Report - almanogretmen.com/sam/digitale/cdeeb90bb16f698023eb87b94f454553/blog/blog/is-almancasi-ozel-ders.htm

Report Overview

Submitted URL
almanogretmen.com/sam/digitale/cdeeb90bb16f698023eb87b94f454553/blog/blog/is-almancasi-ozel-ders.htm
IP
5.250.241.121
ASN
#59674 Aysima Bilisim Teknolojileri
Submitted
2023-03-21 13:42:17
Access
public
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
24

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
almanogretmen.com	unknown	2015-09-18T09:55:53Z	2023-03-21T14:42:06Z	12 kB	897 kB	5.250.241.121
r3.o.lencr.org	344	2020-12-02T09:52:13Z	2023-03-25T18:12:03Z	2.4 kB	6.2 kB	23.33.119.27
firefox.settings.services.mozilla.com	867	2020-06-04T22:08:41Z	2023-03-25T18:14:26Z	782 B	2.4 kB	35.241.9.150
content-signature-2.cdn.mozilla.net	1152	2020-11-03T13:26:46Z	2023-03-26T05:11:12Z	413 B	5.9 kB	34.160.144.191
contile.services.mozilla.com	1114	2021-05-27T20:32:35Z	2023-03-26T05:11:59Z	333 B	391 B	34.117.237.239
push.services.mozilla.com	2140	2014-10-24T10:27:06Z	2023-03-26T05:10:29Z	606 B	127 B	52.42.252.225
img-getpocket.cdn.mozilla.net	1631	2018-06-22T01:36:00Z	2023-03-26T05:09:08Z	3.2 kB	61 kB	34.120.237.76

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2023-03-21	medium	almanogretmen.com/template/fontello/css/fontello.css?v=1	Phishing
2023-03-21	medium	almanogretmen.com/template/css/style.css?v=1	Phishing
2023-03-21	medium	almanogretmen.com/template/js/jquery-1.10.2.min.js	Phishing
2023-03-21	medium	almanogretmen.com/template/js/jquery.placeholder.js	Phishing
2023-03-21	medium	almanogretmen.com/template/js/bootstrap.min.js	Phishing
2023-03-21	medium	almanogretmen.com/template/js/retina.min.js	Phishing
2023-03-21	medium	almanogretmen.com/template/assets/validate.js	Phishing
2023-03-21	medium	almanogretmen.com/template/js/functions.js	Phishing
2023-03-21	medium	almanogretmen.com/template/js/superfish.js	Phishing
2023-03-21	medium	almanogretmen.com/template/js/classie.js	Phishing
2023-03-21	medium	almanogretmen.com/template/fontello/font/fontello.woff2?24644620	Phishing
2023-03-21	medium	almanogretmen.com/	Phishing

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (9)

	URL	Size	First Seen	Last Seen
	almanogretmen.com/template/js/jquery.placeholder.js	5.1 kB	2023-03-07	2024-02-24
Pretty URL almanogretmen.com/template/js/jquery.placeholder.js IP 5.250.241.121 ASN #59674 Aysima Bilisim Teknolojileri Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:42:11 Last Seen2024-02-24 17:31:22 Times Seen77 Hash 28aa04521a7a3e0c66454ca6aa60f13c f18e3ab96ef9c699b65a2e19da2d5c5efc579362 f37e63c3419f32424ee638fb6e5db3da2d23e23d89ce211faff76cc2284040e0 Loading...

	almanogretmen.com/template/js/classie.js	1.8 kB	2023-03-07	2024-05-07
Pretty URL almanogretmen.com/template/js/classie.js IP 5.250.241.121 ASN #59674 Aysima Bilisim Teknolojileri Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:05 Last Seen2024-05-07 03:58:47 Times Seen5057 Hash a9df1cfb76ce492afd9d13f3320272fd 782b9564f015a2ec7bdf9c89e238fab9b44bd587 717ad22aa426d024f6c9942949b49d9a20f4239b94dfee34f94c96d8778f2144 Loading...

	almanogretmen.com/	119 B	2023-03-07	2023-04-02
Pretty URL almanogretmen.com/ IP 5.250.241.121 ASN #59674 Aysima Bilisim Teknolojileri Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:42:11 Last Seen2023-04-02 21:34:21 Times Seen19 Hash 3bab296bf95879c8d15fab8a3ab3f4cd adbc098b77ee10e0c766952c593bbe82e97875ef 655f0de40e3ab9f67e612af7a83f1f56ba5483d8d4716343cba60e3eb5f14c89 Loading...

	almanogretmen.com/template/js/jquery-1.10.2.min.js	93 kB	2023-03-07	2024-05-07
Pretty URL almanogretmen.com/template/js/jquery-1.10.2.min.js IP 5.250.241.121 ASN #59674 Aysima Bilisim Teknolojileri Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:00 Last Seen2024-05-07 04:17:04 Times Seen10443 Hash 628072e7212db1e8cdacb22b21752cda 0511abe9863c2ea7084efa7e24d1d86c5b3974f1 0ba081f546084bd5097aa8a73c75931d5aa1fc4d6e846e53c21f98e6a1509988 Loading...

	almanogretmen.com/template/js/bootstrap.min.js	29 kB	2023-03-07	2024-05-07
Pretty URL almanogretmen.com/template/js/bootstrap.min.js IP 5.250.241.121 ASN #59674 Aysima Bilisim Teknolojileri Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:10 Last Seen2024-05-07 10:23:32 Times Seen10048 Hash ba847811448ef90d98d272aeccef2a95 5814e91bb6276f4de8b7951c965f2f190a03978d 898d05a17f2cfc5120ddcdba47a885c378c0b466f30f0700e502757e24b403a1 Loading...

