi_tank1-5pvp_purple.gif
200 OK 3.7 kB URL GET HTTP/1.1 217.195.197.85/images/data/artifacts/perchi_tank1-5pvp_purple.gif
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type GIF image data, version 89a, 60 x 60\012- data
Hash 1d1b2421e76f7d659430cf9ee2844ea5
2fd6c381223f21137052bbcbecca705ef925078d
33857d5d5455ac04aecb6ec9e1f7b7e4b15948cb86a02112e916311a370bf758
Analyzer Verdict Alert quad9 Sinkholed
GET /images/data/artifacts/perchi_tank1-5pvp_purple.gif HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:11 GMT
Content-Type: image/gif
Content-Length: 3702
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Mon, 13 Mar 2023 23:55:34 GMT
ETag: "e76-5f6d0d8c99d7b"
Accept-Ranges: bytes
217.195.197.85/images/data/artifacts/kolch_tank1-5pvp_purple.gif
200 OK 3.4 kB URL GET HTTP/1.1 217.195.197.85/images/data/artifacts/kolch_tank1-5pvp_purple.gif
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type GIF image data, version 89a, 60 x 60\012- data
Hash 99a632abc8cbd9cbfe64fafea97c0959
d63bab7be03650a38cb01e062bcc075dbe221879
a24c23cbe17fe4ea5724ae657028b0e1f2e472dd89109663f4b398bba0bc9e2f
Analyzer Verdict Alert quad9 Sinkholed
GET /images/data/artifacts/kolch_tank1-5pvp_purple.gif HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:11 GMT
Content-Type: image/gif
Content-Length: 3380
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Mon, 13 Mar 2023 23:56:14 GMT
ETag: "d34-5f6d0db35f615"
Accept-Ranges: bytes
217.195.197.85/images/data/artifacts/bronya_tank1-5pvp_purple.gif
200 OK 3.4 kB URL GET HTTP/1.1 217.195.197.85/images/data/artifacts/bronya_tank1-5pvp_purple.gif
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type GIF image data, version 89a, 60 x 60\012- data
Hash 47bcb687a3bd05ce4751a1a343b07e85
0b4faffa786b030392eca4c9b9c346fc2a90875a
84899f8cfb758e22773d28c600858b76cb9e09754b0ee0fda6c397426f7dfb72
Analyzer Verdict Alert quad9 Sinkholed
GET /images/data/artifacts/bronya_tank1-5pvp_purple.gif HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:11 GMT
Content-Type: image/gif
Content-Length: 3445
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Mon, 13 Mar 2023 23:57:40 GMT
ETag: "d75-5f6d0e0516d09"
Accept-Ranges: bytes
217.195.197.85/images/data/artifacts/shtani_tank1-5pvp_purple.gif
200 OK 3.7 kB URL GET HTTP/1.1 217.195.197.85/images/data/artifacts/shtani_tank1-5pvp_purple.gif
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type GIF image data, version 89a, 60 x 60\012- data
Hash 4e50adacb048acf18ef7441bdd4cc066
f71fb070b2b796397e17800d9799b7a2caacc656
f216381562f244ae1856f31cdbbadcdf1b31599f24d662bcdd9c8c87311f52b7
Analyzer Verdict Alert quad9 Sinkholed
GET /images/data/artifacts/shtani_tank1-5pvp_purple.gif HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:11 GMT
Content-Type: image/gif
Content-Length: 3662
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Mon, 13 Mar 2023 23:54:45 GMT
ETag: "e4e-5f6d0d5e6f7b9"
Accept-Ranges: bytes
217.195.197.85/images/data/artifacts/sword1_tank1-5pvp_purple.gif
200 OK 3.4 kB URL GET HTTP/1.1 217.195.197.85/images/data/artifacts/sword1_tank1-5pvp_purple.gif
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type GIF image data, version 89a, 60 x 60\012- data
Hash 1f5d1aa789567726f299566ab879428b
91d82d6b11e3ebdd95e0014c44e9b7ff49e0cbba
3d977e8784c0c81d2dd509b80fbd6e81264642dba49bf20640bf2f00b82086c9
Analyzer Verdict Alert quad9 Sinkholed
GET /images/data/artifacts/sword1_tank1-5pvp_purple.gif HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:11 GMT
Content-Type: image/gif
Content-Length: 3391
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Mon, 13 Mar 2023 23:54:31 GMT
ETag: "d3f-5f6d0d50e81a8"
Accept-Ranges: bytes
217.195.197.85/images/data/artifacts/shield_tank1-5pvp_purple.gif
200 OK 3.6 kB URL GET HTTP/1.1 217.195.197.85/images/data/artifacts/shield_tank1-5pvp_purple.gif
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type GIF image data, version 89a, 60 x 60\012- data
Hash bd4ea24e2e6333fdaa1e0c6508c252e6
01f728764e4782aa809be49aae22fbf33182f7e6
73e72d7e2b55f8b2786557ddbdf5f6a72d7cfad75872d72a050feae228ec9dcd
Analyzer Verdict Alert quad9 Sinkholed
GET /images/data/artifacts/shield_tank1-5pvp_purple.gif HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:11 GMT
Content-Type: image/gif
Content-Length: 3563
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Mon, 13 Mar 2023 23:54:49 GMT
ETag: "deb-5f6d0d61c34a1"
Accept-Ranges: bytes
217.195.197.85/images/data/artifacts/gri.gif
200 OK 4.6 kB URL GET HTTP/1.1 217.195.197.85/images/data/artifacts/gri.gif
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type GIF image data, version 89a, 60 x 60\012- data
Hash 9e8a1cb7a0cb2f34d83b4994f9ddfa64
386a1c208ee070e17c98d3b108ec73aa0a10960f
d28fe2b0bcc6cdc52a3cd1125d855c86536c62c33a9d9fb24cd4020c880564ec
Analyzer Verdict Alert quad9 Sinkholed
GET /images/data/artifacts/gri.gif HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:11 GMT
Content-Type: image/gif
Content-Length: 4567
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Wed, 17 May 2023 13:02:04 GMT
ETag: "11d7-5fbe34b6a5aa5"
Accept-Ranges: bytes
217.195.197.85/images/data/artifacts/yesil.gif
200 OK 4.6 kB URL GET HTTP/1.1 217.195.197.85/images/data/artifacts/yesil.gif
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type GIF image data, version 89a, 60 x 60\012- data
Hash 541be6d331bb871f30bb0d4ad87f84cc
f200decc01d9342118ca22d010fc0db87589d499
2b816b577cc8040b8f750f26ec75282f0d6b2b1876f730c6145010c1f2b2dc87
Analyzer Verdict Alert quad9 Sinkholed
GET /images/data/artifacts/yesil.gif HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:11 GMT
Content-Type: image/gif
Content-Length: 4570
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Wed, 17 May 2023 13:02:38 GMT
ETag: "11da-5fbe34d635963"
Accept-Ranges: bytes
217.195.197.85/images/data/artifacts/mavi.gif
200 OK 4.5 kB URL GET HTTP/1.1 217.195.197.85/images/data/artifacts/mavi.gif
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type GIF image data, version 89a, 60 x 60\012- data
Hash b5687f566e1376dfc80203d3a73e2fc4
be27a439b3e21e39766d2d3e2bb8b52ab7694f00
d1dbd7065813f3a24406a664ebe76740ce1663f5eecc76163af7134bdea03fb6
Analyzer Verdict Alert quad9 Sinkholed
GET /images/data/artifacts/mavi.gif HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:11 GMT
Content-Type: image/gif
Content-Length: 4494
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Wed, 17 May 2023 13:03:18 GMT
ETag: "118e-5fbe34fcab270"
Accept-Ranges: bytes
217.195.197.85/images/data/artifacts/mor.gif
200 OK 4.5 kB URL GET HTTP/1.1 217.195.197.85/images/data/artifacts/mor.gif
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type GIF image data, version 89a, 60 x 60\012- data
Hash 9e76927fb17eb810d4846a178de21245
1d8e2ad5147191bc6dcadb7a74f2f8d03176b258
a5d6fc05b2ff07ba065517fe47fc1d44450fcb3a35d3a86f0516c2ae3028cb3e
Analyzer Verdict Alert quad9 Sinkholed
GET /images/data/artifacts/mor.gif HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:11 GMT
Content-Type: image/gif
Content-Length: 4483
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Wed, 17 May 2023 13:03:44 GMT
ETag: "1183-5fbe351522a5e"
Accept-Ranges: bytes
www.dwarofraces.com.tr/images/data/bots/furija_16_small.jpg
