GET alttrizlesened6.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili
301 Moved Permanently 92 kB URL User Request GET alttrizlesened6.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili
IP
Certificate IssuerGoogle Trust Services
Subjectalttrizlesened6.shop
Fingerprint41:6D:68:DF:18:72:E3:7D:C0:C7:E6:81:7C:7F:AA:FC:71:8A:1C:B1
ValidityTue, 29 Apr 2025 10:44:16 GMT - Mon, 28 Jul 2025 11:30:33 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili HTTP/1.1
Host: alttrizlesened6.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Fri, 20 Jun 2025 22:56:01 GMT
content-type: text/html
location: https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili
server: cloudflare
x-powered-by: PleskLin
cf-cache-status: DYNAMIC
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=O7eicC%2F1xy6gBY8J5rQUovpxEzv7ZJLPjZun1SBqKBHcAKQ41J503Ea4Ji1DPgEaPV0AdmsSlzReMGKF6DxX7KUFPo53b1orL3zvoNAa3F0zEQ%3D%3D"}]}
cf-ray: 952edb6a1b607130-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET nablahd46.shop/wp-content/themes/retrotube/assets/js/lazyload.js?ver=1.0.0
200 OK 5.8 kB URL GET nablahd46.shop/wp-content/themes/retrotube/assets/js/lazyload.js?ver=1.0.0
IP
Requested by https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
Certificate IssuerGoogle Trust Services
Subjectnablahd46.shop
Fingerprint69:80:7F:8F:5F:2C:A1:F3:63:92:3A:B9:79:64:8A:B8:A7:05:36:FE
ValidityWed, 04 Jun 2025 03:44:27 GMT - Tue, 02 Sep 2025 04:41:53 GMT
File type JavaScript source, ASCII text, with very long lines (5710)
Hash 6dcca58db348f35d6eee39aadb7cd280
0a513a0ebed60f4b0b4d69f7aaf519feaadbfaec
2683c87843149db588b42abb7ef80b2815438fc44b368e1a855983f93ae431e4
GET /wp-content/themes/retrotube/assets/js/lazyload.js?ver=1.0.0 HTTP/1.1
Host: nablahd46.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 20 Jun 2025 22:56:02 GMT
content-type: application/javascript
server: cloudflare
last-modified: Sun, 04 May 2025 10:44:02 GMT
etag: "681744f2-167b"
x-powered-by: PleskLin
content-encoding: br
cache-control: max-age=14400
cf-cache-status: REVALIDATED
priority: u=3,i=?0
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=sma2oCuqelMWSJF37PTPSvA%2BhsuUWRigb6HFR5lUQQH%2FL2kUr2mkU5i0f4rTuLVM9H4PBDy2D%2BWqvJzbrmhAy3Jc8F4vulklmmMB2A%3D%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cf-ray: 952edb712c5a56ba-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET nablahd46.shop/wp-content/themes/retrotube/assets/js/skip-link-focus-fix.js?ver=1.0.0
200 OK 683 B URL GET nablahd46.shop/wp-content/themes/retrotube/assets/js/skip-link-focus-fix.js?ver=1.0.0
IP
Requested by https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
Certificate IssuerGoogle Trust Services
Subjectnablahd46.shop
Fingerprint69:80:7F:8F:5F:2C:A1:F3:63:92:3A:B9:79:64:8A:B8:A7:05:36:FE
ValidityWed, 04 Jun 2025 03:44:27 GMT - Tue, 02 Sep 2025 04:41:53 GMT
File type JavaScript source, ASCII text
Hash 75abd4cd8807b312f9f7faeb77ee774b
e7b7a7ed06d0123ab8667a1d1eeb23de9f2bece7
ca424c0181141900220a19f998ffa7660380bc99ab99557ad458a083251f7034
GET /wp-content/themes/retrotube/assets/js/skip-link-focus-fix.js?ver=1.0.0 HTTP/1.1
Host: nablahd46.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 20 Jun 2025 22:56:02 GMT
content-type: application/javascript
server: cloudflare
x-accel-version: 0.01
last-modified: Sun, 04 May 2025 10:44:02 GMT
etag: "2ab-6344d0fc5a080"
x-powered-by: PleskLin
content-encoding: br
cache-control: max-age=14400
cf-cache-status: REVALIDATED
priority: u=3,i=?0
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=18k75UZNJpNksZhDzTedpDesr0kwXTQgH3sO6zWjW9G98LMz1zmJslqSTwO2q2wVHbMKiLjYYtO7FCdlr7zfMp%2FtSH%2BrqXypbOGANw%3D%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cf-ray: 952edb712c5c56ba-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET bobstrmxiz.shop/e/1keekufcyel6/
200 OK 1.3 kB URL GET bobstrmxiz.shop/e/1keekufcyel6/
IP
Requested by https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
Certificate IssuerGoogle Trust Services
Subjectbobstrmxiz.shop
Fingerprint2F:3E:C2:34:E7:63:51:DA:C7:F8:40:C3:AE:DA:EE:A9:A8:F4:B9:36
ValiditySat, 31 May 2025 18:14:48 GMT - Fri, 29 Aug 2025 19:12:11 GMT
File type HTML document, ASCII text
Hash 75b6884c61c5021f4f3d8fc31259a60d
18dde751734841d281a88200e5c2ecab1eeb8b32
e98adcf4ef7324f4c6a1c93043e2deb3c0bb4a35ec202c3fda6c19dfbac270a0
GET /e/1keekufcyel6/ HTTP/1.1
Host: bobstrmxiz.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nablahd46.shop/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 20 Jun 2025 22:56:03 GMT
content-type: text/html; charset=UTF-8
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
expires: Thu, 19 Jun 2025 22:56:03 GMT
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=xh%2BRCvtbIfVxfTykBdopnIgXo49VRXy2XeOEehmdnE3DRIz92Z6Eg17e5DAKvHD754URMNjtzeoaaYVcpfK2oFW0SQ9ScbSkl29WOoc%3D"}]}
content-encoding: br
set-cookie: lang=1; HttpOnly; Path=/; Domain=bobstrmxiz.shop
cf-ray: 952edb746e3856bf-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET www.blockadsnot.com/ijquery.rateyo.min.css
200 OK 37 kB URL GET www.blockadsnot.com/ijquery.rateyo.min.css
IP
ASN #60068 Datacamp Limited
Requested by https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
Certificate IssuerLet's Encrypt
Subject1158060716.rsc.cdn77.org
FingerprintD6:68:88:78:D5:18:B9:BC:6F:69:01:F9:29:EE:74:87:59:09:27:C6
ValidityWed, 16 Apr 2025 02:52:47 GMT - Tue, 15 Jul 2025 02:52:46 GMT
File type JavaScript source, ASCII text, with very long lines (1568)
Hash 8df266cb7e82b3d74b57dc39ec31e5a6
06a9253efc83440d1fe0cd7cee494de1675c6f15
409011ffa584db1201019d66dfcf725ca22da45e347a73ee829fe3eeb806a2e7
GET /ijquery.rateyo.min.css HTTP/1.1
Host: www.blockadsnot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nablahd46.shop
DNT: 1
Connection: keep-alive
Referer: https://nablahd46.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 20 Jun 2025 22:56:03 GMT
content-type: application/x-javascript
popads-node: wb2
expires: Mon, 23 Jun 2025 19:37:16 GMT
access-control-allow-origin: https://nablahd46.shop
link: <https://blockadsnot.com/>;rel=preconnect
cache-control: public, max-age=604800
x-77-nzt: EwgBX63NDQFBDAG5TAoMAfeEZwUADAGKxyXEAbcTDQAA
x-77-nzt-ray: 2a494a159697188a28e75568d0d56012
x-77-cache: HIT
x-77-age: 354180
vary: Accept-Encoding, Origin
content-encoding: gzip
server: CDN77-Turbo
x-77-pop: osloNO
X-Firefox-Spdy: h2
GET t.dtscout.com/i/?l=https%3A%2F%2Fnablahd46.shop%2Fazgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili%2F&j=
200 OK 2.1 kB URL GET t.dtscout.com/i/?l=https%3A%2F%2Fnablahd46.shop%2Fazgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili%2F&j=
IP
Requested by https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
Certificate IssuerGoogle Trust Services
Subjectdtscout.com
Fingerprint11:3C:3D:5C:B0:6F:26:8A:49:75:78:AB:D4:5F:97:20:13:A2:96:DC
ValidityMon, 05 May 2025 03:38:34 GMT - Sun, 03 Aug 2025 04:38:30 GMT
File type ASCII text, with very long lines (2077)
Hash 51bd741af3fcc4984d1a753eebfa1141
534664acf69cbbb5c9b97c96b63dd37bdc580da2
3e9c8e5dcf3cbff9e1b7211551a31fe388f1b8e607fd78a0a34855be65da721c
GET /i/?l=https%3A%2F%2Fnablahd46.shop%2Fazgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili%2F&j= HTTP/1.1
Host: t.dtscout.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nablahd46.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 20 Jun 2025 22:56:03 GMT
content-type: application/javascript
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
x-s: mtl3
x-t: 0.269
expires: Fri, 20 Jun 2025 22:56:02 GMT
cache-control: no-cache
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=Kqm1VfYHP0hOEPYxYcy2aTZkz%2F5yna3jQgLuwnEiKrMAY9CWIOh8fFTRgkoYIF28lnbkCLgNBHSWJwVpht3Sa%2B8eSlvdcWaKfgU%3D"}]}
content-encoding: br
set-cookie: m=1; SameSite=None; Secure; Path=/; Domain=dtscout.com; Max-Age=5000; Expires=Sat, 21 Jun 2025 00:19:23 GMT
df=1750460163; SameSite=None; Secure; Path=/; Domain=dtscout.com; Max-Age=8640000; Expires=Sun, 28 Sep 2025 22:56:03 GMT
cf-ray: 952edb752a085691-OSL
X-Firefox-Spdy: h2
GET 26efp.com/css/main.css?v=4
200 OK 49 kB URL GET 26efp.com/css/main.css?v=4
IP
Requested by https://26efp.com/bkg/1keekufcyel6?ref=nablahd46.shop
Certificate IssuerGoogle Trust Services
Subject26efp.com
Fingerprint22:8D:C1:CD:59:4D:CD:8C:E3:D9:2B:78:D2:A8:5E:73:CB:BA:61:42
ValiditySat, 14 Jun 2025 11:27:58 GMT - Fri, 12 Sep 2025 12:26:36 GMT
File type assembler source, Unicode text, UTF-8 text
Hash 5a72a30cb5e2721cf7e36ebd9846a4f6
c03db81b75b19f829201db0d01d66ef189b8180a
b0341644a22e09291520c4c51eac70ed71928ee3066f40fcff257c582afac3b1
GET /css/main.css?v=4 HTTP/1.1
Host: 26efp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://26efp.com/bkg/1keekufcyel6?ref=nablahd46.shop
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 20 Jun 2025 22:56:05 GMT
content-type: text/css
server: cloudflare
last-modified: Thu, 26 Sep 2024 18:06:54 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
expires: Thu, 26 Jun 2025 09:41:02 GMT
cache-control: max-age=604800
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
age: 134102
cf-cache-status: HIT
priority: u=2,i=?0
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=VtAolyPNJN8VLdqle9hpGCZcGa4fMh4lVxfZfXlH%2FwtOpT4Pyh7OC3Rf5Taspm9K8nK8bV4J7xqddE3Zj5y8GEYm8RyHYRk%3D"}]}
etag: W/"66f5a2be-c03c"
content-encoding: br
cf-ray: 952edb8508aa56c3-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico&hl=en&ifkv=AdBytiMY8gKO4-VlioWA1oKSXEQYhDan8yy8WsfwWX2rFnW2ALDbX15MZF-mIWPQilyueOZhB4fX0g&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1949750858%3A1750460170375765
403 Forbidden 0 B URL GET accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico&hl=en&ifkv=AdBytiMY8gKO4-VlioWA1oKSXEQYhDan8yy8WsfwWX2rFnW2ALDbX15MZF-mIWPQilyueOZhB4fX0g&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1949750858%3A1750460170375765
IP
Requested by https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
Certificate IssuerGoogle Trust Services
Subject*.google.com
Fingerprint50:4A:C6:AC:C5:1D:10:C3:CB:A9:22:1D:7D:A7:9C:35:49:92:AB:CE
ValidityMon, 02 Jun 2025 08:35:40 GMT - Mon, 25 Aug 2025 08:35:39 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v3/signin/identifier?continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico&hl=en&ifkv=AdBytiMY8gKO4-VlioWA1oKSXEQYhDan8yy8WsfwWX2rFnW2ALDbX15MZF-mIWPQilyueOZhB4fX0g&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1949750858%3A1750460170375765 HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 20 Jun 2025 22:56:10 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
content-security-policy: script-src 'nonce-JL7-8aXsTD_aGtrKAn_bpA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.google.com/tools/feedback/ https://www.gstatic.com/feedback/js/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://support.google.com/inapp/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport
content-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/tools/feedback/chat_load.js https://www.google.com/tools/feedback/help_api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.gstatic.com/feedback/js/ https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.EgAwAlBY3zc.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET vjs.zencdn.net/7.8.4/video.min.js?ver=7.8.4
200 OK 498 kB URL GET vjs.zencdn.net/7.8.4/video.min.js?ver=7.8.4
IP
Requested by https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
Certificate IssuerGlobalSign nv-sa
Subjectvjs.zencdn.net
Fingerprint22:88:1F:07:1F:92:14:54:4B:E7:66:41:59:BF:5D:37:AF:C0:31:C7
ValidityTue, 07 Jan 2025 21:56:05 GMT - Sun, 08 Feb 2026 21:56:04 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (45362)
Size 498 kB (498019 bytes)
Hash 102cc1896541330762962b95fcb31f95
58af851e231b29a31690a7b74ebfa89a62977a0d
be788c49f862ad8e0f7947411cb71db6aac0046b3cee79c3144179a57baf07bb
GET /7.8.4/video.min.js?ver=7.8.4 HTTP/1.1
Host: vjs.zencdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nablahd46.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Wed, 08 Jul 2020 20:29:39 GMT
etag: "102cc1896541330762962b95fcb31f95"
cache-control: public, max-age=31536000
content-type: application/javascript; charset=utf-8
content-encoding: gzip
date: Fri, 20 Jun 2025 22:56:02 GMT
x-served-by: cache-hel1410027-HEL
x-cache: HIT
x-cache-hits: 23809
vary: Accept-Encoding
access-control-allow-origin: *
timing-allow-origin: *
content-length: 139307
X-Firefox-Spdy: h2
GET nablahd46.shop/wp-content/themes/retrotube/assets/js/navigation.js?ver=1.0.0
200 OK 4.5 kB URL GET nablahd46.shop/wp-content/themes/retrotube/assets/js/navigation.js?ver=1.0.0
IP
Requested by https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
Certificate IssuerGoogle Trust Services
Subjectnablahd46.shop
Fingerprint69:80:7F:8F:5F:2C:A1:F3:63:92:3A:B9:79:64:8A:B8:A7:05:36:FE
ValidityWed, 04 Jun 2025 03:44:27 GMT - Tue, 02 Sep 2025 04:41:53 GMT
File type JavaScript source, ASCII text
Hash eca10535dd65f4979e3b3ad3ec8e02c2
54c38c3bf24825e407741ef0e316f678a5b580db
802bc6725fd37d15aa9d599fa3f921fca0d4c585162c7b23da8ccd6f3ded751d
GET /wp-content/themes/retrotube/assets/js/navigation.js?ver=1.0.0 HTTP/1.1
Host: nablahd46.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 20 Jun 2025 22:56:02 GMT
content-type: application/javascript
server: cloudflare
last-modified: Sun, 04 May 2025 10:44:02 GMT
etag: "681744f2-1194"
x-powered-by: PleskLin
content-encoding: br
cache-control: max-age=14400
cf-cache-status: REVALIDATED
priority: u=3,i=?0
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=2%2BcK2kLXHJX%2BzhUC3GdRj90lklG3y%2F%2FpuBX5j2OoBlYY9iaMQ%2FrL6brnA%2FWoof6OhLblMFZdveWn4VTlZbKWpCQayn4bIBcSW%2BR%2BAA%3D%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cf-ray: 952edb711c3b56ba-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET nablahd46.shop/wp-content/uploads/2024/05/20231104-160612.jpg.webp
200 OK 47 kB URL GET nablahd46.shop/wp-content/uploads/2024/05/20231104-160612.jpg.webp
IP
Requested by https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
Certificate IssuerGoogle Trust Services
Subjectnablahd46.shop
Fingerprint69:80:7F:8F:5F:2C:A1:F3:63:92:3A:B9:79:64:8A:B8:A7:05:36:FE
ValidityWed, 04 Jun 2025 03:44:27 GMT - Tue, 02 Sep 2025 04:41:53 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 975x548, Scaling: [none]x[none], YUV color, decoders should clamp
Hash 7a5ab0fbc829e5ebcc8ea3da35129322
070edde9e7d63ed9ecf4b679af5a8d98eb2958e5
4e6d8d0ef81ea7731c18248cf138b395295ac45a99ec1ab29bcfe5389b425835
GET /wp-content/uploads/2024/05/20231104-160612.jpg.webp HTTP/1.1
Host: nablahd46.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 20 Jun 2025 22:56:03 GMT
content-type: image/webp
content-length: 47184
server: cloudflare
last-modified: Tue, 30 Jul 2024 03:36:18 GMT
etag: "66a85fb2-b850"
x-powered-by: PleskLin
accept-ranges: bytes
cache-control: max-age=14400
cf-cache-status: MISS
priority: u=4,i=?0
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=9f0g2y6WKXhHxX%2FbAXaufBMKlePICcDgkW43oOLsFWEF3Svp6Nry0%2FXNNQIjSXoVfTfDcrGG%2FNPn4pOYznAqUIQXJ7X%2F2l8V11KhKQ%3D%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cf-ray: 952edb7778a656ba-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
OPTIONS fp.metricswpsh.com/fp?tag_id=340961
204 No Content 0 B URL OPTIONS fp.metricswpsh.com/fp?tag_id=340961
IP
ASN #24940 Hetzner Online GmbH
Requested by https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
Certificate IssuerLet's Encrypt
Subjectnotification.tubecup.net
Fingerprint7E:67:6E:60:DA:54:65:A6:A2:F7:52:44:8A:5F:F2:EF:60:96:4D:A7
ValidityMon, 16 Jun 2025 02:50:45 GMT - Sun, 14 Sep 2025 02:50:44 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /fp?tag_id=340961 HTTP/1.1
Host: fp.metricswpsh.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://nablahd46.shop/
Origin: https://nablahd46.shop
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
Server: nginx/1.20.1
Date: Fri, 20 Jun 2025 22:56:07 GMT
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: content-type
Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE
Access-Control-Allow-Origin: https://nablahd46.shop
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
GET nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
200 OK 92 kB URL User Request GET nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
IP
Certificate IssuerGoogle Trust Services
Subjectnablahd46.shop
Fingerprint69:80:7F:8F:5F:2C:A1:F3:63:92:3A:B9:79:64:8A:B8:A7:05:36:FE
ValidityWed, 04 Jun 2025 03:44:27 GMT - Tue, 02 Sep 2025 04:41:53 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (8856), with CRLF, LF line terminators
Hash 9f68437456804dd5fc0769020bfb17de
fcbdc7c27214088453798d5ca34ce552701d44db
88fd75357f8b7e4f1d3cf01a8b39f4ff2566e565754456ad6f0c0031bbf55ce5
GET /azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/ HTTP/1.1
Host: nablahd46.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 20 Jun 2025 22:56:02 GMT
content-type: text/html; charset=UTF-8
server: cloudflare
x-powered-by: PHP/7.4.33, PleskLin
last-modified: Tue, 17 Jun 2025 09:25:44 GMT
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=iOMhzWrKv%2F9JNh8FK4gJtSlTlZCh3jPDsnMvDUzS0ITStveYkL25tWvuiphdOMKG0968AiZXH%2BSEkdr9k%2FZv1YCXRqoO7uSvg%2BtIQw%3D%3D"}]}
cf-cache-status: DYNAMIC
vary: accept-encoding
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
content-encoding: br
cf-ray: 952edb6dcf0156ab-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET nablahd46.shop/wp-content/themes/retrotube/assets/js/jquery.touchSwipe.min.js?ver=1.6.18
200 OK 20 kB URL GET nablahd46.shop/wp-content/themes/retrotube/assets/js/jquery.touchSwipe.min.js?ver=1.6.18
IP
Requested by https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
Certificate IssuerGoogle Trust Services
Subjectnablahd46.shop
Fingerprint69:80:7F:8F:5F:2C:A1:F3:63:92:3A:B9:79:64:8A:B8:A7:05:36:FE
ValidityWed, 04 Jun 2025 03:44:27 GMT - Tue, 02 Sep 2025 04:41:53 GMT
File type JavaScript source, ASCII text, with very long lines (20018)
Hash 4cd5ea35543390c5fc4e9def651ab721
d360aa74dff157fcefda69336ecf420f04940f98
9167cb37ed21405ef9556646b83789a2099c15398f5cea867470df1e81752e17
GET /wp-content/themes/retrotube/assets/js/jquery.touchSwipe.min.js?ver=1.6.18 HTTP/1.1
Host: nablahd46.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 20 Jun 2025 22:56:02 GMT
content-type: application/javascript
server: cloudflare
last-modified: Sun, 04 May 2025 10:44:02 GMT
etag: "681744f2-4fce"
x-powered-by: PleskLin
content-encoding: br
cache-control: max-age=14400
cf-cache-status: REVALIDATED
priority: u=3,i=?0
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=lX1FvFtGKc6QCFSS5HXigq%2BBW74D1fXc3ALq33NwmvAXJ7t4n5icAGRjTIS87QCp9OHEZF28V3Nvoqtcz4UnYVJSv1LDTqGREEok1w%3D%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cf-ray: 952edb712c5956ba-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET nablahd46.shop/wp-content/uploads/2024/05/20231104-143239.jpg.webp
200 OK 55 kB URL GET nablahd46.shop/wp-content/uploads/2024/05/20231104-143239.jpg.webp
IP
Requested by https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
Certificate IssuerGoogle Trust Services
Subjectnablahd46.shop
Fingerprint69:80:7F:8F:5F:2C:A1:F3:63:92:3A:B9:79:64:8A:B8:A7:05:36:FE
ValidityWed, 04 Jun 2025 03:44:27 GMT - Tue, 02 Sep 2025 04:41:53 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 975x548, Scaling: [none]x[none], YUV color, decoders should clamp
Hash 951eb961377bdf646d44f92d16a70c81
5e393dc5996f149020a8594d0c6d69442f9fa017
8c244318d60a912d56c43f7dac10cdf99bb0bfadc9c88826b7d3183f8b5722ec
GET /wp-content/uploads/2024/05/20231104-143239.jpg.webp HTTP/1.1