	almanogretmen.com/template/js/superfish.js	4.3 kB	2023-03-07	2023-12-21
Pretty URL almanogretmen.com/template/js/superfish.js IP 5.250.241.121 ASN #59674 Aysima Bilisim Teknolojileri Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:42:11 Last Seen2023-12-21 08:42:19 Times Seen27 Hash 0dbb6ff2987aa9e2d59fb9dadf8d889b afb23020e793969879c53839a2bbf5ff659f8421 67ae866336ed4d4fb275c4e2d9bcd81b016293a5a519a29df49200d492fb47b8 Loading...

	almanogretmen.com/template/js/retina.min.js	3.0 kB	2023-03-07	2024-04-26
Pretty URL almanogretmen.com/template/js/retina.min.js IP 5.250.241.121 ASN #59674 Aysima Bilisim Teknolojileri Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:42:11 Last Seen2024-04-26 11:11:51 Times Seen248 Hash bbfd2c8e624d2a280b83fa73f7d87d7c da44a409a0907960a6526cf35807ecaf61059223 8e33e2d533da123cfbb23cf9abfbcaeab6d6d9995afa5f23d7fcb2993d6be9f7 Loading...

	almanogretmen.com/template/assets/validate.js	4.2 kB	2023-03-07	2023-08-22
Pretty URL almanogretmen.com/template/assets/validate.js IP 5.250.241.121 ASN #59674 Aysima Bilisim Teknolojileri Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:42:11 Last Seen2023-08-22 10:53:44 Times Seen23 Hash e399abb718b8d3bc9f896bae42eb0284 2a11a8e0de8c5d03972bfe4d4e44a1e887e5b94c 518789c7c6844209b3034e87e5a70000cbbb06b954feadd1d2a726b8cc34bd64 Loading...

	almanogretmen.com/template/js/functions.js	3.4 kB	2023-03-07	2023-04-02
Pretty URL almanogretmen.com/template/js/functions.js IP 5.250.241.121 ASN #59674 Aysima Bilisim Teknolojileri Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:42:11 Last Seen2023-04-02 21:34:21 Times Seen19 Hash 22d4ce50c6aa0f5fffec30503c439d02 4f32c36a8569529915434f5832e20b3c9d63cf8d d0fbbc250de9348384378be4b6904c1cb2bad9577e5fcd1fa6349dc73e48cec6 Loading...

HTTP Transactions (43)

URL IP Response Size

almanogretmen.com/sam/digitale/cdeeb90bb16f698023eb87b94f454553/blog/blog/is-almancasi-ozel-ders.htm

5.250.241.121

301 Moved Permanently

707 B

URL HTTP/1.1
almanogretmen.com/sam/digitale/cdeeb90bb16f698023eb87b94f454553/blog/blog/is-almancasi-ozel-ders.htm
IP
5.250.241.121:0
ASN
#59674 Aysima Bilisim Teknolojileri

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Size
707 B (707 bytes)
Hash
1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982

HTTP Headers

GET /sam/digitale/cdeeb90bb16f698023eb87b94f454553/blog/blog/is-almancasi-ozel-ders.htm HTTP/1.1
Host: almanogretmen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Tue, 21 Mar 2023 13:42:05 GMT
server: LiteSpeed
location: https://almanogretmen.com/sam/digitale/cdeeb90bb16f698023eb87b94f454553/blog/blog/is-almancasi-ozel-ders.htm

r3.o.lencr.org/

23.33.119.27

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.33.119.27:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
ec332b81a27117ce9c16b67a5a8e4fac
b6d2afa2c859d000ad830d3d8d73f57bac6ffce2
1dc32c78e4e850303813338fd4e9616a41c8c05d1063748a1e76a92c397a5e8f

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1DC32C78E4E850303813338FD4E9616A41C8C05D1063748A1E76A92C397A5E8F"
Last-Modified: Mon, 20 Mar 2023 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4894
Expires: Tue, 21 Mar 2023 15:03:40 GMT
Date: Tue, 21 Mar 2023 13:42:06 GMT
Connection: keep-alive

r3.o.lencr.org/

23.33.119.27

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.33.119.27:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
00e304a3fc0c2f01af0e94fcefe0ca40
833969e75e5e13e823c8d97ee59a9821eb157ee3
c2b7f7ae4861f2dd16867de54c7e47d95582de77887f523841d9683a369d20a7

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C2B7F7AE4861F2DD16867DE54C7E47D95582DE77887F523841D9683A369D20A7"
Last-Modified: Sun, 19 Mar 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2240
Expires: Tue, 21 Mar 2023 14:19:26 GMT
Date: Tue, 21 Mar 2023 13:42:06 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

35.241.9.150

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
bc86ef2a0cee04915bc360f5821adc8f
3658f9028cce204d38f7f48fcfaa2a8e4f54383a
aeecd718d03811322457de4f20828bdba86b277e7e0e328cae9c0a8075638454

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Backoff, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 21 Mar 2023 13:14:57 GMT
content-type: application/json
age: 1629
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.33.119.27

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.33.119.27:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
4e6141892ec4705c6a0134f3157b969d
4169fdea42b0fa9cb565e14b8e8fdb293575c78e
905537ef3e3a4a9030391b44bd6ac6bb5d7c9ec752b1821d683dfbf483096163

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "905537EF3E3A4A9030391B44BD6AC6BB5D7C9EC752B1821D683DFBF483096163"
Last-Modified: Sun, 19 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5482
Expires: Tue, 21 Mar 2023 15:13:28 GMT
Date: Tue, 21 Mar 2023 13:42:06 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
e7bace7c1e04d44012e37ddffe36e5d5
3ac8d7c0a9d3e3f0b28b2530c7b8d8407b4042c2
6b4f80f2e95b26f6122ea8dcd0ef8d762299be822c69e839fc37581ca2bcb5f2