403 Forbidden 4.2 kB URL GET HTTP/3 www.dwarofraces.com.tr/images/data/bots/furija_16_small.jpg
IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint20:3D:27:50:E6:45:21:01:FD:2C:AC:1A:74:69:40:8A:0D:6A:68:F9
ValiditySun, 19 Mar 2023 00:00:00 GMT - Mon, 18 Mar 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (501)
Hash 57139a0c050ef8dab621ca7f1d5211e5
69b35c7391db185ab1d1ecfbe3098ec2472f0e88
bfc3bc382a1c401f3696130552cb0457e61f5975680d032d5a8e44dbbee8cc29
GET /images/data/bots/furija_16_small.jpg HTTP/1.1
Host: www.dwarofraces.com.tr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 403 Forbidden
date: Sun, 21 May 2023 22:08:09 GMT
content-type: text/html; charset=UTF-8
vary: Referer, Accept-Encoding
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oNISe51C6TgZSpbVgHjBvK2KMa108e5VjXQ2Hn%2FeIqp6zyqbeYA%2FA5DXq9%2B%2BuQjHr3PYubhJhtgZKHe7dSUq0xBzZxd7gI7YG%2Bk5Pwwx4pWgDT%2BXnCIBCARUMO1GTylXbInOTPq6pLmQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cb022e86ae6b515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
217.195.197.85/images/tpl/tbl-2-bottom.png
200 OK 12 kB URL GET HTTP/1.1 217.195.197.85/images/tpl/tbl-2-bottom.png
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type PNG image data, 302 x 18, 8-bit/color RGBA, non-interlaced\012- data
Hash 7b15b0f6d44f301bc913fc1c3ee29327
0a321041ef77c6375dd3c9019f1fd04a414edbff
2b5383e288081c438dd6dac05ca73cc1b05bd044d46d47c46282963d75d79e25
Analyzer Verdict Alert quad9 Sinkholed
GET /images/tpl/tbl-2-bottom.png HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/v2/style/maine2db.css?ux=298
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:11 GMT
Content-Type: image/png
Content-Length: 11866
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Tue, 14 Mar 2023 00:03:53 GMT
ETag: "2e5a-5f6d0f686f533"
Accept-Ranges: bytes
217.195.197.85/images/tpl/tbl-top-left.png
200 OK 2.0 kB URL GET HTTP/1.1 217.195.197.85/images/tpl/tbl-top-left.png
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type PNG image data, 17 x 17, 8-bit/color RGBA, non-interlaced\012- data
Hash 0f6d19cc6e09b9eb7d19160ec2ffe77c
dc145d96b55c7ba0481cf4cb045caec766fdb4d2
984754a1bfb3d91ca31e2f7c7b8125babc44d4c54eb6750376c8cd88224c14f5
Analyzer Verdict Alert quad9 Sinkholed
GET /images/tpl/tbl-top-left.png HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/v2/style/maine2db.css?ux=298
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:11 GMT
Content-Type: image/png
Content-Length: 1985
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Tue, 14 Mar 2023 00:03:53 GMT
ETag: "7c1-5f6d0f685b8cb"
Accept-Ranges: bytes
217.195.197.85/images/tpl/tbl-top.png
200 OK 14 kB URL GET HTTP/1.1 217.195.197.85/images/tpl/tbl-top.png
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type PNG image data, 302 x 17, 8-bit/color RGBA, non-interlaced\012- data
Hash e5b7488e0c4a337239e2a168a31210da
3c972771a962076abea405bf7e50d80eee7f2239
8e98ff400ee45e491295c4d3e1e593ebea7749057304bcd9a7d8c98ab9d85435
Analyzer Verdict Alert quad9 Sinkholed
GET /images/tpl/tbl-top.png HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/v2/style/maine2db.css?ux=298
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:11 GMT
Content-Type: image/png
Content-Length: 14007
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Tue, 14 Mar 2023 00:03:53 GMT
ETag: "36b7-5f6d0f6857663"
Accept-Ranges: bytes
217.195.197.85/images/tpl/tbl-2-bottom-right.png
200 OK 2.3 kB URL GET HTTP/1.1 217.195.197.85/images/tpl/tbl-2-bottom-right.png
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type PNG image data, 17 x 17, 8-bit/color RGBA, non-interlaced\012- data
Hash 17cb712df2da92b37594be25001a64f7
55d19234b4f7afae08689100e015d5f43f1c4cba
b1c07067a091be5bc0a6fbf8ea88e7ae7c8f340c2322ee1ebe75142172a1cd7c
Analyzer Verdict Alert quad9 Sinkholed
GET /images/tpl/tbl-2-bottom-right.png HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/v2/style/maine2db.css?ux=298
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:11 GMT
Content-Type: image/png
Content-Length: 2317
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Tue, 14 Mar 2023 00:03:53 GMT
ETag: "90d-5f6d0f685a15b"
Accept-Ranges: bytes
217.195.197.85/images/bg-divider-2.png
200 OK 6.5 kB URL GET HTTP/1.1 217.195.197.85/images/bg-divider-2.png
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type PNG image data, 1000 x 48, 8-bit/color RGBA, non-interlaced\012- data
Hash 866ce2794eedf26be8e923c156a570ea
7be2eb249a35285de0a03470fb644eccb491e096
221ec0c198f8b1c3e89ad35237d129904b7dc2ceab1085ae13d1099128d42b69
Analyzer Verdict Alert quad9 Sinkholed
GET /images/bg-divider-2.png HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/v2/style/main.css?ux=298
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:11 GMT
Content-Type: image/png
Content-Length: 6515
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Mon, 13 Mar 2023 23:40:03 GMT
ETag: "1973-5f6d0a15186a7"
Accept-Ranges: bytes
217.195.197.85/images/tpl/tbl-top-right.png
200 OK 2.0 kB URL GET HTTP/1.1 217.195.197.85/images/tpl/tbl-top-right.png
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type PNG image data, 17 x 17, 8-bit/color RGBA, non-interlaced\012- data
Hash f80a7f7d9d823f87c258b9d7df086d9c
1daa62bda1ea980dbc664768bd2b5388e4f40635
41b15e99f771adc0f028a72bb61c2b5dcc8298e7e8408dc9f99173b2d380d9dc
Analyzer Verdict Alert quad9 Sinkholed
GET /images/tpl/tbl-top-right.png HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/v2/style/maine2db.css?ux=298
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:11 GMT
Content-Type: image/png
Content-Length: 2013
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Tue, 14 Mar 2023 00:03:53 GMT
ETag: "7dd-5f6d0f68566c3"
Accept-Ranges: bytes
217.195.197.85/images/tpl/tbl-left.png
200 OK 5.1 kB URL GET HTTP/1.1 217.195.197.85/images/tpl/tbl-left.png
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type PNG image data, 17 x 194, 8-bit/color RGBA, non-interlaced\012- data
Hash b76085973a228e1c721d7ea43e31ac80
5bdb05e63e38f987c9417d1cbecaedef9476abd4
72d0e7e0a34f97aea875df4687572903c449003a6a57e091e7ed1ba87a621be5
Analyzer Verdict Alert quad9 Sinkholed
GET /images/tpl/tbl-left.png HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/v2/style/maine2db.css?ux=298
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:11 GMT
Content-Type: image/png
Content-Length: 5078
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Tue, 14 Mar 2023 00:03:53 GMT
ETag: "13d6-5f6d0f686262b"
Accept-Ranges: bytes
217.195.197.85/images/tpl/tbl-right.png
200 OK 5.2 kB URL GET HTTP/1.1 217.195.197.85/images/tpl/tbl-right.png
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type PNG image data, 17 x 194, 8-bit/color RGBA, non-interlaced\012- data
Hash 68aa1936aa82538f43d5fe0dec1c028d
e047d611ba3917c5b80aaa194e0e56f7327cfd04
ffd3f3ee3159b13b39bb16d592d079759e5f67ef7c371dcbcf6854cf461b5ead
Analyzer Verdict Alert quad9 Sinkholed
GET /images/tpl/tbl-right.png HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/v2/style/maine2db.css?ux=298
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:11 GMT
Content-Type: image/png
Content-Length: 5241
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Tue, 14 Mar 2023 00:03:53 GMT
ETag: "1479-5f6d0f6859d73"
Accept-Ranges: bytes