Host: nablahd46.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 20 Jun 2025 22:56:03 GMT
content-type: image/webp
content-length: 54592
server: cloudflare
last-modified: Tue, 30 Jul 2024 04:05:45 GMT
etag: "66a86699-d540"
x-powered-by: PleskLin
accept-ranges: bytes
cache-control: max-age=14400
cf-cache-status: MISS
priority: u=4,i=?0
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=yr0gaYXfdQFu%2BQHKNAu5bWcJp4%2BypUGXZGXRmkKRRMQFCsWwuc5typ2phHnyEftiZX5m9lZDfvIXZkiuPYq3NoSIfPrjyymioY3ANg%3D%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cf-ray: 952edb7778a856ba-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET 26efp.com/js/xupload.js?v=3
200 OK 11 kB URL GET 26efp.com/js/xupload.js?v=3
IP
Requested by https://26efp.com/bkg/1keekufcyel6?ref=nablahd46.shop
Certificate IssuerGoogle Trust Services
Subject26efp.com
Fingerprint22:8D:C1:CD:59:4D:CD:8C:E3:D9:2B:78:D2:A8:5E:73:CB:BA:61:42
ValiditySat, 14 Jun 2025 11:27:58 GMT - Fri, 12 Sep 2025 12:26:36 GMT
File type JavaScript source, ASCII text
Hash 200f7636e884860eed563210f5125c16
3312a1318afed0df1fa4a93cac2016165c651f28
01cd57ece4bf51c9db1a880a36145f8bda86634cf6b0cb69e6f9e7f187c107bd
GET /js/xupload.js?v=3 HTTP/1.1
Host: 26efp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://26efp.com/bkg/1keekufcyel6?ref=nablahd46.shop
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 20 Jun 2025 22:56:05 GMT
content-type: application/javascript; charset=utf-8
server: cloudflare
last-modified: Thu, 27 Mar 2025 07:57:44 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
expires: Thu, 26 Jun 2025 09:42:08 GMT
cache-control: max-age=604800
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
age: 134037
cf-cache-status: HIT
priority: u=2,i=?0
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=tSY1L493ymlh2K2vbfa7UvIH7iO6DgUR0JVPBSb3OTiHMwtujFSsGJp5byk07S5I7LETUHvVfFOgVtgL7nWgEOhTVJirels%3D"}]}
etag: W/"67e504f8-2b52"
content-encoding: br
cf-ray: 952edb8528d356c3-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
HEAD 26efp.com/bkg/1keekufcyel6?ref=nablahd46.shop
200 OK 0 B URL HEAD 26efp.com/bkg/1keekufcyel6?ref=nablahd46.shop
IP
Requested by https://26efp.com/bkg/1keekufcyel6?ref=nablahd46.shop
Certificate IssuerGoogle Trust Services
Subject26efp.com
Fingerprint22:8D:C1:CD:59:4D:CD:8C:E3:D9:2B:78:D2:A8:5E:73:CB:BA:61:42
ValiditySat, 14 Jun 2025 11:27:58 GMT - Fri, 12 Sep 2025 12:26:36 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD /bkg/1keekufcyel6?ref=nablahd46.shop HTTP/1.1
Host: 26efp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://26efp.com/bkg/1keekufcyel6?ref=nablahd46.shop
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 20 Jun 2025 22:56:06 GMT
content-type: text/html; charset=UTF-8
server: cloudflare
expires: Thu, 19 Jun 2025 22:56:06 GMT
priority: u=3,i=?0
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=zItLPDbQ3o4RYjjOVGsW41htRmQGo38cajtiPj2dN2utl5p7%2FK8M3rzzgo3REXi5OYTTyEzwp%2BuAowM3T85hxzGxvsQxMoE%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
content-encoding: br
set-cookie: lang=1; HttpOnly; Path=/; Domain=26efp.com
cf-ray: 952edb875b1556c3-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET 4.adsco.re/
0 B IP
Requested by https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: 4.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nablahd46.shop
DNT: 1
Connection: keep-alive
Referer: https://nablahd46.shop/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET be4235.rcr32.ams02.i8yz83pn.com/hls2/01/05160/1keekufcyel6_n/index-v1-a1.m3u8?t=4MH12i3FuegRdBQIn0XJeOWk-mZ5wlgg_xwjVA3n_Mw&s=1750460165&e=10800&f=25802859&srv=52&asn=50304&sp=5500&p=
200 OK 35 kB URL GET be4235.rcr32.ams02.i8yz83pn.com/hls2/01/05160/1keekufcyel6_n/index-v1-a1.m3u8?t=4MH12i3FuegRdBQIn0XJeOWk-mZ5wlgg_xwjVA3n_Mw&s=1750460165&e=10800&f=25802859&srv=52&asn=50304&sp=5500&p=
IP
Requested by https://26efp.com/bkg/1keekufcyel6?ref=nablahd46.shop
Certificate IssuerLet's Encrypt
Subjectbe4235.rcr32.ams02.i8yz83pn.com
Fingerprint08:2E:6E:50:1F:6C:3C:40:46:96:50:01:A4:0B:BA:92:B6:07:E2:72
ValidityMon, 09 Jun 2025 13:59:44 GMT - Sun, 07 Sep 2025 13:59:43 GMT
Hash 0599679bea7d75314300442d1e26fb50
8e5037f98cf340c278af12ce8b305bf0d37825df
f25aa2744f6a7420cdeed79a3e8a4d16b06df1d873e3d537724f8e521b5372fd
GET /hls2/01/05160/1keekufcyel6_n/index-v1-a1.m3u8?t=4MH12i3FuegRdBQIn0XJeOWk-mZ5wlgg_xwjVA3n_Mw&s=1750460165&e=10800&f=25802859&srv=52&asn=50304&sp=5500&p= HTTP/1.1
Host: be4235.rcr32.ams02.i8yz83pn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://26efp.com
DNT: 1
Connection: keep-alive
Referer: https://26efp.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 20 Jun 2025 22:56:07 GMT
Content-Type: application/vnd.apple.mpegurl
Last-Modified: Fri, 20 Jun 2025 22:56:07 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 23 Jun 2025 22:56:07 GMT
Access-Control-Allow-Origin: *
Cache-Control: max-age=259200, no-store, no-cache
Sprint-Cache: BYPASS
Content-Encoding: gzip
GET blockadsnot.com/rrzqgmoyuig?EymctDdz=BQOCAAAAAAAACZUAAtyfmvzdp5etOiHOH8laVakRh8_c_sFqrkUu8-aJ3So5gYWtdIxvzMe5FPW4Oq8yMV35ajw1ICv6gk8EIrPQnI2chQ9ApV7aQq_0570qKIkZTb43hAJMOyMKcYwAwrBzxRtBwD4t9vzZE9Q5X4p2ZSgEiqIZGdtI_-eH0r5TvNBVLYPD0wjtS65HL9q48GCP-gZJcMPDCebbC-jCUIhVsNHgClmq5hyEuPNidhcrHPu2UILwhQnhJGD3Gvon6uPnFtFL4UrTnIzkRPzi9AVJPNpvf7XyYzHOkS0Ga2f-B976o2tJBvWjdJhVvAlRNjyrul6tuQ-vMC5BHZzsVL8Fv41Lv3Bedl-DSObt9CmwSdARJjivEaWdiPr-xooG_np5O58dSSVOdSiaXzC5TzJVr_u15rUdapRXjwJ-DxsuMqzQOOdHpL3kikk6i81rzotpsEzkmLAxb5Ps1AjL-kmK9LLYaH0KP8SL6AUlYEfDaiTSDNkrAMUCiiXvQUjyIv4AAyenVAzmFEXS5IubRUHH0NYfFDGIo6YqoNbFzgn6IX6Ne-mAtlt-ZCv1BNC2zaj_nLT6HM3YTkWwXPUjfHWVx_ryc4dRPGN7S4a6n-LdH76SwZKzsVDjnSGyNrPR-Z5P5SHj50Chim9Q___zTp7vjAMyAs_9lwbCAWLAUHMUjjQTLel6V5Osgr0A4pxXsrlnl3c-J7FjElXLLrBEM3afZvignQGNkZsKwXKq8NiowPTPtPc7AK6wuG7_OHz4BSoYyvtnA1GYF9AoWAc71Wrgzv5r6ayyjHm36akSxcp3yFqpTPWLTkw2rkSqVxPPdKSgR3CWINupvZIVjyObHf_bERQMplJFqtnqk5z_b733rbvmFgmsb0IyJ6Gq64ugRr2Y-JkZsWVRfiN_drquEfNprj0HziZ6cz2IUXOCfIPwK9q27auAGzJhP8fTUO_whTLvnZcSWQ6pEF68nknNHGKcd-UL0mODf0L9WFxV5ouoW3O8h6s_jUhu6pSiwio6VsboyfwxHeH1tXucJwEfoUNRZoRhYPZEvZ4S-xzHEUbpIV1snEJ_KCSsj8gwy2M68rW8OBiHPa_gec2Rx6bAOPLExOUpmc8r17XbKvVBmtmucVUXDmgEvFFXkT_vo7FyIKJbLXY5N2TI556jgIgLrC0XR4pz3s9aaVG3qWzrNBSpJ-p7&HuxNEGIY=4&vgKTtNns=5206499&InpOjEXg=&gudYhWxb=0,0&WytmCukM=&hTbEquZk=&s=1280,1024,1,1280,1024,0
200 OK 44 B URL GET blockadsnot.com/rrzqgmoyuig?EymctDdz=BQOCAAAAAAAACZUAAtyfmvzdp5etOiHOH8laVakRh8_c_sFqrkUu8-aJ3So5gYWtdIxvzMe5FPW4Oq8yMV35ajw1ICv6gk8EIrPQnI2chQ9ApV7aQq_0570qKIkZTb43hAJMOyMKcYwAwrBzxRtBwD4t9vzZE9Q5X4p2ZSgEiqIZGdtI_-eH0r5TvNBVLYPD0wjtS65HL9q48GCP-gZJcMPDCebbC-jCUIhVsNHgClmq5hyEuPNidhcrHPu2UILwhQnhJGD3Gvon6uPnFtFL4UrTnIzkRPzi9AVJPNpvf7XyYzHOkS0Ga2f-B976o2tJBvWjdJhVvAlRNjyrul6tuQ-vMC5BHZzsVL8Fv41Lv3Bedl-DSObt9CmwSdARJjivEaWdiPr-xooG_np5O58dSSVOdSiaXzC5TzJVr_u15rUdapRXjwJ-DxsuMqzQOOdHpL3kikk6i81rzotpsEzkmLAxb5Ps1AjL-kmK9LLYaH0KP8SL6AUlYEfDaiTSDNkrAMUCiiXvQUjyIv4AAyenVAzmFEXS5IubRUHH0NYfFDGIo6YqoNbFzgn6IX6Ne-mAtlt-ZCv1BNC2zaj_nLT6HM3YTkWwXPUjfHWVx_ryc4dRPGN7S4a6n-LdH76SwZKzsVDjnSGyNrPR-Z5P5SHj50Chim9Q___zTp7vjAMyAs_9lwbCAWLAUHMUjjQTLel6V5Osgr0A4pxXsrlnl3c-J7FjElXLLrBEM3afZvignQGNkZsKwXKq8NiowPTPtPc7AK6wuG7_OHz4BSoYyvtnA1GYF9AoWAc71Wrgzv5r6ayyjHm36akSxcp3yFqpTPWLTkw2rkSqVxPPdKSgR3CWINupvZIVjyObHf_bERQMplJFqtnqk5z_b733rbvmFgmsb0IyJ6Gq64ugRr2Y-JkZsWVRfiN_drquEfNprj0HziZ6cz2IUXOCfIPwK9q27auAGzJhP8fTUO_whTLvnZcSWQ6pEF68nknNHGKcd-UL0mODf0L9WFxV5ouoW3O8h6s_jUhu6pSiwio6VsboyfwxHeH1tXucJwEfoUNRZoRhYPZEvZ4S-xzHEUbpIV1snEJ_KCSsj8gwy2M68rW8OBiHPa_gec2Rx6bAOPLExOUpmc8r17XbKvVBmtmucVUXDmgEvFFXkT_vo7FyIKJbLXY5N2TI556jgIgLrC0XR4pz3s9aaVG3qWzrNBSpJ-p7&HuxNEGIY=4&vgKTtNns=5206499&InpOjEXg=&gudYhWxb=0,0&WytmCukM=&hTbEquZk=&s=1280,1024,1,1280,1024,0
IP
Requested by https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
Certificate IssuerSectigo Limited
Subjectblockadsnot.com
Fingerprint1E:C1:DD:D3:65:DB:48:42:4B:E9:38:9C:2B:C9:89:AD:03:15:09:01
ValidityFri, 04 Apr 2025 00:00:00 GMT - Tue, 05 May 2026 23:59:59 GMT
File type ASCII text, with no line terminators
Hash d5f0a25e4d3522d56d48ce7bc3e518fb
86794caff58f7fee6e684c2ba7195f970a8d6f4c
9d781128a8ece413b003d5612b8398bf9340ef7f5b751d12bd125ba523d3ceb5
GET /rrzqgmoyuig?EymctDdz=BQOCAAAAAAAACZUAAtyfmvzdp5etOiHOH8laVakRh8_c_sFqrkUu8-aJ3So5gYWtdIxvzMe5FPW4Oq8yMV35ajw1ICv6gk8EIrPQnI2chQ9ApV7aQq_0570qKIkZTb43hAJMOyMKcYwAwrBzxRtBwD4t9vzZE9Q5X4p2ZSgEiqIZGdtI_-eH0r5TvNBVLYPD0wjtS65HL9q48GCP-gZJcMPDCebbC-jCUIhVsNHgClmq5hyEuPNidhcrHPu2UILwhQnhJGD3Gvon6uPnFtFL4UrTnIzkRPzi9AVJPNpvf7XyYzHOkS0Ga2f-B976o2tJBvWjdJhVvAlRNjyrul6tuQ-vMC5BHZzsVL8Fv41Lv3Bedl-DSObt9CmwSdARJjivEaWdiPr-xooG_np5O58dSSVOdSiaXzC5TzJVr_u15rUdapRXjwJ-DxsuMqzQOOdHpL3kikk6i81rzotpsEzkmLAxb5Ps1AjL-kmK9LLYaH0KP8SL6AUlYEfDaiTSDNkrAMUCiiXvQUjyIv4AAyenVAzmFEXS5IubRUHH0NYfFDGIo6YqoNbFzgn6IX6Ne-mAtlt-ZCv1BNC2zaj_nLT6HM3YTkWwXPUjfHWVx_ryc4dRPGN7S4a6n-LdH76SwZKzsVDjnSGyNrPR-Z5P5SHj50Chim9Q___zTp7vjAMyAs_9lwbCAWLAUHMUjjQTLel6V5Osgr0A4pxXsrlnl3c-J7FjElXLLrBEM3afZvignQGNkZsKwXKq8NiowPTPtPc7AK6wuG7_OHz4BSoYyvtnA1GYF9AoWAc71Wrgzv5r6ayyjHm36akSxcp3yFqpTPWLTkw2rkSqVxPPdKSgR3CWINupvZIVjyObHf_bERQMplJFqtnqk5z_b733rbvmFgmsb0IyJ6Gq64ugRr2Y-JkZsWVRfiN_drquEfNprj0HziZ6cz2IUXOCfIPwK9q27auAGzJhP8fTUO_whTLvnZcSWQ6pEF68nknNHGKcd-UL0mODf0L9WFxV5ouoW3O8h6s_jUhu6pSiwio6VsboyfwxHeH1tXucJwEfoUNRZoRhYPZEvZ4S-xzHEUbpIV1snEJ_KCSsj8gwy2M68rW8OBiHPa_gec2Rx6bAOPLExOUpmc8r17XbKvVBmtmucVUXDmgEvFFXkT_vo7FyIKJbLXY5N2TI556jgIgLrC0XR4pz3s9aaVG3qWzrNBSpJ-p7&HuxNEGIY=4&vgKTtNns=5206499&InpOjEXg=&gudYhWxb=0,0&WytmCukM=&hTbEquZk=&s=1280,1024,1,1280,1024,0 HTTP/1.1
Host: blockadsnot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nablahd46.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
popads-node: wb3
access-control-allow-origin: *
asf: 9
popads-ec: ASB
content-type: text/javascript;charset=UTF-8
content-length: 44
date: Fri, 20 Jun 2025 22:56:09 GMT
X-Firefox-Spdy: h2
GET awpya.com/in/show/?tag_ab=b&site_id=311453825&adblock=0&testab=0&auction_host=apply&mm=0&yc=0&render_type=hq&pr=&user_keywords=&device_theme=light&v2_track=0&v2=0&conditions=all,dch_ip,tz_offset&ssp=3964&page=https%3A%2F%2Fnablahd46.shop%2Fazgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili%2F&refdom=nablahd46.shop&auction_time=1750460168&subid=500738273&sid=3223123389&tcid=0&ver=8.234.1&ver_c=&spot_id=1453825&utm_source=&utm_medium=&utm_campaign=&utm_content=&created_at=2025-06-20&iabcat=IAB25-3&user_fp=14690273608157834798&score=59.161496676945625&kubik_score=86.2758920014324&kaminari_bot_ip=1&durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D500738273%26spot_id%3D1453825%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fnablahd46.shop%252Fazgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili%252F%26idzone%3D0%26sid%3D1886&is_cpm=0&resp_type=&crid=&crtid=08b734bd08ce908bdc1a036c541a910d&url=https%3A%2F%2Fs.optvz.com%2Fcimp.php%3Fdata%3DTVRjMU1EUTJNREUyT0h3NU5qRXpPVGMxWkRReE5USmhZekEyT1RJNU5HTm1OR1l4T0dFd01UVTVZdy0tfGh0dHBzOi8vZmxpcnRpby5jbHViL2NsaWNrP2tleT01NDkxJnRhZz1vcmRkTkhkTEhUUEhOVlM0QVNPcHJvbGx1cmROTlRSVE5YVE82VnpxcGJYVXpPb2RUSzZWMHJwWFQxVVUwdW9tcG9ucG5kUk5UUlBUUzZWMHpwWFN1bGRLNlowcnBYVE8zbXF1bDJydDRscTNtb3R6dTNuM3N0cm90MjIzcjR0dWR0ZE5uUFZYdmJUUlJMdlZwWmRMckxMUlRYbnRadnJ2cTZxaWFtcWkyZXAzUVRmaFFXUFVQN25PbmxkSzZWMHJwWFN1bGRLNlYwMWxVdE5jczFkcm5PbGRLNlYwcnBYU3VsZEs2VjBycG5TdWxjUTJrZTZnNl9kNi54NmhfYzV6ckxOdE5kZHBxZUt0THRicTZLNWFNNlo2Ykp1TGRwdU5YQjlnJmNvc3Q9MC4wMDEzJnNvdXJjZT1ob3Rtb3ZzLmNvbSZ2YXJpZD0xMTQzNDE2NDImY2FtcGlkPTc1MTgwMjQmc2l0ZWlkPTg2OTI3NyZ6b25laWQ9NDYzMDA5NiZjYXRpZD01MDgmY291bnRyeT1OT1ImZm9ybWF0PSZlbWFpbF9lbmNvZGVkPSZhZ2U9e2FnZX18aHR0cHN8OTEuOTAuNDIuMTU0fE5PUnw0MXxob3Rtb3ZzLmNvbXw5MjI5ODR8NTk5OTE4fDg2OTI3N3w0NjMwMDk2fDUwOHw3NTE4MDI0fDExNDM0MTY0Mnw0MHwzfDB8MHwyNTM0NHw1MzE0NTM4MjV8MTMwfDcwfFVTRHxVU0R8MXwxfDIyfHwxfE5PUnx8MjB8NHwxfHxlMTU5MGQ2OGYwNWUxMzhhOWUyZTc4NjM4ZGRlNmY4OXxkOTFhMjU2ZTg0MzMwZTViNzkwYzAwMzQ2YWQ3ZWNlY3wxfDB8aG90bW92cy5jb218MHwwfDB8MC4wMXwxfDB8ZXhjaGFuZ2VfbGlua3wwfDB8MzE0MzI0MnwtMXwwfDMxNDMyNDR8fHwyfDE0NDB8fDB8MHwwfDB8MHwwfDF8MHx8OHwxfE1vemlsbGEvNS4wIChXaW5kb3dzIE5UIDEwLjA7IFdpbjY0OyB4NjQ7IHJ2OjEzNC4wKSBHZWNrby8yMDEwMDEwMSBGaXJlZm94LzEzNC4wfHw3MjB8N3wwfDJ8MHx8fDB8MHwwfDB8MHwwfDB8MHwwfDB8MHwxLjN8MC43ODY1fDAuNXwxLjV8MXwwfDB8cnRiLmV4b2NsaWNrLmNvbXx8fHwwLjIxfDB8T0t8NGNiYjgzNjQ4NjYzZTQ0MGRmYTQyMGI2MDVmNDdmMDM-%26bs%3DTVRjMU1EUTJNREUyT0h3NU5qRXpPVGMxWkRReE5USmhZekEyT1RJNU5HTm1OR1l4T0dFd01UVTVZdy0tfDR8NTB8MTUwfDEzMHwxfE9LfDUyOTM1MWMxZjMzYjkwMDU0MjcxNGE1ZTkzYTg0NjYx%26cb%3De2e_6855e708d2a9c4.93826009&icons=ewCxqhMFsb0CVJriC4uRGjq8uPRbqmNckZE1qfXGEt95kfNBhxwGKfirrXl7seC0fz3mjcbEVg5NQBmFOamSi7xqqYlrjRXFDrQu3zYW6sKFfEYJZu91Y43p--WgH1pgPHu8Vk2zmNpAYtUSv5robEOAaTR0CTN2qKo4FpxcdgJRW6mOkA&ext_cid=0&px_id=531453825&min_cpm=0.08379661808300395&out_id=1&campaign_type=lq-pop&aid=120&cid=12731&uniq=&mid=497652341954691779&skin_id=2&vertical_id=0&skin_test=0&from_cache=0&ecpm=0.07610017340056023&cpm=0.05622340621872157&verify_hash=58263cd36d6a113a5059e616da4973dc&verify_hash_v2=9ad430c79188b0cd7a8aa562946284c9095d3ab9a3a4aec7b2105cfbd87ffb8b&is_native=2&real_bid=0.00089052602291107&original_bid_usd=0.00091&original_bid=0.00091&show_type=0&exp=0&placement_type_id=0&ua_mismatch=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0&ip_mismatch=91.90.42.154&geo=NO&carrier=-&label_ids=27,129,108,0,4,89,5&need_redirect_show=0&applied_features=yf,test_skins,stage-skins-settings&show_count=1&expiration_timestamp=1750546568&image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FSG%2FSG_50dbf0cae89fd14f34b6cb7b8301e683e25e0adf.webp&site=native-push-adult&price=0.00091&hostname=auc-inpage-hz-13-b&auc_type=1&pop_type=1&site_id64=&interest_vertical_ids=&mo=&ve=&timezone_olson=UTC&topics=&historical_keywords=&pop_cpc=0.00000091&ext_campaign_id_str=&is_webview=0&client_price=0&direct_client_price=0&priority=0&client_payment_model=&is_in_app=0&auc_domain_type=basic&script_type=antiadblock&tma_wallet_balance=0&processed_keywords=adult&is_iframe=0&traffic_category=adult&iframe_click=0&social_network=&tmp_fix=tmp_fix&pattern1=0&pattern2=0&pattern3=0&pattern4=0&pattern5=0&format=default-view-b_r-body&mlf=1&mlc=1&cpa=6215635a-9a4f-4eb7-b92b-96d55d26bebc&prev_step_diff=1312&st=0.09
200 OK 0 B URL GET awpya.com/in/show/?tag_ab=b&site_id=311453825&adblock=0&testab=0&auction_host=apply&mm=0&yc=0&render_type=hq&pr=&user_keywords=&device_theme=light&v2_track=0&v2=0&conditions=all,dch_ip,tz_offset&ssp=3964&page=https%3A%2F%2Fnablahd46.shop%2Fazgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili%2F&refdom=nablahd46.shop&auction_time=1750460168&subid=500738273&sid=3223123389&tcid=0&ver=8.234.1&ver_c=&spot_id=1453825&utm_source=&utm_medium=&utm_campaign=&utm_content=&created_at=2025-06-20&iabcat=IAB25-3&user_fp=14690273608157834798&score=59.161496676945625&kubik_score=86.2758920014324&kaminari_bot_ip=1&durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D500738273%26spot_id%3D1453825%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fnablahd46.shop%252Fazgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili%252F%26idzone%3D0%26sid%3D1886&is_cpm=0&resp_type=&crid=&crtid=08b734bd08ce908bdc1a036c541a910d&url=https%3A%2F%2Fs.optvz.com%2Fcimp.php%3Fdata%3DTVRjMU1EUTJNREUyT0h3NU5qRXpPVGMxWkRReE5USmhZekEyT1RJNU5HTm1OR1l4T0dFd01UVTVZdy0tfGh0dHBzOi8vZmxpcnRpby5jbHViL2NsaWNrP2tleT01NDkxJnRhZz1vcmRkTkhkTEhUUEhOVlM0QVNPcHJvbGx1cmROTlRSVE5YVE82VnpxcGJYVXpPb2RUSzZWMHJwWFQxVVUwdW9tcG9ucG5kUk5UUlBUUzZWMHpwWFN1bGRLNlowcnBYVE8zbXF1bDJydDRscTNtb3R6dTNuM3N0cm90MjIzcjR0dWR0ZE5uUFZYdmJUUlJMdlZwWmRMckxMUlRYbnRadnJ2cTZxaWFtcWkyZXAzUVRmaFFXUFVQN25PbmxkSzZWMHJwWFN1bGRLNlYwMWxVdE5jczFkcm5PbGRLNlYwcnBYU3VsZEs2VjBycG5TdWxjUTJrZTZnNl9kNi54NmhfYzV6ckxOdE5kZHBxZUt0THRicTZLNWFNNlo2Ykp1TGRwdU5YQjlnJmNvc3Q9MC4wMDEzJnNvdXJjZT1ob3Rtb3ZzLmNvbSZ2YXJpZD0xMTQzNDE2NDImY2FtcGlkPTc1MTgwMjQmc2l0ZWlkPTg2OTI3NyZ6b25laWQ9NDYzMDA5NiZjYXRpZD01MDgmY291bnRyeT1OT1ImZm9ybWF0PSZlbWFpbF9lbmNvZGVkPSZhZ2U9e2FnZX18aHR0cHN8OTEuOTAuNDIuMTU0fE5PUnw0MXxob3Rtb3ZzLmNvbXw5MjI5ODR8NTk5OTE4fDg2OTI3N3w0NjMwMDk2fDUwOHw3NTE4MDI0fDExNDM0MTY0Mnw0MHwzfDB8MHwyNTM0NHw1MzE0NTM4MjV8MTMwfDcwfFVTRHxVU0R8MXwxfDIyfHwxfE5PUnx8MjB8NHwxfHxlMTU5MGQ2OGYwNWUxMzhhOWUyZTc4NjM4ZGRlNmY4OXxkOTFhMjU2ZTg0MzMwZTViNzkwYzAwMzQ2YWQ3ZWNlY3wxfDB8aG90bW92cy5jb218MHwwfDB8MC4wMXwxfDB8ZXhjaGFuZ2VfbGlua3wwfDB8MzE0MzI0MnwtMXwwfDMxNDMyNDR8fHwyfDE0NDB8fDB8MHwwfDB8MHwwfDF8MHx8OHwxfE1vemlsbGEvNS4wIChXaW5kb3dzIE5UIDEwLjA7IFdpbjY0OyB4NjQ7IHJ2OjEzNC4wKSBHZWNrby8yMDEwMDEwMSBGaXJlZm94LzEzNC4wfHw3MjB8N3wwfDJ8MHx8fDB8MHwwfDB8MHwwfDB8MHwwfDB8MHwxLjN8MC43ODY1fDAuNXwxLjV8MXwwfDB8cnRiLmV4b2NsaWNrLmNvbXx8fHwwLjIxfDB8T0t8NGNiYjgzNjQ4NjYzZTQ0MGRmYTQyMGI2MDVmNDdmMDM-%26bs%3DTVRjMU1EUTJNREUyT0h3NU5qRXpPVGMxWkRReE5USmhZekEyT1RJNU5HTm1OR1l4T0dFd01UVTVZdy0tfDR8NTB8MTUwfDEzMHwxfE9LfDUyOTM1MWMxZjMzYjkwMDU0MjcxNGE1ZTkzYTg0NjYx%26cb%3De2e_6855e708d2a9c4.93826009&icons=ewCxqhMFsb0CVJriC4uRGjq8uPRbqmNckZE1qfXGEt95kfNBhxwGKfirrXl7seC0fz3mjcbEVg5NQBmFOamSi7xqqYlrjRXFDrQu3zYW6sKFfEYJZu91Y43p--WgH1pgPHu8Vk2zmNpAYtUSv5robEOAaTR0CTN2qKo4FpxcdgJRW6mOkA&ext_cid=0&px_id=531453825&min_cpm=0.08379661808300395&out_id=1&campaign_type=lq-pop&aid=120&cid=12731&uniq=&mid=497652341954691779&skin_id=2&vertical_id=0&skin_test=0&from_cache=0&ecpm=0.07610017340056023&cpm=0.05622340621872157&verify_hash=58263cd36d6a113a5059e616da4973dc&verify_hash_v2=9ad430c79188b0cd7a8aa562946284c9095d3ab9a3a4aec7b2105cfbd87ffb8b&is_native=2&real_bid=0.00089052602291107&original_bid_usd=0.00091&original_bid=0.00091&show_type=0&exp=0&placement_type_id=0&ua_mismatch=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0&ip_mismatch=91.90.42.154&geo=NO&carrier=-&label_ids=27,129,108,0,4,89,5&need_redirect_show=0&applied_features=yf,test_skins,stage-skins-settings&show_count=1&expiration_timestamp=1750546568&image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FSG%2FSG_50dbf0cae89fd14f34b6cb7b8301e683e25e0adf.webp&site=native-push-adult&price=0.00091&hostname=auc-inpage-hz-13-b&auc_type=1&pop_type=1&site_id64=&interest_vertical_ids=&mo=&ve=&timezone_olson=UTC&topics=&historical_keywords=&pop_cpc=0.00000091&ext_campaign_id_str=&is_webview=0&client_price=0&direct_client_price=0&priority=0&client_payment_model=&is_in_app=0&auc_domain_type=basic&script_type=antiadblock&tma_wallet_balance=0&processed_keywords=adult&is_iframe=0&traffic_category=adult&iframe_click=0&social_network=&tmp_fix=tmp_fix&pattern1=0&pattern2=0&pattern3=0&pattern4=0&pattern5=0&format=default-view-b_r-body&mlf=1&mlc=1&cpa=6215635a-9a4f-4eb7-b92b-96d55d26bebc&prev_step_diff=1312&st=0.09
IP
ASN #24940 Hetzner Online GmbH
Requested by https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
Certificate IssuerLet's Encrypt
Subjectinpage.infrapu.sh
Fingerprint53:32:5A:78:97:D4:AD:CF:41:C6:08:3E:D5:02:8C:C6:22:50:E8:35