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: 74mqLCEJ2lXfEAZb5iUXse4U04cbflXK6U2Jd7W2l0ctCNtpL15s4R06sSKFqg2hl9BVYnLMelY=
x-amz-request-id: Y9PT2MVB71E6G545
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 21 Mar 2023 12:59:07 GMT
age: 2579
last-modified: Sat, 11 Mar 2023 16:53:15 GMT
etag: "e7bace7c1e04d44012e37ddffe36e5d5"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Tue, 21 Mar 2023 13:42:06 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

almanogretmen.com/sam/digitale/cdeeb90bb16f698023eb87b94f454553/blog/blog/is-almancasi-ozel-ders.htm

5.250.241.121

302 Found

0 B

URL HTTP/2
almanogretmen.com/sam/digitale/cdeeb90bb16f698023eb87b94f454553/blog/blog/is-almancasi-ozel-ders.htm
IP
5.250.241.121:0
ASN
#59674 Aysima Bilisim Teknolojileri

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /sam/digitale/cdeeb90bb16f698023eb87b94f454553/blog/blog/is-almancasi-ozel-ders.htm HTTP/1.1
Host: almanogretmen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

HTTP/2 302 Found
set-cookie: PHPSESSID=bnote5gmq2s6282pc94urj8lr7; path=/; secure
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html; charset=utf-8
location: https://almanogretmen.com/
content-length: 0
date: Tue, 21 Mar 2023 13:42:05 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

35.241.9.150

200 OK

329 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: ETag, Last-Modified, Retry-After, Content-Length, Alert, Cache-Control, Expires, Content-Type, Backoff, Pragma
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 21 Mar 2023 13:14:33 GMT
age: 1653
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

almanogretmen.com/template/fontello/css/fontello.css?v=1

5.250.241.121

200 OK

22 kB

URL HTTP/2
almanogretmen.com/template/fontello/css/fontello.css?v=1
IP
5.250.241.121:0
ASN
#59674 Aysima Bilisim Teknolojileri

File type
Unicode text, UTF-8 text
Size
22 kB (21541 bytes)
Hash
e7498a68e282e88fdf9bbafcb73d81cb
a3812e08270ba8522414b96d14d0efd48c2fdd75
11f5a91f08a733e89dfccca933c4a787315d95457ac2123738315864ccae47b1

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /template/fontello/css/fontello.css?v=1 HTTP/1.1
Host: almanogretmen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://almanogretmen.com/
Cookie: PHPSESSID=bnote5gmq2s6282pc94urj8lr7
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 28 Mar 2023 13:42:05 GMT
content-type: text/css
last-modified: Wed, 01 Mar 2017 07:50:54 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 21541
date: Tue, 21 Mar 2023 13:42:05 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

almanogretmen.com/template/css/style.css?v=1

5.250.241.121

200 OK

12 kB

URL HTTP/2
almanogretmen.com/template/css/style.css?v=1
IP
5.250.241.121:0
ASN
#59674 Aysima Bilisim Teknolojileri

File type
ASCII text
Size
12 kB (11514 bytes)
Hash
d26246d416a13116fa4e5bd1ba272483
9bb5b1490d54d9c969881338d62afd2cbe9814d0
28c2fe6c1af0d7f38c7c8dc67ee2d948338fec7c7d1b1fa30776171b241ec4f4

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /template/css/style.css?v=1 HTTP/1.1
Host: almanogretmen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://almanogretmen.com/
Cookie: PHPSESSID=bnote5gmq2s6282pc94urj8lr7
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 28 Mar 2023 13:42:05 GMT
content-type: text/css
last-modified: Fri, 24 Mar 2017 09:11:47 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 11514
date: Tue, 21 Mar 2023 13:42:05 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.33.119.27

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.33.119.27:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
4c195a3fc0c2abb831630cef1dcfa770
eda338de3063640556177b9db364c33193d7f6dc
c22eb0537cd79666b82fe61dd77fe9b0b3c059a4c65d405412acfc2c6800b444

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C22EB0537CD79666B82FE61DD77FE9B0B3C059A4C65D405412ACFC2C6800B444"
Last-Modified: Sun, 19 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16887
Expires: Tue, 21 Mar 2023 18:23:34 GMT
Date: Tue, 21 Mar 2023 13:42:07 GMT
Connection: keep-alive

push.services.mozilla.com/

52.42.252.225

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
52.42.252.225:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: jucjXRaZiqhSLiBcceeEqg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: /ZwNU1yGxWGr/roElb1+ckaryWw=

almanogretmen.com/template/images/teacher/hank-010317022206.jpg

5.250.241.121

200 OK

80 kB

URL HTTP/2
almanogretmen.com/template/images/teacher/hank-010317022206.jpg
IP
5.250.241.121:0
ASN
#59674 Aysima Bilisim Teknolojileri

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", baseline, precision 8, 300x350, components 3\012- data
Size
80 kB (80227 bytes)
Hash
473e9e5678e61470e1cf4d9df62b7ea0
f33b25435d1ca546a52eae1ab76e20f16e945cc6
a57592e9bf2b4ea765acc717be055cbe9191b8294cb076a3840d65c0cfa7a319

HTTP Headers

GET /template/images/teacher/hank-010317022206.jpg HTTP/1.1
Host: almanogretmen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://almanogretmen.com/
Cookie: PHPSESSID=bnote5gmq2s6282pc94urj8lr7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 28 Mar 2023 13:42:05 GMT
content-type: image/jpeg
last-modified: Wed, 01 Mar 2017 11:22:06 GMT
accept-ranges: bytes
content-length: 80227
date: Tue, 21 Mar 2023 13:42:05 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

almanogretmen.com/template/css/color_scheme.css

5.250.241.121

200 OK

0 B

URL HTTP/2
almanogretmen.com/template/css/color_scheme.css
IP
5.250.241.121:0
ASN
#59674 Aysima Bilisim Teknolojileri