217.195.197.85/images/tpl/tbl-bottom-left.png
200 OK 2.1 kB URL GET HTTP/1.1 217.195.197.85/images/tpl/tbl-bottom-left.png
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type PNG image data, 17 x 17, 8-bit/color RGBA, non-interlaced\012- data
Hash d16c59416a304cbc03c3b3f655e3f04b
8a923a18ba3bbbbc9dce9b142fe18cf4ad253257
518d742671d0267e2d0ac2e85d85f9d3b3155b8ba6483221cf0b8a3e6d07757f
Analyzer Verdict Alert quad9 Sinkholed
GET /images/tpl/tbl-bottom-left.png HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/v2/style/maine2db.css?ux=298
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:11 GMT
Content-Type: image/png
Content-Length: 2112
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Tue, 14 Mar 2023 00:03:53 GMT
ETag: "840-5f6d0f68708bb"
Accept-Ranges: bytes
217.195.197.85/images/tpl/tbl-bottom-right.png
200 OK 2.1 kB URL GET HTTP/1.1 217.195.197.85/images/tpl/tbl-bottom-right.png
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type PNG image data, 17 x 17, 8-bit/color RGBA, non-interlaced\012- data
Hash f6a58d7de83fa8dd473c97d108ce5a73
e4ae334d41a64cedc8900b8f4e27329976374560
224031f809123b41800a1b45184b392af99ae242756b62c828bd2607b30414db
Analyzer Verdict Alert quad9 Sinkholed
GET /images/tpl/tbl-bottom-right.png HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/v2/style/maine2db.css?ux=298
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:11 GMT
Content-Type: image/png
Content-Length: 2128
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Tue, 14 Mar 2023 00:03:53 GMT
ETag: "850-5f6d0f68727fb"
Accept-Ranges: bytes
217.195.197.85/images/data/artifacts/11491_fragmen_cepi.gif
200 OK 4.5 kB URL GET HTTP/1.1 217.195.197.85/images/data/artifacts/11491_fragmen_cepi.gif
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type GIF image data, version 89a, 60 x 60\012- data
Hash 1efee35c47fdfc5eeda2531a11dc90c4
4bf196c6592a1d6a6e74feeea1ebb8d2a474c6f0
2690a67e3e781fdc3b3d641dc38f2a875e25936e2db396875c6302d8e387027a
Analyzer Verdict Alert quad9 Sinkholed
GET /images/data/artifacts/11491_fragmen_cepi.gif HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:11 GMT
Content-Type: image/gif
Content-Length: 4452
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Mon, 13 Mar 2023 23:58:34 GMT
ETag: "1164-5f6d0e38c8b3c"
Accept-Ranges: bytes
217.195.197.85/images/data/artifacts/new-cart-pack.gif
200 OK 4.0 kB URL GET HTTP/1.1 217.195.197.85/images/data/artifacts/new-cart-pack.gif
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type GIF image data, version 89a, 60 x 60\012- data
Hash 5338dec90ce085fbb98110a08daea5e9
d5b53165eb77158811961a20b5ec2d8d10a49a87
62fa07880440bb4f1e0c1204f0cb682481e1ff3f8b32ab6367cce18324cafcfe
Analyzer Verdict Alert quad9 Sinkholed
GET /images/data/artifacts/new-cart-pack.gif HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:11 GMT
Content-Type: image/gif
Content-Length: 4000
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Mon, 13 Mar 2023 23:53:58 GMT
ETag: "fa0-5f6d0d30cf0ff"
Accept-Ranges: bytes
217.195.197.85/images/data/artifacts/gyaratkk.gif
200 OK 36 kB URL GET HTTP/1.1 217.195.197.85/images/data/artifacts/gyaratkk.gif
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type GIF image data, version 89a, 60 x 60\012- data
Hash 682adf808a06cbac60e062780a4e8684
47d49c853beeaa3536f1cf2e8c0565b76013f24f
edccf669260644936e719f4a76efcd6e6c1977e5ef46d2dfac5d8907501ddc45
Analyzer Verdict Alert quad9 Sinkholed
GET /images/data/artifacts/gyaratkk.gif HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:11 GMT
Content-Type: image/gif
Content-Length: 36432
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Wed, 17 May 2023 13:05:55 GMT
ETag: "8e50-5fbe35920b500"
Accept-Ranges: bytes
217.195.197.85/images/tpl/tbl-bottom.png
200 OK 13 kB URL GET HTTP/1.1 217.195.197.85/images/tpl/tbl-bottom.png
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type PNG image data, 302 x 18, 8-bit/color RGBA, non-interlaced\012- data
Hash fe4050a6919a7eecce285d9435bf881c
4dadd750bfc3bbb2692d6bc409e3daaf726e8a46
90eaef4cac4f0ee173230e8dfe4a476a4f00941a118e355338defd47559aff3c
Analyzer Verdict Alert quad9 Sinkholed
GET /images/tpl/tbl-bottom.png HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/v2/style/maine2db.css?ux=298
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:11 GMT
Content-Type: image/png
Content-Length: 13363
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Tue, 14 Mar 2023 00:03:53 GMT
ETag: "3433-5f6d0f686d5f3"
Accept-Ranges: bytes
217.195.197.85/images/data/artifacts/kristallugol_blue2310.gif
200 OK 3.6 kB URL GET HTTP/1.1 217.195.197.85/images/data/artifacts/kristallugol_blue2310.gif
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type GIF image data, version 89a, 60 x 60\012- data
Hash 78a5f1afe4d3c0780fba2e2cdfbb28d9
7a29d44ab35413ff9113d82951172e04597ce36c
29beb5cd554161968137119b86e41f7943b28c8021a571c377adabc5105c6c39
Analyzer Verdict Alert quad9 Sinkholed
GET /images/data/artifacts/kristallugol_blue2310.gif HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:12 GMT
Content-Type: image/gif
Content-Length: 3630
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Mon, 13 Mar 2023 23:56:03 GMT
ETag: "e2e-5f6d0da841ad5"
Accept-Ranges: bytes
217.195.197.85/images/data/artifacts/scroll_slop_16.gif
200 OK 5.3 kB URL GET HTTP/1.1 217.195.197.85/images/data/artifacts/scroll_slop_16.gif
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type GIF image data, version 89a, 60 x 60\012- data
Hash e66956143d6ad9bf4590045de291a52f
e205fe827e50b9ed60e7948716f3db533b9b4ad5
e8bdd8bdb548714201a7757773d043d0ab81e2196b8a87aebe7b36cefd828ae9
Analyzer Verdict Alert quad9 Sinkholed
GET /images/data/artifacts/scroll_slop_16.gif HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:12 GMT
Content-Type: image/gif
Content-Length: 5341
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Mon, 13 Mar 2023 23:54:54 GMT
ETag: "14dd-5f6d0d6711331"
Accept-Ranges: bytes
217.195.197.85/images/buttons/red-3.png
200 OK 41 kB URL GET HTTP/1.1 217.195.197.85/images/buttons/red-3.png
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type PNG image data, 1000 x 224, 8-bit/color RGBA, non-interlaced\012- data
Hash b10e64295c7976e0570603c773187b7c
3342be568db5d231470d0880c93bccd601ffa5ee
dcdbd2cd2b1c9b818aebaca61c897448118f8c2ed68361e9642ece66b87aa00c
Analyzer Verdict Alert quad9 Sinkholed
GET /images/buttons/red-3.png HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/v2/style/main.css?ux=298
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:12 GMT
Content-Type: image/png
Content-Length: 41260
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Tue, 14 Mar 2023 00:03:55 GMT
ETag: "a12c-5f6d0f6a3b0ab"
Accept-Ranges: bytes
217.195.197.85/images/data/artifacts/scroll_tank_16.gif
200 OK 5.3 kB URL GET HTTP/1.1 217.195.197.85/images/data/artifacts/scroll_tank_16.gif
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type GIF image data, version 89a, 60 x 60\012- data
Hash d2aee51cf22f64b151a0e75b68c3eef9
6535b2f53c023a8375a178dfd285df016467854e
a143dfcfc647898240e2b2f4329f7091d098ac1cbae6534a789a039fca26fa95
Analyzer Verdict Alert quad9 Sinkholed
GET /images/data/artifacts/scroll_tank_16.gif HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:12 GMT