ValidityTue, 01 Apr 2025 08:22:50 GMT - Mon, 30 Jun 2025 08:22:49 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/show/?tag_ab=b&site_id=311453825&adblock=0&testab=0&auction_host=apply&mm=0&yc=0&render_type=hq&pr=&user_keywords=&device_theme=light&v2_track=0&v2=0&conditions=all,dch_ip,tz_offset&ssp=3964&page=https%3A%2F%2Fnablahd46.shop%2Fazgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili%2F&refdom=nablahd46.shop&auction_time=1750460168&subid=500738273&sid=3223123389&tcid=0&ver=8.234.1&ver_c=&spot_id=1453825&utm_source=&utm_medium=&utm_campaign=&utm_content=&created_at=2025-06-20&iabcat=IAB25-3&user_fp=14690273608157834798&score=59.161496676945625&kubik_score=86.2758920014324&kaminari_bot_ip=1&durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D500738273%26spot_id%3D1453825%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fnablahd46.shop%252Fazgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili%252F%26idzone%3D0%26sid%3D1886&is_cpm=0&resp_type=&crid=&crtid=08b734bd08ce908bdc1a036c541a910d&url=https%3A%2F%2Fs.optvz.com%2Fcimp.php%3Fdata%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-%26bs%3DTVRjMU1EUTJNREUyT0h3NU5qRXpPVGMxWkRReE5USmhZekEyT1RJNU5HTm1OR1l4T0dFd01UVTVZdy0tfDR8NTB8MTUwfDEzMHwxfE9LfDUyOTM1MWMxZjMzYjkwMDU0MjcxNGE1ZTkzYTg0NjYx%26cb%3De2e_6855e708d2a9c4.93826009&icons=ewCxqhMFsb0CVJriC4uRGjq8uPRbqmNckZE1qfXGEt95kfNBhxwGKfirrXl7seC0fz3mjcbEVg5NQBmFOamSi7xqqYlrjRXFDrQu3zYW6sKFfEYJZu91Y43p--WgH1pgPHu8Vk2zmNpAYtUSv5robEOAaTR0CTN2qKo4FpxcdgJRW6mOkA&ext_cid=0&px_id=531453825&min_cpm=0.08379661808300395&out_id=1&campaign_type=lq-pop&aid=120&cid=12731&uniq=&mid=497652341954691779&skin_id=2&vertical_id=0&skin_test=0&from_cache=0&ecpm=0.07610017340056023&cpm=0.05622340621872157&verify_hash=58263cd36d6a113a5059e616da4973dc&verify_hash_v2=9ad430c79188b0cd7a8aa562946284c9095d3ab9a3a4aec7b2105cfbd87ffb8b&is_native=2&real_bid=0.00089052602291107&original_bid_usd=0.00091&original_bid=0.00091&show_type=0&exp=0&placement_type_id=0&ua_mismatch=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0&ip_mismatch=91.90.42.154&geo=NO&carrier=-&label_ids=27,129,108,0,4,89,5&need_redirect_show=0&applied_features=yf,test_skins,stage-skins-settings&show_count=1&expiration_timestamp=1750546568&image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FSG%2FSG_50dbf0cae89fd14f34b6cb7b8301e683e25e0adf.webp&site=native-push-adult&price=0.00091&hostname=auc-inpage-hz-13-b&auc_type=1&pop_type=1&site_id64=&interest_vertical_ids=&mo=&ve=&timezone_olson=UTC&topics=&historical_keywords=&pop_cpc=0.00000091&ext_campaign_id_str=&is_webview=0&client_price=0&direct_client_price=0&priority=0&client_payment_model=&is_in_app=0&auc_domain_type=basic&script_type=antiadblock&tma_wallet_balance=0&processed_keywords=adult&is_iframe=0&traffic_category=adult&iframe_click=0&social_network=&tmp_fix=tmp_fix&pattern1=0&pattern2=0&pattern3=0&pattern4=0&pattern5=0&format=default-view-b_r-body&mlf=1&mlc=1&cpa=6215635a-9a4f-4eb7-b92b-96d55d26bebc&prev_step_diff=1312&st=0.09 HTTP/1.1
Host: awpya.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nablahd46.shop/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.20.1
date: Fri, 20 Jun 2025 22:56:09 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
GET nablahd46.shop/wp-content/themes/retrotube/assets/js/jquery.bxslider.min.js?ver=4.2.15
200 OK 24 kB URL GET nablahd46.shop/wp-content/themes/retrotube/assets/js/jquery.bxslider.min.js?ver=4.2.15
IP
Requested by https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
Certificate IssuerGoogle Trust Services
Subjectnablahd46.shop
Fingerprint69:80:7F:8F:5F:2C:A1:F3:63:92:3A:B9:79:64:8A:B8:A7:05:36:FE
ValidityWed, 04 Jun 2025 03:44:27 GMT - Tue, 02 Sep 2025 04:41:53 GMT
File type JavaScript source, ASCII text, with very long lines (24063)
Hash c675495748ef0df6858b93dd9e623c46
e1be723e4e25d37282821c50b7e12796d3df5f8d
9a32744fa4707d6ea1ad2b696c644c4f45d327509989b4625b8a980e4a45e271
GET /wp-content/themes/retrotube/assets/js/jquery.bxslider.min.js?ver=4.2.15 HTTP/1.1
Host: nablahd46.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 20 Jun 2025 22:56:02 GMT
content-type: application/javascript
server: cloudflare
last-modified: Sun, 04 May 2025 10:44:02 GMT
etag: "681744f2-5ebc"
x-powered-by: PleskLin
content-encoding: br
cache-control: max-age=14400
cf-cache-status: REVALIDATED
priority: u=3,i=?0
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=7EeO%2BfTV%2BErh5%2B%2FQb7f4f1oYx8qnNTpOxPVjFTi2FBN98YRqNbrD0i3ME9LF5qjcHK4YxvLvisQxpjVoKdkmwNrXMrob6YandUWqNQ%3D%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cf-ray: 952edb712c5856ba-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET nablahd46.shop/wp-content/themes/retrotube/assets/js/main.js?ver=1.7.6.1746355442
200 OK 39 kB URL GET nablahd46.shop/wp-content/themes/retrotube/assets/js/main.js?ver=1.7.6.1746355442
IP
Requested by https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
Certificate IssuerGoogle Trust Services
Subjectnablahd46.shop
Fingerprint69:80:7F:8F:5F:2C:A1:F3:63:92:3A:B9:79:64:8A:B8:A7:05:36:FE
ValidityWed, 04 Jun 2025 03:44:27 GMT - Tue, 02 Sep 2025 04:41:53 GMT
File type JavaScript source, ASCII text
Hash 783fecdc0e20f9cbdee6b57839de44e4
0d9062e511793c4ac674742de2de74dd13a85dc9
45c5b2ddd2dd6bae51444e5c06a67a069b87457c72e3876bbaefa17dbaf9315f
GET /wp-content/themes/retrotube/assets/js/main.js?ver=1.7.6.1746355442 HTTP/1.1
Host: nablahd46.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 20 Jun 2025 22:56:02 GMT
content-type: application/javascript
server: cloudflare
last-modified: Sun, 04 May 2025 10:44:02 GMT
etag: "681744f2-996b"
x-powered-by: PleskLin
content-encoding: br
cache-control: max-age=14400
cf-cache-status: REVALIDATED
priority: u=3,i=?0
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=BCswVTiqT9JmZj4F%2B0kLIrTLmqERP9gWu6R2lmdsoGAT%2Bx5J77vsGugX7RZp0RX%2BhSH3RhXwFhKAWtOF4cPNFBuJErHkoDq%2BtXPeUQ%3D%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cf-ray: 952edb712c5b56ba-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET 5740f14e90.af305e6c77.com/1a645fb789a40bc69d7a995ac2e6cef8.js
200 OK 126 kB URL GET 5740f14e90.af305e6c77.com/1a645fb789a40bc69d7a995ac2e6cef8.js
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
Certificate IssuerLet's Encrypt
Subject5740f14e90.af305e6c77.com
Fingerprint4E:C5:C7:6A:5E:A1:CD:7B:50:AF:E5:43:F5:06:B3:79:63:6C:DA:93
ValidityTue, 17 Jun 2025 02:15:40 GMT - Mon, 15 Sep 2025 02:15:39 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Size 126 kB (125514 bytes)
Hash 67eaf0e557d728dfd8ee1603143b20e5
75c79489ecb4b2fd7fbc9563c3448da32c89921b
9717ad2b88ccdb5b7a2a4c4d12b75af8ebc5d3542b5fa49e1b6fcee7f3cbb41c
GET /1a645fb789a40bc69d7a995ac2e6cef8.js HTTP/1.1
Host: 5740f14e90.af305e6c77.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nablahd46.shop
DNT: 1
Connection: keep-alive
Referer: https://nablahd46.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 20 Jun 2025 22:56:03 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Fri, 20 Jun 2025 07:28:19 GMT
etag: W/"68550d93-1ea4a"
content-encoding: gzip
expires: Fri, 20 Jun 2025 23:01:03 GMT
cache-control: max-age=300
x-cdn-host-id: ah1747
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
GET nablahd46.shop/wp-content/uploads/2024/05/20231104-011707.jpg.webp
200 OK 53 kB URL GET nablahd46.shop/wp-content/uploads/2024/05/20231104-011707.jpg.webp
IP
Requested by https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
Certificate IssuerGoogle Trust Services
Subjectnablahd46.shop
Fingerprint69:80:7F:8F:5F:2C:A1:F3:63:92:3A:B9:79:64:8A:B8:A7:05:36:FE
ValidityWed, 04 Jun 2025 03:44:27 GMT - Tue, 02 Sep 2025 04:41:53 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 975x548, Scaling: [none]x[none], YUV color, decoders should clamp
Hash 9b7c7816b203eeee213a3a268ed11b26
2144497d364252b8bb47fe8775c8f00dfaf9c091
89d499c2a59a25771a105b691230e9c0f496600c735e36ed29c483391a6a7c6c
GET /wp-content/uploads/2024/05/20231104-011707.jpg.webp HTTP/1.1
Host: nablahd46.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 20 Jun 2025 22:56:03 GMT
content-type: image/webp
content-length: 53220
server: cloudflare
last-modified: Sun, 04 Aug 2024 05:14:01 GMT
etag: "66af0e19-cfe4"
x-powered-by: PleskLin
accept-ranges: bytes
cache-control: max-age=14400
cf-cache-status: MISS
priority: u=4,i=?0
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=O%2FkEVYcytpN%2BSNp4eCJUIMvuij6iTNbMNoOWB0fBk1tjFK5p5J252T2%2BPJxg%2FiGzP8egnz%2F79CT7FREHgT4K3ckUK6Fad5FUCiGcpQ%3D%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cf-ray: 952edb77789456ba-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET nablahd46.shop/wp-content/uploads/2024/07/favicon-16x1664-1.png.webp
200 OK 180 B URL GET nablahd46.shop/wp-content/uploads/2024/07/favicon-16x1664-1.png.webp
IP
Requested by https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
Certificate IssuerGoogle Trust Services
Subjectnablahd46.shop
Fingerprint69:80:7F:8F:5F:2C:A1:F3:63:92:3A:B9:79:64:8A:B8:A7:05:36:FE
ValidityWed, 04 Jun 2025 03:44:27 GMT - Tue, 02 Sep 2025 04:41:53 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 16x16, Scaling: [none]x[none], YUV color, decoders should clamp
Hash 102d6fb38beee8f73948738a01922391
f232122a666e6a361bc72f52a3a2bf703ac85c9c
3aa9f8dc29e10d6f093b7bef98543f4bf13cd898f127c6cd0b1ba1cba1d1d2c7
GET /wp-content/uploads/2024/07/favicon-16x1664-1.png.webp HTTP/1.1
Host: nablahd46.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 20 Jun 2025 22:56:04 GMT
content-type: image/webp
content-length: 180
server: cloudflare
x-accel-version: 0.01
last-modified: Sun, 21 Jul 2024 15:33:23 GMT
etag: "b4-61dc3a61cd6c0"
accept-ranges: bytes
x-powered-by: PleskLin
cache-control: max-age=14400
cf-cache-status: REVALIDATED
priority: u=6,i=?0
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=ZyGqqj2l8gCY9o8lM6qiAdeQQO05049iNQ%2BCLAX0DwaRASGpTDngWDLAga28Zo1H0iiRBTp1XanjtgWbooS6POsVSTjCyoisRjOfGQ%3D%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cf-ray: 952edb7e6dd456ba-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
OPTIONS eppdldrgqrljlr.com/
200 OK 0 B IP
Requested by https://26efp.com/bkg/1keekufcyel6?ref=nablahd46.shop
Certificate IssuerLet's Encrypt
Subjecteppdldrgqrljlr.com
Fingerprint2B:AC:34:F8:81:15:3E:3C:D1:F7:8F:83:C3:C6:39:24:77:3C:83:A7
ValidityThu, 19 Jun 2025 10:53:53 GMT - Wed, 17 Sep 2025 10:53:52 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
OPTIONS / HTTP/1.1
Host: eppdldrgqrljlr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: HEAD
Access-Control-Request-Headers: content-type
Referer: https://26efp.com/
Origin: https://26efp.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 20 Jun 2025 22:56:07 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://26efp.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token,X-Oaid
access-control-max-age: 86400
X-Firefox-Spdy: h2
GET nablahd46.shop/wp-includes/js/comment-reply.min.js?ver=6.8.1
200 OK 3.0 kB URL GET nablahd46.shop/wp-includes/js/comment-reply.min.js?ver=6.8.1
IP
Requested by https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
Certificate IssuerGoogle Trust Services
Subjectnablahd46.shop
Fingerprint69:80:7F:8F:5F:2C:A1:F3:63:92:3A:B9:79:64:8A:B8:A7:05:36:FE
ValidityWed, 04 Jun 2025 03:44:27 GMT - Tue, 02 Sep 2025 04:41:53 GMT
File type ASCII text, with very long lines (2991)
Hash e4a49df71f8b98c1d9f9d8fce74d89e8
b95fcda0c8c26305ad94e80343d0cfca8a048a10
9d4687a19cab8f7442a3bda40c45be4d10e42488e091ddd706c3caed83c3ee1f
GET /wp-includes/js/comment-reply.min.js?ver=6.8.1 HTTP/1.1
Host: nablahd46.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 20 Jun 2025 22:56:02 GMT
content-type: application/javascript
server: cloudflare
last-modified: Wed, 13 Nov 2024 10:18:09 GMT
etag: "67347ce1-bd2"
x-powered-by: PleskLin
content-encoding: br
cache-control: max-age=14400
cf-cache-status: REVALIDATED
priority: u=3,i=?0
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=1WAzBhv%2BGcY6VRWZfHM5%2BIMIB0xnraHW1ZZ4C094htjoSCjitq7dBT0wJPpCrVwtRsez7vonOpK1SlRKapoTHzVYEPnYlGjcUAa24w%3D%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cf-ray: 952edb712c5d56ba-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET nablahd46.shop/wp-content/plugins/wp-rocket/assets/js/wpr-beacon.min.js
200 OK 11 kB URL GET nablahd46.shop/wp-content/plugins/wp-rocket/assets/js/wpr-beacon.min.js
IP
Requested by https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
Certificate IssuerGoogle Trust Services
Subjectnablahd46.shop
Fingerprint69:80:7F:8F:5F:2C:A1:F3:63:92:3A:B9:79:64:8A:B8:A7:05:36:FE
ValidityWed, 04 Jun 2025 03:44:27 GMT - Tue, 02 Sep 2025 04:41:53 GMT
File type ASCII text, with very long lines (10878)
Hash 3ffef9d75612e6d5b383c393b3fb7d87
7cfdaa40c3440efd2751d9833a768ea6953f6351
87219a2f9be014310d195b371277e88a30d17ed287e81025bbeff604e8930bca
GET /wp-content/plugins/wp-rocket/assets/js/wpr-beacon.min.js HTTP/1.1
Host: nablahd46.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 20 Jun 2025 22:56:02 GMT
content-type: application/javascript
server: cloudflare
last-modified: Sun, 30 Mar 2025 14:24:06 GMT
etag: W/"67e95406-2aaa"
x-powered-by: PleskLin
content-encoding: br
cache-control: max-age=14400
cf-cache-status: MISS
priority: u=3,i=?0
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=VKUzIE%2F0tmC%2FBDFCE%2BDf8T6sVLMukRzc%2BW72dq8qyDdZLmCwbmZe%2Fbgy4F%2B6SI8ulZvfTFAPXb%2BItZxKO5dRxoSQTE4RWRXBsqUNPw%3D%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cf-ray: 952edb712c6056ba-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET 26efp.com/js/bafsd.js
200 OK 14 kB IP
Requested by https://26efp.com/bkg/1keekufcyel6?ref=nablahd46.shop
Certificate IssuerGoogle Trust Services
Subject26efp.com
Fingerprint22:8D:C1:CD:59:4D:CD:8C:E3:D9:2B:78:D2:A8:5E:73:CB:BA:61:42
ValiditySat, 14 Jun 2025 11:27:58 GMT - Fri, 12 Sep 2025 12:26:36 GMT
File type JavaScript source, ASCII text, with CRLF line terminators
Hash c2432aca90e92e0370d2ded2545eb1fa
8f1ae40f7dc9c4ccfcb91d04530a1f072e9d06eb
89c40275bddb7257d519bda010de1c4df70a30b5f84be325f2ae53168f276cb5
GET /js/bafsd.js HTTP/1.1
Host: 26efp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://26efp.com/bkg/1keekufcyel6?ref=nablahd46.shop
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 20 Jun 2025 22:56:05 GMT
content-type: application/javascript; charset=utf-8
server: cloudflare
last-modified: Fri, 04 Oct 2024 05:52:43 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
expires: Thu, 26 Jun 2025 09:41:03 GMT
cache-control: max-age=604800
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
age: 134102
cf-cache-status: HIT
priority: u=3,i=?0
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=UfZIDO1vFJH07xOOVVUHNz%2F65JTEmFpuvsvA%2Bpf%2BHWFkc9XZpOC0kyhvnvrlyUif9OcU%2BNDVKN9GuzMcl7udN4N0rYvszx8%3D"}]}
etag: W/"66ff82ab-358a"
content-encoding: br
cf-ray: 952edb8528da56c3-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
POST fp.metricswpsh.com/fp?tag_id=340961
200 OK 60 B URL POST fp.metricswpsh.com/fp?tag_id=340961
IP
ASN #24940 Hetzner Online GmbH
Requested by https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
Certificate IssuerLet's Encrypt
Subjectnotification.tubecup.net
Fingerprint7E:67:6E:60:DA:54:65:A6:A2:F7:52:44:8A:5F:F2:EF:60:96:4D:A7
ValidityMon, 16 Jun 2025 02:50:45 GMT - Sun, 14 Sep 2025 02:50:44 GMT
Hash c299c16d2a75cca379ee02b91ce3946e
e58df1b020a6bf0ac909bb601940a3f923411092
8bf0b1b1c9dafd5f12dc26bba4b403182bd063cf26ac422af22352a06e83819e
POST /fp?tag_id=340961 HTTP/1.1
Host: fp.metricswpsh.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 1978
Origin: https://nablahd46.shop
DNT: 1
Connection: keep-alive
Referer: https://nablahd46.shop/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Fri, 20 Jun 2025 22:56:07 GMT
Content-Type: application/json; charset=UTF-8
Content-Length: 60
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://nablahd46.shop
Set-Cookie: id=10507735512250802130; Expires=Sat, 20 Jun 2026 22:56:07 GMT; Secure; SameSite=None
Vary: Origin
GET nablahd46.shop/wp-content/plugins/wp-rocket/assets/js/lazyload/17.8.3/lazyload.min.js
200 OK 8.9 kB URL GET nablahd46.shop/wp-content/plugins/wp-rocket/assets/js/lazyload/17.8.3/lazyload.min.js
IP
Requested by https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
Certificate IssuerGoogle Trust Services
Subjectnablahd46.shop
Fingerprint69:80:7F:8F:5F:2C:A1:F3:63:92:3A:B9:79:64:8A:B8:A7:05:36:FE
ValidityWed, 04 Jun 2025 03:44:27 GMT - Tue, 02 Sep 2025 04:41:53 GMT
File type JavaScript source, ASCII text, with very long lines (8892), with no line terminators
Hash fb15a10a641a318f91e7e912e4f9c184
bd41f67233facb96976ed7b8e7207d52c03d340e
f40767552e5e94b2d5f9a65d7f640cfa7d225298023dbd682095e040809a3d1a
GET /wp-content/plugins/wp-rocket/assets/js/lazyload/17.8.3/lazyload.min.js HTTP/1.1
Host: nablahd46.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 20 Jun 2025 22:56:02 GMT
content-type: application/javascript
server: cloudflare
last-modified: Sun, 30 Mar 2025 14:24:06 GMT
etag: "67e95406-22bc"
x-powered-by: PleskLin
content-encoding: br
cache-control: max-age=14400
cf-cache-status: REVALIDATED
priority: u=3,i=?0
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=kR3yo6sws%2FWq2rb2Ef8nhlrThoml5OETuMeVhYH0XYkFBbXd9cKo0GG%2BlmyjekOHWcES7Q9hrllNf2Xj8xR2u1pw0VoTjrWryvy64w%3D%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cf-ray: 952edb712c5f56ba-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET t.dtscout.com/pv/?_a=v&_h=nablahd46.shop&_ss=2dlkirss44&_pv=1&_ls=0&_u1=1&_u3=1&_cc=no&_pl=d&_cbid=710x&_cb=_dtspv.c
200 OK 52 B URL GET t.dtscout.com/pv/?_a=v&_h=nablahd46.shop&_ss=2dlkirss44&_pv=1&_ls=0&_u1=1&_u3=1&_cc=no&_pl=d&_cbid=710x&_cb=_dtspv.c
IP
Requested by https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
Certificate IssuerGoogle Trust Services
Subjectdtscout.com
Fingerprint11:3C:3D:5C:B0:6F:26:8A:49:75:78:AB:D4:5F:97:20:13:A2:96:DC
ValidityMon, 05 May 2025 03:38:34 GMT - Sun, 03 Aug 2025 04:38:30 GMT
File type ASCII text, with no line terminators
Hash 3c53d2d7668370c1fa93022d13978ac7
279842eaac9bd318fff5d0ea27de218c9e438a1e
0bb609b60942be8e3e5e5f3768dbbdea7eeedaa6b716fbb0d6e319f8717fde23
GET /pv/?_a=v&_h=nablahd46.shop&_ss=2dlkirss44&_pv=1&_ls=0&_u1=1&_u3=1&_cc=no&_pl=d&_cbid=710x&_cb=_dtspv.c HTTP/1.1
Host: t.dtscout.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nablahd46.shop/
Cookie: m=1; df=1750460163
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 20 Jun 2025 22:56:04 GMT
content-type: application/javascript
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
x-t: 0.181
x-c: 0
expires: Fri, 20 Jun 2025 22:56:03 GMT
cache-control: no-cache
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=TYIakJjX02zFue9teMzDRkONjDQCgchRktnb4Jhx2E%2FxXCu6HzQyoY5HRFb2TLVh11820xdt22toqZxqaub85lrD1Pv48d6cqQ4%3D"}]}
content-encoding: br
cf-ray: 952edb7b08935691-OSL
X-Firefox-Spdy: h2
GET 26efp.com/bkg/1keekufcyel6?ref=nablahd46.shop
200 OK 39 kB URL GET 26efp.com/bkg/1keekufcyel6?ref=nablahd46.shop
IP
Requested by https://bobstrmxiz.shop/e/1keekufcyel6/
Certificate IssuerGoogle Trust Services
Subject26efp.com
Fingerprint22:8D:C1:CD:59:4D:CD:8C:E3:D9:2B:78:D2:A8:5E:73:CB:BA:61:42
ValiditySat, 14 Jun 2025 11:27:58 GMT - Fri, 12 Sep 2025 12:26:36 GMT
File type JavaScript source, ASCII text, with very long lines (28019)
Hash c2dea7fa1e9b53514cc483511ebbd411
f5f767741d24bc6e5fd90639ecc4ec38a57c9565
c57b9b129b15a96fee6ffe01457041bc0ce2a24c69265afaac3bc6e7aac452da
GET /bkg/1keekufcyel6?ref=nablahd46.shop HTTP/1.1
Host: 26efp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bobstrmxiz.shop/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 20 Jun 2025 22:56:05 GMT
content-type: text/html; charset=UTF-8
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
expires: Thu, 19 Jun 2025 22:56:05 GMT
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=3Kb%2B6EV903mgHTFTByyKLO%2FL%2BFdvHTTF6uErVoEAs%2BgM2CA6yacsRyl64Yvhlmr%2Fh0Z%2BHMsjBKlV2sULe2EWRDpF3waaPG8%3D"}]}
content-encoding: br
set-cookie: lang=1; HttpOnly; Path=/; Domain=26efp.com
cf-ray: 952edb80895a5697-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
OPTIONS awpya.com/in/multy
204 No Content 0 B IP
ASN #24940 Hetzner Online GmbH
Requested by https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
Certificate IssuerLet's Encrypt
Subjectinpage.infrapu.sh
Fingerprint53:32:5A:78:97:D4:AD:CF:41:C6:08:3E:D5:02:8C:C6:22:50:E8:35
ValidityTue, 01 Apr 2025 08:22:50 GMT - Mon, 30 Jun 2025 08:22:49 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /in/multy HTTP/1.1
Host: awpya.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://nablahd46.shop/
