{"report_id":"b0417498-ca5e-4590-b4e0-601e4adff9ff","version":6,"status":"done","tags":[],"date":"2025-12-21T23:32:10Z","url":{"schema":"http","addr":"1turske9.com/","fqdn":"1turske9.com","domain":"1turske9.com","tld":"com"},"ip":{"addr":"104.21.27.125","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"1turske9.com/","fqdn":"1turske9.com","domain":"1turske9.com","tld":"com"},"title":"Turske9 – Turske Serije Sa Prevodom (GLEDAJ) ❤️","dom":{"size":15688,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (7595)","md5":"1404f46b9f6a2f0a6b39093cd0859333","sha1":"619eba63c3ae082cc9da09f16b3b1afb233c31ab","sha256":"edcb09d4aa87dc0e10f0b72bf952baa9d9d1541b309e45e4a692a300b81d8961","sha512":"eadcc82efc1b458af7ad2f65495366c3b8837c68f2de2de4d8ef7286bad8640cae1681c61d7eae7a23901e7e3b84eceb64d76fb555bfdb1b137e5f5305a51a19","ssdeep":"192:OX1YzXciFm6Bm+hDS5tCCXN9bcLcW48h8LwWPqorEDWS6P18CwicDJOJqMRTeXei:1NI+AlcaNLPPqP566Hqi","tlshash":"b562c823a254722e70383e6fac9065ee7105f06efb725fd4f4f99ab5c24a1c51dc1a48","dom_hash":"domhashf97dc345c4fe91cbb7ff289add036fe6","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"1turske9.com/","fqdn":"1turske9.com","domain":"1turske9.com","tld":"com"},"ip":{"addr":"104.21.27.125","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-25T23:32:10Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"hm.yelvercloture.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.worldlyscene.com","ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2025-12-12","domain_rank":0,"first_seen":"2025-12-18T10:41:24.068519Z","last_seen":"2025-12-18T10:41:24.068519Z","alert_count":0,"request_count":2,"received_data":208208,"sent_data":908,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"1turske9.com","ip":{"addr":"172.67.142.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-08-18","domain_rank":124386,"first_seen":"2023-08-21T15:45:23Z","last_seen":"2025-11-05T11:49:56.608107Z","alert_count":0,"request_count":11,"received_data":592094,"sent_data":5641,"comment":"","tags":null,"fingerprints":[{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"jQuery:1.12.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Yoast SEO:21.1","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"ShareThis","description":"ShareThis provides free engagement and growth tools (e.g., share buttons, follow buttons, and reaction buttons) for site owners.","website":"https://sharethis.com","common_platform_enumeration":"","icon":"ShareThis.png","categories":["Widgets"]},{"name":"WordPress:6.3.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"upset-rent.com","ip":{"addr":"88.85.94.250","port":443,"asn":35415,"as":"Webzilla B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2024-06-17","domain_rank":339055,"first_seen":"2024-06-20T12:50:20Z","last_seen":"2025-12-18T11:40:23.602028Z","alert_count":0,"request_count":2,"received_data":39811,"sent_data":1084,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-12-21T22:17:07.06462Z","alert_count":0,"request_count":2,"received_data":44970,"sent_data":951,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-12-21T22:17:33.83847Z","alert_count":0,"request_count":1,"received_data":434124,"sent_data":433,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-12-21T22:20:20.869237Z","alert_count":0,"request_count":2,"received_data":158123,"sent_data":918,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"platform.pubadx.one","ip":{"addr":"104.26.11.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-01-17","domain_rank":172120,"first_seen":"2024-06-24T21:19:56Z","last_seen":"2025-12-16T18:28:01.137428Z","alert_count":0,"request_count":4,"received_data":25168,"sent_data":1796,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-12-21T22:14:03.270461Z","alert_count":0,"request_count":8,"received_data":254512,"sent_data":4389,"comment":"","tags":null,"fingerprints":null},{"fqdn":"static.a-ads.com","ip":{"addr":"136.243.55.84","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2012-07-07","domain_rank":212861,"first_seen":"2013-06-01T16:47:05Z","last_seen":"2025-12-17T06:00:39.463784Z","alert_count":0,"request_count":1,"received_data":670126,"sent_data":470,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"ad.a-ads.com","ip":{"addr":"136.243.55.84","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2012-07-07","domain_rank":80794,"first_seen":"2013-04-19T21:54:57Z","last_seen":"2025-12-20T02:15:37.953097Z","alert_count":0,"request_count":1,"received_data":16113,"sent_data":531,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Phusion Passenger","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]}]},{"fqdn":"hm.yelvercloture.com","ip":{"addr":"23.109.253.109","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-06-06","domain_rank":0,"first_seen":"2025-08-17T22:56:11.202722Z","last_seen":"2025-11-05T11:49:56.518423Z","alert_count":1,"request_count":1,"received_data":1441,"sent_data":426,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"imp9.pubadx.one","ip":{"addr":"104.26.11.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-01-17","domain_rank":185792,"first_seen":"2024-07-27T04:34:07Z","last_seen":"2025-12-15T13:23:30.97397Z","alert_count":0,"request_count":2,"received_data":1088,"sent_data":1085,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"1turske9.com/wp-content/themes/simplicity/assets/js/all.js?ver=1.2.1","fqdn":"1turske9.com","domain":"1turske9.com","tld":"com"},"ip":{"addr":"172.67.142.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"07e569f1b73a4403ab2b9160c7198ede","sha1":"5bef9ea725d9dfcf1ba4faf33c16e53b8aaf3726","sha256":"e4fb81bada7b24c750432eb3151ea42abc9a895ba8c470a52122fae49f3f2c57","sha512":"c0c023358055a41f418e42610a5374e2e0d467b11b7fab670e1d94226a52810e819258ab2573a638d39961baac8c86fa01619503b8822bf7f8d6e52d6cfc5c19","ssdeep":"768:16GThOPLso675bO85R1o/ZxfHvRPnp1V3I+pRMUplS+nrdH14YvsU5sqZXK6yJD4:1P5uvRN/XKGR8a4KH","tlshash":"38e281c13bc0f54a03975b7b332bb0f6f11a6d99768448cae140bc94f5ada06fae4635","size":32158,"data":"","first_seen":"2025-08-17T22:56:16.974616Z","last_seen":"2026-02-27T23:31:30.167669Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1turske9.com/wp-content/plugins/searchwp-live-ajax-search/assets/javascript/dist/script.min.js?ver=1.6.2","fqdn":"1turske9.com","domain":"1turske9.com","tld":"com"},"ip":{"addr":"172.67.142.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"67a0cc4989f1a3721630c21eb00f52e2","sha1":"cdcbf5f7b0b4430efdff250c89a1b1934957fa04","sha256":"aae323aae1b82ab324f2f2093cb59bef2b7c70399101ed51ee66adcf1b7e2aec","sha512":"d2b4c582d00bf2c28db9699224a899cc400f6dcaf64d447c40ae9d5a5576e2be6603ab5f56d0bc30bff6dcb8e8725c5d43fcc3f5f3afa7a7aec173e57595e20f","ssdeep":"192:IR0xdrQRoaah/TWowUMWkmMRhcNwLGS5hsjsxhtgt+qYbs0MMf:g8drjZTW6MmgHhOtVUs0MMf","tlshash":"e732a56877049cb611779ae5b87e3b112223fe18388a496cb5fce9d44874d28313eb3d","size":11078,"data":"","first_seen":"2023-03-07T13:03:46Z","last_seen":"2026-04-29T15:34:31.399426Z","times_seen":126,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1turske9.com/","fqdn":"1turske9.com","domain":"1turske9.com","tld":"com"},"ip":{"addr":"172.67.142.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b04dc376d99c9e39d5bc885c4ea75ae0","sha1":"226e398b0dc1bb6e56a98a3dc7e492ba72301716","sha256":"072c5e15dcb0bd4d0a0c052f66616466add505e8f615b3edf25840c5b13ca394","sha512":"777abd18970fb3c9fe28ada4823a171eabf716b88727d2fe0da47da3b6f0531966aeab840da8d0af2b324f2ac159eaeaacd9686542a4ce8bfbe6f0e0046b9a10","ssdeep":"","tlshash":"2bf0dddf4351193694212a355d4982cca630295ab683c6f0ccb884d43170aa5163ebfd","size":642,"data":"","first_seen":"2025-10-02T23:50:42.580673Z","last_seen":"2026-02-27T23:31:30.201908Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1turske9.com/","fqdn":"1turske9.com","domain":"1turske9.com","tld":"com"},"ip":{"addr":"172.67.142.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f441ed54c2f18d5ff6da5373490351cd","sha1":"70e6f73dcf3968a84052682619baf955a7890fef","sha256":"123764beaed44638a629ea68c0816c73845b0a9ea75991e22bb66df2ee280e3b","sha512":"3db1f32862a99bced62e3b9811adf74a538ba639820c8a6a6ee39ecb924dd4db3b63eda304879f3fc124b5575a12c60fc5a93004323934d8cc4a586f044d478d","ssdeep":"","tlshash":"5ae072089854ea21115f107bba39c614b1b22044f855d958d998f6122b60bbb3ceace4","size":312,"data":"","first_seen":"2025-10-02T23:50:42.57744Z","last_seen":"2026-02-27T23:31:30.200805Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upset-rent.com/bOXjV/sLd.Gklq0bYsWHdNigYmWK5JuzZCXuIz/xeimD9surZ/UGlskrP/TfUK0NMlTJE_xYNnTRA-taNNTPQMxHMQTqEn1UMeQs","fqdn":"upset-rent.com","domain":"upset-rent.com","tld":"com"},"ip":{"addr":"88.85.94.250","port":443,"asn":35415,"as":"Webzilla B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"4a15a00123f4294b6236214ea9eb661d","sha1":"8103fbfeaaf03450519dd1e8cd53a7bef653bf4b","sha256":"903d8cfdcc6cf2417b728126d55f8961b1df4c4740c1706536599e59dfe3c982","sha512":"f470f130ffc26cbb5e7131f8512714f63e0fc994aac3f69add4d54b031ff1ca3102e5e6e6e49787c6640b9902f793bd1e170418519b41ec544362f789230e146","ssdeep":"768:bZhdZg7J05MLfTF9dFaQNp8JY29c6SboEBkleZ2YoOcLhHpPTgLgooDMiG82IGOZ:bZ1g7JFLqQNp8Jr9c6SboEBkleZ2qcL9","tlshash":"fb03b6c8b1c3642642eb507d713b7208b23a5465542db028bc79c8e4bcb9e9f8577bbd","size":38480,"data":"","first_seen":"2025-12-21T23:32:13.973324Z","last_seen":"2025-12-21T23:32:13.973324Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hm.yelvercloture.com/tpl6nKemKJdbH/125852","fqdn":"hm.yelvercloture.com","domain":"yelvercloture.com","tld":"com"},"ip":{"addr":"23.109.253.109","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"f7a2939527fd9e68723da600e96d76bd","sha1":"a9e717b6364d2895ee0a716050db32ca0ef1bb42","sha256":"d810f5146f4cd1517512a6e31946e764a73c58fb01427aae88d42cc2ae28718a","sha512":"e6956ec633c76eb3ebc408528f950b81373238cd1d5b9fff5ddd97089ea14a1ff5934f23769bac5d93cc4cdb6a1fbc4ce69baebfb940a55d8a7a89caccaf92b5","ssdeep":"","tlshash":"ec300000003000000000000000000000000c0000000000000000000000000c00000000","size":5,"data":"","first_seen":"2023-03-07T01:14:39Z","last_seen":"2026-05-10T14:28:41.257977Z","times_seen":14368,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1turske9.com/","fqdn":"1turske9.com","domain":"1turske9.com","tld":"com"},"ip":{"addr":"172.67.142.