Content-Type: image/gif
Content-Length: 5277
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Mon, 13 Mar 2023 23:54:54 GMT
ETag: "149d-5f6d0d6706369"
Accept-Ranges: bytes
217.195.197.85/v2/images/bg-news-more.png
200 OK 15 kB URL GET HTTP/1.1 217.195.197.85/v2/images/bg-news-more.png
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type PNG image data, 133 x 112, 8-bit/color RGBA, non-interlaced\012- data
Hash d7e89d748ec1b17bdd717ec206d12a3c
163b7f95bcf14c8ed43497719b1ce2c3e5244e80
4957c19ff89021609898b485dad7d55e8dc678e37319d615ac373a6829cfd903
Analyzer Verdict Alert quad9 Sinkholed
GET /v2/images/bg-news-more.png HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/v2/style/index2d42.css?ux=1546806283
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:12 GMT
Content-Type: image/png
Content-Length: 15263
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Tue, 14 Mar 2023 00:04:57 GMT
ETag: "3b9f-5f6d0fa562d76"
Accept-Ranges: bytes
217.195.197.85/favicon.ico
200 OK 4.3 kB URL GET HTTP/1.1 217.195.197.85/favicon.ico
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel\012- data
Hash eadd1e84b638d003114835be48b4f5c3
83b12d2193716e2655c13728ad3161bc81d84dcc
76d693a5e99ac5d9865a4cf529abfef693e9497dc99cfee14f87055d11fb37d5
Analyzer Verdict Alert quad9 Sinkholed
GET /favicon.ico HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:12 GMT
Content-Type: image/vnd.microsoft.icon
Content-Length: 4286
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Mon, 13 Mar 2023 23:39:20 GMT
ETag: "10be-5f6d09ebd56d5"
Accept-Ranges: bytes
217.195.197.85/images/data/artifacts/donat.gif
200 OK 86 kB URL GET HTTP/1.1 217.195.197.85/images/data/artifacts/donat.gif
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type GIF image data, version 89a, 60 x 60\012- data
Hash 55ec659834d603db7d1914cfe23b37c1
db9cdea01d382b740e72fbb01333a2cde1414b61
2b56794fe7de40e124a5cbca10d7d04c5f164900bec6eaf8605da28ad1a5b738
Analyzer Verdict Alert quad9 Sinkholed
GET /images/data/artifacts/donat.gif HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:12 GMT
Content-Type: image/gif
Content-Length: 85661
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Mon, 13 Mar 2023 23:54:00 GMT
ETag: "14e9d-5f6d0d338006f"
Accept-Ranges: bytes
217.195.197.85/v2/images/logo_elements.png
200 OK 3.4 MB URL GET HTTP/1.1 217.195.197.85/v2/images/logo_elements.png
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced\012- data
Size 3.4 MB (3438906 bytes)
Hash 72d556feef9717cf4ecf08100fe0ffad
cee7849c3c89cd837530a7cb24e40f7a66e3bf94
0c94b365b0785e812c02bbc3cbd4fcbb96cf6415c3b773d6d057e520e5974df7
Analyzer Verdict Alert quad9 Sinkholed
GET /v2/images/logo_elements.png HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:08 GMT
Content-Type: image/png
Content-Length: 3438906
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Tue, 14 Mar 2023 00:04:57 GMT
ETag: "34793a-5f6d0fa562d76"
Accept-Ranges: bytes
217.195.197.85/images/frames/main-decor-tl.png
200 OK 956 B URL GET HTTP/1.1 217.195.197.85/images/frames/main-decor-tl.png
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type PNG image data, 25 x 25, 8-bit/color RGBA, non-interlaced\012- data
Hash 19bff31944b7e18050e8e387930a4978
0a6734bba3ffc388f67a451ae4de32f3804fd844
e7b80f80c0f2b78c36d6cfa2cb721f327af9f41d6ff2e43984b93fc3934c2a6f
Analyzer Verdict Alert quad9 Sinkholed
GET /images/frames/main-decor-tl.png HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/v2/style/main.css?ux=298
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:08 GMT
Content-Type: image/png
Content-Length: 956
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Tue, 14 Mar 2023 00:04:00 GMT
ETag: "3bc-5f6d0f6f3380b"
Accept-Ranges: bytes
217.195.197.85/images/bg-logo.png
200 OK 121 kB URL GET HTTP/1.1 217.195.197.85/images/bg-logo.png
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type PNG image data, 942 x 150, 8-bit/color RGBA, non-interlaced\012- data
Size 121 kB (120980 bytes)
Hash ed75fcb2a6d6cc26975c0e8645ba0a4c
41d4b672e0d7dc15fbb495d65837142f48925dab
1b12043ac903e3df6e297d07ece04c878015865d5bd8c05385b58ee3bb75fcf9
Analyzer Verdict Alert quad9 Sinkholed
GET /images/bg-logo.png HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/v2/style/main.css?ux=298
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:08 GMT
Content-Type: image/png
Content-Length: 120980
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Mon, 13 Mar 2023 23:40:03 GMT
ETag: "1d894-5f6d0a14e17bf"
Accept-Ranges: bytes
www.dwarofraces.com.tr/images/ranks/rank14.gif
403 Forbidden 0 B URL GET HTTP/3 www.dwarofraces.com.tr/images/ranks/rank14.gif
IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint20:3D:27:50:E6:45:21:01:FD:2C:AC:1A:74:69:40:8A:0D:6A:68:F9
ValiditySun, 19 Mar 2023 00:00:00 GMT - Mon, 18 Mar 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/ranks/rank14.gif HTTP/1.1
Host: www.dwarofraces.com.tr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
date: Sun, 21 May 2023 22:08:08 GMT
content-type: text/html; charset=UTF-8
vary: Referer, Accept-Encoding
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4d3F2l7krzM9pDx8UIbQphqE2R%2FfRnRP1hFkzManFIb9TYE3jkFZIPJZjh%2B0KNCcZsulyWWL4hqjPLGyqzYAQnpmF%2F8lw%2BQYTTRr9NSREDLyh6NkXm9zV97tVRXi9wVK44caKww8pN5S"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cb022e6386ab515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
217.195.197.85/v2/images/bg-news-datetime.png
200 OK 5.8 kB URL GET HTTP/1.1 217.195.197.85/v2/images/bg-news-datetime.png
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type PNG image data, 1000 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 66708d9c156020e718e88f4aa740032a
35a7af59b50170e8756198a33180b5f1923d7f48
30a5e6854c2dc0b6680aead6ebf2771c4d723ec550f97460ae6b4f27488a5925
Analyzer Verdict Alert quad9 Sinkholed
GET /v2/images/bg-news-datetime.png HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/v2/style/index2d42.css?ux=1546806283
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:10 GMT
Content-Type: image/png
Content-Length: 5811
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Tue, 14 Mar 2023 00:04:56 GMT
ETag: "16b3-5f6d0fa506116"
Accept-Ranges: bytes
www.dwarofraces.com.tr/images/exp/exp16.png
403 Forbidden 0 B URL GET HTTP/2 www.dwarofraces.com.tr/images/exp/exp16.png
IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint20:3D:27:50:E6:45:21:01:FD:2C:AC:1A:74:69:40:8A:0D:6A:68:F9
ValiditySun, 19 Mar 2023 00:00:00 GMT - Mon, 18 Mar 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/exp/exp16.png HTTP/1.1
Host: www.dwarofraces.com.tr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
date: Sun, 21 May 2023 22:08:07 GMT
content-type: text/html; charset=UTF-8
vary: Referer, Accept-Encoding
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=z8G%2BcRkWEH1qq6d23%2BTu2oWrgVG7AFZRp%2BrDyqnRX3JzeUdfICTdPcSCuObQSOO5siRifhHGvUQqnNUbX40vXkNjodCoXoloCmBE9GYng7WBxVh2bJfc3WYbxgrNen2tEyBx0bwjkPM4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cb022dffa2fb523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.dwarofraces.com.tr/images/data/bots/leprekon.jpg
403 Forbidden 0 B URL GET HTTP/3 www.dwarofraces.com.tr/images/data/bots/leprekon.jpg
IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint20:3D:27:50:E6:45:21:01:FD:2C:AC:1A:74:69:40:8A:0D:6A:68:F9
ValiditySun, 19 Mar 2023 00:00:00 GMT - Mon, 18 Mar 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/data/bots/leprekon.jpg HTTP/1.1
Host: www.dwarofraces.com.tr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
date: Sun, 21 May 2023 22:08:09 GMT
content-type: text/html; charset=UTF-8
vary: Referer, Accept-Encoding
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1hx6GmBChG55FsaY4TPkTccNVI%2FyZnC%2B53z%2BlXf97jGeR9ihwAWVDq1Cy16c9huyPvAK1d8DH%2BAHyms2GOto57uYwnrWffy1D6oymFoQF2TYBzFcSFgqEaS%2Fm4uFUSbRb0VJ%2B%2B9BWT9y"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cb022e8cb41b515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
www.dwarofraces.com.tr/images/ranks/rank9.gif
403 Forbidden 0 B URL GET HTTP/2 www.dwarofraces.com.tr/images/ranks/rank9.gif
IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint20:3D:27:50:E6:45:21:01:FD:2C:AC:1A:74:69:40:8A:0D:6A:68:F9
ValiditySun, 19 Mar 2023 00:00:00 GMT - Mon, 18 Mar 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/ranks/rank9.gif HTTP/1.1
Host: www.dwarofraces.com.tr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
date: Sun, 21 May 2023 22:08:07 GMT
content-type: text/html; charset=UTF-8
vary: Referer, Accept-Encoding
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ssbaTprDaeOIwtX%2FbVs0%2FHYsgzp87lNToBwpWVrGeb4RlKzlDkGfM%2FgMb7ZU9kRj4L%2BEWLRhG4bOKNXMYKSAp05%2Bq3vk%2Bf7UwAvaEY3SrnyED5r%2B%2BQAwkOMT%2BdYu89A1uSpH%2B7RKbLdT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cb022dffa3ab523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
217.195.197.85/images/frames/main-b.jpg
200 OK 957 B URL GET HTTP/1.1 217.195.197.85/images/frames/main-b.jpg
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 118x14, components 3\012- data
Hash 2b5a1fa4a0e9547dd96953f5f6f16f8d
6393ba0251220608e1dd057d962a4c3ebb980350
7e21e728f9f40c0273b28125d3f5bdff4b43888127f3f9ee801f774c9c298667
Analyzer Verdict Alert quad9 Sinkholed
GET /images/frames/main-b.jpg HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/v2/style/main.css?ux=298
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:08 GMT
Content-Type: image/jpeg
Content-Length: 957
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Tue, 14 Mar 2023 00:04:00 GMT
ETag: "3bd-5f6d0f6f38a13"
Accept-Ranges: bytes
217.195.197.85/images/frames/main-decor-bl.png
200 OK 3.7 kB URL GET HTTP/1.1 217.195.197.85/images/frames/main-decor-bl.png
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type PNG image data, 89 x 121, 8-bit/color RGBA, non-interlaced\012- data
Hash d3f7bee6680db07035cce1cc6a2c857b
6d8e0a2319a1afbd3d5db5851574843160cdccbb
978d38fd3ea34d6158347e5bbe929800173c884436c4f0ed9a268f9f4ff646c7
Analyzer Verdict Alert quad9 Sinkholed
GET /images/frames/main-decor-bl.png HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/v2/style/main.css?ux=298
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:08 GMT
Content-Type: image/png
Content-Length: 3677
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Tue, 14 Mar 2023 00:04:00 GMT
ETag: "e5d-5f6d0f6f2edd3"
Accept-Ranges: bytes
217.195.197.85/images/frames/main-decor-tl-2.png
200 OK 18 kB URL GET HTTP/1.1 217.195.197.85/images/frames/main-decor-tl-2.png
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type PNG image data, 115 x 229, 8-bit/color RGBA, non-interlaced\012- data
Hash d6abc6848e83ae84ab6897100ae65cef
ae92fef265012abe1a86e9397565d7d3c2536ed8
47600243c65667047e34333631d50ce8ee1bcd60621c4387401c1a07a73321c1
Analyzer Verdict Alert quad9 Sinkholed
GET /images/frames/main-decor-tl-2.png HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/v2/style/main.css?ux=298
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:08 GMT
Content-Type: image/png
Content-Length: 17839
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Tue, 14 Mar 2023 00:04:00 GMT
ETag: "45af-5f6d0f6f30d13"
Accept-Ranges: bytes
217.195.197.85/images/frames/common-t.png
200 OK 289 B URL GET HTTP/1.1 217.195.197.85/images/frames/common-t.png
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type PNG image data, 5 x 34, 8-bit/color RGBA, non-interlaced\012- data
Hash b90c64838bbe9110735ebea1fd17691b
7157817a9ab22fd282e2e584533d895ad3549b87
1ef90592d9b803ba9dfc74f51d6628763265d46e94a6a0c0a3b4548b3304a75f
Analyzer Verdict Alert quad9 Sinkholed
GET /images/frames/common-t.png HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/v2/style/main.css?ux=298
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:09 GMT
Content-Type: image/png
Content-Length: 289
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Tue, 14 Mar 2023 00:04:00 GMT
ETag: "121-5f6d0f6f439db"
Accept-Ranges: bytes
217.195.197.85/images/tpl/tbl-2-left.png
200 OK 5.4 kB URL GET HTTP/1.1 217.195.197.85/images/tpl/tbl-2-left.png
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type PNG image data, 17 x 194, 8-bit/color RGBA, non-interlaced\012- data
Hash 04dce8968a5db6daec737069eee688b3
8bace05ca544a2486cec1d3d758b6a73bafad610
6fdbcca8afea75791536cc72985947b2c7edf059fce84eb207746ea48df9f1ba
Analyzer Verdict Alert quad9 Sinkholed
GET /images/tpl/tbl-2-left.png HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/v2/style/maine2db.css?ux=298
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:10 GMT
Content-Type: image/png
Content-Length: 5379
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Tue, 14 Mar 2023 00:03:53 GMT
ETag: "1503-5f6d0f687df93"
Accept-Ranges: bytes
217.195.197.85/images/data/artifacts/letopis_podarok1.gif
200 OK 5.7 kB URL GET HTTP/1.1 217.195.197.85/images/data/artifacts/letopis_podarok1.gif
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type GIF image data, version 89a, 60 x 60\012- data
Hash f71923fb7812f773523a6a2e3fb8c087
8e6277883c790f5efae020f557a34c9b4b1133c1
24a1074adcd8a6b9491583152369708c412bb3868cb72d17dc8b07e4403d25fa
Analyzer Verdict Alert quad9 Sinkholed
GET /images/data/artifacts/letopis_podarok1.gif HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:10 GMT
Content-Type: image/gif
Content-Length: 5713
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Wed, 17 May 2023 13:38:12 GMT
ETag: "1651-5fbe3cc9b5bfb"
Accept-Ranges: bytes
images/bg-footer-top.png
0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /bg-footer-top.png HTTP/1.1
Host: images
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Pragma: no-cache
Cache-Control: no-cache
www.dwarofraces.com.tr/images/marriage.gif
403 Forbidden 0 B URL GET HTTP/3 www.dwarofraces.com.tr/images/marriage.gif
IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint20:3D:27:50:E6:45:21:01:FD:2C:AC:1A:74:69:40:8A:0D:6A:68:F9
ValiditySun, 19 Mar 2023 00:00:00 GMT - Mon, 18 Mar 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/marriage.gif HTTP/1.1
Host: www.dwarofraces.com.tr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
date: Sun, 21 May 2023 22:08:08 GMT
content-type: text/html; charset=UTF-8
vary: Referer, Accept-Encoding
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hwWAyI0McU5JEkE1Leou6FY8UbThBUskpv7wD8xL25E%2FGIKa2KUnQebrwe26BL0Qwu7iVC83D456drFTp8hcJb0gZngw7eDIuvL%2FkQna6ErSgsWXgyhe5skE8zJyrDRCLcZBx%2BK9ruEP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cb022e668c2b515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