Origin: https://nablahd46.shop
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
server: nginx/1.20.1
date: Fri, 20 Jun 2025 22:56:08 GMT
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
GET assets.ahmybid.net/c9f40bb6-ec5d-4e19-bf22-3a94c137c3da.jpg
200 OK 5.8 kB URL GET assets.ahmybid.net/c9f40bb6-ec5d-4e19-bf22-3a94c137c3da.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
Certificate IssuerLet's Encrypt
Subjectassets.ahmybid.net
Fingerprint58:E1:4C:61:B6:83:02:D7:AE:AA:3B:21:FF:50:D3:38:B5:A7:49:EC
ValidityFri, 25 Apr 2025 02:33:56 GMT - Thu, 24 Jul 2025 02:33:55 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 240x240, components 3
Hash 267b477e621ca0a108afd277ab4c1f38
7782b5efd59e29f007c3098861fd5b0eda0aab7c
ecf63f2aeb6019020481114308c9470885de650abcba55a752541e9c82fef27d
GET /c9f40bb6-ec5d-4e19-bf22-3a94c137c3da.jpg HTTP/1.1
Host: assets.ahmybid.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 20 Jun 2025 22:56:10 GMT
content-type: image/jpeg
content-length: 5825
server: nginx/1.24.0
last-modified: Fri, 30 May 2025 08:41:49 GMT
etag: "68396f4d-16c1"
cache-control: public, max-age=315360000
x-cdn-host-id: ah1742,ds5058
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
GET nablahd46.shop/wp-content/cache/min/1/wp-content/themes/retrotube/style.css?ver=1750152151
200 OK 52 kB URL GET nablahd46.shop/wp-content/cache/min/1/wp-content/themes/retrotube/style.css?ver=1750152151
IP
Requested by https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
Certificate IssuerGoogle Trust Services
Subjectnablahd46.shop
Fingerprint69:80:7F:8F:5F:2C:A1:F3:63:92:3A:B9:79:64:8A:B8:A7:05:36:FE
ValidityWed, 04 Jun 2025 03:44:27 GMT - Tue, 02 Sep 2025 04:41:53 GMT
File type ASCII text, with very long lines (52474), with no line terminators
Hash 6471c5fecebca5c582606760086fd7f8
66b0c6e51877514c770032f4b61d96e652bbc6a5
1034412408a411a4a6d354ab0c61ee106fada11e77949880097e6c2eecdb9e7a
GET /wp-content/cache/min/1/wp-content/themes/retrotube/style.css?ver=1750152151 HTTP/1.1
Host: nablahd46.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 20 Jun 2025 22:56:02 GMT
content-type: text/css
server: cloudflare
last-modified: Tue, 17 Jun 2025 09:22:31 GMT
etag: "685133d7-ccfa"
x-powered-by: PleskLin
content-encoding: br
cache-control: max-age=14400
cf-cache-status: REVALIDATED
priority: u=2,i=?0
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=0Si8YYwV4vc3JYMoUoL5uyYnAjsc%2FBHiJNWnrgs6DpBlpe8xmJIED5mw2rdM3XSpLnmg6%2BXsY41qNRz2ZkfJA0cVV6ejFCDp2phHQg%3D%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cf-ray: 952edb710c3156ba-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
POST tqkk20celgjx.l4.adsco.re/
200 OK 0 B URL POST tqkk20celgjx.l4.adsco.re/
IP
Requested by https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
Certificate IssuerLet's Encrypt
Subject*.l4.adsco.re
Fingerprint76:AD:98:EA:A8:8F:6F:6D:58:92:36:07:6D:91:B6:67:41:97:C1:4E
ValiditySat, 19 Apr 2025 09:14:33 GMT - Fri, 18 Jul 2025 09:14:32 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: tqkk20celgjx.l4.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://nablahd46.shop
DNT: 1
Connection: keep-alive
Referer: https://nablahd46.shop/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 20 Jun 2025 22:56:07 GMT
content-type: text/html
content-length: 0
last-modified: Fri, 02 Jun 2023 14:03:32 GMT
etag: "6479f6b4-0"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
accept-ranges: bytes
X-Firefox-Spdy: h2
POST tqkk20celgjx.n4.adsco.re/
200 OK 0 B URL POST tqkk20celgjx.n4.adsco.re/
IP
Requested by https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
Certificate IssuerLet's Encrypt
Subject*.n4.adsco.re
Fingerprint4D:DD:91:35:47:42:EC:48:83:34:7C:65:94:27:32:74:C7:40:5B:5E
ValidityThu, 19 Jun 2025 09:14:20 GMT - Wed, 17 Sep 2025 09:14:19 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: tqkk20celgjx.n4.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://nablahd46.shop
DNT: 1
Connection: keep-alive
Referer: https://nablahd46.shop/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 20 Jun 2025 22:56:07 GMT
content-type: text/html
content-length: 0
last-modified: Fri, 16 Jun 2023 08:37:42 GMT
etag: "648c1f56-0"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
accept-ranges: bytes
X-Firefox-Spdy: h2
GET ccg90.com/5/9254409
200 OK 113 kB IP
Requested by https://26efp.com/bkg/1keekufcyel6?ref=nablahd46.shop
Certificate IssuerLet's Encrypt
Subjectccg90.com
Fingerprint56:09:8B:A2:B0:CC:2D:94:BB:34:A2:E9:A2:FD:C7:53:D9:F4:20:83
ValidityWed, 23 Apr 2025 09:55:55 GMT - Tue, 22 Jul 2025 09:55:54 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size 113 kB (113189 bytes)
Hash 252ba673cbcb1cde166b8fcb6130cc18
baf74feafdcc9372418fba205644f4c1b8ad23f3
793bbd65129de791c454963f16a9e1161f65e882986a2e94c5a3319ca94bfd32
GET /5/9254409 HTTP/1.1
Host: ccg90.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://26efp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 20 Jun 2025 22:56:07 GMT
content-type: application/javascript
x-trace-id: feebddc6ae036d92fa0b0ad5b8fe047b
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch"
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
timing-allow-origin: *
set-cookie: OAID=0081ee18367243f8f7f11fa44c107bcc; expires=Sat, 20 Jun 2026 22:56:07 GMT; path=/; secure; SameSite=None
oaidts=1750460167; expires=Sat, 20 Jun 2026 22:56:07 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
pragma: no-cache, no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
GET awpya.com/in/show/?tag_ab=b&site_id=311453825&adblock=0&testab=0&auction_host=apply&mm=0&yc=0&render_type=hq&pr=&user_keywords=&device_theme=light&v2_track=0&v2=0&conditions=all,dch_ip,tz_offset&ssp=3964&page=https%3A%2F%2Fnablahd46.shop%2Fazgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili%2F&refdom=nablahd46.shop&auction_time=1750460168&subid=500738273&sid=3223123389&tcid=0&ver=8.234.1&ver_c=&spot_id=1453825&utm_source=&utm_medium=&utm_campaign=&utm_content=&created_at=2025-06-20&iabcat=IAB25-3&user_fp=14690273608157834798&score=59.161496676945625&kubik_score=86.2758920014324&kaminari_bot_ip=1&durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D500738273%26spot_id%3D1453825%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fnablahd46.shop%252Fazgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili%252F%26idzone%3D0%26sid%3D1886&is_cpm=0&resp_type=&crid=188434&crtid=4834b9df280dc1c6ae042b0544d92246&url=https%3A%2F%2Fpointcontinentrtb.com%2Fv1%2Ftrack%2Fclick%3Fdata%3DeyJhbGciOiJIUzI1NiJ9.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.FNaNtO5JG995UKOzojFvEFHikKnANtCLJ4ZAQGQW3CY%26sp%3D0.0001%26skin_id%3D2&icons=xtQysLOCEt2iFxAzGYjv4lBoIldKdxen3wJmQ-d5zG3DSyeChiQrbwpmDTIz6c7vN_9Wh50nw6sKEV5LKeQaHbSfbvGzG-40Z-a80mKWaH2TL5AjaOQvS6EeuAJ2VhZ7FaNVAEzLsp2tMIozqxeGH55kbtjV_GhMi5_g6R5t67CwvMNCThZTS6DesbTGcl6tEOF63P718HVWhTgUCTDXJQoMdVNxvPITzyqgPC1HAkD9CnyUTMcoLusumsJ2VgXBK6Y0OzlOcRisEBAGJb3M8AIo653r6HQJFH06R0VEx6oyr2mBBMWx--ExgeVBWtVOBbulWh6H8yg-vOK5N8QyT1zkh31NovVvsn3ak1fHJA5TMb4Q7a7_0frBn5NGm0KZ8VQSwDd9xhzaJRURtKak6hqn8Dg46B1Q6S-F5QBb5VZ6G67Ys02WCGz81LT1frPLsYF9xPGrxAi-O26aZILRNsciNbxULvjpxYClort6MrcM_nhfDMxfzSMKTOhq29BUx5X28U_zjLVjQ-TPMu3zuBNaiS2AwTVu_cZXjmJHT2poH_D_JjZcTr3bxM8NcfP9VjX0nwENU8s36LrRHbyR_PmBwk4d-kw0aO706brIUD0wJP0ph-c7CRYG1UTNYr4fPUwZFgz-yUI6nU3u06QoU4n8QE-8CfrjvO6cpgxsOA21hTRJog_wKn1dDKYvvHOw1akcc1F1HGaRQY7CeeGXfhX9k6twlWO9xXE20kkTBwO3yA4icIuaU8xMUE0PuOOzC22AYMq9fu0eMME5u2IoCCz-WYZp5Y1NO9zLVHI4PJwZegn_mGu80xBL7s6mozD4sazEuhDE9PxyYdLxa-xurfekCEIjW6bycJ9Bmnt-fqPL3H4naztsTfroxpvUb-yScvSoZYrXpv2vo3jU46d5L1Oy1u50yzdyEmM-6zpQ038i_WT_YGU-35aoDCGPNtGQCkWcdYuSrlxU_wajdxnZcsKIsf3qgyLFuYmr21ahIjzAfiG4APP5i6qbUT-578-hhKNQTVs87HFBTvwXIleK3amfmN0Hgi5BJWUjxig18Hfkp6ui1b66SqUXNByBsLxDXqgEU0nYcD_EP6WPP4FR1enNU1byeA7jD6GN30oR-RMTL7RdTFJwnXsy7IYX_7G1Ddn39skRcHUZmMhUTi24K-SAO8oBxUA4bnSAB0ZWgSYT5FsTdUmmU4McgNfEtuODPedw1WZmxn9XQexfLJ0x4mluOLNDMELL9OKjLha6cp8TLgoIXUcfc0l1SsoYY_K4_YgcGv7ufKLAA3WJmje87_2H_ignBYyPVMGcwTBnzFOD2hic9SMjP4SrRskwtBn1fTUx042TSAV4QEplHYDTY_2b5-0j2JtBWmW4TpzphC0uXeeAyg6Mh4nITGDnvT9kpmsiTxPC_svGuyZODvjjZJJDCeUvBeCo4bKI5bSwUWfDXufc33jaOtybpk0y7-Id79mr0Y0I_MZpxOWvdPpcnS5gqWv3G_vHO5cN_shCazg3wSsu1C42ArUsQqdDNiLl2g&ext_cid=66327&px_id=731453825&min_cpm=0.0011351810145232583&out_id=0&campaign_type=hq&aid=3296&cid=17910&uniq=&mid=497652341954691779&skin_id=2&vertical_id=6&skin_test=0&from_cache=0&ecpm=0.00010513786867126049&cpm=0.00011576510208377186&verify_hash=f12ee8610e7cdae0d667f564dcb0208b&verify_hash_v2=1653e545142592100d681cfa64eec3827b38be364595b971573584098acc2c3e&is_native=1&real_bid=9.0820002555847e-05&original_bid_usd=0.0001&original_bid=0.0001&show_type=0&exp=0&placement_type_id=0&ua_mismatch=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0&ip_mismatch=91.90.42.154&geo=NO&carrier=-&label_ids=90,70,98,6,4&need_redirect_show=0&applied_features=stage-skins-settings,yf,test_skins&show_count=1&expiration_timestamp=1750546568&image_url=https%3A%2F%2Fassets.ahmybid.net%2Fc9f40bb6-ec5d-4e19-bf22-3a94c137c3da.jpg&site=native-push-adult&price=0.0001&hostname=auc-inpage-hz-13-b&auc_type=1&pop_type=1&site_id64=&interest_vertical_ids=&mo=&ve=&timezone_olson=UTC&topics=&historical_keywords=&pop_cpc=0.0000001&ext_campaign_id_str=66327&is_webview=0&client_price=0.000090820002555847&direct_client_price=0&priority=0&client_payment_model=cpc&is_in_app=0&auc_domain_type=basic&script_type=antiadblock&tma_wallet_balance=0&processed_keywords=adult&is_iframe=0&traffic_category=adult&iframe_click=0&social_network=&tmp_fix=tmp_fix&pattern1=0&pattern2=0&pattern3=0&pattern4=0&pattern5=0&format=default-view-b_r-body&cpa=569b52b2-52a8-46ab-83d7-3e83716705f2&prev_step_diff=1313&st=0.09
200 OK 0 B URL GET awpya.com/in/show/?tag_ab=b&site_id=311453825&adblock=0&testab=0&auction_host=apply&mm=0&yc=0&render_type=hq&pr=&user_keywords=&device_theme=light&v2_track=0&v2=0&conditions=all,dch_ip,tz_offset&ssp=3964&page=https%3A%2F%2Fnablahd46.shop%2Fazgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili%2F&refdom=nablahd46.shop&auction_time=1750460168&subid=500738273&sid=3223123389&tcid=0&ver=8.234.1&ver_c=&spot_id=1453825&utm_source=&utm_medium=&utm_campaign=&utm_content=&created_at=2025-06-20&iabcat=IAB25-3&user_fp=14690273608157834798&score=59.161496676945625&kubik_score=86.2758920014324&kaminari_bot_ip=1&durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D500738273%26spot_id%3D1453825%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fnablahd46.shop%252Fazgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili%252F%26idzone%3D0%26sid%3D1886&is_cpm=0&resp_type=&crid=188434&crtid=4834b9df280dc1c6ae042b0544d92246&url=https%3A%2F%2Fpointcontinentrtb.com%2Fv1%2Ftrack%2Fclick%3Fdata%3DeyJhbGciOiJIUzI1NiJ9.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.FNaNtO5JG995UKOzojFvEFHikKnANtCLJ4ZAQGQW3CY%26sp%3D0.0001%26skin_id%3D2&icons=xtQysLOCEt2iFxAzGYjv4lBoIldKdxen3wJmQ-d5zG3DSyeChiQrbwpmDTIz6c7vN_9Wh50nw6sKEV5LKeQaHbSfbvGzG-40Z-a80mKWaH2TL5AjaOQvS6EeuAJ2VhZ7FaNVAEzLsp2tMIozqxeGH55kbtjV_GhMi5_g6R5t67CwvMNCThZTS6DesbTGcl6tEOF63P718HVWhTgUCTDXJQoMdVNxvPITzyqgPC1HAkD9CnyUTMcoLusumsJ2VgXBK6Y0OzlOcRisEBAGJb3M8AIo653r6HQJFH06R0VEx6oyr2mBBMWx--ExgeVBWtVOBbulWh6H8yg-vOK5N8QyT1zkh31NovVvsn3ak1fHJA5TMb4Q7a7_0frBn5NGm0KZ8VQSwDd9xhzaJRURtKak6hqn8Dg46B1Q6S-F5QBb5VZ6G67Ys02WCGz81LT1frPLsYF9xPGrxAi-O26aZILRNsciNbxULvjpxYClort6MrcM_nhfDMxfzSMKTOhq29BUx5X28U_zjLVjQ-TPMu3zuBNaiS2AwTVu_cZXjmJHT2poH_D_JjZcTr3bxM8NcfP9VjX0nwENU8s36LrRHbyR_PmBwk4d-kw0aO706brIUD0wJP0ph-c7CRYG1UTNYr4fPUwZFgz-yUI6nU3u06QoU4n8QE-8CfrjvO6cpgxsOA21hTRJog_wKn1dDKYvvHOw1akcc1F1HGaRQY7CeeGXfhX9k6twlWO9xXE20kkTBwO3yA4icIuaU8xMUE0PuOOzC22AYMq9fu0eMME5u2IoCCz-WYZp5Y1NO9zLVHI4PJwZegn_mGu80xBL7s6mozD4sazEuhDE9PxyYdLxa-xurfekCEIjW6bycJ9Bmnt-fqPL3H4naztsTfroxpvUb-yScvSoZYrXpv2vo3jU46d5L1Oy1u50yzdyEmM-6zpQ038i_WT_YGU-35aoDCGPNtGQCkWcdYuSrlxU_wajdxnZcsKIsf3qgyLFuYmr21ahIjzAfiG4APP5i6qbUT-578-hhKNQTVs87HFBTvwXIleK3amfmN0Hgi5BJWUjxig18Hfkp6ui1b66SqUXNByBsLxDXqgEU0nYcD_EP6WPP4FR1enNU1byeA7jD6GN30oR-RMTL7RdTFJwnXsy7IYX_7G1Ddn39skRcHUZmMhUTi24K-SAO8oBxUA4bnSAB0ZWgSYT5FsTdUmmU4McgNfEtuODPedw1WZmxn9XQexfLJ0x4mluOLNDMELL9OKjLha6cp8TLgoIXUcfc0l1SsoYY_K4_YgcGv7ufKLAA3WJmje87_2H_ignBYyPVMGcwTBnzFOD2hic9SMjP4SrRskwtBn1fTUx042TSAV4QEplHYDTY_2b5-0j2JtBWmW4TpzphC0uXeeAyg6Mh4nITGDnvT9kpmsiTxPC_svGuyZODvjjZJJDCeUvBeCo4bKI5bSwUWfDXufc33jaOtybpk0y7-Id79mr0Y0I_MZpxOWvdPpcnS5gqWv3G_vHO5cN_shCazg3wSsu1C42ArUsQqdDNiLl2g&ext_cid=66327&px_id=731453825&min_cpm=0.0011351810145232583&out_id=0&campaign_type=hq&aid=3296&cid=17910&uniq=&mid=497652341954691779&skin_id=2&vertical_id=6&skin_test=0&from_cache=0&ecpm=0.00010513786867126049&cpm=0.00011576510208377186&verify_hash=f12ee8610e7cdae0d667f564dcb0208b&verify_hash_v2=1653e545142592100d681cfa64eec3827b38be364595b971573584098acc2c3e&is_native=1&real_bid=9.0820002555847e-05&original_bid_usd=0.0001&original_bid=0.0001&show_type=0&exp=0&placement_type_id=0&ua_mismatch=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0&ip_mismatch=91.90.42.154&geo=NO&carrier=-&label_ids=90,70,98,6,4&need_redirect_show=0&applied_features=stage-skins-settings,yf,test_skins&show_count=1&expiration_timestamp=1750546568&image_url=https%3A%2F%2Fassets.ahmybid.net%2Fc9f40bb6-ec5d-4e19-bf22-3a94c137c3da.jpg&site=native-push-adult&price=0.0001&hostname=auc-inpage-hz-13-b&auc_type=1&pop_type=1&site_id64=&interest_vertical_ids=&mo=&ve=&timezone_olson=UTC&topics=&historical_keywords=&pop_cpc=0.0000001&ext_campaign_id_str=66327&is_webview=0&client_price=0.000090820002555847&direct_client_price=0&priority=0&client_payment_model=cpc&is_in_app=0&auc_domain_type=basic&script_type=antiadblock&tma_wallet_balance=0&processed_keywords=adult&is_iframe=0&traffic_category=adult&iframe_click=0&social_network=&tmp_fix=tmp_fix&pattern1=0&pattern2=0&pattern3=0&pattern4=0&pattern5=0&format=default-view-b_r-body&cpa=569b52b2-52a8-46ab-83d7-3e83716705f2&prev_step_diff=1313&st=0.09
IP
ASN #24940 Hetzner Online GmbH
Requested by https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
Certificate IssuerLet's Encrypt
Subjectinpage.infrapu.sh
Fingerprint53:32:5A:78:97:D4:AD:CF:41:C6:08:3E:D5:02:8C:C6:22:50:E8:35
ValidityTue, 01 Apr 2025 08:22:50 GMT - Mon, 30 Jun 2025 08:22:49 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/show/?tag_ab=b&site_id=311453825&adblock=0&testab=0&auction_host=apply&mm=0&yc=0&render_type=hq&pr=&user_keywords=&device_theme=light&v2_track=0&v2=0&conditions=all,dch_ip,tz_offset&ssp=3964&page=https%3A%2F%2Fnablahd46.shop%2Fazgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili%2F&refdom=nablahd46.shop&auction_time=1750460168&subid=500738273&sid=3223123389&tcid=0&ver=8.234.1&ver_c=&spot_id=1453825&utm_source=&utm_medium=&utm_campaign=&utm_content=&created_at=2025-06-20&iabcat=IAB25-3&user_fp=14690273608157834798&score=59.161496676945625&kubik_score=86.2758920014324&kaminari_bot_ip=1&durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D500738273%26spot_id%3D1453825%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fnablahd46.shop%252Fazgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili%252F%26idzone%3D0%26sid%3D1886&is_cpm=0&resp_type=&crid=188434&crtid=4834b9df280dc1c6ae042b0544d92246&url=https%3A%2F%2Fpointcontinentrtb.com%2Fv1%2Ftrack%2Fclick%3Fdata%3DeyJhbGciOiJIUzI1NiJ9.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.FNaNtO5JG995UKOzojFvEFHikKnANtCLJ4ZAQGQW3CY%26sp%3D0.0001%26skin_id%3D2&icons=xtQysLOCEt2iFxAzGYjv4lBoIldKdxen3wJmQ-d5zG3DSyeChiQrbwpmDTIz6c7vN_9Wh50nw6sKEV5LKeQaHbSfbvGzG-40Z-a80mKWaH2TL5AjaOQvS6EeuAJ2VhZ7FaNVAEzLsp2tMIozqxeGH55kbtjV_GhMi5_g6R5t67CwvMNCThZTS6DesbTGcl6tEOF63P718HVWhTgUCTDXJQoMdVNxvPITzyqgPC1HAkD9CnyUTMcoLusumsJ2VgXBK6Y0OzlOcRisEBAGJb3M8AIo653r6HQJFH06R0VEx6oyr2mBBMWx--ExgeVBWtVOBbulWh6H8yg-vOK5N8QyT1zkh31NovVvsn3ak1fHJA5TMb4Q7a7_0frBn5NGm0KZ8VQSwDd9xhzaJRURtKak6hqn8Dg46B1Q6S-F5QBb5VZ6G67Ys02WCGz81LT1frPLsYF9xPGrxAi-O26aZILRNsciNbxULvjpxYClort6MrcM_nhfDMxfzSMKTOhq29BUx5X28U_zjLVjQ-TPMu3zuBNaiS2AwTVu_cZXjmJHT2poH_D_JjZcTr3bxM8NcfP9VjX0nwENU8s36LrRHbyR_PmBwk4d-kw0aO706brIUD0wJP0ph-c7CRYG1UTNYr4fPUwZFgz-yUI6nU3u06QoU4n8QE-8CfrjvO6cpgxsOA21hTRJog_wKn1dDKYvvHOw1akcc1F1HGaRQY7CeeGXfhX9k6twlWO9xXE20kkTBwO3yA4icIuaU8xMUE0PuOOzC22AYMq9fu0eMME5u2IoCCz-WYZp5Y1NO9zLVHI4PJwZegn_mGu80xBL7s6mozD4sazEuhDE9PxyYdLxa-xurfekCEIjW6bycJ9Bmnt-fqPL3H4naztsTfroxpvUb-yScvSoZYrXpv2vo3jU46d5L1Oy1u50yzdyEmM-6zpQ038i_WT_YGU-35aoDCGPNtGQCkWcdYuSrlxU_wajdxnZcsKIsf3qgyLFuYmr21ahIjzAfiG4APP5i6qbUT-578-hhKNQTVs87HFBTvwXIleK3amfmN0Hgi5BJWUjxig18Hfkp6ui1b66SqUXNByBsLxDXqgEU0nYcD_EP6WPP4FR1enNU1byeA7jD6GN30oR-RMTL7RdTFJwnXsy7IYX_7G1Ddn39skRcHUZmMhUTi24K-SAO8oBxUA4bnSAB0ZWgSYT5FsTdUmmU4McgNfEtuODPedw1WZmxn9XQexfLJ0x4mluOLNDMELL9OKjLha6cp8TLgoIXUcfc0l1SsoYY_K4_YgcGv7ufKLAA3WJmje87_2H_ignBYyPVMGcwTBnzFOD2hic9SMjP4SrRskwtBn1fTUx042TSAV4QEplHYDTY_2b5-0j2JtBWmW4TpzphC0uXeeAyg6Mh4nITGDnvT9kpmsiTxPC_svGuyZODvjjZJJDCeUvBeCo4bKI5bSwUWfDXufc33jaOtybpk0y7-Id79mr0Y0I_MZpxOWvdPpcnS5gqWv3G_vHO5cN_shCazg3wSsu1C42ArUsQqdDNiLl2g&ext_cid=66327&px_id=731453825&min_cpm=0.0011351810145232583&out_id=0&campaign_type=hq&aid=3296&cid=17910&uniq=&mid=497652341954691779&skin_id=2&vertical_id=6&skin_test=0&from_cache=0&ecpm=0.00010513786867126049&cpm=0.00011576510208377186&verify_hash=f12ee8610e7cdae0d667f564dcb0208b&verify_hash_v2=1653e545142592100d681cfa64eec3827b38be364595b971573584098acc2c3e&is_native=1&real_bid=9.0820002555847e-05&original_bid_usd=0.0001&original_bid=0.0001&show_type=0&exp=0&placement_type_id=0&ua_mismatch=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0&ip_mismatch=91.90.42.154&geo=NO&carrier=-&label_ids=90,70,98,6,4&need_redirect_show=0&applied_features=stage-skins-settings,yf,test_skins&show_count=1&expiration_timestamp=1750546568&image_url=https%3A%2F%2Fassets.ahmybid.net%2Fc9f40bb6-ec5d-4e19-bf22-3a94c137c3da.jpg&site=native-push-adult&price=0.0001&hostname=auc-inpage-hz-13-b&auc_type=1&pop_type=1&site_id64=&interest_vertical_ids=&mo=&ve=&timezone_olson=UTC&topics=&historical_keywords=&pop_cpc=0.0000001&ext_campaign_id_str=66327&is_webview=0&client_price=0.000090820002555847&direct_client_price=0&priority=0&client_payment_model=cpc&is_in_app=0&auc_domain_type=basic&script_type=antiadblock&tma_wallet_balance=0&processed_keywords=adult&is_iframe=0&traffic_category=adult&iframe_click=0&social_network=&tmp_fix=tmp_fix&pattern1=0&pattern2=0&pattern3=0&pattern4=0&pattern5=0&format=default-view-b_r-body&cpa=569b52b2-52a8-46ab-83d7-3e83716705f2&prev_step_diff=1313&st=0.09 HTTP/1.1
Host: awpya.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nablahd46.shop/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.20.1
date: Fri, 20 Jun 2025 22:56:09 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
GET bobstrmxiz.shop/js/xupload.js?v=3
404 Not Found 153 B URL GET bobstrmxiz.shop/js/xupload.js?v=3
IP
Requested by https://bobstrmxiz.shop/e/1keekufcyel6/
Certificate IssuerGoogle Trust Services
Subjectbobstrmxiz.shop
Fingerprint2F:3E:C2:34:E7:63:51:DA:C7:F8:40:C3:AE:DA:EE:A9:A8:F4:B9:36
ValiditySat, 31 May 2025 18:14:48 GMT - Fri, 29 Aug 2025 19:12:11 GMT
File type HTML document, ASCII text, with CRLF line terminators
Hash 932da5a430ff6db1bc48425b567d56fa
e7e88023dbbc6346d354ffe9fb7db957888c2299
10174434dbe479c08b32ce3b42b70e7c6336647d29e4393483158d590d35c325
GET /js/xupload.js?v=3 HTTP/1.1
Host: bobstrmxiz.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bobstrmxiz.shop/e/1keekufcyel6/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 20 Jun 2025 22:56:04 GMT
content-type: text/html
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Jp2CTdfDrhIgKBcDfe9MSYX%2BIdjsIuRP0ghfZI4HMTqDpjfP1F%2B13Otolo75CTRoJqMAItRftkT4uehzpfscRkz0UAfnGXgXIdUTejgSCt%2Fu6KDae8h71Snm4jLMMzcI9dY%3D"}],"group":"cf-nel","max_age":604800}