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b527d1f3ff833a04b4d702ccedc15f32","sha1":"8da5cea7dcab2790082b65e197be3b15af722c31","sha256":"8059458121c35277e8d7d745fc949de8612bacae38e7d9380f08632952107980","sha512":"a67f0e426161fcfa9841f265213155a1d81a32f42ba361f6e7af072fa53020b349f73329583c7d7188de2e91b392dada3f254e7cb356b81aa2cecbbb97bdb759","ssdeep":"","tlshash":"ebc02b8c311a0c7081fb27008b3fb600f0023214b4d16935480a33845d30f17d744818","size":153,"data":"","first_seen":"2025-08-17T22:56:17.003Z","last_seen":"2026-02-27T23:31:30.194514Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"platform.pubadx.one/pubadx-ad.js","fqdn":"platform.pubadx.one","domain":"pubadx.one","tld":"one"},"ip":{"addr":"104.26.11.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bd3e13b0dc188d48b9790ed35c690e55","sha1":"b7731c8b1205c5bed13640cec85e091a3c101186","sha256":"19477acfde638830635a50cce0a65c1f4c2845a1a89500d333f8bbcc6b813477","sha512":"3b7be979c83a562f82b9e81970a5ac8967ca6583ed564b5036f437c9716b2adf021a4a0d0a0bd99fcca913709f2c1ddcbe02c5a80d69a80540ec49dd180d004c","ssdeep":"192:+Pup9HdW34cMgcf+gYsyC4q7WzuOXa09yssF8Q7ne6MIGTHeynC:8usgONaVN7d","tlshash":"59020d2e19f351399163b06aabbfd6183535a0032905dc463e8cc748af94d259ef6fec","size":8533,"data":"","first_seen":"2025-11-26T12:19:50.455112Z","last_seen":"2026-03-19T22:01:16.315789Z","times_seen":216,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1turske9.com/","fqdn":"1turske9.com","domain":"1turske9.com","tld":"com"},"ip":{"addr":"172.67.142.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9ab5105ae045ccc61532ba20ba36bac7","sha1":"557f1d22a24fbb097c819b9d9dd2a1e98511b1f2","sha256":"27e1e125afab46c3a8ec426704e7f2ea26f53be363bf7842e1fae00e2c0c9bef","sha512":"a22f600886ebaf8cba238a453b96eef11a61d073574b1a2b12411e5e0b3de6c5db9961f6a59c8a431dd043abc0b9f1a11668bf13fd84bdec260e13950adf0eff","ssdeep":"","tlshash":"cad05bd573a2063474f50e568f17a39f3ca171f52a112050328d54545225a8bb596dc6","size":260,"data":"","first_seen":"2025-08-17T22:56:17.006156Z","last_seen":"2026-02-27T23:31:30.195644Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1turske9.com/","fqdn":"1turske9.com","domain":"1turske9.com","tld":"com"},"ip":{"addr":"172.67.142.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-05-10T15:26:48.18126Z","times_seen":650027,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/1.12.4/jquery.min.js?ver=1.1.1","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f252523d4af0b478c810c2547a63e19","sha1":"5a9dcfbef655a2668e78baebeaa8dc6f41d8dabb","sha256":"668b046d12db350ccba6728890476b3efee53b2f42dbb84743e5e9f1ae0cc404","sha512":"8c6b0c1fcde829ef5ab02a643959019d4ac30d3a7cc25f9a7640760fefff26d9713b84ab2e825d85b3b2b08150265a10143f82e05975accb10645efa26357479","ssdeep":"1536:GYE1JVoiB9JqZdXXe2pD3PgoIiulrUdTJSFk/zkZ4HjL5o8srOaS9TwD6b7/Jp9i:t4J+R3jL5TCOauTwD6FdnCVQNea98HrV","tlshash":"8893d7d9b6d6706287b734a851bf410bb17aa8eab40c4c60f058c8e47e74e9d507bf2d","size":97163,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-05-10T15:04:21.571012Z","times_seen":74661,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"platform.pubadx.one/pubadx-ad.js","fqdn":"platform.pubadx.one","domain":"pubadx.one","tld":"one"},"ip":{"addr":"104.26.11.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bd3e13b0dc188d48b9790ed35c690e55","sha1":"b7731c8b1205c5bed13640cec85e091a3c101186","sha256":"19477acfde638830635a50cce0a65c1f4c2845a1a89500d333f8bbcc6b813477","sha512":"3b7be979c83a562f82b9e81970a5ac8967ca6583ed564b5036f437c9716b2adf021a4a0d0a0bd99fcca913709f2c1ddcbe02c5a80d69a80540ec49dd180d004c","ssdeep":"192:+Pup9HdW34cMgcf+gYsyC4q7WzuOXa09yssF8Q7ne6MIGTHeynC:8usgONaVN7d","tlshash":"59020d2e19f351399163b06aabbfd6183535a0032905dc463e8cc748af94d259ef6fec","size":8533,"data":"","first_seen":"2025-11-26T12:19:50.455112Z","last_seen":"2026-03-19T22:01:16.315789Z","times_seen":216,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1turske9.com/","fqdn":"1turske9.com","domain":"1turske9.com","tld":"com"},"ip":{"addr":"172.67.142.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e66edaf0401042831f948de20e8bf656","sha1":"371719b2a275a1db29a72d743833534c481e7f02","sha256":"b271ef48c3a12f99bc7040a96c6202c7cdad8ba0f4d5cae1f416f59bc219d7be","sha512":"fe48abbb67caf901a1143c45a8cccd89db98ec9ebeada3de23c42f5a5b33ebdfac9f937ab0a8b02f31ef91867273d3454d7bca4ab45a232d2cfef5fadf00f5b9","ssdeep":"","tlshash":"7cd02b9973a2023435f90a668f13b38e3c9571b81e003010329d40545221a8bb4a6cc2","size":260,"data":"","first_seen":"2025-08-17T22:56:17.007424Z","last_seen":"2026-02-27T23:31:30.19747Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-ZM2B5ECW37","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"420099d25cd3b8aaedcb1b059140002e","sha1":"4e9f3174cddbc118191b3cc740e064faf8893f65","sha256":"c1c96c65ade59257785f26cbcbff99082ec5dd3be197ee6145a706614321ec3b","sha512":"d2eb43b6321743580501d43890730c973a2f4a58340448bb513e652693b1ecf8066f5598c32a5ad28afb83746808b3713915489018ca9f263e217907e3a6e7ac","ssdeep":"6144:z/Ie7ma2bulKY/1u99xHDmHYmyBFzvnsyRO6jJWoNPad4FpC1xY:cC8bu7/1mbrnsy39WbMpb","tlshash":"f1941ace73d674269396e078503f018ba57b29e2b45cc896f189cce42e7469a4237f7c","size":433520,"data":"","first_seen":"2025-12-21T23:32:13.997947Z","last_seen":"2025-12-21T23:32:13.997947Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.worldlyscene.com/ecc874/8966457a04ee.js","fqdn":"www.worldlyscene.com","domain":"worldlyscene.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3506bf9b7d2c08e9aea608c0311b4040","sha1":"470e7f6145954b7702c27e4054369a7dce5f4cfc","sha256":"068cc9fe85569daeff901a97c0f27da5fac494439c874d30cd51db114ada48c1","sha512":"bf54eae04fdd232f0e02f0f2403b7d6183de4b37481f4beae058e139e2f1bbb353e3a2210ec9cd67703520ebe36b1049891edeb4bbc3a6a78e097224c8c52d72","ssdeep":"1536:rM+iZ3YOYuyx6PUQwRxcs8P3nhkQ8vL7T7Q6eGozzwVEnHzHRbPvh:OijxEQq3P5Enne9zkWHLT","tlshash":"61a33461350b64fd2ad0c1e7eb6720886c295810e469cca1ecd1e7c7d6eb8e3429b5f7","size":103673,"data":"","first_seen":"2025-12-18T10:41:31.094263Z","last_seen":"2025-12-22T07:48:27.567259Z","times_seen":105,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1turske9.com/","fqdn":"1turske9.com","domain":"1turske9.com","tld":"com"},"ip":{"addr":"172.67.142.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-05-10T14:31:35.146576Z","times_seen":217875,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1turske9.com/","fqdn":"1turske9.com","domain":"1turske9.com","tld":"com"},"ip":{"addr":"172.67.142.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e9fe58a5ea385f5733032f5e6e7ee6fe","sha1":"14b9a1bbc89e82f7478d510b62c177dec685a8f2","sha256":"5a531f1bd38c170818e5374e6550c415ad4961129e9aa31029ff0f5874e615d1","sha512":"47b7c0d697509b6c1a9147762b255ebcd4cd58f51f187d7358075618ba446f3681a5c34be4c3a77e8a7d13dc9d6cb86ed7adc236edbf80ed1e7a603a827f44fe","ssdeep":"","tlshash":"dcc002b4dfede51a90cadb31010c28c4e21ae42e0844e784ae5088425cf81a46f06ba3","size":161,"data":"","first_seen":"2023-03-07T13:03:46Z","last_seen":"2026-05-09T04:12:12.986362Z","times_seen":108,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1turske9.com/","fqdn":"1turske9.com","domain":"1turske9.com","tld":"com"},"ip":{"addr":"172.67.142.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b37e3147097ef46c6ad72d19b5a09ce5","sha1":"3f6c159d7f4eaec20551bbcd11ffb32c007efda8","sha256":"2591a2bb8cbbd5d457a8f915d55e18370e95d83f5e8c4bcde2d7aa5e959042f2","sha512":"2e50ec2a256ac4f54b7b379db0af23006c20e614223f8edeee1096dabf1384497c15d454209c9afc26bebdf7654cecd0fbf7fa24779d740237a8429162812370","ssdeep":"","tlshash":"c221f122a6011d6e91339bdb36973c1398bfb049af9b0944d6fc451c2996e3c018ba5c","size":1380,"data":"","first_seen":"2025-08-17T22:56:17.008925Z","last_seen":"2026-02-27T23:31:30.203058Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1turske9.com/","fqdn":"1turske9.com","domain":"1turske9.com","tld":"com"},"ip":{"addr":"172.67.142.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"46094c933b40318a494a933f444b5ba2","sha1":"bde29b1a4f4f260dfd87377aabbf8261c5ad52a8","sha256":"63ab1a2305ddb37791814da4ada94d584a730c333af51a6eaeb4e177bab2630e","sha512":"4147b9ba8443110bd3918dcf8dcde3bf3167165724416cddb563e0eeeaf1f0606102c4b834c383ccd6bb8e5db628d8b344e4d8672d1c61d9320d08100f7bbbce","ssdeep":"","tlshash":"2111865a667405360b510972c8a1c3dabe3f0b0d11438047b41c94f83aa89ee736a7ef","size":1089,"data":"","first_seen":"2025-03-07T07:54:34.289833Z","last_seen":"2026-02-27T23:31:30.19955Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"1turske9.com/","fqdn":"1turske9.com","domain":"1turske9.com","tld":"com"},"ip":{"addr":"172.67.142.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-21T23:31:47.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1turske9.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Nov 2025 20:00:48 GMT","end":"Tue, 17 Feb 2026 21:00:18 GMT"},"fingerprint":{"sha1":"83:2B:A4:97:65:EB:D6:16:B4:3F:A8:95:FC:87:D0:B7:FB:51:AE:17","sha256":"92:9A:86:80:67:CB:5F:7A:5A:46:BB:9E:74:86:7E:3A:BF:FB:FF:EA:99:58:E9:45:38:04:67:EF:6C:5F:CB:5C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 1turske9.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 23:31:47 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlink: \u003chttps://1turske9.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://1turske9.com/wp-json/wp/v2/pages/24\u003e; rel=\"alternate\"; type=\"application/json\", \u003chttps://1turske9.com/\u003e; rel=shortlink\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-cache: HIT From 1turske9.com\r\nnginx-cache: HIT\r\nlast-modified: Sunday, 21-Dec-2025 23:31:47 GMT\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OOoR2bEfUu1QOraU3xAIlhpUuTVfYcTu%2FFBXJ3vUK%2Ba4pBP10n9iV%2FllB%2FNiz620AAsFFM2ssWOWih6vlL4WXZOq6ZMVf8GbiEzm%2Bw%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9b1b2ccc3c5e783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"jQuery:1.12.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Yoast SEO:21.1","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"ShareThis","description":"ShareThis provides free engagement and growth tools (e.g., share buttons, follow buttons, and reaction buttons) for site owners.","website":"https://sharethis.com","common_platform_enumeration":"","icon":"ShareThis.png","categories":["Widgets"]},{"name":"WordPress:6.3.