217.195.197.85/v2/images/buttons/red-4-icons.png
200 OK 11 kB URL GET HTTP/1.1 217.195.197.85/v2/images/buttons/red-4-icons.png
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type PNG image data, 80 x 136, 8-bit/color RGBA, non-interlaced\012- data
Hash e84dc33b9c32f1c0eb36839c005fb753
26fb5f6edb0a7e4a9c1ddf02ee1b0fca3c7e32a1
b6bb2c3c453e551eb17dcc3ca691ec5ec438c8bf5a83573540ec6429288b2e33
Analyzer Verdict Alert quad9 Sinkholed
GET /v2/images/buttons/red-4-icons.png HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/v2/style/index2d42.css?ux=1546806283
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:09 GMT
Content-Type: image/png
Content-Length: 10630
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Tue, 14 Mar 2023 00:04:57 GMT
ETag: "2986-5f6d0fa589e76"
Accept-Ranges: bytes
217.195.197.85/images/frames/main-t.jpg
200 OK 939 B URL GET HTTP/1.1 217.195.197.85/images/frames/main-t.jpg
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 118x14, components 3\012- data
Hash 4dc2b4f59818ee33442955db0eb17374
0ee60e257f31fad63a80342a3514b990c01ea86d
cb90787d00465b12b7e19b2444d6c677ad2a6cf84c23fdc34afa6411510eea16
Analyzer Verdict Alert quad9 Sinkholed
GET /images/frames/main-t.jpg HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/v2/style/main.css?ux=298
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:08 GMT
Content-Type: image/jpeg
Content-Length: 939
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Tue, 14 Mar 2023 00:04:00 GMT
ETag: "3ab-5f6d0f6f2b33b"
Accept-Ranges: bytes
217.195.197.85/images/tpl/tbl-2-top.png
200 OK 13 kB URL GET HTTP/1.1 217.195.197.85/images/tpl/tbl-2-top.png
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type PNG image data, 302 x 17, 8-bit/color RGBA, non-interlaced\012- data
Hash f29d48110c5670ac223d2221dba9e337
c5078fd45754c8f2ede2e1ad6ccfec65567f8f44
41ff7a7852e1b713a00e0603a4a9ffaafd33e9e2ddc12e0c4d55ff49252ad4e9
Analyzer Verdict Alert quad9 Sinkholed
GET /images/tpl/tbl-2-top.png HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/v2/style/maine2db.css?ux=298
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:10 GMT
Content-Type: image/png
Content-Length: 13020
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Tue, 14 Mar 2023 00:03:53 GMT
ETag: "32dc-5f6d0f687cff3"
Accept-Ranges: bytes
images/bg-footer-bottom.png
0 B URL GET images/bg-footer-bottom.png
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /bg-footer-bottom.png HTTP/1.1
Host: images
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Pragma: no-cache
Cache-Control: no-cache
217.195.197.85/images/index.mp4
200 OK 226 kB URL GET HTTP/1.1 217.195.197.85/images/index.mp4
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type ISO Media, MP4 v2 [ISO 14496-14]\012- data
Size 226 kB (226149 bytes)
Hash e58a354fe14596c0260ee4568df3410b
c5a420cb8f7a80b316d0987b4e6d69d11f797a10
e6b437ae196d14df07e65d0038bdc6208d7918fb89f405725aa3f87f86d41e89
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /images/index.mp4 HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/v2/style/main.css?ux=298
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:08 GMT
Content-Type: video/mp4
Content-Length: 5291150
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Mon, 13 Mar 2023 23:39:42 GMT
ETag: "50bc8e-5f6d0a00839de"
Accept-Ranges: bytes
www.dwarofraces.com.tr/images/exp/exp16.png
403 Forbidden 0 B URL GET HTTP/3 www.dwarofraces.com.tr/images/exp/exp16.png
IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint20:3D:27:50:E6:45:21:01:FD:2C:AC:1A:74:69:40:8A:0D:6A:68:F9
ValiditySun, 19 Mar 2023 00:00:00 GMT - Mon, 18 Mar 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/exp/exp16.png HTTP/1.1
Host: www.dwarofraces.com.tr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
date: Sun, 21 May 2023 22:08:08 GMT
content-type: text/html; charset=UTF-8
vary: Referer, Accept-Encoding
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xkWcaA5%2FXcvk2hVVpsmokt1yekXrM%2BXRfD3%2BEYThAE4yGYJje3w%2F7YH2qYP2XQDvv5bTS0MhrLTEjoDNMEnSF2%2BjFs2%2B5zKpObyJoLlTnTwIU3oNS0W5DzzDb9b6RhPXdPeHbZwSz9YG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cb022e658b3b515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
217.195.197.85/images/frames/main-bg.jpg
200 OK 3.8 kB URL GET HTTP/1.1 217.195.197.85/images/frames/main-bg.jpg
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 200x200, components 3\012- data
Hash fd681da03438b7898d3dcf4c720b60ee
8f196c4a25eedbbf9e3b309d96e835cbe01b2d31
4902df26839bd2e17b3e4cd477089bb55c90a9e8064962122acb980cb55e955c
Analyzer Verdict Alert quad9 Sinkholed
GET /images/frames/main-bg.jpg HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/v2/style/main.css?ux=298
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:08 GMT
Content-Type: image/jpeg
Content-Length: 3847
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Tue, 14 Mar 2023 00:04:00 GMT
ETag: "f07-5f6d0f6f36303"
Accept-Ranges: bytes
217.195.197.85/v2/images/bg-pattern-right.png
200 OK 41 kB URL GET HTTP/1.1 217.195.197.85/v2/images/bg-pattern-right.png
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type PNG image data, 340 x 174, 8-bit/color RGBA, non-interlaced\012- data
Hash 4395175738ac572f09f381d585112022
403996cb479c2d03b97620169dd21d12467fac0f
655d198e972c1a36ba8c0a17d0045389f851bc1e4f536ef4b0290679d89f08b0
Analyzer Verdict Alert quad9 Sinkholed
GET /v2/images/bg-pattern-right.png HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/v2/style/index2d42.css?ux=1546806283
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:08 GMT
Content-Type: image/png
Content-Length: 41395
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Tue, 14 Mar 2023 00:04:57 GMT
ETag: "a1b3-5f6d0fa55fe96"
Accept-Ranges: bytes
217.195.197.85/images/frames/common-tb.png
200 OK 3.2 kB URL GET HTTP/1.1 217.195.197.85/images/frames/common-tb.png
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type PNG image data, 190 x 20, 8-bit/color RGBA, non-interlaced\012- data
Hash debdd701895a699153fe9b24ec579ca5
86554e136d667522756fa75a8e98f8a5de285ffc
8e43715a22954843451a777f0777512be09e9441032191bb9a8f0e2dee35eb8d
Analyzer Verdict Alert quad9 Sinkholed
GET /images/frames/common-tb.png HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/v2/style/main.css?ux=298
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:09 GMT
Content-Type: image/png
Content-Length: 3189
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Tue, 14 Mar 2023 00:04:00 GMT
ETag: "c75-5f6d0f6f441ab"
Accept-Ranges: bytes
217.195.197.85/images/data/artifacts/hagridorf_red.gif
200 OK 5.6 kB URL GET HTTP/1.1 217.195.197.85/images/data/artifacts/hagridorf_red.gif
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type GIF image data, version 89a, 60 x 60\012- data
Hash d57e2f8d111dd5bc1fed09f1bc49e32c
98ceda7dffebfa7f82c3dd47bdfc2bbcd92a5442
acd60da290e2889b8198383557a92316c59191b551be6639abd96a9b10860b95
Analyzer Verdict Alert quad9 Sinkholed
GET /images/data/artifacts/hagridorf_red.gif HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:10 GMT
Content-Type: image/gif
Content-Length: 5611
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Mon, 13 Mar 2023 23:54:00 GMT