cache-control: max-age=14400
cf-cache-status: MISS
content-encoding: br
cf-ray: 952edb7c6c990b3d-OSL
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=19078&min_rtt=347&rtt_var=24956&sent=73&recv=72&lost=0&retrans=0&sent_bytes=21044&recv_bytes=5363&delivery_rate=1568418&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=24634&unsent_bytes=0&cid=7e733a744e3ce80a&ts=1065&inflight_dur=158&x=44"
GET js.wpshsdk.com/npc/sdk/push.m.js?v=1
200 OK 31 kB URL GET js.wpshsdk.com/npc/sdk/push.m.js?v=1
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
Certificate IssuerLet's Encrypt
Subjectjs.wpshsdk.com
Fingerprint7E:74:90:AF:51:70:F3:5D:66:30:9F:E1:6A:21:81:6D:4C:57:78:03
ValidityWed, 14 May 2025 08:32:27 GMT - Tue, 12 Aug 2025 08:32:26 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (30618), with no line terminators
Hash e0184cfd99198eda03b3f0ce27a9de36
94a0075c45f4af693e1e3d7d4e1999ed3836b08b
de03a21c4c09e383f7630fc2107e1671fa9ba78259b508c917946d3cf29e16de
GET /npc/sdk/push.m.js?v=1 HTTP/1.1
Host: js.wpshsdk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nablahd46.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 20 Jun 2025 22:56:07 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Thu, 22 May 2025 10:02:04 GMT
etag: W/"682ef61c-791b"
content-encoding: gzip
expires: Fri, 20 Jun 2025 23:01:07 GMT
cache-control: max-age=300
x-cdn-host-id: ah1742
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
GET nablahd46.shop/wp-includes/css/dist/block-library/style.min.css?ver=6.8.1
200 OK 116 kB URL GET nablahd46.shop/wp-includes/css/dist/block-library/style.min.css?ver=6.8.1
IP
Requested by https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
Certificate IssuerGoogle Trust Services
Subjectnablahd46.shop
Fingerprint69:80:7F:8F:5F:2C:A1:F3:63:92:3A:B9:79:64:8A:B8:A7:05:36:FE
ValidityWed, 04 Jun 2025 03:44:27 GMT - Tue, 02 Sep 2025 04:41:53 GMT
File type ASCII text, with very long lines (55654)
Size 116 kB (116363 bytes)
Hash dfe67cbbac3da53fdbbaed71c91db428
8c82643ef63a8389c1b800b7c5d0af9d684b8b24
597ddfdee7171750c16ec5aafd392cf992e9c53386d6bb6061d48e30334f09e9
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.8.1 HTTP/1.1
Host: nablahd46.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 20 Jun 2025 22:56:02 GMT
content-type: text/css
server: cloudflare
last-modified: Wed, 16 Apr 2025 04:28:00 GMT
etag: "67ff31d0-1c68b"
x-powered-by: PleskLin
content-encoding: br
cache-control: max-age=14400
cf-cache-status: REVALIDATED
priority: u=2,i=?0
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=R1kPHRscSiuazeF2gsPrhlULDCLT4ccIBgfGJsd8QOVRie0aOLe%2BO4oNdTapdsfReUornLIj4%2BzFPN8xpZmSzvbeet3WREztVQ5Meg%3D%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cf-ray: 952edb710c2d56ba-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET 26efp.com/js/ls.js
200 OK 2.1 kB IP
Requested by https://26efp.com/bkg/1keekufcyel6?ref=nablahd46.shop
Certificate IssuerGoogle Trust Services
Subject26efp.com
Fingerprint22:8D:C1:CD:59:4D:CD:8C:E3:D9:2B:78:D2:A8:5E:73:CB:BA:61:42
ValiditySat, 14 Jun 2025 11:27:58 GMT - Fri, 12 Sep 2025 12:26:36 GMT
File type JavaScript source, ASCII text, with very long lines (2063), with no line terminators
Hash f6784d7271569579cbc7e508fddb3fbb
61be0722316952e865893972791486e26961cdda
96f2f3c87be4a0582def1b5e1e9e19aa0529adb7fd9277cede56c1eefd906d01
GET /js/ls.js HTTP/1.1
Host: 26efp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://26efp.com/bkg/1keekufcyel6?ref=nablahd46.shop
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 20 Jun 2025 22:56:05 GMT
content-type: application/javascript; charset=utf-8
server: cloudflare
last-modified: Tue, 14 Feb 2023 11:28:54 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
expires: Thu, 26 Jun 2025 09:41:03 GMT
cache-control: max-age=604800
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
age: 134102
cf-cache-status: HIT
priority: u=2,i=?0
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=Wlgqm88bJYjk%2B2Pjq1OrhawMHwl8bpbfmVi1QE2Z0GkPc6MM4cmdHZ3m7maXCRM5ANNDFglneQf%2FpPZ7sWdfPS5eFrShnu8%3D"}]}
etag: W/"63eb7076-80f"
content-encoding: br
cf-ray: 952edb8528d856c3-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET 26efp.com/js/dnsads.js?dfp=1&ad_code=2&adsrc=3
200 OK 38 B URL GET 26efp.com/js/dnsads.js?dfp=1&ad_code=2&adsrc=3
IP
Requested by https://26efp.com/bkg/1keekufcyel6?ref=nablahd46.shop
Certificate IssuerGoogle Trust Services
Subject26efp.com
Fingerprint22:8D:C1:CD:59:4D:CD:8C:E3:D9:2B:78:D2:A8:5E:73:CB:BA:61:42
ValiditySat, 14 Jun 2025 11:27:58 GMT - Fri, 12 Sep 2025 12:26:36 GMT
File type ASCII text, with CRLF line terminators
Hash 99eccae6afa72c589ae54b5c3890282a
0f102f8f5b556635de65d16cf70fa8269c6761b4
b74a58316385de04b054737776e71c160cd60d2d01b5440b32c21651fb0ab8d3
GET /js/dnsads.js?dfp=1&ad_code=2&adsrc=3 HTTP/1.1
Host: 26efp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://26efp.com/bkg/1keekufcyel6?ref=nablahd46.shop
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 20 Jun 2025 22:56:05 GMT
content-type: application/javascript; charset=utf-8
server: cloudflare
last-modified: Mon, 13 Sep 2021 15:50:14 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
expires: Thu, 26 Jun 2025 09:41:04 GMT
cache-control: max-age=604800
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
age: 134101
cf-cache-status: HIT
priority: u=3,i=?0
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=N6nQybjP6R0zvYgWv6iGrX6SzG56H46jWv2v%2BbvDRW8Uaij6UgHQGbk%2BjKycc2Ut5qZi058VzeTztIqAkPTgJIZqCJAOWQg%3D"}]}
etag: W/"613f7336-26"
content-encoding: br
cf-ray: 952edb8528dd56c3-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET videothumbs.me/1keekufcyel6.jpg
200 OK 42 kB URL GET videothumbs.me/1keekufcyel6.jpg
IP
Requested by https://26efp.com/bkg/1keekufcyel6?ref=nablahd46.shop
Certificate IssuerGoogle Trust Services
Subjectvideothumbs.me
FingerprintB9:B4:8A:B0:ED:DA:7E:36:8C:CA:20:F8:25:8B:1F:49:B1:E5:91:87
ValidityMon, 12 May 2025 10:17:40 GMT - Sun, 10 Aug 2025 11:15:40 GMT
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: "Lavc59.32.100", baseline, precision 8, 720x405, components 3
Hash a300da27bfc2b4dcd35d37e117e05255
56c8a1a1fac0b82e18c2b45f4ccf8245c6433889
071fafc38bff1779e4e6f9850415023853a1bec5bd85de59ce76e25fecaa1fd2
GET /1keekufcyel6.jpg HTTP/1.1
Host: videothumbs.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://26efp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 20 Jun 2025 22:56:07 GMT
content-type: image/jpeg
content-length: 42037
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
last-modified: Fri, 22 Dec 2023 20:02:49 GMT
etag: "6585eb69-a435"
expires: Fri, 04 Jul 2025 03:18:35 GMT
cache-control: max-age=31536000
accept-ranges: bytes
cf-cache-status: MISS
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=FAMq2QXvKSe2PHB%2Be%2F7y%2F%2BcGpEV4AdghivPVtJcS7EBChfvPNwrssRL8x9PZ0OuDJWA2aHli95Qs25VW0ebbwwMvBEBI%2B3sROsuVYQ%3D%3D"}]}
cf-ray: 952edb8c3dae5693-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
POST tqkk20celgjx.s4.adsco.re/
200 OK 0 B URL POST tqkk20celgjx.s4.adsco.re/
IP
Requested by https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
Certificate IssuerLet's Encrypt
Subject*.s4.adsco.re
FingerprintCD:E3:30:8E:24:D4:56:97:9B:37:D3:2E:69:DE:B3:63:95:43:9A:83
ValidityThu, 19 Jun 2025 09:14:19 GMT - Wed, 17 Sep 2025 09:14:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: tqkk20celgjx.s4.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://nablahd46.shop
DNT: 1
Connection: keep-alive
Referer: https://nablahd46.shop/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 20 Jun 2025 22:56:08 GMT
content-type: text/html
content-length: 0
last-modified: Tue, 03 Oct 2023 13:29:59 GMT
etag: "651c1757-0"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
accept-ranges: bytes
X-Firefox-Spdy: h2
GET be4235.rcr32.ams02.i8yz83pn.com/hls2/01/05160/1keekufcyel6_h/index-v1-a1.m3u8?t=4MH12i3FuegRdBQIn0XJeOWk-mZ5wlgg_xwjVA3n_Mw&s=1750460165&e=10800&f=25802859&srv=52&asn=50304&sp=5500&p=
200 OK 35 kB URL GET be4235.rcr32.ams02.i8yz83pn.com/hls2/01/05160/1keekufcyel6_h/index-v1-a1.m3u8?t=4MH12i3FuegRdBQIn0XJeOWk-mZ5wlgg_xwjVA3n_Mw&s=1750460165&e=10800&f=25802859&srv=52&asn=50304&sp=5500&p=
IP
Requested by https://26efp.com/bkg/1keekufcyel6?ref=nablahd46.shop
Certificate IssuerLet's Encrypt
Subjectbe4235.rcr32.ams02.i8yz83pn.com
Fingerprint08:2E:6E:50:1F:6C:3C:40:46:96:50:01:A4:0B:BA:92:B6:07:E2:72
ValidityMon, 09 Jun 2025 13:59:44 GMT - Sun, 07 Sep 2025 13:59:43 GMT
Hash 27daa7bd38024b548e06d69772fd76ea
af00942a830c2fa03c5e5bd3b9a7530b29891a20
66e0d5081baa7b813e8dbff83020e0eec376fd690cb565b9c4abeef6ca90e399
GET /hls2/01/05160/1keekufcyel6_h/index-v1-a1.m3u8?t=4MH12i3FuegRdBQIn0XJeOWk-mZ5wlgg_xwjVA3n_Mw&s=1750460165&e=10800&f=25802859&srv=52&asn=50304&sp=5500&p= HTTP/1.1
Host: be4235.rcr32.ams02.i8yz83pn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://26efp.com
DNT: 1
Connection: keep-alive
Referer: https://26efp.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 20 Jun 2025 22:56:09 GMT
Content-Type: application/vnd.apple.mpegurl
Last-Modified: Fri, 20 Jun 2025 22:56:09 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 23 Jun 2025 22:56:09 GMT
Access-Control-Allow-Origin: *
Cache-Control: max-age=259200, no-store, no-cache
Sprint-Cache: BYPASS
Content-Encoding: gzip
GET static.bookmsg.com/creatives/SG/SG_50dbf0cae89fd14f34b6cb7b8301e683e25e0adf_icon.webp
200 OK 1.1 kB URL GET static.bookmsg.com/creatives/SG/SG_50dbf0cae89fd14f34b6cb7b8301e683e25e0adf_icon.webp
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
Certificate IssuerLet's Encrypt
Subjectstatic.bookmsg.com
Fingerprint81:A4:C6:88:C3:3E:D5:D5:E5:AB:E3:D3:AC:1A:1F:DE:B8:17:28:C6
ValidityFri, 30 May 2025 02:32:38 GMT - Thu, 28 Aug 2025 02:32:37 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp
Hash 0d8658fffe797e7ba8f20c52ab367a97
cb0bd2b16388846dfa0b3f6da917d95b5abd7f68
debd9647eddaaacaba09b81371fd2e331f952904d7c7f635955b6e213e6a4ee4
GET /creatives/SG/SG_50dbf0cae89fd14f34b6cb7b8301e683e25e0adf_icon.webp HTTP/1.1
Host: static.bookmsg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nablahd46.shop/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 20 Jun 2025 22:56:09 GMT
content-type: image/webp
content-length: 1052
server: nginx/1.24.0
last-modified: Fri, 31 May 2024 10:56:43 GMT
etag: "6659aceb-41c"
expires: Sat, 20 Jun 2026 22:56:09 GMT
cache-control: max-age=31536000
x-cdn-host-id: ds5058
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
GET static.bookmsg.com/creatives/SG/SG_50dbf0cae89fd14f34b6cb7b8301e683e25e0adf.webp
200 OK 4.6 kB URL GET static.bookmsg.com/creatives/SG/SG_50dbf0cae89fd14f34b6cb7b8301e683e25e0adf.webp
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
Certificate IssuerLet's Encrypt
Subjectstatic.bookmsg.com
Fingerprint81:A4:C6:88:C3:3E:D5:D5:E5:AB:E3:D3:AC:1A:1F:DE:B8:17:28:C6
ValidityFri, 30 May 2025 02:32:38 GMT - Thu, 28 Aug 2025 02:32:37 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 360x240, Scaling: [none]x[none], YUV color, decoders should clamp
Hash 5117b911fc2a299c2612d4b01e5688e6
401246f0319067904d5ed7175f619d5763e7e6bb
361540ac8047f9e65b9db4966125eb66d084de3057b5e1c48942c0e1aebe2a44
GET /creatives/SG/SG_50dbf0cae89fd14f34b6cb7b8301e683e25e0adf.webp HTTP/1.1
Host: static.bookmsg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nablahd46.shop/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 20 Jun 2025 22:56:09 GMT
content-type: image/webp
content-length: 4616
server: nginx/1.24.0
last-modified: Fri, 31 May 2024 10:56:43 GMT
etag: "6659aceb-1208"
expires: Sat, 20 Jun 2026 22:56:09 GMT
cache-control: max-age=31536000
x-cdn-host-id: ds5058
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
GET nablahd46.shop/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1
200 OK 14 kB URL GET nablahd46.shop/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1
IP
Requested by https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
Certificate IssuerGoogle Trust Services
Subjectnablahd46.shop
Fingerprint69:80:7F:8F:5F:2C:A1:F3:63:92:3A:B9:79:64:8A:B8:A7:05:36:FE
ValidityWed, 04 Jun 2025 03:44:27 GMT - Tue, 02 Sep 2025 04:41:53 GMT
File type JavaScript source, ASCII text, with very long lines (13479)
Hash 9ffeb32e2d9efbf8f70caabded242267
3ad0c10e501ac2a9bfa18f9cd7e700219b378738
5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1
Host: nablahd46.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 20 Jun 2025 22:56:02 GMT
content-type: application/javascript
server: cloudflare
last-modified: Fri, 09 Jun 2023 12:49:24 GMT
etag: "64831fd4-3509"
x-powered-by: PleskLin
content-encoding: br
cache-control: max-age=14400
cf-cache-status: REVALIDATED
priority: u=2,i=?0
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=qOLU%2BJp4j6aXC%2BtLr%2FkNG9xByas%2FN131RIMRgKwPzle%2FLkQ4DSEsQ18DPeYsYoH6mDq7brsvjwqmVqIEvOebtjgD1ujS7PzqqWljLw%3D%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cf-ray: 952edb711c3956ba-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET nablahd46.shop/wp-content/themes/retrotube/assets/stylesheets/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0
200 OK 77 kB URL GET nablahd46.shop/wp-content/themes/retrotube/assets/stylesheets/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0
IP
Requested by https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
Certificate IssuerGoogle Trust Services
Subjectnablahd46.shop
Fingerprint69:80:7F:8F:5F:2C:A1:F3:63:92:3A:B9:79:64:8A:B8:A7:05:36:FE
ValidityWed, 04 Jun 2025 03:44:27 GMT - Tue, 02 Sep 2025 04:41:53 GMT
File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459
Hash af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
GET /wp-content/themes/retrotube/assets/stylesheets/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: nablahd46.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://nablahd46.shop/wp-content/cache/min/1/wp-content/themes/retrotube/assets/stylesheets/font-awesome/css/font-awesome.min.css?ver=1750152151
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 20 Jun 2025 22:56:03 GMT
content-type: font/woff2
content-length: 77160
server: cloudflare
last-modified: Sun, 04 May 2025 10:44:02 GMT
etag: "681744f2-12d68"
x-powered-by: PleskLin
accept-ranges: bytes
cache-control: max-age=14400
cf-cache-status: REVALIDATED
priority: u=4,i=?0
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=%2F4kWmnM1dKq18RiZWJXOTj1eM%2FAM4GmsV3Xyhpj%2BBpM6jIBHeXalGd1IAl2Gm12A4W9blwOwBmYH1ks2QM83zuva7bMh43tt4S%2BMOA%3D%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cf-ray: 952edb73ce2156ba-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET 5740f14e90.af305e6c77.com/b4e9f5c8c65fec5413ec0e960a9bfc43/340961?version_name=b&domain=nablahd46.shop
200 OK 2.7 kB URL GET 5740f14e90.af305e6c77.com/b4e9f5c8c65fec5413ec0e960a9bfc43/340961?version_name=b&domain=nablahd46.shop
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
Certificate IssuerLet's Encrypt
Subject5740f14e90.af305e6c77.com
Fingerprint4E:C5:C7:6A:5E:A1:CD:7B:50:AF:E5:43:F5:06:B3:79:63:6C:DA:93
ValidityTue, 17 Jun 2025 02:15:40 GMT - Mon, 15 Sep 2025 02:15:39 GMT
Hash 57050bee386fa6651ae13329903324fc
aa41a2a40968369aaabb3b27234a9859f5765f14
6b626de8966909ce9cb012f684f1e3a00390124da404071d05d5147425bdeff6
GET /b4e9f5c8c65fec5413ec0e960a9bfc43/340961?version_name=b&domain=nablahd46.shop HTTP/1.1
Host: 5740f14e90.af305e6c77.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nablahd46.shop
DNT: 1
Connection: keep-alive
Referer: https://nablahd46.shop/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 20 Jun 2025 22:56:04 GMT
content-type: application/json
server: nginx/1.18.0
cache-control: max-age=300
expires: Fri, 20 Jun 2025 23:01:04 GMT
x-cdn-host-id: ah1747
x-proxy-cache: EXPIRED
access-control-allow-origin: *
X-Firefox-Spdy: h2
GET 5740f14e90.af305e6c77.com/9fecdf7ab6fa8bd67ae43e6f76c4f850.js
200 OK 209 kB URL GET 5740f14e90.af305e6c77.com/9fecdf7ab6fa8bd67ae43e6f76c4f850.js
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
Certificate IssuerLet's Encrypt
Subject5740f14e90.af305e6c77.com
Fingerprint4E:C5:C7:6A:5E:A1:CD:7B:50:AF:E5:43:F5:06:B3:79:63:6C:DA:93
ValidityTue, 17 Jun 2025 02:15:40 GMT - Mon, 15 Sep 2025 02:15:39 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size 209 kB (208846 bytes)
Hash 34a69d3d1f7d5bdd227a34695f5d6050
a0fca9b0c48e482221af26e54b53e19cc8e70882
153063e5afc8ebd86e7e9710caaf73dc576832efe81e2077f24d6a496face78c
GET /9fecdf7ab6fa8bd67ae43e6f76c4f850.js HTTP/1.1
Host: 5740f14e90.af305e6c77.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nablahd46.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 20 Jun 2025 22:56:07 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Fri, 20 Jun 2025 07:24:46 GMT
etag: W/"68550cbe-32fce"
content-encoding: gzip
expires: Fri, 20 Jun 2025 23:01:07 GMT
cache-control: max-age=300
x-cdn-host-id: ah1747
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
GET accounts.google.com/InteractiveLogin?continue=https://m.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AdBytiP4bVDruBHxmHTdKv2hRYBxHnKVWdlXO9NXFqWQSAkj-A0YWkBTqViNSIUQpBo_N0MhKvQD
302 Found 0 B URL GET accounts.google.com/InteractiveLogin?continue=https://m.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AdBytiP4bVDruBHxmHTdKv2hRYBxHnKVWdlXO9NXFqWQSAkj-A0YWkBTqViNSIUQpBo_N0MhKvQD
IP
Requested by https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
Certificate IssuerGoogle Trust Services
Subject*.google.com
Fingerprint50:4A:C6:AC:C5:1D:10:C3:CB:A9:22:1D:7D:A7:9C:35:49:92:AB:CE
ValidityMon, 02 Jun 2025 08:35:40 GMT - Mon, 25 Aug 2025 08:35:39 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /InteractiveLogin?continue=https://m.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AdBytiP4bVDruBHxmHTdKv2hRYBxHnKVWdlXO9NXFqWQSAkj-A0YWkBTqViNSIUQpBo_N0MhKvQD HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:4MRT_Qvh1dLpO-8gr7Qh7mjuRR1j3w:sbHSVYzTNgBjVvzs;Path=/;Expires=Sun, 20-Jun-2027 22:56:10 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 20 Jun 2025 22:56:10 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico&hl=en&ifkv=AdBytiMY8gKO4-VlioWA1oKSXEQYhDan8yy8WsfwWX2rFnW2ALDbX15MZF-mIWPQilyueOZhB4fX0g&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1949750858%3A1750460170375765
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: script-src 'nonce-HgoWn0OG2fc0m61r3Ziymw' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 413
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili
301 Moved Permanently 92 kB URL User Request GET nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili
IP
Certificate IssuerGoogle Trust Services
Subjectnablahd46.shop
Fingerprint69:80:7F:8F:5F:2C:A1:F3:63:92:3A:B9:79:64:8A:B8:A7:05:36:FE
ValidityWed, 04 Jun 2025 03:44:27 GMT - Tue, 02 Sep 2025 04:41:53 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili HTTP/1.1
Host: nablahd46.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Fri, 20 Jun 2025 22:56:02 GMT
content-type: text/html; charset=UTF-8
location: https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
server: cloudflare
x-powered-by: PHP/7.4.33, PleskLin
x-pingback: https://nablahd46.shop/xmlrpc.php
x-redirect-by: WordPress
cf-cache-status: DYNAMIC
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=61cTLzRzh561NoH%2BtWVGy6H8rAhj%2B6wymtw5sJXoe4ahcqrGzQ8uE5nSDrOzQUIpdjfWr7iyhMVPF%2FWVK%2F7djGV1TzProuUDQtSs1g%3D%3D"}]}
cf-ray: 952edb6b3c9c56ab-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET nablahd46.shop/wp-content/cache/min/1/wp-content/themes/retrotube/assets/stylesheets/font-awesome/css/font-awesome.min.css?ver=1750152151