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /template/css/color_scheme.css HTTP/1.1
Host: almanogretmen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://almanogretmen.com/
Cookie: PHPSESSID=bnote5gmq2s6282pc94urj8lr7
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 28 Mar 2023 13:42:05 GMT
content-type: text/css
last-modified: Fri, 24 Feb 2017 20:11:06 GMT
accept-ranges: bytes
content-length: 0
date: Tue, 21 Mar 2023 13:42:05 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

almanogretmen.com/template/css/bootstrap.min.css

5.250.241.121

200 OK

16 kB

URL HTTP/2
almanogretmen.com/template/css/bootstrap.min.css
IP
5.250.241.121:0
ASN
#59674 Aysima Bilisim Teknolojileri

File type
ASCII text, with very long lines (65366)
Size
16 kB (15843 bytes)
Hash
cd9b11441f5ee9056b081f635978e292
59ba748f2aa11aec7e7108ac004d67be4cf5524d
b4df739b380e779842d3ffc9f00517e067b01c4cf76d5635c2f97c2d7d260a9f

HTTP Headers

GET /template/css/bootstrap.min.css HTTP/1.1
Host: almanogretmen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://almanogretmen.com/
Cookie: PHPSESSID=bnote5gmq2s6282pc94urj8lr7
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 28 Mar 2023 13:42:05 GMT
content-type: text/css
last-modified: Thu, 09 Feb 2017 08:37:48 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 15843
date: Tue, 21 Mar 2023 13:42:05 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

almanogretmen.com/template/css/superfish.css

5.250.241.121

200 OK

1.5 kB

URL HTTP/2
almanogretmen.com/template/css/superfish.css
IP
5.250.241.121:0
ASN
#59674 Aysima Bilisim Teknolojileri

File type
ASCII text
Size
1.5 kB (1542 bytes)
Hash
e205f2f854b1526157521e921b7400d7
1a87d8a21655b45e94acc89cb94a8a0890d55619
d0a64a89ee1e569acd7268f44daf28eb447aa3566e1242136286326a5d6bbc9e

HTTP Headers

GET /template/css/superfish.css HTTP/1.1
Host: almanogretmen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://almanogretmen.com/
Cookie: PHPSESSID=bnote5gmq2s6282pc94urj8lr7
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 28 Mar 2023 13:42:05 GMT
content-type: text/css
last-modified: Fri, 24 Mar 2017 09:12:03 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1542
date: Tue, 21 Mar 2023 13:42:05 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

almanogretmen.com/template/js/jquery-1.10.2.min.js

5.250.241.121

200 OK

32 kB

URL HTTP/2
almanogretmen.com/template/js/jquery-1.10.2.min.js
IP
5.250.241.121:0
ASN
#59674 Aysima Bilisim Teknolojileri

File type
ASCII text, with very long lines (32072)
Size
32 kB (31897 bytes)
Hash
a47e887a01b273a1cc0bec8e12c92c4a
f78c6d17c066e9d526271ca8aa5eedb338df6dee
a86e53efd590149e72d4d371b5389e06753032149c4152ad12c6d4ef7ee37422

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /template/js/jquery-1.10.2.min.js HTTP/1.1
Host: almanogretmen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://almanogretmen.com/
Cookie: PHPSESSID=bnote5gmq2s6282pc94urj8lr7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 28 Mar 2023 13:42:05 GMT
content-type: application/javascript
last-modified: Thu, 09 Feb 2017 08:38:15 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 31897
date: Tue, 21 Mar 2023 13:42:05 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

almanogretmen.com/template/images/teacher/angela-010317012033.jpg

5.250.241.121

200 OK

57 kB

URL HTTP/2
almanogretmen.com/template/images/teacher/angela-010317012033.jpg
IP
5.250.241.121:0
ASN
#59674 Aysima Bilisim Teknolojileri

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", baseline, precision 8, 300x350, components 3\012- data
Size
57 kB (57058 bytes)
Hash
4510c15b2d540df16f30126bd32bce05
4ea2490f260cd7ad98a587ec9ca4fff4bc87c40e
840757a124700e44c4e0bbebe2e2b786773c6dd92e6d494a7d64069c50743aaa

HTTP Headers

GET /template/images/teacher/angela-010317012033.jpg HTTP/1.1
Host: almanogretmen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://almanogretmen.com/
Cookie: PHPSESSID=bnote5gmq2s6282pc94urj8lr7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 28 Mar 2023 13:42:05 GMT
content-type: image/jpeg
last-modified: Wed, 01 Mar 2017 10:20:34 GMT
accept-ranges: bytes
content-length: 57058
date: Tue, 21 Mar 2023 13:42:05 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

almanogretmen.com/template/js/jquery.placeholder.js

5.250.241.121

200 OK

1.5 kB

URL HTTP/2
almanogretmen.com/template/js/jquery.placeholder.js
IP
5.250.241.121:0
ASN
#59674 Aysima Bilisim Teknolojileri

File type
ASCII text
Size
1.5 kB (1477 bytes)
Hash
b67231eabd11cf5a171ba7803fb8ea96
edcbf1606d8f0c4e5a43521be9aaa272b81904cf
19714eb44494454037632cfb2d075d85c2800ada713123e3e22855fd83f13af4