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":34800,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9462), with CRLF, LF line terminators","md5":"c019b5cfe50a5e95da43f900648830e3","sha1":"e0c67841a725a5576ca182655abb349fdceff2e3","sha256":"528783bbb0de06fe81fa590ad282f878cb89d280969280c9b3e11eac642aa7f2","sha512":"93d27dbfa0dc3b6140cc6bf6544795e7cbe9af28eda1d8cafa07348f758117c150a2e88df55cc8c57ebc6fc554f5d4d8100d24f2183154115b3851348fd38d5b","ssdeep":"768:FV0ZdapNDn830XRBYp8Zy+G87lLNVWF59x7PPx2a78K:sapJ8752a78K","tlshash":"0bf2c4a2655c5037561ea78c9154f328f6e6c205cf06ae5233fd329cefd6fa109ba10e","first_seen":"2025-08-17T22:56:16.979718Z","last_seen":"2026-01-18T23:32:09.95292Z","times_seen":9,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":22,"dns":1,"connect":1,"send":0,"wait":91,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upset-rent.com/bOXjV/sLd.Gklq0bYsWHdNigYmWK5JuzZCXuIz/xeimD9surZ/UGlskrP/TfUK0NMlTJE_xYNnTRA-taNNTPQMxHMQTqEn1UMeQs","fqdn":"upset-rent.com","domain":"upset-rent.com","tld":"com"},"ip":{"addr":"88.85.94.250","port":443,"asn":35415,"as":"Webzilla B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1turske9.com/","date":"2025-12-21T23:31:48.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"upset-rent.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Nov 2025 00:57:07 GMT","end":"Sat, 31 Jan 2026 00:57:06 GMT"},"fingerprint":{"sha1":"50:29:54:83:DD:76:CC:AA:15:7E:F8:5D:CA:69:77:02:8B:26:66:F5","sha256":"DE:F7:DE:7B:BB:D4:4D:C9:50:6B:B9:E8:8D:E1:A8:C5:9A:26:D9:BA:70:46:02:84:E8:FA:DF:C7:7D:AB:1C:32"}}},"request":{"raw":"GET /bOXjV/sLd.Gklq0bYsWHdNigYmWK5JuzZCXuIz/xeimD9surZ/UGlskrP/TfUK0NMlTJE_xYNnTRA-taNNTPQMxHMQTqEn1UMeQs HTTP/1.1\r\nHost: upset-rent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1turske9.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 21 Dec 2025 23:31:48 GMT\r\ncontent-type: application/javascript\r\nexpires: Mon, 26 Jul 2011 05:00:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\naccept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64\r\nlast-modified: Sun, 21 Dec 2025 23:31:48 GMT\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-origin: https://1turske9.com\r\naccess-control-allow-methods: GET\r\nset-cookie: uniqCookie=961343bea5014cbf861c38ab72633ebb; max-age=1768951908; path=/\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38480,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (22811)","md5":"4a15a00123f4294b6236214ea9eb661d","sha1":"8103fbfeaaf03450519dd1e8cd53a7bef653bf4b","sha256":"903d8cfdcc6cf2417b728126d55f8961b1df4c4740c1706536599e59dfe3c982","sha512":"f470f130ffc26cbb5e7131f8512714f63e0fc994aac3f69add4d54b031ff1ca3102e5e6e6e49787c6640b9902f793bd1e170418519b41ec544362f789230e146","ssdeep":"768:bZhdZg7J05MLfTF9dFaQNp8JY29c6SboEBkleZ2YoOcLhHpPTgLgooDMiG82IGOZ:bZ1g7JFLqQNp8Jr9c6SboEBkleZ2qcL9","tlshash":"fb03b6c8b1c3642642eb507d713b7208b23a5465542db028bc79c8e4bcb9e9f8577bbd","first_seen":"2025-12-21T23:32:13.973324Z","last_seen":"2025-12-21T23:32:13.973324Z","times_seen":1,"resource_available":true,"data":null}},"time_used":272,"timings":{"blocked":97,"dns":34,"connect":17,"send":0,"wait":72,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ad.a-ads.com/2258717?size=300x250","date":"2025-12-21T23:31:48.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ad.a-ads.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 21 Dec 2025 23:31:48 GMT\r\ndate: Sun, 21 Dec 2025 23:31:48 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10108,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e85517dadd43448782d60d7f207fddce","sha1":"6cd31f870727ba8090fac9602b42524b4139a619","sha256":"88fbd0b95222be288587a149c324189ecbd8de0d6f0c94f528ec53857e52b66c","sha512":"5edc78df5bb062a9a2e1ea6724c14dd7eb80d77ea0fa9572de4bb0d52bbd0d163815b08a1ae77084f99fbefbb07715da1c61f0bb36fb498710c91387792955f8","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGx:vXuM0p2+4","tlshash":"04227792002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T18:13:11.065101Z","last_seen":"2026-05-10T15:26:30.440449Z","times_seen":25580,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1turske9.com/wp-content/plugins/searchwp-live-ajax-search/assets/javascript/dist/script.min.js?ver=1.6.2","fqdn":"1turske9.com","domain":"1turske9.com","tld":"com"},"ip":{"addr":"172.67.142.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1turske9.com/","date":"2025-12-21T23:31:47.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1turske9.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Nov 2025 20:00:48 GMT","end":"Tue, 17 Feb 2026 21:00:18 GMT"},"fingerprint":{"sha1":"83:2B:A4:97:65:EB:D6:16:B4:3F:A8:95:FC:87:D0:B7:FB:51:AE:17","sha256":"92:9A:86:80:67:CB:5F:7A:5A:46:BB:9E:74:86:7E:3A:BF:FB:FF:EA:99:58:E9:45:38:04:67:EF:6C:5F:CB:5C"}}},"request":{"raw":"GET /wp-content/plugins/searchwp-live-ajax-search/assets/javascript/dist/script.min.js?ver=1.6.2 HTTP/1.1\r\nHost: 1turske9.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1turske9.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 21 Dec 2025 23:31:47 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 20 Mar 2022 23:25:16 GMT\r\nvary: Accept-Encoding\r\nexpires: Wed, 24 Dec 2025 21:44:15 GMT\r\ncache-control: public, max-age=2678400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nage: 352052\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nzr8Xvp8s2w9h66i%2BQuFgsdDq2KRXxwirH7MqOByr3dml25vrABXizHZwdrHjjOIGrCU3kr%2BJ38tilU5UYeLlYE%2FF1yuJCrXsqE%3D\"}]}\r\ncf-ray: 9b1b2cce5ed67129-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11078,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11077)","md5":"67a0cc4989f1a3721630c21eb00f52e2","sha1":"cdcbf5f7b0b4430efdff250c89a1b1934957fa04","sha256":"aae323aae1b82ab324f2f2093cb59bef2b7c70399101ed51ee66adcf1b7e2aec","sha512":"d2b4c582d00bf2c28db9699224a899cc400f6dcaf64d447c40ae9d5a5576e2be6603ab5f56d0bc30bff6dcb8e8725c5d43fcc3f5f3afa7a7aec173e57595e20f","ssdeep":"192:IR0xdrQRoaah/TWowUMWkmMRhcNwLGS5hsjsxhtgt+qYbs0MMf:g8drjZTW6MmgHhOtVUs0MMf","tlshash":"e732a56877049cb611779ae5b87e3b112223fe18388a496cb5fce9d44874d28313eb3d","first_seen":"2023-03-07T13:03:46Z","last_seen":"2026-04-29T15:34:31.399426Z","times_seen":126,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/5.13.1/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1turske9.com/","date":"2025-12-21T23:31:47.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 20:49:06 GMT","end":"Fri, 13 Feb 2026 21:49:04 GMT"},"fingerprint":{"sha1":"9A:71:C8:6F:E2:4B:9A:91:7D:C8:4A:1D:79:98:2F:97:C1:85:D8:79","sha256":"4E:C5:BB:7A:81:A0:D9:00:73:8D:D5:57:59:3D:A0:C3:D3:BE:62:18:4E:6F:6D:98:DA:F0:90:94:5E:E0:0B:63"}}},"request":{"raw":"GET /ajax/libs/font-awesome/5.13.1/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1turske9.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 23:31:47 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 10392\r\ncf-ray: 9b1b2cce6d82c272-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eebda3d-e637\"\r\nlast-modified: Thu, 18 Jun 2020 21:18:53 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 319250\r\nexpires: Fri, 11 Dec 2026 23:31:47 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=yTUbB3mJSKgrPB57gO%2B0YpVubByZq%2FHSYa1EI12eZ6mmheG7susCjHXNUJuu4qhzAGTrto9K1t9XLXiNj100xPGHJA5wJgDSYaE3bsxq2nAybO8X9hangaGuLdCT%2BhB4QbQGGidT\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":58935,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (58749)","md5":"870dbf9e3d22ee9d7cd21acc620e107b","sha1":"61e37af38389d10e3ec44b0f5f05b10978c23768","sha256":"d9716994f96b14296dd1b21d3e0a73f07ee88e7935d07ebdc51a9df7eb934a10","sha512":"c40e87a7aa1ece18dde8b88b6729eeba49bcd1ff01a19dcea5c1186aa2a8095dc72900eb6230c4d46bbca1cc60c685e6c264b33388aa3ef0ac3a440d8aee3518","ssdeep":"768:gEC31sPiyLNq4/xtoAbHJ2kEBR/MMQyYJIXtBjtF5Qzl:gE/PxLE4/v5HQpBCfOtBt4B","tlshash":"5543fbb8e54c01c9a731c44bff81b2bc61baf73de5914d95f00e691c2ad26a811c5fba","first_seen":"2023-04-09T11:48:45Z","last_seen":"2026-05-10T12:32:05.119637Z","times_seen":1440,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":15,"dns":0,"connect":1,"send":0,"wait":12,"receive":1,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"platform.pubadx.one/async-v2.json?zoneid=7323\u0026wu=https://1turske9.com/","fqdn":"platform.pubadx.one","domain":"pubadx.one","tld":"one"},"ip":{"addr":"104.26.11.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1turske9.com/","date":"2025-12-21T23:31:48.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pubadx.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 09:05:53 GMT","end":"Sun, 25 Jan 2026 10:05:41 GMT"},"fingerprint":{"sha1":"41:ED:34:83:33:57:83:59:4C:73:8B:D0:27:48:7E:90:0A:1A:2B:7C","sha256":"0F:FF:8A:D2:4C:A2:00:1E:5F:6D:96:AD:4F:A2:C7:E7:DD:1D:01:CE:8A:DD:51:51:3F:8A:A0:B3:FF:4E:DD:B3"}}},"request":{"raw":"GET /async-v2.json?zoneid=7323\u0026wu=https://1turske9.com/ HTTP/1.1\r\nHost: platform.pubadx.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1turske9.com/\r\nOrigin: https://1turske9.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 23:31:48 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: 0\r\npragma: no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ycZJmJEEX9tNxx78ZJSARqGh%2Fhb3PgNuXBBO5UVUu9LPNFHf66uMnjjm34n0ID9CuR6sn%2FDcO74uUk6jQlUXDdeeg%2BIJNr3uCoiVxWi7BrREWg%3D%3D\"}]}\r\ncf-ray: 9b1b2cd23cc975ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3075,"size_decoded":0,"mime_type":"application/javascript","magic":"JSON text data","md5":"c90e09cdee4fc91b4518d036c6798422","sha1":"d51b0a214f0528e9e270cdfe4bdf54324fe67c6a","sha256":"f5c6f4a7c1bdef0541e3487779db63fd672beac416f73f818802be4594d8f4ef","sha512":"cc53818b4eb8d0ea6e864f3a8a9fdeefd2f20c66f253a45af754c6d4c77dbdd2d8cf0260846afc449ad3d3806056216756d54a2539075bb7a09b53b49ce57d52","ssdeep":"","tlshash":"5f511e89a2e000365a230831ccb1e7ae797b564c8707856fbc3f45b8d3a858d26762df","first_seen":"2025-12-21T23:32:13.982193Z","last_seen":"2025-12-21T23:32:13.982193Z","times_seen":1,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3OUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://1turske9.com/","date":"2025-12-21T23:31:48.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3OUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://1turske9.