200 OK 32 kB URL GET nablahd46.shop/wp-content/cache/min/1/wp-content/themes/retrotube/assets/stylesheets/font-awesome/css/font-awesome.min.css?ver=1750152151
IP
Requested by https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
Certificate IssuerGoogle Trust Services
Subjectnablahd46.shop
Fingerprint69:80:7F:8F:5F:2C:A1:F3:63:92:3A:B9:79:64:8A:B8:A7:05:36:FE
ValidityWed, 04 Jun 2025 03:44:27 GMT - Tue, 02 Sep 2025 04:41:53 GMT
File type ASCII text, with very long lines (31291)
Hash ac0b65598c1e7bb4886d222b9b57c04f
6b722e826f6dbaea2416b2403985c213d31574a0
a9316f2699c023393e403ca460011b88143499013c275001c751a1d4723db5da
GET /wp-content/cache/min/1/wp-content/themes/retrotube/assets/stylesheets/font-awesome/css/font-awesome.min.css?ver=1750152151 HTTP/1.1
Host: nablahd46.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 20 Jun 2025 22:56:02 GMT
content-type: text/css
server: cloudflare
last-modified: Tue, 17 Jun 2025 09:22:31 GMT
etag: "685133d7-7add"
x-powered-by: PleskLin
content-encoding: br
cache-control: max-age=14400
cf-cache-status: REVALIDATED
priority: u=2,i=?0
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=WbcJoJGeTxylFq7nPKAoTK74zDFBDYGt%2BvAWzYa0TbOCbQjgR%2Fggl8r3xOyAEuyfRx486Dj6CPrKJnpqrrH6yhmQQmqVVEyzcXMQww%3D%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cf-ray: 952edb710c2e56ba-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET bobstrmxiz.shop/js/ls.js
404 Not Found 153 B IP
Requested by https://bobstrmxiz.shop/e/1keekufcyel6/
Certificate IssuerGoogle Trust Services
Subjectbobstrmxiz.shop
Fingerprint2F:3E:C2:34:E7:63:51:DA:C7:F8:40:C3:AE:DA:EE:A9:A8:F4:B9:36
ValiditySat, 31 May 2025 18:14:48 GMT - Fri, 29 Aug 2025 19:12:11 GMT
File type HTML document, ASCII text, with CRLF line terminators
Hash 932da5a430ff6db1bc48425b567d56fa
e7e88023dbbc6346d354ffe9fb7db957888c2299
10174434dbe479c08b32ce3b42b70e7c6336647d29e4393483158d590d35c325
GET /js/ls.js HTTP/1.1
Host: bobstrmxiz.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bobstrmxiz.shop/e/1keekufcyel6/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 20 Jun 2025 22:56:05 GMT
content-type: text/html
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6GBmSASwHbxL6iChrc1lsGfVAgHy9ZHXDsUtMNxFtGvAizsq%2FVSXM%2BnI2heweATdpt9UvpCo9hgp2e0nrlnoOe3FPslvbg4kb2CbH2lObDn1hzUHdvNTNhYa9MUayUxIxR0%3D"}],"group":"cf-nel","max_age":604800}
age: 0
cache-control: max-age=14400
cf-cache-status: HIT
content-encoding: br
cf-ray: 952edb7f6cb40b3d-OSL
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=14841&min_rtt=347&rtt_var=21386&sent=78&recv=76&lost=0&retrans=0&sent_bytes=22609&recv_bytes=5976&delivery_rate=1568418&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=24634&unsent_bytes=0&cid=7e733a744e3ce80a&ts=1438&inflight_dur=163&x=44"
GET 26efp.com/js/jquery.js
200 OK 90 kB IP
Requested by https://26efp.com/bkg/1keekufcyel6?ref=nablahd46.shop
Certificate IssuerGoogle Trust Services
Subject26efp.com
Fingerprint22:8D:C1:CD:59:4D:CD:8C:E3:D9:2B:78:D2:A8:5E:73:CB:BA:61:42
ValiditySat, 14 Jun 2025 11:27:58 GMT - Fri, 12 Sep 2025 12:26:36 GMT
File type JavaScript source, ASCII text, with very long lines (65447)
Hash 8fb8fee4fcc3cc86ff6c724154c49c42
b82d238d4e31fdf618bae8ac11a6c812c03dd0d4
ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e
GET /js/jquery.js HTTP/1.1
Host: 26efp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://26efp.com/bkg/1keekufcyel6?ref=nablahd46.shop
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 20 Jun 2025 22:56:05 GMT
content-type: application/javascript; charset=utf-8
server: cloudflare
last-modified: Tue, 02 Mar 2021 18:58:36 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
expires: Thu, 26 Jun 2025 09:41:02 GMT
cache-control: max-age=604800
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
age: 134102
cf-cache-status: HIT
priority: u=2,i=?0
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=gdPdQuNxvd1aXQHO8RvecK5r3N4Vo0%2BHmBdt9LUe3qZeUeWvxsRlFrJeShTsxHe6FhgkwhtMAARK6FDAQQf6npGh%2FY9fSJc%3D"}]}
etag: W/"603e8adc-15d9d"
content-encoding: br
cf-ray: 952edb8508ae56c3-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET 26efp.com/player/jw8/vast.js
200 OK 107 kB URL GET 26efp.com/player/jw8/vast.js
IP
Requested by https://26efp.com/bkg/1keekufcyel6?ref=nablahd46.shop
Certificate IssuerGoogle Trust Services
Subject26efp.com
Fingerprint22:8D:C1:CD:59:4D:CD:8C:E3:D9:2B:78:D2:A8:5E:73:CB:BA:61:42
ValiditySat, 14 Jun 2025 11:27:58 GMT - Fri, 12 Sep 2025 12:26:36 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size 107 kB (107114 bytes)
Hash 3cd85ca1814c3fd976764bf6b83b989d
90e931622205c6adfbc75cfe681563a127580f05
2e4fe3d8b3565a3f8b5ec0ecfe0e5f26a756401b6847dd475327793da41897f5
GET /player/jw8/vast.js HTTP/1.1
Host: 26efp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://26efp.com/bkg/1keekufcyel6?ref=nablahd46.shop
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 20 Jun 2025 22:56:06 GMT
content-type: application/javascript; charset=utf-8
server: cloudflare
last-modified: Thu, 08 Sep 2022 10:34:42 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
expires: Thu, 26 Jun 2025 09:41:04 GMT
cache-control: max-age=604800
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
age: 134101
cf-cache-status: HIT
priority: u=3,i=?0
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=mCZVbQ5DAxJUNVNJ%2B9nu2jh8ijoKt1Qf6Tf1%2BZyOgKa7LCcdK88Me2Yji41t1vcxUl1ZbFbK%2FqSmtUMP4vwsYgNrJuGR3QU%3D"}]}
etag: W/"6319c542-1a26a"
content-encoding: br
cf-ray: 952edb887c4356c3-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET 26efp.com/player/jw8_26/jwplayer.core.controls.js?v=2
200 OK 327 kB URL GET 26efp.com/player/jw8_26/jwplayer.core.controls.js?v=2
IP
Requested by https://26efp.com/bkg/1keekufcyel6?ref=nablahd46.shop
Certificate IssuerGoogle Trust Services
Subject26efp.com
Fingerprint22:8D:C1:CD:59:4D:CD:8C:E3:D9:2B:78:D2:A8:5E:73:CB:BA:61:42
ValiditySat, 14 Jun 2025 11:27:58 GMT - Fri, 12 Sep 2025 12:26:36 GMT
File type JavaScript source, ASCII text, with very long lines (65143)
Size 327 kB (326903 bytes)
Hash fee77850b6b254569cf03f43a4dfdde4
35841d306d3404fbef6825371ffdbcd992ade913
50b22ddf7e9cf49716e33660cc9de3c2bbf3cb90f203d8af93810f8f97bdee3f
GET /player/jw8_26/jwplayer.core.controls.js?v=2 HTTP/1.1
Host: 26efp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://26efp.com/bkg/1keekufcyel6?ref=nablahd46.shop
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 20 Jun 2025 22:56:06 GMT
content-type: application/javascript; charset=utf-8
server: cloudflare
last-modified: Wed, 03 Apr 2024 09:09:34 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
expires: Thu, 26 Jun 2025 09:41:04 GMT
cache-control: max-age=604800
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
age: 134101
cf-cache-status: HIT
priority: u=3,i=?0
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=qwFLoEAJejjrrj5e20RMMOzMo7nx2Q9rANX0Vq0vVBK7jp8GNqXzIYzIPeDKakiulzEt7lCvO1ELJGHJRTdD9%2BbQTIiJbSw%3D"}]}
etag: W/"660d1cce-4fcf7"
content-encoding: br
cf-ray: 952edb88ac6656c3-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET 26efp.com/player/jw8_26/provider.hlsjs.js?v=2
200 OK 423 kB URL GET 26efp.com/player/jw8_26/provider.hlsjs.js?v=2
IP
Requested by https://26efp.com/bkg/1keekufcyel6?ref=nablahd46.shop
Certificate IssuerGoogle Trust Services
Subject26efp.com
Fingerprint22:8D:C1:CD:59:4D:CD:8C:E3:D9:2B:78:D2:A8:5E:73:CB:BA:61:42
ValiditySat, 14 Jun 2025 11:27:58 GMT - Fri, 12 Sep 2025 12:26:36 GMT
File type JavaScript source, ASCII text, with very long lines (65143)
Size 423 kB (422959 bytes)
Hash 0f95e38aa7bb0943693b51bd6a7deed0
26c89f76894108f76ad23af32ecc6b1e708993ba
1b1263b7061aaca7fe0b69168b16cb2401a7fe2ada08ccfdd373ee06c7d125b1
GET /player/jw8_26/provider.hlsjs.js?v=2 HTTP/1.1
Host: 26efp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://26efp.com/bkg/1keekufcyel6?ref=nablahd46.shop
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 20 Jun 2025 22:56:06 GMT
content-type: application/javascript; charset=utf-8
server: cloudflare
last-modified: Fri, 05 Apr 2024 14:57:50 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
expires: Thu, 26 Jun 2025 09:41:05 GMT
cache-control: max-age=604800
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
age: 134101
cf-cache-status: HIT
priority: u=3,i=?0
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=C3rfp2XQqf%2FyZebi72RikCP9Y8DolAooR5Cdp4rYNxYEcGhO0wDKoeYU5vbbiRjwUhRIw7R2qN6LGP6299WFs%2F8gmW7B5Wk%3D"}]}
etag: W/"6610116e-6742f"
content-encoding: br
cf-ray: 952edb890cd056c3-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET be4235.rcr32.ams02.i8yz83pn.com/hls2/01/05160/1keekufcyel6_,n,h,x,.urlset/master.m3u8?t=4MH12i3FuegRdBQIn0XJeOWk-mZ5wlgg_xwjVA3n_Mw&s=1750460165&e=10800&f=25802859&srv=52&asn=50304&sp=5500&p=
200 OK 939 B URL GET be4235.rcr32.ams02.i8yz83pn.com/hls2/01/05160/1keekufcyel6_,n,h,x,.urlset/master.m3u8?t=4MH12i3FuegRdBQIn0XJeOWk-mZ5wlgg_xwjVA3n_Mw&s=1750460165&e=10800&f=25802859&srv=52&asn=50304&sp=5500&p=
IP
Requested by https://26efp.com/bkg/1keekufcyel6?ref=nablahd46.shop
Certificate IssuerLet's Encrypt
Subjectbe4235.rcr32.ams02.i8yz83pn.com
Fingerprint08:2E:6E:50:1F:6C:3C:40:46:96:50:01:A4:0B:BA:92:B6:07:E2:72
ValidityMon, 09 Jun 2025 13:59:44 GMT - Sun, 07 Sep 2025 13:59:43 GMT
Hash af192b80c0f827bb1ed5d5c81059cab5
b7dbe24272ad74416ce564666c9d9a95f8f3e7cd
a36cebd15f4b920de15843536fb7e43a08dd701fd8a652db782a1ba128a7a019
GET /hls2/01/05160/1keekufcyel6_,n,h,x,.urlset/master.m3u8?t=4MH12i3FuegRdBQIn0XJeOWk-mZ5wlgg_xwjVA3n_Mw&s=1750460165&e=10800&f=25802859&srv=52&asn=50304&sp=5500&p= HTTP/1.1
Host: be4235.rcr32.ams02.i8yz83pn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://26efp.com
DNT: 1
Connection: keep-alive
Referer: https://26efp.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 20 Jun 2025 22:56:07 GMT
Content-Type: application/vnd.apple.mpegurl
Last-Modified: Fri, 20 Jun 2025 22:56:07 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 23 Jun 2025 22:56:07 GMT
Access-Control-Allow-Origin: *
Cache-Control: max-age=259200, no-store, no-cache
Sprint-Cache: BYPASS
Content-Encoding: gzip
GET c.adsco.re/#0.07710184691486244
200 OK 78 kB URL GET c.adsco.re/#0.07710184691486244
IP
Requested by https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint3B:64:1C:DA:8C:64:22:01:36:0F:54:7A:99:6E:AD:26:C2:EF:59:8B
ValidityMon, 23 Sep 2024 00:00:00 GMT - Mon, 29 Sep 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (689)
Hash 0baa53ba8a5ba5ee6833a629c3000d4e
d5de057adc1eaa7888ca975199cf0a116b923aa0
0679a036a8577f9592e070f780d06c6bb427a8f15f58008bdeaae2277ce607b4
GET / HTTP/1.1
Host: c.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nablahd46.shop/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 20 Jun 2025 22:56:07 GMT
content-type: text/html
cache-control: public, max-age=2678400
accept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
permissions-policy: ch-ua=(self "https://adsco.re"),ch-ua-mobile=(self "https://adsco.re"),ch-ua-full-version=(self "https://adsco.re"),ch-ua-platform=(self "https://adsco.re"),ch-ua-platform-version=(self "https://adsco.re"),ch-ua-arch=(self "https://adsco.re"),ch-ua-model=(self "https://adsco.re"),ch-device-memory=(self "https://adsco.re"),ch-downlink=(self "https://adsco.re"),ch-ect=(self "https://adsco.re"),ch-rtt=(self "https://adsco.re"),ch-width=(self "https://adsco.re"),ch-viewport-width=(self "https://adsco.re"),ch-dpr=(self "https://adsco.re")
link: <//6.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//4.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//adsco.re/>;rel=preconnect
expires: Mon, 21 Jul 2025 22:56:07 GMT
etag: W/"C6pTuopbpe5oM6YpwwANTg=="
cf-cache-status: HIT
age: 534226
priority: u=4,i=?0
vary: Accept-Encoding
server: cloudflare
cf-ray: 952edb8e3fde56b5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET 4.adsco.re:2087/
0 B IP
Requested by https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: 4.adsco.re:2087
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nablahd46.shop
DNT: 1
Connection: keep-alive
Referer: https://nablahd46.shop/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET storage.multstorage.com/log/count.html
200 OK 882 B URL GET storage.multstorage.com/log/count.html
IP
Requested by https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
Certificate IssuerGoogle Trust Services
Subjectmultstorage.com
FingerprintAB:89:C2:3D:3B:E4:DD:0A:32:44:EC:41:65:9E:53:44:11:61:AB:F3
ValiditySun, 04 May 2025 05:28:22 GMT - Sat, 02 Aug 2025 06:26:59 GMT
File type HTML document, ASCII text, with very long lines (700)
Hash b728ca9cd183d1b7c3f72116b19b22a3
c1fd73f6b02cf00b8bc60b09cc99495e8494b739
8a7b1ca4bbf273b32ea865d4785a1944d1b2b133678d9b5fe7ee0406f6fd64b2
GET /log/count.html HTTP/1.1
Host: storage.multstorage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nablahd46.shop/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 20 Jun 2025 22:56:07 GMT
content-type: text/html
server: cloudflare
last-modified: Mon, 18 Sep 2023 14:39:06 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=Z3LgqFrh847PAEwl0IRzNGhQOKkftc2NArvpi%2FE0O%2Fz%2B%2FAeUiwSCGoVlp6yJOCKfbCOVdsusrw1x3MTNVyrZq%2B6hQBuKywLaF1oKIUgs9KIROukahA%3D%3D"}]}
vary: Accept-Encoding
x-request-id: 3e47480211ce4fdc1942cf8c89576ade
cf-cache-status: DYNAMIC
content-encoding: br
cf-ray: 952edb901d145688-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
302 Found 0 B URL GET accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
IP
Requested by https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
Certificate IssuerGoogle Trust Services
Subjectaccounts.google.com
Fingerprint0A:51:EF:B5:6B:56:C8:FC:1C:82:2B:54:E5:59:1E:4D:83:F5:F9:A5
ValidityMon, 02 Jun 2025 08:37:30 GMT - Mon, 25 Aug 2025 08:37:29 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:CT9LvP39Hb5AD9GBA5MQCkkDSwWDpg:V8GxXI__aiez9eSa; Expires=Sun, 20-Jun-2027 22:56:09 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 20 Jun 2025 22:56:09 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://m.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AdBytiP4bVDruBHxmHTdKv2hRYBxHnKVWdlXO9NXFqWQSAkj-A0YWkBTqViNSIUQpBo_N0MhKvQD
strict-transport-security: max-age=31536000; includeSubDomains
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-l6hdm023rDrYO-IzK9XKWw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist
cross-origin-resource-policy: cross-origin
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-opener-policy: unsafe-none
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET nablahd46.shop/wp-content/cache/min/1/7.8.4/video-js.css?ver=1750152155
200 OK 40 kB URL GET nablahd46.shop/wp-content/cache/min/1/7.8.4/video-js.css?ver=1750152155
IP
Requested by https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
Certificate IssuerGoogle Trust Services
Subjectnablahd46.shop
Fingerprint69:80:7F:8F:5F:2C:A1:F3:63:92:3A:B9:79:64:8A:B8:A7:05:36:FE
ValidityWed, 04 Jun 2025 03:44:27 GMT - Tue, 02 Sep 2025 04:41:53 GMT
File type Unicode text, UTF-8 text, with very long lines (40111), with no line terminators
Hash 66bb329ffe26e06331d70f5cfd2ac799
cd4e19fdbe57165b13e3e20a9c247e55d839ad68
90a1c3d5b543cd9489c1174b070574024956426467639c239893f5d74fffa4f8
GET /wp-content/cache/min/1/7.8.4/video-js.css?ver=1750152155 HTTP/1.1
Host: nablahd46.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 20 Jun 2025 22:56:02 GMT
content-type: text/css
server: cloudflare
last-modified: Tue, 17 Jun 2025 09:22:35 GMT
etag: "685133db-9cb3"
x-powered-by: PleskLin
content-encoding: br
cache-control: max-age=14400
cf-cache-status: REVALIDATED
priority: u=2,i=?0
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=DKMS%2FddAwxwEKaYR61Os9RBcmNgXtdX4Gk%2FZwWR29g2219WUaO6PbXplG4udtcxXcdhtuWlQ2i8fpIqUXbrrs5xeojG4OaMBMRjpcg%3D%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cf-ray: 952edb710c3056ba-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET nablahd46.shop/wp-includes/js/jquery/jquery.min.js?ver=3.7.1
200 OK 88 kB URL GET nablahd46.shop/wp-includes/js/jquery/jquery.min.js?ver=3.7.1
IP
Requested by https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
Certificate IssuerGoogle Trust Services
Subjectnablahd46.shop
Fingerprint69:80:7F:8F:5F:2C:A1:F3:63:92:3A:B9:79:64:8A:B8:A7:05:36:FE
ValidityWed, 04 Jun 2025 03:44:27 GMT - Tue, 02 Sep 2025 04:41:53 GMT
File type JavaScript source, ASCII text, with very long lines (65447)
Hash 826eb77e86b02ab7724fe3d0141ff87c
79cd3587d565afe290076a8d36c31c305a573d18
cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf
GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1
Host: nablahd46.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 20 Jun 2025 22:56:02 GMT
content-type: application/javascript
server: cloudflare
last-modified: Sun, 26 Nov 2023 02:20:30 GMT
etag: "6562ab6e-15601"
x-powered-by: PleskLin
content-encoding: br
cache-control: max-age=14400
cf-cache-status: REVALIDATED
priority: u=2,i=?0
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=cNzAgUrNNjtk1k3X1OqXcsGK0efadQh97U%2F9pCI%2Bafz9pPIStuqh24kKTtOzyMyG662Br1ahU1NA2Ypu1zNoYEk1BFouU7%2FiqE8v%2Bg%3D%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cf-ray: 952edb711c3656ba-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET js.capndr.com/advertising.js
200 OK 0 B URL GET js.capndr.com/advertising.js
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
Certificate IssuerLet's Encrypt
Subjectjs.capndr.com
Fingerprint1D:CA:E2:9B:97:B0:05:1D:68:0D:AC:F5:2D:CD:88:3A:1C:EA:0F:EA
ValiditySun, 15 Jun 2025 02:32:24 GMT - Sat, 13 Sep 2025 02:32:23 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /advertising.js HTTP/1.1
Host: js.capndr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nablahd46.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 20 Jun 2025 22:56:04 GMT
content-type: application/javascript; charset=utf-8
content-length: 0
server: nginx/1.18.0
last-modified: Fri, 14 Jul 2023 08:23:25 GMT
etag: "64b105fd-0"
expires: Fri, 20 Jun 2025 23:01:04 GMT
cache-control: max-age=300
x-cdn-host-id: ah1747
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
GET be4235.rcr32.ams02.i8yz83pn.com/hls2/01/05160/1keekufcyel6_n/seg-1-v1-a1.ts?t=4MH12i3FuegRdBQIn0XJeOWk-mZ5wlgg_xwjVA3n_Mw&s=1750460165&e=10800&f=25802859&srv=52&asn=50304&sp=5500&p=
200 OK 2.5 MB URL GET be4235.rcr32.ams02.i8yz83pn.com/hls2/01/05160/1keekufcyel6_n/seg-1-v1-a1.ts?t=4MH12i3FuegRdBQIn0XJeOWk-mZ5wlgg_xwjVA3n_Mw&s=1750460165&e=10800&f=25802859&srv=52&asn=50304&sp=5500&p=
IP
Requested by https://26efp.com/bkg/1keekufcyel6?ref=nablahd46.shop
Certificate IssuerLet's Encrypt
Subjectbe4235.rcr32.ams02.i8yz83pn.com
Fingerprint08:2E:6E:50:1F:6C:3C:40:46:96:50:01:A4:0B:BA:92:B6:07:E2:72
ValidityMon, 09 Jun 2025 13:59:44 GMT - Sun, 07 Sep 2025 13:59:43 GMT
Size 2.5 MB (2497024 bytes)
Hash 8ab1fe9b7db4c7a607261dcd34563be9
ef0b52285dd4c8bdeddd83d5f9b22457f1974bb0
9262e359cdb844fc515aa79ba7813926d3f268037f141a5266f358e45521086b
GET /hls2/01/05160/1keekufcyel6_n/seg-1-v1-a1.ts?t=4MH12i3FuegRdBQIn0XJeOWk-mZ5wlgg_xwjVA3n_Mw&s=1750460165&e=10800&f=25802859&srv=52&asn=50304&sp=5500&p= HTTP/1.1
Host: be4235.rcr32.ams02.i8yz83pn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://26efp.com
DNT: 1
Connection: keep-alive
Referer: https://26efp.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 20 Jun 2025 22:56:07 GMT
Content-Type: video/MP2T
Content-Length: 2497024
Connection: keep-alive
Last-Modified: Sun, 19 Nov 2000 08:52:00 GMT
Expires: Sat, 21 Jun 2025 06:10:23 GMT
ETag: "5f693e80-261a00"
Access-Control-Allow-Origin: *