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /template/js/jquery.placeholder.js HTTP/1.1
Host: almanogretmen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://almanogretmen.com/
Cookie: PHPSESSID=bnote5gmq2s6282pc94urj8lr7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 28 Mar 2023 13:42:06 GMT
content-type: application/javascript
last-modified: Thu, 09 Feb 2017 08:38:18 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1477
date: Tue, 21 Mar 2023 13:42:06 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

almanogretmen.com/template/js/bootstrap.min.js

5.250.241.121

200 OK

7.4 kB

URL HTTP/2
almanogretmen.com/template/js/bootstrap.min.js
IP
5.250.241.121:0
ASN
#59674 Aysima Bilisim Teknolojileri

File type
ASCII text, with very long lines (28941)
Size
7.4 kB (7375 bytes)
Hash
be52f77e00e08400d66265b62d04ca93
d49d206d79c18689a69295ff1a388f69921fb5e7
b8d69e91615dd7dea09fa7f04cef72980b4adf8a80ad037d17f8375091da01bf

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /template/js/bootstrap.min.js HTTP/1.1
Host: almanogretmen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://almanogretmen.com/
Cookie: PHPSESSID=bnote5gmq2s6282pc94urj8lr7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 28 Mar 2023 13:42:06 GMT
content-type: application/javascript
last-modified: Thu, 09 Feb 2017 08:38:13 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 7375
date: Tue, 21 Mar 2023 13:42:06 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

almanogretmen.com/template/js/retina.min.js

5.250.241.121

200 OK

1.1 kB

URL HTTP/2
almanogretmen.com/template/js/retina.min.js
IP
5.250.241.121:0
ASN
#59674 Aysima Bilisim Teknolojileri

File type
ASCII text, with very long lines (2770)
Size
1.1 kB (1067 bytes)
Hash
c233b87f7d29b28939b36ab5cbcfb9bc
7a65281ffaf6dd608599aae6a1599978d1d8c0de
c46f8edd4ed33869385879a7a29bf8129d7bdcf7c93fdd38ab2ff2d98b89f76a

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /template/js/retina.min.js HTTP/1.1
Host: almanogretmen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://almanogretmen.com/
Cookie: PHPSESSID=bnote5gmq2s6282pc94urj8lr7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 28 Mar 2023 13:42:06 GMT
content-type: application/javascript
last-modified: Thu, 09 Feb 2017 08:38:19 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1067
date: Tue, 21 Mar 2023 13:42:06 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

almanogretmen.com/template/assets/validate.js

5.250.241.121

200 OK

678 B

URL HTTP/2
almanogretmen.com/template/assets/validate.js
IP
5.250.241.121:0
ASN
#59674 Aysima Bilisim Teknolojileri

File type
ASCII text
Size
678 B (678 bytes)
Hash
905a59aadbedc6f994c99244f12a715b
180fea7d9eacd6de4a98354a66147d0b3ca15352
41f4d13c7b460085804d5aeab156b1d2644afdbfd5dc5aee0822e9af8db515fb

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /template/assets/validate.js HTTP/1.1
Host: almanogretmen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://almanogretmen.com/
Cookie: PHPSESSID=bnote5gmq2s6282pc94urj8lr7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 28 Mar 2023 13:42:06 GMT
content-type: application/javascript
last-modified: Thu, 09 Feb 2017 08:37:46 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 678
date: Tue, 21 Mar 2023 13:42:06 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

almanogretmen.com/template/js/functions.js

5.250.241.121

200 OK

1.2 kB

URL HTTP/2
almanogretmen.com/template/js/functions.js
IP
5.250.241.121:0
ASN
#59674 Aysima Bilisim Teknolojileri

File type
exported SGML document, ASCII text
Size
1.2 kB (1228 bytes)
Hash
1f663a7db64304b5006f8649584b36a2
3f1e2dba4995c09ba95a11b474abb078d021aef4
8dd6769501b51fba026d5c284e3f1418ff3d711a308dbd0aaff080a593c5468d

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /template/js/functions.js HTTP/1.1
Host: almanogretmen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://almanogretmen.com/
Cookie: PHPSESSID=bnote5gmq2s6282pc94urj8lr7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 28 Mar 2023 13:42:06 GMT
content-type: application/javascript
last-modified: Thu, 09 Feb 2017 08:38:15 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1228
date: Tue, 21 Mar 2023 13:42:06 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

almanogretmen.com/template/js/superfish.js

5.250.241.121

200 OK

1.6 kB

URL HTTP/2
almanogretmen.com/template/js/superfish.js
IP
5.250.241.121:0
ASN
#59674 Aysima Bilisim Teknolojileri

File type
ASCII text, with very long lines (4086)
Size
1.6 kB (1610 bytes)
Hash
5878f00f37162b74ff722508e2767661
08a9054cfde994b928b36106973e2d5cf0678fa1
7dfdf457a54620e8bb64098eee7c95cd395538043e959982bad7ea68ab41c28a

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /template/js/superfish.js HTTP/1.1
Host: almanogretmen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://almanogretmen.com/
Cookie: PHPSESSID=bnote5gmq2s6282pc94urj8lr7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 28 Mar 2023 13:42:06 GMT
content-type: application/javascript
last-modified: Thu, 09 Feb 2017 08:38:20 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1610
date: Tue, 21 Mar 2023 13:42:06 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

almanogretmen.com/template/js/classie.js

5.250.241.121

200 OK

616 B

URL HTTP/2
almanogretmen.com/template/js/classie.js
IP
5.250.241.121:0
ASN
#59674 Aysima Bilisim Teknolojileri

File type
ASCII text
Size
616 B (616 bytes)
Hash
befe370cc5166a275182ccd05fb80810
a3533f097c950cdf30063addc5195634c3ed230c
6a17561f7c3a43c46238f3c6d689425db126b53f6444a82775b870c77c47886c