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 13040\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 16 Dec 2025 21:57:14 GMT\r\nexpires: Wed, 16 Dec 2026 21:57:14 GMT\r\ncache-control: public, max-age=31536000\r\nage: 437674\r\nlast-modified: Tue, 18 Nov 2025 19:00:15 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13040,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13040, version 1.0","md5":"07c6a994245e8795659c39a94456a71c","sha1":"648855b741911c9a01d0fd37fa07bd59505d6550","sha256":"21f8c903939d8a814cda235a0adbcaca204e6b418b25e4ac2aa083adf013e201","sha512":"2fc3fdfa1269766828c73a7a8e0ba3c626c7103b9ed45b9ebee737cb5afb22d34d68947a561838d8f80f4a912b4592dd52d2418732b44e635d8fd330b5233140","ssdeep":"192:hlDjUnJiYBeZyMXtzA+FHW1PkOWBLdaSHwMgKxpZRns98IVnp86Nu8wuH65DpRvW:nU1I86W1MURMgOu98EdNuhDpxTq","tlshash":"7342bf04670eca48d0cf9c7ba09e525d19213ead62b4ae9954627908d2f621932b7c4c","first_seen":"2025-11-19T01:55:51.755188Z","last_seen":"2026-05-04T20:40:29.264816Z","times_seen":1858,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.a-ads.com/a-ads-banners/552783/300x250?region=eu-central-1","fqdn":"static.a-ads.com","domain":"a-ads.com","tld":"com"},"ip":{"addr":"136.243.55.84","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ad.a-ads.com/2258717?size=300x250","date":"2025-12-21T23:31:48.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.a-ads.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 20 Nov 2025 00:00:00 GMT","end":"Mon, 21 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"09:CA:DB:64:77:8B:64:43:31:43:7E:A6:8A:AF:B1:4A:03:9D:31:86","sha256":"FD:0E:3C:95:7C:B3:9B:56:1D:1D:E1:8E:0A:1E:F0:41:36:C4:42:FF:EE:7E:E6:BF:FD:14:ED:E0:8C:99:4C:4A"}}},"request":{"raw":"GET /a-ads-banners/552783/300x250?region=eu-central-1 HTTP/1.1\r\nHost: static.a-ads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ad.a-ads.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 21 Dec 2025 23:31:48 GMT\r\ncontent-type: image/gif\r\ncontent-length: 669551\r\nx-amz-id-2: g2mmTcyxi4Q0S8OreYmicCVkW6kZN8endYPCko/QayBqv8YflHkMZovzrb+uvyyiFSJmdH+FwaQ=\r\nx-amz-request-id: M2ZCWFPKQ3BF4RZJ\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 17 Dec 2025 08:32:22 GMT\r\netag: \"5a564a669752a1c0749b04124d4ccda0\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=315360000\r\nx-amz-version-id: twiLBcApTLardHLMWDZ6Im3znaz4jHL6\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":669551,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 300 x 250","md5":"5a564a669752a1c0749b04124d4ccda0","sha1":"391456c8f0efcb50e6bad0d3fd9348f9ed11db34","sha256":"2e64d93d53ad79913110acaf3ac6475d00c60aa12a9c67d3c1cc9355bcd86253","sha512":"1b9d297f63f7add007209d675797b9efb9b9e5d02bb22f3be2bb6317ffc19f9423500534b392455bc11d1f4aca873fc7c5bd0d518484f59a5574649a4d57f997","ssdeep":"12288:nEZy2IS6RVKQ7vOBHcIxXw37tteNGEDzlF8g10hdntnyJqBXCxqvnOEeep:nuZIS6RwUgH3HNGEXAWSLyJqBXzvOip","tlshash":"07e4230541a8b13de06fb3ec107bbdf1e4af6e63e811085b5a393cad15d22cab51d1b5","first_seen":"2025-12-17T09:20:24.556113Z","last_seen":"2026-01-05T11:01:48.168855Z","times_seen":55,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":50,"dns":0,"connect":0,"send":0,"wait":25,"receive":116,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1turske9.com/wp-content/plugins/menu-icons/css/extra.min.css?ver=0.12.9","fqdn":"1turske9.com","domain":"1turske9.com","tld":"com"},"ip":{"addr":"172.67.142.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1turske9.com/","date":"2025-12-21T23:31:47.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1turske9.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Nov 2025 20:00:48 GMT","end":"Tue, 17 Feb 2026 21:00:18 GMT"},"fingerprint":{"sha1":"83:2B:A4:97:65:EB:D6:16:B4:3F:A8:95:FC:87:D0:B7:FB:51:AE:17","sha256":"92:9A:86:80:67:CB:5F:7A:5A:46:BB:9E:74:86:7E:3A:BF:FB:FF:EA:99:58:E9:45:38:04:67:EF:6C:5F:CB:5C"}}},"request":{"raw":"GET /wp-content/plugins/menu-icons/css/extra.min.css?ver=0.12.9 HTTP/1.1\r\nHost: 1turske9.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1turske9.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 21 Dec 2025 23:31:47 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Sat, 20 Jul 2024 15:47:22 GMT\r\nexpires: Thu, 25 Dec 2025 21:59:44 GMT\r\ncache-control: public, max-age=2678400\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nage: 264722\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wnT1mvTVp6JDOmPyLwCHLOxDsYzDsRSf%2F0MmpeMW5Pvs7angv6kaeKo4Seu05aHQgn6V8TKyNTuKDKI4I%2FeaTeKi3dM0sx3tUSU%3D\"}]}\r\ncf-ray: 9b1b2cce3ed37129-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":815,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (815), with no line terminators","md5":"27fa14302689f7f32e20359095766e4d","sha1":"1f3db901d6f8746008838a7e5f2be30feeaeef83","sha256":"968ab8ae6f33119ee267a11ce60920934e0d5e9d4714a3eb6b47cb9f05e42a0f","sha512":"72a1731e0b1280ab92fc988a67aa54d1f44874fe5d3be8eb7333e0f17bfec6951058928cb40a3419a47950b82b851c3cf18e9f6cb84e0765656ff4263d4baeec","ssdeep":"","tlshash":"5b0104f12d1a12bcc1a6a309bd98d2bc73a66435ddd2c806e33e953dc18b72625f6464","first_seen":"2023-04-06T10:08:02Z","last_seen":"2026-05-10T14:36:36.370965Z","times_seen":5455,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1turske9.com/wp-content/plugins/menu-icons/vendor/codeinwp/icon-picker/css/types/fontawesome-webfont.woff2?v=4.7.0","fqdn":"1turske9.com","domain":"1turske9.com","tld":"com"},"ip":{"addr":"172.67.142.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://1turske9.com/","date":"2025-12-21T23:31:48.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1turske9.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Nov 2025 20:00:48 GMT","end":"Tue, 17 Feb 2026 21:00:18 GMT"},"fingerprint":{"sha1":"83:2B:A4:97:65:EB:D6:16:B4:3F:A8:95:FC:87:D0:B7:FB:51:AE:17","sha256":"92:9A:86:80:67:CB:5F:7A:5A:46:BB:9E:74:86:7E:3A:BF:FB:FF:EA:99:58:E9:45:38:04:67:EF:6C:5F:CB:5C"}}},"request":{"raw":"GET /wp-content/plugins/menu-icons/vendor/codeinwp/icon-picker/css/types/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1\r\nHost: 1turske9.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1turske9.com/wp-content/plugins/menu-icons/vendor/codeinwp/icon-picker/css/types/font-awesome.min.css?ver=4.7.0\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 21 Dec 2025 23:31:48 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 77160\r\nlast-modified: Sat, 20 Jul 2024 15:47:22 GMT\r\nexpires: Sun, 18 Jan 2026 21:43:33 GMT\r\ncache-control: public, max-age=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 179294\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xN7kWNjcbNV9eyfNbpRTglK9jVbDUbPC1r00ztaKAqj1Nwlg51f6sTKwVS5yZ1pWucK%2FhpqfBJytgIqjZKNEbNJVqTxlESdocsE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1b2cd19ef57129-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77160,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 77160, version 4.459","md5":"af7ae505a9eed503f8b8e6982036873e","sha1":"d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c","sha256":"2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe","sha512":"838fefdbc14901f41edf995a78fdac55764cd4912ccb734b8bea4909194582904d8f2afdf2b6c428667912ce4d65681a1044d045d1bc6de2b14113f0315fc892","ssdeep":"1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2","tlshash":"7d7302e63b6c4943e03d6460708abe9f104b3ab42fe057e5c876db7f2722992b71552c","first_seen":"2023-04-05T03:30:47Z","last_seen":"2026-05-10T15:26:35.153303Z","times_seen":461872,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"platform.pubadx.one/async-v2.json?zoneid=7322\u0026wu=https://1turske9.com/","fqdn":"platform.pubadx.one","domain":"pubadx.one","tld":"one"},"ip":{"addr":"104.26.11.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1turske9.com/","date":"2025-12-21T23:31:48.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pubadx.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 09:05:53 GMT","end":"Sun, 25 Jan 2026 10:05:41 GMT"},"fingerprint":{"sha1":"41:ED:34:83:33:57:83:59:4C:73:8B:D0:27:48:7E:90:0A:1A:2B:7C","sha256":"0F:FF:8A:D2:4C:A2:00:1E:5F:6D:96:AD:4F:A2:C7:E7:DD:1D:01:CE:8A:DD:51:51:3F:8A:A0:B3:FF:4E:DD:B3"}}},"request":{"raw":"GET /async-v2.json?zoneid=7322\u0026wu=https://1turske9.com/ HTTP/1.1\r\nHost: platform.pubadx.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1turske9.com/\r\nOrigin: https://1turske9.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 23:31:48 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: 0\r\npragma: no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e94%2BUhJuUZ1r9Kd2TVXTxgzoJFnjimkZKwBWyph3YyCvrCTaugk85R3iARbWtfY%2Fm5sfFf7fNm2b9cjC02m8E8Wf3y%2BMDWmtXVK7nkZuElxoaA%3D%3D\"}]}\r\ncf-ray: 9b1b2cd23ccb75ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2273,"size_decoded":0,"mime_type":"application/javascript","magic":"JSON text data","md5":"30fa65f18f258a4cf74712df36954e6a","sha1":"854c216c9b2354f485ebdb85c73e85806e9246e6","sha256":"5238dd2ee6c7fc1f44966a9974ada9272a77ed3d82e2679b8344bb8ebbb10632","sha512":"3c355c7d5a16c6ae0cdba779f7b694fe053706813ef823511cbf03d06a11b6b44e74d2bafe05fd24b76612e113dc708e98b7db093bb611471ff900424df964b6","ssdeep":"","tlshash":"1c41a6cd87e0862694176831dd31eb9d7071b458bb06c4bdccbf8128d3b4aa419b69ec","first_seen":"2025-12-21T23:32:13.98799Z","last_seen":"2025-12-21T23:32:13.98799Z","times_seen":1,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad.a-ads.com/2258717?size=300x250","fqdn":"ad.a-ads.com","domain":"a-ads.com","tld":"com"},"ip":{"addr":"136.243.55.84","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://1turske9.com/","date":"2025-12-21T23:31:48.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.a-ads.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 20 Nov 2025 00:00:00 GMT","end":"Mon, 21 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"09:CA:DB:64:77:8B:64:43:31:43:7E:A6:8A:AF:B1:4A:03:9D:31:86","sha256":"FD:0E:3C:95:7C:B3:9B:56:1D:1D:E1:8E:0A:1E:F0:41:36:C4:42:FF:EE:7E:E6:BF:FD:14:ED:E0:8C:99:4C:4A"}}},"request":{"raw":"GET /2258717?size=300x250 HTTP/1.1\r\nHost: ad.a-ads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1turske9.