ETag: "15eb-5f6d0d33a040f"
Accept-Ranges: bytes
217.195.197.85/images/frames/common-corners.png
200 OK 477 B URL GET HTTP/1.1 217.195.197.85/images/frames/common-corners.png
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type PNG image data, 16 x 20, 8-bit/color RGBA, non-interlaced\012- data
Hash 4976cb76788f0db54ab94ad776b530b4
0569d7aaa77182161acebdc2d98876a4ee31758a
d8d1e9581bd13888a539286767b31cb58966207141e4797c313529ed4286d254
Analyzer Verdict Alert quad9 Sinkholed
GET /images/frames/common-corners.png HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/v2/style/main.css?ux=298
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:09 GMT
Content-Type: image/png
Content-Length: 477
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Tue, 14 Mar 2023 00:04:00 GMT
ETag: "1dd-5f6d0f6f0cedb"
Accept-Ranges: bytes
217.195.197.85/images/tpl/tbl-2-top-right.png
200 OK 2.2 kB URL GET HTTP/1.1 217.195.197.85/images/tpl/tbl-2-top-right.png
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type PNG image data, 17 x 17, 8-bit/color RGBA, non-interlaced\012- data
Hash dd4c7c1e2228651ce11090a81722a6fa
21bc19e254236cd03ee7eafca544fe4cd459cfe3
6c2dd39a52108532e68f5618faaf4aa0c0f86af664f9b34c67bc878339f8f0da
Analyzer Verdict Alert quad9 Sinkholed
GET /images/tpl/tbl-2-top-right.png HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/v2/style/maine2db.css?ux=298
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:10 GMT
Content-Type: image/png
Content-Length: 2205
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Tue, 14 Mar 2023 00:03:53 GMT
ETag: "89d-5f6d0f6850133"
Accept-Ranges: bytes
217.195.197.85/images/buttons/main-menu-yellow.png
200 OK 7.9 kB URL GET HTTP/1.1 217.195.197.85/images/buttons/main-menu-yellow.png
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type PNG image data, 1000 x 104, 8-bit/color RGBA, non-interlaced\012- data
Hash afcf30d54f4ad11d5564c374fe56da01
dd7c8aa5923cc0b240973a3d18da9e5783820326
2f435f0cf642b8921fa4550cf4055a0315a8c03daffd9f7876bd00fac0e6e725
Analyzer Verdict Alert quad9 Sinkholed
GET /images/buttons/main-menu-yellow.png HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/v2/style/main.css?ux=298
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:08 GMT
Content-Type: image/png
Content-Length: 7886
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Tue, 14 Mar 2023 00:03:54 GMT
ETag: "1ece-5f6d0f6a045ab"
Accept-Ranges: bytes
www.dwarofraces.com.tr/images/data/clans/guard.gif
403 Forbidden 0 B URL GET HTTP/3 www.dwarofraces.com.tr/images/data/clans/guard.gif
IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint20:3D:27:50:E6:45:21:01:FD:2C:AC:1A:74:69:40:8A:0D:6A:68:F9
ValiditySun, 19 Mar 2023 00:00:00 GMT - Mon, 18 Mar 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/data/clans/guard.gif HTTP/1.1
Host: www.dwarofraces.com.tr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
date: Sun, 21 May 2023 22:08:08 GMT
content-type: text/html; charset=UTF-8
vary: Referer, Accept-Encoding
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eaV0hxYxPWiDzQFA%2FH2EV1Lvb9xjq8n%2BZq1KNTPfL20GTKfVQtbsXk0NlJF7nM7%2BW0uSvLtuqteNp0ChGVvd%2FphOG0L8H3R1xTvN1l2CrlXneyhudXDUiCuu%2F7GSWZPq5PBnjLl7jhDV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cb022e678c9b515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
www.dwarofraces.com.tr/images/data/bots/leprekon.jpg
403 Forbidden 0 B URL GET HTTP/2 www.dwarofraces.com.tr/images/data/bots/leprekon.jpg
IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint20:3D:27:50:E6:45:21:01:FD:2C:AC:1A:74:69:40:8A:0D:6A:68:F9
ValiditySun, 19 Mar 2023 00:00:00 GMT - Mon, 18 Mar 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/data/bots/leprekon.jpg HTTP/1.1
Host: www.dwarofraces.com.tr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
date: Sun, 21 May 2023 22:08:07 GMT
content-type: text/html; charset=UTF-8
vary: Referer, Accept-Encoding
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YwyQux%2FgCeNTxEE4IAN4pGvA6NjWwdxqxiAOQSGnCQP3WZOZoJHjXrJGZHv6fgrn37ol2%2FdJb%2F57LRvUt2qeQKUz0W%2Bxs%2Fve6Kxrr7ALiFXl8IOeY066QYoS9kowFLtA1aPGvkTEaH6W"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cb022e01a62b523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
217.195.197.85/images/tpl/tbl-2-bottom-left.png
200 OK 2.3 kB URL GET HTTP/1.1 217.195.197.85/images/tpl/tbl-2-bottom-left.png
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type PNG image data, 17 x 17, 8-bit/color RGBA, non-interlaced\012- data
Hash d05cb863910b3182a0416aef7b65c3e4
d037ff59ca96375b9ac17dee86cf65f990af309e
fe887362696322a87a5227633f7047ddd1b566aa67a1b1304ee0bf8817607f0e
Analyzer Verdict Alert quad9 Sinkholed
GET /images/tpl/tbl-2-bottom-left.png HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/v2/style/maine2db.css?ux=298
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:11 GMT
Content-Type: image/png
Content-Length: 2310
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Tue, 14 Mar 2023 00:03:53 GMT
ETag: "906-5f6d0f687b0b3"
Accept-Ranges: bytes
217.195.197.85/images/buttons/main-menu-red.png
200 OK 15 kB URL GET HTTP/1.1 217.195.197.85/images/buttons/main-menu-red.png
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type PNG image data, 1000 x 208, 8-bit/color RGBA, non-interlaced\012- data
Hash e635c381077c699316367a0185627a0b
7627feaae5ff2d26ab0308e173aed134da2610b8
020710771f61784aad8fa68a3cb59fd7810335bdc56dd9fa0ad76a658ccd3849
Analyzer Verdict Alert quad9 Sinkholed
GET /images/buttons/main-menu-red.png HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/v2/style/main.css?ux=298
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:08 GMT
Content-Type: image/png
Content-Length: 14753
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Tue, 14 Mar 2023 00:03:54 GMT
ETag: "39a1-5f6d0f6a04d7b"
Accept-Ranges: bytes
217.195.197.85/images/frames/common-lr.png
200 OK 1.8 kB URL GET HTTP/1.1 217.195.197.85/images/frames/common-lr.png
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type PNG image data, 16 x 69, 8-bit/color RGBA, non-interlaced\012- data
Hash 19d9e619880eb9f79a2862bba4e083e6
bf1177a10b0a59beb068379892610e3be90baf2a
98bc96866d7fc6061b2b35148f2790e99779c1dfeef8a93a1e4886e2581b835b
Analyzer Verdict Alert quad9 Sinkholed
GET /images/frames/common-lr.png HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/v2/style/main.css?ux=298
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:09 GMT
Content-Type: image/png
Content-Length: 1777
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Tue, 14 Mar 2023 00:04:00 GMT
ETag: "6f1-5f6d0f6f0135b"
Accept-Ranges: bytes
www.dwarofraces.com.tr/images/data/clans/guard.gif
403 Forbidden 0 B URL GET HTTP/2 www.dwarofraces.com.tr/images/data/clans/guard.gif
IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint20:3D:27:50:E6:45:21:01:FD:2C:AC:1A:74:69:40:8A:0D:6A:68:F9
ValiditySun, 19 Mar 2023 00:00:00 GMT - Mon, 18 Mar 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/data/clans/guard.gif HTTP/1.1
Host: www.dwarofraces.com.tr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
date: Sun, 21 May 2023 22:08:07 GMT
content-type: text/html; charset=UTF-8
vary: Referer, Accept-Encoding