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /template/js/classie.js HTTP/1.1
Host: almanogretmen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://almanogretmen.com/
Cookie: PHPSESSID=bnote5gmq2s6282pc94urj8lr7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 28 Mar 2023 13:42:06 GMT
content-type: application/javascript
last-modified: Thu, 09 Feb 2017 08:38:13 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 616
date: Tue, 21 Mar 2023 13:42:06 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.33.119.27

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.33.119.27:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
de95776582936b8e129e876cf6d80fa8
0233251e1cf0123f1260d980d7c8ef92718723f9
49c07da2ab4ebd66bd166bf0e20dd084b38973cd40c79f85eb283d15a1ccac36

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "49C07DA2AB4EBD66BD166BF0E20DD084B38973CD40C79F85EB283D15A1CCAC36"
Last-Modified: Sun, 19 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4438
Expires: Tue, 21 Mar 2023 14:56:06 GMT
Date: Tue, 21 Mar 2023 13:42:08 GMT
Connection: keep-alive

r3.o.lencr.org/

23.33.119.27

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.33.119.27:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
de95776582936b8e129e876cf6d80fa8
0233251e1cf0123f1260d980d7c8ef92718723f9
49c07da2ab4ebd66bd166bf0e20dd084b38973cd40c79f85eb283d15a1ccac36

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "49C07DA2AB4EBD66BD166BF0E20DD084B38973CD40C79F85EB283D15A1CCAC36"
Last-Modified: Sun, 19 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4438
Expires: Tue, 21 Mar 2023 14:56:06 GMT
Date: Tue, 21 Mar 2023 13:42:08 GMT
Connection: keep-alive

r3.o.lencr.org/

23.33.119.27

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.33.119.27:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
de95776582936b8e129e876cf6d80fa8
0233251e1cf0123f1260d980d7c8ef92718723f9
49c07da2ab4ebd66bd166bf0e20dd084b38973cd40c79f85eb283d15a1ccac36

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "49C07DA2AB4EBD66BD166BF0E20DD084B38973CD40C79F85EB283D15A1CCAC36"
Last-Modified: Sun, 19 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4438
Expires: Tue, 21 Mar 2023 14:56:06 GMT
Date: Tue, 21 Mar 2023 13:42:08 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff9509282-2846-486c-aca4-fc2e2da04b09.webp

34.120.237.76

200 OK

11 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff9509282-2846-486c-aca4-fc2e2da04b09.webp
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
11 kB (11394 bytes)
Hash
1100f09022852609077bf427f7ce49cd
352e2e60702ca76d7308bbbee83ef7c1413c5b0c
d1cf4a7974bb384cf13448a6aecc5f6bbd387e0eeb60d696df35acfd5231a46b

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff9509282-2846-486c-aca4-fc2e2da04b09.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 11394
x-amzn-requestid: cda4fbe4-0b4e-4836-839a-54f4e40d61a9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CDDVOEZ7oAMFZwA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64177f54-17fbfda14a9a37e523ca5d54;Sampled=0
x-amzn-remapped-date: Sun, 19 Mar 2023 21:32:04 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: EpW8Gqhmn9s8XtArvAxtbrekPlJphcjpXsm6oIkOC8M4lqLgYuZa5A==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 b618c0f73dc30c968057784ed0185d7a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 21 Mar 2023 06:53:48 GMT
age: 24500
etag: "352e2e60702ca76d7308bbbee83ef7c1413c5b0c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.2 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3db1704b-1ecd-4198-a98e-0353d4671a5c.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.2 kB (8195 bytes)
Hash
2a940b362660fdee25faaa51e08c439b
85fa91b5c4e6ddc1f3cf45eb6a4a3facfc6ad68c
18b99e3e890fdc959421c895ce343b8b3ed88819c83fa0009823e8ded23458f1

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3db1704b-1ecd-4198-a98e-0353d4671a5c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8195
x-amzn-requestid: c6844a50-a6b2-4ef4-ad28-f1a0fbcec14f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CDFESEDGoAMFQ8A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6417821b-22fa560d4b7811c233fe07fa;Sampled=0
x-amzn-remapped-date: Sun, 19 Mar 2023 21:43:55 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: hZeMhs-Z5fNn0pvRUSkNcGau_K6EG9EQtDktbLUth0uEveafUgCxeQ==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 85ee490c179dc0af42b771f11421073e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 20 Mar 2023 22:07:00 GMT
age: 56108
etag: "85fa91b5c4e6ddc1f3cf45eb6a4a3facfc6ad68c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

11 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbc7839c7-2b7e-47fa-a8d7-b001f2527406.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
11 kB (11397 bytes)
Hash
e7f3f5682ef230a0e5ead556ccbb9c8d
93bcb7e0d7f2e7648f2749060e0a58bca3a033b9
e63beb09275f78a899e992ce814b4a079aaf38a4932a32b9f9431552702224b8

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbc7839c7-2b7e-47fa-a8d7-b001f2527406.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 11397
x-amzn-requestid: 9c96a37a-b2e6-46f1-94dd-1a299da61a02
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CGWw1HwVIAMF0Hg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6418d19e-0638254835be22cc17465cc2;Sampled=0
x-amzn-remapped-date: Mon, 20 Mar 2023 21:35:26 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: g2YNKMDYmcQl3rpt8G2tHJFrBf25_aNKA4v4WKBgpCQeEWEnwgbkYg==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 e11ee4e3208082d534c251b36bbee268.cloudfront.net (CloudFront), 1.1 google
date: Mon, 20 Mar 2023 21:45:17 GMT
etag: "93bcb7e0d7f2e7648f2749060e0a58bca3a033b9"
content-type: image/jpeg
age: 57411
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