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 21 Dec 2025 23:31:48 GMT\r\ncontent-type: text/html;charset=utf-8\r\nvary: Accept-Encoding, Accept-Encoding\r\nstatus: 200 OK\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-powered-by: Phusion Passenger(R)\r\nx-original-referer: https://1turske9.com/\r\nx-robots-tag: noindex, nofollow, nosnippet, noarchive\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Phusion Passenger","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]}],"data":{"size":15705,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (7595)","md5":"98e739cedda80716976c1556e1bca32e","sha1":"76d28437126653c6aa1179d7397f8e7db43f4cf4","sha256":"740bcdb1d94ed278bae4b06ec4507957b5eefaac644c60308c661b322801b8b6","sha512":"3e11481c278d19d0d206da6d92d33de647c55a1d5dd27297e06b4063ea0fdf086c4aae9926a1124a9173b1409a70d12824ad8539e52025a2fecf877543f07533","ssdeep":"192:cj1YzXciFm6Bm+hDS5tCCXN9bcLcW48h8LwWPqorEDWS6P18CwicDJOJqMRTeXem:cwNI+AlcaNLPPqP566Hqm","tlshash":"ee62b923a294711e70383e2ffc9065ee7105f06efb725fd4f4e99a75c28a2851dc1a48","first_seen":"2025-12-21T23:32:13.989901Z","last_seen":"2025-12-24T23:32:07.126644Z","times_seen":2,"resource_available":false,"data":null}},"time_used":357,"timings":{"blocked":152,"dns":51,"connect":24,"send":0,"wait":47,"receive":0,"ssl":79},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1turske9.com/wp-content/uploads/2022/03/favicon-150x150.png","fqdn":"1turske9.com","domain":"1turske9.com","tld":"com"},"ip":{"addr":"172.67.142.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1turske9.com/","date":"2025-12-21T23:31:48.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1turske9.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Nov 2025 20:00:48 GMT","end":"Tue, 17 Feb 2026 21:00:18 GMT"},"fingerprint":{"sha1":"83:2B:A4:97:65:EB:D6:16:B4:3F:A8:95:FC:87:D0:B7:FB:51:AE:17","sha256":"92:9A:86:80:67:CB:5F:7A:5A:46:BB:9E:74:86:7E:3A:BF:FB:FF:EA:99:58:E9:45:38:04:67:EF:6C:5F:CB:5C"}}},"request":{"raw":"GET /wp-content/uploads/2022/03/favicon-150x150.png HTTP/1.1\r\nHost: 1turske9.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1turske9.com/\r\nCookie: _ga_ZM2B5ECW37=GS2.1.s1766359908$o1$g0$t1766359908$j60$l0$h0; _ga=GA1.1.1003705504.1766359908\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 21 Dec 2025 23:31:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 9227\r\nlast-modified: Sun, 20 Mar 2022 03:14:14 GMT\r\nexpires: Sun, 04 Jan 2026 09:11:33 GMT\r\ncache-control: public, max-age=2678400\r\naccept-ranges: bytes\r\npriority: u=6,i=?0\r\nage: 1434014\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GTUiA4E1jKi2E95Ue6x%2FgolXCM23YzpxYrD2WLkeZNS%2BMaKxfwYufJjVwcEv7BY3J7clyeJZEz%2BQLT1i4A%2BZp1JOjT%2BhweklVgg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1b2cd52f117129-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9227,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced","md5":"331b79bbff2e01dfb3ae60f60f9c77c5","sha1":"2d42a924cdad1bd4728b92c7f86a2adcd7f255c0","sha256":"cd8eb767c621060bb52cab6a5e1f7b19e5e303258efe71926699339c158f6af4","sha512":"6b66edc041d00dd9a14d71c49db80096b5f9703837ca9f8d9afc895a14a7a9917a22216a5bce80756af51de1cddec6e16f9b84032b4090f4d89ba6fe0ce00472","ssdeep":"192:dkUTFcBGHxieEcAX7xvw2wr8c/H+apsLMnySf3wAfV0KCsacomzm4bh5hQ1xt:dXNAXV4xT+LMn1fTXaNSQ1X","tlshash":"a812af7080d489cabc467e63a2bab33b0dca4bc645565ec979c0ce7ab42e5201a61b95","first_seen":"2023-05-21T01:57:48Z","last_seen":"2026-02-27T23:31:30.193098Z","times_seen":14,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://1turske9.com/","date":"2025-12-21T23:31:48.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://1turske9.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 16 Dec 2025 19:22:36 GMT\r\nexpires: Wed, 16 Dec 2026 19:22:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 446952\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-05-10T15:28:25.536159Z","times_seen":808873,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":124,"dns":3,"connect":8,"send":0,"wait":10,"receive":5,"ssl":101},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1turske9.com/wp-includes/css/dist/block-library/style.min.css?ver=6.3.1","fqdn":"1turske9.com","domain":"1turske9.com","tld":"com"},"ip":{"addr":"172.67.142.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1turske9.com/","date":"2025-12-21T23:31:47.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1turske9.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Nov 2025 20:00:48 GMT","end":"Tue, 17 Feb 2026 21:00:18 GMT"},"fingerprint":{"sha1":"83:2B:A4:97:65:EB:D6:16:B4:3F:A8:95:FC:87:D0:B7:FB:51:AE:17","sha256":"92:9A:86:80:67:CB:5F:7A:5A:46:BB:9E:74:86:7E:3A:BF:FB:FF:EA:99:58:E9:45:38:04:67:EF:6C:5F:CB:5C"}}},"request":{"raw":"GET /wp-includes/css/dist/block-library/style.min.css?ver=6.3.1 HTTP/1.1\r\nHost: 1turske9.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1turske9.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 21 Dec 2025 23:31:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 10 Sep 2023 19:30:47 GMT\r\nvary: Accept-Encoding\r\nexpires: Wed, 24 Dec 2025 21:49:44 GMT\r\ncache-control: public, max-age=2678400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nage: 351723\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LkZkf%2BQu%2F5m0DPQBEvkgPtiYgRe36DZ28lmJnO%2FyRRYfTA7%2BJaMLYfkNw%2FkEk9g0gacCfYsZIAn3kqMt8k2vWQS%2FyvEoy0KBsfk%3D\"}]}\r\ncf-ray: 9b1b2cce3ed27129-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":104484,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (53449)","md5":"03c0f2128c8dd615b1691c168f1d4456","sha1":"defa44bed1f35ec899cfd358ca911390bca53e67","sha256":"67447c3656caad630373253691f3e8f64467eafd6e7305c9b0e98111b0b41694","sha512":"01485475aec2d490e75dc76aea6e011541edcff527e85a773644accf101175b619e10b4d3a5cdb5926669559782bc33df483fe9cc3de9d3431e08123ce5d0853","ssdeep":"1536:6LeJFfvhk2u5SOV+UQ3Zo/xHHbweEEQze:6LeJjk2u5SOV+UQ3Zo/xH7weTQze","tlshash":"bda3505413b0dcf939ffa73a5e5ee248a513aa41c64a9be7e076d190614ca490cf3b0f","first_seen":"2023-08-08T23:54:07Z","last_seen":"2026-05-10T12:13:45.569839Z","times_seen":17291,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1turske9.com/wp-content/themes/simplicity/assets/css/all.css?ver=2.2.1","fqdn":"1turske9.com","domain":"1turske9.com","tld":"com"},"ip":{"addr":"172.67.142.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1turske9.com/","date":"2025-12-21T23:31:47.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1turske9.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Nov 2025 20:00:48 GMT","end":"Tue, 17 Feb 2026 21:00:18 GMT"},"fingerprint":{"sha1":"83:2B:A4:97:65:EB:D6:16:B4:3F:A8:95:FC:87:D0:B7:FB:51:AE:17","sha256":"92:9A:86:80:67:CB:5F:7A:5A:46:BB:9E:74:86:7E:3A:BF:FB:FF:EA:99:58:E9:45:38:04:67:EF:6C:5F:CB:5C"}}},"request":{"raw":"GET /wp-content/themes/simplicity/assets/css/all.css?ver=2.2.1 HTTP/1.1\r\nHost: 1turske9.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1turske9.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 21 Dec 2025 23:31:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 06 Dec 2024 19:41:38 GMT\r\nvary: Accept-Encoding\r\nexpires: Thu, 25 Dec 2025 00:28:26 GMT\r\ncache-control: public, max-age=2678400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nage: 342201\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yoJgKrAwex8CFy5bPjs86QCUtmSX6B1UMiTMNodDMPB47m6dznnMNhWS6JgwDXMBnDRWEn9yPkLkwWXnge97Bd5ZDqc0Fpdsszg%3D\"}]}\r\ncf-ray: 9b1b2cce3ed47129-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":272091,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (582)","md5":"c52e0a0d45325a66740acce866ec1455","sha1":"3fb20c8def0c90fa32da90d24c02d9450c3b4753","sha256":"da1f7ed109a399ad3e9d623b0a9536133a2238f1b943a31687fbbff8f8f5da5d","sha512":"980fe6f5393d9ee61dcd2248471f86fff16b57b5626626adca418887c7ad3d3b7cd75d0eb09aebc9c0c7e3985aa869512017769dbd4551054a3ceba7aff13e92","ssdeep":"6144:SM/GzqkpyiX7kDI4BDa4uhyIaEWZVSDg/t8Rn5jI5c3SBBQwMYZMD:tV2VhyIaEWZVSDg/t8Rn5jI5c3SBBQwe","tlshash":"be44b651faf12508706b91ac24d56ba5736e4083d31ede7a76e331acdf8d2814db3e88","first_seen":"2025-08-17T22:56:16.993928Z","last_seen":"2026-02-27T23:31:30.184653Z","times_seen":10,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-ZM2B5ECW37","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1turske9.com/","date":"2025-12-21T23:31:47.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:40 GMT","end":"Wed, 25 Feb 2026 15:49:39 GMT"},"fingerprint":{"sha1":"A1:49:37:FE:E0:3E:26:88:A3:64:37:DC:04:D7:8D:D1:D3:F3:91:75","sha256":"BB:61:22:1A:6C:67:5D:C0:C8:A6:73:93:B9:53:82:98:95:54:B5:52:8B:33:FC:08:58:01:D2:3B:FF:E6:35:12"}}},"request":{"raw":"GET /gtag/js?id=G-ZM2B5ECW37 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1turske9.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 21 Dec 2025 23:31:47 GMT\r\nexpires: Sun, 21 Dec 2025 23:31:47 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 143110\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":433520,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"420099d25cd3b8aaedcb1b059140002e","sha1":"4e9f3174cddbc118191b3cc740e064faf8893f65","sha256":"c1c96c65ade59257785f26cbcbff99082ec5dd3be197ee6145a706614321ec3b","sha512":"d2eb43b6321743580501d43890730c973a2f4a58340448bb513e652693b1ecf8066f5598c32a5ad28afb83746808b3713915489018ca9f263e217907e3a6e7ac","ssdeep":"6144:z/Ie7ma2bulKY/1u99xHDmHYmyBFzvnsyRO6jJWoNPad4FpC1xY:cC8bu7/1mbrnsy39WbMpb","tlshash":"f1941ace73d674269396e078503f018ba57b29e2b45cc896f189cce42e7469a4237f7c","first_seen":"2025-12-21T23:32:13.997947Z","last_seen":"2025-12-21T23:32:13.997947Z","times_seen":1,"resource_available":true,"data":null}},"time_used":634,"timings":{"blocked":253,"dns":2,"connect":23,"send":0,"wait":47,"receive":58,"ssl":242},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"platform.pubadx.one/pubadx-ad.js","fqdn":"platform.pubadx.one","domain":"pubadx.one","tld":"one"},"ip":{"addr":"104.26.11.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1turske9.com/","date":"2025-12-21T23:31:47.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pubadx.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 09:05:53 GMT","end":"Sun, 25 Jan 2026 10:05:41 GMT"},"fingerprint":{"sha1":"41:ED:34:83:33:57:83:59:4C:73:8B:D0:27:48:7E:90:0A:1A:2B:7C","sha256":"0F:FF:8A:D2:4C:A2:00:1E:5F:6D:96:AD:4F:A2:C7:E7:DD:1D:01:CE:8A:DD:51:51:3F:8A:A0:B3:FF:4E:DD:B3"}}},"request":{"raw":"GET /pubadx-ad.js HTTP/1.1\r\nHost: platform.pubadx.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1turske9.