Cache-Control: max-age=259200, no-store, no-cache
Sprint-Cache: HIT
Accept-Ranges: bytes
GET bobstrmxiz.shop/js/jquery.js
404 Not Found 153 B URL GET bobstrmxiz.shop/js/jquery.js
IP
Requested by https://bobstrmxiz.shop/e/1keekufcyel6/
Certificate IssuerGoogle Trust Services
Subjectbobstrmxiz.shop
Fingerprint2F:3E:C2:34:E7:63:51:DA:C7:F8:40:C3:AE:DA:EE:A9:A8:F4:B9:36
ValiditySat, 31 May 2025 18:14:48 GMT - Fri, 29 Aug 2025 19:12:11 GMT
File type HTML document, ASCII text, with CRLF line terminators
Hash 932da5a430ff6db1bc48425b567d56fa
e7e88023dbbc6346d354ffe9fb7db957888c2299
10174434dbe479c08b32ce3b42b70e7c6336647d29e4393483158d590d35c325
GET /js/jquery.js HTTP/1.1
Host: bobstrmxiz.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bobstrmxiz.shop/e/1keekufcyel6/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 20 Jun 2025 22:56:04 GMT
content-type: text/html
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5TiHzS6TW1%2BASpepjk%2B7TRON7x4DZ%2B9vxQkTb8M0hcVbAEv6YyT3wTU4%2BhCR1OHOTisV9PqMTQVUrJfbltKU5ImuXzLW8K9oODB9MFyprBaV7hJdRYNxgJdbT%2BXD5mzi3DM%3D"}],"group":"cf-nel","max_age":604800}
cache-control: max-age=14400
cf-cache-status: EXPIRED
content-encoding: br
cf-ray: 952edb7c6c980b3d-OSL
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=21557&min_rtt=347&rtt_var=26663&sent=72&recv=71&lost=0&retrans=0&sent_bytes=20294&recv_bytes=5318&delivery_rate=1568418&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=24634&unsent_bytes=0&cid=7e733a744e3ce80a&ts=1061&inflight_dur=153&x=44"
GET bobstrmxiz.shop/js/jquery.cookie.js
404 Not Found 153 B URL GET bobstrmxiz.shop/js/jquery.cookie.js
IP
Requested by https://bobstrmxiz.shop/e/1keekufcyel6/
Certificate IssuerGoogle Trust Services
Subjectbobstrmxiz.shop
Fingerprint2F:3E:C2:34:E7:63:51:DA:C7:F8:40:C3:AE:DA:EE:A9:A8:F4:B9:36
ValiditySat, 31 May 2025 18:14:48 GMT - Fri, 29 Aug 2025 19:12:11 GMT
File type HTML document, ASCII text, with CRLF line terminators
Hash 932da5a430ff6db1bc48425b567d56fa
e7e88023dbbc6346d354ffe9fb7db957888c2299
10174434dbe479c08b32ce3b42b70e7c6336647d29e4393483158d590d35c325
GET /js/jquery.cookie.js HTTP/1.1
Host: bobstrmxiz.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bobstrmxiz.shop/e/1keekufcyel6/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 20 Jun 2025 22:56:04 GMT
content-type: text/html
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OyS9NP8sVKZioP8%2FlTtl2xaVhn0fFvKzeHctC2NvgjXBkmViAHCHRdu4BMEBa6IOQzrYJ5pcRnhpHjJ3eBxr6m6D26wwxa4k5I5qQ2OSShD5SNPlC483QYl8U%2FZe8y4la5M%3D"}],"group":"cf-nel","max_age":604800}
cache-control: max-age=14400
cf-cache-status: EXPIRED
content-encoding: br
cf-ray: 952edb7c6c9a0b3d-OSL
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=21557&min_rtt=347&rtt_var=26663&sent=70&recv=71&lost=0&retrans=0&sent_bytes=19519&recv_bytes=5318&delivery_rate=1568418&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=24634&unsent_bytes=0&cid=7e733a744e3ce80a&ts=1060&inflight_dur=150&x=44"
GET nablahd46.shop/wp-content/uploads/2024/07/favicon-16x1664-1.png.webp
200 OK 180 B URL GET nablahd46.shop/wp-content/uploads/2024/07/favicon-16x1664-1.png.webp
IP
Requested by https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
Certificate IssuerGoogle Trust Services
Subjectnablahd46.shop
Fingerprint69:80:7F:8F:5F:2C:A1:F3:63:92:3A:B9:79:64:8A:B8:A7:05:36:FE
ValidityWed, 04 Jun 2025 03:44:27 GMT - Tue, 02 Sep 2025 04:41:53 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 16x16, Scaling: [none]x[none], YUV color, decoders should clamp
Hash 102d6fb38beee8f73948738a01922391
f232122a666e6a361bc72f52a3a2bf703ac85c9c
3aa9f8dc29e10d6f093b7bef98543f4bf13cd898f127c6cd0b1ba1cba1d1d2c7
GET /wp-content/uploads/2024/07/favicon-16x1664-1.png.webp HTTP/1.1
Host: nablahd46.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 20 Jun 2025 22:56:05 GMT
content-type: image/webp
content-length: 180
server: cloudflare
x-accel-version: 0.01
last-modified: Sun, 21 Jul 2024 15:33:23 GMT
etag: "b4-61dc3a61cd6c0"
accept-ranges: bytes
x-powered-by: PleskLin
cache-control: max-age=14400
cf-cache-status: REVALIDATED
priority: u=6,i=?0
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=h4bHsUOe4sdvwmg7dJ0MWgFZvqPeo2Je9jGQZ%2BxsyFVbnNe1r5nG0vt1a82nHsq%2BtVLE%2F60yvAoyXTbX%2BeCMc7fnhcCl1V4kbId9xg%3D%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cf-ray: 952edb7e6ddc56ba-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET bobstrmxiz.shop/js/jquery.cookie.js
404 Not Found 153 B URL GET bobstrmxiz.shop/js/jquery.cookie.js
IP
Requested by https://bobstrmxiz.shop/e/1keekufcyel6/
Certificate IssuerGoogle Trust Services
Subjectbobstrmxiz.shop
Fingerprint2F:3E:C2:34:E7:63:51:DA:C7:F8:40:C3:AE:DA:EE:A9:A8:F4:B9:36
ValiditySat, 31 May 2025 18:14:48 GMT - Fri, 29 Aug 2025 19:12:11 GMT
File type HTML document, ASCII text, with CRLF line terminators
Hash 932da5a430ff6db1bc48425b567d56fa
e7e88023dbbc6346d354ffe9fb7db957888c2299
10174434dbe479c08b32ce3b42b70e7c6336647d29e4393483158d590d35c325
GET /js/jquery.cookie.js HTTP/1.1
Host: bobstrmxiz.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bobstrmxiz.shop/e/1keekufcyel6/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 20 Jun 2025 22:56:04 GMT
content-type: text/html
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1BtfXn8L9q5pXoZkOOnIZ7LePTy1sPgb9lXe9B1g75hQFFisUhAf7TbyYblWPHbh%2B0soFAiaojpNn7OHgLJwgGd0wao1GHuqre%2FXbMp10L%2Fed2ml62Zob%2BiHi%2Bzv8LeLkIo%3D"}],"group":"cf-nel","max_age":604800}
age: 0
cache-control: max-age=14400
cf-cache-status: HIT
content-encoding: br
cf-ray: 952edb7eecb00b3d-OSL
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=16830&min_rtt=347&rtt_var=23211&sent=76&recv=74&lost=0&retrans=0&sent_bytes=21839&recv_bytes=5672&delivery_rate=1568418&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=24634&unsent_bytes=0&cid=7e733a744e3ce80a&ts=1359&inflight_dur=159&x=44"
HEAD eppdldrgqrljlr.com/
200 OK 0 B IP
Requested by https://26efp.com/bkg/1keekufcyel6?ref=nablahd46.shop
Certificate IssuerLet's Encrypt
Subjecteppdldrgqrljlr.com
Fingerprint2B:AC:34:F8:81:15:3E:3C:D1:F7:8F:83:C3:C6:39:24:77:3C:83:A7
ValidityThu, 19 Jun 2025 10:53:53 GMT - Wed, 17 Sep 2025 10:53:52 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
HEAD / HTTP/1.1
Host: eppdldrgqrljlr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en
Accept-Encoding: gzip, deflate, br
Content-Type: text/html
Origin: https://26efp.com
DNT: 1
Connection: keep-alive
Referer: https://26efp.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 20 Jun 2025 22:56:07 GMT
content-type: text/html
x-t71r14a88c26e42-68i77d45: 00000000000000000000000000000000
vary: Accept-Encoding, Origin
access-control-allow-origin: https://26efp.com
access-control-expose-headers: Link, X-Application-Token, X-Application-Key, X-Tag, X-Auth-Token, X-DirectionPartner-Id, X-ZoneType-Id, X-Hostname
access-control-allow-credentials: true
timing-allow-origin: *
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
x-application-key: u4t3gAugzKhqaqbb7oz7c
strict-transport-security: max-age=1
x-content-type-options: nosniff
content-encoding: br
X-Firefox-Spdy: h2
GET 5740f14e90.af305e6c77.com/7f9a3ed2d9fdb7aad3a7f98b528bf243.js
200 OK 564 kB URL GET 5740f14e90.af305e6c77.com/7f9a3ed2d9fdb7aad3a7f98b528bf243.js
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
Certificate IssuerLet's Encrypt
Subject5740f14e90.af305e6c77.com
Fingerprint4E:C5:C7:6A:5E:A1:CD:7B:50:AF:E5:43:F5:06:B3:79:63:6C:DA:93
ValidityTue, 17 Jun 2025 02:15:40 GMT - Mon, 15 Sep 2025 02:15:39 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Size 564 kB (563921 bytes)
Hash 3b8da9c4190f324ee88c88e89182ae8c
3578b6d4aae8789874dcd7e28037c21558716a2d
a1510892fba16553901667b4fa2946d7c8e346ac68ae3c700a032ef8fd6e5a87
GET /7f9a3ed2d9fdb7aad3a7f98b528bf243.js HTTP/1.1
Host: 5740f14e90.af305e6c77.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nablahd46.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 20 Jun 2025 22:56:08 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Fri, 20 Jun 2025 07:24:40 GMT
etag: W/"68550cb8-89ad1"
content-encoding: gzip
expires: Fri, 20 Jun 2025 23:01:08 GMT
cache-control: max-age=300
x-cdn-host-id: ah1747
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
GET 26efp.com/adcgi?id=5397180
404 Not Found 2.0 kB URL GET 26efp.com/adcgi?id=5397180
IP
Requested by https://26efp.com/bkg/1keekufcyel6?ref=nablahd46.shop
Certificate IssuerGoogle Trust Services
Subject26efp.com
Fingerprint22:8D:C1:CD:59:4D:CD:8C:E3:D9:2B:78:D2:A8:5E:73:CB:BA:61:42
ValiditySat, 14 Jun 2025 11:27:58 GMT - Fri, 12 Sep 2025 12:26:36 GMT
File type HTML document, ASCII text, with CRLF line terminators
Hash 78598915b8026c43308f5937da5c2e3e
2423083b2bfdfde76ba2079493f33d58097f05cf
b381f11049433f95c1fa966ba65661e7905b58e240ada758a49ab86dc7f86f27
GET /adcgi?id=5397180 HTTP/1.1
Host: 26efp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://26efp.com/bkg/1keekufcyel6?ref=nablahd46.shop
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 20 Jun 2025 22:56:08 GMT
content-type: text/html; charset=utf-8
server: cloudflare
last-modified: Fri, 24 Jan 2025 17:58:42 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cf-cache-status: DYNAMIC
priority: u=3,i=?0
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=UtubYr0%2BiGg9vZcGvpB%2BnXlKbz4aYsb%2Be%2FyzUdSzIBjKTNiSeaQepXYDBNXpMJJogDqZ1Hj%2Fh8j%2BT6HQ1TsDmNuZiZ4S0EA%3D"}]}
content-encoding: br
cf-ray: 952edb949f0656c3-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
POST awpya.com/in/multy
200 OK 74 kB IP
ASN #24940 Hetzner Online GmbH
Requested by https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
Certificate IssuerLet's Encrypt
Subjectinpage.infrapu.sh
Fingerprint53:32:5A:78:97:D4:AD:CF:41:C6:08:3E:D5:02:8C:C6:22:50:E8:35
ValidityTue, 01 Apr 2025 08:22:50 GMT - Mon, 30 Jun 2025 08:22:49 GMT
Hash 306605bcb80945f07ac3407b94e4db5f
7f9b5131016128f9e93312852efdc191c0c428e6
d158128c0b518c942b09d076248ccf992cfeb7e810c7217023503916cf8b64b2
POST /in/multy HTTP/1.1
Host: awpya.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 2261
Origin: https://nablahd46.shop
DNT: 1
Connection: keep-alive
Referer: https://nablahd46.shop/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.20.1
date: Fri, 20 Jun 2025 22:56:09 GMT
content-type: application/json
content-length: 8129
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
content-encoding: gzip
X-Firefox-Spdy: h2
GET pointcontinentrtb.com/v1/track/impression?data=eyJhbGciOiJIUzI1NiJ9.eyJhbCI6ImVuLVVTIiwiYXQiOjE3NTA0NjAxNjg4NTEsImJ2IjoiMTM0LjAuMCIsImNycyI6NTgyNSwiY3MiOiJXM3NpYkNJNk1Dd2lkQ0k2SW01dmJtVWlMQ0prSWpvd2ZWMD0iLCJjdSI6ImlwK3VhIiwiZHAiOiJkaXJlY3QiLCJkdCI6MTc1MDU0NjU2ODg1MSwiZXIiOiI0OTc2NTIzNDE5NTQ2OTE3NzkiLCJlcyI6IjE3OTEwIiwiaSI6IjczMTQ1MzgyNToxODY6NzU2OTk0NzYwOTY2MTI0NjY3NDo2NjMyNzoxODg0MzQ6ODExNzY2OTgxMTE3NDE2MTkyMTozMDE5MTo6IiwiaWNzIjowLCJpcCI6IjkxLjkwLjQyLjE1NCIsImlwdjYiOiI6OiIsImp0aSI6ImZkYWU2ZmI5LWU5YzEtNDM2ZS04NWQ5LWFkOThkNzI2N2FkMCIsInAiOjAuMDAwMSwicHIiOmZhbHNlLCJycCI6MC4wMDAxLCJzIjpmYWxzZSwic2QiOi0xLCJzcCI6Int9IiwidCI6ImlucGFnZV9hZHVsdF9ocV92MjpjcGMiLCJ0cCI6MC4wMDAwMTc1MjU1MzY3MjkxOTE3NDcsInRyaWQiOiJ0Y2ItZHNwLWh6LTEyIiwidSI6IiIsInVhIjoiTW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NDsgcnY6MTM0LjApIEdlY2tvLzIwMTAwMTAxIEZpcmVmb3gvMTM0LjAiLCJ1aCI6IjBkZTlkNTRiZjA3Nzc3MTI3Y2FjOTJlMDk0MjU5ODg4IiwidWkiOiI3YjZkYWE1Ni00MWY0LTU2MjAtYmUzYy03ODZlODRkYjAyOTkiLCJ1ciI6IjE4NjppbnBhZ2VfYWR1bHRfaHFfdjI6NzMxNDUzODI1OnRydWU6IiwidiI6IiIsInZmIjoiIn0.zobwGkrwkn2aXuK6U3iDul0HOBBziUU5RI5IzjxqxBE&sp=0.0001
204 No Content 0 B URL GET pointcontinentrtb.com/v1/track/impression?data=eyJhbGciOiJIUzI1NiJ9.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.zobwGkrwkn2aXuK6U3iDul0HOBBziUU5RI5IzjxqxBE&sp=0.0001
IP
ASN #24940 Hetzner Online GmbH
Requested by https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
Certificate IssuerLet's Encrypt
Subjectpointcontinentrtb.com
FingerprintF7:E1:71:A7:E0:D4:A3:9E:CF:B4:45:ED:45:E5:90:FB:12:1E:A8:88
ValidityTue, 17 Jun 2025 02:48:55 GMT - Mon, 15 Sep 2025 02:48:54 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v1/track/impression?data=eyJhbGciOiJIUzI1NiJ9.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.zobwGkrwkn2aXuK6U3iDul0HOBBziUU5RI5IzjxqxBE&sp=0.0001 HTTP/1.1
Host: pointcontinentrtb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
Server: nginx/1.24.0
Date: Fri, 20 Jun 2025 22:56:10 GMT
Content-Type: text/plain; charset=utf-8
Connection: keep-alive
Vary: Origin
GET waust.at/d.js
200 OK 14 kB IP
Requested by https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
Certificate IssuerGoogle Trust Services
Subjectwaust.at
Fingerprint28:34:9D:B0:BC:21:BB:62:84:CA:E8:DB:72:58:B1:08:CA:F0:42:A2
ValidityWed, 23 Apr 2025 12:21:57 GMT - Tue, 22 Jul 2025 13:21:56 GMT
File type JavaScript source, ASCII text, with very long lines (13611), with no line terminators
Hash e3dd6fff8c73627fe4364f2b48bc99ba
e73a75a0702f02bb8bdbd9f6cd939a15e992c3ce
b800d792292bc935a624af813f96a9349158bf86d118e015f4f336660f487769
GET /d.js HTTP/1.1
Host: waust.at
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nablahd46.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 20 Jun 2025 22:56:02 GMT
content-type: application/x-javascript
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
last-modified: Thu, 12 Jun 2025 10:31:43 GMT
etag: W/"684aac8f-352b"
expires: Sat, 21 Jun 2025 22:17:12 GMT
cache-control: max-age=86400
access-control-allow-origin: *
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 2330
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=1mpd7CGxVRz1KPS%2F%2BrX7thP7TdA29ZVlPk8b50Tr2mIF9LoYAojr8Kck1ZILFHEcDjOSOaH1%2FtNcjud2Ak04w72LaG4J"}]}
cf-ray: 952edb717eb70b3d-OSL
X-Firefox-Spdy: h2
GET unpkg.com/@silvermine/videojs-quality-selector@1.2.4/dist/js/silvermine-videojs-quality-selector.min.js?ver=1.2.4
200 OK 23 kB URL GET unpkg.com/@silvermine/videojs-quality-selector@1.2.4/dist/js/silvermine-videojs-quality-selector.min.js?ver=1.2.4
IP
Requested by https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
Certificate IssuerGoogle Trust Services
Subjectunpkg.com
Fingerprint6A:50:E9:D4:F9:DB:BA:3A:76:D2:D3:E2:A2:6D:16:12:07:9D:D4:DA
ValidityTue, 29 Apr 2025 07:12:06 GMT - Mon, 28 Jul 2025 08:12:03 GMT
File type JavaScript source, ASCII text, with very long lines (23113)
Hash f923d2667324506e72f42ca781ccb6f9
ab63ce25316c340764513b00d48855dc85265cfd
65516c677f31b3dc7a46b25580752d407e4cf3b9c9f7edaa21b78c3dc5740266
GET /@silvermine/videojs-quality-selector@1.2.4/dist/js/silvermine-videojs-quality-selector.min.js?ver=1.2.4 HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nablahd46.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 20 Jun 2025 22:56:02 GMT
content-type: text/javascript; charset=utf-8
cf-ray: 952edb714c48712a-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 1447852
cache-control: public, max-age=31536000
expires: Sat, 20 Jun 2026 22:56:02 GMT
last-modified: Tue, 29 Apr 2025 17:16:11 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
via: 1.1 fly.io, 1.1 fly.io
access-control-allow-headers: *
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-expose-headers: *
content-digest: sha256=:ZVFsZ38xs9x6RrJVgHUtQH5M87nJ9+2qIbeMPcV0AmY=:
cross-origin-resource-policy: cross-origin
fly-request-id: 01JT18S2T75EW5EREJPEG1VCP2-ord
x-content-type-options: nosniff
server: cloudflare
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET bobstrmxiz.shop/css/main.css?v=4
200 OK 49 kB URL GET bobstrmxiz.shop/css/main.css?v=4
IP
Requested by https://bobstrmxiz.shop/e/1keekufcyel6/
Certificate IssuerGoogle Trust Services
Subjectbobstrmxiz.shop
Fingerprint2F:3E:C2:34:E7:63:51:DA:C7:F8:40:C3:AE:DA:EE:A9:A8:F4:B9:36
ValiditySat, 31 May 2025 18:14:48 GMT - Fri, 29 Aug 2025 19:12:11 GMT
File type assembler source, Unicode text, UTF-8 text
Hash 5a72a30cb5e2721cf7e36ebd9846a4f6
c03db81b75b19f829201db0d01d66ef189b8180a
b0341644a22e09291520c4c51eac70ed71928ee3066f40fcff257c582afac3b1
GET /css/main.css?v=4 HTTP/1.1
Host: bobstrmxiz.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bobstrmxiz.shop/e/1keekufcyel6/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 20 Jun 2025 22:56:04 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Dk00%2FX%2FocDIRgb0X50Gzw8DCpj3SoaIYI%2BH1HbOUZWs%2BqryccN0%2BieD2bBeDZARqcJ70V7XovbaarcJ77DAPVWquifZ5%2FTV7XIRXUHDOD76yPe%2BvjS4GqBfoClmcndofCFg%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 26 Sep 2024 18:06:54 GMT
etag: W/"66f5a2be-c03c"
expires: Fri, 27 Jun 2025 20:05:55 GMT
cache-control: max-age=604800
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
age: 10209
cf-cache-status: HIT
content-encoding: br
cf-ray: 952edb7c5c970b3d-OSL
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=35800&min_rtt=1788&rtt_var=25531&sent=58&recv=67&lost=0&retrans=0&sent_bytes=6126&recv_bytes=5142&delivery_rate=60873&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=15500&unsent_bytes=0&cid=7e733a744e3ce80a&ts=962&inflight_dur=119&x=44"
GET bobstrmxiz.shop/js/ls.js
404 Not Found 153 B IP
Requested by https://bobstrmxiz.shop/e/1keekufcyel6/
Certificate IssuerGoogle Trust Services
Subjectbobstrmxiz.shop
Fingerprint2F:3E:C2:34:E7:63:51:DA:C7:F8:40:C3:AE:DA:EE:A9:A8:F4:B9:36
ValiditySat, 31 May 2025 18:14:48 GMT - Fri, 29 Aug 2025 19:12:11 GMT
File type HTML document, ASCII text, with CRLF line terminators
Hash 932da5a430ff6db1bc48425b567d56fa
e7e88023dbbc6346d354ffe9fb7db957888c2299
10174434dbe479c08b32ce3b42b70e7c6336647d29e4393483158d590d35c325
GET /js/ls.js HTTP/1.1
Host: bobstrmxiz.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bobstrmxiz.shop/e/1keekufcyel6/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 20 Jun 2025 22:56:04 GMT
content-type: text/html
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IAhUGLB2W0PhDq3SWiIG1KVXFfeGIJqRZivQDIcJqTzhEb%2F4JsPdKmuYwFJXGfro4CFIP%2BTf98xpNmnJSWefMGMAGJ%2BUDdHFoOY0CvdxoUI3S0dmnHFw31Wz5qXWyBva4%2FM%3D"}],"group":"cf-nel","max_age":604800}
cache-control: max-age=14400
cf-cache-status: EXPIRED
content-encoding: br
cf-ray: 952edb7c6c9b0b3d-OSL
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=21557&min_rtt=347&rtt_var=26663&sent=69&recv=71&lost=0&retrans=0&sent_bytes=18765&recv_bytes=5318&delivery_rate=1568418&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=24634&unsent_bytes=0&cid=7e733a744e3ce80a&ts=1056&inflight_dur=150&x=44"
GET 26efp.com/player/jw8_26/jwplayer.js?v=5.0.2
200 OK 111 kB URL GET 26efp.com/player/jw8_26/jwplayer.js?v=5.0.2
IP
Requested by https://26efp.com/bkg/1keekufcyel6?ref=nablahd46.shop
Certificate IssuerGoogle Trust Services
Subject26efp.com
Fingerprint22:8D:C1:CD:59:4D:CD:8C:E3:D9:2B:78:D2:A8:5E:73:CB:BA:61:42
ValiditySat, 14 Jun 2025 11:27:58 GMT - Fri, 12 Sep 2025 12:26:36 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65511)
Size 111 kB (111441 bytes)
Hash f91de142eed44442bad231961488c5d0
ea6c79968011a5b59e444d792f7ab048a1f7e31d
b3031ee0f2674c203fe1400df12a96148c4bed344553fc9063c3846ba8466295
GET /player/jw8_26/jwplayer.js?v=5.0.2 HTTP/1.1
Host: 26efp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://26efp.com/bkg/1keekufcyel6?ref=nablahd46.shop
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 20 Jun 2025 22:56:05 GMT
content-type: application/javascript; charset=utf-8
server: cloudflare
last-modified: Fri, 05 Apr 2024 14:58:43 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
expires: Thu, 26 Jun 2025 09:41:03 GMT
cache-control: max-age=604800
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
age: 134102
cf-cache-status: HIT
priority: u=3,i=?0
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=RPGXyaKiAiTUsZ4MTWQ91IcRGs1lYehkGqbHPbhyo1FDQtsaSxefp3lzfW9yabqbe%2FplvvabcAhDvddYoeC1IZdArzvPpuc%3D"}]}