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mS6dmqQKtccWjX967udXhf%2Fjhk%2FcZn3XZPhPA1KkZKxiSLR3HP9UfvlotOKi1v8N0oN%2F9vEwUAnCvicYlzKzgRkBVWXfe0so67pXv2n8UFe%2FplvCw8YIuawQG4YhlH38GDg1UzVkhgFP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cb022e01a64b523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.dwarofraces.com.tr/images/ranks/rank14.gif
403 Forbidden 0 B URL GET HTTP/2 www.dwarofraces.com.tr/images/ranks/rank14.gif
IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint20:3D:27:50:E6:45:21:01:FD:2C:AC:1A:74:69:40:8A:0D:6A:68:F9
ValiditySun, 19 Mar 2023 00:00:00 GMT - Mon, 18 Mar 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/ranks/rank14.gif HTTP/1.1
Host: www.dwarofraces.com.tr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
date: Sun, 21 May 2023 22:08:07 GMT
content-type: text/html; charset=UTF-8
vary: Referer, Accept-Encoding
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hafsMg51foQDAJiibeP8tBrw%2BfV1SG0G%2FD1mlljoR7JzZBgf653jXP4kIQu4uiBavVw0JIRAEb%2FL44jPhX%2Fl%2BrVu8ChoeyTDwuGWrPWU9gjC3p4roCG2s7trGZTWvYizx%2Fik5U2IaJ6i"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cb022e01a6eb523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
217.195.197.85/images/buttons/red-4.png
200 OK 28 kB URL GET HTTP/1.1 217.195.197.85/images/buttons/red-4.png
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type PNG image data, 1000 x 272, 8-bit/color RGBA, non-interlaced\012- data
Hash 2252bdf336d24638156c785262faec49
1d845110b1f1e348895e82d14337a391659a1bad
45fca299331df59cf8b8ac390a0bdf78f5982ffb4f806090c6e4e7b5c3551bc7
Analyzer Verdict Alert quad9 Sinkholed
GET /images/buttons/red-4.png HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/v2/style/main.css?ux=298
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:09 GMT
Content-Type: image/png
Content-Length: 28133
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Tue, 14 Mar 2023 00:03:55 GMT
ETag: "6de5-5f6d0f6a2d5eb"
Accept-Ranges: bytes
217.195.197.85/images/data/artifacts/crystalsoftruth.gif
200 OK 4.8 kB URL GET HTTP/1.1 217.195.197.85/images/data/artifacts/crystalsoftruth.gif
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type GIF image data, version 89a, 60 x 60\012- data
Hash fd1b33af0575a37342e70e5438c0e374
0209592bcf428206d6d35ff302f6971b65165851
c97eb075f9b9c7be234b91fa59ead581b732524757c473452cc16fe8d0a684a8
Analyzer Verdict Alert quad9 Sinkholed
GET /images/data/artifacts/crystalsoftruth.gif HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:10 GMT
Content-Type: image/gif
Content-Length: 4778
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Mon, 13 Mar 2023 23:57:28 GMT
ETag: "12aa-5f6d0df9efd59"
Accept-Ranges: bytes
www.dwarofraces.com.tr/images/marriage.gif
403 Forbidden 0 B URL GET HTTP/2 www.dwarofraces.com.tr/images/marriage.gif
IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint20:3D:27:50:E6:45:21:01:FD:2C:AC:1A:74:69:40:8A:0D:6A:68:F9
ValiditySun, 19 Mar 2023 00:00:00 GMT - Mon, 18 Mar 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/marriage.gif HTTP/1.1
Host: www.dwarofraces.com.tr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
date: Sun, 21 May 2023 22:08:07 GMT
content-type: text/html; charset=UTF-8
vary: Referer, Accept-Encoding
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6ZCIP3dcknUHGU8D7gy9nb5VqccN0fdQKGZhkEeoFQsK7fD9QHrrVLqusCckwSkW0%2FIZzvKkhIVV4L5OKO1pzzAneQWbN3hnsrB4oknxNDcKyhHfxdrZBtX0XKJck3z%2BqAtDXyUjmTyL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cb022e01a63b523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.dwarofraces.com.tr/images/ranks/rank9.gif
403 Forbidden 0 B URL GET HTTP/3 www.dwarofraces.com.tr/images/ranks/rank9.gif
IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint20:3D:27:50:E6:45:21:01:FD:2C:AC:1A:74:69:40:8A:0D:6A:68:F9
ValiditySun, 19 Mar 2023 00:00:00 GMT - Mon, 18 Mar 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/ranks/rank9.gif HTTP/1.1
Host: www.dwarofraces.com.tr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
date: Sun, 21 May 2023 22:08:08 GMT
content-type: text/html; charset=UTF-8
vary: Referer, Accept-Encoding
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SK2ePWBBt5hnvCZ6qp4YIwPgxfUjnvX7kAHrKvb0NbzgG4Xa4sSp5BoI7aH8lBBfKvVQmEAS3HizfInCvezkoU5rwri8P2OWZI4q%2BHXNYJvGnAVEYG%2B6QpklnbxLj0iznQcTnTszjywV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cb022e668bdb515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
217.195.197.85/images/tpl/tbl-bg.png
200 OK 2.7 kB URL GET HTTP/1.1 217.195.197.85/images/tpl/tbl-bg.png
IP
ASN #201364 Teknoboss Teknoloji Ve Danismanlik Hizmetleri Limited Sirketi
File type PNG image data, 72 x 59, 8-bit colormap, non-interlaced\012- data
Hash 227b7c9675b67e6912498f942480709d
39a734b53c65733683468d3d9bbd7d3b60313623
c9fbd0a4e2f24b3433c4fab72d7ee6432141e42bd6880ebdb5b47a6254ce5c90
Analyzer Verdict Alert quad9 Sinkholed
GET /images/tpl/tbl-bg.png HTTP/1.1
Host: 217.195.197.85
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/v2/style/maine2db.css?ux=298
Cookie: PHPSESSID=mu7g3jpi2ln9h0s7pp0j10o4t3; _gcl_au=1.1.48085102.1684706889
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 May 2023 22:08:10 GMT
Content-Type: image/png
Content-Length: 2734
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Tue, 14 Mar 2023 00:03:53 GMT
ETag: "aae-5f6d0f687955b"
Accept-Ranges: bytes
www.dwarofraces.com.tr/images/data/bots/smargul_sm.jpg
403 Forbidden 0 B URL GET HTTP/3 www.dwarofraces.com.tr/images/data/bots/smargul_sm.jpg
IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint20:3D:27:50:E6:45:21:01:FD:2C:AC:1A:74:69:40:8A:0D:6A:68:F9
ValiditySun, 19 Mar 2023 00:00:00 GMT - Mon, 18 Mar 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/data/bots/smargul_sm.jpg HTTP/1.1
Host: www.dwarofraces.com.tr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
date: Sun, 21 May 2023 22:08:09 GMT
content-type: text/html; charset=UTF-8
vary: Referer, Accept-Encoding
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1kJWg19tH%2FJMQ6wN%2ByhpVIKB%2B9ICIndoTT%2Fsf8GPkKbGJanp2TAUFaw08jROFnmMbKtp5NuMBrWV4uN6cSLgvpmVcdGQWtJ%2Bd1xLbOevsG%2FT172UN97ap%2FY3q5h6G93Q48Z1iT5BioGU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cb022e86ae7b515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
www.dwarofraces.com.tr/images/data/bots/smargul_sm.jpg
403 Forbidden 0 B URL GET HTTP/2 www.dwarofraces.com.tr/images/data/bots/smargul_sm.jpg
IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint20:3D:27:50:E6:45:21:01:FD:2C:AC:1A:74:69:40:8A:0D:6A:68:F9
ValiditySun, 19 Mar 2023 00:00:00 GMT - Mon, 18 Mar 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/data/bots/smargul_sm.jpg HTTP/1.1
Host: www.dwarofraces.com.tr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://217.195.197.85/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
date: Sun, 21 May 2023 22:08:07 GMT
content-type: text/html; charset=UTF-8
vary: Referer, Accept-Encoding
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BmfNWVcau3xv5w0WRGJMsRvupyvPCl5dAR6Ifk57zBflz7PMnBYWnKuxUnwA7oj3JaDorq4mknP%2B6izLC18M%2BLAvj2eLO%2FL3eQvUFB9%2F2T0vmd0qU9qkecBWAXtQlbFNPJSVE2Vbvvy7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cb022dffa3cb523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
217.195.197.85
0.0.0.0
142.250.74.168