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 23:31:47 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 26 Nov 2025 07:40:47 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"6926aeff-2155\"\r\nexpires: Sun, 04 Jan 2026 09:11:07 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 1434039\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XTX4HfM8%2FI3qWCHHc%2B1vIN4ta21iyafB4lVHprPc4wfGgApvxzbWygHjkkbeihyoHFJLjmEIhyQBT0a6Ej9Xt5BifXrCehJG6mejaIqh6clMvA%3D%3D\"}]}\r\ncf-ray: 9b1b2cce9a8175ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8533,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"bd3e13b0dc188d48b9790ed35c690e55","sha1":"b7731c8b1205c5bed13640cec85e091a3c101186","sha256":"19477acfde638830635a50cce0a65c1f4c2845a1a89500d333f8bbcc6b813477","sha512":"3b7be979c83a562f82b9e81970a5ac8967ca6583ed564b5036f437c9716b2adf021a4a0d0a0bd99fcca913709f2c1ddcbe02c5a80d69a80540ec49dd180d004c","ssdeep":"192:+Pup9HdW34cMgcf+gYsyC4q7WzuOXa09yssF8Q7ne6MIGTHeynC:8usgONaVN7d","tlshash":"59020d2e19f351399163b06aabbfd6183535a0032905dc463e8cc748af94d259ef6fec","first_seen":"2025-11-26T12:19:50.455112Z","last_seen":"2026-03-19T22:01:16.315789Z","times_seen":216,"resource_available":true,"data":null}},"time_used":130,"timings":{"blocked":24,"dns":1,"connect":5,"send":0,"wait":56,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1turske9.com/wp-content/uploads/2022/03/turske-9.png","fqdn":"1turske9.com","domain":"1turske9.com","tld":"com"},"ip":{"addr":"172.67.142.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1turske9.com/","date":"2025-12-21T23:31:48.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1turske9.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Nov 2025 20:00:48 GMT","end":"Tue, 17 Feb 2026 21:00:18 GMT"},"fingerprint":{"sha1":"83:2B:A4:97:65:EB:D6:16:B4:3F:A8:95:FC:87:D0:B7:FB:51:AE:17","sha256":"92:9A:86:80:67:CB:5F:7A:5A:46:BB:9E:74:86:7E:3A:BF:FB:FF:EA:99:58:E9:45:38:04:67:EF:6C:5F:CB:5C"}}},"request":{"raw":"GET /wp-content/uploads/2022/03/turske-9.png HTTP/1.1\r\nHost: 1turske9.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1turske9.com/wp-content/themes/simplicity/assets/css/all.css?ver=2.2.1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 21 Dec 2025 23:31:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 4609\r\nlast-modified: Wed, 23 Mar 2022 02:56:46 GMT\r\nexpires: Sun, 18 Jan 2026 21:42:09 GMT\r\ncache-control: public, max-age=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 179378\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xU9g62ueL0KkREgilxhu5KzhAalJTP6djXe2%2BqpVwV%2Fn3XWKvoQCTtwQ3BtY2W8rftFb%2BaxYjZ5z5%2FNC6eEQCLiUUlHQsJ1ZMk4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1b2cd16ef47129-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4609,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 210 x 55, 8-bit/color RGB, non-interlaced","md5":"77cb122996f8e54656838ec46a950187","sha1":"9483fe1cb959d713fb5e2bfbc02b823e6bd77532","sha256":"e0daba1c0604367a58b654e98390ce06f7e76c8c9f1c60e470fb8ba19143a190","sha512":"bbb3c4aa12a9cb5baadee1e1de2f1c0415c5c048fd2cc9acc94e0e231449875d1a89e7367ea3fdf8782e2e9309bcad477f1a58c9907d533bd0412861e288927b","ssdeep":"96:vVxWlknG2rN/+ls/NffS/yHCc7HGHOgFHtoKz3EWY45BczgJW5EZKuQs:9aknH/0yic7mPNoWUWY45sEEuQs","tlshash":"fe912a06f5211d20065da986bee9e1a72e734fc4ec80f481bc9b9d2329b00b9cc4f5d7","first_seen":"2025-08-17T22:56:16.984424Z","last_seen":"2026-02-27T23:31:30.169396Z","times_seen":10,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://1turske9.com/","date":"2025-12-21T23:31:48.090Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://1turske9.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 16 Dec 2025 19:22:36 GMT\r\nexpires: Wed, 16 Dec 2026 19:22:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 446952\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-05-10T15:28:25.536159Z","times_seen":808873,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":120,"dns":0,"connect":8,"send":0,"wait":8,"receive":8,"ssl":104},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1turske9.com/wp-content/uploads/2022/03/favicon.png","fqdn":"1turske9.com","domain":"1turske9.com","tld":"com"},"ip":{"addr":"172.67.142.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1turske9.com/","date":"2025-12-21T23:31:48.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1turske9.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Nov 2025 20:00:48 GMT","end":"Tue, 17 Feb 2026 21:00:18 GMT"},"fingerprint":{"sha1":"83:2B:A4:97:65:EB:D6:16:B4:3F:A8:95:FC:87:D0:B7:FB:51:AE:17","sha256":"92:9A:86:80:67:CB:5F:7A:5A:46:BB:9E:74:86:7E:3A:BF:FB:FF:EA:99:58:E9:45:38:04:67:EF:6C:5F:CB:5C"}}},"request":{"raw":"GET /wp-content/uploads/2022/03/favicon.png HTTP/1.1\r\nHost: 1turske9.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1turske9.com/\r\nCookie: _ga_ZM2B5ECW37=GS2.1.s1766359908$o1$g0$t1766359908$j60$l0$h0; _ga=GA1.1.1003705504.1766359908\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 21 Dec 2025 23:31:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 6650\r\nlast-modified: Sun, 20 Mar 2022 03:14:14 GMT\r\nexpires: Fri, 02 Jan 2026 21:10:54 GMT\r\ncache-control: public, max-age=2678400\r\naccept-ranges: bytes\r\npriority: u=6,i=?0\r\nage: 1563654\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pOLXTnZYMF9aLxzYcIGMCQiJDen9dZQDUpoUrY4SyNbELaQu%2Fg8OGtOM0U8ws86NM9pc7bhaY6JDc5OnnmWzi5gj5ITYEGBdRT4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1b2cd52f0f7129-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6650,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"70ae76cb2656cb1f79155576d19ce4d3","sha1":"5904c53aebd154945d82c3c6a36dddcfbb2c06c4","sha256":"bea3f81ffc28c66553cbf640c3f9f8f2b67127f64543410a0cdc6933b29f8580","sha512":"fe5d1c69fd6d670f230d27406b288880ea4b3968d1e7f65b4e0485304203b5d8ee487422ae17056788e107576f3766ccca7f0b9b534da7d2ef6a60bd81043f63","ssdeep":"192:FA9M/0rttpno0SSBz1xKgqIMLo0ReDfCxmJwVw:FAG8VeiSIoACYC6","tlshash":"63d19c76b68bb4dd63a80652c649fb3280422d217581f2098be6df3bdd90f5c410da80","first_seen":"2023-05-08T23:46:37Z","last_seen":"2026-03-19T09:46:56.740067Z","times_seen":24,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3OUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://1turske9.com/","date":"2025-12-21T23:31:48.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3OUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://1turske9.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 13040\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 16 Dec 2025 21:57:14 GMT\r\nexpires: Wed, 16 Dec 2026 21:57:14 GMT\r\ncache-control: public, max-age=31536000\r\nage: 437674\r\nlast-modified: Tue, 18 Nov 2025 19:00:15 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13040,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13040, version 1.0","md5":"07c6a994245e8795659c39a94456a71c","sha1":"648855b741911c9a01d0fd37fa07bd59505d6550","sha256":"21f8c903939d8a814cda235a0adbcaca204e6b418b25e4ac2aa083adf013e201","sha512":"2fc3fdfa1269766828c73a7a8e0ba3c626c7103b9ed45b9ebee737cb5afb22d34d68947a561838d8f80f4a912b4592dd52d2418732b44e635d8fd330b5233140","ssdeep":"192:hlDjUnJiYBeZyMXtzA+FHW1PkOWBLdaSHwMgKxpZRns98IVnp86Nu8wuH65DpRvW:nU1I86W1MURMgOu98EdNuhDpxTq","tlshash":"7342bf04670eca48d0cf9c7ba09e525d19213ead62b4ae9954627908d2f621932b7c4c","first_seen":"2025-11-19T01:55:51.755188Z","last_seen":"2026-05-04T20:40:29.264816Z","times_seen":1858,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hm.yelvercloture.com/tpl6nKemKJdbH/125852","fqdn":"hm.yelvercloture.com","domain":"yelvercloture.com","tld":"com"},"ip":{"addr":"23.109.253.109","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1turske9.com/","date":"2025-12-21T23:31:47.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hm.yelvercloture.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 21 Dec 2025 07:41:16 GMT","end":"Sat, 21 Mar 2026 07:41:15 GMT"},"fingerprint":{"sha1":"D1:29:48:AA:54:F2:8D:FB:80:1C:E4:DB:9E:D4:4A:6C:21:CD:F2:9F","sha256":"E1:F3:AF:BB:77:3B:81:B2:46:86:77:6F:0E:39:AA:AD:A4:99:21:26:73:6B:B3:51:F8:4C:ED:43:A3:F0:D0:74"}}},"request":{"raw":"GET /tpl6nKemKJdbH/125852 HTTP/1.1\r\nHost: hm.yelvercloture.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1turske9.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 21 Dec 2025 23:31:47 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://1turske9.com\r\naccess-control-allow-headers: content-type, gyfr29qt4j80vdr0zhsj, x-forwarded-for, x-requested-with, cache-control, pragma, expires\r\naccess-control-max-age: 600\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nx-frame-options: SAMEORIGIN\r\nset-cookie: GL_UI4=eJw9jc1OhDAcB%2FkGddnkl%2FAA%2BwgtUtKrF1%2FBI2npn7UKdFMqq28v8eBtDjOZKIqSpka8FyekX0rgwrnsZSdaybpRqlZr2feCaSEZb8U0CTzYbQhKzxQyVNuifBjCniHXXq2mRr44Q3ONUnt338g3KbJVLYTy1Xqa3PdhqA%2FnkfLn7mC7HhwzJG5r0nOF8s2u5ijPj0g4O5%2BKCE%2B3WYXJ%2BWWwpoiRX70yhPgF1agCXZ3%2FQWlo%2BwzuBrjZDP%2F%2B3zi9c4bC0G5HQu7CO%2FlfoWNCFg%3D%3D; expires=Mon, 22-Dec-2025 23:31:47 GMT; Max-Age=86400; path=/; secure; SameSite=None\nGL_GI10=eJxjYGBgEuEXZMosEOSxNNSzNNAzMdIzNDURZEwXZPLzF2RKzhNk88svKk%2BsFGQsEmQyMBZkKsoT5PYvzslXcM4vzSsBiicLsoD4goyZgnxOOZkVCsH5OaUlmfl5xYJMQMzpnJiUk6rvEuwjyFjAxijIVJIPIotTRBgEGcvYJASZchJ5HHw%2Fv9qcvuAnkJPP46BavzE63G61IFNBsSCLgaGpIQCHOyne; expires=Mon, 22-Dec-2025 23:31:47 GMT; Max-Age=86400; path=/; secure; SameSite=None\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"f7a2939527fd9e68723da600e96d76bd","sha1":"a9e717b6364d2895ee0a716050db32ca0ef1bb42","sha256":"d810f5146f4cd1517512a6e31946e764a73c58fb01427aae88d42cc2ae28718a","sha512":"e6956ec633c76eb3ebc408528f950b81373238cd1d5b9fff5ddd97089ea14a1ff5934f23769bac5d93cc4cdb6a1fbc4ce69baebfb940a55d8a7a89caccaf92b5","ssdeep":"","tlshash":"ec300000003000000000000000000000000c0000000000000000000000000c00000000","first_seen":"2023-03-07T01:14:39Z","last_seen":"2026-05-10T14:28:41.257977Z","times_seen":14368,"resource_available":true,"data":null}},"time_used":304,"timings":{"blocked":129,"dns":108,"connect":17,"send":0,"wait":22,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"hm.yelvercloture.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/1.12.4/jquery.min.js?ver=1.1.1","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1turske9.com/","date":"2025-12-21T23:31:47.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 20:49:06 GMT","end":"Fri, 13 Feb 2026 21:49:04 GMT"},"fingerprint":{"sha1":"9A:71:C8:6F:E2:4B:9A:91:7D:C8:4A:1D:79:98:2F:97:C1:85:D8:79","sha256":"4E:C5:BB:7A:81:A0:D9:00:73:8D:D5:57:59:3D:A0:C3:D3:BE:62:18:4E:6F:6D:98:DA:F0:90:94:5E:E0:0B:63"}}},"request":{"raw":"GET /ajax/libs/jquery/1.12.4/jquery.min.js?ver=1.1.1 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1turske9.