6.5 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb2ad5022-7f23-468e-8e1f-6388d8cc9db8.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
6.5 kB (6511 bytes)
Hash
4e5f234aedfabd736b50fef3017380f9
71672a6c3523d9999522e005091863d07ea0e94a
3314df7a93e317d509aeffc1cde69ec450ddad116a27dc197db1abce966da344

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb2ad5022-7f23-468e-8e1f-6388d8cc9db8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 6511
x-amzn-requestid: 82d12180-bdcb-4ce0-8588-4239ee27f236
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CGWI_E_eoAMF3sA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6418d09f-2f5df7cd5f6cee4762703d29;Sampled=0
x-amzn-remapped-date: Mon, 20 Mar 2023 21:31:11 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: sTt0-W1XE7yUFGFXg2nPnKw5tKKkrw-cH_TCIbQy8JL-k0QtCNZS8w==
via: 1.1 0a2ce08fa1ec3c33302a7547d3305978.cloudfront.net (CloudFront), 1.1 7545e37b10b5fcf5e3df98185c85194a.cloudfront.net (CloudFront), 1.1 google
date: Mon, 20 Mar 2023 21:52:08 GMT
age: 57000
etag: "71672a6c3523d9999522e005091863d07ea0e94a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

11 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6943b819-ab3e-4698-a81d-266be026b4b8.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
11 kB (10855 bytes)
Hash
f73dbc0fc3d196647ddc1e30450989d4
75d0a1414a5d350ba426dc37333a6ea131f66753
2a6954b3ccf01567c0c0c2911dd8b02c1cd264fc78178cef2eef6a6796c16c3f

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6943b819-ab3e-4698-a81d-266be026b4b8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 10855
x-amzn-requestid: bb845712-834d-49b1-97f0-f3750f132741
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CEZD0GCHIAMFq6A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6418087e-4361bbd40ec5f0d10dabdf85;Sampled=0
x-amzn-remapped-date: Mon, 20 Mar 2023 07:17:18 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: d81ObS_T4QBMAr1KU_lJ1hJC4FMqpJNCreDNuU481S4RZo3aQxMkaQ==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 6bdc2963c9ed59b475ec36c35e5932a4.cloudfront.net (CloudFront), 1.1 google
date: Tue, 21 Mar 2023 07:20:22 GMT
age: 22906
etag: "75d0a1414a5d350ba426dc37333a6ea131f66753"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

6.6 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faacc3f97-56a5-4bb4-802f-dc4b529c41d3.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
6.6 kB (6632 bytes)
Hash
59df3b8c484422b14b057fddfd99beb3
d7347bcac5fc585b802d9be262c9536d0f72a498
c05014345e897447f7bdcc3b7d267137bbf76758e8fecfbabcb20d09889769f6

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faacc3f97-56a5-4bb4-802f-dc4b529c41d3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 6632
x-amzn-requestid: e51ff988-1417-4d22-8540-82914428fdcd
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CBFaIHZ8IAMF3lQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6416b5da-744c064c55ad8d3401855d0f;Sampled=0
x-amzn-remapped-date: Sun, 19 Mar 2023 07:12:26 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: FsFKERMeCkoD4DFnD-sjKYiRB8izHSQszlkxg7L7jaBgGy4ASvpkkQ==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 618052a0d9c86c1a3bf663f82d041d1c.cloudfront.net (CloudFront), 1.1 google
date: Tue, 21 Mar 2023 12:12:35 GMT
age: 5373
etag: "d7347bcac5fc585b802d9be262c9536d0f72a498"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

almanogretmen.com/template/img/bg_sub-header_2.png

5.250.241.121

200 OK

54 kB

URL HTTP/2
almanogretmen.com/template/img/bg_sub-header_2.png
IP
5.250.241.121:0
ASN
#59674 Aysima Bilisim Teknolojileri

File type
PNG image data, 1290 x 760, 8-bit/color RGBA, non-interlaced\012- data
Size
54 kB (54435 bytes)
Hash
63442826bc95f764be337cbb83a21800
f28054ee1a5b12fc013aaddae198da4596e12aed
2f8f9aee7b6ec6c7b24fcef9800d515691879d826c1cf62b15426fcf804841aa

HTTP Headers

GET /template/img/bg_sub-header_2.png HTTP/1.1
Host: almanogretmen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://almanogretmen.com/template/css/style.css?v=1
Cookie: PHPSESSID=bnote5gmq2s6282pc94urj8lr7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 28 Mar 2023 13:42:06 GMT
content-type: image/png
last-modified: Thu, 27 Mar 2014 10:47:36 GMT
accept-ranges: bytes
content-length: 54435
date: Tue, 21 Mar 2023 13:42:06 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

almanogretmen.com/template/images/ao-logo.png

5.250.241.121

200 OK

11 kB

URL HTTP/2
almanogretmen.com/template/images/ao-logo.png
IP
5.250.241.121:0
ASN
#59674 Aysima Bilisim Teknolojileri

File type
PNG image data, 324 x 53, 8-bit/color RGBA, non-interlaced\012- data
Size
11 kB (10928 bytes)
Hash
689110b40015536a5ec33130f13318d9
37db94e2d4816e4bb34a0bdac5fd014a6fe1aad8
67da0a29f5d5ac85d064465b72cecef54d47a82879e177598f7555d6b35a282c

HTTP Headers

GET /template/images/ao-logo.png HTTP/1.1
Host: almanogretmen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://almanogretmen.com/template/css/style.css?v=1
Cookie: PHPSESSID=bnote5gmq2s6282pc94urj8lr7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 28 Mar 2023 13:42:06 GMT
content-type: image/png
last-modified: Wed, 22 Mar 2017 21:34:35 GMT
accept-ranges: bytes
content-length: 10928
date: Tue, 21 Mar 2023 13:42:06 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

almanogretmen.com/favicon.ico

5.250.241.121

404 Not Found

1.2 kB

URL HTTP/2
almanogretmen.com/favicon.ico
IP
5.250.241.121:0
ASN
#59674 Aysima Bilisim Teknolojileri