etag: W/"661011a3-1b351"
content-encoding: br
cf-ray: 952edb8528dc56c3-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET 26efp.com/js/jquery.cookie.js
200 OK 4.3 kB URL GET 26efp.com/js/jquery.cookie.js
IP
Requested by https://26efp.com/bkg/1keekufcyel6?ref=nablahd46.shop
Certificate IssuerGoogle Trust Services
Subject26efp.com
Fingerprint22:8D:C1:CD:59:4D:CD:8C:E3:D9:2B:78:D2:A8:5E:73:CB:BA:61:42
ValiditySat, 14 Jun 2025 11:27:58 GMT - Fri, 12 Sep 2025 12:26:36 GMT
Hash ae0c2c5d8f01f7d35bb698bb618a62f7
63556a22ddea1c5f23a5cf7d0b6d35c7aab54e20
75aef2e95ea7f3a70999396fba0c2ab866f4ff06313cf1b07780d800a5fc1ebc
GET /js/jquery.cookie.js HTTP/1.1
Host: 26efp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://26efp.com/bkg/1keekufcyel6?ref=nablahd46.shop
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 20 Jun 2025 22:56:05 GMT
content-type: application/javascript; charset=utf-8
server: cloudflare
last-modified: Tue, 31 May 2011 12:53:56 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
expires: Thu, 26 Jun 2025 09:41:03 GMT
cache-control: max-age=604800
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
age: 134102
cf-cache-status: HIT
priority: u=2,i=?0
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=1BsRx%2FEdXiCuJ%2FMvQi2Ro%2FuKJ4rgGvQNuZQpV1TBlf4Bgxb0X70kFd4sNuY7Z%2F59Kz1aQFpTbT0BpWHT5byvCMknUliV2Wg%3D"}]}
etag: W/"4de4e4e4-10eb"
content-encoding: br
cf-ray: 952edb8528d656c3-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET 26efp.com/assets/css/jw8-theme.css?v=3.0.6
200 OK 25 kB URL GET 26efp.com/assets/css/jw8-theme.css?v=3.0.6
IP
Requested by https://26efp.com/bkg/1keekufcyel6?ref=nablahd46.shop
Certificate IssuerGoogle Trust Services
Subject26efp.com
Fingerprint22:8D:C1:CD:59:4D:CD:8C:E3:D9:2B:78:D2:A8:5E:73:CB:BA:61:42
ValiditySat, 14 Jun 2025 11:27:58 GMT - Fri, 12 Sep 2025 12:26:36 GMT
File type ASCII text, with very long lines (938), with CRLF line terminators
Hash 218f1af32c959506efe281f39309d9a5
948fbcdba4275e13fc3e469a04df2d727aabdf4a
5425c5e4dfa36e386ee465a9fe20f61290bcd377fe3fd950164c5c6e16301593
GET /assets/css/jw8-theme.css?v=3.0.6 HTTP/1.1
Host: 26efp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://26efp.com/bkg/1keekufcyel6?ref=nablahd46.shop
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 20 Jun 2025 22:56:06 GMT
content-type: text/css
server: cloudflare
last-modified: Wed, 03 Apr 2024 15:50:39 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
expires: Thu, 26 Jun 2025 09:41:05 GMT
cache-control: max-age=604800
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
age: 134101
cf-cache-status: HIT
priority: u=2,i=?0
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=xqkKhC%2FmH5XfpCzzR9C00NNIxTZQge6UatLy9yNIdtZIMCWhxeLUo6XXe85BZ%2BWiiWJW%2FCPehl43fgAVab2VbFiADAABnYc%3D"}]}
etag: W/"660d7acf-62a2"
content-encoding: br
cf-ray: 952edb88fcb556c3-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET 6.adsco.re:2087/
200 OK 45 B IP
Requested by https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint3B:64:1C:DA:8C:64:22:01:36:0F:54:7A:99:6E:AD:26:C2:EF:59:8B
ValidityMon, 23 Sep 2024 00:00:00 GMT - Mon, 29 Sep 2025 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 5b41cb22f84f645a103acc7bfbf084ff
bac3967b26d5ec4a0d09a580714e8219796816bd
709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc
GET / HTTP/1.1
Host: 6.adsco.re:2087
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nablahd46.shop
DNT: 1
Connection: keep-alive
Referer: https://nablahd46.shop/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 20 Jun 2025 22:56:07 GMT
content-type: text/plain;charset=UTF-8
content-length: 45
access-control-allow-origin: https://nablahd46.shop
cache-control: private, max-age=10
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-max-age: 2592000
vary: Accept-Encoding
server: cloudflare
cf-ray: 952edb8efd67b503-OSL
alt-svc: h3=":2087"; ma=86400
X-Firefox-Spdy: h2
GET nereserv.com/in/dip?site=native-push&wl=1&event_id=4291f9c1-f228-43dd-8a13-b61ea9e1b8d6&subid=500738273&sid=3223123389&spot_id=1453825&created_at=2025-06-20&timezone=0&ver=8.234.1&is_native=1
200 OK 0 B URL GET nereserv.com/in/dip?site=native-push&wl=1&event_id=4291f9c1-f228-43dd-8a13-b61ea9e1b8d6&subid=500738273&sid=3223123389&spot_id=1453825&created_at=2025-06-20&timezone=0&ver=8.234.1&is_native=1
IP
ASN #24940 Hetzner Online GmbH
Requested by https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
Certificate IssuerLet's Encrypt
Subjectinpage.infrapu.sh
Fingerprint53:32:5A:78:97:D4:AD:CF:41:C6:08:3E:D5:02:8C:C6:22:50:E8:35
ValidityTue, 01 Apr 2025 08:22:50 GMT - Mon, 30 Jun 2025 08:22:49 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/dip?site=native-push&wl=1&event_id=4291f9c1-f228-43dd-8a13-b61ea9e1b8d6&subid=500738273&sid=3223123389&spot_id=1453825&created_at=2025-06-20&timezone=0&ver=8.234.1&is_native=1 HTTP/1.1
Host: nereserv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nablahd46.shop
DNT: 1
Connection: keep-alive
Referer: https://nablahd46.shop/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.20.1
date: Fri, 20 Jun 2025 22:56:08 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
OPTIONS ccg90.com/wrr?z=9254409&p_rid=26f0b7fa-4c80-41d9-8969-429f4742a45d&rb=OiR-rKgPfyfiHLHSBTxfUrP73G2ijGYvpGhNhlHMMpzL7UU9IvNm7ZbSzwNHTf6-YweApnjNfxEc3Ob_mkftcJB22apbUZ3c9LRg8MSPjqbH4oClVLJqsUlH91vWpn4JjQSIbFq8WZ-qZGP30WJ6OZ_uJZByzIX4S7v_oidCNTghJtslIkSoPcH8zxEHwAWNCNFy2h-cj2NPHOiUqnh6Nxlwr_tvtDdomMdrFRB9vsk-0XJl7DgTsmN2qr8lBxG4Huz3Ks2VBT4eqRQD0iiaWap33YdQZsHtzjm1Eg==&dmn=ccg90.com&userId=0081ee18367243f8f7f11fa44c107bcc
204 No Content 0 B URL OPTIONS ccg90.com/wrr?z=9254409&p_rid=26f0b7fa-4c80-41d9-8969-429f4742a45d&rb=OiR-rKgPfyfiHLHSBTxfUrP73G2ijGYvpGhNhlHMMpzL7UU9IvNm7ZbSzwNHTf6-YweApnjNfxEc3Ob_mkftcJB22apbUZ3c9LRg8MSPjqbH4oClVLJqsUlH91vWpn4JjQSIbFq8WZ-qZGP30WJ6OZ_uJZByzIX4S7v_oidCNTghJtslIkSoPcH8zxEHwAWNCNFy2h-cj2NPHOiUqnh6Nxlwr_tvtDdomMdrFRB9vsk-0XJl7DgTsmN2qr8lBxG4Huz3Ks2VBT4eqRQD0iiaWap33YdQZsHtzjm1Eg==&dmn=ccg90.com&userId=0081ee18367243f8f7f11fa44c107bcc
IP
Requested by https://26efp.com/bkg/1keekufcyel6?ref=nablahd46.shop
Certificate IssuerLet's Encrypt
Subjectccg90.com
Fingerprint56:09:8B:A2:B0:CC:2D:94:BB:34:A2:E9:A2:FD:C7:53:D9:F4:20:83
ValidityWed, 23 Apr 2025 09:55:55 GMT - Tue, 22 Jul 2025 09:55:54 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /wrr?z=9254409&p_rid=26f0b7fa-4c80-41d9-8969-429f4742a45d&rb=OiR-rKgPfyfiHLHSBTxfUrP73G2ijGYvpGhNhlHMMpzL7UU9IvNm7ZbSzwNHTf6-YweApnjNfxEc3Ob_mkftcJB22apbUZ3c9LRg8MSPjqbH4oClVLJqsUlH91vWpn4JjQSIbFq8WZ-qZGP30WJ6OZ_uJZByzIX4S7v_oidCNTghJtslIkSoPcH8zxEHwAWNCNFy2h-cj2NPHOiUqnh6Nxlwr_tvtDdomMdrFRB9vsk-0XJl7DgTsmN2qr8lBxG4Huz3Ks2VBT4eqRQD0iiaWap33YdQZsHtzjm1Eg==&dmn=ccg90.com&userId=0081ee18367243f8f7f11fa44c107bcc HTTP/1.1
Host: ccg90.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://26efp.com/
Origin: https://26efp.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
server: nginx
date: Fri, 20 Jun 2025 22:56:10 GMT
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
access-control-allow-origin: https://26efp.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
GET be4235.rcr32.ams02.i8yz83pn.com/hls2/01/05160/1keekufcyel6_n/encryption.key?t=4MH12i3FuegRdBQIn0XJeOWk-mZ5wlgg_xwjVA3n_Mw&s=1750460165&e=10800&f=25802859&srv=52&asn=50304&sp=5500&p=
200 OK 16 B URL GET be4235.rcr32.ams02.i8yz83pn.com/hls2/01/05160/1keekufcyel6_n/encryption.key?t=4MH12i3FuegRdBQIn0XJeOWk-mZ5wlgg_xwjVA3n_Mw&s=1750460165&e=10800&f=25802859&srv=52&asn=50304&sp=5500&p=
IP
Requested by https://26efp.com/bkg/1keekufcyel6?ref=nablahd46.shop
Certificate IssuerLet's Encrypt
Subjectbe4235.rcr32.ams02.i8yz83pn.com
Fingerprint08:2E:6E:50:1F:6C:3C:40:46:96:50:01:A4:0B:BA:92:B6:07:E2:72
ValidityMon, 09 Jun 2025 13:59:44 GMT - Sun, 07 Sep 2025 13:59:43 GMT
Hash 518c1de7929a7709a89fda5e5bfacbde
7361301eb008b6663433d5532c07e3d3a6d0fbd7
de8fa3bf41189d5e5f649b6c4b1354eae9fe9e13d8c907f9633121ce9499b7c4
GET /hls2/01/05160/1keekufcyel6_n/encryption.key?t=4MH12i3FuegRdBQIn0XJeOWk-mZ5wlgg_xwjVA3n_Mw&s=1750460165&e=10800&f=25802859&srv=52&asn=50304&sp=5500&p= HTTP/1.1
Host: be4235.rcr32.ams02.i8yz83pn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://26efp.com
DNT: 1
Connection: keep-alive
Referer: https://26efp.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 20 Jun 2025 22:56:07 GMT
Content-Type: application/octet-stream
Content-Length: 16
Connection: keep-alive
Last-Modified: Sun, 19 Nov 2000 08:52:00 GMT
Expires: Sat, 21 Jun 2025 01:09:26 GMT
ETag: "5f693e80-10"
Access-Control-Allow-Origin: *
Cache-Control: max-age=259200, no-store, no-cache
Sprint-Cache: HIT
Accept-Ranges: bytes
GET my.rtmark.net/gid.js?userId=0081ee18367243f8f7f11fa44c107bcc
200 OK 65 B URL GET my.rtmark.net/gid.js?userId=0081ee18367243f8f7f11fa44c107bcc
IP
Requested by https://26efp.com/bkg/1keekufcyel6?ref=nablahd46.shop
Certificate IssuerGoogle Trust Services
Subjectmy.rtmark.net
Fingerprint61:93:FB:BF:25:C3:CE:7B:CB:69:5D:87:04:AA:ED:1B:35:8D:44:82
ValidityFri, 02 May 2025 11:10:51 GMT - Thu, 31 Jul 2025 12:10:47 GMT
Hash 6004c1b4f59f2cd6e7fdbd7a424111c4
26cc4c1b434384d76c64d0b60fb38b0ad844b17a
30359e6b2fe1c4e1829a026c30ec7aea2e364361887344a65604fc2525c61248
GET /gid.js?userId=0081ee18367243f8f7f11fa44c107bcc HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://26efp.com
DNT: 1
Connection: keep-alive
Referer: https://26efp.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 20 Jun 2025 22:56:08 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: https://26efp.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=0081ee18367243f8f7f11fa44c107bcc; expires=Sat, 20 Jun 2026 22:56:08 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 952edb951928712f-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET 0019x.com/?rb=OiR-rKgPfyfiHLHSBTxfUrP73G2ijGYvpGhNhlHMMpzL7UU9IvNm7ZbSzwNHTf6-YweApnjNfxEc3Ob_mkftcJB22apbUZ3c9LRg8MSPjqbH4oClVLJqsUlH91vWpn4JjQSIbFq8WZ-qZGP30WJ6OZ_uJZByzIX4S7v_oidCNTghJtslIkSoPcH8zxEHwAWNCNFy2h-cj2NPHOiUqnh6Nxlwr_tvtDdomMdrFRB9vsk-0XJl7DgTsmN2qr8lBxG4Huz3Ks2VBT4eqRQD0iiaWap33YdQZsHtzjm1Eg%3D%3D&request_ab2=0&zoneid=9254409&js_build=iclick-v1.1463.0&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=504&wiw=896&ww=1280&wh=1024&sah=1024&wx=0&wy=0&cw=896&wfc=3&pl=https%3A%2F%2F26efp.com%2Fbkg%2F1keekufcyel6%3Fref%3Dnablahd46.shop&drf=https%3A%2F%2Fbobstrmxiz.shop%2F&np=1&pt=0&nb=1&ng=0&ix=1&nw=1&tb=false&btz=UTC&bto=0&tt=4&wgl=llvmpipe&js_build=iclick-v1.1463.0&navlng=en-US&vsbl=true&pnt=0&pnrc=0&bs=26f0b7fa-4c80-41d9-8969-429f4742a45d&wasm=1&userId=0081ee18367243f8f7f11fa44c107bcc&m=link
200 OK 2.3 kB URL GET 0019x.com/?rb=OiR-rKgPfyfiHLHSBTxfUrP73G2ijGYvpGhNhlHMMpzL7UU9IvNm7ZbSzwNHTf6-YweApnjNfxEc3Ob_mkftcJB22apbUZ3c9LRg8MSPjqbH4oClVLJqsUlH91vWpn4JjQSIbFq8WZ-qZGP30WJ6OZ_uJZByzIX4S7v_oidCNTghJtslIkSoPcH8zxEHwAWNCNFy2h-cj2NPHOiUqnh6Nxlwr_tvtDdomMdrFRB9vsk-0XJl7DgTsmN2qr8lBxG4Huz3Ks2VBT4eqRQD0iiaWap33YdQZsHtzjm1Eg%3D%3D&request_ab2=0&zoneid=9254409&js_build=iclick-v1.1463.0&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=504&wiw=896&ww=1280&wh=1024&sah=1024&wx=0&wy=0&cw=896&wfc=3&pl=https%3A%2F%2F26efp.com%2Fbkg%2F1keekufcyel6%3Fref%3Dnablahd46.shop&drf=https%3A%2F%2Fbobstrmxiz.shop%2F&np=1&pt=0&nb=1&ng=0&ix=1&nw=1&tb=false&btz=UTC&bto=0&tt=4&wgl=llvmpipe&js_build=iclick-v1.1463.0&navlng=en-US&vsbl=true&pnt=0&pnrc=0&bs=26f0b7fa-4c80-41d9-8969-429f4742a45d&wasm=1&userId=0081ee18367243f8f7f11fa44c107bcc&m=link
IP
Requested by https://26efp.com/bkg/1keekufcyel6?ref=nablahd46.shop
Certificate IssuerLet's Encrypt
Subject0019x.com
Fingerprint1A:74:70:52:50:28:3C:32:E8:00:D5:10:3B:27:73:E4:1B:54:93:CE
ValidityTue, 22 Apr 2025 13:50:28 GMT - Mon, 21 Jul 2025 13:50:27 GMT
Hash 56d1108817557f399e35bc4d4463c1db
28d4383ff1b516befdad007d3e98d0ab9d81f7ac
925e0fa4379f6c905747f8a5c73216a4455a93342f684824663906a11e4f3d95
GET /?rb=OiR-rKgPfyfiHLHSBTxfUrP73G2ijGYvpGhNhlHMMpzL7UU9IvNm7ZbSzwNHTf6-YweApnjNfxEc3Ob_mkftcJB22apbUZ3c9LRg8MSPjqbH4oClVLJqsUlH91vWpn4JjQSIbFq8WZ-qZGP30WJ6OZ_uJZByzIX4S7v_oidCNTghJtslIkSoPcH8zxEHwAWNCNFy2h-cj2NPHOiUqnh6Nxlwr_tvtDdomMdrFRB9vsk-0XJl7DgTsmN2qr8lBxG4Huz3Ks2VBT4eqRQD0iiaWap33YdQZsHtzjm1Eg%3D%3D&request_ab2=0&zoneid=9254409&js_build=iclick-v1.1463.0&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=504&wiw=896&ww=1280&wh=1024&sah=1024&wx=0&wy=0&cw=896&wfc=3&pl=https%3A%2F%2F26efp.com%2Fbkg%2F1keekufcyel6%3Fref%3Dnablahd46.shop&drf=https%3A%2F%2Fbobstrmxiz.shop%2F&np=1&pt=0&nb=1&ng=0&ix=1&nw=1&tb=false&btz=UTC&bto=0&tt=4&wgl=llvmpipe&js_build=iclick-v1.1463.0&navlng=en-US&vsbl=true&pnt=0&pnrc=0&bs=26f0b7fa-4c80-41d9-8969-429f4742a45d&wasm=1&userId=0081ee18367243f8f7f11fa44c107bcc&m=link HTTP/1.1
Host: 0019x.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://26efp.com/
Origin: https://26efp.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 20 Jun 2025 22:56:09 GMT
content-type: application/json
x-trace-id: 0aa24282245e4104db96e519b9b03fe3
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
access-control-allow-origin: https://26efp.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
set-cookie: OAID=0081ee18367243f8f7f11fa44c107bcc; expires=Sat, 20 Jun 2026 22:56:09 GMT; path=/; secure; SameSite=None
oaidts=1750460169; expires=Sat, 20 Jun 2026 22:56:09 GMT; path=/; secure; SameSite=None
syncedCookie=true; expires=Fri, 27 Jun 2025 22:56:09 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
GET 6.adsco.re/
200 OK 45 B IP
Requested by https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint3B:64:1C:DA:8C:64:22:01:36:0F:54:7A:99:6E:AD:26:C2:EF:59:8B
ValidityMon, 23 Sep 2024 00:00:00 GMT - Mon, 29 Sep 2025 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 5b41cb22f84f645a103acc7bfbf084ff
bac3967b26d5ec4a0d09a580714e8219796816bd
709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc
GET / HTTP/1.1
Host: 6.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nablahd46.shop
DNT: 1
Connection: keep-alive
Referer: https://nablahd46.shop/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 20 Jun 2025 22:56:07 GMT
content-type: text/plain;charset=UTF-8
content-length: 45
access-control-allow-origin: https://nablahd46.shop
cache-control: private, max-age=10
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-max-age: 2592000
vary: Accept-Encoding
server: cloudflare
cf-ray: 952edb8ee8c256be-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET bebb6fb79c.f34aabcc0e.com/in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiIxMTg5NTgyMzcwMzE3MzQ4MjAwMCIsInRpbWV6b25lIjowLCJ2ZXIiOiIzLjE0MC4yIiwidGFnX2lkIjozNDA5NjEsInNjcmVlbl9yZXNvbHV0aW9uIjoiMTI4MHgxMDI0IiwiYWRibG9jayI6MCwidGltZXpvbmVfb2xzb24iOiJVVEMiLCJ1dG1fc291cmNlIjoiIiwidXRtX21lZGl1bSI6IiIsInV0bV9jYW1wYWlnbiI6IiIsInV0bV9jb250ZW50IjoiIiwibW0iOjAsImluaXRfc3RhcnRfbGF0ZW5jeSI6My4zOCwiaXNfdjIiOjAsImlzX3YyX2VtcHR5IjowfQ==
200 OK 0 B URL GET bebb6fb79c.f34aabcc0e.com/in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiIxMTg5NTgyMzcwMzE3MzQ4MjAwMCIsInRpbWV6b25lIjowLCJ2ZXIiOiIzLjE0MC4yIiwidGFnX2lkIjozNDA5NjEsInNjcmVlbl9yZXNvbHV0aW9uIjoiMTI4MHgxMDI0IiwiYWRibG9jayI6MCwidGltZXpvbmVfb2xzb24iOiJVVEMiLCJ1dG1fc291cmNlIjoiIiwidXRtX21lZGl1bSI6IiIsInV0bV9jYW1wYWlnbiI6IiIsInV0bV9jb250ZW50IjoiIiwibW0iOjAsImluaXRfc3RhcnRfbGF0ZW5jeSI6My4zOCwiaXNfdjIiOjAsImlzX3YyX2VtcHR5IjowfQ==
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
Certificate IssuerLet's Encrypt
Subjectbebb6fb79c.f34aabcc0e.com
Fingerprint24:A9:85:FD:88:1F:A3:CB:B0:8F:98:97:EE:95:62:88:E1:D3:DB:BF
ValidityTue, 17 Jun 2025 02:48:10 GMT - Mon, 15 Sep 2025 02:48:09 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiIxMTg5NTgyMzcwMzE3MzQ4MjAwMCIsInRpbWV6b25lIjowLCJ2ZXIiOiIzLjE0MC4yIiwidGFnX2lkIjozNDA5NjEsInNjcmVlbl9yZXNvbHV0aW9uIjoiMTI4MHgxMDI0IiwiYWRibG9jayI6MCwidGltZXpvbmVfb2xzb24iOiJVVEMiLCJ1dG1fc291cmNlIjoiIiwidXRtX21lZGl1bSI6IiIsInV0bV9jYW1wYWlnbiI6IiIsInV0bV9jb250ZW50IjoiIiwibW0iOjAsImluaXRfc3RhcnRfbGF0ZW5jeSI6My4zOCwiaXNfdjIiOjAsImlzX3YyX2VtcHR5IjowfQ== HTTP/1.1
Host: bebb6fb79c.f34aabcc0e.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nablahd46.shop
DNT: 1
Connection: keep-alive
Referer: https://nablahd46.shop/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 20 Jun 2025 22:56:07 GMT
content-length: 0
server: nginx/1.18.0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
x-cdn-host-id: ah1747
X-Firefox-Spdy: h2
POST adsco.re/p
200 OK 1.2 kB IP
Requested by https://nablahd46.shop/azgin-sarisin-arkadasinin-kocasini-bastan-cikartiyor-turkce-altyazili/
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint3B:64:1C:DA:8C:64:22:01:36:0F:54:7A:99:6E:AD:26:C2:EF:59:8B
ValidityMon, 23 Sep 2024 00:00:00 GMT - Mon, 29 Sep 2025 23:59:59 GMT
File type ASCII text, with very long lines (1212), with no line terminators
Hash ef8c10060e45f16d9963ae1fcfd442be
9ced9984b28ec576e7555e2b53ae868d3723726d
b90ef02951f066083a51a7515c6ec86f0b568f6c6c9a0e816cd4ed36ecef1cc5
POST /p HTTP/1.1
Host: adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 1821
Origin: https://nablahd46.shop
DNT: 1
Connection: keep-alive
Referer: https://nablahd46.shop/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 20 Jun 2025 22:56:08 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
AS-P-1: OK nyc123
AS-P-2: OK
AS-P-3: OK
Access-Control-Max-Age: 2592000
Cache-Control: no-transform
Accept-CH: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
Access-Control-Allow-Origin: https://nablahd46.shop
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
POST ccg90.com/wrr?z=9254409&p_rid=26f0b7fa-4c80-41d9-8969-429f4742a45d&rb=OiR-rKgPfyfiHLHSBTxfUrP73G2ijGYvpGhNhlHMMpzL7UU9IvNm7ZbSzwNHTf6-YweApnjNfxEc3Ob_mkftcJB22apbUZ3c9LRg8MSPjqbH4oClVLJqsUlH91vWpn4JjQSIbFq8WZ-qZGP30WJ6OZ_uJZByzIX4S7v_oidCNTghJtslIkSoPcH8zxEHwAWNCNFy2h-cj2NPHOiUqnh6Nxlwr_tvtDdomMdrFRB9vsk-0XJl7DgTsmN2qr8lBxG4Huz3Ks2VBT4eqRQD0iiaWap33YdQZsHtzjm1Eg==&dmn=ccg90.com&userId=0081ee18367243f8f7f11fa44c107bcc
204 No Content 0 B URL POST ccg90.com/wrr?z=9254409&p_rid=26f0b7fa-4c80-41d9-8969-429f4742a45d&rb=OiR-rKgPfyfiHLHSBTxfUrP73G2ijGYvpGhNhlHMMpzL7UU9IvNm7ZbSzwNHTf6-YweApnjNfxEc3Ob_mkftcJB22apbUZ3c9LRg8MSPjqbH4oClVLJqsUlH91vWpn4JjQSIbFq8WZ-qZGP30WJ6OZ_uJZByzIX4S7v_oidCNTghJtslIkSoPcH8zxEHwAWNCNFy2h-cj2NPHOiUqnh6Nxlwr_tvtDdomMdrFRB9vsk-0XJl7DgTsmN2qr8lBxG4Huz3Ks2VBT4eqRQD0iiaWap33YdQZsHtzjm1Eg==&dmn=ccg90.com&userId=0081ee18367243f8f7f11fa44c107bcc
IP
Requested by https://26efp.com/bkg/1keekufcyel6?ref=nablahd46.shop
Certificate IssuerLet's Encrypt
Subjectccg90.com
Fingerprint56:09:8B:A2:B0:CC:2D:94:BB:34:A2:E9:A2:FD:C7:53:D9:F4:20:83
ValidityWed, 23 Apr 2025 09:55:55 GMT - Tue, 22 Jul 2025 09:55:54 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /wrr?z=9254409&p_rid=26f0b7fa-4c80-41d9-8969-429f4742a45d&rb=OiR-rKgPfyfiHLHSBTxfUrP73G2ijGYvpGhNhlHMMpzL7UU9IvNm7ZbSzwNHTf6-YweApnjNfxEc3Ob_mkftcJB22apbUZ3c9LRg8MSPjqbH4oClVLJqsUlH91vWpn4JjQSIbFq8WZ-qZGP30WJ6OZ_uJZByzIX4S7v_oidCNTghJtslIkSoPcH8zxEHwAWNCNFy2h-cj2NPHOiUqnh6Nxlwr_tvtDdomMdrFRB9vsk-0XJl7DgTsmN2qr8lBxG4Huz3Ks2VBT4eqRQD0iiaWap33YdQZsHtzjm1Eg==&dmn=ccg90.com&userId=0081ee18367243f8f7f11fa44c107bcc HTTP/1.1
Host: ccg90.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://26efp.com/
content-type: application/json
Content-Length: 2697
Origin: https://26efp.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
server: nginx
date: Fri, 20 Jun 2025 22:56:10 GMT
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
access-control-allow-origin: https://26efp.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
104.21.12.182
45.133.44.25
139.45.197.106
94.130.198.6
95.173.205.15
185.248.171.139
185.200.116.60
0.0.0.0