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 23:31:47 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 30360\r\ncf-ray: 9b1b2cce8dc6c272-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03ec4-17b8b\"\r\nlast-modified: Mon, 04 May 2020 16:11:48 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 420147\r\nexpires: Fri, 11 Dec 2026 23:31:47 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=PU402lfbdS534%2BIBb82wc2PvgnwAimiicNL8dUWu7%2FQMZUDUQulp7iY1xEc3Xb8ewiPLe%2BZjmIw%2Ft4ptyvQFLnCEjpHIb37YufqdtqfdO9rcd6hHV8InEAJZ9XNorDSf8Y0pty%2FJ\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":97163,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32077)","md5":"4f252523d4af0b478c810c2547a63e19","sha1":"5a9dcfbef655a2668e78baebeaa8dc6f41d8dabb","sha256":"668b046d12db350ccba6728890476b3efee53b2f42dbb84743e5e9f1ae0cc404","sha512":"8c6b0c1fcde829ef5ab02a643959019d4ac30d3a7cc25f9a7640760fefff26d9713b84ab2e825d85b3b2b08150265a10143f82e05975accb10645efa26357479","ssdeep":"1536:GYE1JVoiB9JqZdXXe2pD3PgoIiulrUdTJSFk/zkZ4HjL5o8srOaS9TwD6b7/Jp9i:t4J+R3jL5TCOauTwD6FdnCVQNea98HrV","tlshash":"8893d7d9b6d6706287b734a851bf410bb17aa8eab40c4c60f058c8e47e74e9d507bf2d","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-05-10T15:04:21.571012Z","times_seen":74661,"resource_available":true,"data":null}},"time_used":129,"timings":{"blocked":25,"dns":2,"connect":1,"send":0,"wait":15,"receive":44,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3KUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://1turske9.com/","date":"2025-12-21T23:31:48.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3KUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://1turske9.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 26428\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 16 Dec 2025 19:22:36 GMT\r\nexpires: Wed, 16 Dec 2026 19:22:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 446952\r\nlast-modified: Tue, 18 Nov 2025 19:00:08 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26428,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26428, version 1.0","md5":"0f1d3218bace7a3a84c05b5d8a6f71ad","sha1":"977905ba4432d4e0c24e0da3f72aceb9c0525987","sha256":"884933fb5789b478d2da68a4cb0bd5cc138d995f1fea9a957ba29cb3c00f1bf7","sha512":"0a6d79809ce57e15b722a807ac8586a9a52bb4db3abfc8dbb40be7dfd55ad4195df917042425f8af97cc0c2fe09379799298bba84a1ffad36a4e45e2dea58dc8","ssdeep":"768:j7jEMtcubweLke66yjm5QxI2aSCuH8cEow0U0gME:gMtcawhe6HaSCZcvFU02","tlshash":"ccc2f1588e6abba67f92f0211479a595f0e3b8400750f5e4e1e02dee44ca663fab4454","first_seen":"2025-01-09T17:22:38.875446Z","last_seen":"2026-05-10T15:57:47.84161Z","times_seen":24171,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":117,"dns":1,"connect":21,"send":0,"wait":9,"receive":2,"ssl":95},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ad.a-ads.com/2258717?size=300x250","date":"2025-12-21T23:31:48.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ad.a-ads.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 16 Dec 2025 23:36:30 GMT\r\nexpires: Wed, 16 Dec 2026 23:36:30 GMT\r\ncache-control: public, max-age=31536000\r\nage: 431718\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-05-10T15:28:30.095777Z","times_seen":173454,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:wght@100;300;400;500;700;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1turske9.com/","date":"2025-12-21T23:31:47.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css2?family=Roboto:wght@100;300;400;500;700;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1turske9.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 21 Dec 2025 23:31:47 GMT\r\ndate: Sun, 21 Dec 2025 23:31:47 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33510,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"49f2590313831152e2b656ca33b7fc37","sha1":"910db6f788b80561905582e510ed3a09ed752c59","sha256":"591b1c315e1d15fd0a13a83272e68f621d26092559ad6adbf0108012d22d3173","sha512":"65a0b79b9011b31f8b55a7a0ed8a5c6e55f992f775c21592c0502765afa716f01ef5c65e7abbc2d8681bda6ad804f2661072016fc5e529cf5dd007a9c1811837","ssdeep":"768:DDSDjDGDUDB4DiLDZD1D5CJmwBUiRDfMTcfFBhiEymDcTYeBai75tdmtC0BQiVPI:I0rAwyl","tlshash":"3de200a1041750009b838ce223cebf35fe1f52517142d0b5abfdab6badcbc66526936d","first_seen":"2025-11-19T00:32:15.532783Z","last_seen":"2026-02-19T18:58:31.233433Z","times_seen":1940,"resource_available":false,"data":null}},"time_used":665,"timings":{"blocked":308,"dns":0,"connect":26,"send":0,"wait":32,"receive":0,"ssl":290},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"platform.pubadx.one/pubadx-ad.js","fqdn":"platform.pubadx.one","domain":"pubadx.one","tld":"one"},"ip":{"addr":"104.26.11.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1turske9.com/","date":"2025-12-21T23:31:48.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pubadx.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 09:05:53 GMT","end":"Sun, 25 Jan 2026 10:05:41 GMT"},"fingerprint":{"sha1":"41:ED:34:83:33:57:83:59:4C:73:8B:D0:27:48:7E:90:0A:1A:2B:7C","sha256":"0F:FF:8A:D2:4C:A2:00:1E:5F:6D:96:AD:4F:A2:C7:E7:DD:1D:01:CE:8A:DD:51:51:3F:8A:A0:B3:FF:4E:DD:B3"}}},"request":{"raw":"GET /pubadx-ad.js HTTP/1.1\r\nHost: platform.pubadx.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1turske9.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 23:31:48 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 26 Nov 2025 07:40:47 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"6926aeff-2155\"\r\nexpires: Sun, 04 Jan 2026 09:11:07 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 1434040\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wqEtZQn5iVmRA24C8f5%2FcEb3bzkha5wdCUrAAR8Smv0L4y3dseuCHeuGPCjntiwBZlS7XblHpdC0FNaAmM8A7Mbg8CCE%2FrnrbjHdPWeSZoojnw%3D%3D\"}]}\r\ncf-ray: 9b1b2cd14c2a75ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8533,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"bd3e13b0dc188d48b9790ed35c690e55","sha1":"b7731c8b1205c5bed13640cec85e091a3c101186","sha256":"19477acfde638830635a50cce0a65c1f4c2845a1a89500d333f8bbcc6b813477","sha512":"3b7be979c83a562f82b9e81970a5ac8967ca6583ed564b5036f437c9716b2adf021a4a0d0a0bd99fcca913709f2c1ddcbe02c5a80d69a80540ec49dd180d004c","ssdeep":"192:+Pup9HdW34cMgcf+gYsyC4q7WzuOXa09yssF8Q7ne6MIGTHeynC:8usgONaVN7d","tlshash":"59020d2e19f351399163b06aabbfd6183535a0032905dc463e8cc748af94d259ef6fec","first_seen":"2025-11-26T12:19:50.455112Z","last_seen":"2026-03-19T22:01:16.315789Z","times_seen":216,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://1turske9.com/","date":"2025-12-21T23:31:48.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://1turske9.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 16 Dec 2025 19:22:36 GMT\r\nexpires: Wed, 16 Dec 2026 19:22:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 446952\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-05-10T15:28:25.536159Z","times_seen":808873,"resource_available":false,"data":null}},"time_used":360,"timings":{"blocked":175,"dns":3,"connect":21,"send":0,"wait":8,"receive":2,"ssl":147},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imp9.pubadx.one/rec?f=32298\u0026fv=9\u0026g=NO\u0026op=12531-222\u0026p=222\u0026t=1\u0026tbg=1766359908\u0026token=27dd22658e\u0026uuid=e5db19da64c241a7bbbe6fcb57fe0d29\u0026z=7322","fqdn":"imp9.pubadx.one","domain":"pubadx.one","tld":"one"},"ip":{"addr":"104.26.11.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1turske9.com/","date":"2025-12-21T23:31:48.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pubadx.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 09:05:53 GMT","end":"Sun, 25 Jan 2026 10:05:41 GMT"},"fingerprint":{"sha1":"41:ED:34:83:33:57:83:59:4C:73:8B:D0:27:48:7E:90:0A:1A:2B:7C","sha256":"0F:FF:8A:D2:4C:A2:00:1E:5F:6D:96:AD:4F:A2:C7:E7:DD:1D:01:CE:8A:DD:51:51:3F:8A:A0:B3:FF:4E:DD:B3"}}},"request":{"raw":"GET /rec?f=32298\u0026fv=9\u0026g=NO\u0026op=12531-222\u0026p=222\u0026t=1\u0026tbg=1766359908\u0026token=27dd22658e\u0026uuid=e5db19da64c241a7bbbe6fcb57fe0d29\u0026z=7322 HTTP/1.1\r\nHost: imp9.pubadx.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1turske9.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 23:31:48 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: 0\r\npragma: no-cache\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fm9XZifz4nYnNwQYaWLXXG%2BLF17g%2BJIzTV0Q7TePoc%2BgOxsSHuT2LX6LiaPRKdTVSyvcJ1iFdB9g92uDu6JxAis2lJphUlJJro7UMMKR\"}]}\r\ncf-ray: 9b1b2cd3cde575ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-10T15:28:23.863744Z","times_seen":14959050,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.worldlyscene.com/ecc874/8966457a04ee.js","fqdn":"www.worldlyscene.com","domain":"worldlyscene.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://1turske9.com/","date":"2025-12-21T23:31:48.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.worldlyscene.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Dec 2025 07:03:01 GMT","end":"Wed, 18 Mar 2026 07:03:00 GMT"},"fingerprint":{"sha1":"A8:34:6F:A4:F3:DB:5F:EE:79:AD:57:A7:8A:E8:CA:F1:C4:00:05:42","sha256":"23:A1:E3:4A:CD:FE:47:EE:1C:1A:A1:6C:62:50:F7:F5:73:48:17:A0:56:DC:28:74:34:86:FD:C1:FA:4E:E7:17"}}},"request":{"raw":"GET /ecc874/8966457a04ee.js HTTP/1.1\r\nHost: www.worldlyscene.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: text/plain\r\nOrigin: https://1turske9.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1turske9.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 23:31:48 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: Content-Type\r\ncache-control: max-age=172800\r\ncontent-encoding: gzip\r\nexpires: Tue, 23 Dec 2025 23:31:48 GMT\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":103673,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65533), with no line terminators","md5":"3506bf9b7d2c08e9aea608c0311b4040","sha1":"470e7f6145954b7702c27e4054369a7dce5f4cfc","sha256":"068cc9fe85569daeff901a97c0f27da5fac494439c874d30cd51db114ada48c1","sha512":"bf54eae04fdd232f0e02f0f2403b7d6183de4b37481f4beae058e139e2f1bbb353e3a2210ec9cd67703520ebe36b1049891edeb4bbc3a6a78e097224c8c52d72","ssdeep":"1536:rM+iZ3YOYuyx6PUQwRxcs8P3nhkQ8vL7T7Q6eGozzwVEnHzHRbPvh:OijxEQq3P5Enne9zkWHLT","tlshash":"61a33461350b64fd2ad0c1e7eb6720886c295810e469cca1ecd1e7c7d6eb8e3429b5f7","first_seen":"2025-12-18T10:41:31.094263Z","last_seen":"2025-12-22T07:48:27.567259Z","times_seen":105,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":70,"dns":30,"connect":19,"send":0,"wait":19,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upset-rent.com/YQ2.xRpSZTW-5V0WZXGYF_0aYbTc9dy-cfmglhkiP_TkAl0mNnT-kpyqMrjsA_2uNvjwQxy-ZzmARBhCZ_TEFFhGNH2-EJ4KOLWMI_1ONPzQQRz-OTWUZViWM_zYIZza","fqdn":"upset-rent.com","domain":"upset-rent.com","tld":"com"},"ip":{"addr":"88.85.94.250","port":443,"asn":35415,"as":"Webzilla B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://1turske9.com/","date":"2025-12-21T23:31:48.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"upset-rent.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Nov 2025 00:57:07 GMT","end":"Sat, 31 Jan 2026 00:57:06 GMT"},"fingerprint":{"sha1":"50:29:54:83:DD:76:CC:AA:15:7E:F8:5D:CA:69:77:02:8B:26:66:F5","sha256":"DE:F7:DE:7B:BB:D4:4D:C9:50:6B:B9:E8:8D:E1:A8:C5:9A:26:D9:BA:70:46:02:84:E8:FA:DF:C7:7D:AB:1C:32"}}},"request":{"raw":"POST /YQ2.xRpSZTW-5V0WZXGYF_0aYbTc9dy-cfmglhkiP_TkAl0mNnT-kpyqMrjsA_2uNvjwQxy-ZzmARBhCZ_TEFFhGNH2-EJ4KOLWMI_1ONPzQQRz-OTWUZViWM_zYIZza HTTP/1.1\r\nHost: upset-rent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 42\r\nOrigin: https://1turske9.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1turske9.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":42,"data":"ref=https%3A%2F%2F1turske9.com%2F\u0026prevRef="}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 21 Dec 2025 23:31:48 GMT\r\ncontent-length: 0\r\nexpires: Mon, 26 Jul 2011 05:00:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\naccept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-10T15:28:23.863744Z","times_seen":14959050,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3KUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://1turske9.com/","date":"2025-12-21T23:31:48.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3KUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://1turske9.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 26428\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 16 Dec 2025 19:22:36 GMT\r\nexpires: Wed, 16 Dec 2026 19:22:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 446952\r\nlast-modified: Tue, 18 Nov 2025 19:00:08 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26428,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26428, version 1.0","md5":"0f1d3218bace7a3a84c05b5d8a6f71ad","sha1":"977905ba4432d4e0c24e0da3f72aceb9c0525987","sha256":"884933fb5789b478d2da68a4cb0bd5cc138d995f1fea9a957ba29cb3c00f1bf7","sha512":"0a6d79809ce57e15b722a807ac8586a9a52bb4db3abfc8dbb40be7dfd55ad4195df917042425f8af97cc0c2fe09379799298bba84a1ffad36a4e45e2dea58dc8","ssdeep":"768:j7jEMtcubweLke66yjm5QxI2aSCuH8cEow0U0gME:gMtcawhe6HaSCZcvFU02","tlshash":"ccc2f1588e6abba67f92f0211479a595f0e3b8400750f5e4e1e02dee44ca663fab4454","first_seen":"2025-01-09T17:22:38.875446Z","last_seen":"2026-05-10T15:57:47.84161Z","times_seen":24171,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":131,"dns":0,"connect":22,"send":0,"wait":8,"receive":3,"ssl":111},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1turske9.com/wp-content/plugins/menu-icons/vendor/codeinwp/icon-picker/css/types/font-awesome.min.css?ver=4.7.0","fqdn":"1turske9.com","domain":"1turske9.com","tld":"com"},"ip":{"addr":"172.67.142.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1turske9.com/","date":"2025-12-21T23:31:47.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1turske9.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Nov 2025 20:00:48 GMT","end":"Tue, 17 Feb 2026 21:00:18 GMT"},"fingerprint":{"sha1":"83:2B:A4:97:65:EB:D6:16:B4:3F:A8:95:FC:87:D0:B7:FB:51:AE:17","sha256":"92:9A:86:80:67:CB:5F:7A:5A:46:BB:9E:74:86:7E:3A:BF:FB:FF:EA:99:58:E9:45:38:04:67:EF:6C:5F:CB:5C"}}},"request":{"raw":"GET /wp-content/plugins/menu-icons/vendor/codeinwp/icon-picker/css/types/font-awesome.min.css?ver=4.7.0 HTTP/1.1\r\nHost: 1turske9.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1turske9.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 21 Dec 2025 23:31:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 20 Jul 2024 15:47:22 GMT\r\nvary: Accept-Encoding\r\nexpires: Mon, 22 Dec 2025 04:20:55 GMT\r\ncache-control: public, max-age=2678400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nage: 587451\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5FBcp48J3ySkkHtws5gb0q8n6jfY7Z0sNgY%2FwDj3YBnecWOPd4cpYbrdfWWL7IVh1yUD9shkMiP%2BrKA0cHjYFYrIu1fSAHeEGD0%3D\"}]}\r\ncf-ray: 9b1b2cce3ed17129-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30861,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (30699)","md5":"320bac859b86a16b9faa39d393f07273","sha1":"3f34b29a6ca8e99878d52d772c4d7f8d071a0497","sha256":"46cd92e74493c286e7cc9c8ed59a3cce3aec77edf6da51e4287d43349e496259","sha512":"a136fac21107d09970b529fd72fefc6fb78a4125a21169d46f07c474b9eb213d49536682733ef8c9f22de42056423440aa2ecc90f28e27069ccd5e7a48c066d8","ssdeep":"384:1H/ZyDDVUKW+KZKJ5Ne2QYvB+fx1UaE6J+yQ/QdmIaUX:1Yyr+KZK3Iacfx1Uz6J+yQ/SJvX","tlshash":"2ad241f8e50c01d66731c48bff81b36862b6fb3dd5844da9f01f290c29d226562c5bba","first_seen":"2023-04-12T05:06:13Z","last_seen":"2026-05-08T11:19:46.816661Z","times_seen":208,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1turske9.com/wp-content/themes/simplicity/assets/js/all.js?ver=1.2.1","fqdn":"1turske9.com","domain":"1turske9.com","tld":"com"},"ip":{"addr":"172.67.142.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1turske9.com/","date":"2025-12-21T23:31:47.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1turske9.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Nov 2025 20:00:48 GMT","end":"Tue, 17 Feb 2026 21:00:18 GMT"},"fingerprint":{"sha1":"83:2B:A4:97:65:EB:D6:16:B4:3F:A8:95:FC:87:D0:B7:FB:51:AE:17","sha256":"92:9A:86:80:67:CB:5F:7A:5A:46:BB:9E:74:86:7E:3A:BF:FB:FF:EA:99:58:E9:45:38:04:67:EF:6C:5F:CB:5C"}}},"request":{"raw":"GET /wp-content/themes/simplicity/assets/js/all.js?ver=1.2.1 HTTP/1.1\r\nHost: 1turske9.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1turske9.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 21 Dec 2025 23:31:47 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 28 Jan 2024 21:24:07 GMT\r\nvary: Accept-Encoding\r\nexpires: Wed, 24 Dec 2025 21:44:06 GMT\r\ncache-control: public, max-age=2678400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nage: 352061\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fmWQKZtT606YErAgrgrEH%2F%2FggW7ZpQJKwPW3W7DkZoR%2FzCO7%2FM07%2FQnWCM6r%2FLFLtZsfesE7Zs63xy02UoulMA9fE9xc2YyF4sE%3D\"}]}\r\ncf-ray: 9b1b2cce4ed57129-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32158,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (28668)","md5":"07e569f1b73a4403ab2b9160c7198ede","sha1":"5bef9ea725d9dfcf1ba4faf33c16e53b8aaf3726","sha256":"e4fb81bada7b24c750432eb3151ea42abc9a895ba8c470a52122fae49f3f2c57","sha512":"c0c023358055a41f418e42610a5374e2e0d467b11b7fab670e1d94226a52810e819258ab2573a638d39961baac8c86fa01619503b8822bf7f8d6e52d6cfc5c19","ssdeep":"768:16GThOPLso675bO85R1o/ZxfHvRPnp1V3I+pRMUplS+nrdH14YvsU5sqZXK6yJD4:1P5uvRN/XKGR8a4KH","tlshash":"38e281c13bc0f54a03975b7b332bb0f6f11a6d99768448cae140bc94f5ada06fae4635","first_seen":"2025-08-17T22:56:16.974616Z","last_seen":"2026-02-27T23:31:30.167669Z","times_seen":10,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imp9.pubadx.one/rec?f=33067\u0026fv=24\u0026g=NO\u0026op=12535-21\u0026p=21\u0026t=1\u0026tbg=1766359908\u0026token=27dd22658e\u0026uuid=9e40ccbfa6eb4b77b6d6975f319af74f\u0026z=7323","fqdn":"imp9.pubadx.one","domain":"pubadx.one","tld":"one"},"ip":{"addr":"104.26.11.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1turske9.com/","date":"2025-12-21T23:31:48.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pubadx.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 09:05:53 GMT","end":"Sun, 25 Jan 2026 10:05:41 GMT"},"fingerprint":{"sha1":"41:ED:34:83:33:57:83:59:4C:73:8B:D0:27:48:7E:90:0A:1A:2B:7C","sha256":"0F:FF:8A:D2:4C:A2:00:1E:5F:6D:96:AD:4F:A2:C7:E7:DD:1D:01:CE:8A:DD:51:51:3F:8A:A0:B3:FF:4E:DD:B3"}}},"request":{"raw":"GET /rec?f=33067\u0026fv=24\u0026g=NO\u0026op=12535-21\u0026p=21\u0026t=1\u0026tbg=1766359908\u0026token=27dd22658e\u0026uuid=9e40ccbfa6eb4b77b6d6975f319af74f\u0026z=7323 HTTP/1.1\r\nHost: imp9.pubadx.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1turske9.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 23:31:48 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: 0\r\npragma: no-cache\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uRUKP%2BDpGa0n1hze1XAXzMLaljZZM10jfHDI075NLdozWM6qo%2FxJ8vnXyVxs0S1biph35FXBDcJ%2BSWAuW8nvMiKl8gNTQfa65ukE24mv\"}]}\r\ncf-ray: 9b1b2cd3cde375ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-10T15:28:23.863744Z","times_seen":14959050,"resource_available":true,"data":null}},"time_used":137,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":136,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.worldlyscene.com/ecc874/8966457a04ee.js","fqdn":"www.worldlyscene.com","domain":"worldlyscene.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1turske9.com/","date":"2025-12-21T23:31:48.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.worldlyscene.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Dec 2025 07:03:01 GMT","end":"Wed, 18 Mar 2026 07:03:00 GMT"},"fingerprint":{"sha1":"A8:34:6F:A4:F3:DB:5F:EE:79:AD:57:A7:8A:E8:CA:F1:C4:00:05:42","sha256":"23:A1:E3:4A:CD:FE:47:EE:1C:1A:A1:6C:62:50:F7:F5:73:48:17:A0:56:DC:28:74:34:86:FD:C1:FA:4E:E7:17"}}},"request":{"raw":"GET /ecc874/8966457a04ee.js HTTP/1.1\r\nHost: www.worldlyscene.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1turske9.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 23:31:48 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: Content-Type\r\ncache-control: max-age=172800\r\ncontent-encoding: gzip\r\nexpires: Tue, 23 Dec 2025 23:31:48 GMT\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":103673,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65533), with no line terminators","md5":"3506bf9b7d2c08e9aea608c0311b4040","sha1":"470e7f6145954b7702c27e4054369a7dce5f4cfc","sha256":"068cc9fe85569daeff901a97c0f27da5fac494439c874d30cd51db114ada48c1","sha512":"bf54eae04fdd232f0e02f0f2403b7d6183de4b37481f4beae058e139e2f1bbb353e3a2210ec9cd67703520ebe36b1049891edeb4bbc3a6a78e097224c8c52d72","ssdeep":"1536:rM+iZ3YOYuyx6PUQwRxcs8P3nhkQ8vL7T7Q6eGozzwVEnHzHRbPvh:OijxEQq3P5Enne9zkWHLT","tlshash":"61a33461350b64fd2ad0c1e7eb6720886c295810e469cca1ecd1e7c7d6eb8e3429b5f7","first_seen":"2025-12-18T10:41:31.094263Z","last_seen":"2025-12-22T07:48:27.567259Z","times_seen":105,"resource_available":true,"data":null}},"time_used":187,"timings":{"blocked":71,"dns":29,"connect":19,"send":0,"wait":38,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}