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Size
1.2 kB (1238 bytes)
Hash
0bde7d4b3da67537eaf9188e6f8049cf
64300fc482d01d38b40ab20e15960b6509665e5a
5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: almanogretmen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://almanogretmen.com/
Cookie: PHPSESSID=bnote5gmq2s6282pc94urj8lr7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1238
date: Tue, 21 Mar 2023 13:42:07 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

almanogretmen.com/template/img/blog-icon.png

5.250.241.121

200 OK

1.3 kB

URL HTTP/2
almanogretmen.com/template/img/blog-icon.png
IP
5.250.241.121:0
ASN
#59674 Aysima Bilisim Teknolojileri

File type
PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data
Size
1.3 kB (1332 bytes)
Hash
25f53a61062c2692c7c27edda2527c08
c033454a0b7984a2883105701774a70c1b8023c7
eb3f984b3c8c16398ae019bf962601270cb58b191ac8a57358801093d440044b

HTTP Headers

GET /template/img/blog-icon.png HTTP/1.1
Host: almanogretmen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://almanogretmen.com/template/css/style.css?v=1
Cookie: PHPSESSID=bnote5gmq2s6282pc94urj8lr7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 28 Mar 2023 13:42:07 GMT
content-type: image/png
last-modified: Fri, 24 Feb 2017 12:49:02 GMT
accept-ranges: bytes
content-length: 1332
date: Tue, 21 Mar 2023 13:42:07 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

almanogretmen.com/template/images/teacher/robert-010317010251.jpg

5.250.241.121

200 OK

56 kB

URL HTTP/2
almanogretmen.com/template/images/teacher/robert-010317010251.jpg
IP
5.250.241.121:0
ASN
#59674 Aysima Bilisim Teknolojileri

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", baseline, precision 8, 300x350, components 3\012- data
Size
56 kB (55655 bytes)
Hash
7757450d0b3330a57201324db11054cc
7ef9732db06aad2284218eadb826c41d7adadcc5
3b108b0051d4d3c6f00899c7876a306af5f22b70717532aee195189ede79753f

HTTP Headers

GET /template/images/teacher/robert-010317010251.jpg HTTP/1.1
Host: almanogretmen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://almanogretmen.com/
Cookie: PHPSESSID=bnote5gmq2s6282pc94urj8lr7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 28 Mar 2023 13:42:05 GMT
content-type: image/jpeg
last-modified: Wed, 01 Mar 2017 10:02:52 GMT
accept-ranges: bytes
content-length: 55655
date: Tue, 21 Mar 2023 13:42:05 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

almanogretmen.com/template/images/teacher/bertina-020620012342.png

5.250.241.121

200 OK

186 kB

URL HTTP/2
almanogretmen.com/template/images/teacher/bertina-020620012342.png
IP
5.250.241.121:0
ASN
#59674 Aysima Bilisim Teknolojileri

File type
PNG image data, 300 x 350, 8-bit/color RGBA, non-interlaced\012- data
Size
186 kB (186417 bytes)
Hash
3d16aed71e4dfad6a1c1933499928df5
092b29ac6d3281c401976b8e8633081037307262
a4ebbc4d346230c9e7375ce1896b16c5eb21274d8673123e3b92f987e8a0cc81

HTTP Headers

GET /template/images/teacher/bertina-020620012342.png HTTP/1.1
Host: almanogretmen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://almanogretmen.com/
Cookie: PHPSESSID=bnote5gmq2s6282pc94urj8lr7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 28 Mar 2023 13:42:05 GMT
content-type: image/png
last-modified: Mon, 01 Jun 2020 22:23:43 GMT
accept-ranges: bytes
content-length: 186417
date: Tue, 21 Mar 2023 13:42:05 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

almanogretmen.com/template/fontello/font/fontello.woff2?24644620

5.250.241.121

200 OK

344 kB

URL HTTP/2
almanogretmen.com/template/fontello/font/fontello.woff2?24644620
IP
5.250.241.121:0
ASN
#59674 Aysima Bilisim Teknolojileri

File type
Web Open Font Format (Version 2), TrueType, length 344400, version 1.0\012- data
Size
344 kB (344400 bytes)
Hash
14ab880c95e7719de5fe9ac9d1ada24e
8c3596052bb5ec59a37947da4486429707038e60
7b3ec01b42b62b57c0640c8932d1616bd8b06e522b9c3ab703695efafe2304bb

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /template/fontello/font/fontello.woff2?24644620 HTTP/1.1
Host: almanogretmen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://almanogretmen.com/template/fontello/css/fontello.css?v=1
Cookie: PHPSESSID=bnote5gmq2s6282pc94urj8lr7
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
content-type: font/woff2
last-modified: Wed, 01 Mar 2017 07:50:45 GMT
accept-ranges: bytes
content-length: 344400
date: Tue, 21 Mar 2023 13:42:06 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

almanogretmen.com/

5.250.241.121

200 OK

0 B

URL HTTP/2
almanogretmen.com/
IP
5.250.241.121:0
ASN
#59674 Aysima Bilisim Teknolojileri

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET / HTTP/1.1
Host: almanogretmen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: PHPSESSID=bnote5gmq2s6282pc94urj8lr7
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers

HTTP/2 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
content-type: text/html; charset=utf-8
content-encoding: br
vary: Accept-Encoding
date: Tue, 21 Mar 2023 13:42:05 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (9)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML